CASA: Context-Aware Scalable Authentication
Date: July 2013
Publication: Proceedings of the 9th Symposium On Usable Privacy and Security, SOUPS 2013
Source 1: http://cups.cs.cmu.edu/soups/2013/proceedings/a3_Hayashi.pdf
Source 2: http://sauvik.me/system/papers/pdfs/000/000/006/original/casa_camera_ready.pdf
Source 3: http://dx.doi.org/10.1145/2501604.2501607 - Subscription or payment required
We introduce context-aware scalable authentication (CASA) as a way of balancing security and usability for authentication. Our core idea is to choose an appropriate form of active authentication (e.g., typing a PIN) based on the combination of multiple passive factors (e.g., a userís current location) for authentication. We provide a probabilistic framework for dynamically selecting an active authentication scheme that satisfies a specified security requirement given passive factors. We also present the results of three user studies evaluating the feasibility and usersí receptiveness of our concept. Our results suggest that location data has good potential as a passive factor, and that users can reduce up to 68% of active authentications when using an implementation of CASA, compared to always using fixed active authentication. Furthermore, our participants, including those who do not using any security mechanisms on their phones, were very positive about CASA and amenable to using it on their phones.
Do you have additional information to contribute regarding this research paper? If so, please email email@example.com with the details.