User Centred Design of Financial Services Project News Volume 4 (7), June 22, 2006
User Centred Design (UCD) of Financial Services Project News is a fortnightly e-newsletter that keeps you in touch with what is happening in the Banking and E-Commerce streams of the Smart Internet Technology CRC project on Security, Trust, Identity and Privacy. The aim is to stimulate interaction with our wider project team, industry partners and researchers involved with the use and design of financial services.
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><
In this issue:
1. What is your husband's name? Sociological dimensions of authentication – Supriya Singh
2. Stories from the field
3. Readings
4. Upcoming Conferences & Call for papers
<><><><><><><><><><><><><><><><><><><><><<><><><><><<><><><><><
*********************************************************************************
1. What is your husband's name? Sociological dimensions of authentication *******************************************************************************
Gabriele Hermansson, one of our researchers, manages the money at home and does all the Internet banking. Her husband however is the principal account holder for their Visa account. When Gabriele set up the account, her security question was “What is your husband's name”. Needing to change details on their Visa account, her husband had to call the bank. He was asked the security question: “What is your husband's name?”
Gabriele's experience is mimicked in our qualitative study of money, banking and financial decision-making. Sharing of access codes can happen when a couple has a mix of joint and individual accounts (for each person), but the money is managed only by one partner. Hence the partner managing the money accesses the joint and individual accounts of the couple on the Internet. Though money is one of the most private aspects of life for Anglo-Celtic couples in Australia, our previous studies have shown that a person regularly talks of money with his or her partner. The danger of this sharing of access codes is that there will be inappropriate use of this trusted information in the case of the break-up of the relationship. The additional danger is that sharing of the access code – even with a family member leads to the consumer not being legally protected.
This is an example of a technical security requirement which is socially flawed in many contexts. We are arguing for a user-centered security approach where security development takes social practice into account and builds the security mechanisms around it.
Professor Supriya Singh
Supriya.singh@rmit.edu.au
*********************************************************************************
2. Stories from the field: Bud & Wally à Same sex relationship & planning for the future
*********************************************************************************
Bud & Wally are in a same sex relationship, and live together with another flatmate. They are both 25-34 years old, and have been together for a little under two years. They see their money as joint. However, they do not have a joint account, but only separate accounts. Each of them manages his money online. Bud has an online only savings account in his name, but they see it as a joint account, and both Bud and Wally contribute to it.
Both were previously in a long term relationship, from which they each accumulated debt. Of the previous partner, Bud said “He ended up being a scam artist… the entire relationship revolved around how much money he could steal or trick out of me…He even transferred bills into my name. All he needed to know was my date of birth and my address.” Wally spoke less of his previous relationship, but did say “He never pitched in. It was like he was being kept”. They both say that they never really trusted their previous partners with money, but that they do trust each other.
Bud and Wally each view this debt as their own responsibility, but are now thinking about consolidating their debts, as well as their accounts, as they want to purchase a property. They want to join their finances as they believe this will help them pay off the debts and save at a faster rate then if they remained with separate finances.
*********************************************************************************
3. Readings
*********************************************************************************
Cranor, L. F. & S. Garfinkel 2005 Security and Usability: Designing Secure Systems that People Can Use , O'Reilly, Sebastopol, CA.
This is one of the most useful collection of papers on security and usability. The theme of the book is that security and usability have to go together for both to be effective. It recognises that this connection is often difficult to make. One of the first steps is to have a Human Computer Interaction expert working together with the security development team.
There are six parts to this book:
Realigning Usability and Security
Authentication Mechanisms
Secure Systems
Privacy and Anonymity Systems
Commercializing Usability: The Vendor Perspective
The Classics
----------------------------------------------------------------------------------------------
Paragas, F. 2005 'Migrant mobiles: Cellular telephony, transnational spaces, and the Filipino Diaspora', in A Sense of Place: The Global and the Local in Mobile , ed K. Nyiri, Passagen Verlag, Vienna , pp.241-249.
This paper explores cellular telephony among Filipino migrant workers. It looks at how cell-phones serve as virtual links among individuals not only locally, but also in international, spaces. Further, it examines how cell phones, alongside other technologies, help maintain familial relations and strengthen personal and national identities among Filipino migrants and their families.
*********************************************************************************
4. Upcoming conferences & call for papers
*********************************************************************************
The Fourth IASTED International Conference on Law and Technology
~LAWTECH 2006~
October 9–11, 2006
MIT Faculty Club, Cambridge, Massachusetts, USA
“ LAWTECH is aimed at legal experts and information technologists who want to share ideas and update their knowledge of this interdisciplinary field. Contributions are invited that review the current status, present empirical evidence, or analyze trends in IT law or in the design and impact of legal information systems.”
For further information, Please visit: http://www.iasted.org/conferences/home-545.html
--------------------------------------------------------------------------------
The IASTED International Conference on Internet and Multimedia Systems and Applications
~EuroIMSA 2007~
March 14–16, 2007
Chamonix, France
“The IASTED International Conference on Internet and Multimedia Systems and Applications (EuroIMSA 2007) will be an opportunity for international research scientists, engineers, and practitioners to present their latest research, ideas, developments, and applications in these fields.”
For further information, please visit: http://www.iasted.org/conferences/home-558.html
-------------------------------------------------------------------------------- |