Details
| Originalsprache | Englisch |
|---|---|
| Titel des Sammelwerks | CHI '24 |
| Untertitel | Proceedings of the CHI Conference on Human Factors in Computing Systems |
| Seitenumfang | 19 |
| ISBN (elektronisch) | 9798400703300 |
| Publikationsstatus | Veröffentlicht - 11 Mai 2024 |
| Veranstaltung | 2024 CHI Conference on Human Factors in Computing Sytems, CHI 2024 - Hybrid, Honolulu, USA / Vereinigte Staaten Dauer: 11 Mai 2024 → 16 Mai 2024 |
Abstract
Fallback authentication, the process of re-establishing access to an account when the primary authenticator is unavailable, holds critical significance. Approaches range from secondary channels like email and SMS to personal knowledge questions (PKQs) and social authentication. A key diference to primary authentication is that the duration between enrollment and authentication can be much longer, typically months or years. However, few systems have been studied over extended timeframes, making it difficult to know how well these systems truly help users recover their accounts. We also lack meaningful comparisons of schemes as most prior work examined two mechanisms at most. We report the results of a long-term user study of the usability of fallback authentication over 18 months to provide a fair comparison of the four most commonly used fallback authentication methods. We show that users prefer email and SMS-based methods, while mechanisms based on PKQs and trustees lag regarding successful resets and convenience.
ASJC Scopus Sachgebiete
- Informatik (insg.)
- Mensch-Maschine-Interaktion
- Informatik (insg.)
- Computergrafik und computergestütztes Design
- Informatik (insg.)
- Software
Zitieren
- Standard
- Harvard
- Apa
- Vancouver
- BibTex
- RIS
CHI '24: Proceedings of the CHI Conference on Human Factors in Computing Systems. 2024. 970.
Publikation: Beitrag in Buch/Bericht/Sammelwerk/Konferenzband › Aufsatz in Konferenzband › Forschung › Peer-Review
}
TY - GEN
T1 - A Comparative Long-Term Study of Fallback Authentication Schemes
AU - Lassak, Leona
AU - Markert, Philipp
AU - Golla, Maximilian
AU - Stobert, Elizabeth
AU - Dürmuth, Markus
N1 - Publisher Copyright: © 2024 Copyright held by the owner/author(s)
PY - 2024/5/11
Y1 - 2024/5/11
N2 - Fallback authentication, the process of re-establishing access to an account when the primary authenticator is unavailable, holds critical significance. Approaches range from secondary channels like email and SMS to personal knowledge questions (PKQs) and social authentication. A key diference to primary authentication is that the duration between enrollment and authentication can be much longer, typically months or years. However, few systems have been studied over extended timeframes, making it difficult to know how well these systems truly help users recover their accounts. We also lack meaningful comparisons of schemes as most prior work examined two mechanisms at most. We report the results of a long-term user study of the usability of fallback authentication over 18 months to provide a fair comparison of the four most commonly used fallback authentication methods. We show that users prefer email and SMS-based methods, while mechanisms based on PKQs and trustees lag regarding successful resets and convenience.
AB - Fallback authentication, the process of re-establishing access to an account when the primary authenticator is unavailable, holds critical significance. Approaches range from secondary channels like email and SMS to personal knowledge questions (PKQs) and social authentication. A key diference to primary authentication is that the duration between enrollment and authentication can be much longer, typically months or years. However, few systems have been studied over extended timeframes, making it difficult to know how well these systems truly help users recover their accounts. We also lack meaningful comparisons of schemes as most prior work examined two mechanisms at most. We report the results of a long-term user study of the usability of fallback authentication over 18 months to provide a fair comparison of the four most commonly used fallback authentication methods. We show that users prefer email and SMS-based methods, while mechanisms based on PKQs and trustees lag regarding successful resets and convenience.
KW - email
KW - fallback authentication
KW - personal knowledge questions
KW - SMS
UR - http://www.scopus.com/inward/record.url?scp=85194896591&partnerID=8YFLogxK
U2 - 10.1145/3613904.3642889
DO - 10.1145/3613904.3642889
M3 - Conference contribution
AN - SCOPUS:85194896591
BT - CHI '24
T2 - 2024 CHI Conference on Human Factors in Computing Sytems, CHI 2024
Y2 - 11 May 2024 through 16 May 2024
ER -