Source Authentication Research Articles

Privacy preserving data aggregation with fault tolerance in fog-enabled smart grids

Smart grid (SG) seamlessly integrates electrical and communication network elements to provide sustainable and affordable electricity in an efficient and stable manner. Smart meters (SMs) are installed at customer places, providing an efficient way of recording household electricity consumption data and communicating it back to electricity providers using Internet. In smart cities, SG is compute-intensive application, which demands strict latency-aware capabilities, and low delays. Through the usage of fog-enabled Internet of Things (IoT)-Aided SG architectures, localized computing and processing facilities can be deployed at the network edge offering: low latency, reduced communication costs, low congestion, and latency-sensitive analytics. Energy consumption data that the meters collect can disclose sensitive information of an individual. The two most important challenges faced by the future smart grid are security and privacy. Although, privacy-preserving fog-enabled aggregation for SG communications have been studied in recent years. However, there exists limited literature that addresses the requirement of fault tolerance, allowing data aggregation activity to continue effectively and efficiently for functional SMs, even in the presence of faulty meters. Therefore, in this paper, we propose a fog-enabled privacy-preserving secure data aggregation scheme with fault-tolerance. Metering data privacy is achieved through the Boneh-Goh-Nissam (BGN) cryptosystem and authentication of the source is provided through elliptic curve digital signature algorithm (ECDSA). The ECDSA generates signatures in quick manner, due to smaller key sizes and is suitable for constrained resources devices like Advanced Metering Infrastructure (AMI). Detailed security analysis demonstrate that our proposed scheme preserves the data privacy of metering data, ensures source authentication, supports fault-tolerance, and prevents false data injection (FDI) attacks. In addition, extensive performance evaluations also show that our proposed scheme is efficient in terms of encryption, aggregation, decryption and communication costs when compared with the three existing state-of-the-art schemes.

Model-Free Data Authentication for Cyber Security in Power Systems

With the development and wide deployment of measurement equipment, data can be automatically measured and visualized for situation awareness in power systems. However, the cyber security of power systems is also threated by data spoofing attacks. This letter proposed a measurement data source authentication (MDSA) algorithm based on feature extraction techniques including ensemble empirical mode decomposition (EEMD) and fast Fourier transform (FFT), and machine learning for real-time measurement data classification. Compared with previous work, the proposed algorithm can achieve higher accuracy of MDSA using a shorter window of data from closely located synchrophasor measurement sensors.

МЕТОД ЗАХИСТУ ІНФОРМАЦІЇ СИСТЕМИ «РОЗУМНИЙ ДІМ» НА БАЗІ НОВОГО ПРОТОКОЛУ ОБМІНУ ДАНИХ

The analysis of security problems of information exchange between the client and the "Smart Home" system is carried out. The priorities of information protection at the stage of information transfer are determined. The analysis of the proposed new wireless network standard Thread is carried out. Thread uses IPv6 and is built on the IEEE 802.15.4 standard, and its main advantage is security. At the same time, there can be up to 250 devices in the network, which are protected by encryption of the banking system level. But this is not enough to ensure the integrity of information. The use of a new encryption algorithm based on the current encryption algorithm based on the blockchain algorithm is proposed, thanks to the use of dynamically changing nonlinear bijective transformation (S-blocks) allows to avoid significant information security problems. This algorithm is used to ensure confidentiality (security during transmission), integrity (security during storage and modification only for authorized users) and authenticity (authenticity of the message source). And provides reliable information protection.

The catalogue raisonné and art auction prices: the case of Berthe Morisot

The relation between the authentication source for artworks, the catalogue raisonne, and art prices is examined. Catalogue raisonne information such as the illustration page space allocated to each artwork and the use of color illustrations and plates in publications are viewed as measures of the quality or importance of artworks and hence may relate to prices. Empirically, instrumental variables sample selection models are used for the analysis of art auction data which recognizes non-sales and the measurement error associated with using catalogue raisonne information as measures of latent quality or importance. The approach is applied to oil painting auction data for the late nineteenth-century impressionist Berthe Morisot. After controlling for the effects of exhibitions, cited literature, painting size, the use of color, signed paintings, presence of females, early career paintings and fixed auction year effects on prices, the illustration page space allocated to a painting is found to importantly relate to prices for a catalogue raisonne of Berthe Morisot.

VALIDITY OF PRE-ISLAMIC ARABIC LITERATURE AS A SOURCE OF AUTHENTICATION OF HADIS

The focus of this paper is the authenticity of the hadith, because in addition to the problem of the method used, it is also a matter of sources that are problematic. One source that is often used is literature, especially pre-Islamic Arabic literature (jahiliyah). The relevance of literature in authenticating hadith gives rise to a question, the extent to which the validity of pre-Islamic Arabic Literature can be used as evidence and what are the requirements that must be met when the study of the authenticity of hadith uses pre-Islamic Literature as one of the proofs. Using a Using a descriptive analytic method with a historical approach, this paper concludes that pre-Islamic Arabic literature when used as a source of authenticity of the hadith then the task of research is to reduce the difference in question. The reduction is intended so that the legality of literature as a source of hadith authentication can be accepted. This reduction includes: (1) authorship. Just as the news attributed to the Prophet must be proven to have its source in the Prophet, pre-Islamic Arabic Literature must also be proven to come from pre-Islamic Arabic writers, (2) narration. Pre-Islamic Arabic literature must also be tested extrinsically as an extrinsic factor test on the Hadith of the Prophet, (3) context. Literature was born not in an empty space so that the content of pre-Islamic Arabic literature must also reflect the life of the Arab Nation in pre-Islamic times. Therefore, when the reduction has not yet been carried out, in the context of the accuracy of the study of the authenticity of the hadith it cannot be accepted.

Fake News Detection on Social Media

Most of the smart phone users prefer to read the news via social media over internet. The news websites are publishing the news and provide the source of authentication. The question is how to authenticate the news and the articles which are circulated among the social media like WhatsApp groups, Facebook Pages, Twitter and other micro blogs and social networking sites. It can be considered that social media has replaced the traditional media and become one of the main platforms for spreading news. News on social media trends to travel faster and easier than traditional news sources due to the internet accessibility and convenience. It is harmful for the society to believe on the rumors and pretend to be a news. The basic need of an hour is to stop the rumors especially in the developing countries like India, and focus on the correct, authenticated news articles. This paper demonstrates a model and methodology for fake news detection. With the help of Machine Learning, we tried to aggregate the news and later determine whether the news is real or fake using Support Vector Machine. Even we have presented the mechanism to identify the significant Tweet's attribute and application architecture to systematically automate the classification of the online news.

Look-Aside at Your Own Risk: Privacy Implications of DNSSEC Look-Aside Validation

The Domain Name System Security Extension (DNSSEC) leverages public-key cryptography to provide data integrity, source authentication, and denial of existence for DNS responses. To complement DNSSEC operations, DNSSEC Look-aside Validation (DLV) is designed for alternative off-path validation. Although DNS privacy attracts a lot of attention, the privacy implications of DLV are not fully investigated and understood. In this paper, we take a first in-depth look into DLV, highlighting its lax specifications and privacy implications. By performing extensive experiments over datasets of domain names under comprehensive experimental settings, our findings firmly confirm the privacy leakages caused by DLV. We discover that a large number of domains that should not be sent to DLV servers are being leaked. We explore the root causes, including the lax specifications of DLV. We also propose two approaches to fix the privacy leakages. Our approaches require trivial modifications to the existing DNS standards, and we demonstrate their cost in terms of latency and communication.

A Trusted Attestation Scheme for Data Source of Internet of Things in Smart City Based on Dynamic Trust Classification

The Internet of Things (IoT) in smart cities collects and transmits a large amount of time–space-sensitive information to realize feedback control. It bridges the gap between the information world and the real world. With the data-based feature, the security and credibility of the IoT mainly depend on whether the source of the data is trusted. Therefore, as the data collection and transmission entity, sensing nodes should be classified and proved the trustworthiness. However, the existing works failed to classify and measure the credibility of sensing nodes multidimensional in real time. The previous trust-proof methods also cannot effectively protect the key information. To address these problems, this article first proposes a multidimensional and fine-grained dynamic measurement method in a trusted computing environment. Then, a trust classification model of sensing nodes is presented, and a grouping mechanism of different trust levels is designed to identify malicious nodes. Finally, a threshold ring signature-based trust certification scheme is proposed for data source authentication. It can adequately protect the privacy information of the attestation node and has complete anonymity and traceability. Besides, the scheme has a shorter signature and high computational efficiency, which makes it also suitable for sensing nodes with limited computing resources. The simulation results show that the scheme has better dynamic adaptability and can effectively ensure the credibility of data sources under the premise of various attacks with accessible impact on the system.

Security, usability, and biometric authentication scheme for electronic voting using multiple keys

We propose electronic voting authentication scheme, which is a key management mechanism for electronic voting system intended to limit the number of attacks on a polling station and strengthen the security control. The motivation is to diversify security requirements of messages exchanged between polling stations. There are different types of messages exchanged between polling stations and each type of message has different security needs. A security mechanism developed on the basis of a single key is not enough to ensure the diverse security needs of voting network. In electronic voting authentication scheme, every polling station is responsible to support three different types of keys. These are global key, pairwise key, and individual key. The global keys are public keys shared with all polling stations in the voting network. The pairwise key can be used for communication with polling stations. Individual keys will be used for communication with the server. To ensure authentication of local broadcast, electronic voting authentication scheme uses one-way key chains in a well-organized way. The support of source authentication is a visible advantage of this scheme. We examine the authentication of electronic voting authentication scheme on numerous attack models. The measurement demonstrates that electronic voting authentication scheme is very operative in protecting against numerous elegant attacks such as wormhole attack, Sybil attack, and HELLO Flood attack. The proposed system is evaluated and the results demonstrate that the proposed system is practical and secure as compared to the direct recording electronic and manual systems.

Efficient and secure message authentication algorithm at the physical layer

Message authentication, which refers to source authentication and message integrity, is an essential security service, especially in emerging networks such as peer-to-peer, Device-to-Device, LPWAN (such as NB-IoT, LTE-M or SigFox) and vehicle to vehicle. Traditionally, message authentication schemes handled at upper layers of the protocol stack. Such schemes require multiple rounds and multiple operations per round, which results in a considerable overhead in terms of latency and required resources. Recently, many research works have shifted towards investigating the design of new security solutions at the physical layer (PLS). Although data confidentiality and device authentication schemes have been introduced at the physical layer, yet, no PLS message authentication scheme has been presented. In this paper, we propose a dynamic message authentication algorithm (keyed hash function) that makes use of a secret session key in addition to the random characteristics of the physical channel. Moreover, the cryptographic primitives are dynamic and get updated in a lightweight manner for every input frame symbol. Security and performance analysis were conducted to validate the efficiency and robustness of the proposed scheme. The results confirmed that the proposed authentication scheme exhibits a high level of security with minimum overhead in terms of delay.

Lightweight and secure cipher scheme for multi-homed systems

Multiple access technologies allow a network to connect to two or more communication networks efficiently, to enhance system performance. They are more robust and reliable than legacy technologies, which allow the connection to one network at a time. In this paper, a new and efficient dynamic and key-dependent cipher scheme is designed to secure multi-homed devices, in real-time, while preserving their main functionality and meeting the stringent Quality of Service requirements. The proposed scheme consists of a dynamic key derivation technique that mixes together a dynamic nonce and a secret key. The dynamic nonce is extracted from multiple channels, after establishing a new session. The proposed approach is based on simple operations such as substitution and permutation, to enhance the network robustness against different types of attacks. The dynamicity is based on the random nature of physical channels and as such, data confidentiality, integrity and source authentication are achieved with the least amount of resources, delay and computational complexity. The implementation of the proposed cipher scheme is appropriate for small and resource-constrained devices including IoT devices and mobile phones (battery-constrained devices). Theoretical and simulation results confirm that the cipher scheme has a better efficiency than other recent schemes, which require multiple rounds. In addition, a cryptanalysis discussion is provided towards proving that the proposed cipher is capable of resisting and preventing the different existing cryptanalysis and security attacks.

Efficient & secure image availability and content protection

Digital images are among the most communicated multimedia data types. Many of these images include private data that require a high level of security. The traditional image security schemes rely on cryptographic solutions to ensure the confidentiality or the authentication of image contents, and to ensure that the encryption key is not compromised. However, the continuous evolution of the attackers’ capabilities is making it harder than ever to achieve the goal of safeguarding the private data against breaches. Moreover, the centralization aspect of images’ storage makes them prone to availability attacks. In this paper, we propose a distributed and secure storage scheme for images, based on the Modified Information Dispersal Algorithm (MIDA), and taking into consideration the trade-off between the high security level and the associated computational overhead. The proposed solution applies block permutation on the image to ensure data confidentiality and then, divides it into k fragments that are encoded using the proposed parallel modified IDA. The output consists of n encoded fragments, instead of k, to ensure data availability. Next, each encoded fragment is authenticated using a lightweight Message Authentication Algorithm (MAA) to ensure data integrity with source authentication. Finally, the encoded fragments are distributed over n storage nodes (or multi-cloud providers). The resilience degree of such redundancy is (n − k), since only k fragments are required to reconstruct the original images. All the cryptographic steps such as permutation, IDA encoding and MAA consist of simple operations and they are based on a dynamic key. This ensures a high level of security since in each session, a new key is used to produce different cryptographic primitives as well as the update primitives, which are used to update the permutation and selection tables. The implementation results show that the proposed scheme meets the desired cryptographic properties to guard against different attacks. Finally, the performance tests show that the proposed scheme is lightweight with low overhead in terms of computations, communication and storage.

Editing-Enabled Signatures: A New Tool for Editing Authenticated Data

Data authentication primarily serves as a tool to achieve data integrity and source authentication. However, traditional data authentication does not fit well where an intermediate entity (editor) is required to modify the authenticated data provided by the source/data owner before sending the data to other recipients. To ask the data owner for authenticating each modified data can lead to higher communication overhead. In this article, we introduce the notion of editing-enabled signatures where the data owner can choose any set of modification operations applicable on the data and still can restrict any possibly untrusted editor to authenticate the data modified using an operation from this set only . Moreover, the editor does not need to interact with the data owner in order to authenticate the data every time it is modified. We construct an editing-enabled signature (EES) scheme that derives its efficiency from mostly lightweight cryptographic primitives. We formalize the security model for editing-enabled signatures and analyze the security of our EES scheme. Editing-enabled signatures can find numerous applications that involve generic editing tasks and privacy-preserving operations. We demonstrate how our EES scheme can be applied in two privacy-preserving applications.

A study on quality of Paridis Rhizoma and consideration on standards of Paridis Rhizoma in Chinese Pharmacopoeia

Thin layer chromatography, high performance liquid chromatography and multivariate statistical analysis were integrated in current study to provide a basis for the quality evaluation and the standard improvement of Paridis Rhizoma(Chinese name: Chong-lou). The results demonstrated that the primary saponins in the two authorized sources of Paridis Rhizoma were polyphyllinsⅠ, Ⅱ and Ⅶ, while the rhizome of Trillium tschonoskii an adulterant of Paridis Rhizoma was rich of polyphyllin Ⅵ. Therefore, the apparent content of polyphyllin Ⅵ plays a determinant role towards the source authentication of raw materials and decoction slices of Paridis Rhizoma, whose adulterants frequently occur in the market. Moreover, the contents of polyphyllin Ⅵ in the two authorized sources could meet the requirements of Chinese Pharmacopoeia. Therefore, we suggested that polyphyllin Ⅵ should not be omitted from the quality standard of Paridis Rhizoma in the Chinese Pharmacopoeia, and on the other side, polyphyllinsⅠ, Ⅱ and Ⅶ should be the eligible quality indicators. The study aims to sound information and evidences for the quality evaluation of Paridis Rhizoma, and also to provide a theoretical basis for the standard revision of Paridis Rhizoma in the future Chinese Pharmacopoeia.

Road Condition Monitoring with Source Authentication in VANET

In recent technologies, it has been said that, to improve the travel efficiency and safety of transportation systems, vehicular ad-hoc network (VANET) has been used as the promising technology where each vehicle is able to collect and communicate the information about current road or traffic condition at a particular location using an embedded on-board unit with the help of distributed roadside units. Examples are: While detection of some accident, congestion, jam, etc., vehicles broadcast warning signals to the nearby vehicles which would give a better awareness to every nearby vehicles about the driving environment and these nearby vehicles would change the driving plan if needed. The VANET technology has gained great attentions from both industry and academics in the recent days.

An Efficient and Secure Alert System for VANETs to Improve Crosswalks' Security in Smart Cities.

A key characteristic of Smart Cities is the ability to reduce conflicts between different agents coexisting in a dynamic system, such as the interaction between vehicles and pedestrians. This paper presents a system to augment the awareness of vehicle drivers regarding the presence of pedestrians in nearby crosswalks. The proposed system interconnects Road Side Units (RSUs), which are informed about the state of the crosswalks, and vehicles, in order to spread to vehicles, the information about the presence of pedestrians in crosswalks. To prevent false information spreading, RSUs sign the alert messages they broadcast and all vehicles can validate the signatures. This poses strong security requirements, such as non-repudiation of alert messages, as well as strong real-time requirements, such as minimum message validation delays among vehicles approaching a crosswalk of interest. To manage the signed alert messages, we are proposing Nimble Asymmetric Cryptography (NAC), which authenticates implicit broadcast messages. NAC minimizes the usage of asymmetric ciphers, which are fundamental to assure non-repudiation but increase performance penalties and uses hash chaining for source authentication of implicit messages.

Privacy‐preserving data aggregation scheme for edge computing supported vehicular ad hoc networks

AbstractVehicular ad hoc networks (VANETs) allow vehicles getting road situation by connecting with roadside unit (RSU) through the on‐board unit, and this information can be processed to improve transportation services in a timely manner. Meanwhile, the three‐tier edge computing system can support the VANETs well. However, the limited bandwidth of the VANETs and the privacy of uploaded data are still issues to be resolved. Data aggregation is an effective way to address the issue of limited bandwidth and data privacy protection for individual devices. In this article, based on the bilinear pairing and Paillier homomorphic encryption, we design a privacy‐preserving data aggregation scheme for edge computing supported VANETs, which not only preserves the privacy of uploaded data but also realizes batch operations. Also, the proposed scheme guarantees the features of data integrity and source authentication. Moreover, the comparison of performance evaluation between ours and other recent schemes shows that the proposed scheme significantly reduces the communication overhead and is more suitable for resource‐constrained terminal device.

Multi-View Convolutional Neural Network for Data Spoofing Cyber-Attack Detection in Distribution Synchrophasors

Security of Distribution Synchrophasors Data (DSD) is of paramount importance as the data is used for critical smart grid applications including situational awareness, advanced protection, and dynamic control. Unfortunately, the DSD are attractive targets for malicious attackers aiming to damage grid. Data spoofing is a new class of deceiving attack, where the DSD of one Phasor Measurement Units (PMUs) is tampered by other PMUs thereby spoiling measurement based applications. To address this issue, a source authentication based data spoofing attack detection method is proposed using Multi-view Convolutional Neural Network (MCNN). First, common components embedded in raw frequency measurements from DSD are removed by Savitzky-Golay (SG) filter. Second, fast S transform (FST) is utilized to extract representative spatial fingerprints via time frequency analysis. Third, the spatial fingerprint is fed to MCNN, which combines dilated and standard convolutions for automatic feather extraction and source identification. Finally, according to the output of MCNN, spoofing attack detection is performed via threshold criterion. Extensive experiments with actual DSD from multiple locations in FNET/Grideye are conducted to verify the effectiveness of the proposed method.

Public Interest in Cognitive Impairment: An Analysis of the Top 50 Articles on Cognitive Impairment on Altmetric.

Background As the average life expectancy continues to increase, interest in cognitive impairment is increasing. Nowadays, as social media expands its reach, academic research is spreading through social media, changing the way and speed by which research is propagated and also who consumes this content. Therefore, using Altmetric, a new web-based set of metrics that analyzes the impact of content on social media platforms, we investigated the characteristics of influential research articles on the topic of cognitive impairment in social media. Methods An Altmetric Explorer search was performed on May 25, 2018, to extract the following information: (i) journal name, (ii) journal impact factor (IF), (iii) year of publication, (iv) article topic, (v) article type, and (vi) cognitive impairment subtype. Results The journal “Neurology” was the most cited journal for cognitive impairment articles shared on social media. Among the various types of cognitive impairment, most articles were related to dementia (all subtypes), Alzheimer's disease, and aging. The most common article type was original scientific paper, especially cohort study. The most popular topic was the identification of protective or risk factors for cognitive impairment. Conclusion The characteristics of articles with a high Altmetric Attention Score were somewhat different from those of articles with a high number of traditional citations. Social media had the disadvantage that it was difficult to verify the authenticity of the primary source in question, but the advantage was that it could immediately determine the trends regarding how information about that source was being shared and consumed. Therefore, it may be advisable to use Altmetric analysis in combination with traditional methods of evaluating the research articles to understand the dissemination of scientific research and to direct future research.

Authenticity Model of (Mass-Oriented) Computer-Mediated Communication: Conceptual Explorations and Testable Propositions

AbstractWhile several major theories and models have emerged and guided research on computer-mediated communication (CMC) in the interpersonal context, equivalent theoretical development seems to be lacking in the study of mass-oriented CMC, despite a large volume of amassed research. This article aims to propose an integrative conceptual framework for the study of mass-oriented, including mass-personal CMC, with (perceived) authenticity as its core unifying construct. A range of theoretical constructs independently developed in various subdisciplines and pertinent research findings are reviewed in light of the authenticity of source, message, and interaction. Several testable propositions are derived concerning antecedents to and consequences of authenticity judgments, with a view to stimulating programmatic empirical investigations on the role of authenticity in CMC.