"Throughout the computing experience, users frequently encounter security authorization dialog boxes in the form of Yes/No questions, which we call Decision Based Authorization systems. These systems are confusing to users who may not be technologically adept enough to make a correct \Allow" or \Deny" decision. In this paper, we propose an Intention Based Authorization system in which the user is presented with a list of intentions and he/she selects the intention that is closest to his/her actual intention. Only if the users intention matches that of the application, then the application is authorized to perform the action that it requested."--From abstract.
Read
