Authentication Procedure Research Articles

Analysis of the Application of Management Control System for Fiduciary Installment Credit (KREASI) at PT Pegadaian Medan City Region

Management control system is a system used to influence its members to implement strategies efficiently and effectively in order to achieve organizational goals. The purpose of this study was to determine how the implementation of the management control system at PT Pegadaian Medan City Region. PT. Pawnshops also require a control in order to achieve the company's overall goals. This control is preventive and repressive control. To achieve this goal requires a good management control system so that the credit is not problematic. The purpose of this study is the application of a management control system for the distribution of Fiduciary Installment Loans (KREASI) at PT Pegadaian Manado City Region. The analytical method used is descriptive analysis. The results of the analysis show that the process of providing Installment Loans for the Fiduciary System (KREASI), at PT. The Manado Regional Pawnshop has been carried out well by competent employees in their respective fields who have high honesty and dedication in carrying out their duties. Separation of duties has also been carried out well in each process of providing Fiduciary Installment Loans (KREASI), at PT. Manado Regional Pawnshop. PT Pegadaian Manado Region has implemented proper authorization procedures in all processes of providing Fiduciary Installment Loans (KREASI), namely at the time of the mortgage loan application process, the authorized officer is the estimator, during the pawn credit analysis process the authorized officer to analyze credit is the Power of Attorney Credit (KPK), during the credit withdrawal process the authorized officer is the cashier, while for the monitoring process the officer authorized to carry out supervision is the branch head

A Secure and Efficient Cluster-Based Authentication Scheme for Internet of Things (IoTs)

IPv6 over Low Power Wireless Personal Area Network (6LoWPAN) provides IP connectivity to the highly constrained nodes in the Internet of Things (IoTs). 6LoWPAN allows nodes with limited battery power and storage capacity to carry IPv6 datagrams over the lossy and error-prone radio links offered by the IEEE 802.15.4 standard, thus acting as an adoption layer between the IPv6 protocol and IEEE 802.15.4 network. The data link layer of IEEE 802.15.4 in 6LoWPAN is based on AES (Advanced Encryption Standard), but the 6LoWPAN standard lacks and has omitted the security and privacy requirements at higher layers. The sensor nodes in 6LoWPAN can join the network without requiring the authentication procedure. Therefore, from security perspectives, 6LoWPAN is vulnerable to many attacks such as replay attack, Man-in-the-Middle attack, Impersonation attack, and Modification attack. This paper proposes a secure and efficient cluster-based authentication scheme (CBAS) for highly constrained sensor nodes in 6LoWPAN. In this approach, sensor nodes are organized into a cluster and communicate with the central network through a dedicated sensor node. The main objective of CBAS is to provide efficient and authentic communication among the 6LoWPAN nodes. To ensure the low signaling overhead during the registration, authentication, and handover procedures, we also introduce lightweight and efficient registration, de-registration, initial authentication, and handover procedures, when a sensor node or group of sensor nodes join or leave a cluster. Our security analysis shows that the proposed CBAS approach protects against various security attacks, including Identity Confidentiality attack, Modification attack, Replay attack, Man-in-the-middle attack, and Impersonation attack. Our simulation experiments show that CBAS has reduced the registration delay by 11%, handoff authentication delay by 32%, and signaling cost by 37% compared to the SGMS (Secure Group Mobility Scheme) and LAMS (Light-Wight Authentication & Mobility Scheme).

Keeping the secrecy aspect in mass e-voting

Two years of the COVID-19 pandemic have pushed society's digitalization forward like nothing ever before. Activities that weren't achievable without personal contact, became present online. Currently, when the COVID-19 restrictions are being lifted and personal meetings are becoming possible, in some cases, it still appeared to be more convenient to “meet” virtually than physically. Some actions proved to be more effective when performed online. That is why some people didn't want to come back to the previous form of communication anymore. Many decision-makers who see all the advantages of online communication have turned to the new possibilities that are served by Internet systems. Hence, they intend to keep it virtual even now, when pandemic restrictions have been lifted in most cases. This situation implies lots of great ideas for virtualization. One of those is online voting and polling conducted on many voters – groups larger than just board members or delegates. Such balloting could be performed using a voting system. Unfortunately, in the case of the decision-making process, which should be treated as a one-time event, using typical solutions is mostly very ineffective. Observations revealed that e-voting procedures conducted on a large number of electors may be challenging for many, not computer-experienced users. The procedure of authentication has to stay present in order to protect the votings against ballot stuffing. Particularly in secret voting, the problem remains the same: how to verify the user for a secret ballot without revealing his data. In mass voting, additional issues appear such as how to complete the procedure on multiple (often not ICT-experienced) voters and how to make the system accessible and credible at the same time.

A Data Aggregation Technique for WSNs Using Lightweight Cryptographic Algorithm

: Many SNs are dispersed throughout Wireless Sensor Networks (WSN) to collect data from other nodes. Various secure data aggregation techniques are employed in WSN; however, the authentication procedure is not addressed. Implementing authentication while preserving WNS’s energy usage is difficult. The current approaches focus on various restrictions like key length and key sharing to improve authentication. However, it exposes the data aggregation network to criminal activity. This paper introduces a unique technique called a secure, Lightweight cryptographic data-aggregation algorithm to address security and energy challenges in WSN (SLC-DAA). The proposed SLC-DAA uses XOR operations and hash functions as cryptographic primitives. Using a stronger security and energy consumption paradigm, this technique offers potential options for cluster-based data aggregation. The suggested paradigm is less complex than current methods and offers superior computing efficiency and privacy protection.

Fog-based Self-Sovereign Identity with RSA in Securing IoMT Data

In the healthcare applications, Internet of Medical Things (IoMT) comforts the communication processes between the medical devices and the humans <i>via</i> wireless network. Moreover, this communication helps both the physicians and the patients to contact remotely for the diagnosis of the disease’s wearable devices sensor signals. However, IoMT system violates the privacy preserving of Patient’s Health Record (PHR) as well as self-sovereign identity of patient. In this regard, security action should be taken. Previous techniques used in IoMT are in lack of data consistency, confidentiality, and inaccessible of data. To overcome these issues, the fog computing-based technology is used in order to handle the health data of the patient for digital identity management. Self-Sovereign Identity empowers the patient to handle and control their own data. This paper proposes Fog Computing based Self-Sovereign Identity with Rivest, Shamir, Adleman (RSA) for IoMT (FCSSI+RSA-IoMT). For that, it keeps the Patient Health Record (PHR) securely and effectively using RSA to make the identification and authentication procedures at ease. Besides, PHR is used to store the sensitive information regarding identity and privacy of the patient. Additionally, it records the diagnosis history of patient by the doctors and radiology images. Therefore, the result evaluation proves that, for 100 users, the proposed technique takes only 631 secs and also the throughput performance is better when compared to the existing techniques.

E-Authentication System Using QR Code &amp; OTP

With the fast expansion of wireless communication technology, user authentication is becoming increasingly vital in order to assure the system's security. Passwords serve a vital part in the authentication process. The user's password will be submitted with the traffic to the authentication server during the authentication procedure, allowing the server to provide access to the authorized user. The invaders will take advantage of the opportunity to try to sniff out other people's passwords in order to carry out illicit acts under the guise of someone else's identity, keeping them out of danger. Many methods have been offered to improve the security of wireless communication technologies as a result of the challenges. The recommended approach will be utilized to improve the system's security in this study. Onetime passwords, hashing, and two-factor authentication were chosen as the solution. There will also be a new solution that uses the QR code to assist preserve more data. The system outcome's goal is to improve the present login authentication mechanism. It proposes ways to make password cracking more difficult, as well as persuade people to pick and use tough-to-guess passwords.

Design issues of a pan European Smart Cross Border "dream like" e-Gov Primary Health Care Medical Service

The European Commission of the European Union has provided Member States with the appropriate regulation and systems for the development of services facilitating cross border transactions. So far there has been little progress in putting such services to full practice. This may be justified where such systems involve the processing of confidential and personal data. Nevertheless, the proposed by the European Commission systems guarantee (as far as recent developments in network and cloud securities can do it) efficient validation of data, through authentication procedures. Cross border systems are essential in supporting one of the key principles of the EU that of free movement. Recent research and the relevant literature has witnessed the proposal and development of a few cross border systems focusing on health, social services, the environment, and life sciences. In this paper, design issues of such a cross border authentication service, linking public or/and private primary health units, are presented. The system in support of this service will offer a standard conceptual design model to interested European Member States. To evaluate the potential of such a system and its practical appeal, Greece's and the UK's primary health care services are examined. They are used as a case study of a conceptual design model applied in building up a pan European smart cross border primary health service to the benefit of citizens of any European countries being on mobility.

A Tutorial on Trusted and Untrusted Non-3GPP Accesses in 5G Systems—First Steps Toward a Unified Communications Infrastructure

Fifth-generation (5G) systems are designed to enable convergent access-agnostic service availability. This means that 5G services will be available over 5G New Radio air interface and also through other non-Third Generation Partnership Project (3GPP) access networks, e.g., IEEE 802.11 (Wi-Fi). 3GPP has recently published the Release 16 that includes trusted non-3GPP access network concept and wireless wireline convergence. The main goal of this tutorial is to present an overview of access to 5G core via non-3GPP access networks specified by 3GPP until Release 16 (i.e., untrusted, trusted, and wireline access). The tutorial describes aspects of the convergence of a 5G system and these non-3GPP access networks, such as the authentication and authorization procedures and the data session establishment from the point of view of protocol stack and exchanged messages between the network functions. In order to illustrate several concepts and part of 3GPP specification, we present a basic but fully operational implementation of untrusted non-3GPP access using WLAN. We perform experiments that demonstrate how a Wi-Fi user is authorized in a 5G core and establishes user plane connectivity to a data network. Moreover, we evaluate the performance of this access in terms of time consumed, number of messages, and protocol overhead to established data sessions.

Statistical analysis and trends in personnel authorisation for activities related to explosive atmospheres

Technological installations processing flammable substances in the form of gases, vapours, mists, dusts, lint or fibres create special spaces in their vicinity called explosive atmospheres classified into zones. For these installations to operate safely, they must be designed, installed, operated, maintained and repaired by personnel qualified and authorised to carry out these activities. In the first part of the paper the risk of explosion that may occur in the performance of these activities by the personnel involved is presented. In the second part of the paper, the importance of personnel authorisation in the field of explosive atmospheres and the authorisation procedure at national level is presented. In the third part of the paper statistical analysis and trends in the authorisation process in Romania are presented.

Biotechnology-derived drugs: how far has Morocco come?

Biological drugs are products made from biological active substances. When the patents protecting these drugs expire, biosimilar drugs can be developed by other manufacturers. To carry out an inventory of the economic and regulatory aspects of biomedicines in Morocco, and to give an overview of the different biological drugs and their biosimilars available, we based our work on a bibliographic search and on the use of different drug databases available in Morocco. In Morocco, a regulatory framework has framed the administrative procedure for the marketing authorization of biological drugs and their biosimilars. Biological drugs available on the Moroccan market belong to several classes and the health insurance system covers the majority of them. In Morocco, industrial companies must be encouraged to locally produce biomedicines. This would allow covering part of the national needs and reducing costs, which will increase patients´ access to such drugs.

Edge Based Lightweight Authentication Architecture Using Deep Learning for Vehicular Networks

&lt;p&gt;When vehicles are connected to the Internet through vehicle-to-everything (V2X) systems, they are exposed to diverse attacks and threats through the network connections. Vehicle-hacking attacks in the road can significantly affect driver safety. However, it is difficult to detect hacking attacks because vehicles not only have high mobility and unreliable link conditions, but they also use broadcast-based wireless communication. To this end, V2X systems need a simple but a powerful authentication procedure on the road. Therefore, this paper proposes an edge based lightweight authentication architecture using a deep learning algorithm for road safety applications in vehicle networks. The proposed lightweight authentication architecture enables vehicles that are physically separated to form a vehicular cloud in which vehicle-to-vehicle communications can be secured. In addition, an edge-based cloud data center performs deep learning algorithms to detect car hacking attempts, and then delivers the detection results to a vehicular cloud. Extensive simulations demonstrate that the proposed authentication architecture significantly enhanced the security level. The proposed authentication architecture has 94.51 to 99.8% F1-score results depending on the number of vehicles in the intrusion detection system using control area network traffic.&lt;/p&gt; &lt;p&gt;&amp;nbsp;&lt;/p&gt;

Clinician views on and ethics priorities for authorizing medical cannabis in the care of children and youth in Canada: a qualitative study.

Background:The use of cannabis for medical purposes by pediatric patients is expanding across Canada; however, supporting evidence, federal regulations and treatment guidelines are lacking. To understand factors affecting treatment decisions in this landscape, we sought to delineate clinician perspectives, ethics priorities and values for cannabis authorization.Methods:We sampled participants purposefully through Canadian Childhood Cannabinoid Clinical Trials listservs, which include the majority of pediatric oncologists and palliative care physicians practising in Canada, among many other pediatric physicians and clinicians. Inclusion criteria were being a practising clinician in Canada, involvement in the care of children and willingness to be interviewed regardless of stance on medical cannabis. In November and December 2020, we conducted semistructured interviews focusing on principles, values and priorities, including medical, professional, regulatory, evidentiary and social considerations, for authorizing medical cannabis to children. Interviews were recorded, transcribed and analyzed by means of deductive and inductive thematic methods.Results:We conducted 18 interviews with a diverse group of clinicians representing a range of specialties within pediatric care, including neurology, palliative care, oncology, family medicine and pharmacology. The interviews yielded 4 themes and 12 subthemes related to a priori (medical, professional, regulatory, evidentiary and social themes) and emergent themes. The 4 themes of access, relationships and relational autonomy (autonomy within relationships), medically appropriate use and research priorities were grounded in principles of harm reduction. Participants described problematic authorization procedures that negatively affect patient use. Principles associated with relational autonomy were highlighted as a feature of open clinical communication. Benefits of appropriate medical uses weighed positively over risks, even in the context of potential effects on neurodevelopment. Participants expressed that more research is essential to align medical cannabis with biomedical standards.Interpretation:Clinicians reported pursuing ethical use of medical cannabis for pediatric patients and prioritizing their safety under principles of harm reduction. There is a need for evidence about neurodevelopmental risks, support for research, treatment guidelines and greater knowledge about stakeholder perspectives to alleviate burdens related to use of medical cannabis for pediatric patients in Canada.

Development and practice of access authorizations for works in confined spaces in the water utilities sector

We present the work permit system for the most common operations in the water utilities sector and the hazards of confined work. In addition to outlining the options for employer action under the regulations, the mechanism of the authorization procedures is outlined. On this basis, a detailed form for an access authorization has been developed and a guide outlining the obligations and responsibilities of employers and workers involved in the authorization process has been produced.

Study on the Application Direction of the Deemed Authorization or Permission under the General Act on Public Administrative

The deemed authorization or permission has been widely introduced and used, but its contents and methods are not uniform. Although regulations on the licensing agenda were introduced in General Act on Public Administration, it is difficult to see that the legal issues surrounding the deemed authorization or permission have been clearly clarified with those regulations. Looking at the flow of the Supreme Court ruling and the interpretation of the Ministry of Legislation, the divisible deemed authorization or permission is widely accepted instead of integrated deemed authorization. Even in light of the related regulations under the General Act on Public Administrative, the application of the deemed authorization or permission should be developed on the premise of the divisible deemed authorization or permission. Relevant authorization is established internally through consultation of the relevant authorizing administrative authority , and takes effect externally through notification of the primary authorization. Accordingly, the relevant authorizing administrative authority may revoke or withdraw relevant authorization, and even in the case of a dispute over relevant authorization, the relevant authorizing administrative authority may become the defendant. If consultations cannot be reached because the relevant authorization requirements are not met, a lawsuit regarding the refusal of relevant authorization is filed against relevant administrative agency. On the other hand, if it is impossible to proceed with the project according to the primary authorization without relevant authorization, the primary authorization itself may be rejected. In this case, a lawsuit is brought against the refusal of both primary and relevant authorization. The litigation becomes complicated according to the concept of divisible deemed authorization or permission but this can be resolved through the introduction of procedural rules. To this end, It is necessary to introduce regulations on the indication of the administrative agency, the presentation of reasons for the refusal of the consultation, the object of dispute and the defendant. Finally, it is necessary to reexamine whether the omission of relevant authorization procedures is justified. Under the divisible deemed authorization or permission, relevant authorization procedures are guaranteed in principle, and procedures can only be omitted in exceptional cases if necessary for rapid business progress. Legislative reorganization should be made through a comprehensive review of individual laws. In addition, the relevant authorizing administrative authority should be allowed to proceed with relevant authorization procedures if necessary.

AUTHENTICATING ELECTRONIC ADMINISTRATIVE CONTRACT AND ITS LEGAL FORCE BEFORE THE JORDANIAN JUDICIARY

One of the outcomes of the information technology revolution is the emergence of the Internet. This international innovation, which connects people everywhere without considering the political borders, has become an important method to join parties and form contracts regardless of the distance between them. As the administrative contract is one of the transactions that may be concluded electronically, it takes an important part that should be legally regulated. Electronic writing, electronic signature, and electronic documents are important instruments for the electronic administrative contract. This electronic contract is created by special procedures through electronic certification bodies. This study explores how to authenticate the electronic administrative contract. It also examines the legal value of this contract before the Jordanian judiciary. The study engages in a descriptive analysis of the legal texts, especially Jordan’s Electronic Transactions Law, concerning the verification and authority of electronic administrative contracts. The main findings are that the Jordanian legislation limits the signature images to signing, stamping, and fingerprinting. Moreover, the Jordanian legislation gives the electronic signature, which is documented according to the specific authentication procedures. It has an evidential value exactly similar to the evidential value of the ordinary signature.

Attribution Markers and Data Mining in Art Authentication.

Today’s global art market is a billion-dollar business, attracting not only investors but also forgers. The high number of forged works requires reliable authentication procedures to mitigate the risk of investments. However, with the developments in the methodology, continuous time pressure and the threat of litigation, authenticating artwork is becoming increasingly complex. In this paper, we examined whether the decision process involved in the authenticity examination may be supported by machine learning algorithms. The idea is motivated by existing clinical decision support systems. We used a set of 55 artworks (including 12 forged ones) with determined attribution markers to train a decision tree model. From our preliminary results, it follows that it is a very promising technique able to support art experts. Decision trees are able to summarize the existing knowledge about all investigations and may also be used as a classifier for new paintings with known markers. However, larger datasets with artworks of known provenance are needed to build robust classification models. The method can also utilize the most important markers and, consequently, reduce the costs of investigations.

Devising criteria for the authenticity of historical cold weapons based on X-ray fluorescence analysis of their surface

This paper reports the results of studying the chemical composition of the surface of 4 objects of cold weapons of the 19th and early 20th centuries, made of iron – bayonet knives and sabers. This makes it possible to establish the signs of authenticity of cold weapon samples made of iron in that chronological period. An authentic procedure has been proposed for examining the chemical composition of the surface of historical objects of cold weapons by rubbing the samples with cotton wool swabs and their subsequent investigation. This makes it possible to explore objects of cold weapons, whose size is large, as well as simplify the very procedure for studying objects of historical and cultural value. Using the X-ray fluorescent chemical analyzer Expert Mobile, chemical elements were found at the surface of samples of cold weapons made of iron. The presence of such elements is the result of the process of re-crystallization and self-purification of metal during a long history of its life. Elements found in almost every rubbing sample were identified: calcium, ferrum, zinc, cuprum, and chlorine. The studies of cold weapons samples testify to the heterogeneity of the composition of patina formations on their surface, which confirms the authenticity of ancient objects. In addition, the studies have shown a difference in the chemical composition of surface layers of different parts of individual samples of antique cold weapons, which may indicate different times or different technology for their manufacture. The fluorescence spectra of the obtained rubbing of individual samples of cold weapons were compared with "pure" material, which made it possible to identify elements removed from the surface of objects. The study results are important indicators to confirm the authenticity of cultural monuments and the technology of their manufacture in the past.

Security Analysis of Machine Learning-Based PUF Enrollment Protocols: A Review.

The demand for Internet of Things services is increasing exponentially, and consequently a large number of devices are being deployed. To efficiently authenticate these objects, the use of physical unclonable functions (PUFs) has been introduced as a promising solution for the resource-constrained nature of these devices. The use of machine learning PUF models has been recently proposed to authenticate the IoT objects while reducing the storage space requirement for each device. Nonetheless, the use of a mathematically clonable PUFs requires careful design of the enrollment process. Furthermore, the secrecy of the machine learning models used for PUFs and the scenario of leakage of sensitive information to an adversary due to an insider threat within the organization have not been discussed. In this paper, we review the state-of-the-art model-based PUF enrollment protocols. We identity two architectures of enrollment protocols based on the participating entities and the building blocks that are relevant to the security of the authentication procedure. In addition, we discuss their respective weaknesses with respect to insider and outsider threats. Our work serves as a comprehensive overview of the ML PUF-based methods and provides design guidelines for future enrollment protocol designers.

HARDWARE SUPPORT PROCEDURES FOR ASYMMETRIC AUTHENTICATION OF THE INTERNET OF THINGS

Subject of research: procedures of asymmetric authentication of Internet of Things nodes to ensure the highest level of security using cryptographic chips. The aim of the article is to study the ways of potential use of cryptographic chips to ensure secure authentication of Internet of Things sites using asymmetric cryptography procedures. The article solves the following tasks: analysis of hardware support technologies for asymmetric cryptography of the Internet of Things; definition of secure procedures for asymmetric authentication of Internet of Things sites and their constituent elements: creation of certificates, verification of public and private keys. Research methods: method of structural and functional analysis and design of complex systems, methods of identification and authentication of information objects, cryptographic methods of information protection, methods of security analysis of distributed information systems. The novelty of the study is the analysis of hardware support technologies for asymmetric cryptography of Internet of Things with cryptographic chips and the definition of structural and functional schemes for the implementation of procedures for asymmetric authentication of Internet of Things. Distinctive features of the provided asymmetric authentication schemes and procedures are: ensuring an increased level of information security through secure storage of cryptographic keys, digital signatures, certificates, confidential data in a novelty security environment protected from external attacks and no need to store private keys on the host side. The results of the work are procedures and schemes of application of cryptomicrops of asymmetric authentication to ensure the protection of Internet of Things. Analysis of the functioning of the presented schemes allowed to draw the following conclusions. The proposed structural and functional schemes for the implementation of procedures for asymmetric authentication of Internet of Things using cryptographic chips give the user an easy opportunity to implement cryptography without expertise in this field. These chips use the ECDSA digital signature computing and verification hardware with elliptical curve advantages, as a proven and reliable authentication algorithm, and the ECDH symmetric encryption session key generation unit. The provided schemes and procedures support three components of information security, namely: confidentiality, integrity and authenticity of data. Examples of potential applications of the provided schemes and procedures can be implemented using any asymmetric authentication chip, but it is recommended that they be used to generate encryption session keys and where digital signatures are required to verify data and code for integrity and authenticity.

Prioritization of Surgery in Cancer Patients During the COVID-19 Pandemic: Lessons From a Failed Balancing Act.

The prioritization of surgical oncology over other elective interventions during COVID-19 has failed to preserve the quality of care in oncology and will likely lead to an increase of cancer-related mortality in the coming years. We propose five components for systems to improve the organization of surgical oncology during future crises, namely (1) a multidisciplinary governance structure employing predictive models and risk/benefit evaluations, (2) predefined quality objectives based on measurable markers (regularly reviewed and adapted), (3) temporary flexibility in therapeutic algorithms and authorization procedures (with associated safeguards), (4) systems to ensure access to transparent, apolitical information, and (5) explicit, dedicated logistical surgical capacities to optimize coordination and resource allocation.