Integrating Visual Mnemonics and Input Feedback With Passphrases to Improve the Usability and Security of Digital Authentication.

OBJECTIVE: We developed a new authentication system based on passphrases instead of passwords. Our new system incorporates a user-generated mnemonic picture displayed during login, definition tooltips, error correction to reduce typographical errors, a decoy-based input masking technique, and random passphrase generation using either a specialized wordlist or a sentence template. BACKGROUND: Passphrases exhibit a greater level of security than traditional passwords, but their wider adoption has been hindered by human factors issues. Our assertion is that the added features of our system work particularly well with passphrases and help address these shortcomings. METHOD: We conducted a study to evaluate our new system with a customized 1,450-word list and our new system with a 6-word sentence structure against the control conditions of a user-created passphrase of at least 24 characters and a system-generated passphrase using a 10,326-word list. Fifty participants completed two sessions so that we could measure the usability and security of the authentication schemes. RESULTS: With the new system conditions, memorability was improved, and security was equivalent to or better than the control conditions. Usability and overall ratings also favored the new system conditions over the control conditions. CONCLUSION: Our research presents a new authentication system using innovative techniques that improve on the usability and security of existing password and passphrase authentication systems. APPLICATION: In computer security, drastic changes should never happen overnight, but we recommend that our contributions be incorporated into current authentication systems to help facilitate a transition from passwords to usable passphrases.

Realizing improved patient care through human-centered operating room design: a human factors methodology for observing flow disruptions in the cardiothoracic operating room.

BACKGROUND: Human factors engineering has allowed a systematic approach to the evaluation of adverse events in a multitude of high-stake industries. This study sought to develop an initial methodology for identifying and classifying flow disruptions in the cardiac operating room (OR). METHODS: Two industrial engineers with expertise in human factors workflow disruptions observed 10 cardiac operations from the moment the patient entered the OR to the time they left for the intensive care unit. Each disruption was fully documented on an architectural layout of the OR suite and time-stamped during each phase of surgery (preoperative [before incision], operative [incision to skin closure], and postoperative [skin closure until the patient leaves the OR]) to synchronize flow disruptions between the two observers. These disruptions were then categorized. RESULTS: The two observers made a total of 1,158 observations. After the elimination of duplicate observations, a total of 1,080 observations remained to be analyzed. These disruptions were distributed into six categories such as communication, usability, physical layout, environmental hazards, general interruptions, and equipment failures. They were further organized into 33 subcategories. The most common disruptions were related to OR layout and design (33%). CONCLUSIONS: By using the detailed architectural diagrams, the authors were able to clearly demonstrate for the first time the unique role that OR design and equipment layout has on the generation of physical layout flow disruptions. Most importantly, the authors have developed a robust taxonomy to describe the flow disruptions encountered in a cardiac OR, which can be used for future research and patient safety improvements.