Data Access Control System Research Articles

RRefined and Effective Integration of Access Control Mechanism in Blockchain Enabled DApp

The combination of the Internet of Things (IoT) and aviation integration with the help of satellite and 6G communication technologies has led to the Internet of Unmanned Aerial Vehicles (UAV) or Internet of Drones (IoD). To host and share large amounts of drone data in real time, cloud-based IoD algorithm Cloudbased IoD is the wrong choice to reduce the weight of mobile drones. However, how to protect the sensitive drone at the fair is a matter of curiosity, and it is very difficult to break the environment where drone use is available and limited resources are available. Although our previous work in SPNCE21 (PATLDAC) developed an air-on middle of the main load of based drone data access control system with privacy policy, limited access time and user tracking, it provides conflicting and centralized cloud data storage for cloud environment and access with unreliable data. It is not reliable in terms of data access and tracking of users. To this end, we propose a blockchainbased privacy data access control (BPADAC) scheme for distributed and secure drone data sharing on cloudbased IoDs. Building on the granular, traceable, and privacypreserving drone data access capabilities of our previous work, we extend this by using blockchain and decentralized hash tables (DHT) to provide secure and reliable wireless access to humanmachine data and storage. as well as reliable and limited access guarantee mechanisms for cloud drone data sharing services. We also set up a public and denial user tracking system to prevent user abuse and deny the traitor. Finally, we propose a prototype for security analysis and performance evaluation using smart contracts on the Ethereum blockchain to demonstrate the feasibility of BPADAC. hash table, attributebased ciphertext encryption policy, and blockchain-based privacy-protected enabled and aware data access control Key Words: Blockchain, UAV,IoD, Distributed Hash Table, Ciphertext-Policy-Attribute-Based-Encryption, blockchainbased privacy-aware data access control

A License Management and Fine-Grained Verifiable Data Access Control System for Online Catering

A License Management and Fine-Grained Verifiable Data Access Control System for Online Catering

Decentralizing access control system for data sharing in smart grid

Decentralizing access control system for data sharing in smart grid

Power monitoring data access control system based on BP neural network

Abstract With the rapid development of social economy, the demand for electric power engineering is gradually increasing. The power supply system is constantly developing in the direction of large space and automation, and various high and new technologies are also constantly improving. The power monitoring data access control system is used to monitor and control the power production and supply process and improve the power supply efficiency. The further development of the region also has a higher demand for power and energy supply. For the problem that the natural environment of transmission and distribution lines in various power grids is uncertain, which makes the line operation unsafe. This paper proposed a power monitoring data access control system based on BP (back propagation, abbreviated as BP) neural network. This paper described the related concepts of BP neural network and power monitoring system, and described the functions and construction methods of power monitoring data access control system. On this basis, relevant experiments were carried out to verify the performance of the proposed system. The experimental results showed that the fault detection accuracy of the traditional algorithm was about 93 %, while the fault detection accuracy of the algorithm in this paper was more than 98 %. The highest accuracy rate was 99.88 %, and the accuracy rate of fault detection was greatly improved.

An efficient fine-grained data access control system with a bounded service number

In a data access control system oriented toward the cloud storage environment, a data owner defines attribute-based access control policies for data files to realize fine-grained data sharing. However, the existing schemes have defects in user execution efficiency and user privacy protection, and they do not consider the problems of user revocation and attribute updates. To this end, we propose a ciphertext policy attribute-based encryption method with verifiable outsourced decryption; this requires a user to complete decryption with the help of a server, but the results of the outsourced decryption can be verified independently. With this new encryption scheme and the technique of k-times anonymous authentication, a new fine-grained data access control system was constructed; this system allows a server to provide users with outsourced decryption services, and users’ computation cost is independent of the size of the underlying access control policy. Moreover, the number of outsourced decryption requests is limited. In addition, the new system supports user revocation and attribute updates and it is provably secure under formal proofs. An efficiency analysis shows that it can be compared with other similar systems in terms of performance, despite the addition of several practical properties.

INFRASTRUCTURE DESIGN OF THE SERVER PART OF THE ADAPTIVE MOBILE EDUCATIONAL ENVIRONMENT

The articles consider the main approaches for improving the personalization of education in higher education institutions using adaptive educational systems based on information technology. The advantages and efficiency of the adaptive educational system with the use of modern information technologies are emphasized. The general scheme of construction of adaptive mobile educational environment by means of Internet technologies is developed, which has a certain functional structure - a set of functional algorithms that provide user interaction with the system that determines the use and role in the system and internal logic of data blocks. Listening to the functional requirements for creating an adaptive mobile educational environment, 4 main types of users (roles) of systems are identified and previous members of the system are analyzed. The system of distribution of users which is constructed on the principle of hierarchical structure is offered. It is likely that the GRPC communication protocol is required to ensure the highest communication speed for synchronous HTTP requests between servers. Pay attention to the development of server parts of the adaptive mobile educational environment on the correct deployment of services, with each request by ensuring the security of data access control system through service authentication and authorization. The administrative part of the adaptive mobile educational environment is described, the service of which should be as much as possible protected from external attacks. Of particular importance is the servers that deploy the most similar data. Find more data from the server part of the mobile educational environment for creating relational databases based on MS SQL Server, as well as a documentary database based on MongoDB. Considering the capabilities of the hosting environment, a generalized scheme of deployment of backend services of adaptive mobile environment is built. As a result of designing the internal structure of systems, there are basics of relatively known and prescribed algorithms, which indicate that the infrastructure scheme is based on three main algorithms, namely: the algorithm of authentication and authorization; algorithms for interaction with the file system (storage and retrieval of medical data); algorithms for downloading and analyzing completed tasks.

Game Theoretical Analysis on Acceptance of a Cloud Data Access Control System Based on Reputation

With the rapid development of the Internet, cloud storage has penetrated into every aspect of human society. However, cloud data disclosure happens more and more frequently, which makes cloud data security and privacy protection impact wide adoption of cloud storage. Control cloud data access based on reputation by introducing a Reputation Center (RC) was proposed and demonstrated to secure cloud data effectively in [9] . But the acceptance of such a system by cloud users and Cloud Service Providers (CSPs) is crucial for its practical deployment and final success. In this paper, we investigate the acceptance of a cloud data access control system based on reputation using Game Theory. Due to the existence of dishonest CSPs, there exists a social reputation dilemma among CSPs, which seriously impedes the popularity of cloud storage. To encourage users to use cloud storage and suppress collusion between CSPs and data requesters, a repeated public-goods game is built up by applying a compensation mechanism to improve the utilities of cloud users and a punishment mechanism based on reputation to incent honest behaviors. Theoretical analysis and simulation results show the effectiveness of the compensation and punishment mechanisms to increase cloud storage rate and restrain dishonest system entities.

Adaptively secure efficient broadcast encryption with constant-size secret key and ciphertext

In those broadcast application scenarios with a great quantity of receivers, e.g., the data access control system in cloud storage service, the single sender is apt to become the efficiency bottleneck of the system, because the computation and storage overhead of the sender will grow rapidly with the amount of qualified receivers. In order to overcome this problem, we first introduce the novel conception of complete binary identity tree which is adopted to manage the qualified receivers. Then we design the prune-merge algorithm to further optimize the structure of the tree and cut down the amount of receivers. The algorithm effectively reduces the computation and storage cost of the trusted authority in the system. Subsequently, in virtue of composite-order bilinear groups, we bring forward an efficient public key broadcast encryption scheme combined its application to the system of data access control in cloud storage service. Compared with the existing schemes, the lengths of system public parameters, secret key and ciphertext in our scheme are all constant. In addition, the number of secret keys in our scheme increases logarithmically with the maximum amount of receivers, while the numbers of secret keys in the existing schemes increase linearly with the maximum amount of receivers. Furthermore, the proposed scheme is proved to guarantee adaptive security under general subgroup decision assumption in the standard model. The performance analysis manifests that our scheme is feasible for those broadcast applications with fixed senders.

Survey on Regenerating Code Based Revocable and Searchable ABE Scheme for Mobile Cloud Storage

From the time in memorial, Information Security has remained a primary concern and today when most of the sensitive data is stored on Cloud with client organization having lesser control over the stored data, the fundamental way to fix this issue is to encrypt such data. So, a secure user imposed data access control system must be given, before the users outsource any data to the cloud for storage. Attribute Based Encryption (ABE) system is one such asymmetric key based cryptosystem that has received much attention that provides fine-grained access control to data stored on the cloud. In this paper, we propose a more proficient and richer type of Attribute Based Encryption technique (RSABE) that not only considers the Outsourced ABE construction but also address the issue of revocation in case of change of attributes of the group user or organization; once a user is removed from the group, the keys are updated and these new keys are distributed among the existing users also our system supports the Keyword search over encrypted data in the mobile cloud storage. In multi keyword search; data owners and users can generate the keywords index and search trapdoor, respectively, without relying on always online trusted authority. Experimental results prove that the performance of the proposed system is greater than existing system in terms of security, time consumption and memory utilization & data availability.

Comment on “Secure Data Access Control With Ciphertext Update and Computation Outsourcing in Fog Computing for Internet of Things”

In this comment paper, we point out a security flaw in a data access control system which is built on ciphertext-policy attribute-based encryption (CP-ABE) and attribute-based signature schemes. In particular, we show that the underlying CP-ABE is vulnerable to the collusion attack. As a result, malicious users can collaborate to decrypt a ciphertext, which they are not authorized to decrypt.

Scalable Industry Data Access Control in RFID-Enabled Supply Chain

By attaching RFID tags to products, supply chain participants can identify products and create product data to record the product particulars in transit. Participants along the supply chain share their product data to enable information exchange and support critical decisions in production operations. Such an information sharing essentially requires a data access control mechanism when the product data relate to sensitive business issues. However, existing access control solutions are ill-suited to the RFID-enabled supply chain, as they are not scalable in handling a huge number of tags, introduce vulnerability to the product data, and perform poorly to support privilege revocation of product data. We present a new scalable industry data access control system that addresses these limitations. Our system provides an item-level data access control mechanism that defines and enforces access policies based on both the participants' role attributes and the products' RFID tag attributes. Our system further provides an item-level privilege revocation mechanism by allowing the participants to delegate encryption updates in revocation operation without disclosing the underlying data contents. We design a new updatable encryption scheme and integrate it with ciphertext policy-attribute-based encryption to implement the key components of our system.

CloudFile: A cloud data access control system based on mobile social trust

Personal data management at cloud with mobile devices confronts a number of practical challenges such as security, efficiency and usability. Many existing solutions suffer from high computation and communication costs, thus impractical to be deployed in mobile domains. Notably, high popularity of mobile social networking provides a good platform to assess social trust in a pervasive way, which can be applied to automatically manage personal data access at the cloud with sound performance and effectiveness. This paper presents the design and implementation of a personal cloud data access control system named CloudFile based on trust evaluation in mobile social networking. The CloudFile uses a Key Policy–Attribute Based Encryption (KP-ABE) scheme to control personal data access based on social trust in order to guarantee the safety of mobile cloud data storage. System performance tests show that the CloudFile is flexible for controlling data access, secure for personal data storage, and efficient to be deployed by mobile devices. Particularly, we investigate user acceptance on the CloudFile system. Based on user feedback, we conclude that the CloudFile is accepted with regard to perceived ease of use, practicality, user interface, playfulness and intuitive attitude.

Secure, efficient and revocable multi-authority access control system in cloud storage

Multi-Authority Attribute-Based Encryption (MA-ABE) is an emerging cryptographic primitive for enforcing fine-grained attribute-based access control on the outsourced data in cloud storage. However, most of the previous multi-authority attribute-based systems are either proven to be secure in a weak model or lack of efficiency in user revocation. In this paper, we propose MAACS (Multi-Authority Access Control System), a novel multi-authority attribute-based data access control system for cloud storage. We construct a new multi-authority ciphertext-policy ABE (MA-CP-ABE) scheme with decryption outsourcing. The decryption overhead for users is largely eliminated by outsourcing the undesirable bilinear pairing operations to the cloud servers. The proposed MA-CP-ABE scheme is proven adaptively secure in the standard model and supports any monotone access policy. We also design an efficient attribute-level user revocation approach with less computation cost. The security analysis, numerical comparisons and implementation results indicate that our MAACS is secure, efficient and scalable.

Model of web-portal with data access control system, based on groups and roles

This article describes model of web-portal with data access control system, based on groups and roles. Class diagram of access control system and methods of multilingual support are presented. Some ideas about further model development of this model are described. Described model is embedded in official web-portal of Saint Petersburg Scientific Center of the Russian Academy of Sciences.