Personhood Credentials: Human-Centered Design Recommendation Balancing Security, Usability, and Trust

2025-02-22

AI Summary

This study addresses the imbalance among privacy, security, and usability in Personhood Credential (PHC) systems by investigating users’ perceptions and preferences regarding trusted issuers, biometric reliance, and centralized versus decentralized architectures. Employing competitive analysis, semi-structured online interviews with 23 Western users, and think-aloud conceptual workshops, it systematically identifies, for the first time, critical user misconceptions about PHC privacy guarantees. The work proposes three human-centered design principles—periodic biometric re-authentication, time-bound credential validity, and visualizable manual verification—and derives 12 actionable design recommendations. Notably, “government-regulated issuance” and “dual-source verification combining physical ID with biometrics” achieved high user acceptance, significantly enhancing trust and willingness to adopt PHC systems. Findings bridge a key gap between technical PHC design and real-world user cognition, offering empirically grounded guidance for privacy-preserving, trustworthy digital identity frameworks.

Technology Category

• Humans and AI: Intelligent User Interfaces
• Computer Vision: Bias, Fairness & Privacy
• Application Domains: Humanities & Computational Social Science

Application Category

• User Modeling, Personalization and Recommendation: User privacy protection in personalized systems
• Security and Privacy: Data transparency and provenance
• Responsible Web: Consent frameworks and practices on the web

Abstract

Building on related concepts, like, decentralized identifiers (DIDs), proof of personhood, anonymous credentials, personhood credentials (PHCs) emerged as an alternative approach, enabling individuals to verify to digital service providers that they are a person without disclosing additional information. However, new technologies might introduce some friction due to users misunderstandings and mismatched expectations. Despite their growing importance, limited research has been done on users perceptions and preferences regarding PHCs. To address this gap, we conducted competitive analysis, and semi-structured online user interviews with 23 participants from US and EU to provide concrete design recommendations for PHCs that incorporate user needs, adoption rules, and preferences. Our study -- (a)surfaces how people reason about unknown privacy and security guarantees of PHCs compared to current verification methods -- (b) presents the impact of several factors on how people would like to onboard and manage PHCs, including, trusted issuers (e.g. gov), ground truth data to issue PHC (e.g biometrics, physical id), and issuance system (e.g. centralized vs decentralized). In a think-aloud conceptual design session, participants recommended -- conceptualized design, such as periodic biometrics verification, time-bound credentials, visually interactive human-check, and supervision of government for issuance system. We propose actionable designs reflecting users preferences.

Problem

• Developing user-friendly Personhood Credentials (PHCs)
• Balancing security, usability, and trust in PHCs
• Addressing user perceptions and preferences in PHC design

Innovation

• Decentralized identifiers for personhood verification
• User-centered design through interviews
• Periodic biometrics for secure credentials