Downloaded 13 times
Uploaded byAme Elliott
Experience Design for IoT Security
This document summarizes a presentation on lessons from architecture school that can inform experience design for IoT security. Some key lessons discussed include starting design with an understanding of people in their context, considering unspoken needs, and recognizing that homes are more than just houses but reflect cultural contexts. The presentation argues that security for IoT needs a user experience focus and discusses challenges like managing profiles for ambient data capture and reimagining software updates. It concludes that the user experience problems posed by IoT security are important opportunities for design.
Experience Design for IoT Security
- 1. Experience Design forIoT Security: Lessons from Architecture School Ame Elliott @ameellio ame@simplysecure.org Solid Conference June 25, 2015
- 2. Agenda Introduction Lessons from ArchitectureSchool Start with people, in context Understand unspoken needs Homes are more than houses Conclusion 2
- 3. Agenda Introduction Lessons from ArchitectureSchool Start with people, in context Understand unspoken needs Homes are more than houses Conclusion 3
- 4. 4 CONNECTING CO ECTINGL L BuildingsAre Becoming Sites of Surveillance
- 5. 5 Buildings Are BecomingSites of Surveillance Samsung’s Smart TVs recording and transcribing conversations and Mattel selling children’s questions to Hello Barbie are recent examples. "How we sold our souls – and more – to the internet giants," Bruce Schneier in The Guardian "Beware the Listening Machines," Ethan Zuckerman in The Atlantic
- 6. 6 Buildings Are BecomingSites of Surveillance There needs to be richer discussion than the tension between what’s technically possible and what’s legal. Security for IoT needs design.
- 7. 7 Buildings Are BecomingSites of Surveillance Feasibility Viability Desirability
- 8. The Attic. Photoby Jamie Beverly Privacy and security are exciting opportunities for UX design 8
- 9. Parthenon, 447 BCEAthens, Greece. Photo by Jonathan Cohen 9 IoT may be new, but buildings have been around a long time
- 10. Power Plant ControlPanel. Photo by Marcel Wichary 10 Appropriate complexity is the key UX challenge for IoT
- 11. Agenda Introduction Lessons from ArchitectureSchool Start with people, in context Understand unspoken needs Homes are more than houses Conclusion 11
- 12. 1905 Post Cardfrom Dana Cuff’s Architecture: The Story of Practice. Architecture school teaches problem finding 12
- 13. Architecture School Teachesthe Design Process Feedback via critique 13 Presenting work in charettes (pitch) Learning by doing Master and apprentice model Building to think/ making it visual Learning to see
- 14. Architecture School Teachesthe Design Process Feedback via critique 14 Presenting work in charettes (pitch) Learning by doing Master and apprentice model Building to think/ making it visual Learning to see
- 15. 15 Understand unspoken needsStart with people, in context Homes are more than houses Lessons from Architecture School: Learning to See Understand unspoken needsStart with people
- 16. Agenda Introduction Lessons from ArchitectureSchool Start with people, in context Understand unspoken needs Homes are more than houses Conclusion 16
- 17. Man Handing aLetter to a Woman in the Entrance Hall of a House Pieter de Hooch, 1670 17From the Rijksmuseum
- 18. Man Handing aLetter to a Woman in the Entrance Hall of a House Pieter de Hooch, 1670 18From the Rijksmuseum Windows, morality, and privacy as a dirty word
- 19. Man Handing aLetter to a Woman in the Entrance Hall of a House Pieter de Hooch, 1670 19From the Rijksmuseum Internet of 1670
- 20. Man Handing aLetter to a Woman in the Entrance Hall of a House Pieter de Hooch, 1670 20From the Rijksmuseum Multiple people with different privileges inhabit the home
- 21. Start With People,In Context Homes have multiple people with varied permissions. Children, and others who can’t or won’t consent, generate data. More aggressive rules govern collection of their data, and regulatory changes are likely. 21
- 22. Security Thought-Starters Plan forchange and don’t take on privacy debt in a quickly-changing landscape 22 European Article 29 Working Party Sandy Clark et al’s “Honeymoon Effect” paper 22
- 23. Appropriate Complexity Managing profiles forambient capture: right mode + right feedback 23 Netflix manages multiple profiles with explicit login, but many media services are struggling to identify group members present when video is played. 23
- 24. Agenda Introduction Lessons from ArchitectureSchool Start with people, in context Understand unspoken needs Homes are more than houses Conclusion 24
- 25. 25Hvitträsk, Finland 1903.Photo by Markku Haverinen Design rooted in Finnish Nationalism + Romanticism
- 26. 26Hvitträsk, Finland 1903.Photo by Markku Haverinen Environment inside reflects culture outside
- 27. 27Hvitträsk, Finland 1903.Photo by Markku Haverinen This is the childhood home of Eero Saarinen
- 28. 28TWA Terminal atthe former Idlewild Airport, 1962. Photo by Sean Masrhall Eero Saarinen was the architect of New York’s JFK Airport T5
- 29. Understand Unspoken Needs 29 Onegeneration of buildings is much longer than the 18-month hardware churn. Buildings last and are upgradable.
- 30. Security Thought-Starters Think firmware andplan an upgrade path 30 Internet Engineering Task Force (IETF) working on firmware standards, e.g. Carsten Bormann Supervisory Control and Data Aquistion (SCADA) 30
- 31. Appropriate Complexity Reimagining updates asa form of engagement: design for behavior change 31 Cautionary tale of routers, keeping the internet of 10 years ago alive 31
- 32. Agenda Introduction Lessons from ArchitectureSchool Start with people, in context Understand unspoken needs Homes are more than houses Conclusion 32
- 33. 33Shop Houses, Singapore2013. Photo by Peter Morgan. Nationalism Shophouses are Southeast Asian vernacular architecture
- 34. 34Shop Houses, Singapore2013. Photo by Peter Morgan. Nationalism Covered awnings protect the public from sun + rain
- 35. 35Shop Houses, Singapore2013. Photo by Peter Morgan. Nationalism Designed by social custom, then Singaporean law in 1822
- 36. 36Vietnam 2008.. Photoby Ame Elliott Nationalism Designed by social custom, then Singaporean law in 1822 Vernacular is not the same as amateur
- 37. Homes Are MoreThan Houses You can have cultural knowledge and still do a bad implementation. There are roles for standards and for professional knowledge. 37
- 38. Security Thought-Starters Don’t inventyour own crypto - use professional standards 38 Open Smart Grid insecurity Real World Crypto Conference: Stanford, CA in Jan 2016 38
- 39. Appropriate Complexity Exposing the underlyingsystems to build knowledge 39 Interfaces on electric cars like the Toyota Prius teach engine function and driver behavior 39
- 40. Agenda Introduction Lessons from ArchitectureSchool Start with people, in context Understand unspoken needs Homes are more than houses Conclusion 40
- 41. 1905 Post Card. Architectureschool teaches lessons for UX for IoT security 41
- 42. 42 Start with people,in context Lessons from Architecture School Start with people, in context Homes are more than housesUnderstand unspoken needs Homes have multiple people with varied permissions Implementation matters in vernacular architecture Buildings last and are upgradable
- 43. Security Thought-Starters 43 Don’t invent yourown crypto– use professional standards Plan for change and don’t take on privacy debt Think firmware and plan an upgrade path
- 44. Managing profiles forambient capture Reimagining updates as a form of engagement Exposing underlying systems to build knowledge 44 Appropriate Complexity: UX Challenge for IoT
- 45. 45 IoT Security UXProblems Are Exciting There’s a need for design to shape the conversation between possible and legal. The UX problems for IoT are inspiring and important.
- 46.
- 47. Creative Commons 2.0Photo Credits p. 7 https://www.flickr.com/photos/thesoupboy/400278091/ p. 8 https://www.flickr.com/photos/jonathancohen/6253733297/ p. 9 https://www.flickr.com/photos/mwichary/2251347415/ p. 11 http://www.cparama.com/forum/cartes2013b/1372353539-Beaux-Arts- Atelier-pascal.jpg p. 16 https://www.rijksmuseum.nl/en/collection/SK-C-147 p. 27 https://www.flickr.com/photos/7119320@N05/7452651372/ p. 31 https://www.flickr.com/photos/magicfab/3893245793/ 47