Allowing for secure and accessible authentication for individuals with disabilities of dexterity

Price, Abbie and Loizides, Fernando ORCID: https://orcid.org/0000-0003-0531-6760 2024. Allowing for secure and accessible authentication for individuals with disabilities of dexterity. Presented at: HCSE Human-Centered Software Engineering, Reykjavik, Iceland, 8-10 July 2024. Published in: Laurusdottir, M. K., Naqui, B., Bernhaupt, R., Ardito, C. and Sauer, S. eds. Human-Centered Software Engineering. Lecture Notes in Computer Science , vol.14793 Springer, 10.1007/978-3-031-64576-1_7

Preview

PDF - Accepted Post-Print Version Download (1MB) | Preview

Abstract

People living with disabilities of dexterity can be vulnerable to attackers when authenticating using physical input methods, such as when inputting PIN numbers using a keypad at an ATM(Cash Point), due to the extended time these interactions take because of the device’s lack of accommodations and accessibility. This makes their input more observable to a potential attacker and thus compromises their security. In addition, when ease of use is severely compromised, this may cause a need to circumvent good security practices for practical usability which further makes these individuals vulnerable to potential attackers. While research in the field of accessible and secure authentication exists, limited work has focused on the unique needs of individuals who have limited to no hand or finger dexterity. This paper proposes an accessible framework for authentication (AAFIDD), that focuses on meeting the needs of this group. We implemented a prototype authentication model and present an initial user study with 7 participants that evaluated the efficacy of this prototype and the framework. Each participant was randomly assigned a PIN and asked to input it using a method reliant on hand-dexterity and then using the prototype gaze-based input. Users were timed and asked to evaluate their experience in terms of ease of use while a researcher attempted to perform an over-the-shoulder attack to evaluate the security. We found that the prototype input method was less likely to be interpreted by an observer than using a mouse to input, while users considered the prototype input method accessible and easy to use.

Item Type:	Conference or Workshop Item (Paper)
Date Type:	Publication
Status:	Published
Schools:	Computer Science & Informatics
Publisher:	Springer
ISBN:	9783031645754
Date of First Compliant Deposit:	8 July 2024
Date of Acceptance:	23 March 2024
Last Modified:	08 Jul 2024 11:00
URI:	https://orca.cardiff.ac.uk/id/eprint/170385

Actions (repository staff only)

Edit Item