Ethics of Security Authentications
Sara Wachter-Boettcher’s book Technically Wrong: Sexist Apps, Biased Algorithms, and Other Threats of Toxic Tech addresses many issues such as discrimination, biases, morals and ethics. It gave me a better understanding that I need to be aware of the types of consequences that will arise from my designs. As well as taking a step back and thinking whether or not this is the right decision. The book has taught me a valuable lesson that design should not be a narrow pathway in order to complete a project and make money. Instead we must understand the value and impact that will affect many people in this world. As we become more dependent on technology, it is up to us to make the change we want to see. Make technology love us!
While reading Technically Wrong, it made me think a lot about my thesis topic in security authentications. I need to consider all of the different types of possibilities to authenticate devices while understanding that there needs to be a balance of convenience and security in order for users to adopt it. Also I need to think about all the different types of possibilities if something was to go wrong such as if the bracelet device does not work, authentication invalid, other alternative ways to access device, troubleshoots and types of authentication layers to protect the users.
Currently my concept is a biometric multi-factor wearable authentication bracelet that uses wrist vein pattern, heart rate and finger print technology to authenticate a user. Once authenticated, the bracelet will be continually activated with bluetooth and NFC until the device is removed from the wrist or no heart rate. This creates a secure and persistent authentication for the user. Even if someone did stole the bracelet or chopped off your arm, it will be useless because it must be authenticated by a multi-factor biometric that is unique to a particular person.Vein patterns are unique to each individual. Apart from size, the pattern does not change over time.
Some of the challenges that came up while interviewing people was that while it is less invasive than iris scanning, people did not feel comfortable having their wrist vein scanned. Biometric authentication is slowly being implemented such as finger print and facial recognition on mobile devices. It will take some time for wrist vein pattern recognition to be a norm but I do believe this is the way to go. Vein pattern recognition has great potential as a convenient, easy to use biometric technology with high security and accuracy levels. It is just a matter of nudging the users to adopt the new technology.
