Making PRIME usable

End-User Privacy in Human-Computer Interaction

“…More recent work has taken a holistic and more nuanced approach encompassing architectural and cognitive constraints as well as the user interface. For example, work on identity management and plausible deniability demands that the whole system architecture and user interface be designed with those end-user concerns in mind [231]. Finally, the reader will note that the literature relating to interaction techniques for privacy is intertwined with that of usable security.…”

“…One refinement of this idea is to let end-users defer making privacy choices until they are more familiar with the system, similar to the notion of safe staging introduced by Whitten and Tygar [308]. A refinement of this concept are Just-In-Time Click-Through Agreements (JITCTA) adopted by the EU PISA project [230], and later by the EU PRIME "PRivacy and Identity Management for Europe" project [231]. JITCTA are presented to the user at a time when he or she can take an informed decision on her privacy preferences.…”

“…JITCTA are presented to the user at a time when he or she can take an informed decision on her privacy preferences. However, Petterson et al note that users may be induced to automate their "consent clicks" when presented with multiple instances of click through agreements over time, without really reading their contents [231].…”

“…For example, Boyd's Faceted Id/entity system uses a technique similar to Venn diagrams to explicitly specify different groups and people within those groups [43]. The EU PRIME project has also explored various user interfaces for identity management, including menu-based approaches, textual/graphic interfaces, and more sophisticated animated representations that leverage a town map metaphor [231]. Graphical metaphors are often used with other PETs, e.g., using images of keys, seals, and envelopes for email encryption.…”

Towards inclusive identity management

“…User-controlled identity management: Although some approaches and prototypes of type 3 IMS exist, the major critique from the usability experts warns about exposing the user to high degrees of complexity, while users seek to get things done with the least possible effort (Dhamija et al 2008). Such complexity might confuse even users without disabilities, as (Pettersson et al 2005) found that users of various interfaces to privacy management get confused between pseudonyms and the real world even on user-friendlier interfaces.…”