Security and usability: the case of the user authentication methods

ABSTRACT

The usability of security systems has become a major issue in research on the efficiency and user acceptance of security systems. The authentication process is essential for controlling the access to various resources and facilities. The design of usable yet secure user authentication methods raises crucial questions concerning how to solve conflicts between security and usability goals.

REFERENCES

• 1: Anne Adams , Martina Angela Sasse, Users are not the enemy, Communications of the ACM, v.42 n.12, p.40-46, Dec. 1999 [doi>10.1145/322796.322806]
• 2: 2. Braz, C. (2003) AuthenLink: A User-Centred Authentication System for a Secure Mobile Commerce, Master Thesis, Department of Computer Science and Operations Research, Université de Montréal (Canada).
• 3: 3. Computing Technology Industry Association (CompTIA) (2002) Committing to Security: A CompTIA Analysis of IT Security and the Workforce , Oakbrook Terrace, IL (US).
• 4: 4. Daugman, J. (2005) Results from 200 Billion Iris Cross-comparisons, Technical Report, Computer Laboratory, University of Cambridge Computer Laboratory (UK). Retrieved on February 21, 2006 〈http://www.cl.cam.ac.uk/TechReports/UCAM-CL-TR-635.pdf〉
• 5: 5. International Organization for Standardization (1998) ISO 9241-11: Ergonomic requirements for office work with visual display terminals (VDTs - Part 11: Guidance on Usability).
• 6: 6. Jøsang, A. & Patton, M. (2001) User Interface Requirements for Authentication of Communication, Security Usability White Paper, Distributed Systems Technology Centre, QUT, Brisbane, Old 4001 (Australia).
• 7: 7. Miller, G. A. (1956) The magical number seven plus or minus two: Some limits on our capacity for processing information, Psychological Review, 63, 81-97.
• 8: 8. Norman, Donald A. (2001) The Psychology of the Everyday Things, Basic Books, Inc., Publishers New York, NY (US).
• 9: Ben Shneiderman, Designing the User Interface: Strategies for Effective Human-Computer Interaction, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1997
• 10: Authentication: from passwords to public keys, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 2001
• 11: 11. Whitten, A. & Tygar, J. D. (1998) Usability of Security: A Case Study, School of Computer Science EECS Carnegie Mellon University Pittsburgh, PA and University of California SIMS, Berkeley, CA (US).
• 12: 12. Zimmermann, P. (2004) Phil Zimmermann's Home Page. Phil Zimmermann & Associates LCC. Retrieved on February 11, 2006. 〈〈http://www.philzimmermann.com/EN/background/i ndex.html〉
• 13: 13. Zurko, M. & Simon, R. (1997) User-Centered Security , The Pen Group Research Institute, Cambridge, MA (US).

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

  H. Information Systems
  H.1 MODELS AND PRINCIPLES
      H.1.2 User/Machine Systems
          Subjects: Human factors
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)

General Terms:
Design, Human Factors, Security

Keywords:
access control, human factors, security usability, user authentication, user interface design