Undercover: authentication usable in front of prying eyes

[Admin]

29. Sasamoto H. Christin N. Hayashi E., 2008, Undercover: authentication usable in front of prying eyes, Florence, ACM 978-1-60558-011-1/08/04.
a. Our results show that users can authenticate within times comparable to that of graphical password schemes, with relatively low error rates,
b. Authentication poses both usability and security challenges.
c. To be viable for systems with a large, varied, user base, an authentication system has to satisfy a set of usability constraints:
i. Low error rate,
ii. Fast authentication.
iii. Rapid training.
iv. Physically safe.
d. We construct our low fidelity prototypes using reusable card--board boxes for the haptic device, and a PowerPoint display for the visual challenges. These reusable prototypes provide a realistic approximation of the user interface of the undercover prototype.
e. Our findings, summarized in Table 1. are that
i. Younger participants authenticate faster, and more accurately than older
ii. Participants authenticate faster and more accurately using the friction-based (cylinder) prototype.
f. To help us with a security analysis of the system, which we detail later, two cameras record each participant's hand and eye movement and any noise in the room, allowing us to carry out a powerful observation attack.
g. We rely on measurements of authentication times and error rates to assess the usability of our system.
h. Graph we omit for brevity shows that error rates increase with age but remain independent of information technology experience.