News Release

Digital security dialogue

Researchers leverage human verification to educate people about online safety

Reports and Proceedings

University of Tokyo

DualCheck

image: When a website needs to verify whether a user is in fact a person, it could present the user with a couple of questions like these for the user to answer. As they use their mouse or pointing device, the movement can assure the website the user is human, and the user is rewarded with some knowledge that will hopefully help them use the internet in a safe and secure manner. view more 

Credit: ©2022 Yatani et al.

Online safety and ethics are serious issues and can adversely affect less experienced users. Researchers have built upon familiar human verification techniques to add an element of discrete learning into the process. This way users can learn about online safety and ethics issues while simultaneously verifying they are human. Trials show that users responded positively to the experience and felt they gained something from these microlearning sessions.

The internet is an integral part of modern living, for work, leisure, shopping, keeping touch with people, and more. It’s hard to imagine that anyone could live in an affluent country, such as Japan, and not use the internet relatively often. Yet despite its ubiquity, the internet is far from risk-free. Issues of safety and security are of great concern, especially for those with less exposure to such things. So a team of researchers from the University of Tokyo including Associate Professor Koji Yatani of the Department for Electrical Engineering and Information Systems set out to help.

Surveys of internet users in Japan suggest that a vast majority have not had much opportunity to learn about ways in which they can stay safe and secure online. But it seems unreasonable to expect this same majority to intentionally seek out the kind of information they would need to educate themselves. To address this, Yatani and his team thought they could instead introduce educational materials about online safety and ethics into a typical user’s daily internet experience. They chose to take advantage of something that many users will come across often during their usual online activities: human verification.

You’ve probably seen this yourself, a pop-up window of some sort asking you to type out an unclear word, rearrange puzzle pieces, click on a certain class of object in a set of images, or something similar. They are examples of human verification methods that can protect websites from automated malicious exploitation. Yatani and his team decided to trial a system they called DualCheck, which replaces these verification tasks that don’t offer anything of value to the user, with questions designed to improve knowledge about online safety and ethics. As for the verification element of these user prompts, the way the user moves their mouse or pointing device can be used to verify whether they are a human or an automated bot.

“Given people are likely already familiar with these verification tasks, it seemed reasonable to expand upon these with educational content rather than try and encourage some new behavior,” said Yatani. “We were pleasantly reassured that our test group found DualCheck less bothersome than a typical verification, as the questions it offered felt more meaningful to them than arbitrary tasks like clicking on street signs.”

The researchers found crafting appropriate questions was the most challenging part of this study. It required careful wording for each of the 20 questions used, and these were iterated over a number of trials. These initial tests were performed with a group recruited in Japan so were run in Japanese. But the team intend to expand this trial to other countries in the future. They also plan to run larger-scale trials and experiment with different kinds of educational content for different target groups, such as the elderly.

###

Journal article: Ryo Yoshikawa, Hideya Ochiai, and Koji Yatani, DualCheck: Exploiting Human Verification Tasks for Opportunistic Online Safety Microlearning”, USENIX Symposium on Usable Privacy and Security. https://www.usenix.org/conference/soups2022/presentation/yoshikawa

Funding: This research is part of the results of Value Exchange Engineering, a joint research project between Mercari, Inc. and the RIISE.

Useful links:

Video about this research
https://www.youtube.com/watch?v=5W16fpjeg4M

Department of Electrical Engineering and Information Systems
https://www.eeis.t.u-tokyo.ac.jp/en/faculty/index.html

Interactive Intelligent Systems Laboratory
https://iis-lab.org/

Research contact:
Associate Professor Koji Yatani
Graduate School of Engineering, The University of Tokyo,
7-3-1 Hongo, Bunkyo-ku, Tokyo, 113-8656, Japan
koji@iis-lab.org

Press contact:
Mr Rohan Mehra
Public Relations Group, The University of Tokyo,
7-3-1 Hongo, Bunkyo-ku, Tokyo, 113-8656, Japan
press-releases.adm@gs.mail.u-tokyo.ac.jp

About The University of Tokyo
The University of Tokyo is Japan's leading university and one of the world's top research universities. The vast research output of some 6,000 researchers is published in the world's top journals across the arts and sciences. Our vibrant student body of around 15,000 undergraduate and 15,000 graduate students includes over 4,000 international students. Find out more at www.u-tokyo.ac.jp/en/ or follow us on Twitter at @UTokyo_News_en.


Disclaimer: AAAS and EurekAlert! are not responsible for the accuracy of news releases posted to EurekAlert! by contributing institutions or for the use of any information through the EurekAlert system.