提出用户中心的个人身份凭证设计,平衡安全、易用与信任。
Personhood Credentials: Human-Centered Design Recommendation Balancing Security, Usability, and Trust
- 基于用户访谈和概念设计,提出可信发行与管理方案。
- 用户偏好政府背书、生物识别验证及限时凭证机制。
- 适合关注数字身份隐私与用户体验的研究者与开发者。
在去中心化标识符(DIDs)、人证证明等概念基础上,人证凭证(PHCs)作为一种新方法,使个人可向数字服务提供商证明自己是真实人类,而无需披露额外信息。然而,新技术可能因用户误解和期望错配带来使用摩擦。尽管重要性日益凸显,关于用户对PHCs感知与偏好的研究仍有限。为此,我们开展了竞争分析,并对来自美国和欧盟的23名参与者进行了半结构化在线访谈,结合思考 aloud 概念设计环节,提炼出符合用户需求、采纳规则与偏好的具体设计建议。研究发现:(a) 用户对未知的隐私与安全保障与现有验证方式存在认知差异;(b) 信任发行方(如政府)、真实数据源(如生物特征、实体证件)、发行系统(集中式或去中心式)显著影响用户接纳意愿。参与者建议采用周期性生物识别验证、时限凭证、视觉交互式人工核验以及政府监督发行机制。本文提出可落地的设计方案,反映用户真实偏好。
原文摘要 · Abstract (English)
Building on related concepts, like, decentralized identifiers (DIDs), proof of personhood, anonymous credentials, personhood credentials (PHCs) emerged as an alternative approach, enabling individuals to verify to digital service providers that they are a person without disclosing additional information. However, new technologies might introduce some friction due to users misunderstandings and mismatched expectations. Despite their growing importance, limited research has been done on users perceptions and preferences regarding PHCs. To address this gap, we conducted competitive analysis, and semi-structured online user interviews with 23 participants from US and EU to provide concrete design recommendations for PHCs that incorporate user needs, adoption rules, and preferences. Our study -- (a)surfaces how people reason about unknown privacy and security guarantees of PHCs compared to current verification methods -- (b) presents the impact of several factors on how people would like to onboard and manage PHCs, including, trusted issuers (e.g. gov), ground truth data to issue PHC (e.g biometrics, physical id), and issuance system (e.g. centralized vs decentralized). In a think-aloud conceptual design session, participants recommended -- conceptualized design, such as periodic biometrics verification, time-bound credentials, visually interactive human-check, and supervision of government for issuance system. We propose actionable designs reflecting users preferences.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。