The trouble with login: on usability and computer security in ubiquitous computing

Bardram, E.

doi:10.1007/s00779-005-0347-6

Cited by 61 publications

(33 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Additionally, enhancement of the certification using biometrics including fingerprint and iris was also conducted, though at a low rate. Bardram [1] reported that user identification (user name and password) is a basic theme in computer security and is particularly important in the multiuser computer environment. However, the results of the present study revealed that the hospitals of approximately 40% of the nurses who were using a password were not making efforts for password renewal.…”

Section: Discussionmentioning

confidence: 99%

Privacy Recognition by Nurses and Necessity of Their Information Security Education

Niimi¹,

Ota²

2014

Proceedings of the 2014 International Conference on Education Reform and Modern Management

View full text Add to dashboard Cite

Abstract-Because of advanced computerization, the number of hospitals in which nurses use computers to collect, check, input, and record patient information has increased. The expectation for subjective and responsible behaviors by individual nurses has increased along with changes in society. Clarifying nurses' recognition and security behaviors regarding patient privacy is important for patients and medical staff. The present study revealed that hospitals follow various information security measures, but some of the nurses working in the hospitals did not recognize any concrete security-maintaining measures; 40% of responding nurses answered that the range of information sharing could be restricted within each occupational group from the viewpoint of patients' privacy rights. In addition, some of the nurses were making efforts to hide a portion of patient information in their hospitals. In other cases, patients gave nurses concrete requests. Patients' knowledge of information privacy and their attitudes toward the privacy of patients may have begun to change. Because hospitals' electronization will continue to increase in the future, comprehensive information security education is important not only for nurses but for all other medical staff.

show abstract

Section: Discussionmentioning

confidence: 99%

Privacy Recognition by Nurses and Necessity of Their Information Security Education

Niimi¹,

Ota²

2014

Proceedings of the 2014 International Conference on Education Reform and Modern Management

View full text Add to dashboard Cite

show abstract

“…Bardram (2005) discussed proximity-based user authentication allowing access to computers when approached by a person. The system is implemented through authentication tokens (e.g., pens) that wirelessly authorize the access of a person once in close proximity to the computer (i.e., the person stands in front of it).…”

Section: Proximity-dependent Authenticationmentioning

confidence: 99%

Proxemic interactions in ubiquitous computing ecologies

Marquardt

2011

CHI '11 Extended Abstracts on Human Factors in Computing Systems

View full text Add to dashboard Cite

In this dissertation, I explore how the knowledge of people's and devices' spatial relationships -called proxemics -can be applied to the design of ubiquitous computing (ubicomp) interactions. Edward Hall's proxemics theory describes how people use spatial relationships -such as varying their distance or orientation -to mediate their interactions with other people around them. But in spite of the opportunities presented by people's natural understanding of proxemics, only a relatively small number of ubicomp installations incorporate proxemic information within interaction design.Therefore, my goal in this dissertation research is to inform the design of future proxemic-aware devices that -similar to people's natural expectations and use of proxemics -allow increasing connectivity and interaction possibilities when in proximity to people, other devices, or objects. Towards this goal, I explore how the finegrained knowledge of proxemic relationships between the entities in small-space ubicomp ecologies can be exploited in interaction design. In particular, I provide the following three major contributions: First, I operationalize proxemics for ubicomp interaction with the Proxemic Interactions framework that serves to guide the design of ubicomp applications. The framework describes how designers can consider fine-grained proxemic information to mediate people's interactions with digital devices, such as large digital surfaces or portable personal devices. I identify five key dimensions of proxemic measures (distance, orientation, movement, identity, and location) to consider when designing proxemicaware ubicomp systems. I also identify the gradual engagement design pattern as one particular strategy that allows designing system interactions that move from awareness, to reveal, to interaction.-iiiSecond, I design the Proximity Toolkit allowing ubicomp developers to rapidly prototype proxemic-aware ubicomp systems. The toolkit simplifies the development process by supplying higher-level information about proxemic relationships between the entities in ubicomp ecologies through an event-driven API and visual inspection tools.Third, I explore the design of three case studies of proxemic-aware systems that react continuously to people's and devices' proxemic relationships. The case studies explore the application of proxemics in small-space ubicomp ecologies by considering first person-to-device, then device-to-device, and finally person-to-person & device-to-device proxemic relationships. Together, they validate the toolkit's versatility and the application of the Proxemic Interactions framework.-iv -

show abstract

“…Other works justify the importance of contextual factors in systems' security in both ATM [16] and hospital authentication solutions [7]. STEAL also integrates context and its interactions in the security analysis.…”

Section: Related Workmentioning

confidence: 99%

“…education) dependent [5,6]. For example, in hospitals, access control solutions cannot be effective unless designed to fit the nomadic, interrupted, and cooperative nature of the medical work [7]. But, the same access control solutions would be judged differently in a context such as a bank, where employees work mostly alone and where security requirements must consider, for example, threats coming from hackers (e.g., see [8]).…”

Section: Introductionmentioning

confidence: 99%