Search

[ES] El boom de internet ha marcado el comienzo de la era digital y ésta ha traído consigo un desarrollo espectacular de las tecnologías de la información y de las comunicaciones, entre las que la criptografía es la reina. La criptografía de clave pública actual está basada principalmente en dos problemas que la comunidad criptográfica asume como difíciles: la factorización y el logaritmo discreto. Sin embargo, si se llegase a construir un computador cuántico lo suficientemente potente, esta dificultad no sería tal. Así pues, la computación cuántica pondría en un grave aprieto a la criptografía moderna y, puesto que la trayectoria reciente del campo sugiere que ésta podría convertirse en una realidad en un futuro no muy lejano, la comunidad criptográfica ha comenzado a explorar otras opciones para estar lista en caso de que se logre construir un computador cuántico eficiente. Esto ha dado un im- pulso a lo que se conoce como criptografía post-cuántica, aquella cuya dificultad no se vería afectada por este nuevo paradigma de computación y que está basada en los llamados problemas resistentes a la computación cuántica. La criptografía post-cuántica ha suscitado mucho interés recientemente y actualmente está en proceso de estandarización, por lo que en el momento de iniciar esta tesis resultaba relevante estudiar problemas supuestamente resistentes al computador cuántico. La parte central de esta tesis es el análisis de la dificultad del problema de los subespacios ocultos (HSP por sus siglas en inglés) y del problema de los subespacios ocultos con ruido (NHSP), dos problemas resistentes al computador cuántico según sus autores. Además de la relevancia que su supuesta resistencia a la computación cuántica les confiere, estos dos problemas son también importantes porque en su dificultad se sustenta la seguridad de las dos versiones del primer esquema de dinero cuántico de clave pública que cuenta con una prueba de seguridad. Este primer esquema es el de Aaronson-Christiano, que implementa dinero cuántico — un tipo de dinero que explota las leyes de la mecánica cuántica para crear dinero infalsificable — que cualquiera puede verificar. Los resultados obtenidos acerca de la dificultad del HSP y del NHSP tienen un impacto directo sobre la seguridad del esquema de Aaronson-Christiano, lo cual nos motivó a centrar esta tesis en estos dos problemas. El Capítulo 3 contiene nuestros resultados acerca del problema de los subespacios ocultos y está fundamentalmente basado en nuestro trabajo [Conde Pena et al.,2015]. Los autores del HSP lo definieron originalmente sobre el cuerpo binario, pero nosotros extendemos la definición a cualquier otro cuerpo finito de orden primo, siempre considerando que la instanciación es la que los autores proponen. Después de modelar el HSP con un sistema de ecuaciones con buenas propiedades, usamos técnicas de criptoanálisis algebraico para explorar el sistema en profundidad. Para el HSP sobre cualquier cuerpo que no sea el binario diseñamos un algoritmo que resuelve de manera eficiente instancias que satisfacen una cierta condición. Utilizando técnicas distintas, construimos un algoritmo heurístico, sustentado por argumentos teóricos, que resuelve eficientemente instancias del HSP sobre el cuerpo binario. Ambos algo-ritmos comprometen la dificultad del HSP siempre que las instancias del problema sean escogidas como Aaronson-Christiano proponen. Como consecuencia, nuestros algoritmos vulneran la seguridad de la versión del esquema sin ruido. El capítulo 4 contiene nuestros resultados acerca del problema de los subespacios ocultos con ruido y está fundamentalmente basado en nuestro trabajo [Conde Pena et al., 2018]. Al igual que con el HSP, extendemos la definición del NHSP a cualquier otro cuerpo de orden primo y consideramos instancias generadas como especifi- can Aaronson-Christiano. Mostramos que el NHSP se puede reducir al HSP sobre cualquier cuerpo primo que no sea el binario para ciertas instancias, mientras que el NHSP sobre el cuerpo binario se puede resolver con una probabilidad mayor de la asumida por los autores en la conjetura sobre la que la seguridad de su esquema con ruido se sustenta. Aunque nuestros resultados se obtienen desde un punto de vista puramente no cuántico, durante el desarrollo de esta tesis otro autor demostró que existe una reducción cuántica del NHSP al HSP también en el caso binario. Por tanto, la dificultad del NHSP y la seguridad del esquema de Aaronson-Christiano con ruido se han visto comprometidas por nuestros descubrimientos acerca del HSP.

Grounding the development of mobile and ubiquitous services on actual needs and behaviors of users, rather than on designers intuition, is a well established tradition today. However, gathering data about users in different contexts usually result in large amounts of data that have to be analyzed and translated into requirements. This is a crucial process in the development cycle and its outcome is usually very dependent on the preconceptions of the developers or researchers. Despite this strong element of subjective influence the translation process is seldom made transparent. Nor are the user needs related to psychological discussions and existing taxonomies. The aim of this paper is, therefore, to contribute to the field by presenting a process for translating user expressions to needs and later to requirements using Reiss taxonomy of human needs as a theoretical base. Using this translation process we were able to identify two hierarchical levels of needs: needs of a service and needs in the service. The process also made it possible for us to see needs hidden in general expressions and to reformulate them accordingly. Further, it generated a clear traceability from user expressions to requirements, and finally, confirmed the importance of focusing on, and understanding, the situated needs of users. Validerad; 2010; 20070921 (biggan)

Distance education in information security has unique requirements in comparison to on-campus education. For instance, an online InfoSec lab is required to provide hands-on education to distance students while development and operation of a lab is a non-trivial problem. There is a need to understand the nature of the online InfoSec labs as ensemble artifacts, and just a black-box tool’s view is not enough. This article suggests a conceptual model to explain the ensemble view of the online InfoSec lab. In doing so, the paper makes two specific contributions: First, it conceptualizes the online Information Security (InfoSec) lab as an ensemble artifact so that we can unfold the black-box view of an InfoSec lab and understand the important building blocks (entities of the lab) and their interrelationships. Second, it suggests design principles to implement the conceptual model of an InfoSec lab. Validerad; 2016; Nivå 1; 20140925 (sariqb)

All around the globe the concept of smart cities is growing at fast pace meaning that an increasingly amount of people are moving to cities, which causes problems for cities with energy supply, waste management, transportation, environmental issues and security to mention a few. To answer to these challenges, the concept of smart cities emerges referring to cities that invest in human and social capital, and traditional (transport) and modern (ICT) communication infrastructure that will fuel sustainable economic growth and a high quality of life, with a wise management of natural resources, through participatory governance. Hence, for cities to be smart they cannot only install technologies, but they also need to invest in human capital and sustain a high quality of life. It is therefore important that solutions being implemented in smart cities answer to the needs and expectations citizens have as well as protect them from being exposed or forced into unwanted situations. In earlier studies it has become clear that people often are worried about their privacy due to our life being so easy to track and technologies becoming increasingly ubiquitous and pervasive. In this paper we will report on a study carried out with focus on understanding citizens view on information privacy concerns related to an intelligent acoustic smart city solution for audio monitoring. By means of this technology it was possible to detect events such as sirens, recognise speech commands and detects presence in public buildings. Audio monitoring is a relatively new and under research phenomena. Hence, in this paper an analysis of a survey on information privacy concerns, carried out with 1000 respondents around Europe, is presented and discussed. The basic findings from this study indicate that people have information privacy concerns related to this type of solution on a general level. However, when being more thoroughly introduced to the solution and its usage area, the citizens also became more positive towards the solution. The study also identified design principles that aims to support the design and implementation of smart city solutions that take not only users, but also affectees perspectives into consideration. Validerad; 2016; Nivå 1; 20151208 (stahlis)

Although emerging organizational knowledge systems, such as social media, are widely researched, related knowledge security risks have received less attention. Traditional information security management models tend to concentrate on the technological viewpoint to secure existing information assets. However, the use of contemporary approaches for knowledge creation and sharing offer new important possibilities for making use of internal and external knowledge. Simultaneously, their implementation involves changesin technologies, as well as a change in work processes and communications. Hence, knowledge security risk management should be developed from the current focus on relatively static containers and information assets toward more proactive management of the potential future risks of knowledge sharing. This paper introduces a proactive process for managing knowledge security risks and reports experiences of its use by professionals with experience in various topics of information and knowledge security. Validerad; 2016; Nivå 1; 20150113 (terpai)

Interoperability of e-government systems is suggested to increase transparency, efficiency, effectiveness, and customer service in the public sector. Generic data models are often seen as a way for achieving especially semantic interoperability. To assess how the contemporary data models support semantic egovernment interoperability, we reviewed literature on data models suggested for the public sector in light of four features: standard modelling language, entityrelationship modelling, vocabulary for data exchange and methodology. The review contributes previous research by introducing a four-feature framework for assessing capability of e-government data models to enhance interoperability and by providing an up-to-date review of the generic data models for this purpose. Godkänd; 2014; 20141105 (terpai)

Within agile software development there is a growing concern with how development organizations can integrate usability work into agile practices. The concern occurs as frustration experienced in practice by agile developers and usability designers, and it also occurs as a gap in the research literature. With this paper we report from a case study in a software company that is committed to agile development, to usability work, and to their integration. The theoretical starting point is an initial framework that has been elicited from the research literature; and the paper’s contribution is an extension and modification of the initial framework based on our case study results. The resulting framework points to three enablers (attitudes, compromises, skills), three tasks (upfront design, low-fi prototyping, iterative evaluating), and three alternative modes of collaboration/work organization (parallel, embedded, fully integrated) in agile usability practices. In addition, end-user involvement may vary. The paper contributes by extending existing frameworks on integration and thus providing better explanations for practitioners and researchers of integration of usability. Godkänd; 2014; 20141021 (terpai)

Contemporary methods for assessing information security risks have adopted mainly technical views on the information and technology assets. Organizational dynamics of information management and knowledge sharing have gained less attention. This article outlines how an information security risk assessment method can be elaborated using knowledge-centric analysis of information assets. For this purpose, we suggest the use of a genre-based analysis method for identifying organizational communication patterns, through which organizational knowledge is shared. Initial experiences of the method try-outs by three experienced information security professionals are discussed. The article concludes with a look at the implications of a genre-based analysis of knowledge assets for future research and practice. Godkänd; 2014; 20130915 (danh); Konferensartikel i tidskrift

Corruption is arguably one of the main hindrances to development. In their effort to combat corruption, governments in developing countries turn to information technology to enhance transparency in decision making. However, implementation of an information system in this context is not straightforward. Premised upon institutional theory, this interpretive case study traces the role of institutional actors in the institutionalization of an eProcurement system in Indonesian local government. It draws on different streams of research on institutional work to develop an interpretive lens to understand what institutional actors do to steer the institutionalization process. It identifies a set of institutional work carried out by them in disrupting the old institution, and, creating and maintaining the new one. The findings give a better understanding of the institutionalization process. It provides a fine-grained conceptualization of forms of institutional work, and its constituent dimensions. Godkänd; 2014; 20140113 (mausei); Konferensartikel i tidskrift

Godkänd; 2014; 20140625 (terpai)

There is a lack of theoretical understanding of information security risk practices. For example, the information security risks related literatures are dominated by instrumental approach to protect the information assets. This approach, however, often fails to acknowledge the ideologies and consequences of risks practices. In this paper, through critical analysis, we suggest various perspectives to advance the understanding in this regard. In doing so, we present our argument by reviewing the security risk literature using Habermas’s concept of four orientations: instrumental, strategic, communicative and discursive. The contribution of this paper is to develop conceptual clarity of the risk related ideologies and its consequences on emancipation. Godkänd; 2014; 20130912 (devtha); Konferensartikel i tidskrift

In response to large emergencies, emergency managers deal with unknown situations characterized by complexity and uncertainty, so-called wicked problems. Existing tabletop exercises are used to train, test and exercise emergency managers but do table top exercises mirror the wickedness? A pilot study where emergency managers were interviewed about the use of tabletop exercises has been carried out. The pilot study and traditional tabletop exercises are analyzed through the lens of wicked problems. The result shows that tabletop exercises partly mirrors wicked problems but cannot handle every aspect of wicked problems. The main reasons for this are, that the planning of tabletop exercises in which the problems and solutions are known beforehand tames the problems and that focusing on the use of plans entails leaving unplanned problems unaddressed. I propose three design ideas to be used when designing tabletop exercises to better prepare emergency managers for wicked problems. First, focus on unsolved (wicked) problems instead of on problems already handled in plans and allow participants to identify them. Second, let participants tame the problems during the exercise instead of taming the problems ahead of time planning the exercises. Third, use existing plans and lessons learned from previous emergencies, and resolve the problems in collaboration. Godkänd; 2014; 20140117 (svantee); Konferensartikel i tidskrift

Public procurement constitutes a large part of the market in many countries, and it has the potential of playing an important role in stimulating communities and serving policy goals. With this in mind the governments have set regulations for public procurement. Procurement of Information Systems is especially challenging due to the complexity of procuring unknown technology and the importance an information system has for different stakeholders in an organization. Public procurement of information systems (IS) and services provides several challenges to the stakeholders involved in the procurement processes. However, these are not well established or understood, and there is a knowledge gap that needs to be covered. This paper presents results from a Delphi study, which involved 46 experienced procurement managers, chief information officers, and vendor representatives in the Norwegian public sector. The participants identified 98 challenges related to IS procurement, and subsequently ranked the relative importance of the top issues. The study supports findings from previous research related to diverging stakeholder goals; challenges in balancing between objectives; in requirement specifications; and in too narrow cost focus. In addition to providing empirical confirmation of these previous propositions the study revealed new findings, such as benefits realization in IS procurement; coordinating and standardizing public procurement processes; complex and constraining government regulations; issues of technological integration and compatibility; and inter-municipal cooperation. Developing clear requirements specifications stands out as critical for public sector officials. The results provide a rich overview of IS procurement challenges in the public sector in Norway, and may also give a good picture of challenges in other countries with similar procurement regulations. Godkänd; 2013; 20131209 (terpai)

The paper outlines a model for theorizing about development practices, especially taking into account the intended rationale for, actual realization of, and resulting impacts from using particular practices in varying contexts. This includes discussing of two different modes of thinking through which we can approach software development practices: technical rationality vs. reflection-in-action. By framing development practices taking place in software organizations as organizational practices, the paper also sketches previous practice research in organizations, which has profoundly informed this work. Finally, the paper compares the SEMAT approach to the outlined model, and suggests a few points of critique and complementary elements to the SEMAT initiative, especially in its capabilities towards theorizing. Godkänd; 2013; 20130523 (terpai)

Integrating social media into the innovation process can offer great opportunities for organizations striving for user involvement. Due to the spread of social media in all types of user groups it is, today, possible to engage users all around the world in innovation activities simultaneously. But even if social media usage in innovation activities offers great opportunities, it can be challenging to know how to use it to engage users in these processes. In this paper, the purpose is to discuss and reflect on challenges and opportunities the use of social media for user involvement has. The study reported on is based on a university course in which the students had the assignment to use social media as a tool in their innovation process. The results in this paper show seven challenges that are important to handle when planning and carrying out a user involvement process by means of social software. These challenges relates to issues such as, for instance, the selection of social software to use, the timing of the involvement activities and the maturity of the innovation. Godkänd; 2012; 20121210 (stahlis)

The most currently popular method for assessing trust in online social networks is Trust Game. The major studies in this area have established results formed into hypotheses for the effects of a number of network parameters on the extent to which individuals would place trust on each other. However, hypotheses for the effects of a few number of network parameters, such as Indegree, are not deducible since the restrictive game-theoretic assumptions that are imposed into the model do not let any such evidence available. To relax the game-theoretic assumptions, we develop a model for games with incomplete information, based on a game-theoretic model developed by Buskens (1998), and conduct a series of computer simulation of a model of Iterated Heterogeneous Trust Games (IHTG). We compare the results with those of Buskens’ (1998) model and introduce Link-Strength as a new network parameter to investigate. Our results show a positive effect of both Indegree and Link-strength on the level of trust in a noisy environment. In addition, we come to a conclusion that current models can be fooled by the existing noise in the context of information transmission, such as inactive users in our case. Godkänd; 2012; 20120808 (ysko)

The uptake of Internet-enabled multifunctional mobile devices is an emerging area within software development. This article examines the under-researched area of mobile application developers and considers some of the current challenges facing this sector within the IT workforce. We frame our study within the wider context of the evolution of the industry in order to illustrate how the emerging business model of mobile application development shapes the everyday practices of systems developers, specifically those working on iPhone and Android platforms. Drawing on qualitative research carried out in Sweden, the UK, and the U.S., we analyze developers’ experiences in order to illustrate how they respond and adapt to the turbulent environment of the IT sector. Validerad; 2011; 20111214 (biggan)

A rapid growth of technologies supporting user interaction on the Internet, such as social networking sites and other virtual communities, can be seen today. These virtual communities have been shown to be of great value to companies that want to involve users in their innovation processes. However, in order to guide organisations on how to utilise their innovation intermediary communities, more knowledge is needed regarding who they are and their motivational drivers for participating in a community. The aim of this paper therefore is to explore who the users are and what motivates them to contribute to innovation processes in an innovation intermediary community. The main findings of our study indicate that users' motivation to participate is influenced by community type as well as technology adoption type. This study show that in innovation intermediary communities, one important motivational factor for users is learning. Validerad; 2011; 20101130 (ann_joh)

Massively parallel architectures are gaining momentum thanks to the opportunities for both high performance and low-power consumption. After being a matter for experiments in academia, manycores are now in production and industries with products that rely on high performance, for example, in the field of telecom and radar, are in the process of adopting them. In order to encourage adoption, there is a need for compiler technologies that can make appropriate use of the opportunities of these architectures. Programming languages with constructs that the compiler can easily identify as parallel are a reasonable starting point for these technologies. For example, in CAL (Caltrop Actor Language) [1], a program is organized as a network of actors and these actors can be executed in parallel. As a first approach, if there were enough processors for all actors in the network, each actor could be mapped on to one processor. Writing a compiler is a comprehensive software engineering project and there are a number of tools, data structures and algorithms that have to be chosen and that facilitate the task. Some tools are lexer and parser generators, some data structures are abstract syntax trees and intermediate representations for code generation, some of the algorithms are for analyzing properties of the program and for translating between different data structures. LLVM (Low Level Virtual Machine) [7] is a compiler infrastructure that offers a well defined language and target independent intermediate representation for programs. LLVM also provides compile-time, link-time and run-time optimization. This report discusses the front end of a compiler for CAL, including generation of code to LLVM. The work described in this report translates CAL programs into LLVM's intermediate representation and includes a runtime system that handles intercommunication links between actors and actor scheduling. This is an intermediate step in generating LLVM code for parallel architectures. With this compiler, application developers that need to evaluate different parallel platforms will be able to have their applications written in CAL and only the back-end, form LLVM to the platform, will need to be re-programmed.

This paper summarizes work done in a PhD study on metadata driven imitation for preservation of visual appearance of web forms and/or receipts used in eGovernment services. The research done suggests that metadata, and e.g. a background image, can be used to describe the visual appearance of documents, and that this also facilitates having the data separated from the visual appearance. This separation provides the ability to present the material to the users in different ways, depending on their needs and requirements, while retaining the ability to present the object in its original look. The original look is seen as the most versatile way of presenting the material, giving the most fruitful base of interpretation and understanding, but if the users where familiar with the material, they liked the ability to have the material presented in simplified ways, where many of the sometimes "distracting" visual attributes where removed. In general, preserving the visual appearance and keeping the data separated from the form, was seen as useful and beneficial to both the users and the preservation professionals. As always in digital preservation contexts, documentation of this process and the relation between the metadata describing the visual appearance and the data of the document, is of high importance. Godkänd; 2010; 20101115 (jorgen_n)

Innovation has come to replace efficiency and quality as the main source of competitive advantage for firms from the 1990s onwards. Hence, to an increasing extent, organisations need to consider in which ways they can achieve higher levels of innovative thinking and flexibility. Moreover, the creation of today's complex systems of products, services and processes requires a merging of knowledge from diverse perspectives, e.g. disciplinary or skill-based. One common way to meet these challenges is to set up boundary crossing collaborative groups. The idea is that innovative processes can be fertilised by having people with differentiated knowledge collaborating. Knowledge necessary for innovation and product/service development is, therefore, increasingly distributed both within and across organisations or other types of stakeholders, posing new challenges. To manage these challenges one new approach is evolving, called Living Labs. In this paper we present an innovative development process of a mobile service, taking a Living Lab approach. This paper focus on the effects of openness in an innovation process supported by a Living Lab approach for development of mobile services. The study shows that the innovation process was remarkably shortened in the open and multi-perspective process. Godkänd; 2010; 20101130 (ann_joh); Invalid ISBN: 978-87-992586-1-7

Awareness and understanding of strategic IT- and information security appears to be a low priority amongst senior managers although this falls within their responsibilities. In this paper a tested and confirmed model used to explain strategic IT- and information security is described. The model has been iteratively developed and applied in development, implementation or training in five different organizations. In these five cases, senior management awareness and understanding of strategic IT- and information security was verified as being very low. The model was originally developed to explain IT- and information security to corporate senior management. It has been adapted for use in the public sector by changing some of the terminology to match that used within the public sector. The model may also be used for training purposes, with regards to senior management or personnel in strategic IT- and information security. The importance of senior management ownership and care for strategic elements of the organization's security programme is also discussed and the conclusion drawn is that the operative levels should be coordinated by one or a few members of the senior management team. Validerad; 2009; 20090206 (jlm)

Det finns idag stora problem med bevarande av digitalt material. Centrum för långsiktigt digitalt bevarande är en kontaktyta för samverkan runt lösningar på dessa problem och en av de tidiga aktörerna som arbetar med FoU i samverkan med sina partners inom detta område. Artikeln beskriver hur etableringen av centret gått till och vad som krävs för att förverkliga och konsolidera en centrumbildning så att den kontinuerligt utvecklar ny vetenskapligt grundad kunskap som löser problem för parter och andra intressenter. Godkänd; 2009; 20090609 (ysko)

This handbook aims to take the mystery out of ICT policy and make it easier to understand. In particular, it aims to build the capacity of those who want to understand more about the issues surrounding policy on ICT development and regulation, to grasp the policy process, and to become more involved as informed participants. Denna handbok syftar till att ta hemligheten av IKT och göra det lättare att förstå. I synnerhet syftar det till att bygga upp kapaciteten hos dem som vill förstå mer om frågor kring politik för IT-utveckling och reglering, för att förstå den politiska processen, och att bli mer inblandade informerade deltagarna. Godkänd; 2009; 20100223 (avri)

Internet security is frequently discussed, but if you ask someone what they mean by it, you may get many different and sometimes contradictory answers. Security has become an overloaded term used by many in various differing ways. Internet Security ofta diskuteras, men om du frågar någon vad de menar med det, kan du få många olika och ibland motstridiga svar. Säkerhet har blivit en överlastad term som används av många i flera olika sätt. Godkänd; 2007; 20100223 (avri)

Syfte med vårt arbete är att identifiera och analysera framgångsfaktorer vid en kommuns förändringsarbete mot en modern, effektiv och medborgarorienterad förvaltning, en så kallad 24-timmarskommun. För att nå detta syfte har vi valt att göra en fallstudie av Mjölby kommuns arbete med utvecklingen av 24-timmarskommun. Fältarbetet har utförts med hjälp av kvalitativa semistandardiserade intervjuer med ämnesområdets relevanta personer inom kommunen. Analys av empiridata har genomförts med hjälp av förändringsanalys enligt SIM-metoden. Resultat av vår undersökning visar att införande av 24-timmarskommun bör ses som en del av kommunens förändringsarbete mot en modern förvaltning. För att detta arbete ska vara framgångsrikt krävs det strategiskt ledarskap som ska ta fram, förankra och kommunicera visioner och målbilder av den moderna förvaltningen i organisationens alla delar. Samarbete, systematisk process- och brukarorienterad verksamhetsutveckling och den professionella kompetensen utgör en garanti att uppställda målen och visioner for 24-timmarskommun kan förverkligas. I detta sammanhang bör IT ses som en strategisk resurs och den gemensamma nämnaren för alla ovan nämnda förändringsfaktorer vid utvecklingen av 24-timmarskommun.

Implementeringen av ett ERP-system ses inte längre som en ren informations¬teknisk angelägenhet utan en förändring som påverkar hela verksamheten. En implementering, ur vårt perspektiv, är en införandeprocess som har sin början i organisationens motiv till en implementering, valet av system och val av leverantör. Implementeringens omfattning sträcker sig i vår studie till den dag hela systemet tas i bruk. Forskningsfrågor som denna uppsats behandlar är vad som karaktäriserar en implementering av ERP-systemet SAP R/3 samt vad som innefattas i implementeringsbegreppet. Uppsatsen har utförts genom en komparativ kvalitativ fallstudie där data in¬hämtats genom semistrukturerade intervjuer. Vårt teoretiska fundament utgår ifrån åtta teoretiska sektioner och benämns som ”oktanten”. De områden som ingår i vår oktant är strategi, projekt, process och funktion, standardsystem, organisationsanpassning, systemanpassning, utbildning samt testning och fel¬sökning. Valet av teoretiska aspekter täcker upp de mest väsentliga områden som lämpar sig bäst för vår fokusering av ämnet och bidrar till att besvara vår andra forskningsfråga. Vi har i denna studie valt att studera hur två organisationers implementering av SAP R/3 har gått till, vad resultatet har varit och varför det blev som det blev. Resultatet, som gäller i båda de studerade fallen, visar att en implementering karaktäriseras av fyra perspektiv som avser strategi, innovation, kommunikation och samarbete. Utöver de karaktäriserande perspektiven utgörs särskilt viktiga aspekter inom processbearbetning. Resultatet utifrån de fyra perspektiven beskrivs mer utförligt men kortfattat nedan. Strategi: underskattning av planerad resursförbrukning och överskridande av deadlines samt bristande stöd från ledningen. Innovation: motiveringssvårigheter vid förändring hos användarna. Kommunikation: särskilt lyckad placering av projektgrupper på samma geografiska plats. Samarbete: otillräcklig utbildning och brist på utbildningskompetens, stort supportbehov samt överlåtande av arbetsansvar till konsulter. Implementing an ERP-system is no longer considered an information technology concern purely but a change affecting the whole organization. An implementation is, by our definition, an initiation process starting with the motives of the organization to execute the implementation, choice of system and choice of vendor. The scope of the implementation, in our study, stretches until the day the system goes live. This thesis attends following research questions: what characterises implementation of the ERP-system SAP R/3 and what is included in the concept of implementation? The thesis has been performed through a comparative qualitative case study where data has been collected during semi-standard interviews. Our theoretical foundation is divided into eight sectors forming an octant all together. Areas composing our octant are strategy, project and function, standard system, organizational adoption, system adoption, education and testing and error detection. The choice of theoretical aspects covers the most vital areas suitable for our focus on the subject and contributes to answering our second research question. In this study we have chosen to examine the process of two organizations implementations of SAP R/3, the outcome and why it resulted in the way it did. The result shows that, for both cases, a implementation is characterised of four perspectives concerning strategy, innovation, communication and cooperation. In addition to the characterised perspectives certain aspects of process re-engineering are particularly important. The result out of the four perspectives is more detailed but briefly describes bellow. Strategy: underestimation in consumption of resources and exceeding deadlines along with lack of top management support Innovation: difficulties motivating users for the change. Communication: exceptional success in placing members of the projects at same geographical location. Cooperation: insufficient level of education, lack of educational competence, great need of support and responsibility of work delegated to consultants

The vision of pervasive computing promises a shift from information technology per se to what can be accomplished by using it, thereby fundamentally changing the relationship between people and information technology. In order to realize this vision, a large number of issues concerning user experience, contextual change, and technical requirements should be addressed. We provide a design rationale for pervasive computing that encompasses these issues, in which we argue that a prominent aspect of user experience is to provide user control, primarily founded in human values. As one of the more significant aspects of the user experience, we provide an extended discussion about privacy. With contextual change, we address the fundamental change in previously established relationships between the practices of individuals, social institutions, and physical environments that pervasive computing entails. Finally, issues of technical requirements refer to technology neutrality and openness--factors that we argue are fundamental for realizing pervasive computing. We describe a number of empirical and technical studies, the results of which have helped to verify aspects of the design rationale as well as shaping new aspects of it. The empirical studies include an ethnographic-inspired study focusing on information technology support for everyday activities, a study based on structured interviews concerning relationships between contexts of use and everyday planning activities, and a focus group study of laypeople’s interpretations of the concept of privacy in relation to information technology. The first technical study concerns the model of personal service environments as a means for addressing a number of challenges concerning user experience, contextual change, and technical requirements. Two other technical studies relate to a model for device-independent service development and the wearable server as a means to address issues of continuous usage experience and technology neutrality respectively. SICS dissertation: SICS-D-40.

Vi anser att eftersom affärssystem är generellt standardiserade, för att kunna användas hos ett flertal verksamheter, uppstår det en problematik. Vi har utfört en fallstudie av kvalitativ karaktär där syftet har varit att förtydliga och öka förståelsen för handlingsbarhet i affärssystem. Syftet har också varit att utvärdera ett affärssystem i en verksamhetskontext där vi har kunnat påvisa styrkor och svagheter i utvärderingsmetoder för handlingsbarhet. Vi har också utifrån det lämnat förslag på förbättringar som kan genomföras med de utvärderingsmetoder som ligger till grund för att utvärdera handlingsbarhet i ett affärssystem. Fokus i vårt uppsatsarbete har varit att kunna redovisa hur man kan gå tillväga för att åstadkomma handlingsbarhet i affärssystem. Resultatet visar att det som kännetecknar handlingsbarhet i affärssystem inte enbart är de handlingsbara kvalitetsidealen i affärssystemet. Det är även av stor vikt att ta hänsyn till flera viktiga faktorer som återspeglar sig inom användbarhetsområdet, som anpassning, användarvänlighet, kompetensutveckling med flera för att förstå orsakerna till att kriterierna inte uppfylls. Därmed blir graden av uppfyllelse för de faktorer som ligger till grund för att kvalitetsidealen infrias också ett tecken på handlingsbarhet. Resultatet visar också att det är flera viktiga steg som berör det mänskliga perspektivet och det systematiska för att få handlingsbarhet i ett affärssystem. Vi anser att det krävs att användarna blir väl förankrade med systemet och att kompetensutveckling sker för system och verksamhetens processer. Det är viktigt att det tillsätts en projektgrupp av användare som lär av varandra och överför kunskap till varandras verksamhetsområden. Vi har kommit fram till att det måste finnas ett tydligt processtänkande hos kund och användare samt konsult för att åstadkomma handlingsbarhet i ett affärssystem så att en god kvalitet i lösningen uppstår. Vi anser också att handlingsbarhetsbegreppet måste förtydligas och lämnar därför förslag på en ny definition av handlingsbarhet. Since enterprise systems generally are standardized in order to suit many companies and companies perform their business actions in different ways, our opinion is that this may lead to problems. We have performed a qualitative case study with a purpose to clarify and increase the understanding of actability in enterprise systems. The purpose has also been to evaluate an enterprise system in a specific business context. Therefore we have been able to point out strengths and weaknesses in the analytic framework of actability evaluation. The result of the study shows that several factors in the theory of usability also are important in order to achieve actability; the factors are among other things adaptation, usefulness, and competence development. Our proposal to improve the analytic framework of actability evaluation is that it has to be more exact in the use of techniques to collect the necessary basis to perform the evaluation. We also believe that the actabilityconcept has to be clarified; therefore we launch a new definition of the actability concept.

Organisationer ställs numera inför ökade krav på förändring och förnyelse i sitt affärsgörande. Det medför samtidigt nya krav på de affärsstödjande IT-system som befinner sig i organisationen vilka måste klara de högre kraven på anpassning i samband med en förändring av organisationen och affärsprocesserna. För att kunna uppnå de nya kraven på flexibilitet och lös koppling som verksamheten ställer på systemen realiserar nu alltfler service-orienterade arkitekturer vilket innebär att delarna i systemen utvecklas som tjänster, levererade efter behov och konsumerade på begäran. Affärsgörandet i den service-orienterade miljön kräver tillit till både miljön och transaktionerna. Vi menar att det är först när aktörernas trygghetsbehov är tillfredsställt som förutsättningar finns att aktörerna känner ett intresse eller en vilja att delta i den öppna miljöns olika affärsaktiviteter. Affärsvärdet som kommuniceras i miljöns interaktioner bestämmer till stor del säkerhetsbehovet och därmed säkerhetsarkitekturens utformning. För att kunna säkra den öppna miljö där tjänsterna brukas och affärsinteraktionerna sker ser vi ett behov av en säkerhetsmodell som är tillräckligt flexibel för att inte inverka hämmande på serviceorienteringens grundläggande principer såsom dynamik och flexibilitet i arkitekturen eller på autonomin för inblandade aktörer och tjänster. Denna modell kan genom att lyfta fram viktiga aspekter som bör beaktas utgöra ett stöd för dem som arbetar med att utforma, nyttja eller förvalta säkra service-orienterade affärsmiljöer. Vi har funnit att det finns en mängd olika service-orienterade affärsmiljöer vilka delar vissa grundläggande egenskaper. Ett exempel på denna typ av gemensam egenskap är lös koppling mellan autonoma och heterogena agenter. I affärsmiljön kan det råda förhållanden som sträcker sig från en-till-en ända till många-till-många.

Det talas om att utbrändhet är något som idag drabbar många i vårt land och att psykisk ohälsa är en vanlig orsak till långtidssjukskrivningar. Av denna anledning har vi funnit det intressant att undersöka vilka stressfaktorer som kan finnas i en modern organisation och, i egenskap av systemvetare, vilken roll informationssystem kan spela för uppkomsten av stress och utbrändhet. Den så kallade FP-gruppen är en avdelning vid Försäkringskassan i Linköping som i huvudsak arbetar med utredning och handläggning av försäkringsärenden som rör föräldrapenning, tillfällig föräldrapenning och aktivitetsstöd. Sedan några år tillbaka handläggs de flesta av dessa ärenden med hjälp av ett informationssystem, Ärendehanteringssystemet (ÄHS). Syftet med denna uppsats är att utreda hur medarbetarna vid FP-gruppen upplever sin arbetssituation, och med utgångspunkt från detta göra en utvärdering av denna arbetsplats med hjälp av tre olika teorier om uthållighet och arbetsrelaterad stress. Med stöd av dessa stressteorier och andra teorier om informationsteknikens påverkan på arbete och arbetskvalitet har vi också undersökt på vilket sätt ÄHS påverkar FP-gruppens arbetssituation. De stressteorier vi valt att utgå från – krav/kontroll-modellen, mismatch-modellen och arbetsstress-/balansmodellen – har det gemensamt att de har som utgångspunkt att stress uppstår då det råder obalans mellan en individ och dennes arbete eller arbetsmiljö. Var och en av dessa modeller står dock för ett unikt angreppssätt på problematiken. Med hjälp av dessa modeller har vi kunnat konstatera att det finns brister ur arbetsstresshänseende inom flera av de områden som dessa modeller fokuserar på. De tydligaste är kanske handläggarnas brist på inflytande och kontroll över den egna arbetssituationen, men vi har också kunnat konstatera andra stressfaktorer såsom relativt hög arbetsbelastning och bristande variation i arbetsuppgifterna. Det informationssystem som används vid FP-gruppen verkar dock ha haft begränsad inverkan på arbetet och den grad av stress de anställda upplever. Arbetsinnehållet har inte förändrats nämnvärt av dess införande, förutom att arbetet blivit mer bundet till arbetsplatsen och arbetsstationen. De orsaker till stress vi identifierat inom FP-gruppen verkar snarare bero på organisatoriska aspekter och arbetsuppgifternas utformning.

Vi anser att eftersom affärssystem är generellt standardiserade, för att kunna användas hos ett flertal verksamheter, uppstår det en problematik. Vi har utfört en fallstudie av kvalitativ karaktär där syftet har varit att förtydliga och öka förståelsen för handlingsbarhet i affärssystem. Syftet har också varit att utvärdera ett affärssystem i en verksamhetskontext där vi har kunnat påvisa styrkor och svagheter i utvärderingsmetoder för handlingsbarhet. Vi har också utifrån det lämnat förslag på förbättringar som kan genomföras med de utvärderingsmetoder som ligger till grund för att utvärdera handlingsbarhet i ett affärssystem. Fokus i vårt uppsatsarbete har varit att kunna redovisa hur man kan gå tillväga för att åstadkomma handlingsbarhet i affärssystem. Resultatet visar att det som kännetecknar handlingsbarhet i affärssystem inte enbart är de handlingsbara kvalitetsidealen i affärssystemet. Det är även av stor vikt att ta hänsyn till flera viktiga faktorer som återspeglar sig inom användbarhetsområdet, som anpassning, användarvänlighet, kompetensutveckling med flera för att förstå orsakerna till att kriterierna inte uppfylls. Därmed blir graden av uppfyllelse för de faktorer som ligger till grund för att kvalitetsidealen infrias också ett tecken på handlingsbarhet. Resultatet visar också att det är flera viktiga steg som berör det mänskliga perspektivet och det systematiska för att få handlingsbarhet i ett affärssystem. Vi anser att det krävs att användarna blir väl förankrade med systemet och att kompetensutveckling sker för system och verksamhetens processer. Det är viktigt att det tillsätts en projektgrupp av användare som lär av varandra och överför kunskap till varandras verksamhetsområden. Vi har kommit fram till att det måste finnas ett tydligt processtänkande hos kund och användare samt konsult för att åstadkomma handlingsbarhet i ett affärssystem så att en god kvalitet i lösningen uppstår. Vi anser också att handlingsbarhetsbegreppet måste förtydligas och lämnar därför förslag på en ny definition av handlingsbarhet. Since enterprise systems generally are standardized in order to suit many companies and companies perform their business actions in different ways, our opinion is that this may lead to problems. We have performed a qualitative case study with a purpose to clarify and increase the understanding of actability in enterprise systems. The purpose has also been to evaluate an enterprise system in a specific business context. Therefore we have been able to point out strengths and weaknesses in the analytic framework of actability evaluation. The result of the study shows that several factors in the theory of usability also are important in order to achieve actability; the factors are among other things adaptation, usefulness, and competence development. Our proposal to improve the analytic framework of actability evaluation is that it has to be more exact in the use of techniques to collect the necessary basis to perform the evaluation. We also believe that the actabilityconcept has to be clarified; therefore we launch a new definition of the actability concept.

Currently usability research and practice are facing a challenge. The focus of design concerns is expanding from predominantly functional aspects of IT systems to overall user experience, which has direct implications for the area of usability evaluation. The aim of the study reported in this thesis is to explore the potential of traditional usability evaluation approaches to deal with issues related to user experience, such as fun and entertainment. The empirical study reported in the thesis deals with fun and entertainment, employs concepts and methods of web usability, and specifically focuses on the so-called entertainment web sites (EWSs). Existing studies and the most relevant theories of fun and usability are examined to determine to which extent these can shed light on evaluation of fun and usability. Then apparently to establish if these theories can help operationalize fun and entertainment as aspects of web usability. . It is concluded that evaluation of fun and usability remains an open issue. In the study, traditional usability evaluation methods are applied on EWSs and based on these results the methods are revised. Finally, these revised methods are used in evaluations of EWSs once more. The results of the study indicate that traditional usability evaluation methods can be applied to evaluation of entertainment and fun in the context of web usability. More specifically, existing empirical evaluation and heuristic evaluation methods are found to produce relevant and potentially useful evidence when applied to evaluation of entertainment web sites. Therefore, the main conclusion of the thesis can be formulated as follows; while the underlying concepts and principles of web usability can be employed in evaluation of entertainment and fun, specific evaluation methods need to be revised.

The thesis addresses two related problems. It is argued that the materiality of physical artifacts serves the purpose of expressing abstract information. In contrast, the intangibility of IT is of such a kind that it poses different conditions for expressing abstract information. The background problem concerns conditions and possibilities of designing information visualization artifacts that retain the experiential qualities typically associated with physical artifacts. Massification design is introduced as a design ideal that aims towards a design of visualization artifacts that cater to the need of intersubjective understanding of abstract and intangible information. Massification design is further articulated as an ideal where the designed artifact as such bears witness of its own meaning. This ideal is put in contrast to design that depends on arbitrary, interpretative conventions for people's understanding of visualization artifacts. It is argued that design striving towards this ideal should be theoretically informed. The main problem of the thesis concerns to what extent the theory of embodied realism can serve as an informing theory for massification design. In order to investigate embodied realism as a candidate for informing massification design, two design projects are presented. Based on the design projects and associated evaluations, it is suggested that an embodied realist foundation for massification has the capacity to constrain and suggest form for expressions of abstract information. Suggestively, embodied realism may also inform design in such a way that it affects the experience of using the artifacts. The evaluations also suggest that design that draws on embodied meaning may come in conflict with conventional ways of expressing information. To further investigate a foundation for massification it is there is a need to investigate foundations that stays sensitive to conventional expressions. Additionally, it is suggested that massification design can be understood as striving towards authentic experiences of IT.