Authentication Server Research Articles

Usability Evaluation pada Aplikasi Taspen Otentikasi Berbasis System Usability Scale: Studi Kasus pada Pensiunan PNS

The Taspen Otentikasi application is a self-authentication service for retirees that uses combined biometric technology, which includes voice, face, and movement recognition from PT Taspen Persero. The aim of digitizing the authentication service into self-authentication is to make it easier for PT Taspen customers who are retirees and most of whom have entered old age so that they do not need to come to the Taspen payment partner office to carry out authentication at the counter and to avoid document forgery. To find out how easy a system can be used, usability testing can be carried out. One method that can be used in usability testing is the System Usability Scale (SUS). The total number of respondents used was 34 respondents. From this test, a score of 68.3 was obtained, which indicates that the system that has been built still needs to be refined so that it can be well received by users, especially elderly people.

NDNOTA: NDN One-Time Authentication

Named Data Networking (NDN) stands out as a prominent architectural framework for the future Internet, aiming to address deficiencies present in IP networks, specifically in the domain of security. Although NDN packets containing requested content are signed with the publisher’s signature which establishes data provenance for content, the NDN domain still requires more holistic frameworks that address consumers’ identity verification while accessing protected contents or services using producer/publisher-preapproved authentication servers. In response, this paper introduces the NDN One-Time Authentication (NDNOTA) framework, designed to authenticate NDN online services, applications, and data in real time. NDNOTA comprises three fundamental elements: the consumer, producer, and authentication server. Employing a variety of security measures such as single sign-on (SSO), token credentials, certified asymmetric keys, and signed NDN packets, NDNOTA aims to reinforce the security of NDN-based interactions. To assess the effectiveness of the proposed framework, we validate and evaluate its impact on the three core elements in terms of time performance. For example, when accessing authenticated content through the entire NDNOTA process, consumers experience an additional time overhead of 70 milliseconds, making the total process take 83 milliseconds. In contrast, accessing normal content that does not require authentication does not incur this delay. The additional NDNOTA delay is mitigated once the authentication token is generated and stored, resulting in a comparable time frame to unauthenticated content requests. Additionally, obtaining private content through the authentication process requires 10 messages, whereas acquiring public data only requires two messages.

Blockchain‐based decentralized oracle network framework for identity management in metaverse environment

AbstractManaging identities in metaverse environment is challenging due to the conflicting requirements of ensuring user privacy while enforcing accountability. Users may participate in the metaverse through multiple virtual identities or avatars for different applications/scenarios. Thus, virtual identities must be continuously generated and mapped with real identities. Further, user privacy needs to be protected while not ensuring blanket anonymity to indulge in objectionable or unlawful conduct. Ensuring privacy for the metaverse while still being able to pinpoint users for their actions in the metaverse is a significant research issue. Solving the aforementioned issue, we propose a third‐party identity management solution for the metaverse based on creating a decentralized oracle network (DON) providing identity authentication and mapping service. The proposed identity management framework is metaverse platform agnostic, ensuring users' privacy on the platform while still being able to uncover their real identities if warranted. The proposed framework is viable as evidenced by experimental results of DON and blockchain implementation. The DON based framework leverage the benefits of blockchain technology and introduces immutability, transparency, and traceability into the the metaverse environment. This ensures data integrity and minimizes the frequency of cyber attacks in the metaverse ecosystem.

Development of a Secure Web-Based Medical Imaging Analysis Platform: The AWESOMME Project.

Precision medicine research benefits from machine learning in the creation of robust models adapted to the processing of patient data. This applies both to pathology identification in images, i.e., annotation or segmentation, and to computer-aided diagnostic for classification or prediction. It comes with the strong need to exploit and visualize large volumes of images and associated medical data. The work carried out in this paper follows on from a main case study piloted in a cancer center. It proposes an analysis pipeline for patients with osteosarcoma through segmentation, feature extraction and application of a deep learning model to predict response to treatment. The main aim of the AWESOMME project is to leverage this work and implement the pipeline on an easy-to-access, secure web platform. The proposed WEB application is based on a three-component architecture: a data server, a heavy computation and authentication server and a medical imaging web-framework with a user interface. These existing components have been enhanced to meet the needs of security and traceability for the continuous production of expert data. It innovates by covering all steps of medical imaging processing (visualization and segmentation, feature extraction and aided diagnostic) and enables the test and use of machine learning models. The infrastructure is operational, deployed in internal production and is currently being installed in the hospital environment. The extension of the case study and user feedback enabled us to fine-tune functionalities and proved that AWESOMME is a modular solution capable to analyze medical data and share research algorithms with in-house clinicians.

Enhanced Road Safety through Integrated Speed Breaker, Pothole, and Lane Detection System

Abstract: Amidst the rapid evolution of autonomous vehicle technologies, ensuring road safety remains a paramount challenge. Effective detection of lanes and potential hazards, including speed breakers and potholes, is critical for safe autonomous driving. In this study, we introduce an innovative Lane, Speed Breaker, and Pothole Detection System (LSPDS) utilizing YOLOv4 Tiny, a state-of-the-art object detection algorithm and computer vision techniques. Our system integrates computer vision and machine learning techniques for analysis of road conditions. By employing camera sensors, we capture the road scene and apply image processing algorithms to identify lanes, speed breakers, and potholes. Moreover, the system incorporates Firebase for user authentication and SMS services for real-time alerts. YOLOv4 Tiny is employed for accurate detection and classification of these features within the captured images, thereby enhancing the perception capabilities of autonomous vehicles.

Counterfeit Product Detection using Blockchain Technology

A fraudulent practice where products that are passed off as genuine, product counterfeiting represents consumer fraud, which translates to financial losses. Transparency in supply chain management also faces a big challenge in terms of service repetition and lack of coordination. Numerous remedies have been implemented to battle counterfeiting, among them Artificial Intelligence and RFID, among others, all of which have significant issues such as incivility. This project tackles the problem by applying blockchain technology to improve counterfeit determination and assure product items’ authenticity all over the source chain. The scheme is built on blockchain encryption techniques, which promote a decentralized service for genuine authentication and duplication identification. Through the usage of QR codes and barcodes found in wireless technologies, counterfeit items are eradicated . When scanning a product’s QR or barcode with a camera scanner, the product’s unique code is linked to the blockchain, and all its complete details are stored within it. The database consists of multiple blocks, each one representing a unique product. In case of scanning, if the entered code matches with the database, a popup notification will display on the customer’s device that this product is genuine. Contrary to it, if there is no match found, means it is a counterfeit product; then a popup displays on the customer’s mobile, computer screen about the fraud transaction of the manufacturer from which points this scam is originating if the customer allows doing this action using the application . This will enable users to authenticate products independently without relying on sellers.

A Novel Protocol Using Captive Portals for FIDO2 Network Authentication

FIDO2 authentication is starting to be applied in numerous web authentication services, aiming to replace passwords and their known vulnerabilities. However, this new authentication method has not been integrated yet with network authentication systems. In this paper, we introduce FIDO2CAP: FIDO2 Captive-portal Authentication Protocol. Our proposal describes a novel protocol for captive-portal network authentication using FIDO2 Authenticators as security keys and passkeys. For validating our proposal, we have developed a prototype of FIDO2CAP authentication in a mock scenario. Using this prototype, we performed a usability experiment with 15 real users. This work makes the first systematic approach for adapting network authentication to the new authentication paradigm relying on FIDO2 authentication.

An Analysis and Improvement Scheme for the Weakness of Kerberos V5 Authentication

The security protocol of network system can ensure the reliability of network communication. Kerberos protocol is a kind of security verification mechanism based on shared key, which has been adopted for a long time on the Internet. This text introduces the authentication process of Kerberos v5 protocol. To the defect that the authentication server don’t authenticate the user’s identity but it hold safe in building on the basis whether the user can correctly decrypt the ciphertext message in the protocol, we put forward a scheme that adding in the Challenge/Response mechanism to improve its security in Symmetric Cipher Mechanism. Passing the improved scheme’s analysis we can perceive the method that adding in Challenge/Response identity authentication technology will greatly resist Offline Password Conjecture Attack.

RatHole: Authentication Algorithm for Controling Access to Mobile Phone File Management System

Millions of Naira are being laundered by criminals through internet fraud, which deceives the victim with a false presentation, or hacking, which involves breaking information system security to steal financial information or data. Cybercrime, more specifically internet fraud, has become a common problem facing the world. In any case, this only occurred if the attacker was able to obtain the victim's account privileges (bank account, credit card information, or login credentials). This work presented an authentication technique that can be inexpensively implemented and used to create a secure architecture that is hard to breach. It can also reduce the amount of overhead that is placed on the authentication server during an attempt at authentication. The possibility of breaking the authentication technique was calculated using probability theory, and the mobile-based authentication algorithm was implemented using Android Studio. The result of this research shows the implementations of RatHole algorithm using android operating system which is file management android app that is being protected with RatHole algorithm and the probability of breaking down the algorithm for 1 to 10 authentication method keeps reducing by averagely 0.12. The implemented Rat-Hole on android devices also consumed 20 to 30 megabytes of data very less than memory consumption of recent research based on block chain solution which consumed 1 gigabyte to 50 gigabyte of memory.

Harmonized European Union subnational crop statistics can reveal climate impacts and crop cultivation shifts

Abstract. The availability of coherent time series of crop statistics is essential for better analyzing the past, understanding the present, and predicting future trends in yield, area, and production. Importantly, such data also underpin assessments and subsequent policy actions that can shape future food systems that are more resilient in the face of climate change and that are sustainable in terms of resource use efficiency. In the European Union (EU), there currently is no legal obligation for EU countries to provide subnational crop statistics. However, such data could improve in-season crop forecasts, climate change impacts and adaption need assessments, and evaluation of agri-environmental schemes. The dataset described in this paper includes a harmonized collection of subnational crop statistics on area, production, and yield, collected for the EU from National Statistical Institutes (NSIs) and the EUROSTAT REGIO database – subnational crop statistics voluntarily contributed by EU countries. The crops considered are wheat (including soft and durum wheat), barley (including winter and spring barley), grain maize, sunflower, and sugar beet. All data are harmonized towards the hierarchical structure of the EUROSTAT legend and the regional classification of NUTS (Nomenclature of Territorial Units for Statistics) version 2016, to provide coherent time series. A total of 344 282 records is presented here (115 974 for wheat, 122 705 for barley, 35 274 for grain maize, 34 916 for sugar beet, and 35 413 for sunflower) for a total of 961 regions in 27 EU countries. Statistics are reported from 1975 to 2020, with a median time-span range of 21 years. A flagging system details, for each data record, information on data sources, processing steps, and quality-checking results. This includes consistency checks between reported values for area, yield and production, identification of null values, missing and calculated data, information on crop legend matching, and NUTS versioning. We illustrate the value of this dataset by analyzing impacts on crops and production zone shifts in Europe due to climatic and economic factors. Recommendations and future developments of collecting subnational statistics at the EU level are briefly discussed. The dataset is accessible with European Commission Authentication Service (ECAS) login at https://doi.org/10.2905/685949ff-56de-4646-a8df-844b5bb5f835 (Ronchetti et al., 2023b).

Cryptanalysis of a privacy-preserving authentication scheme based on private set intersection

Abstract Continuous and context-aware authentication mechanisms have been proposed as complementary security mechanisms to password-based authentication for computer devices that are handled directly by humans, such as smart phones. Such authentication mechanisms incur some privacy issues as user-dependent features are revealed to the authentication server, which is assumed to be untrusted. Domingo-Ferrer et al. proposed a privacy-preserving protocol for context-aware user authentication on the basis of private set intersection and Paillier homomorphic encryption. This approach enables user authentication based on establishing the number of similarities between sampled user context data and reference context data, without revealing any plaintext data to either party. The authors claim that their scheme is secure against malicious adversaries. In this article, we show that Domingo-Ferrer et al.’s scheme is insecure by means of two undetectable attacks that reveal all user information despite the encryption. The Paillier encryption primitive has a homomorphic property that we observe not only lacks relevance but, indeed, incurs a vulnerability that is exploited in the proposed cryptanalysis. This means that special care needs to be taken considering homomorphic properties of cryptographic primitives used in cryptographic protocols. Our cryptanalysis may therefore have a general interest regarding the design of cryptographic protocols.

A secure and privacy preserved data aggregation scheme in IoMT

The Internet of Things (IoT) is a network of intelligent devices especially in healthcare-based systems. Internet of Medical Things (IoMT) uses wearable sensors to collect data and transmit to central repositories. The security and privacy of healthcare data is a challenging task. The aim of the study is to provide a secure data sharing mechanism. The existing studies provide secure data sharing schemes but still have limitations in terms of hiding the patient identify in the messages exchanged to upload the data on central repositories. This paper presents a Secure Aggregated Data Collection and Transmission (SADCT) that provides anonymity for the identities of patient's mobile device and the intermediate fog nodes. Our system involves an authenticated server for node registration and authentication by saving security credentials. The proposed scheme presents the novel data aggregation algorithm at the mobile device, and the data extraction algorithm at the fog node. The work is validated through extensive simulations in NS along with a security analysis. Results prove the supremacy of SADCT in terms of energy consumption, storage, communication, and computational costs.

A critical survey of the security and privacy aspects of the Aadhaar framework

Aadhaar is an identification document issued by the Unique Identification Authority of India (UIDAI) to the residents of India. It contains a 12-digit unique identification number (known as the Aadhaar number) and personal details such as name, address, date of birth and biometric data. The biometric data captured for Aadhaar includes fingerprints, facial images and iris scans, which are unique to each individual. The Aadhaar data is used for entity authentication while accessing various government services, availing subsidies, opening bank accounts and conducting other identity-dependent transactions. Thus, the Aadhaar framework provides efficient authentication services in India's public delivery systems. Although UIDAI has implemented stringent security measures such as encryption, access controls and regular audits of the system, the use of Aadhaar has raised several concerns regarding privacy and data security aspects. In this regard, only a handful of studies discuss the security challenges related to Aadhaar. Furthermore, the Aadhaar framework itself is always evolving, thus making prior studies less informative. This paper describes in detail the security features of the Aadhaar card while emphasizing the security challenges involving demographic and biometric data. We have also outlined the preventive measures that can be enforced to secure these data. Finally, this study investigates possible linkage attacks that could occur when different databases are linked for Aadhaar-enabled public schemes. Hence, our work summarizes the security and privacy implications of the Aadhaar infrastructure from a holistic perspective. We believe that our work would be useful for security professionals and policy makers engaged in designing large-scale authentication frameworks.

ASAP-IIOT: An Anonymous Secure Authentication Protocol for Industrial Internet of Things.

With the increasing demand for a digital world, the Industrial Internet of Things (IIoT) is growing rapidly across various industries. In manufacturing, particularly in Industry 4.0, the IIoT assumes a vital role. It encompasses many devices such as sensing devices, application servers, users, and authentication servers within workshop settings. The security of the IIoT is a critical issue due to wireless networks' open and dynamic nature. Therefore, designing secure protocols among those devices is an essential aspect of IIoT security functionality and poses a significant challenge to the IIoT systems. In this paper, we propose a lightweight anonymous authentication protocol to preserve privacy for IIoT users, enabling secure IIoT communication. The protocol has been validated to demonstrate its comprehensive ability to overcome various vulnerabilities and prevent malicious attacks. Finally, the performance evaluation confirms that the proposed protocol is more effective and efficient than the existing alternatives.

Harnessing brand authenticity to promote prosocial service behavior

In today’s fiercely competitive, customer-centric, and service-driven marketplace, where customer satisfaction, trust, and loyalty are hard-won currencies, brand authenticity emerges as a pivotal cornerstone, potentially fostering prosocial service behavior among employees—a crucial driver of organizational success. Yet, the intricate link between brand authenticity and prosocial service behavior remains a compelling and notably understudied frontier. To address this gap, we explore how prosocial service behavior can be shaped by brand authenticity. Using partial least squares–structural equation modeling based on survey responses from a random sample of 410 frontline employees in the hospitality industry, we found that brand authenticity alone cannot spark prosocial service behavior. Instead, brands must foster psychological empowerment and organizational commitment in order to activate and harness the power of brand authenticity in nurturing prosocial service behavior. This is because employees require both a belief in their own influence (empowerment) and a strong attachment to their organization (commitment) to fully express the genuine values of a brand through prosocial actions. However, caution should be noted: introducing job autonomy might diminish the impact of psychological empowerment. This counterintuitive effect could be attributed to the perception that excessive autonomy, while meant to empower, might be seen as a lack of guidance or support. Such a scenario may potentially make employees feel isolated or overwhelmed by decision-making responsibilities.

UAV-Based Secure Data Communication: Multilevel Authentication Perspective

An Internet of Things (IoT) system for managing and coordinating unmanned aerial vehicles (UAVs) has revolutionized the industrial sector. The largest issue with the design of the Internet of UAVs (IoUAV) is security. Conspicuously, the novel contribution of the proposed work is to develop a layered authentication approach to facilitate safe IoUAV communication. Specifically, four modules, including the pre-deployment module, user registration module, login module, and authentication module, form the basis of security analysis. In the proposed technique, UAVs are added to the IoUAV registry. The next step is the user registration module, where people are registered with the UAV so they may access the information in real time. In the login module, the user connects with the server for data transmission. Finally, in the authentication module, all entities, including users, servers, and UAVs, are authenticated to ensure secure data communication. The proposed method achieves peak performance as compared to the state-of-the-art techniques in terms of statistical parameters of latency (3.255s), throughput (90.15%), and packet loss (8.854%).

An optimized secure dual authentication for VANETs

“Vehicular Ad-hoc Network (VANET)” has emerged as a hotbed of research and development. This technology has been utilized to improve vehicle and road safety by transmitting information about traffic congestion and road conditions during emergencies in order to soothe drivers and passengers. However, such environments are more vulnerable to security risks. Thus, the primary challenge in such an environment is to provide authentication services while maintaining user confidentiality. To that end, a trustworthy authority (TA) is established, which offers services to users as well as authentication of communications transmitted between trusted authorities and VANET nodes. A trusted authority (TA) is established using VANETs to supply clients with a range of online premium services. As a result, preserving the confidentiality and authenticity of messages conducted between the TA and VANET nodes is crucial. Our proposed method minimizes recognition latency by up to 85% when compared to On-site Driver ID, and decreases authentication latency by up to 94%, respectively.

RTK+OSNMA Positioning for Road Applications: An Experimental Performance Analysis in Finland.

We compare the performance of dual-band (GPS L1/L2 and Galileo E1/E5a) real-time kinematic (RTK) positioning in an open sky and urban scenarios in southern Finland using two different authentication schemes: one using only satellites authenticated by Galileo's open service navigation message authentication (OSNMA) service (which at the moment of our tests led to using only authenticated Galileo satellites) and the other with no authentication. The results show the actual trade-off between accuracy and availability vs. authenticity associated with using only OSNMA-authenticated satellites, while the authentication of only Galileo satellites is possible (e.g., a drop of RTK positioning availability from 96.67 to 86.01% in our open sky and from 73.55 to 18.65% in our urban scenarios, respectively), and an upper bound of the potential performance that could be reached in similar experimental conditions had the authentication of GPS satellites been supported (e.g., an overall 14 cm and 10.20 m 95% horizontal accuracy in our open sky and urban scenarios, with below 30, 20 and 10 cm during 97.39, 96.03 and 92.43% of the time in the open sky and 49.12, 45.96 and 39.63% in the urban scenarios, respectively).

Enabling secure health information sharing among healthcare organizations by public blockchain

The facilitation of sharing and exchanging patients’ health records is a paramount opportunity in e-health, enabling healthcare providers to garner a comprehensive and clear perspective of patients’ medical histories without necessitating direct inquiries. Besides this great advantage, it introduces substantial issues on security and privacy, mainly related to unauthorized access to e-health records when different healthcare service providers maintain records. In this paper, we deal with this problem and propose using the blockchain technology (1) to obfuscate the linkage between patients’ identities and their e-health records and (2) to grant access to e-health records exclusively to entities authorized by patients themselves. Key outcomes include using a digital identity based on the Electronic Identification, Authentication, and Trust Services Regulation (eIDAS) to control access to these records, and a concrete implementation by adopting the Ethereum blockchain. Our solution relies on using a public blockchain, which is an improvement for the state of the art, in which only private or consortium blockchains have been proposed. The resulting solution has been analyzed, and the effectiveness and affordability of the proposal have been shown.

Compatibility and Information Asymmetry in Online Matching Platforms

Firms seeking business partners and individuals seeking life partners face several challenges in addition to finding available candidates. One of these challenges is uncertainty about a candidate’s compatibility with the match-seeker on various subjective criteria. Another challenge is authentication of objective quality features, particularly in online settings where credentials can be easily misrepresented. Online matching platforms can address these challenges through counseling services that help assess mutual compatibility of match-seekers and authentication services to validate match-seekers’ credentials. Using a stylized model, we show that the platform’s decisions to offer counseling and authentication services are influenced by match-seeker behavior in response to factors such as the platform’s counseling capability, the composition of the matching market, and the interactions between the two services. This leads to optimal strategies for the platform that are not obvious and can even be counterintuitive. For instance, offering better counseling does not necessarily result in higher revenues for the platform. And it may be optimal for the platform to reduce its access fee when it decides to offer an authentication service. We also show that when the platform’s counseling capability is modest, an increase in this capability increases the value of authentication (i.e., counseling complements authentication); however, when the platform’s counseling capability is high, counseling and authentication become substitutes, because narrowing the search to only high-value candidates based on authentication can exclude some compatible candidates. Our analysis and results provide valuable insights for platform operators on the relative value of counseling and authentication, and for researchers studying matching platforms for vertically and horizontally differentiated markets. This paper was accepted by Hemant Bhargava, information systems. Supplemental Material: The online appendix and data files are available at https://doi.org/10.1287/mnsc.2021.03807 .