Online Companion for UNDERSTANDING CONSUMERS ATTITUDES TOWARD CONTROVERSIAL INFORMATION TECHNOLOGIES: A CONTEXTUALIZATION APPROACH

Transcription

1 Online Companion for UNDERSTANDING CONSUMERS ATTITUDES TOWARD CONTROVERSIAL INFORMATION TECHNOLOGIES: A CONTEXTUALIZATION APPROACH Appendix A: Study 1 Table A1: Sample Demographics by Age Group (Study 1) Age Range Frequency (18.2%) (19.9%) (20.1%) (21.1%) Over (20.6%) Total 402 Example Comments (Study 1) Study 1 was a qualitative investigation that uncovered the most salient perceived benefits and concerns in the context of biometric identity authentication for accessing bank accounts through ATMs. The below table provide some example respondent comments that corresponded to the centralized categories identified. Table A2: Benefits of Using Biometric Identity Authentication in the Context of Bank Machine Transactions Category Example Comments 1 Increased Security It could be good for security reasons, to make sure no else could access my bank account More secure, less chance of someone hacking my account 2 Increased Safety It makes the machines safer in that nobody can watch to see your PIN To provide safety using an ATM, no one looking over your shoulder can access your accounts 3 Difficulty in reproduction of fingerprints Advantage is certainly the difficulty in reproducing biometrics No one has the same fingerprints as you 4 Deterrent to identity theft Makes identity theft and related fraud more difficult Stop numerical robbing of one's identity 5 I am the only one with access to my account Less possibility of unauthorized access No one other than me can access my account 6 Less chance of theft from my accounts It will be a better way to keep thieves from getting my money It is much more difficult for thieves to withdraw funds from the account associated with the debit card 7 Less chance of theft of my PIN/password PIN cannot be stolen Hard to steal versus a PIN number; don't expect to lose my finger 8 Less concern if I lose my card A lost or stolen debit card can t be used Nobody could use your debit card if it is stolen

2 9 Easier to use Easier banking I certainly feel it would be easier - nothing to remember 10 No chance of forgetting your card If you forget your card you can still get your money Allows you to use ATM machines if you have forgotten your debit card or if you don't feel like finding it in your wallet/purse 11 No PIN/password to remember No longer remembering a PIN There are no numbers to remember. All you have to do is put your index finger on the screen 12 Convenience It has a great potential for convenience It would be faster and more convenient 13 Faster access to accounts It will probably make using the ATM much faster It would be a faster way to access my money Table A3: Concerns of Using Biometric Identity Authentication in the Context of Bank Machine Transactions Category Example Comments 1 How secure is my information from hackers/insiders? We've heard too many times about hackers getting into supposedly secure systems, and stealing data I do not think the corporate world has demonstrated the resolve required to be trusted to keep such crucial info secure. Just one mistake on their part could ruin an individual, while to the bank that incident just becomes part of the operational risk equation. Individuals simply have too much to lose. 2 My fingerprints can be copied One day biometric data could be duplicated Fingerprints left on ATMs may be lifted and used by those who know how 3 Increased possibility of identity theft Still seems like someone could somehow "manufacture" your identity If identity theft occurred, it would be far worse than now 4 Inconvenience That it wouldn t work correctly and like any new technology would be more of a hassle than a help I ve used the technology before to access a secure building. Never worked more than 10% of the time 5 Inability to share banking responsibilities with others 6 Reliability of the technology in terms of startup glitches, ongoing maintenance issues, and accuracy of the fingerprint reader due to dirt, grease, etc. Takes away the convenience of allowing others you trust to use your ATM card It won't work for couples with separate bank accounts who need to maybe deposit in each others accounts. It won't work for sons or daughters that do banking for their parents. That there is a computer glitch and somehow it mixes all the biometrics information up If your hands are dirty or sticky the fingerprint may not work 7 Slower access to accounts Takes too long to process the scan Might slow down banking 8 What happens if my fingers are damaged, or if they become damaged? What if you get a burn and the fingerprint changes? What happens if you cut your finger or suffer some injury that distorts your finger print?

3 9 What happens when I go overseas and they aren t using biometrics at ATMs? 10 The information is too private for any organization to have 11 Physical harm as thieves will now sever my fingers and/or hand to gain access to my account 12 Function creep private information is hared beyond intended use either by corporations and/or the government How would it work internationally at international banks or world banks that are Cirrus or Plus affiliated? Would there be back-up/secondary methods? Gives banks too much personal information, and I am not comfortable with the notion I find that the information is much too personal for a bank to have I would also be concerned about people attacking me, cutting off my finger, and using it to access my account People cutting off fingers to rob someone I would not accept this service unless there was legislation in place where NO one else could access this information, including the government Could law enforcement subpoena their records? Could they fall into other hands? Table B1: Sample Demographics (Study 2) Appendix B: Study 2 Demographic Categories Frequency Percentage Sex Female % Male % Age % % % % % > % Income < $25k % $25k to $50k % $50k $75k % $75k to $100k % > $100k % No answer % Education Some high school % High school % Some college/university % College/university/diploma % Graduate degree % ATM Use < Once per Month % Once per Month % Twice per Month % Once per Week % > Once per Week %

4 Experimental Scenarios for User Control (Study 2) Implementation Scenario 1 Bank Control Before answering the following questions, imagine that you normally access your bank accounts through your bank s automated banking machines (ATM). In an effort to enhance security, your bank has just decided to discontinue use of debit cards with PINs at ATMs and now only uses biometric identity authentication. Now your identity is authenticated through the use of your fingerprint (as biometric information). When you enroll in this service, an electronic copy of your fingerprint biometric information is captured and stored at your bank. To access your bank accounts at an ATM, you must insert your debit card into the ATM and place your index finger on a biometric scanner which scans your fingerprint. The system then verifies whether your scanned fingerprint matches the electronic version of your fingerprint biometric stored at the bank before giving you access to your bank accounts. Your scanned fingerprint during this visit to the ATM is destroyed after you complete your transaction. Implementation Scenario 2 Shared Control Before answering the following questions, imagine that you normally access your bank accounts through your bank s automated banking machines (ATM). In an effort to enhance security, your bank has just decided to discontinue use of debit cards with PINs at ATMs and now only uses biometric identity authentication. Now your identity is authenticated through the use of your fingerprint (as biometric information). When you enroll in this service, an electronic copy of your fingerprint biometric information is captured. However, only half of this electronic copy of your fingerprint is stored at your bank while the other half is stored on your debit card that you keep (without the other half, each of these portions is useless on its own). To access your bank accounts at an ATM, you must insert your debit card into the ATM and place your index finger on a biometric scanner which scans your fingerprint. The system then retrieves the portion of your biometric stored at your bank and combines it with the portion stored on your debit card to reconstruct a full electronic version of your fingerprint. The system then verifies whether your scanned fingerprint matches this reconstructed electronic version of your fingerprint biometric before giving you access to your bank accounts. Your scanned fingerprint during this visit to the ATM is destroyed after you complete your transaction. Common Methods Bias (Study 2) Common method bias (CMB), or variance, occurs when both the independent and dependent variables are collected at the same time and from the same source (Podsakoff et al. 2003). In order to assess common method bias, Harman s one-factor test (Podsakoff et al. 2003) was conducted. An exploratory factor analysis was run on all the 31 items in our measurement model. No single factor emerged from the unrotated factor solution and the first factor explained less than half of the variance in the variables (44.1%). We also applied the marker variable technique to further test for CMB (Lindell and Whitney 2001). A marker variable (Desire for Information Control) was implemented in the study that was theoretically unrelated to at least one other variable in the study (Convenience). CMB can be assessed based on the correlation between the marker variable and the theoretically unrelated variable (Malhotra et al. 2006). This value (0.004) was assumed as the method variance, was parceled out from the other correlations, and the analysis was rerun. The results indicate no significant difference between the original correlation estimates and the adjusted ones. Given the results of the Harman s one factor test and the market variable test, we conclude that common method bias is not substantial in our data and, therefore, is not likely contaminating the results.

5 Table B2: Construct Measures* Familiarity with Biometrics Technology [Gefen (2000)] FAM1: I am familiar with the use of biometrics for identity authentication purposes FAM2: I am familiar with finger print scanning as a means of authenticating identity FAM3: Overall, I am familiar with biometrics technology Account Security [Norman et al. (2003)] EFF1: Using a fingerprint biometric to access my bank account through ATMs would reduce the risk of my bank account being compromised EFF2: Using a fingerprint biometric to access my bank account through ATMs would reduce the risk of someone fraudulently accessing my bank account EFF3: Using a fingerprint biometric to access my bank account through ATMs would reduce my vulnerability to someone fraudulently accessing my bank account EFF4: Overall, using a fingerprint biometric to access my bank account through ATMs would increase my account security Trust in the Bank [Source: Gefen et al. (2003)] Trust1: Based on my experience with my bank in the past, I know it is honest Trust2: Based on my experience with my bank in the past, I know it cares about its customers Trust3: Based on my experience with my bank in the past, I know it is not opportunistic Trust4**: Based on my experience with my bank in the past, I know it is predictable Trust5: Based on my experience with my bank in the past, I know it knows its market Perceived Control [Xu et al. (2011)] PCRL1: Given the scenario you read, how much control do you feel you would have over your biometric information? PCRL2: Given the scenario you read, how much control do you feel you would have over the amount of your biometric information collected by your bank? PCRL3: Given the scenario you read, how much control would you feel you have over who can get access to your biometric information? PCRL4: Given the scenario you read, how much control would you feel you have over how your biometric information is being used by your bank? PCRL5: Given the scenario you read, overall how much control would you feel you have over your biometric information?

6 Convenience [Source: Colwell et al. (2008)] CONV1: Given the scenario I read, I think that using a fingerprint biometric to access my bank account through and ATM would enable me to accomplish my banking more quickly CONV2: Given the scenario I read, I think I would be able to accomplish my banking more easily Privacy Concerns [Source: Pavlou et al. (2007)] PC1: Given the scenario I read, I would be concerned that my bank is collecting too much information about me PC2: Given the scenario I read, it would bother me that my bank asks me for my biometric information PC3: Given the scenario I read, I would be concerned about my privacy PC4: Given the scenario I read, I would have doubts as to how well my privacy is protected PC5: Given the scenario I read, I would be concerned that my biometric information could be misused PC6: Given the scenario I read, I would be concerned that my biometric information could be accessed by unknown parties Security Concerns [Source: Pavlou et al. (2007)] SC1(R): Given the scenario I read, I would feel secure providing biometric information to my bank SC2**: Given the scenario I read, the potential security issues of sharing my biometric information with my bank would be a major obstacle to my using this form of identity verification SC3(R): Given the scenario I read, I believe that, overall, banks are a safe place to keep biometric information SC4(R): Given the scenario I read, I would feel totally safe providing biometric information to my bank Attitude [Source: Morris and Venkatesh (2000)] ATT1: Given the scenario I read, I think that using a fingerprint biometric to access my bank account through an ATM would be a good idea ATT2: Given the scenario I read, I think that using a fingerprint biometric to access my bank account through an ATM would be a wise idea ATT3: Given the scenario I read, I like the idea of using a fingerprint biometric to access my bank account through an ATM ATT4: Given the scenario I read, I think that using a fingerprint biometric to access my bank account through an ATM would be pleasant

7 * All items in the questionnaire were constructed as statements on a 7-point Likert scale. ** Denotes an item that was dropped in analysis (R) Denotes a reverse coded item

8 Table B3: Initial Indicator Loadings and Cross-Loadings (Study 2) Items a ATT ASEC FAM CONV PCTRL PC SC TRUST ATT ATT ATT ATT ASEC ASEC ASEC ASEC FAM FAM FAM PCTRL PCTRL PCTRL PCTRL PCTRL PRIV PRIV PRIV PRIV PRIV PRIV CONV CONV SC SC SC SC TRUST TRUST TRUST TRUST TRUST a Item legend: ATT: Attitude towards adopting biometric identity authentication technology at ATMs; ASEC: Perceived efficacy of biometric identity authentication technology for keeping one s bank account safe; CONV: Convenience of biometric identity authentication technology at ATMs; PC: Perceived Privacy Concerns with using biometric identity authentication technology at ATMs; SC: Perceived Security Concerns with using biometric identity authentication technology at ATMs; FAM: Perceived Familiarity with biometric identity authentication technologies; Trust: Trust in one s bank; PCTRL: Perceived personal Control over ones biometric data.

9 Table B4: Indicator Descriptive Statistics, Loadings and Significance (Study 2) Scale Item a Item Mean Item S.D. Item Loading T-Statistic Significance ATT p < ATT p < ATT p < ATT p < ASEC p < ASEC p < ASEC p < ASEC p < FAM p < FAM p < FAM p < PCTRL p < PCTRL p < PCTRL p < PCTRL p < PCTRL p < PRIV p < PRIV p < PRIV p < PRIV p < PRIV p < PRIV p < CONV p < CONV p < SC p < SC p < SC p < TRUST p < TRUST p < TRUST p < TRUST p < a Item legend: ATT: Attitude towards adopting biometric identity authentication technology at ATMs; ASEC: Perceived efficacy of biometric identity authentication technology for keeping one s bank account safe; CONV: Convenience of biometric identity authentication technology at ATMs; PC: Perceived Privacy Concerns with using biometric identity authentication technology at ATMs; SC: Perceived Security Concerns with using biometric identity authentication technology at ATMs; FAM: Perceived Familiarity with biometric identity authentication technologies; Trust: Trust in one s bank; PCTRL: Perceived personal Control over ones biometric data.

10 Table B5: Mediation Effects (Study 2) IV Mediator DV Direct path Direct path Sobel Prob. Mediation (no mediation) (with mediation) Stat. FAM ASEC ATT < Full FAM CONV ATT < Partial TRUST ASEC ATT < Partial TRUST CONV ATT < Partial TRUST SC ATT < Partial PCTRL PC ATT < Partial PCTRL SC ATT < Partial