Progress indicators to encourage more secure behaviors
View Patent ↗A method for enticing users to behave securely in a computing environment. For security related input, such as selection of password, a progress indicator is provided to the user. The progress indicator correlates to the level of security obtained by the user's entry, rather than to the completion of the task. The indicator follows a non-linear function that crosses zero security and maximum expected security for the task. The function starts at shallow slope, increases towards the middle, and then reverts to shallow slop towards the end of the task.
1. A method for providing a security progression indication to a user, comprising:
a. selecting maximum expected security level; wherein selecting a maximum expected security level comprises selecting a plurality of maximum expected levels, and wherein selecting a nonlinear function comprises selecting a plurality of non-linear functions, each corresponding to one of the maximum expected levels, and wherein generating the display comprises monitoring the totality of the user's input to determine which of the plurality of non-linear functions should be used to generate the display;
b. selecting a non-linear function bounded by a linear function and an exponential function that crosses zero security level and the maximum expected security level, the non-linear function indicative of an estimated work required to breach security of a password generated by user input, the estimated work required to breach security being based on entropy of the user input;
c. generating in a computing environment a security level display that progress with the user's input for the password according to the estimated work required to breach security indicated by non-linear function and displaying the security level display on a display device.
2. The method of claim 1 , wherein the non-linear function follows an S-curve.
3. The method of claim 1 , wherein non-linear function follows a shallow slope at a range adjacent to zero security, an increased slope at mid-range, and reverts to shallow slope at a range adjacent the maximum expected security.
4. The method of claim 1 , wherein the non-linear function follows a Bezier curve.
5. The method of claim 1 , further comprising generating a task progress display correlated to the amount of completion of a task by the user.
6. The method of claim 1 , further comprising generating security score display providing an indication of the security level of the user's complete entry with respect to the search space corresponding to the user's complete entry.
7. The method of claim 1 , wherein generating a security level display comprises generating a progression bar display.
8. The method of claim 5 , wherein generating a security score display comprises generating a numerical display.
9. A method for encouraging secure behavior in a computing environment comprising:
prompting the user to complete a task by entering a plurality of input characters; defining a zero security level and a maximum security level for completion of the task; wherein selecting a maximum expected security level comprises selecting plurality of maximum expected levels, and wherein selecting a nonlinear function comprises selecting a plurality of non-linear function, each corresponding to one of the maximum expected levels, and wherein generating the
display comprises monitoring the totality of the user's input to determine which of the plurality of non-linear function should be used to generate the display
selecting a non-linear function bounded by a linear function and an exponential function that crosses the zero security level and the maximum security level, the non-linear function indicative of an estimated work required to breach security of a password generated by user input, the estimated work required to breach the security being based on entropy of the user input;
monitoring the user's input of characters and in response generating in a computing environment a security level display that progresses with the user input of characters according to the estimated work required to breach security indicated by the nonlinear function and displaying the security level display on a display device.
10. The method of claim 9 , wherein the task comprises at least one of: entering a password, generating an electronic key, verify integrity of a code, and verifying authenticity of a code.
11. The method of claim 9 , wherein the non-linear function follows an S-curve.
12. The method of claim 9 , wherein the non-linear function follows a Bezier curve.
13. The method of claim 9 , wherein non-linear function follows a shallow slope at a range adjacent to zero security, an increased slope at mid-range, and reverts to shallow slope at a range adjacent the maximum expected security.
14. The method of claim 9 , further comprising generating a task progress display correlated to the amount of completion of the task by the user.
15. The method of claim 14 , wherein the task progress display follows a linear function.
16. The method of claim 9 , further comprising generating security score display providing an indication of the security level of the user's complete entry with respect to the search space corresponding to the user's complete entry.
17. The method of claim 9 , wherein generating a security level display comprises generating a progression bar display.
18. The method of claim 9 , wherein generating a security score display comprises generating a color-coded display.