Usability and biometric verification at the ATM interface

ABSTRACT

This paper describes some of the consumer-driven usability research conducted by NCR Self Service Strategic Solutions in the development of an understanding of usability and user acceptance of leading-edge biometrics verification techniques. We discuss biometric techniques in general and focus upon the usability phases and issues, associated with iris verification technology at the Automated Teller Machine (ATM) user interface. The paper concludes with a review of some of the major research issues encountered, and an outline of future work in the area.

REFERENCES

• 1: Dennis A. Adams , Stanley Y. Chang, An investigation of keypad interface security, Information and Management, v.24 n.2, p.53-59, Feb. 1993 [doi>10.1016/0378-7206(93)90054-W]
• 2: Anne Adams , Martina Angela Sasse, Users are not the enemy, Communications of the ACM, v.42 n.12, p.40-46, Dec. 1999 [doi>10.1145/322796.322806]
• 3: Julian Ashbourn, Biometrics: advanced identity verification, Springer-Verlag, London, 2000
• 4: Clarke, R. Human Identification in Information Systems: Management Challenges and Public Policy Issues. Information technology and People, 74, 6--37, 1994.
• 5: Coventry, L., De Angeli, A., and Johnson, G. Biometric verification at a self service interface. Proceedings of the British Ergonomic Society Conference (Edinburgh April 2003), Contemporary Ergonomics (to be published).
• 6: Davies, S.G. How biometrics will fuse flesh and machine, Information Technology and People, 7,4, 1994.
• 7: De Angeli, A., Coutts, M. Coventry, L., Johnson, G.I, Cameron D., and Fischer M. VIP: a visual approach to user authentication. Proceedings of the Working Conference on Advanced Visual Interfaces AVI 2002, ACM Press, pp. 316--323, 2002.
• 8: Deane, F.P., Barelle K., Henderson R.D. and Mahar D.P., Employee acceptance of computerised biometrics security systems, Computers and Security, 14, 225--231, 1995.
• 9: Deane, F.P., Henderson R.D., Mahar D.P. and Saliba A.J. Theoretical examination of the effects of anxiety and electronic performance monitoring on biometric security systems, Interacting with Computers, 7, 395--411, 1995.
• 10: Dhamija, R. & Perrig, A. Dééjà vu: A User Study Using Images for Authentication. In Proceedings of 9th USENIX Security Symposium, August 2000.
• 11: Feustal, T.C. and Velius, G.A. Speaker identity verification over telephone lines: Where we are and where we are going. Proceedings of the 1989 International Carahan conference on security technology, (3-5 Oct), 181--182, 1989.
• 12: Gong, L., Lomas, M.A., Needham, R.M. and Saltzer, J.H. Protecting poorly chosen secrets from guessing attacks. IEEE J. on Selected Areas in Communications, 11(5), 648--656, 1993.
• 13: Hide, S. Haslegrave, C.M. Hopkinson, N., Robertson D. and Johnson G.I. Tracking eye positions during the use of an Automatic Teller Machine (ATM), Proceedings of CAES '99, May: Barcelona, Spain. 1999.
• 14: Mansfield, A.J. & Wayman, J.L. Best Practices in Testing and Reporting Performance of Biometric Devices. NPL Report CMSC 14/02 August 2002.
• 15: Mansfield, A.J., Kelly, G., Chandler, P. and Kane, J. Biometric product testing final report. www.cesg.gov.uk/technology/biometrics, March 2001.
• 16: Michael Negin , Thomas A. Chmielewski , Marcos Salganicoff , Theodore A. Camus , Ulf M. Cahn von Seelen , Péter L. Venetianer , Guanghua G. Zhang, An Iris Biometric System for Public and Personal Use, Computer, v.33 n.2, p.70-75, February 2000 [doi>10.1109/2.820042]
• 17: P. Jonathon Phillips , Alvin Martin , C. l. Wilson , Mark Przybocki, An Introduction to Evaluating Biometric Systems, Computer, v.33 n.2, p.56-63, February 2000 [doi>10.1109/2.820040]
• 18: Jean Scholtz , Jeff Johnson , Ben Shneiderman , Peter Hope-Tindall , Marcus Gosling , Jonathon Phillips , Alan Wexelblat, Interacting with identification technology: can it make us more secure?, CHI '02 extended abstracts on Human factors in computing systems, April 20-25, 2002, Minneapolis, Minnesota, USA [doi>10.1145/506443.506484]
• 19: Thalheim, L., Krissler, J. and Ziegler, P.M. Bodycheck: Biometric access protection devices and their programs put to the test. C'T, 11, May 22, 2002 (www.heise.de/ct/english/02/11/114/)
• 20: Westin, A. Biometrics in the mainstream: What does the U.S. public think. Privacy and American Business Newsletter, 9,8, December 2002.
• 21: Woodward. J.D. Biometrics: Privacy's Foe or Privacy's Friend? Proceedings of IEEE, 85, 9, pp 1480--1492, 1997.
• 22: Yan, J., Blackwell, A., Anderson, R. and Grant, A. The memorability and security of passwords - Some empirical results. Technical Report No. 500 2001, Computer Laboratory University of Cambridge, http://www.ftp.cl.cam.ac.uk/ftp/users/rja14/tr500.pdf, 2001.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

Keywords:
ATMs, biometrics technology, iris verification, usability techniques