Confidentiality Of User Data Research Articles

Pertanggungjawaban Badan Penyelenggara Jaminan Sosial (BPJS) Kesehatan Atas Kebocoran Data Pribadi Pengguna dalam Perspektif Hukum Pidana

BPJS Health is the Health Social Security Organizing Agency which is responsible for administering health insurance programs for the Indonesian people. However, in the era of increasingly digitalization, user data leakage is a serious problem that must be handled seriously. User data leaks have become an increasingly disturbing issue in this digital era. One of the entities responsible for maintaining the confidentiality of user data is the Social Security Administering Agency for Health. This article aims to analyze BPJS Health's responsibility for leaking user data from a criminal law perspective. This research uses normative research methods with a statutory approach and related cases in its analysis. The research results show that leakage of user data by the Health Social Security Administering Agency can violate several criminal provisions as stated in Law no. 27 of 2022 concerning personal data protection and based on Law no. 11 of 2008 concerning Information and Electronic Transactions, especially in the context of violations of confidentiality and protection of personal data. It can be concluded that BPJS Health has criminal legal responsibility for user data leaks. To minimize the risk of data leaks, the Social Security Administering Agency for Health needs to improve system security and compliance with personal data protection regulations. Apart from that, the government needs to strengthen supervision and law enforcement in dealing with cases of data leaks involving public entities such as BPJS Health.

Perlindungan Platform Halodoc Dalam Menjaga Kerahasiaan Data Pengguna

The purpose of this article is to investigate the methods used by the Halodoc platform in protecting user data during doctor consultations. To collect information, the author uses a literature review approach, collecting and examining various literature, books, scientific papers, as well as data from the media and other related sources. The findings show that Halodoc implements an oath-taking process for medical and non-medical staff to ensure the confidentiality of user data. even non-medical staff also take the oath as they are part of the Halodoc integrated health care unit which is responsible for the personal information and health status of patients in the hospital

APPLICATION OF MACHINE LEARNING METHODS IN THE BANKING SECTOR TO INCREASE THE EFFICIENCY OF DECISION-MAKING

This article examines the modern banking sector in the context of its transformation through the integration of machine learning (ML). This process has become crucial for identifying new avenues for the optimization and automation of financial transactions. In the initial research phase, a deep analysis of existing decision-making methodologies in banks was conducted, focusing on their role in current conditions and the potential to replace human involvement with algorithms. The evaluation and calculation of ML model efficiency revealed certain challenges, such as overfitting and a lack of transparency, but also highlighted significant advantages over traditional systems. When selecting tools for the implementation and deployment of ML, a need for specialized tools tailored for the banking sector was identified, considering the specific nuances of this market. Defined efficiency-enhancing directions include developing new regularization methods, improving cross-validation techniques, and advancing explainable AI. The study also emphasized the ethical concerns arising from ML implementation. Notably, primary attention was given to ensuring user data confidentiality and reducing algorithmic bias. Based on the research results, a conclusion about the immense potential of machine learning in the banking sector was drawn. While certain challenges exist, the right approach can lead to the creation of more efficient, secure, and transparent systems, enhancing client trust.

Blockchain-based Security Mechanisms for Internet of Medical Things (IOMT)

Traditional standards and security protocols are recognized as unable to solve the security, privacy, and availability of services of the Internet of Medical Things (IoMT) ecosystem, especially during the Coronavirus (COVID-19) pandemic. Blockchain technology has then emerged as a distributed ledger technology that can manage many intelligent transactions and ensure greater security in data management. The Blockchain-based security mechanisms with specific adaptation and additional layers of authentication and verification can offer a complete resources' management system. It has demonstrated it’s superlatively as the core component of the Bitcoin cryptocurrency. In this paper, we propose a ThreeTier Blockchain Architecture in a hierarchical clustering network, with a lightweight authentication system-based API Gateway model that provides network and communication security. Reasonable implementation is proposed and the obtained results demonstrate that our approach shows satisfactory performances in terms of transfer time, energy consumption, and CPU impacts. The traffic analysis also shows that the proposed model can meet the requested security, integrity, and confidentiality of user data.

Flexible Wildcard Searchable Encryption System

Searchable Encryption is a cryptographic technique which allows search of data in an encrypted format. This technique provides user data confidentiality insurance for public cloud storage service as well as allows multiple keyword search over encrypted data. Previously existing systems provide exact or fuzzy keyword search which corrects spelling errors only and their features are limited. In this paper, we propose a system known as adaptable wildcard searchable encryption system which allows mu.

The Secure Lattice-Based Data Aggregation Scheme in Residential Networks for Smart Grid

With the rapid development of computer networks, the network architecture has been more and more complex and diverse. Smart grid is a kind of wireless sensor network consuming energy in smart city. Smart grid communications have developed rapidly in recent years, while the privacy, integrity, and confidentiality of user data have been the main security issues. However, lattice-based homomorphic cryptography can resist quantum attacks and effectively provide the security of the scheme. In this article, we proposed an aggregate signature scheme based on new Batch RSA. After that, a data aggregation scheme is proposed based on this aggregate signature scheme and the qualified homomorphic cryptosystem. Compared to the previous schemes, our scheme is more secure because we implement seven properties, such as post quantum, privacy, and so on. Compared to the representative scheme proposed by Abdallah <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">et al.</i> , our scheme has lower computation and communication overhead. In addition, the cryptographic algorithms involved in our scheme are lightweight. The network model in our scheme is suitable for large intelligent communities. So, our scheme is very suitable for the residential area network.

Security Analysis of Shadowsocks(R) Protocol

Shadowsocks(R) is a proxy software based on Socks5, which is the collective name of shadowsocks and shadowsocksR. Shadowsocks(R) is a private protocol without a handshake negotiation mechanism. Peng broke the confidentiality of shadowsocks by exploiting vulnerability in the shadowsocks protocol and decrypted the shadowsocks packets encrypted with none-AEAD encryption options using a redirection attack. Chen et al. started with the cryptographic algorithm used by shadowsocks(R) and preliminarily discussed the confidentiality of user data under the protection of shadowsocks(R) in theory. Based on Chen’s work, this paper further clarifies the shadowsocks(R) protocol format and studies the encryption mechanism of shadowsocks(R) from the perspective of protocol analysis. The vulnerability of the shadowsocks(R) encryption mechanism is found, and an attack method of shadowsocks(R) is proposed. The attack method is a passive attack and can decrypt the shadowsocks packets encrypted with any encryption option. Compared with Peng’s attack method, the method is more effective and more suitable for actual attacks. Finally, some methods to improve the protocol security of shadowsocks(R) are proposed.

A blockchain‐based mobile crowdsensing scheme with enhanced privacy

AbstractWith the popularity and development of sensors‐containing intelligent terminals, mobile crowdsensing system (MCS) based on the Internet of Things (IoT) has become a new paradigm of application. By the MCS, the pervasive smart device users are enabled to collect large‐scale data cost‐effectively, for crowd intelligent extraction and human‐centric service delivery. However, most of the existing MCSs are based on a centralized structure vulnerable to attacks and intrusions. Moreover, the data collected through crowdsensing are diverse and difficult to guarantee user privacy, especially during the payment and data upload stages. In this article, we propose a blockchain‐based privacy‐preserving crowdsensing (BPPC) scheme based on the distributed structure, to protect user privacy. First, we combine the multiblockchain technology and K‐anonymity to construct anonymity groups for the confusion. Second, we present the random algorithm HashProof to select candidates from the anonymity groups to avoid deployment of Trusted Third Party (TTP) or agent server. Ultimately, we design encryption‐based algorithms building trust and authentication mechanisms in the system to guarantee the confidentiality of user data and achieve the accurate distribution of rewards. To verify the effectiveness and efficiency of the BPPC scheme, extensive experiments were conducted.

Taylor–HHO algorithm: A hybrid optimization algorithm with deep long short‐term for malicious JavaScript detection

The security of information has become a major issue due to the development of network information-based technologies. The malicious script, like, JavaScript, is a major threat to computer networks in terms of network security. Here, the JavaScript allows the programmers not only to build advanced client-side interfaces for web-based applications but also utilized for carrying out attacks that may steal the user's confidential data. In addition, the attackers can easily induce malicious JavaScript into webpages for implanting attacks, like, phishing, spreading viruses, and Trojan horses. This paper devises a novel method, namely, Taylor–Harris Hawks Optimization driven deep long short-term memory (Taylor–HHO-based Deep LSTM) for malicious JavaScript discovery. Initially, the JavaScript is subjected as input to feature extraction in which certain features, such as time of execution, function calls, condition statement, break statement, loop statements, Boolean, number of lines, and number of O(N2) loops, are extracted. The obtained features are fed to transformation, wherein log transformation is applied for data transformation. The obtained transformed features are fused using information gain and Deep LSTM. Furthermore, the proposed Taylor–HHO-based Deep LSTM is employed for discovering malevolent JavaScript. The proposed Taylor–HHO-based Deep LSTM provided enhanced performance with the highest accuracy of 0.955, minimal FPR of 0.059, and highest TPR of 0.967.

Analisis privasi data pengguna contact tracing application pengendalian COVID-19 di Indonesia berdasarkan PERPRES RI No. 95 tahun 2018 tentang sistem pemerintahan berbasis elektronik

The presence of user contact applications in the community as a means of preventing and overcoming the spread of COVID-19 can pose another risk to the potential dangers of protecting data privacy from contact tracing. This research examines more deeply related to user privacy policies through 3 (three) samples of android-based user contact applications that are used as a means of preventing, overcoming and controlling the spread of the COVID-19 virus in today's society and by reviewing the rules contained in the Presidential Regulation of the Republic. Indonesian No. 95 of 2018 concerning Electronic-Based Government Systems (SPBE). The study in this study was prepared using the method of literature study, observation and qualitative analysis. A comparison was made regarding the data privacy of the three samples, which was then evaluated and matched with the form of the privacy policy according to Presidential Regulation No. 95 of 2018 concerning Electronic-Based Government Systems (SPBE) and according to the ideal form of data privacy policy based on several experts. Comparative data is obtained through related applications and other electronic media which are then discussed together to conclude and evaluate the data privacy policies of the three sample applications. Based on this research, it can be concluded that privacy intervention to deal with damage and save lives is legal as long as its use is in accordance with regulations in the health, disaster, telecommunications, informatics and other related fields; in this case listed in the Presidential Decree No. 95 of 2018 concerning Electronic-Based Government Systems (SPBE) and there needs to be an increase in efforts to maintain the security and confidentiality of user data privacy through continuous system and data maintenance, encryption of data privacy storage in the manager's data warehouse and added with other data privacy policies can guarantee the security and confidentiality of the privacy of user data.

Checking For Identity-Based Remote Data Integrity Cloud Storage with Perfect Data Privacy

The protection of the data maintained on a database system has the benefit that the cloud service creates a dynamic high-order and often a management issue comparable to the security operating costs. Multiple Online Compensation Monitoring Protocols have been developed to date that will pose a key problem to protect the privacy of cloud-based details. The much-needed role of the data servers is to render the data available to the consumer as necessary in the heavy traffic scenario. In this article, we planned privacy security for unavailable data held by the user, and promoted identification by using encryption strategies such as sha1 and sha2 algorithms to improve user data safety. We use zero general knowledge tests against third force Settlers which in effect improve the user data confidentiality. Under-reaching is achieved in our architecture by the use of file cabinet signature tune generating servers that operate in compliance with wirework traffic and attempt to access the less significant traffic wire work with the necessary details. Our strategy has proved to be safe in the face of threats of abuse, supplying the high-security department with identity-based consumer data deposit and improving efficiency by settling well on the server over cloud vehicle traffic. Implies being more directly linked to defensive shell, which often implies being protected which realistic.

Role-Based Access Control Model for Cloud Storage Using Identity-Based Cryptosystem

As the security of cloud storage cannot be effectively guaranteed, many users are reluctant to upload their key data to the cloud for storage, which seriously hinders the development of cloud storage. Since ensuring the confidentiality of user data and avoiding unauthorized access is the key to solving the security problems of cloud storage, there has been much cryptographic research proposing the use of the combination of cryptography technologies and access control model to guarantee the data security on untrusted cloud providers. However, the vast majority of existing access control schemes for ciphertext in cloud storage do not support the dynamic update of access control policies, and the computational overhead is also very large. This is contrary to the needs of most practical applications, which leverage dynamic data and need low computation cost. To solve this problem, combined with identity-based cryptosystem (IBC) and role-based access control (RBAC) model, we propose an RBAC (In this paper we use RBAC1 model which is richer access control model)) scheme for ciphertext in cloud storage. We also give the formal definitions of our scheme, a detailed description of four tuple used to represent access control strategy, the hybrid encryption strategy and write-time re-encryption strategy, which are designed for improving the system efficiency. The detailed construction processes of our scheme which. Include system initialization, add and delete users, add and delete permissions, add and delete roles, add and delete role inheritance, assign and remove user, assign and remove permission, read and write file algorithm are also given. Finally, we analyze the scheme and prove that it is correct, access control preserving (AC- preserving) and secure.

Formal Analysis of 5G EAP-TLS Authentication Protocol Using Proverif

As a critical component of the security architecture of 5G network, the authentication protocol plays a role of the first safeguard in ensuring the communication security, such as the confidentiality of user data. EAP-TLS is one of such protocols being defined in the 5G standards to provide key services in the specific IoT circumstances. This protocol is currently under the process of standardization, and it is vital to guarantee that the standardized protocol is free from any design flaws, which may result in severe vulnerabilities and serious consequences when implemented in real systems. However, it is still unclear whether the proposed 5G EAP-TLS authentication protocol provides the claimed security guarantees. To fill this gap, we present in this work a comprehensive formal analysis of the security related properties of the 5G EAP-TLS authentication protocol based on the symbolic model checking approach. Specifically, we build the first formal model of the 5G EAP-TLS authentication protocol in the applied pi calculus, and perform an automated security analysis of the formal protocol model by using the ProVerif model checker. Our analysis results show that there are some subtle flaws in the current protocol design that may compromise the claimed security objectives. To this end, we also propose and verify a possible fix that is able to mitigate these flaws. To the best of our knowledge, this is the first thorough formal analysis of the 5G EAP-TLS authentication protocol.

Confidentiality of Users’ Data in Modern Messengers

The purpose of the article is to investigate and consider common problems of messenger systems as a way of modern communication and problems of ensuring the confidentiality of user data in these systems.Methods of research are methods of semantic analysis of the basic concepts of the considered subject area of communication in social networks, systems-messengers under the condition of ensuring the confidentiality of user data. The article discusses the advantages and disadvantages of existing messengers related to organizational, technical and informational aspects. The article discusses the main messenger systems and their functionality to ensure the confidentiality of user data.The novelty of the conducted research is a comparative analysis of modern messenger systems, determination of their advantages, disadvantages and ways of further development from the standpoint of ensuring confidentiality of user’s data.The conclusion of the research article is that information and digitalization nowadays penetrate into all spheres of human activity. Therefore, finding ways to ensure that users of mobile devices and personal computers communicate efficiently and conveniently with the privacy of user’s data has become an important aspect of the IT-business.

A Privacy-Preserving Protocol for Verifiable File Search on the Cloud

Because cloud computing is increasingly popular, a great deal of documentation is outsourced to the cloud with decreased leadership costs and easy access. While encryption helps prevent user data confidentiality, it creates a difficult issue with well-functioning yet virtually efficient safe search features over encrypted information. It should always be encrypted before cloud outsourcing to preserve the privacy of personal documents that are stored in the cloud environment. Retrieving the same data on the cloud is also a still, tedious task. To obtain information, there are several methods available in which keyword-enabled data entry is one of the best methods. Most of these methods are restricted to the handling of a single keyword query. In order to improve search effectiveness and speed, a multi-key word-search method can be used to obtain a respective cloud.

Academic Information System Technology Acceptance Study: Case Study Universitas Internasional Batam

This study was conducted to determine the influence of perceived Usefulness, ease of use (Perceived Ease of Use), security and Privacy of student admissions (Acceptance Of SISFO) at Universitas Batam International through an approach using the Model Techonology acceptance model (TAM) using the analyzed variables are Perceived usefulness (PU), Perceived ease Of Use (PEU), Security and Privacy (SP). Respondents in this study involve active students of the International University of Batam, sampling conducted with purvosive sampling technique, related to the level of testing data obtained will be conducted by testing validity, realiability test, regression test against variable Perceived usefulness (PU), Perceived ease Of Use (PEU), Security and Privacy (SP). Data processing in the study will be conducted empirically using SPSS software, which results the above expected fromindependent variables is a significant test sample to determine the predicted acceptance rate to Academic information systems. The results of study show that testing of independent variable is significant and jointly has a positive influence on the dependent variable, there is the greatest influence on the Security and Privacy (SP) variable so the level of acceptance of academic information system is expected to provide security and maintain the confidentiality of user data.

PpBAC

This article describes how nowadays, cloud computing is one of the advanced areas of Information Technology (IT) sector. Since there are many hackers and malicious users on the internet, it is very important to secure the confidentiality of data in the cloud environment. In recent years, access control has emerged as a challenging issue of cloud computing. Access control method allows data accessing of an authorized user. Existing access control schemes mainly focus on the confidentiality of the data storage. In this article, a novel access control scheme has been proposed for efficient data accessing. The proposed scheme allows reducing the searching cost and accessing time, while providing the data to the user. It also maintains the security of the user's confidential data.

Flexible Wildcard Searchable Encryption System

Searchable encryption is an important technique for public cloud storage service to provide user data confidentiality protection and at the same time allow users performing keyword search over their encrypted data. Previous schemes only deal with exact or fuzzy keyword search to correct some spelling errors. In this paper, we propose a new wildcard searchable encryption system to support wildcard keyword queries which has several highly desirable features. First, our system allows multiple keywords search in which any queried keyword may contain zero, one or two wildcards, and a wildcard may appear in any position of a keyword and represent any number of symbols. Second, it supports simultaneous search on multiple data owner's data using only one trapdoor. Third, it provides flexible user authorization and revocation to effectively manage search and decryption privileges. Fourth, it is constructed based on homomorphic encryption rather than Bloom filter and hence completely eliminates the false probability caused by Bloom filter. Finally, it achieves a high level of privacy protection since matching results are unknown to the cloud server in the test phase. The proposed system is thoroughly analyzed and is proved secure. Extensive experimental results indicate that our system is efficient compared with other existing wildcard searchable encryption schemes in the public key setting.

Use of Intel SGX to ensure the confidentiality of data of cloud users

In this article the problem of possible attacks on confidentiality of user data in cloud systems comes from cloud provider’s side has been investigated. A secure cloud computing system architecture based on Intel Software Guard Extensions technology has been proposed. The approach that provides confidentiality of data of users of cloud systems is given. A method for implementing this approach into existing cloud systems is presented.

Enabling efficient and verifiable multi-keyword ranked search over encrypted cloud data

With the prevalence of the cloud computing, data owners can outsource their data to the cloud server to enjoy convenient services. To ensure the user's data confidentiality, the outsourced data are usually stored in an encryption form on the cloud server, which makes it extremely difficult to search the specific encrypted documents matching some keywords from the cloud server for users. To address this issue, in this paper, we develop a multi-keyword ranked search scheme over encrypted cloud data, which also supports search results verification. To achieve efficient multi-keyword search, we construct a special data structure QSet based on an inverted index structure. To reduce the search complexity, we use the strategy that firstly searching the estimated least frequent keyword in the query to significantly narrow down the number of searching documents. Within this framework, to support ranked search, we utilize the common TF×IDF rule to compute the relevance scores of documents matching a given search request. To resist malicious behaviors of the cloud server, we generate a binary vector for each keyword and use MAC to check the authenticity of the returned ciphertexts. The security analysis demonstrates that our proposed schemes are semantic secure in the adaptive setting. Extensive experimental evaluation shows the efficiency in the computation overhead of search and verification.