Exploring User-Centered Security Design for Usable Authentication Ceremonies

(2021) Exploring User-Centered Security Design for Usable Authentication Ceremonies.

Preview	Text Exploring_User_Centered_Security_Design_for_Usable_Authentication_Ceremonies__CHI_2021_.pdf Download (6MB) | Preview
	Archive Supplementary Material (CHI 2021).zip Download (40MB)

Abstract

Security technology often follows a systems design approach that focuses on components instead of users. As a result, the users' needs and values are not sufficiently addressed, which has implications on security usability. In this paper, we report our lessons learned from applying a user-centered security design process to a well-understood security usability challenge, namely key authentication in secure instant messaging. Users rarely perform these key authentication ceremonies, which makes their end-to-end encrypted communication vulnerable. Our approach includes collaborative design workshops, an expert evaluation, iterative storyboard prototyping, and an online evaluation. While we could not demonstrate that our design approach resulted in improved usability or user experience, we found that user-centered prototypes can increase the users' comprehension of security implications. Hence, prototypes based on users' intuitions, needs, and values are useful starting points for approaching long-standing security challenges. Applying complementary design approaches may improve usability and user experience further.

Item Type:	Conference or Workshop Item (A Paper) (Paper)
Divisions:	Katharina Krombholz (Human-Oriented Security, HOS)
Conference:	CHI International Conference on Human Factors in Computing Systems
Depositing User:	Matthias Fassl
Date Deposited:	19 Jan 2021 09:40
Last Modified:	02 Feb 2021 09:44
Primary Research Area:	NRA5: Empirical & Behavioral Security
URI:	https://publications.cispa.saarland/id/eprint/3342

Actions

Actions (login required)

View Item