Digital Authentication Research Articles

Kritik als Urteilskraft – wenn Trolle post-kritisch nachahmen

The extent to which the totalizing appropriation through subversive practices, in the visual arts and political activism, can be turned around in order to experience the possibility of a different present is the subject of the proposed contribution. Using the hashtag #DCBlackout and looking at Amalia Ulman’s Instagram performance „Excellences and Perfections“ (2014), the aim is to examine how ‚trolling‘ strategies, previously primarily used as populist manipulation by the political right, are reflexive and subversive and thereby can develop enlightening critical potential. Our thesis is arguing that through the use of mass media rhetoric and distribution channels inside social networks, ‚aesthetic trolls‘ provoke an art and political world that is concerned with criticality and honesty and can present its own defaults and blind spots. In addition to the resulting doubts about the digitally postulated existing, thus something like digital authenticity itself, the reflexive moment, i.e. the influence of the doubt on the individual her/ himself who spreads the digital message, is examined.

―Beyond Printing― 文書のデジタル化と電子認証 ビジネス文書デジタル化の法規制概要と"脱ハンコ"における電子のハンコ (電子認証)

―Beyond Printing― 文書のデジタル化と電子認証 ビジネス文書デジタル化の法規制概要と"脱ハンコ"における電子のハンコ (電子認証)

Electronic Authentication of E-commerce Contracts: التوثيق الإلكتروني لعـقــود التجارة الإلكترونية

This research aimed at explaining the electronic authentication from a technical and legal point of view, and to explain the authentication mechanism represented in encryption and its types, and to clarify the role of electronic certification in electronic transaction. We also clarified the role of documentation in electronic editors and the scope of electronic documentation, as well as how to authenticate in the field of e-mail, and the role of trustworthy third parties in the process. The study also clarified the method and mechanism of electronic documentation in the field of electronic preservation services. Based on the nature of the research, a comparative approach was followed by presenting the position of more than one local and international legislation besides conducting an analytical study. The researcher also used the analytical method by addressing each section after analyzing it through jurisprudential opinions and national laws where the descriptive method issued to clarify some concepts that include a careful analysis of information and facts about the subject of study. After presenting the research material, several results were reached, including: that electronic authentication services are the legal means to send confidence and secure online dealings. Based on the results, the researcher made a set of recommendations, including the recommendation to issue a comprehensive legislation that regulates the role played by trustworthy third parties in terms of electronic signature, recommended e-mail, and electronic preservation.

The Influence of Central Bank's Digital Currency on Electronic Payment

On September 24, 2019, the Governor of the People’s Bank of China, Yi Gang, said at an event celebrating the 70th anniversary of the People’s Republic of China that the People’s Bank of China has made positive progress in research on digital currencies. The People’s Bank of China plans to combine the central bank’s digital currency (hereinafter referred to as DCEP) with electronic payment tools, calling it a digital currency and electronic payment package. This paper aims to discuss the current business model and structure of our country's electronic payment industry and related electronic authentication and financial network security industries, as well as the possible impact of the central bank's digital currency after it enters the market.

Research on the Development of Rural E-commerce Based on Smart Tourism

With the popularity of the Internet, E-commerce has been applied to various industries in people’s lives, which has been extended to rural tourism. Through Ecommerce, rural tourism can develop a new model, which can enhance the effect of smart Tourism (hereinafter referred to as ST). Through ST, we can integrate tourism and E-commerce, which will help the countryside to better publicize. However, there are still many problems in the E-commerce of rural tourism, such as the single way of publicity, lack of branding, insufficient support, etc., which will seriously affect the economic development of rural tourism. Therefore, we must promote the application of ST in rural areas. Through the construction of rural characteristic tourism culture brand, we can attract many tourists, which will promote the multi-functional improvement of ST system, such as online display, reservation, payment, electronic authentication, etc. Firstly, this paper analyzes the importance of ST in the development of rural E-commerce (hereinafter referred to as REC). Then, this paper constructs a ST model. In view of the current problems, this paper puts forward some suggestions.

مدى نجاح تطويع القواعد العامة المنظمة للكاتب بالعدل التقليدي في تنظيم جهة التوثيق الإلكتروني في التشريع العراقي المعاصر

The legal and legal necessity in electronic and third-party legal transactions dictates, and keeps abreast of modern developments in this field, The Iraqi legislature, according to the Electronic Signature and Electronic Transactions Law No. (78) Of 2012, created the electronic authentication body, and set out the conditions for its establishment, scope of work, terms of reference and mechanisms for carrying out its activities, to be -from a functional point of view -an extension of the writer with traditional justice, organized under the provisions of the Notary Book Law No. (23) for the year 1998, However, the texts regulating the work of the first are not at the level of the legislative organization of the work of the second, which necessitates researching the extent of the success of the adaptation of the general rules regulating the writer with traditional justice, in completing the aspects of organizing the electronic documentation body in contemporary Iraqi legislation, to ensure the achievement of the goal for which this body was established , The study showed the possibility of adapting texts related to the substantive aspect, which do not contradict the default nature of the documentation side, and the impossibility of this with regard to the functional aspect, related to the nature and entity of each of them.

Evaluation of Decentralized Verifiable Credentials to Authenticate Authorized Trading Partners and Verify Drug Provenance.

In 2013, the Drug Supply Chain Security Act (DSCSA) was signed into law to address the growing threat of counterfeit drugs and to ensure prescription drugs remain safe and effective for patients. As part of this law, US pharmaceutical supply chain stakeholders are required to confirm the authorized status of trading partners for transactions and information disclosures, even when there is no prior business relationship. While larger Authorized Trading Partners (ATPs) have connectivity solutions in place, newer and smaller ATPs have not traditionally participated, including tens of thousands of dispensers. To unlock the full potential of the interoperable system mandated by the DSCSA, the authors tested eXtended ATP (XATP), a blockchain-backed framework for ATP authentication and enhanced verification in a real-world pharmacy with genuine drug packages. The objective of this research study was to prove that electronic authentication and enhanced verification can be achieved between ATPs using a mobile-based solution. Moreover, we tested accurate reading of drug and associated electronic med guides, flagging of expired and recalled drugs, and correct generation of documentation to support saleable returns. This study involved two dispensers and three participating manufacturers. Dispensers were onboarded to a mobile application and used supporting documentation to authenticate their identities, and then scanned 2D drug barcodes to submit drug verification requests to manufacturers (including 11 additional, randomly selected manufacturers). Genuine and synthetic drug package barcodes were used to test workflows against genuine and synthetic manufacturer serialization data records. Manufacturers authenticated the identity of requesting dispensers with verifiable credentials and responded to verification requests. Enhanced drug verification was achieved, with 100% of requests successfully delivered to participating manufacturers and 88% of requests being delivered to other manufacturers (based on the pharmacist selection of random packages from the pharmacy). Drug verification matching against synthetic serialization data records resulted in 86% accuracy, with the 14% error rate attributed to human factors. All barcodes were successfully scanned and provided package-accurate data, and 97% of randomly selected packages successfully generated drug package inserts. All synthetic recalls and expired drugs were successfully flagged. Four of the manufacturers contacted were among the top 15 pharmaceutical manufacturers globally; all four responded. The XATP framework provides a secure, reliable, and seamless remote method to conduct enhanced verification as required by law. Interoperability between manufacturers and dispensers with no prior business relationship can be achieved on 'day zero' using mobile devices that enable digital authentication and rapid barcode scanning. As users retain control of their own private keys, the framework also mitigates the single-point-of-attack risks associated with centrally managed systems.

Research on Network Intrusion Detection Method Based on Machine Learning

After years of development, the Internet has penetrated into all areas of society, and various network intrusions occur almost every day. In order to enhance the security of the network, intrusion detection technology has received more and more attention. Network intrusion detection is a branch of computer security. Its goal is to automatically and effectively detect intrusion traffic in the network and provide timely warnings. Network intrusion detection technology has become an important means to resist network intrusion in recent years, and network intrusion detection systems of various scales have been applied in the network. Due to the diversity of intrusion methods, traditional digital authentication and firewalls and other network security measures are difficult to meet the needs of network intrusion detection. The machine learning boom has gradually emerged, and machine learning methods have begun to be applied to the field of intrusion detection, which has become a research hotspot in this field. This article discusses machine learning methods, discusses adding machine learning algorithms to the network intrusion detection link to achieve effective detection of network intrusion traffic, so as to obtain a good network intrusion detection effect.

FPGA implementation of fast & secure fingerprint authentication using trsg (true random and timestamp generator)

In the digital authentication system, the emerging technology is fingerprint authentication, which have been concentrated more attraction towards security and control. Existing authentication systems such as Biometric cryptosystems, Cancellable templates, and Bio-hashing provide a solution for addressing these vulnerabilities. To implement the fingerprint authentication with more accuracy, a novel FPGA based authentication system has proposed in this paper and the performance has evaluated with the help of the previous scheme. First, finger code template (FCT) is generated by applying transformation function on finger code and biometric key created from the randomization process. While in the second phase, 40-bit binary string (ofc), 40-bit binary time stamp, random numbers 0 and 40 (r1, r2, r3, and r4) are generated from TRSG (True Random and Time Stamp Generator) which is converted into 80-bit efc. Based on the obtained efc, the person details are compared with primary data stored in the database. The simulation result shows that the proposed method reduces the LUT utilization to 0.17% and complexity as 14%. Hence, FPGA based fingerprint authentication shows its excellence with the lowest complexity value and thereby enhance the presentation of the biometric authentication system.

АВТОМАТИЗАЦИЯ ЭЛЕКТРОННО-ПЕЧАТНОГО ДЕЛОПРОИЗВОДСТВА С ИДЕНТИФИКАЦИЕЙ И ВЕРИФИКАЦИЕЙ ДОКУМЕНТОВ

In the article the problem of electronic-printing office work, the documents identification and verification has been reviewed and analyzed. The technical feasibility of using algorithms for handwriting recognition, artificial intelligence and cryptography in electronic-printing office work has been substantiated. Authors are suggest an automated processing method of a paper document verification of its electronic counterpart authenticity. The algorithm of the alternative four-stage life cycle of the document and the method of its verification with the manual operations reduction and machine input are presented in detail. The structure of the integrated subsystem of machine input and documents verification used in the Edinaja informacionnaja sistema «Elektronniy Universitet» of an educational institution is presented. The results of the document automated processing and protection with training a multilayer convolutional neural network using the example of intermediate certification sheets were obtained. The possibility of applying the described methodology to strict reporting of a fixed structure documents with handwritten filling has been proved.

Research on Cyber Security Defense and Protection in Power Industry

The power information network is a significant part of national key information infrastructure, as well as the core promoting force to guarantee the strategic development of energy internet. Due to its correlative characteristics in industrial control network, the internet and IoT, superadd a large of nodes and data sensitivity, the evolving network attack technology has put forward new requirements and challenges to its security protection system, which also hinders the overall interconnecting and interworking of energy internet to a certain extent. In order to improve the network security capability of full-service power network under the energy internet environment, a power information security framework based on cloud service was proposed to improve the safety and reliability, build an end-to-end electronic authentication mechanism and security management mode of strong data interworking, finally realize the life cycle data protection, trusted identity management and reliable electronic voucher application, meet the rapid development of the energy internet and escort the new digital economic of the power industry.

An evaluation of identity and access management systems

One of the most critical issues of all of networks types that integrate the both of wired and wireless technologies is the performance and applicability of the electronic authentication and identification techniques. These schemes involve various technologies of different levels of security. This research presents a comparative study of six IDAM available tools, based on the three characteristics (ease of use, usefulness, and user's satisfaction), which build targets to be achieved in order to gain quality in software. The tools compared in this study are Log Mote, Oracle ID management, Tivoli Identity Manager, NetIQ-Novell, Access Sentinel, and Active Directory. In order to enable users to access the available resources in a secure way, we propose a novel architecture of IDAM. The proposed architecture basically has several advantages like, autonomy, comprehensive and systematic, standardization, and scalability.

An evaluation of identity and access management systems

One of the most critical issues of all of networks types that integrate the both of wired and wireless technologies is the performance and applicability of the electronic authentication and identification techniques. These schemes involve various technologies of different levels of security. This research presents a comparative study of six IDAM available tools, based on the three characteristics (ease of use, usefulness, and user's satisfaction), which build targets to be achieved in order to gain quality in software. The tools compared in this study are Log Mote, Oracle ID management, Tivoli Identity Manager, NetIQ-Novell, Access Sentinel, and Active Directory. In order to enable users to access the available resources in a secure way, we propose a novel architecture of IDAM. The proposed architecture basically has several advantages like, autonomy, comprehensive and systematic, standardization, and scalability.

A DESIGN OF DIGITAL CHAIN CUSTODY FOR REPUBLIC OF IRAQ

Chain of custody (COC) is a concept and process designed to ensure the integrity of evidence including digital evidence (DE). Also, it defines a set of procedures to document files according to its chronological [1]. In this paper, the authors design a Chain of custody application software in order to document all digital evidence in order to ensure its integrity. Thus, a chain of custody application design to document the digital evidence from the time it collected to the time where the evidence actually presented at the court to ensure the digital evidence integrity and authenticity. It can help the investigator to follow clear documentation during the investigation process because of the conventional method considered a problematic issue when it used for digital evidence. In addition to physical evidence and digital evidence have different features and characteristics.The Chain of Custody application for digital evidence is designed using the SQL and XML [3] schema approach to save case information and compute DE hash value. then compare it with its value stores in the COC tab. This solution comes as one of the solutions to enrich the existing solution of the digital chain of custody.

Radio Identity Verification-Based IoT Security Using RF-DNA Fingerprints and SVM

It is estimated that the number of Internet-of-Things (IoT) devices will reach 75 billion in the next five years. Most of those currently and soon-to-be deployed devices lack sufficient security to protect themselves and their networks from attacks by malicious IoT devices masquerading as authorized devices in order to circumvent digital authentication approaches. This work presents a physical (PHY) layer IoT authentication approach capable of addressing this critical security need through the use of feature-reduced, radio frequency-distinct native attributes (RF-DNA) fingerprints and support vector machines (SVM). This work successfully demonstrates: 1) authorized identity (ID) verification across three trials of six randomly chosen radios at signal-to-noise ratios greater than or equal to 6 dB and 2) rejection of all rogue radio ID spoofing attacks at signal-to-noise ratios greater than or equal to 3 dB using RF-DNA fingerprints whose features are selected using the Relief-F algorithm.

Electronic Record Authenticity in Evidence

With the adoption of the legislator to the principle of functional equivalent, the individuals dealing with electronic transactions became more confident in the electronic record as a tool used to save their procedures that are conducted through the electronic means , and where it has become possible to present electronic record as an evidence in the lawsuit , the judge no longer has the right to refuse the electronic record as an evidence as long as it includes the necessary conditions, and is provided on an electronic mean "which is the reason for which the court rejected the electronic record as evidence "By referring to the Electronic Transactions Law, we find that the legislator graded in the authenticity of the electronic record, by the difference in the type of signature associated with the electronic record until , we reach the state in which the electronic record is not associated with a signature . Therefore, a research will be conducted regarding the authenticity of each record separately, indicating the extent of the evidential power it has, in addition to the research for the adequacy of the provisions that the legislator applied to the electronic record and to what extent the electronic record as a means of. proof is able to dispense with the traditional means of evidence.Until we come to a conclusion that the legislator granted the electronic record th evidential power that it granted to the traditional means, by referring the determination of its evidential power to the general rules. However, we sometimes find that such a matter is not commensurate with the nature that the electronic record enjoys, especially when searching in the electronic commercial record .This study has been divided into two requirements. The first requirement discusses the cases in which the authenticity of the electronic record is presumed and the second requirement discusses the cases in which the authenticity of the electronic record is not presume Keywords: electronic record, electronic signature, unsigned documents, electronic commercial books, the principle of written evidence . DOI: 10.7176/JLPG/104-05 Publication date: December 31 st 2020

Optical Hash function based on multiple scattering media

Hash functions, which can extract message digest from input messages as output, play an important role in digital signature and authentication. Meanwhile, Hash functions are essential in many cryptographic protocols and regimes. With the research becoming more and more in depth, a series of Hash functions is proposed, such as MD series and SHA series. At the same time, the security analysis and attacks against Hash functions are carried out. The security of Hash functions is threatened. In this case, how to improve the security of the Hash functions becomes the primary concern. In this paper, an optical Hash function based on the interaction between light and multiple scattering media is proposed. Unlike most of the traditional Hash functions which are based on mathematical transformations or complex logic operations, this method innovatively takes advantage of the natural random scattering effect of multiple scattering media on coherently modulated light, and realizes the “confusion” and “diffusion” of modulated light, which satisfies the core functional requirement of the Hash function: one-way encoding/encryption with strong security. The photoelectric hybrid system designed by this method can effectively simulate the "compression function" in the Hash function. Combined with the Sobel filter with feature extraction function, the input data of arbitrary length can be compressed and encrypted into the output with a fixed length of 256-bit (Hash value). The principle of the proposed optical Hash function can be described as follows. 1) Two 8-bit images with a size of 16×16 pixels are loaded in SLM<sub>1</sub> (amplitude-only spatial modulator) and SLM<sub>2</sub> (phase-only spatial modulator) respectively. 2) The coherent wavefront is modulated by SLM<sub>1</sub> and SLM<sub>2</sub>, and then propagates on multiple scattering media. 3) A speckle pattern is recorded by CCD because of the confusion of multiple scattering media. 4) The features of the speckle pattern, which is extracted by Sobel filter, serve as the input of the next compression function. For the unpredicted and non-duplicated disorder multiple scattering media, it is tremendously difficult to determine the internal state of the multiple scattering media. Therefore, the proposed optical Hash function is considered to have a high security. A series of simulation results shows that the proposed optical Hash function has a good “avalanche effect” and “collision resistance”, and its security performance is comparable to that of the most widely used traditional Hash functions (MD5 and SHA-1).

Curbing Cyber Scam (Phishing, Vishing and Spoofing) through the Use of Biometrics System for Final Authentication at the Point of Withdrawal from A Bank Account

Fraudulent practices carried out daily on individuals and organizations using the internet and related technologies (cybercrime) are becoming alarming. It is an act that does not seem to end any time soon. So, in order reduce the statistics, there is need to seek for possible solutions to this menace. 
 Phishing, vhishing, pharming and spoofing has become the mainstay of hackers (‘yahoo boys’) on unsuspecting bank account holders and financial institutions; who have become victims and losing their fortune/ hard earned monies to cybercrimes. 
 In order to safeguard bank accounts and its holders from these nefarious acts, this paper is seeking to examine and recommend ways through which financial transactions have to be fully authenticated by the account holder through the use of biometrics. There by, improving customer experiences and reducing financial fraud to a large extent. Howard Berg (2019), “Biometrics can deliver a new era in digital authentication for financial institutions.”

Enhanced Biometric Recognition for Secure Authentication Using Iris Preprocessing and Hyperelliptic Curve Cryptography

Biometrics combined with cryptography can be employed to solve the conceptual and factual identity frauds in digital authentication. Biometric traits are proven to provide enhanced security for detecting crimes because of its interesting features such as accuracy, stability, and uniqueness. Although diverse techniques have been raised to address this objective, limitations such as higher computational time, minimal accuracy, and maximum recognition time remain. To overcome these challenges, an enhanced iris recognition approach has been proposed based on hyperelliptic curve cryptography (HECC). The proposed study uses the 2D Gabor filter approach for perfect feature extraction in iris preprocessing. A lightweight cryptographic scheme called HECC was employed to encrypt the iris template to avoid intentional attack by the intruders. The benchmark CASIA Iris V-4 and IITD iris datasets were used in the proposed approach for experimental analysis. The result analysis witnessed that the prime objective of the research such as lesser false acceptance rate, lesser false rejection rate, maximum accuracy of 99.74%, maximum true acceptance rate of 100%, and minimal recognition time of 3 seconds has been achieved. Also, it has been identified that the proposed study outperforms other existing well-known techniques.

IJMLNCE Editorial Note Volume No 04, Issue No 01

IJMLNCE Editorial Note Volume No 04, Issue No 01