ICSA Colloquium - 10/10/2023

Title: How Interaction Experiences Influence Users' Security Perception of Payment Authentication in Virtual Reality?

Abstract: Users readily embrace the rapid advancements in virtual reality (VR) technology within various everyday contexts, such as gaming, social interactions, shopping, and commerce. In order to facilitate transactions and payments, VR systems require access to sensitive user data and assets, which consequently necessitates user authentication. However, there exists a limited understanding regarding how users' unique experiences in VR contribute to their perception of security. In today’s talk, I will present our ongoing study that adopts a research approach known as “technology probe” to investigate this question. Specifically, we have designed probes that explore the process of payment authentication in VR, aiming to elicit responses from participants from multiple perspectives. These probes were seamlessly integrated into the routine payment system of a VR game, thereby establishing an organic study environment. Through qualitative analysis, we uncover the interplay between participants' interaction experiences and their security perceptions. Remarkably, despite encountering unique challenges in usability during VR interactions, our participants found the intuitive virtualized authentication process beneficial and thoroughly enjoyed the immersive nature of VR. Furthermore, we observe how these interaction experiences influence participants' ability to transfer their pre-existing understanding of payment authentication into VR, resulting in a discrepancy in perceived security. Moreover, we identify users' conflicting expectations, encompassing their desire for an enjoyable VR experience alongside the assurance of secure VR payment authentication. Building upon our findings, I will discuss our recommendations aimed at addressing these expectations and alleviating potential conflicts.

Bio: Jingjie Li is a Lecturer in the School of Informatics, University of Edinburgh and a member of the Institute for Computing Systems Architecture. Jingjie’s research spans privacy, security, and human-centered systems broadly. His research aims to develop user-centric solutions that seamlessly integrate privacy and security into users’ interactions with emerging digital technologies, including smart home, AR, and VR systems. He published impactful work at premier conferences in security and privacy (IEEE S&P, USENIX Security, and ACM CCS). His interdisciplinary work also received multiple best paper and design contest awards, including an ACM CHI Best Paper Award and an IEEE Micro Top Pick. Jingjie’s research led to an award from Meta for AR/VR privacy, and he has been recognized as a Cyber-Physical Systems (CPS) Rising Star by the NSF CPS program. He was an invited panelist at the US Federal Trade Commission’s PrivacyCon 2022. Before joining the University of Edinburgh, Jingjie obtained a Ph.D. degree from the University of Wisconsin-Madison in 2023 and a Bachelor’s degree with first-class honors from the Australian National University in 2017.