User Access Control Research Articles

An Innovative Science Gateway for the Cherenkov Telescope Array

The Cherenkov Telescope Array (CTA) is currently building the next generation, ground-based, very high-energy gamma-ray instrumentation. CTA is expected to collect very large datasets (in the order of petabytes) which will have to be stored, managed and processed. This paper presents a graphical user interface built inside a science gateway aiming at providing CTA-users with a common working framework. The gateway is WS-PGRADE/gUSE workflow-oriented and is equipped with a flexible SSO (based on SAML) to control user access for authentication and authorization. An interactive desktop environment is provided, called Astronomical & Physics Cloud Interactive Desktop (ACID). Users are able to exploit the graphical interface as provided natively by the tools included in ACID. A cloud data service shares and synchronizes data files and output results between the user desktop and the science gateway. Our solution is a first attempt towards an ecosystem of new technologies with a high level of flexibility to suit present and future requirements of the CTA community.

Distribute with Proficient Revocation of Data Stored in Clouds

Access control is processed on centralized form with key distributed center (KDC). Because of this data are affected if any one of the key gets attacks. To recover the data from the overall damage from attacks, providing attributes for the data in decentralized approach. Due to this attribute based access control for data in cloud storage. Secure the data storage in clouds, decentralized access control approach is introduced. Access control provides authentication for the user, in which only valid users are able to decrypt the stored information. User authentication and access control scheme are introduced in decentralized, which prevent replay attacks and supports modification on data stored in the cloud. Access control in clouds is gaining attention because it is important that only authorized users have to access to valid service. A huge amount of information is being stored in the cloud, and much of this is sensitive information. Clouds are being store sensitive information about patients to enable access to medical professionals, hospital staff, researchers, and policy makers. Decentralized approach and provides authentication without disclosing the identity of the users.

ViVar: a comprehensive platform for the analysis and visualization of structural genomic variation.

Structural genomic variations play an important role in human disease and phenotypic diversity. With the rise of high-throughput sequencing tools, mate-pair/paired-end/single-read sequencing has become an important technique for the detection and exploration of structural variation. Several analysis tools exist to handle different parts and aspects of such sequencing based structural variation analyses pipelines. A comprehensive analysis platform to handle all steps, from processing the sequencing data, to the discovery and visualization of structural variants, is missing. The ViVar platform is built to handle the discovery of structural variants, from Depth Of Coverage analysis, aberrant read pair clustering to split read analysis. ViVar provides you with powerful visualization options, enables easy reporting of results and better usability and data management. The platform facilitates the processing, analysis and visualization, of structural variation based on massive parallel sequencing data, enabling the rapid identification of disease loci or genes. ViVar allows you to scale your analysis with your work load over multiple (cloud) servers, has user access control to keep your data safe and is easy expandable as analysis techniques advance. URL: https://www.cmgg.be/vivar/

An effective ECC‐based user access control scheme with attribute‐based encryption for wireless sensor networks

AbstractFor critical applications, real‐time data access is essential from the nodes inside a wireless sensor network (WSN). Only the authorized users with unique access privilege should access the specific, but not all, sensing information gathered by the cluster heads in a hierarchical WSNs. Access rights for the correct information and resources for different services from the cluster heads to the genuine users can be provided with the help of efficient user access control mechanisms. In this paper, we propose a new user access control scheme with attribute‐based encryption using elliptic curve cryptography in hierarchical WSNs. In attribute‐based encryption, the ciphertexts are labeled with sets of attributes and secret keys of the users that are associated with their own access structures. The authorized users with the relevant set of attributes can able to decrypt the encrypted message coming from the cluster heads. Our scheme provides high security. Moreover, our scheme is efficient as compared with those for other existing user access control schemes. Through both the formal and informal security analysis, we show that our scheme has the ability to tolerate different known attacks required for a user access control designed for WSNs. Furthermore, we simulate our scheme for the formal security verification using the widely‐accepted automated validation of Internet security protocols and applications tool. The simulation results demonstrate that our scheme is secure. Copyright © 2014 John Wiley & Sons, Ltd.

Development of a RFID Based Library Management System and User Access Control

In this paper a radio frequency identification and detection (RFID) based library management system was developed that will enhance the use and management of library, the services being rendered can be managed with the help of software and hardware tools. This system use RFID technology to track books information in the library and the number of people that access the library. The device consists majorly of a RFID reader, a Bluetooth module, a microcontroller and the materials to be tracked are tagged with a RFID (a transponder).B The unique IDs are stored in a PC running an application with other information on the materials into a database.B Through these processes, books, library users with their information as well as their tag ID can easily be used for cataloging and user authentication. The device is designed to be mobile so that mixed books on shelves can easily be sorted out as the RFID reader moves across them. A model of the system was built, tested with several data and the result showed satisfactory improvement in the efficiency of the library management system. http://dx.doi.org/10.4314/njt.v33i4.19

Research and Implementation of Design Data Management and Processing System

With the design teamdevelopment and the design data quality improvement, the problems in the process of design appear constantly, such as collaborative design, data security managementand dataremote processing.In order to solve these problems, we begin to research and implementation of design datamanagement andprocessing system (DDMP). The system adopts B/S architecture. Through online operations (accept task, review data, etc.), as well as strict management of the system data to realize long distance collaborative design. System respectively from the platform environment, data management, and user access control three aspects to ensure the safety of system. At last, DDMP integrates with rendering and 3D printing platform torealizeremoteprocessing ofdesign data.

ANALYSIS OF COMPONENTS OF SOFTWARE DIGITAL LIBRARY AND AREAS OF IMPROVEMENT

The structure of software digital library were examined. Were identified the basic software components such as: software control digital archive, software electronic library management, software search engine, software authentification were identified. Was carried analysis of the components of the software and identified promising areas of improvement. Listed ways of improvement software control digital archives and software authentication. Using the proposed download information to the archive software (user level) may improve software management digital archive and use the software user access control to expand the software authentication, which allows users to upload publications to the digital archive of digital library.

Enabling Access Control in Partially Honest Outsourced Databases

With the growing popularity of outsourced databases (ODBs), access control for multiple users with different privileges in outsourced environments is required in more and more applications. Under the assumption that ODBs may be interested in the original data value, or delay the update operations when end users cannot verify the results, this paper attempts to enhance ODBs with finegrained access control for multiple users with less impact on their other functionalities. Our work can be divided into two parts. In the first part, we propose a method to enforce the access control rules by encrypting the original table and using the keys to distinguish various rights. In addition to read/non-read rights, read/update rights can be distinguished in our encrypted table. We also implement validation-only rights for ODBs and oblige them to fulfill any update validation without knowing the original data. In the second part, we study the query evaluation over the encrypted table. Two kinds of B+ tree indexes on each column are designed, which can accelerate the selection in ODBs.

Privilege Management System in Cloud Computing using Oauth

OAuth protocol has been developed of fast and easy-to-use proxy authentication structure over a surge in user demand for mobile cloud. However, OAuth involves some security and privacy problems. So, we propose ADAMS for user user authentication system mobile environments that can support user authentication, service authentication and access control services more convenience and easily. ADAMS simplify the authentication processing procedures to improve the structure of complex authentication of SSL or PKI. We developed a book research system in order to evaluate the safety of the ADAMS environment. It was assessment of ADAMS logicality using ASVO logic. ADAMS experimental results can improve confidentiality, integrity, availability, and nonrepudiation services in mobile book research service.

STINGRAY: system for integrated genomic resources and analysis

BackgroundThe STINGRAY system has been conceived to ease the tasks of integrating, analyzing, annotating and presenting genomic and expression data from Sanger and Next Generation Sequencing (NGS) platforms.FindingsSTINGRAY includes: (a) a complete and integrated workflow (more than 20 bioinformatics tools) ranging from functional annotation to phylogeny; (b) a MySQL database schema, suitable for data integration and user access control; and (c) a user-friendly graphical web-based interface that makes the system intuitive, facilitating the tasks of data analysis and annotation.ConclusionSTINGRAY showed to be an easy to use and complete system for analyzing sequencing data. While both Sanger and NGS platforms are supported, the system could be faster using Sanger data, since the large NGS datasets could potentially slow down the MySQL database usage. STINGRAY is available at http://stingray.biowebdb.org and the open source code at http://sourceforge.net/projects/stingray-biowebdb/.

User Access Control and Authentication System for VoIP Service in Mobile Communication Environments

VoIP, which is used to transmit voice data on the Internet, is being welcomed as a replacement for the PSTN. In VoIP, voice data are converted to IP data and transmitted in an ordinary IP network. As a result, it is less expensive than the ordinary telephone network and has excellent scalability. With the increasing demand for VoIP services, problems are also occurring, namely, security vulnerabilities and degraded service quality. To address these issues, in this paper an AA (Attribute Authority) server is added to VoIP to design an authentication system with bolstered security and differentiated user access.

A survey on user access control in wireless sensor networks with formal security verification

User access control provides the permission to impose different access privileges for different types of authenticated users for accessing the sensing information directly from the sensor nodes inside a wireless sensor network (WSN). Until now, there have been ample number of user access control schemes proposed in the literature, and each scheme has its own merits and demerits. In this paper, we identify all the functionality features and security requirements, which must be satisfied for an ideal user access control scheme. We present and discuss the recently proposed important user access control schemes available so far in the literature. We critically analyse the energy, communication, computational overheads requirement, functionality and security analysis of the existing schemes. Further, we perform the formal security analysis of existing schemes using the widely-accepted automated validation of internet security protocols and applications (AVISPA) tool. All the existing schemes have some limitations. Hence, we feel that there is a strong need to design an ideal efficient user access control scheme in future, which should meet all the security requirements and achieve all the functionality features.

Comparative Analysis of Smart Card Authentication Schemes

Various kinds of authentication schemes have been deployed to secure the information or resources from unauthorized access. In these schemes, server maintains a verification table which is vulnerable to a variety of attacks. To withstand the possible attacks for verification table, smart card based authentication scheme has been proposed as an alternative solution. Smart card is a small, tamper-resistant device providing users with a convenient storage and processing capability, it is widely used for a range of applications such as remote user login, online banking, ID verification, access control and e-commerce etc. This article gives comparative analysis of major smart card authentication schemes for single server as well as multi-server environment.

Efficient Cryptographic Access Control Protocol for Sensitive Data Management

In view of sensitive datamanagement, an efficient cryptographic access control scheme is proposed. Basedon attribute-based encryption, the proposed scheme not only inheritsflexibility and fine-grained access control for users, but also realizes cryptographicmanagement for servers. In additional, the scheme alleviates the administeringburdens on the server, and handle dynamic access policies in a more efficientand cryptographic way. Compared with the existing system, the scheme relievesthe server from intense encryption /decryption processing, and achievesreliable decentralized encryption /decryption with good scalability andefficiency.

A novel and efficient user access control scheme for wireless body area sensor networks

Wireless body area networks (WBANs) can be applied to provide healthcare and patient monitoring. However, patient privacy can be vulnerable in a WBAN unless security is considered. Access to authorized users for the correct information and resources for different services can be provided with the help of efficient user access control mechanisms. This paper proposes a new user access control scheme for a WBAN. The proposed scheme makes use of a group-based user access ID, an access privilege mask, and a password. An elliptic curve cryptography-based public key cryptosystem is used to ensure that a particular legitimate user can only access the information for which he/she is authorized. We show that our scheme performs better than previously existing user access control schemes. Through a security analysis, we show that our scheme is secure against possible known attacks. Furthermore, through a formal security verification using the AVISPA (Automated Validation of Internet Security Protocols and Applications) tool, we show that our scheme is also secure against passive and active attacks.

Collision-Tolerant Media Access Control for Asynchronous Users over Frequency-Selective Channels

In this paper, a frequency-domain cross-layer collision-tolerant (CT) media access control (MAC) scheme is proposed for the up-links of broadband wireless networks with asynchronous users. The collision tolerance is achieved with a frequency-domain on-off accumulative transmission (FD-OOAT) scheme, where the spectrum is divided into a large number of orthogonal sub-channels, and each symbol is transmitted over a small subset of the sub-channels to reduce collisions. Such a radio resource management scheme renders a special signal structure that enables multi-user detection (MUD) in the physical layer to resolve the collisions at the MAC layer. Most existing MUDs require precise symbol level synchronization among users. The proposed scheme, however, can operate with asynchronous users. A new theoretical framework is provided to study the impacts of time-domain user delays on system performance. Both analytical and simulation results demonstrate that the proposed FD-OOAT structure with time-domain oversampling is robust to user delays and the timing phase offset caused by the sampling clock difference between the transmitter and the receiver. It is shown that the proposed scheme can achieve significant performance gains, in terms of both the number of users supported and the normalized throughput.

스마트 카드를 사용한 검증자 없는 사용자 인증 및 접근 제어 방법: Chen-Yeh 방법의 개선

User authentication and access control are two important components in high security applications. Recently, Chen and Yeh proposed a method to integrate both of them seamlessly. However, Chen-Yeh`s scheme is vulnerable to a stolen verifier attack, since it maintains a smart card identifier table in a remote server. Therefore, this paper modifies Chen-Yeh`s scheme and propose a new integrated authentication and access control scheme that is resilient to the stolen verifier attack while inheriting all the merits of Chen-Yeh`s scheme. Security analysis shows that the proposed scheme withstands well-known security attacks and exhibits many good features.

Securewall-A Framework for Finegrained Privacy Control in Online Social Networks

Enormous popularity of Social Networking Sites has introduced a great number of privacy risks. Even the most popular of all the social networking sites have characterized access control policies in terms of explicit tracking of the interpersonal relationships between the subjects, objects and their inter relation. In this paper we present a novel paradigm that accounts for a secure, yet sociable information flow model based on access control policies. We took advantage of real time success of the access control security policies in operating systems by implementing them on online social networks at the mandatory level so that the user’s privacy does not have to be at stake by the growth of social network and activities or by the level of user understanding of the privacy settings provided by the social networking sites based on discretionary access control. We used Facebook and Google+ as case study and implemented the security policy in SecureWall to mitigate possible privacy leakage scenarios observed. We have implemented Chinese wall policy for community level privacy, Bell la-Padulla access control model to assure confidentiality to the user and Biba Access control model for providing Integrity. Since Bell la-Padulla and Biba models are basically meant to serve military security and therefore can risk sociability, we have combined the two models using Lipner Security Matrix in order to provide security without risking sociability. Our research can be adopted by online social networking sites for the mandatory level security especially for social networking in organizational specific activities.

Safeguarding ad hoc networks with a self-organized membership control system

One of the key challenges for ad hoc networks is providing distributed membership control. This paper introduces a self-organized mechanism to control user access to ad hoc networks without requiring any infrastructure or a central administration entity. Our mechanism authenticates and monitors nodes with a structure that we call controller set, which is robust to the dynamic network membership. We develop analytical models for evaluating the proposal and validate them through simulations. The analysis shows that the proposed scheme is robust even to collusion attacks and provides availability up to 90% better than proposals based on threshold cryptography. The performance improvement arises mostly from the controller sets capability to recover after network partitions and from the identification and exclusion of malicious nodes.

Enhanced Secure Architecture for Joint Action Test Group Systems

The implementation of debugging tools through joint action test group (JTAG) has led to increased exposure of intellectual property through the interface. In this brief, the first hardware implementation of a flexible multilevel access security system for the JTAG interface is detailed. The proposed method is user-privilege aware, which allows for higher granularity for controlling user access of individual scan chains. The loading of individual JTAG instructions into scan chains can be blocked based on the credentials of the user. The hardware modifications proposed are compliant with IEEE 1149.1, have minimal timing overhead, and require no modifications to the core logic of the integrated circuit.