Access Management System Research Articles

Off-campus Access to Licensed Online Resources through Shibboleth

Institutions of advanced education and research, through their libraries, invest substantially in licensed online resources. Only authorized users of an institution are entitled to access licensed online resources. Seamless on-campus access to licensed resources happens mostly through Internet Protocol (IP) address authentication. Increasingly, licensed online resources are accessed by authorized users from off-campus locations as well. Libraries will, therefore, need to ensure seamless off-campus access to authorized users. Libraries have been using various technologies, including proxy server or virtual private network (VPN) server or single sign-on, to facilitate seamless off-campus access to licensed resources. In this paper, authors share their experience in setting up a Shibboleth-based single sign-on (SSO) access management system at the JRD Tata Memorial Library, Indian Institute of Science, to enable authorized users of the institute to seamlessly access licensed online resources from off-campus locations.

Converging Blockchain and AI technology-based Automated and Decentralized (A&D) Trust Management System using Face Detection

Face detection systems are growing exponentially. Newly emerged technologies are also being involved in the management applications. But they had failed to compensate at least anyone of the essential aspects of the system such as scalability, security, personalization, etc. This paper presents a fundamental platform that provides the ways and techniques to intelligently use the integration of Artificial Intelligence and Blockchain in which AI is used to detect and recognize the face and Blockchain maintains the tamper-proof records. This convergence will provide a tamper-proof and rapidly working A&D access management system for a trust management system that can be used for attendance in an organization & for many other purposes.

Blockchain-Enabled Access Management System for Edge Computing

In the post-cloud era, edge computing is a new computing paradigm with data processed at the edge of the network, which can process the data close to the end-user in real time and offload the cloud task intelligently. Meanwhile, the decentralization, tamper-proof and anonymity of blockchain technology can provide a new trusted computing environment for edge computing. However, it does raise considerable concerns of security, privacy, fault-tolerance and so on. For example, identity authentication and access control rely on third parties, heterogeneous devices and different vendors in IoT, leading to security and privacy risks, etc. How to combine the advantages of the two has become the highlight of academic research, especially the issue of secure resource management. Comprehensive security and privacy involve all aspects of platform, data, application and access control. In. this paper, the architecture and behavior of an Access Management System (AMS) in a proof of concept (PoC) prototype are proposed with a Color Petri Net (CPN) model. The two domains of blockchain and edge computing are organically connected by interfaces and interactions. The simulation of operation, activity and role association proves the feasibility and effectiveness of the AMS. The instances of platform business access control, data access control, database services, IOT hub service are run on Advantech WISE-PaaS through User Account and Authentication (UAA). Finally, fine-grained and distributed access control can be realized with the help of a blockchain attribute. Namely, smart contracts are used to register, broadcast, and revoke access authorization, as well as to create specific transactions to define access control policies.

Application of face recognition technologies in access control and management systems

The article shows the relevance of the widespread use of computer vision technology on the example of face recognition as part of the access control and management system. The scheme of access control implementation with face recognition technology is described. The use of this technology makes it possible to increase the level of information security of enterprises and, as a consequence, reduce the possible financial damage from the implementation of attacks on their assets from illegitimate penetration into the protected area through the access control system using passes of legal users.

REMOTE LABORATORY MANAGEMENT APPLICATION DEVELOPMENT USING A MOBILE-BASED RESTful WEB SERVICE METHOD

Remote laboratory is a software environment that supports remote experiment activities, where users who are located at a far distance are allowed to interact with measurement devices and real laboratory equipment. The majority of remote laboratories that exist today are implemented with desktop computers. Computer-based systems have disadvantages that is large consumption of electrical energy and expensive equipment investment costs. Mobile applications can be an alternative so that energy and equipment investment costs can be further reduced and can make it easier to manage remote laboratory access because of its nature that can be used anytime and anywhere.
 This application was developed to remote red Pitaya's oscilloscope and signal generator. The access management system for this tool use RESTful Web Service technology so that data transfers are faster and consume relatively small data sizes. To remote a this tool, this application uses a webview plugin to display the simulator that is accessed via IP that has been provided by the tool.
 Based on the results of the development in this study, there are 6 main functional needs and 2 non-functional needs. Based on the test, it can be concluded that the development of remote laboratory management applications using the mobile-based RESTful web service method has met the criteria according to the design.

Subsea drilling and wellhead load monitoring systems in the North Sea: A case study using a well access management system (WAMS)

In the last decade, the monitoring systems have become a crucial component for the drilling and oil wellhead operations. The importance of such systems has been magnified by oil companies and the regulatory bodies after the Gulf of Mexico incident on Deepwater Horizon rig that took place on 20th of April 2010 in which eleven crewmen were killed. The data obtained by the monitoring systems can provide significant advisory data to assist the operators to mitigate the various risks during the operations and to reduce the maintenance cost of equipment. In this paper, an overview of recent studies on the existing monitoring systems for the drilling and oil wellhead operations technical challenges faced by operators and the benefits of monitoring systems has been presented......

An evaluation of identity and access management systems

One of the most critical issues of all of networks types that integrate the both of wired and wireless technologies is the performance and applicability of the electronic authentication and identification techniques. These schemes involve various technologies of different levels of security. This research presents a comparative study of six IDAM available tools, based on the three characteristics (ease of use, usefulness, and user's satisfaction), which build targets to be achieved in order to gain quality in software. The tools compared in this study are Log Mote, Oracle ID management, Tivoli Identity Manager, NetIQ-Novell, Access Sentinel, and Active Directory. In order to enable users to access the available resources in a secure way, we propose a novel architecture of IDAM. The proposed architecture basically has several advantages like, autonomy, comprehensive and systematic, standardization, and scalability.

An evaluation of identity and access management systems

One of the most critical issues of all of networks types that integrate the both of wired and wireless technologies is the performance and applicability of the electronic authentication and identification techniques. These schemes involve various technologies of different levels of security. This research presents a comparative study of six IDAM available tools, based on the three characteristics (ease of use, usefulness, and user's satisfaction), which build targets to be achieved in order to gain quality in software. The tools compared in this study are Log Mote, Oracle ID management, Tivoli Identity Manager, NetIQ-Novell, Access Sentinel, and Active Directory. In order to enable users to access the available resources in a secure way, we propose a novel architecture of IDAM. The proposed architecture basically has several advantages like, autonomy, comprehensive and systematic, standardization, and scalability.

Повышение эффективности интегрированных систем безопасности на охраняемых объектах уголовноисполнительной системы

The article discusses topical issues of organizing the functioning of security and alarm systems, CCTV, access control and management systems, which are part of the integrated security system of a penal system facility. The purpose of the study is a substantive analysis of the problems arising in the process of equipping with technical means of security and supervision the control panel for technical means of protection, the premises of the duty-assistant of the head of the colony, the checkpoint for the passage of people, the restricted areas of a penal system facility. The subject of the article is the realized and possible integration links at the software and hardware levels between the security and alarm system, the CCTV system, the access control and management system. The methodological basis of the research was formed by the statistical method, analysis, synthesis, induction, system-structural and formal-logical methods. The conclusions on the need to equip the premises of the duty-assistant to the head of the colony with an automated workstation of the integrated security system have been substantiated; to equip the gates for access to the restricted area with proximity card readers to control an electromechanical lock. In addition, proposals were made on the need of mandatory informing the chief of the guard about the alarming situation arising in the biometric control and access control system at the checkpoint for the passage of people; on the feasibility of considering the possibility of verifying alarming events in the restricted area by installing dome cameras on observation towers. The practical significance of the work results lies in the fact that the conclusions we have declared can be used to reequip integrated security systems used at the penal system facilities. Key words: engineering and technical means of security and supervision, an integrated security system, a security and alarm system, a security television system, a control and access control system, the chief of the guard, an assistant to the head of the colony, security and fire control devices.

Simulation of the noise immunity of an access control and management system under the influence of an electrostatic discharge

Simulation of the noise immunity of an access control and management system under the influence of an electrostatic discharge

Development of the project of an automated checkpoint system at the enterprise with the integration of a biometric access control and management system

Development of the project of an automated checkpoint system at the enterprise with the integration of a biometric access control and management system

ОСНОВНЫЕ НАПРАВЛЕНИЯ СОЗДАНИЯ ИНФОРМАЦИОННОЙ СИСТЕМЫ ДЛЯ ИДЕНТИФИКАЦИИ ЛИЧНОСТИ ПО ФЕНОТИПИЧЕСКИМ ПРИЗНАКАМ ЧЕЛОВЕКА

The tempestuous and rapid development of biometric technologies based on both the static and dynamic identification signs of a person could not bypass one of the important spheres of life in modern society – the fight against crime. Most of the solutions related to personal identification by papillary patterns, iris and retina of the eye, drawing of veins on the arm and thermographic face cards are widely used in the access control and management systems, systems for protecting the automated information systems from unauthorized access to information. At the same time, the use of those signs in the investigation and disclosure of crimes is just beginning to be introduced into the activities of the law enforcement agencies of the Russian Federation. The use of the information systems in that area can significantly increase the effectiveness of the fight against crime, especially crimes against the person. Of particular interest is the use of data on the phenotypic signs of the suspect in the investigation of crimes, i.e. information about his height, weight, hair color, eyes, skin tone, and blood group. The article discusses the basic principles of creating an automated information system for identifying a person based on biological material left by persons who were present at the crime scene. It defines the complex of organizational and scientific issues that need to be solved when creating a system, ensuring its information security and software implementation. Also it proposes an algorithm for two-stage searching the information stored in the databases of the ISOD (UDS) services, based on modern data processing methods.

ПРИМЕНЕНИЕ ТЕХНОЛОГИЙ РАСПОЗНАВАНИЯ ЛИЦ В СИСТЕМАХ КОНТРОЛЯ И УПРАВЛЕНИЯ ДОСТУПОМ

The article shows the relevance of the widespread use of computer vision technology on the example of face recognition as part of the access control and management system. The main methods that are used in the implementation of classical control systems and access control are considered. The scheme for the implementation of the access control with face recognition technology is described. The use of this technology makes it possible to increase the level of information security of enterprises and, as a result, reduce the possible financial damage from the implementation of attacks on their assets from illegitimate penetration into the protected area through the access control system using the passes of legal users.

A secure identity and access management system for decentralising user data using blockchain

A secure identity and access management system for decentralising user data using blockchain

METHOD FOR DETERMINING A PERIODIC WAVE ITERACY OF PHOTOPLETISMOGRAM FOR BIOMETRIC IDENTIFICATION

Background. In recent years, the development of an automated identification process using biometric authentication has been observed, which has a high level of protection, since it allows you to evaluate the physical parameters and characteristics of a particular person. Such access control is more reliable since identifiers cannot be transferred to third parties or duplicated to bypass security systems. Over the past decades, a significant number of systems with biometric identification has been developed, but systems with identification according to the characteristics of the photoplethysmogram still receive little attention. The main task of biometric personality identification using photoplethysmogram is the search and implementation of machine learning methods to determine their belonging to a particular patient.Objective. The purpose of the paper is to develop an algorithm for distinguishing pulse wave iterations using the calculation of the temporal characteristics of photoplethysmograms, such as the maximum amplitude value, variance, mean absolute deviation, Wilson amplitude and the total sum of signal amplitude values.Methods. Based on the study of the temporal characteristics of the photoplethysmogram, an algorithm for distinguishing pulse wave iterations is created, which can be used for further biometric identification of a person using machine-learning methods.Results. The results can be used for further development of automated access control and management systems using biometric identification.Conclusions. Known methods of biometric identification are usually based on the static parameters of a person (the structure of the cornea of the eye, palm, fingerprints, geometry of the auricle, etc.), but have a low level of protection, since using special equipment you can create a copy of the biometric key. Therefore, today, the use of methods based on the parameters of dynamic biometric identification (plethysmogram, cardiogram and others) provides the highest degree of protection, but requires a more accurate software device to isolate and determine common symptoms. The proposed approach to calculating individual parameters of the photoplethysmogram with the aim of their subsequent classification by machine learning methods may be an acceptable solution for patient biometric identification systems.

Introduction to Identity - Part 2: Access Management

Who are you, and what are you allowed to do? In digital systems, these questions are the domain of “Identity and Access Management (IAM).” Access management systems provide the mechanisms for deciding who is who, and evaluate and enforce decisions about who should get access to what. Part 2 of the introduction explores the big picture of access management through a historical perspective. You can expect a little advice, a lot of context, and an experience-based overview of what we do in access management and why our contributions matter.

Impact of GDPR on Identity and Access Management

This article examines the implications of the General Data Protection Regulation (“GDPR”, “Regulation”) on Identity and Access Management (“IAM”) process and system design. It introduces organisational and technical good practices that may help ensure demonstrable compliance with the Regulation as well as improve user experience and customer trust.Although the focus here is on the GDPR, the approaches described may, by extension, also help in complying with data protection legislation in other geographies including (for example) the California Consumer Privacy Act (“CCPA”), or the Brazilian General Data Protection Law (“LGPD”).

Characteristics and general requirements for the access control and management system

The article examines the requirements for the functional purpose of access control and management systems (ACMS), the functional composition of ACMS and general requirements for it, integration and network construction of ACMS, burglar alarm systems, fire alarm systems, access control and management systems, ACMS capabilities, control systems access control, video surveillance systems.

Acoustic Fingerprints for Access Management in Ad-Hoc Sensor Networks

Voice user interfaces can offer intuitive interaction with our devices, but the usability and audio quality could be further improved if multiple devices could collaborate to provide a distributed voice user interface. To ensure that users' voices are not shared with unauthorized devices, it is however necessary to design an access management system that adapts to the users' needs. Prior work has demonstrated that a combination of audio fingerprinting and fuzzy cryptography yields a robust pairing of devices without sharing the information that they record. However, the robustness of these systems is partially based on the extensive duration of the recordings that are required to obtain the fingerprint. This paper analyzes methods for robust generation of acoustic fingerprints in short periods of time to enable the responsive pairing of devices according to changes in the acoustic scenery and can be integrated into other typical speech processing tools.

Design and Evaluation of Indoor Positioning System for User Access Management in Data Center

One critical point in data center management from the physical security perspective (according to ISO 27001 standards) is the management of user access and traffic. Physical security could be improved through the implementation of indoor positioning with a real-time monitoring system. Other than security needs, the information provided could be used for emergency evacuation purposes in a disastrous situation. Presently, indoor positioning is principally based on wireless signals, such as WiFi, RFID, Zigbee, Bluetooth, etc. This study designs a user access management system in the Data Center using indoor - positioning. For the indoor positioning method, k-Nearest Neighbor (kNN) and Fuzzy k-Nearest Neighbor (FkNN) algorithms and Kalman Filter implementation are evaluated. The simulation result shows that the proposed method can improve the positioning accuracy until 8% compared to the existing method.