Access control by testing for shared knowledge

Controlling the privacy of online content is difficult and often confusing. We present a social access control where users devise simple questions of shared knowledge instead of constructing authenticated accounts and explicit access control rules. We implemented a prototype and conducted studies to explore the context of photo sharing security, gauge the difficulty of creating shared knowledge questions, measure their resilience to adversarial attack, and evaluate users' ability to understand and predict this resilience.

• Type: Conference
• Year: 2008
• Where: CHI
• Authors: Michael Toomim, Xianhang Zhang, James Fogarty, James A. Landay
• Keywords: CHI 2008, Explicit Access Control, Human Computer Interaction, Photo Sharing Security, Social Access Control