Differentiated Access Control Research Articles

Keyless Security

This research paper introduces a novel approach to improve security and access control in smart door lock systems. The proposed system incorporates multi-factor authentication, combining a numerical keypad, mobile app, and RFID sensor. Each authentication method is associated with a specific lock, offering differentiated access control. Notably, the system requires the simultaneous use of the mobile app and RFID sensor to unlock a designated lock, adding an extra layer of security. To assess the system's effectiveness, a comprehensive study was conducted, considering security, usability, and user satisfaction. The study involved simulated attacks, user surveys, and usability tests, with data analysis providing insights into the system's resilience and user acceptance. This research contributes to the field of smart door lock systems by offering an innovative approach to enhance security through multi-factor authentication. The findings provide valuable insights for designing advanced access control mechanisms, empowering users with increased confidence in their security measures while maintaining a user-friendly experience.

Towards differential access control and privacy-preserving for secure media data sharing in the cloud

The development of cloud computing techniques has promoted the continuous sharing of a tremendous amount of media data. However, the involved parties in such processes usually share different or even conflicting benefits, causing non-orthogonal security concerns. The data owners worry about their private data being abused through illegal access or unauthorized redistribution by the requesters, while the latter ones are vulnerable to being profiled (e.g., interests, age) through their data access histories. Since most existing approaches address these problems individually, the security requirements of different roles cannot be properly satisfied. In this paper, we attempt to provide a joint effort that flexibly addresses the above security concerns. We first design a new cryptographic primitive (i.e., TFPRE-OT) by exploiting type-based proxy re-encryption for fine-grained sharing and oblivious transfer for hiding the access histories of data requesters. Using TFPRE-OT as the building block, a novel data sharing scheme is proposed to achieve differential access control and protect privacy disclosure in general cloud computing settings. We provide a thorough security analysis, showing that the proposed method can fulfill all desired security requirements. Finally, we validate the effectiveness of our design with both case studies and extensive experiments.

A pervasive controlled access with privacy delegation design for smart internet of things applications

Internet of Things (IoT) provides decentralized, distributed, and pervasive access to resources and services through heterogeneous device interactions. IoT platform is large and capable of handling huge volumes of data, users, resources, etc. This requires more sophisticated security measures. In this manuscript, a pervasive controlled access method with privacy delegation (PCA-PD) is introduced to improve IoT application users’ security and privacy. The proposed method permits differential access control depending on the application usage and information request. The delegation of access is ensured based on trust and a shared keying model valid within the access session. In this method, information and time-based classification are performed to differentiate the access instance and information shared between the applications and IoT services. This helps to prevent security backtracking and request regeneration and also a failure in responses. The classification is performed independently, depending on the previous behavior of the application with the service provider. The proposed method’s experimental analysis shows that it can achieve high access control level, less delegation time, improved application classification, and success rate.

SEMD: Secure and efficient message dissemination with policy enforcement in VANET

Vehicular ad hoc network (VANET) is an increasing important paradigm, which not only provides safety enhancement but also improves roadway system efficiency. However, the security issues of data confidentiality, and access control over transmitted messages in VANET have remained to be solved. In this paper, we propose a secure and efficient message dissemination scheme (SEMD) with policy enforcement in VANET, and construct an outsourcing decryption of ciphertext-policy attribute-based encryption (CP-ABE) to provide differentiated access control services, which makes the vehicles delegate most of the decryption computation to nearest roadside unit (RSU). Performance evaluation demonstrates its efficiency in terms of computational complexity, space complexity, and decryption time. Security proof shows that it is secure against replayable choosen-ciphertext attacks (RCCA) in the standard model.

Enforcement of Autonomous Authorizations in Collaborative Distributed Query Evaluation

In a federated database system, each independent party exports some of its data for information sharing. The information sharing in such a system is very inflexible, as all peer parties access the same set of data exported by a party, while the party may want to authorize different peer parties to access different portions of its information. We propose a novel query evaluation scheme that supports differentiated access control with decentralized query processing. Anew efficient join method, named split-join, along with other safe join methods is adopted in the query planning algorithm. The generated query execution reduces the communication cost by pushing partial query computation to data sources in a safe way. The proofs of the correctness and safety of the algorithm are presented. The evaluation demonstrates that the scheme significantly saves the communication cost in a variety of circumstances and settings while enforcing autonomous and differentiated information sharing effectively.

Embedded Differential Access Control for Printing Variable Jobs

Business case requirements have resulted in related documents that are native to their individual formats being combined into a collection called composite documents. These are used for a variety of activities such as presentations, premium/sensitive content distributions and business workflows, and may include standard types such as PDF, Word, Excel, PowerPoint Slides and other specially formatted files. Additionally, cross-organizational workflow demands have created new challenges for the management of such composite documents. These include access control to individual parts, security and privacy issues in the absence of shared trusted infrastructure, communication over popular and potentially insecure channels, auditing, print control and disposal. These challenges led to the development of Publicly Posted Composite Documents (PPCDs) [1] as a recently proposed document format that enables the secure containment and transfer of personalized document versions over insecure channels, with the access control and policies built into and carried within the document itself (as an integral part). PPCD technology is intended to act as the central pillar of document workflow scenarios, where a single document can be created, controlled, accessed, used and monitored throughout its life cycle as it participates in inter-organizational workflows. However, PPCD technology is currently missing an important property of electronic documents: the ability to be securely printed to a physical copy. The limited resources on multi-function printer (MFP) devices and the security focused structure of PPCDs makes this a challenging and non-trivial problem. Thus, in this paper we utilize the unique structure of PPCDs to describe novel mechanisms and firmware extensions on MFPs for enforcing differential access control and printing.

A lightweight conditional privacy-preserving authentication and access control scheme for pervasive computing environments

In pervasive computing environments, the users can get access to the services from the service providers in a highly desirable way. But the security of the user's authentication is a challenging field. Pervasive computing environments must provide the service to only legitimate users. On the other hand, some users attempt to keep their anonymity without revealing their identities while using some privacy-related services such as location information, printing, buying shares, etc. In this paper, we propose a conditional privacy-preserving authentication and access control scheme for pervasive computing environments, called CPriauac. Compared with the previous schemes in the literature, registration servers and authentication servers in the proposed scheme need not maintain any sensitive verification tables. The management of public keys is easier. Furthermore, the anonymity of the user can be removed efficiently once the dispute happens. The proposed scheme provides user anonymity against outside and inside parties, mutual authentication, accountability and differentiated access control.

An Effective Key Management Approach to Differential Access Control in Dynamic Environments

Applications like e-newspaper or interactive online gaming have more than one resource and a large number of users. There is a many-to-many relationship between users and resources; each user can access multiple resources and multiple users can access each resource. The resources are independent and each resource needs to be encrypted by a different Resource Encryption Key (REK). Each REK needs to be distributed to all subscribers of the resource and each subscriber must get all the REKs he/she subscribes to. Also this environment is very dynamic in terms of subscription changes by users and resource changes by service providers. We term this as the problem of key management for Differential Access Control (DIF-AC) in dynamic environments. Conventional ways of access control are not sufficient for this problem of DIF-AC key management. In this study we propose a novel approach of keys management to enforce DIF-AC in highly dynamic environments, based on Secure Group Communication framework.