论文标题
部分可观测时空混沌系统的无模型预测
That Depends -- Assessing User Perceptions of Authentication Schemes across Contexts of Use
论文作者
论文摘要
为特定目的选择身份验证方案对于服务提供商，开发人员和研究人员来说是挑战。以前对技术和客观方面的评分表明，可用方案都具有优势和局限性。但是，身份验证的安全性还依赖于影响接受和用户行为的用户感知，并且可能偏离技术方面。为了阐明问题并支持面对身份验证选择的研究人员，开发人员和服务支持者，我们对用户对密码，指纹和基于智能手机的方案进行了深入分析，该计划与201名参与者进行了在线研究中。由于身份验证是需要在身份验证目的的背景下进行评估的次要任务，因此我们还比较了四种使用范围的感知和不同的敏感性级别：电子邮件帐户，在线银行，社交网络和智能家庭。结果揭示了该方案对可用性，安全性，隐私，信任，努力和定性特征的看法与用户偏好有关。结果提高了人们对主观看法的影响的认识，并对决策者产生了实际影响。他们可以告知a）几种适当方案之间的选择，b）身份验证设计，以减少关注或与安全有关的误解，以及c）与上下文相关的身份验证的发展。
Choosing authentication schemes for a specific purpose is challenging for service providers, developers, and researchers. Previous ratings of technical and objective aspects showed that available schemes all have strengths and limitations. Yet, the security of authentication also relies on user perceptions which affect acceptance and user behaviour and can deviate from technical aspects. To shine light on the issue and support researchers, developers, and service-providers confronted with authentication choice, we conducted an in-depth analysis of user perceptions of the password, fingerprint, and a smartphone-based scheme in an online study with 201 participants. As authentication is a secondary task that needs to be evaluated in the context of authentication purpose, we also compared perceptions across four contexts of use with varying sensitivity levels: email accounts, online banking, social networks, and smart homes. The results revealed how perceptions of usability, security, privacy, trust, effort, and qualitative features of the schemes are related to user preferences. The results increase awareness for the influence of subjective perceptions and have practical implications for decision-makers. They can inform a) the choice between several adequate schemes, b) the authentication design to reduce concerns or security-related misconceptions, and c) the development of context-dependent authentication.
