Influence of User Perception, Security Needs, and Social Factors on Device Pairing Method Choices Iulia Ion

Recent years have seen a proliferation of secure device pair-ing methods that try to improve both the usability and se-curity of today’s de-facto standard – PIN-based authentica-tion. Evaluating such improvements is difficult. Most com-parative laboratory studies have so far mainly focused on completeness, trying to find the single best method among the dozens of proposed approaches – one that is both rated the most usable by test subjects, and which provides the most robust security guarantees. This search for the “best” pairing method, however, fails to take the variety of situa-tions into account in which such pairing protocols may be used in real life. The comparative study reported here there-fore explicitly situates pairing tasks in a number of more realistic situations. Our results indicate that people do not always use the easiest or most popular method – they instead prefer different methods in different situations, based on the sensitivity of data involved, their time constraints, and the social conventions appropriate for a particular place and set-ting. Our study also provides qualitative data on factors in-fluencing the perceived security of a particular method, the users ’ mental models surrounding security of a method, and their security needs