Childcare Study

Childcare StudyEdgardo & ZaliaUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia TechUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia TechUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech1OverviewIntroductionMethodDemographicsCodesDesign Implications for SecuritySummaryQ & A

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech2IntroductionPilot studies conducted this summerKeeping and maintaining records is a growing concernCurrent system is paperWe are studying how information is shared, documented, and evaluated in child-cares. Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia TechUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech3MethodGrounded theory

Interview lasting about 30 minutes

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech4DemographicsInterview 21 parents (7/14/2009 - 9/30/2009)18 Female 3 Males2 in after school only rest in full time1.29 average number of children13 months in current childcare on averageTwo were single parentAll other had partnersUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech5CodesUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech6CodesUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech7EnrollmentGeneralName, Birth date/Certificate, Emergency contact, SSN, Childs like and dislikeFamily InformationParents contact, Employment, Background, SiblingsHealth InformationImmunization record, Health insurance info, Medical conditions, Allergies

Sensitive InformationUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech8Additional InformationSpecial needs (Speech disability, handicap)Language and cultural information (Bi-lingual)Psychological family condition ( Other childs death, parents divorce)

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech9Security

Physical safety of childrenInformation SecuritySecurityUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech10Physical Safety of the Children

Buzzer/bell at entranceDoor lock: Pin / cardWeb-cameraCentral monitoring SystemSignature sheet for drop in and pick upEmergency list

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech11Information Security

StorageLocked file cabinetNo one sure if the information are stored digitally AccessOnly two parents are informed about access (Emergency listed people)Others believe daycare officials haveShareParents believe daycares will ask them before sharing their informationExpirationParentsWant to keep only name, contact and enrollment time in file after leaving the childcareBelieve their information will eventually be disposed.

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech12TrustParents generally trust daycares.Personal relationship rather than information practice is the basis of their trust.Security system of daycares has impact in their trustNone but participant 13 and 14 faced information security breach.Single incident of security breach leads to unrecoverable bad impact on trust

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech13Communication

Face-to-facePhysical reportsAmbient Information

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech14Face-to-faceMain communication method by all 21 participantsPreferred methodExpect verbal report of the status of their child

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech15Physical ReportsMentioned by all Specific Child InformationInformation About the ChildcareSecondary Information

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech16Ambient Information15 participant mention receiving information this way[the] majority of their information is all posted. Cork boards display boards all through the entrance way

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech17BreakdownsWhenever a communication, interaction, or a critical incident has occurred14 participants mention this5 participant left childcare after a breakdown

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech18Light Bulb MomentsJust over half of participants"You know, I've never really thought about it."

Usable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech19Design Implications for SecuritySupporting rich communication and reporting in both directions Take the information the parents have and explain how and why this information is needed Provide access logs to all parties informationUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech20SummaryTechnology continues to fill our lives, it is becoming more ubiquitousParent have a large amount of trust in the childcares information security practicesLarge emphasis on the ability to communicate with the childcare effectivelyUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech21Q & AUsable Security CS 6204 Fall, 2009 Dennis Kafura Virginia Tech22