CAREER: Enhancing Mobile Authentication by Measuring the Authentication Life-Cycle

本CAREER研究的重点是使用移动的设备进行身份验证时的人为因素。移动的身份验证是身份验证的一个关键组成部分，特别是随着移动的设备与更广泛的安全生态系统的联系越来越紧密。一个主要的问题是用户在使用他们的设备数月或数年时如何进行身份验证。这项研究将涉及用户随着时间的推移所采取的选择和行动的实证研究。定性和定量的措施将被用来更好地了解用户的心理模型，感知和行为有关的移动的认证。总体目标是了解移动的设备上身份验证的生命周期。这项工作的成果将推动移动的身份验证的设计和实施，以及围绕移动的身份验证的政策。该研究将有助于减轻或防止对移动的设备的安全攻击，并导致更好的安全性和隐私的数据在移动的device.Empirical测量和改进移动的authentication有可能提供显着的智力影响和奠定基础工作的变革性技术，改善我们的方式选择和使用身份验证在我们的移动的设备。该项目将通过两个关键途径实现这一目标。首先，这项研究有助于研究用户行为随着时间的推移而展开，以及这种行为如何受到设备使用，环境和感知的影响。其次，将使用移动的身份验证中生命周期事件的度量来了解行为如何随时间推移而变化。该研究还将扩大学生和在线用户的典型测试人群，以了解其他用户群体（如老年人）如何进行身份验证，以及可能需要不同的解决方案或干预措施。这项工作的成果将填补有关移动的设备的升级周期和我们对移动的身份验证选择的理解的重要知识空白，从而设计新的政策，程序和系统的移动的身份验证。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This CAREER research focuses on human factors in authentication using mobile devices. Mobile authentication is a crucial component of authentication, especially as mobile devices become ever more connected to the broader security ecosystem. A major concern is how users authenticate as they use their devices over months or years. This research will involve empirical studies of the choices and actions users take over time. Qualitative and quantitative measures will be employed to better understand user mental models, perceptions, and behaviors related to mobile authentication. The overall goal is to understand the life-cycle of authentication on mobile devices. The outcomes of this work will drive the design and implementation of mobile authentication, and policies surrounding mobile authentication. The research will help to mitigate or prevent security attacks on mobile devices, and lead to better security and privacy of data in mobile devices.Empirical measurements and improvements to mobile authentication have the potential to provide significant intellectual impact and lay the ground work for transformative technologies that improve the way we choose and use authenticators on our mobile devices. This project will accomplish that in two key ways. First, the research makes contributions to the study of user behavior as it unfolds over time, and how that behavior is affected by device use, context, and perceptions. Second, measures of life-cycle events in mobile authentication will be used to understand how behavior shifts over time. The research will also expand the typically-tested populations of students and online users to understand how other user populations, such as older adults, approach authentication and may require different solutions or interventions. The outcome of this work will fill important knowledge gaps regarding the upgrade cycle of mobile devices and our understanding of mobile authentication selection, leading to the design of new policies, procedures, and systems for mobile authentication. Students will be involved at all stages of the research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.