How Interactions Influence Users' Security Perception of Virtual Reality Authentication?

TL;DR

This study explores how users' interaction experiences in virtual reality influence their perceptions of security during authentication, revealing a complex relationship between usability, enjoyment, and perceived safety.

Contribution

It introduces a novel 'technology probe' approach to study VR authentication, providing insights into user perceptions and proposing recommendations to improve security experiences.

Findings

Users enjoy immersive VR authentication despite usability challenges.

Interaction experiences affect transfer of authentication understanding to VR.

Users have conflicting expectations of enjoyment and security in VR.

Abstract

Users readily embrace the rapid advancements in virtual reality (VR) technology within various everyday contexts, such as gaming, social interactions, shopping, and commerce. In order to facilitate transactions and payments, VR systems require access to sensitive user data and assets, which consequently necessitates user authentication. However, there exists a limited understanding regarding how users' unique experiences in VR contribute to their perception of security. In our study, we adopt a research approach known as ``technology probe'' to investigate this question. Specifically, we have designed probes that explore the authentication process in VR, aiming to elicit responses from participants from multiple perspectives. These probes were seamlessly integrated into the routine payment system of a VR game, thereby establishing an organic study environment. Through qualitative analysis, we uncover the interplay between participants' interaction experiences and their security perception. Remarkably, despite encountering unique challenges in usability during VR interactions, our participants found the intuitive virtualized authentication process beneficial and thoroughly enjoyed the immersive nature of VR. Furthermore, we observe how these interaction experiences influence participants' ability to transfer their pre-existing understanding of authentication into VR, resulting in a discrepancy in perceived security. Moreover, we identify users' conflicting expectations, encompassing their desire for an enjoyable VR experience alongside the assurance of secure VR authentication. Building upon our findings, we propose recommendations aimed at addressing these expectations and alleviating potential conflicts.