Device Service Research Articles

OPPR: An Outsourcing Privacy-Preserving JPEG Image Retrieval Scheme with Local Histograms in Cloud Environment

As the wide application of imaging technology, the number of big image data which may containing private information is growing fast. Due to insufficient computing power and storage space for local server device, many people hand over these images to cloud servers for management. But actually, it is unsafe to store the images to the cloud, so encryption becomes a necessary step before uploading to reduce the risk of privacy leakage. However, it is not conducive to the efficient application of image, especially in the Content-Based Image Retrieval (CBIR) scheme. This paper proposes an outsourcing privacypreserving JPEG CBIR scheme. We design a set of JPEG format-compatible encryption method, making no file expansion to JPEG files. We firstly combine multiple adjacent 8 × 8 DCT coefficient blocks into big-blocks. Then, random scrambling and stream encryption are used on the binary code of DCT coefficients to protect the JPEG image privacy. The task of extracting features from encrypted images and retrieving similar images are done by the cloud server. The group index histograms of DCT coefficients are extracted from the encrypted big-blocks, then the global vector is produced to represent the JPEG image with the aid of bagof-words (BOW) model. The security analysis and experimental results show that our proposed scheme has strong security and good retrieval performance.

Queueing systems with different types of renovation mechanism and thresholds as the mathematical models of active queue management mechanism

This article is devoted to some aspects of using the renovation mechanism (different types of renovation are considered, definitions and brief overview are also given) with one or several thresholds as the mathematical models of active queue management mechanisms. The attention is paid to the queuing systems in which a threshold mechanism with renovation is implemented. This mechanism allows to adjust the number of packets in the system by dropping (resetting) them from the queue depending on the ratio of a certain control parameter with specified thresholds at the moment of the end of service on the device (server) (in contrast to standard RED-like algorithms, when a possible drop of a packet occurs at the time of arrivals of next packets in the system). The models with one, two and three thresholds with different types of renovation are under consideration. It is worth noting that the thresholds determine not only from which place in the buffer the packets are dropped, but also to which the reset of packets occurs. For some of the models certain analytical and numerical results are obtained (the references are given), some of them are only under investigation, so only the mathematical model and current results may be considered. Some results of comparing classic RED algorithm with renovation mechanism are presented.

Task Offloading Strategy of 6G Heterogeneous Edge-Cloud Computing Model considering Mass Customization Mode Collaborative Manufacturing Environment

With the continuous integration of cloud computing, edge computing, and Internet of things (IoT), various mobile applications will emerge in future 6G network. Driven by real-time response and low energy consumption requirements, mobile edge-cloud computing (MECC) will play an important role to improve user experience and reduce costs. However, due to the complexity of applications, the computing capacity of devices cannot meet the low-latency and low energy consumption requirement. Meanwhile, subject to the limited supplement of power and energy system, the heterogeneous multilayer mobile edge-cloud computing (HetMECC) is proposed to join cloud server, edge server, and terminal devices for data calculation and transmission. By dividing computing tasks, terminal applications can receive reliable and efficient computing services. The simulation results show that the proposed model can achieve the low-latency requirement of data calculation and transmission and improve the robustness of architecture.

A completely distributed transmission algorithm for mobile device-to-device caching networks

We investigate mobile device-to-device (D2D) caching networks where mobiles called receiving devices (RDs) can receive data directly from caching server devices (CSDs). In mobile D2D caching networks, the quality of communications can be greatly enhanced because end-to-end communication ranges are shortened compared to cellular communications. In this paper, we propose a completely distributed transmission algorithm for mobile caching networks (DMC) based on signal-to-generating interference ratio (SGIR) that can eliminate overhead for signaling and feedback. In the DMC, each CSD autonomously chooses an RD to transmit data to and the CSD multicasts the data to RDs that requested the same data. One CSD is only activated to transmit data to each RD in a distributed manner based on timers. Our numerical results show that the DMC can yield comparable average sum-rates to a centralized scheme in various environments with no extra overhead.

Timely updates in MEC-assisted status update systems: Joint task generation and computation offloading scheme

Fresh status updates are vital to the efficient operation of network monitoring and real-time control applications. In this paper, we consider a mobile edge computing (MEC)-assisted status update system, where smart devices extract valuable status updates from sensed data to achieve timely awareness of the surroundings by exploiting computational resources at the device and edge server. To quantify the freshness of status updates obtained by executing computation tasks, we employ the concept of age of information (AoI) to characterize the timeliness of status updates. To cope with the limited energy at devices, we investigate a joint task generation and computation offloading scheme under a given energy budget for minimizing the age of obtained status updates. The age minimization problem is modeled as a constrained Markov decision process (CMDP). To obtain the optimal policy, we derive the structural properties of the optimal deterministic policy and propose a lightweight structure-based status update algorithm in the case of known channel statistics. Moreover, we consider a more realistic scenario without prior knowledge of channel statistics, and propose a Q-learning-based status update algorithm to make online decisions. Simulation results show that the performance of our proposed algorithms is competitive when compared with existing schemes.

The Design and Implementation of an Augmented Reality Scheme Based on Netty Communication

This paper introduces a whole project of augmented reality interaction mode based on netty communication method, determines the main technical difficulties in the implementation process, and finds the solution by means of system architecture design and communication protocol development. In this paper, the netty framework is adopted to deal with network IO and business logic, and the communication between each terminal device, virtual environment and server is established through long connection, This paper adopts the netty framework to deal with network IO and business logic, establishes communication between each terminal device and virtual environment and server through long connection, so as to realize fast and natural real-time interaction between various interactive devices and other augmented reality devices and virtual environments under multiple users. It can also solve the problem of high concurrency of real-time communication between various devices and the virtual environment in augmented reality.

The research of performance of the “Cypress” lightweight block cipher on different platforms

The Cypress block cipher is a lightweight algorithm based on the Feistel network with ARX-transformation as a round function. The Cypress block cipher supports 256-bit and 512-bit block and key length. The paper presents results of researches on the performance of lightweight block ciphers Cypress-256 and Cypress-512 and it gives comparison of performance of other well-known block ciphers such as AES-256, SPECK-64/128, SPECK-128/128, SPARX-128/128, DSTU GOST 28147: 2009. Performance was evaluated on Windows, Linux and Android platforms by measuring the encryption speed in the Electronic Code Book mode, in Mbps. The Cypress block cipher has demonstrated high performance on all selected platforms. Cypress-256 showed the best result (almost 3.5 Gbps) on the Windows 10 platform with 32-bit architecture. Cypress-512 also showed the best result (almost 5 Gbps) on the Windows 10 platform with 64-bit architecture. On the Linux platform with a 64-bit architecture, Cypress-256 showed a very high speed result (more than 8 Gbps). Cypress-256 and Cypress-512 block ciphers were also the best (1.3 Gbps and 1 Gbps, respectively) on the Android platform. In terms of performance and simplicity of implementation on different software and hardware platforms, Cypress algorithm has several advantages. Two variants of cipher (Cypress-256 and Cypress-512) are oriented on 32-bit and 64-bit architectures, respectively; high speed and compact implementation of transformations regardless of the platform used (server, workstation or mobile device). Minimum amount of memory is required for high-speed implementation, there is no need in pre-computed tables; there is an ability to organize efficient secure high-speed communication channels between mobile systems and servers, including those using hardware accelerators.

Smart System for Elderly Wandering Person

Nowadays wandering became one of the frequent, ticklish and deleterious behaviors of elders suffering from dementia. The same may lead to consequences like getting lost or falling down. The proposed system concentrates on problems related to wandering. In this system, we are planning a security support system focused on android for identifying the location of a wandering elder person. This system is employed with the GPS that can detect the position of the individual within and around buildings, and transmit the location to the server device. It can also detect the sound of the drifting elder person and identify the accurate position. There will be an accelerometer which detects when a person falls. This model informs the caregiver by sending the notification.

Designing parallel computing using raspberry pi clusters for IoT servers on apache Hadoop

The community has widely used the IoT tool because it makes it easy for users in various sectors. The implementation of IoT does not only require connectivity and devices but also requires a server. Servers that are accessed by many devices will have more and more computing processes on the server. The computing process on the server requires a high-performance but small-sized server device that is easy to connect with other devices. Raspberry Pi, known as an IoT server, is a computer with a small size, cheap, and very energy efficient. The parallel machine was built based on Raspberry Pi using parallel computing technology to have high performance. Nowadays, one of the parallel computing tools is Apache Hadoop. This research using clusters method with four pieces of Raspberry Pi with parallel computing technology using Apache Hadoop tools. Testing is done using Siege tools. The number of requests that used to test web server performance in this research was 10, 50, 100, and 150. The most optimal results are on requests by 50 with an increase of about 260% from a single node to cluster in the measurement of transactions, transaction rates, and throughput. Testing with 150 requests can only increase by 50% to 60%.

Analysis and Enhancement of the LoRaWAN Adaptive Data Rate Scheme

The adaptive data rate (ADR) algorithm is a key component of the LoRaWAN protocol which controls the performance of a LoRaWAN Network. This modifies the data rate parameter of a device based on the current wireless conditions. In this article, we present substantive enhancements for the End Device and Network Server which reduce the convergence time for LoRaWAN devices to reach their optimal data rate. We extend the LoRaWAN module in ns-3 by adding ADR, enabling the simulation of realistic LoRaWAN networks, and add the implementation of the new enhancements in this module. The simulations show that these modifications can result in a significant reduction of the data rate convergence time for LoRaWAN devices and lead to an increased overall packet delivery rate for the network in a dynamic network environment. Our contributions are a publicly available implementation of ADR in ns-3, an analysis of the original algorithm behavior, and a novel version of the algorithm with enhancements that improve performance in every case while remaining easily integrable into an existing LoRaWAN system.

RETRACTED ARTICLE: Energy aware smartphone tasks offloading to the cloud using gray wolf optimization

In recent era, the task offloading to cloud servers from the smartphones is a promising strategy in improving the smartphones capability and its battery lifetime. The effectiveness of task offloading is found by considering the communication cost and energy consumption, which is considered as crucial factors. These two factors enables the smartphone devices to incur proper decisions whether to perform task offloading or not. In this paper, a heterogeneous framework is designed to improve the energy efficiency of mobile phones by considering various system parameters like local cloudlets, remote cloud servers, task and non-task offloading smartphone and radio access networks. The task offloading framework uses a meta-heuristic algorithm namely Gray Wolf Optimization (GWO) to schedule the task by optimizing the system parameters and this enables to make optimal decision on task offloading. The GWO does the scheduling of tasks in optimal way to enable restriction free communication between the mobile device and cloud server. This reduces the consumption of energy in mobile devices. The GWO task offloading framework is simulated using CloudSim simulation tool and the results are compared in terms of various parameters. The result shows that the GWO task offloading framework is efficient than conventional Online Code Offloading and Scheduling and Adaptive Partitioning and Dynamic Selective Offloading.

Security Assumptions for Ubiquitous Secure Smart Grid Infrastructure using 2 Way Peg Blockchain and Fuzzy Specifications

The smart grid cyber-physical system and advanced metering infrastructure is an immensely growing term in industrial research based on the electrical power grid system and has uncovered an efficient paradigm for the power generation, transmission, and for the expenditure management as well. These systems allow home area networks and advanced metering infrastructure to communicate bi-directionally. False data injection is a new and climacteric security threat to the power grid to tamper such important data. However, these communication channels that the energy service interfaces provide two-way communication according to the central control unit. Thus, for the security and robustness of the grid, it is critical to separate the false or infected data. The existing protocol on this problem is based on state estimation which is less secure and computationally expensive. In this paper, we propose a 2-way peg blockchain security system by providing a digital signature scheme between home area network device (Smart Meter) and AMI server to get authorization, providing an infected data detection algorithm based on fuzzy rule specification and 2WP based blockchain protocol and finally infected performance reputation updating algorithm by computing the probability distribution of uncouth level to detect the infected or compromised the. We get more efficiency and security by performing a detailed analysis.

Using SMS for Communication with IoT Devices

This paper is in the context of Smart Cities and Internet of Things (IoT). We proposed a novel approach in communication of IoT devices via SMS messages. This can be beneficial during changing configuration of IoT devices or during sending data from IoT devices. SMS has some disadvantages in security and effective payload. As the security is an ongoing topic in this field, our solution manages to speedup key exchange process up to 62% compared to other solutions. We add the possibility of quick exchange of API key which is a key part in communication between IoT device and central server. With limitations of SMS length, we design the use of compression methods which can send 304 bytes in 140 bytes of a SMS body. Depending on the final usage of IoT device there is a possibility to use secure communication and/or compression. These new functions have only 4,3% time overhead in the process of sending data. That is negligible in devices which usually have to communicate in the case of predefined events or only a few times a day.

RDSP: Rapidly Deployable Wireless Ad Hoc System for Post-Disaster Management.

In post-disaster scenarios, such as after floods, earthquakes, and in war zones, the cellular communication infrastructure may be destroyed or seriously disrupted. In such emergency scenarios, it becomes very important for first aid responders to communicate with other rescue teams in order to provide feedback to both the central office and the disaster survivors. To address this issue, rapidly deployable systems are required to re-establish connectivity and assist users and first responders in the region of incident. In this work, we describe the design, implementation, and evaluation of a rapidly deployable system for first response applications in post-disaster situations, named RDSP. The proposed system helps early rescue responders and victims by sharing their location information to remotely located servers by utilizing a novel routing scheme. This novel routing scheme consists of the Dynamic ID Assignment (DIA) algorithm and the Minimum Maximum Neighbor (MMN) algorithm. The DIA algorithm is used by relay devices to dynamically select their IDs on the basis of all the available IDs of networks. Whereas, the MMN algorithm is used by the client and relay devices to dynamically select their next neighbor relays for the transmission of messages. The RDSP contains three devices; the client device sends the victim’s location information to the server, the relay device relays information between client and server device, the server device receives messages from the client device to alert the rescue team. We deployed and evaluated our system in the outdoor environment of the university campus. The experimental results show that the RDSP system reduces the message delivery delay and improves the message delivery ratio with lower communication overhead.

A Secure Framework for Data Sharing in Private Blockchain-Based WBANs

With the development of sensor devices, wireless sensor networks have been widely used, and Wireless Body Area Networks (WBANs) are relatively common application scenarios in wireless sensor networks. The wearable device is used to collect physiological data of the human body, and the server device is adopted to store physiological data of the human body. The openness of the network environment and network devices' dynamic nature make WBANs vulnerable to security threats from attackers. The centralized two-hop architecture contains only one hub node, and the data stored in the hub node may be tampered with by attackers. Once attackers occupy the node, the entire network will be paralyzed. To tackle such an issue, it is proposed in this article a model in WBANs architecture based on Blockchain technology, where the authentication protocol and blind signature protocol between nodes are designed in the new WBANs model, making the Blockchain data transmission system in a wireless network environment secure and reliable. Experimental results show that the proposed method is promising and shows higher levels of safety and stability than other methods.

An adaptive data rate algorithm for improving energy efficiency for multi-gateway LoRaWANs

The need of the low power, long range, and low cost connectivity for satisfying the requirement of internet of things (IoT) applications for smart city is leading the emergence of low power wide area (LPWA) networking technologies. The resource efficiency plays an important role in realistic application, LoRaWAN allows the static end devices to individually adapt and optimise the data rates and the transmission power, which is referred to as adaptive data rate (ADR) problem. In this paper, we develop a new ADR algorithm for multi-gateway LoRaWAN environment to quickly choose the appropriate LoRa transmission parameter for independent LoRa end device based on LoRaWAN specification. To successfully execute the ADR algorithm, we especially rewrite the firmware of Semtech's SX1276 transceivers to implement our proposed ADR algorithm over multi-gateway LoRaWAN system, including end device, multi-gateways and network server. Our ADR algorithm utilises the radio link quality, including RSSI, SNR, and packet reception ratio (PRR), from multi-gateways, and the network server determines the appropriate LoRa transmission parameter. Finally, the experimental results illustrate that the proposed algorithm improves the energy efficiency, the effective bit rate, and the battery life of the end device.

A Study of the Search and Seizure Procedure for Remote Servers through the Practical Affairs

우리 형사소송법은 과학기술의 발달에 따른 환경변화에 적응하고자 여러 차례 개정을 통하여 디지털 시대의 흐름에 대응하여 왔다. 기본적으로 1999년 디지털 문건에 대하여 전문법칙을 적용함으로써 최초로 디지털 증거에 대한 논의가 시작되었다. 그 후 디지털 증거에 대한 진정성 입증을 위한 요건으로 해시값 확인, 포렌식 전문가에 의한 증언, 영상으로 확인 등 여러 객관적 방법을 제시하였다. 하지만 과학기술은 매일매일 발전하고 있는 상황에서 새로운 기술과 새로운 형태의 디지털 증거가 법정에 나오게 되면서 수사기관의 입장에서는 적법한 증거로서 인정받기 위한 부담이 발생하였다. 즉 정보통신기술의 발달로 디지털 증거들은 네트워크로 연결된 모든 곳으로 송수신이 될 뿐만 아니라 현재의 서버장치가 아닌 제3의 원격지에 소재하고 있는 서버에도 저장될 수 있는 디지털 환경이 구축되어있다. 수사기관은 원격지 서버에 저장되어 있는 범죄사실 관련 정보를 압수·수색하기 위해서는 영장에 장소 및 대상을 특정해야하는 부담을 안고 있으며, 더 나아가 국제관할권의 문제가 발생할 수도 있는 상황에 직면하고 있다. 이러한 상황에서 원격지 서버에 저장된 이메일 정보를 수집하기 위한 수사기관의 수사절차에 대하여 상반된 의견을 제시한 법원 판결에 주목을 하게 되었고, 법원이 유사한 사안에 대하여 서로 다른 의견을 제시한 원인으로 수사기관의 원격지 서버에 대한 압수·수색절차의 부재라고 생각하였다. 현행 형사소송법 및 각 수사기관의 디지털 증거 압수·수색 규정은 추상적일 뿐만 아니라 수가기관에 따라서도 그 절차가 상이하기 때문에 법원의 입장에서는 어떠한 기준으로 수사기관의 디지털 포렌식 절차의 적법성을 판단해야 할 지에 대한 명확한 기준이 없어 상반된 판단이 나온 것이라 생각된다. 따라서 본 연구에서는 동일 쟁점으로 상반된 판결을 한 두 사건으로부터 출발하여, 현행 법률과 판례에서 제시하고 있는 기준에 부합하면서 실무적으로도 도움이 될 수 있는 절차를 제언하고자 한다.Korean Criminal Procedure Act has responded to the trend of the digital age by revising it several times to adapt to changes in the environment in response to the development of scientific technology. However, as new technologies and new forms of digital evidence emerged in court amid the daily development of science and technology, the investigative agencies have been pressured to be recognized as legitimate evidence. In other words, with the development of information and communication technology, digital evidence is not only sent to and from any network connection, but also digital environments that can be stored on servers that are located at a third remote location instead of the current server device. Investigators are under pressure to specify a location and target for a warrant in order to confiscate and retrieve criminal information stored on remote servers, and are even facing a situation where international jurisdiction may arise. Under these circumstances, the court s decision, which suggested conflicting opinions on the investigation procedures of the investigative agency to collect e-mail information stored on the remote site server, was considered to be the absence of seizure or search procedures for the remote location servers of the investigative agency as the cause of the court s different opinions on similar cases. As the current Criminal Procedure Act and the regulations on the confiscation and search of digital evidence by each investigative agency are abstract and the procedures vary depending on the number of agencies, it is believed that the court did not have a clear standard on which criteria to judge the validity of the investigation agency s digital forensics procedure.

Dynamic digest based authentication for client–server systems using biometric verification

Abstract The client authentication is a significant process in client–server systems. Such a process is highly secure when a client may be authenticated according to a set of unique verifiable data, i.e., biometric traits. However, biometric based systems with the low-cost, dense biometric sensors, and power of fast processing need a method of automatic client recognition for the robust client authentication. Such a method faces three challenges: (1) the effective recognition of the biometric patterns inputted to the system, (2) the provision of security to prevent the vulnerability of the system, and (3) the preparation of personal privacy. Many remote biometric authentication schemes have been developed to establish secure mutual communication between a client as a device node and server over an untrusted channel. By employing a secure remote biometric based authentication protocol, a client that acts in a node and a server that contains resources can authenticate each other in a secure and trustable manner. In our previous work, we proposed a digest based authentication method that preserves privacy of client’s biometric templates and authenticates the client securely by generating non-deterministic semi-digest. By reviewing and cryptanalyzing this method, in the current paper, we focus on the improvement of the method for providing the invulnerability against user anonymity and server masquerading attacks. We show that our improved scheme is secure against the attacks and prove its functionality features.

NGSIEM Based APT Attack Analysis System

APT attack has become the most serious security threat, attackers may use social engineering methods and a large number of 0-day vulnerability attacks to steal or tamper the core data of the target. If the target does not have the ability of real-time attack detection and defense, once the system is intruded, it will suffer serious economic and business losses. The author sums up the typical characteristics and life cycle of APT attacks, which explains the common attack channels and critical steps of APT attacks, and then describes the technical difficulties and challenges in analyzing APT attacks. To solve the problems, an APT attack analysis system based on NGSIEM is proposed, which can implement normalization and complex algorithm processing on logs and alarms collected from server devices and security devices of multiple layers of the business system, as well as threat intelligence acquired from the intelligence agency.

QuickAnalysis: A Software Designed and Developed for a Portable On-Site Pathogen Detection System.

To develop a software program used for controlling the portable on-site pathogen detection system which is based on real-time PCR, this software is developed by C# over the Microsoft Visual Studio 2013 and used on local computers which are equipped with Windows systems. Taking the actual demand as the guidance, it constructs according to the framework design and unifies the barcode technology, the cloud service, and the Bluetooth technology. Based on the above methods, this software can meet the demands of the system such as free experiment design, auto-control of the hardware and efficient data management. During the operation of this program, the serial port and network communication between it and the device and web server remains stable, no matter it is processing the data collection or data analysis and display. It is feasible and practical to apply this software to the portable on-site pathogen detection system in clinical practices and research work.