Adults find ECG authentication convenient and secure alternative
Unlocking with the Heart: Investigating User Perceptions of ECG-Based Biometric Authentication
Human-Computer InteractionCryptography and SecurityComputers and SocietyEmerging Technologies
Summary
Passwords can be hard to remember and use, which frustrates many people. The authors studied a new way to log in using heart signals called ECG, instead of passwords. They surveyed hundreds of adults about their views on different login methods and let some people try an ECG system in a health app. The results showed people thought ECG login could be easy and secure, especially for those who struggle with usual passwords.
What this means in practice
- •For mobile app developers: Design smartphone apps that use heart signals for simpler, secure logins without passwords.
- •For healthcare it teams: Integrate ECG-based authentication into health applications to improve patient data access security and ease of use.
Authors
Farnaz Farid, Linet Momposhi, Tamara Watson, Alana Maurushat, Abubakar Bello, Farhad Ahamed
Abstract
Password-based authentication remains challenging for many users, especially for those who face usability and accessibility issues. The burden of maintaining security can cause user fatigue, frustration and non-engagement. To address these issues, we conducted a pilot study to assess ECG-based biometric authentication as a passwordless alternative and to gather adult participants' perspectives on this approach. The research consisted of a survey study, an authentication prototype and a follow-up usability experience questionnaire. Our approach combined an online survey of 337 adults examining authentication practices and perceptions, with a separate usability evaluation in which 49 participants interacted with a simulated ECG-authentication and password interface in a health-care application prototype, then completed a post-test usability test questionnaire. The survey examined how adults across age groups use and perceive various authentication techniques, their experiences with biometrics, their views on security and convenience, and their willingness to adopt ECG authentication. In parallel, the usability prototype and questionnaire captured participants' responses after hands-on interaction with an ECG authentication prototype.