Groupthink: usability of secure group association for wireless devices

  • Authors:
  • Rishab Nithyanand;Nitesh Saxena;Gene Tsudik;Ersin Uzun

  • Affiliations:
  • University of California, Irvine, Irvine, CA, USA;Polytechnic Institute of NYU, Brooklyn, NY, USA;University of California, Irvine, Irvine, CA, USA;University of California, Irvine, Irvine, CA, USA

  • Venue:
  • Proceedings of the 12th ACM international conference on Ubiquitous computing
  • Year:
  • 2010

Quantified Score

Hi-index 0.01

Visualization

Abstract

A fairly common modern setting entails users, each in possession of a personal wireless device, wanting to communicate securely, via their devices. If these users (and their devices) have no prior association, a new security context must be established. In order to prevent potential attacks, the initial context (association) establishment process must involve only the intended devices and their users. A number of methods for initial secure association of two devices have been proposed; their usability factors have been explored and compared extensively. However, a more challenging problem of initial secure association of a group of devices (and users) has not received much attention. Although a few secure group association methods have been proposed, their usability aspects have not been studied, especially, in a comparative manner. This paper discusses desirable features and evaluation criteria for secure group association, identifies suitable methods and presents a comparative usability study. Results show that some simple methods (e.g., peer- or leader-based number comparisons) are quite attractive for small groups, being fast, reasonably secure and well-received by users.