Access Control Management System Research Articles

A Personal Microcomputer as an Access Control Management Platform in Road Transport

For many years, the use of new computer systems to control various elements of everyday human life has been observed. Separate systems manage access control; others are used to control blinds and roller shutters; and others manage systems in the garden. Many of these systems can be integrated using available systems. This paper presents an example of an access control management system based on the Raspberry Pi microcomputer and shows an analysis of its performance, accuracy, and possibility of improvement. This study used official devices manufactured by the Raspberry Pi Foundation; however, it is possible to create a similar system with custom parts. This project used open-source software. The authors argued that it is possible to create an autonomous vehicle access control system using microcomputers and optical character recognition technology. Using simple devices, the plate recognition system was built and tested, proving the thesis that it is possible to build an access control system using available devices. This also confirms the thesis that microcomputers can be used to control other systems in the human environment.

UML design for access control architecture in smart building application

SummaryCyber physical systems are complex systems to build and implement, electronic devices and concepts such as the energy saving, the user comfort and the privacy of sensitive data. In the physical world, buildings represent a major part of total energy consumption, that's why improving the energy efficiency levels of buildings is topical by which the emergence of smart buildings. Since, even if efforts are being made in normalizing the process of energy saving management while maintaining a high level of users' comfort, managing the access control in smart buildings systems remains an ad‐hoc process. This is why a number of researches focus on the design and implementation of solutions aimed at covering the process of access control management. In the context of developing a smart building application, already developed in our laboratory, we have set up an access control management system to manage users' access. We present the design of an access control architecture, using the Unified Modeling Language, upon the smart building application which is the subject of a maintenance work. The designed solution is implemented with the purpose of evolving the application to be used by multiple users. The implemented access control solution is an extended role‐based access control model.

A Dynamic and Automated Access Control Management System for Social Networks

In recent years, online social networks (OSNs) have become an essential part of our social life. In OSNs, users can post resources to predefined groups of users, for example, family, friends, close friends. However, due to these predefined groups of users, few irrelevant users may get access to these published resources. Moreover, the users cannot configure privacy settings due to the lack of technical knowledge and the rigidity of the access control management system. To tackle these issues, we propose a text-based dynamic and fine-grain access control system for OSNs. Our proposed model uses a dynamic clustering algorithm to create user clusters based on the mutual interests of the users. After clustering, the proposed system creates automatic access rules based on the relationship between the users’ clusters and their resources. The proposed system will ensure fine-grained access control and automatic assignment of policies to the text-based resources. We have implemented our system to gauge the applicability, and the results are discussed in the experiments section.

Smart contract token-based privacy-preserving access control system for industrial Internet of Things

Due to mobile Internet technology's rapid popularization, the Industrial Internet of Things (IIoT) can be seen everywhere in our daily lives. While IIoT brings us much convenience, a series of security and scalability issues related to permission operations rise to the surface during device communications. Hence, at present, a reliable and dynamic access control management system for IIoT is in urgent need. Up till now, numerous access control architectures have been proposed for IIoT. However, owing to centralized models and heterogeneous devices, security and scalability requirements still cannot be met. In this paper, we offer a smart contract token-based solution for decentralized access control in IIoT systems. Specifically, there are three smart contracts in our system, including the Token Issue Contract (TIC), User Register Contract (URC), and Manage Contract (MC). These three contracts collaboratively supervise and manage various events in IIoT environments. We also utilize the lightweight and post-quantum encryption algorithm-Nth-degree Truncated Polynomial Ring Units (NTRU) to preserve user privacy during the registration process. Subsequently, to evaluate our proposed architecture's performance, we build a prototype platform that connects to the local blockchain. Finally, experiment results show that our scheme has achieved secure and dynamic access control for the IIoT system compared with related research.

Access Control and File Distribution Management for Electronic Diploma and Transcript using Ethereum Smart Contract and IPFS

This reserach build access control and file distribution management system for electronic diploma and transcript using ethereum smart contract and InterPlanetary File System (IPFS). The falsification of diplomas/transcripts is one of the problems in education. In Indonesia, falsification of diplomas/transcripts is a form of criminal act of falsifying letters. In addition, diplomas/transcripts that have not been digitalized make them easily damaged, lost, and difficult to manage. Therefore, this research developed digital diploma/transcript as digital twin from the hardcopy of diploma/tramscript. This research used IPFS to store data in a distributed system and Smart Contracts Blockchain to store and protect the digital diploma/transcript. The system also comes with access control to create and give approval for diplomas or transcripts to be published and saved into the system. Access control settings will be saved using the blockchain. This research using Quality of Service test method for measurethroughput, packet loss, and delay. Beside that, tis research also analysis the usage of Central Processing Unit and Random Access Memory from the system. Based on the test that has been done, the fake diploma/transcript detection system can be run properly by using 1 node to 5 nodes. The best throughput value during the process of making and validating the diploma/transcript is to use 1 node. The value of packet loss in the process of making and validating the certificate/transcript has a very good category. The value of delay in the process of making and validating the diploma/transcript has a very good category.

Application Design of the Iris Recognition Technology in the Access Control Management System

This design is a method of implementing the iris-recognition-based access control management system, including the identity collection device, database server, infrared range finder, iris recognition device, and access controller. The identity collection device collects the target personnel’s identity signals on site and outputs iris information. When a target person attempts to enter a door, the infrared range finder needs to work with the identity collection device to start the iris recognition device. The identity collection device will promptly and accurately collect the iris information, and then send the extracted iris information to the database server. The database server compares the received iris information with that previously stored in the database and quickly determines whether the iris information is legal based on the comparison results. If it is legal, the access controller sends a signal to the electric control lock to open the door and the person can enter the door. Otherwise, the person cannot enter the door. This design integrates the infrared sensing technology, human-computer interaction technology, data transmission technology, and communication technology. It utilizes the iris recognition algorithm in the iris recognition technology to improve the precision of recognition. Therefore, this design can efficiently identify and authenticate personal identity. In addition, this design features high reliability, low cost, small volume, complete functionality, and strong scalability on information collection.

EACMS: Emergency Access Control Management System for Personal Health Record Based on Blockchain

Personal health records (PHRs) are private and vital assets for every patient. There have been introduced many works on various aspects of managing and organizing the PHR so far. However, there is an uncertain remaining issue for the role of PHR in emergencies. In a traditional emergency access system, the patient cannot give consent to emergency staff for accessing his/her PHR. Moreover, there is no secured record management of patient’s PHR, which reveals highly confidential personal information, such as what happened, when, and who has access to such information. This paper proposes an emergency access control management system (EACMS) based on permissioned blockchain hyperledger fabric and hyperledger composer. In the proposed system, we defined some rules using the smart contracts for emergency condition and time duration for the emergency access PHR data items that patient can assign some limitations for controlling the PHR permissions. We analyzed the performance of our proposed framework by implementing it through the hyperledger composer based on the response time, privacy, security, and accessibility. The experiments confirm that our framework provides better efficiency compared with the traditional emergency access system.

A Metric-Based Approach to Assess Risk for “On Cloud” Federated Identity Management

The cloud computing paradigm is set to become the next explosive revolution on the Internet, but its adoption is still hindered by security problems. One of the fundamental issues is the need for better access control and identity management systems. In this context, Federated Identity Management (FIM) is identified by researchers and experts as an important security enabler, since it will play a vital role in allowing the global scalability that is required for the successful implantation of cloud technologies. However, current FIM frameworks are limited by the complexity of the underlying trust models that need to be put in place before inter-domain cooperation. Thus, the establishment of dynamic federations between the different cloud actors is still a major research challenge that remains unsolved. Here we show that risk evaluation must be considered as a key enabler in evidence-based trust management to foster collaboration between cloud providers that belong to unknown administrative domains in a secure manner. In this paper, we analyze the Federated Identity Management process and propose a taxonomy that helps in the classification of the involved risks in order to mitigate vulnerabilities and threats when decisions about collaboration are made. Moreover, a set of new metrics is defined to allow a novel form of risk quantification in these environments. Other contributions of the paper include the definition of a generic hierarchical risk aggregation system, and a descriptive use-case where the risk computation framework is applied to enhance cloud-based service provisioning.

Research of RFID Intelligent Access Control System in the Internet of Things

Traditional access control system is relatively simple, low efficiency, small storage capacity, which can not meet the initiative, timeliness, and flexibility requirements of security technology in the Internet of Things. To solve this problem, this paper researches and designs the intelligent access control system based on Radio Frequency Identification (RFID) technology. The system consists of an access control management system and an access controller. The system can not only be used as the import and export of safety management, but also contribute to the internal order management, achieve effective control and management of access control region.

Enterprise Human Resource Management using Hybrid Recognition Technique

Abstract Human resource management is bringing the various changes with the IT technology. In particular, if HRM is non-scientific method such as group management, physical plant, working hours constraints, personal contacts, etc, the current enterprise human resources management(e-HRM) appeared in the individual dimension management, virtual workspace (for example: smart work center, home work, etc.), working time flexibility and elasticity, computer-based statistical data and the scientific method of analysis and management has been a big difference in the sense. Therefore, depending on changes in the environment, companies have introduced a variety of techniques as RFID card, fingerprint time & attendance systems in order to build more efficient and strategic human resource management system. In this paper, time and attendance, access control management system was developed using multi camera for 2D and 3D face recognition technology-based for efficient enterprise human resource management. We had an issue with existing 2D-style face-recognition technology for lighting and the attitude, and got more than 90% recognition rate against the poor readability.In addition, 3D face recognition has computational complexities, so we could improve hybrid video recognition and the speed using 3D and 2D in parallel.

안전한 XML 접근 제어의 정책 설계에 관한 연구

접근 제어 기법은 아주 작은 단위의 보호 수준을 지원할 만큼 충분히 유연해야 한다. 또한 접근 제어 정책은 문서 타입과 관련하여 명세될 가능성이 매우 높으므로 문서가 기존의 접근 제어 정책에 의해 다루어지지 않는 상황을 적절하게 관리해야 한다. 기존의 접근 제어는 HTML의 근본적인 한계 때문에 정보 구조와 의미론을 충분히 고려하지 못하였다. 또한 XML 문서에 대한 접근 제어는 읽기 실행만을 제공하며, 복잡한 권한의 평가 과정 때문에 시스템 성능이 저하되는 문제점이 존재한다. 이러한 문제점을 해결하기 위해 본 논문에서는 미세 접근 제어가 가능한 XML 접근 제어 관리 시스템을 설계한다. 접근 제어 시스템을 개발함에 있어 어떤 권한부여를 명세하고 어떤 접근 제어를 실행해야 하는가와 관련하여 XML 문서 권한부여 주체와 객체 정책에 관하여 기술한다. Access control techniques should be flexible enough to support all protection granularity levels. Since access control policies are very likely to be specified in relation to document types, it is necessary to properly manage a situation in which documents fail to be dealt with by the existing access control policies. The existing access control has not taken information structures and semantics into full account due to the fundamental limitations of HTML. In addition, access control for XML documents allows only read operations, and there exists the problem of slowing down system performance due to the complex authorization evaluation process. In order to resolve this problem, this paper designs a XML Access Control Management System which is capable of making fined-grained access control. And then, in developing an access control system, it describes the subject and object policies of authorization for XML document on which authorization levels should be specified and which access control should be performed.