EAPSI: A Cross-Cultural Exploration and Evaluation of Group-Centric Authentication

EAPSI：以群体为中心的身份验证的跨文化探索和评估

• 批准号: 1614200
• 负责人: Sauvik Das
• 金额: $ 0.54万
• 依托单位: Das Sauvik
• 依托单位国家: 美国
• 项目类别: Fellowship Award
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-06-15 至 2017-05-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1614200&HistoricalAwards=false
• 关键词: EAPSI; Cross; Cultural; Exploration; Evaluation

Authentication is a process by which computer systems regulate access to protected data. However, authentication is often designed ignorant of the social context in which those systems are embedded. Accordingly, the case of a child accessing her father's tablet is treated the same as that of a stranger trying to access the father's bank account: It is an equally fundamental violation of the security of the system if either is granted access. As digital devices and services touch more of our lives, there is a growing and underserved need for group-centric authentication: authentication designed for shared access to group-owned digital resources. In these cases, requiring strict security for individual accounts along with traditional access control policies is socially inappropriate. To address this need, the PI will work with Dr. Koji Yatani at the University of Tokyo, an expert in creating novel interactive systems, to develop and evaluate a number of group-centric authenticators. This research will strengthen understanding how social factors affect security behaviors and how they can be leveraged to improve security sensitivity.Robust authentication is essential for secure systems. However, recent work highlights a need to uncover and meet the authentication needs of small groups who collectively share resources and largely trust each other (e.g., families and small work groups). Moreover, this work should consider cultural influences on group norms and risk perception as these factors should affect group authentication practices and needs. In this work, I will bridge these gaps in theory and practice by exploring and evaluating group-centric authentication in a cross-cultural setting. I will develop and deploy one or more prototype group-centric authenticators with small groups in Japan who share space or resources. These small groups will use my prototypes in realistic scenarios for several days and report on their experiences. Through these efforts, I intend to better understand local group authentication needs and how cultural influences directly or indirectly affect those needs.This award under the East Asia and Pacific Summer Institutes program supports summer research by a U.S. graduate student and is jointly funded by NSF and the Japan Society for the Promotion of Science.

身份验证是计算机系统管理对受保护数据的访问的过程。然而，身份验证的设计往往忽略了这些系统所嵌入的社会背景。因此，孩子访问父亲的平板电脑的情况与陌生人试图访问父亲的银行账户的情况被视为相同：如果任何一方被授予访问权限，这同样是对系统安全性的根本侵犯。随着数字设备和服务越来越多地触及我们的生活，对以群体为中心的身份验证的需求日益增长，但服务不足：旨在共享访问群体拥有的数字资源的身份验证。在这些情况下，要求个人帐户沿着严格的安全性以及传统的访问控制策略在社会上是不合适的。为了满足这一需求，PI将与东京大学的Koji Yatani博士合作，他是创建新型交互系统的专家，以开发和评估一些以群体为中心的认证器。这项研究将加强理解社会因素如何影响安全行为，以及如何利用它们来提高安全敏感性。然而，最近的工作强调了需要发现和满足集体共享资源并且在很大程度上相互信任的小团体的认证需求（例如，家庭和小型工作小组）。此外，这项工作应考虑文化对群体规范和风险认知的影响，因为这些因素会影响群体认证的做法和需求。在这项工作中，我将通过探索和评估跨文化环境中以群体为中心的身份验证来弥合理论和实践上的差距。我将开发和部署一个或多个原型组为中心的身份验证器与小团体在日本谁共享空间或资源。这些小组将在现实场景中使用我的原型几天，并报告他们的经验。通过这些努力，我希望更好地了解当地群体的认证需求，以及文化影响如何直接或间接地影响这些需求。该奖项是由美国国家科学基金会（NSF）和日本科学振兴会（Japan Society for the Promotion of Science）共同资助的“东亚及太平洋夏季研究所”（East Asia and Pacific Summer Institutes）项目，旨在支持美国研究生的夏季研究。