Password sharing: implications for security design based on social practice
Password sharing: implications for security design based on social practice
复制标题
密码共享：基于社会实践的安全设计启示
DOI：
10.1145/1240624.1240759
复制
发表时间：
2007
期刊：
影响因子：
--
通讯作者：
Michele Furlong
中科院分区：
文献类型：
--
作者：
Supriya Singh;A. Cabraal;C. Demosthenous;G. Astbrink;Michele Furlong
当前的银行身份验证系统要求客户不得透露其访问代码，即使是向家庭成员也是如此。澳大利亚银行和安全研究表明，共享密码的做法不符合这一要求。对于已婚和事实上的夫妻来说，密码共享被视为一种管理金钱的实用方式和信任的表现。共享个人身份号码（PIN）是澳大利亚偏远土著社区的常见做法。在银行服务差的地区，这是获得现金的唯一途径。某些残疾人必须与护理人员共享密码，与零售店员共享PIN码。在本文中，我们提出了银行和资金管理的定性用户研究的结果。我们建议银行安全系统的设计标准，观察到的密码和PIN号码共享的社会和文化习俗的基础上。
Current systems for banking authentication require that customers not reveal their access codes, even to members of the family. A study of banking and security in Australia shows that the practice of sharing passwords does not conform to this requirement. For married and de facto couples, password sharing is seen as a practical way of managing money and a demonstration of trust. Sharing Personal Identification Numbers (PINs) is a common practice among remote indigenous communities in Australia. In areas with poor banking access, this is the only way to access cash. People with certain disabilities have to share passwords with carers, and PIN numbers with retail clerks. In this paper we present the findings of a qualitative user study of banking and money management. We suggest design criteria for banking security systems, based on observed social and cultural practices of password and PIN number sharing.