In todays processing models for performing any kind of activities we have to go by Login page. Almost every website whether it is an Email, Banking, Eshopping, Recharge, Travel, or hotel booking site etc... All sites demand user name and passwords. But the problem is how to memorize all the username and passwords. Current scenario is more towards utilizing the user's memory for all type of dumps. Is it not possible to design such a system where user can be free from memorizing all these things and it could become more system centric....
What about services that provide single sign-on interfaces like "log in with google/facebook/twitter" or Shibboleth etc.?
One problem I see is, the possible aggregation that may become possible for the single sign-on service provider.
In my optionion people mostly prefer remembering their around 25+ user credentials for several services, over trusting one single sign-on provider hosted "somewhere" not unterlying the own residential country/national state/EU or whatever.
(to be honest, I was socialized in the cultural environment of East Germany, where people always lived in fear of survaillance. Maybe that lead to todays "German Angst" on [personal] data security and safety)
@Andre
There may be number of drawbacks of Single sign on services. Though people like to prefer remembering their around 25+ credentials but in most of the cases these credentials are matching with each other so security issue is also related with the same.
I think there is a huge requirement of changing the current Login Process system. For e.g. if we introduce the combination of Biometric + OTP then user can freely access the system with no load at user's mind. and this process will be more towards system.....
What do you think?
@Pradeep
both approaches have their advantages and disadvantages.
Single-sign on:
- I have to trust the provider (does everyone trust Google/FB & Co.?)
- Once one provider is hacked or the password guessed (due weakness etc.) all my accounts are unsafe
- Even without hacking, the supervisors and admins of the provider can access all services I use (high responsibility in recruiting of trustable personell on the side of the provider as an employer)
25+ seperate credentials:
- the data of every single service is seperately safe (one hacked, others safe - passwort weakness)
- profiling the user as complete individual is more complicated (if he/she does not use the same username/identiy through all services)
Biometrics etc:
- relies on the idea to become a uniquely identifyable entity throughout all services one uses, the absolute glassy human.
* great benefit for companies, profiled advertising, control/surveillance by governments or their departments.
* possibly harmfull for any (racial/religious/political/sexual/gender) minority fearing discrimination and using the internet as a plattform to exchange/collaborate
as a kind of ironic/philosophical position:
you write "no load at user's head" .. think about, that using our head to forcing us to think about our steps keeps us secure from the control of others. I don't like the idea that technology (or their creators) one day control my steps instead of me, just because I got lazy with carrying around my loads in personal responsibility.
or shorter: There are questions about the users/society to answer before seeking the fitting technology approach. Some fear the "brave new world" (Huxley A. 1932)
@Andre
You may be true with your thoughts but still a lot of improvements are required and we will definitely come out from the existing scenario.......
Thanks for the information.
Regards.
- Badges
- Science topic