Digital Signature Verification Research Articles

Fake Product Identification System for E-Commerce Applications

Abstract: The use of blockchain technology, combined with QR codes, presents a promising solution for identifying and combating counterfeit products efficiently and securely. By integrating a blockchain-based system with QR code scanning, stakeholders can establish a reliable mechanism to verify product authenticity. This system involves storing product details and generating unique QR codes for each product as blocks in the blockchain database. When a QR code is uploaded, the system compares the code against entries in the blockchain database. If a match is found, the customer receives a notification confirming the product's authenticity; otherwise, they are alerted that the product is fake. Blockchain technology's ability to eliminate the need for trusted intermediaries, facilitate faster transactions, and provide transparency makes it particularly intriguing for addressing counterfeit issues. However, reducing counterfeits requires a comprehensive approach, including increasing awareness, legal action against counterfeiters, implementing a robust alert system, and ensuring secure packaging. These factors, combined with blockchain technology and digital signature verification, can lead to a more efficient and thorough strategy for combating counterfeiting in the marketplace

Using a smart contract for the floral supply chain

The floral supply chain is one of the most delicate logistics networks in existence, requiring intensive monitoring of temperature, humidity, and product conditions to ensure the quality of flowers. However, the traditional centralized supply chain involves exchanging information back and forth, and therefore wastes time, money, and resources. In addition, centralized data control without security verification exposes logistics information to the risk of hacking, information tampering, and counterfeiting.Blockchain technology offers decentralization, immutability, and encryption security. Furthermore, application of Internet of Things (IoT) technology has made it easier to monitor goods and the distribution process. Combining the above two new technologies can effectively improve the transparency and traceability of the floral supply chain and make transactions more secure through the digital signature verification process. In this research, we propose a smart contract for the floral supply chain. Through contract compilation, the proposed contract defines the delivery process status, delivery specifications, and other conditions in the shipping process so that the status of the goods is updated on the blockchain, giving the supply chain higher traceability. This study also defines the process for and conditions of money transactions between buyers and sellers using such smart contracts, thereby automating the transaction, improving its efficiency, and saving on labor costs and paper waste. This research also compares the proposed smart contract to traditional transaction methods. The pros and cons are thoroughly discussed, offering significant benefit to decision makers.

Framework to perform taint analysis and security assessment of IoT devices in smart cities.

The Internet of Things has a bootloader and applications responsible for initializing the device's hardware and loading the operating system or firmware. Ensuring the security of the bootloader is crucial to protect against malicious firmware or software being loaded onto the device. One way to increase the security of the bootloader is to use digital signature verification to ensure that only authorized firmware can be loaded onto the device. Additionally, implementing secure boot processes, such as a chain of trust, can prevent unauthorized access to the device's firmware and protect against tampering during the boot process. This research is based on the firmware bootloader and application dataflow taint analysis and security assessment of IoT devices as the most critical step in ensuring the security and integrity of these devices. This process helps identify vulnerabilities and potential attack vectors that attackers could exploit and provides a foundation for developing effective remediation strategies.

PDHSMICK: A partial key-based secure EHRs with distributed cloud for healthcare systems applying MI-CRYSTALS-Kyber

Healthcare, which raises several challenges regarding security and privacy, is the largest sector of society dealing with patients’ health data. Numerous approaches have been developed regarding healthcare; however, these approaches lead to high response time and leakage of transaction privacy. Thus, this work proposes PDHSMICK, a partial key-based secure EHRs with distributed cloud for Healthcare Systems applying Mimetic Interpolation-based CRYSTALS-Kyber (MI-CRYSTAL-Kyber). Primarily, the patient and doctor register with the system. After that, the patient logs in and books an appointment with the doctor. Then, consultation is done, and their details are sent to the Third-Party Auditor (TPA), where they store the information in the log file. Afterwards, the patient verifies the log file and then uploads the information to the concerned Cloud Server (CS). During uploading, the files are split, and the attributes from the files and Distributed Cloud Server (DCS) are extracted. Then, by utilizing Interpolation-based Pearson Correlation Coefficient (I-PCC), a particular DCS is selected. After that, for authorization purposes, a hash code and digital signature are generated by utilizing Exponential based Extensible Output Functions (EX-EOF) and Double Mod-Digital Signature Algorithm (DM-DSA). Concurrently, the files are encrypted by employing MI-CRYSTAL-Kyber techniques. Lastly, the doctor logs on to the system, and hash code and digital signature verification are performed. The system allows the doctor to download the data if the verification matches. Also, the experimental assessment was validated, which shows the proposed technique’s efficacy.

Lightweight Privacy and Security Computing for Blockchained Federated Learning in IoT

The development of Internet of Things (IoT) makes human life more intelligent, and the interconnection of all things has become a reality. However, the surge in the number of devices and centralized management brings severe challenges to IoT, such as single point of failure, poor security, privacy leakage, and low reliability. Due to the decentralization, verifiability and privacy protection of blockchain federated learning, some blockchain federated learning schemes have been proposed to solve these problems, but bring new challenges, such as device privacy leakage and heavy security computing load. In this paper, we propose a new decentralized, secure and verifiable consortium blockchain federated learning privacy protection scheme, named LPBFL, which realizes lightweight computing while ensuring the privacy of the local model and dataset of the device. To achieve lightweight privacy protection, LPBFL adopts the Paillier encryption and the newly designed lightweight digital signature and batch verification algorithm. Additionally, considering that devices upload invalid or even toxic local models intentionally or unintentionally, we design a device reputation selection mechanism to make blockchain federated learning more efficient. Finally, the theoretical analysis proves the security of LPBFL and verifies the unforgeability of the proposed digital signature. Comprehensive comparisons and extensive experiments demonstrate that our LPBFL has significant advantages in multiple aspects.

Information Encryption and Data Storage Security

Nowadays, people increasingly rely on communication software to communicate. Users can use communication software for daily life information communication and involve work, transactions, or some private content. Moreover, time or money can be lost if that information is leaked. Therefore, ensuring communication security becomes a critical issue. Communication security generally involves two aspects: information transmission and data storage. Attackers do more than attack the transmitted information. It can also steal data that is already stored. This paper first introduces the encryption algorithm of information transmission. And then, this paper introduces secure data storage methods for information encryption.Rivest-Shamir-Adleman (RSA) and Advanced Encryption Standard (AES) algorithms are mature encryption algorithms currently used. Using RSA to encrypt the AES key in information transmission can make the information more secure and reliable. In addition, adding RSA algorithm-supported digital signature verification technology can ensure the authenticity and integrity of messages. Data storage is just as necessary as information encryption. Data needs to be stored in a database. Besides, this paper introduces how the security mechanism of the MySQL database controls user access to the database.

IMPROVING DIGITAL SIGNATURE VERIFICATION ACCURACY THROUGH SUPPORT VECTOR MACHINE LEARNING: A COMPARATIVE STUDY

Digital signatures are widely used in electronic documents, and their verification is crucial to ensure document authenticity and security. However, digital signature verification can be challenging, especially when dealing with large amounts of data. In this paper, we present a comparative study of three Support Vector Machine (SVM) based methods for improving digital signature verification accuracy. We used a dataset of 10,000 digital signatures and compared the performance of linear SVM, polynomial SVM, and radial basis function (RBF) SVM. Our results showed that all three SVM-based methods improved the accuracy of digital signature verification compared to traditional methods. The RBF SVM method was found to be the most effective method for improving accuracy, with an accuracy of 98%.

Use of Digital Signature Verification System (DSVS) in Various Industries: Security to Protect against Counterfeiting: Research.

Use of Digital Signature Verification System (DSVS) in Various Industries: Security to Protect against Counterfeiting: Research.

Empirical Evaluation of ECC Batch Verification Algorithms of Digital Signature in Wireless Sensor Network

Wireless sensor network (WSN) is an emerging topic in wireless communication where various sensor nodes are connected over the internet for data exchange. Exchanging the information over the WSN is very critical; therefore, it requires authentication and security mechanisms to ensure integrity and confidentiality. To avoid unauthorized use of WSN, the authentication through a digital signature turns into an essential task in WSN. Verification of individual signature is taking too much time and it is not suitable for wireless sensor network. Digital signature verification time can be reduced by using batch verification techniques in WSN. Therefore, the goal of this research is to examine and analyze the different type of batch verification algorithm based on Elliptic Curve Cryptography (ECC). With respect to security, the entire algorithm is identical to the standard Elliptic Curve Digital Signature Algorithm (ECDSA) verification algorithm. These algorithms are effectively limited to small batch sizes.

AES Based White Box Cryptography in Digital Signature Verification

According to the standard paradigm, white box cryptographic primitives are used to block black box attacks and protect sensitive information. This is performed to safeguard the protected information and keys against black box assaults. An adversary in such a setting is aware of the method and can analyze many system inputs and outputs, but is blind to the specifics of how a critical instantiation primitive is implemented. This is the focus of white-box solutions, which are designed to withstand attacks that come from the execution environment. This is significant because an attacker may obtain unrestricted access to the program's execution in this environment. The purpose of this article is to assess the efficiency of white-box implementations in terms of security. Our contribution is twofold: first, we explore the practical implementations of white-box approaches, and second, we analyze the theoretical foundations upon which these implementations are built. First, a research proposal is crafted that details white-box applications of DES and AES encryption algorithms. To begin, this preparation is necessary. The research effort planned for this project also includes cryptanalysis of these techniques. Once the general cryptanalysis results have been examined, the white-box design approaches will be covered. We have decided to launch an investigation into creating a theoretical model for white box, since no prior formal definitions have been offered, and suggested implementations have not been accompanied by any assurance of security. This is due to the fact that no formal definition of "white box" has ever been provided. In this way lies the explanation for why this is the situation. We define WBC to encompass the security requirements of WBC specified over a white box cryptography technology and a security concept by studying formal models of obfuscation and shown security. This definition is the product of extensive investigation. This state-of-the-art theoretical model provides a setting in which to investigate the security of white-box implementations, leading to a wide range of positive and negative conclusions. As a result, this paper includes the results of a Digital Signature Algorithm (DSA) study which may be put to use in the real world with signature verification. Possible future applications of White Box Cryptography (WBC) research findings are discussed in light of these purposes and areas of investigation.

Improved Recurrent Neural Network Schema for Validating Digital Signatures in VANET

Vehicular ad hoc networks (VANETs) allow communication between stationary or moving vehicles with the assistance of wireless technology. Among various existing issues in smart VANETs, secure communication is the key challenge in VANETs with a 5G network. Smart vehicles must communicate with a broad range of advanced road systems including traffic control and smart payment systems. Many security mechanisms are used in VANETs to ensure safe transmission; one such mechanism is cryptographic digital signatures based on public key infrastructure (PKI). In this mechanism, secret private keys are used for digital signatures to validate the identity of the message along with the sender. However, the validation of the digital signatures in fast-moving vehicles is extremely difficult. Based on an improved perceptron model of an artificial neural network (ANN), this paper proposes an efficient technique for digital signature verification. Still, manual signatures are extensively used for authentication across the world. However, manual signatures are still not employed for security in automotive and mobile networks. The process of converting manual signatures to pseudo-digital-signatures was simulated using the improved Elman backpropagation (I-EBP) model. A digital signature was employed during network connection to authenticate the legitimacy of the sender’s communications. Because it contained information about the vehicle on the road, there was scope for improvement in protecting the data from attackers. Compared to existing schemes, the proposed technique achieved significant gains in computational overhead, aggregate verification delay, and aggregate signature size.

Academic Document Authentication using Elliptic Curve Digital Signature Algorithm and QR Code

Paper-based documents or printed documents such as recommendation letters, academic transcripts, and diplomas are prone to forgery. Several methods have been used to protect them, such as watermarking, security holograms, or using paper with specific security features. This paper presents a document authentication system that utilizes QR code and ECDSA as the digital signature algorithm to protect this kind of document from counterfeiting. A digital signature is a well-known technique in modern cryptography used for providing data integrity and authentication. The idea proposed herein is to put a QR code in the printed documents where the QR code includes a digital signature. The signature can later be authenticated using the proposed system by uploading the document for authentication or scanning the document's QR code. The proposed system is particularly developed for digital signature generation and verification of students' final project approval documents as the case study. In traditional settings, the approval form is typically signed directly by the student's advisor dan co-advisor using handwritten signatures. However, using the conventional handwritten signature, the signature on the approval form can be falsified. Therefore, a digital signature generation and verification system is implemented herein to avoid handwritten signature falsification. The advisors can use this system to sign the approval form using a digital signature instead of a handwritten one. The signature is stored in a QR code and is generated using ECDSA with SHA-256 as the hash function. The proposed system is evaluated using documents (i.e., approval forms) with genuine and forged QR codes. The evaluation results showed that the system could verify the authenticity of the approval forms, which contain genuine QR codes. The approval forms that contained forged QR codes were correctly identified.

Smart Contract for Digital Garment Design using Blockchain and Digital Right Management

Background: In the current advancement of communication, anyone can create digital content. Emerging digital marketplaces provides an environment to share digital data with customers who are interested in content, from other digital sources. Digital marketplaces provide a location for both providers and consumers to connect to meet the increased demand. All of this leads to challenges in content protection, copyright protection, contract creation and work trading. Objectives: To address these issues, this scheme suggests a blockchain based approach for managing digital rights to garment design works. This system uses the blockchain, digital copyright management techniques and off-chain computation for garment design work. The visibility of design effects, the secrecy of design details and compliance with applicable regulations are all considered. The data delivery is also assured with the help of the proof-of-delivery concept. Methods: The proposed system has three steps. They are (i) Creating digital copyright documents using key generation and verification of digital signature (ii) Smart contract creation (iii) Certificate generation for confirmed smart contracts. A Smart contract is defined as computerized transaction protocols that execute the terms of a contract. Findings: Smart contracts are created between the designer and customer using Ethereum which is a blockchain based software platform. The interplanetary file system is used to store digital documents. Ethereum blockchain is used to create the smart contract digitally. Ethereum smart contract provides unchangeable, transparent, tamper-proof logs, traceability and responsibility. Finally, E-certificate is generated by the designer for the confirmed contracts and it is uploaded into the IPFS. Novelty and applications: The trusted, decentralized and proof of delivery frameworks are included for digital design work with the key features of IPFS, blockchain and Ethereum smart contract. The proposed work is also compared with the existing works based on several criteria such as blockchain, IPFS, PoD, etc. Keywords: Blockchain; Design work; Copyright Protection; Digital Signature; Ethereum

HARDWARE SUPPORT PROCEDURES FOR ASYMMETRIC AUTHENTICATION OF THE INTERNET OF THINGS

Subject of research: procedures of asymmetric authentication of Internet of Things nodes to ensure the highest level of security using cryptographic chips. The aim of the article is to study the ways of potential use of cryptographic chips to ensure secure authentication of Internet of Things sites using asymmetric cryptography procedures. The article solves the following tasks: analysis of hardware support technologies for asymmetric cryptography of the Internet of Things; definition of secure procedures for asymmetric authentication of Internet of Things sites and their constituent elements: creation of certificates, verification of public and private keys. Research methods: method of structural and functional analysis and design of complex systems, methods of identification and authentication of information objects, cryptographic methods of information protection, methods of security analysis of distributed information systems. The novelty of the study is the analysis of hardware support technologies for asymmetric cryptography of Internet of Things with cryptographic chips and the definition of structural and functional schemes for the implementation of procedures for asymmetric authentication of Internet of Things. Distinctive features of the provided asymmetric authentication schemes and procedures are: ensuring an increased level of information security through secure storage of cryptographic keys, digital signatures, certificates, confidential data in a novelty security environment protected from external attacks and no need to store private keys on the host side. The results of the work are procedures and schemes of application of cryptomicrops of asymmetric authentication to ensure the protection of Internet of Things. Analysis of the functioning of the presented schemes allowed to draw the following conclusions. The proposed structural and functional schemes for the implementation of procedures for asymmetric authentication of Internet of Things using cryptographic chips give the user an easy opportunity to implement cryptography without expertise in this field. These chips use the ECDSA digital signature computing and verification hardware with elliptical curve advantages, as a proven and reliable authentication algorithm, and the ECDH symmetric encryption session key generation unit. The provided schemes and procedures support three components of information security, namely: confidentiality, integrity and authenticity of data. Examples of potential applications of the provided schemes and procedures can be implemented using any asymmetric authentication chip, but it is recommended that they be used to generate encryption session keys and where digital signatures are required to verify data and code for integrity and authenticity.

Validity of Digital Signature as Evidence in Electronic Commerce

Trade is a way to promote economy, recognized that trade is important, urge the emergence of new trading concept. Electronic Commerce is the succumbed attendance of faceless trading. Alongside the development of technology, crimes also develop rapidly. Cyber crime is the type of crime in the virtual world. Recognized this problem, the appearance of security system in cryptography is well developed. Digital Signature is the manifestation of cryptography in asymmetric cryptosystem. Ironically well problem solving of this condition is not entails with its position as evidence in electronic contract. In evidence law, the presence of digital signature is approved as evidence in electronic commerce. It based on the equality of hash function. The validity of digital signature also approved as evidence in electronic commerce based on the approval of art. 11 Law No 11/2008 on Information and Electronic Transaction, which emphasize the legal position of digital signature as valid evidence in electronic commerce. Considering the constraints that arise in digital signature verification divided into Non juridical consist of technology and cultural obstacle. In case a dispute occurs either in transnational area, the jurisdiction that used in cyberspace area need precise principles rooted from the principle of international law. These principles are: subjective, objective territoriality, passive nationality, protective principle and universality interest jurisdiction, theory of the law of the server and theory of international space.

Blockchain-based Lamport Merkle Digital Signature: Authentication tool in IoT healthcare

Internet of Things (IoT) includes medical devices, servers, and applications linked using computer networks to collect and share data. Recently there is a massive surge in IoT-enabled applications, especially in the medical field. Medical devices, like intravenous pumps, Magnetic Resonance Imaging (MRI) machines, infusion pumps, and ventilators, are connected with the hospital networks to enhance the quality and efficiency of delivering medical care. Integrated with the cloud server, IoT improves patients’ lifestyles and minimizes the time and cost by efficiently managing the medical resources. However, due to the presence of malicious users, sensitive patient data is often compromised. Motivated and driven by these factors, this work proposes a blockchain-assisted highly secure system for medical IoT devices using Lamport Merkle Digital Signature (LMDS). Initially, the Lamport Merkle Digital Signature Generation (LMDSG) model performs the task of authenticating IoT devices by constructing a tree in which the leaves symbolize sensitive patient medical data’s hash function. Further, a Centralized Healthcare Controller (CHC) performs the task of determining the root of the LMDSG by using Lamport Merkle Digital Signature Verification (LMDSV). In this verification process, when the hash of the public key ‘pbkey′ is equal to leaf ‘Pgn’, then it is the root of the tree, and the signature is valid. In this way, the proposed LMDS technique efficiently identifies malicious user behavior with minimum Computational Overhead (CO) and Computational Time (CT). The proposed LMDS technique’s performance is analyzed in terms of CO, CT, and authentication accuracy. The experimental analysis proves that the proposed LMDS technique ensures higher security and minimum CT and CO in medical IoT systems than other existing methods.

Speeding-up verification of digital signatures

In 2003, Fischlin introduced the concept of progressive verification in cryptography to relate the error probability of a cryptographic verification procedure to its running time. It ensures that the verifier confidence in the validity of a verification procedure grows with the work it invests in the computation. Le, Kelkar and Kate recently revisited this approach for digital signatures and proposed a similar framework under the name of flexible signatures. We propose efficient probabilistic verification procedures for popular signature schemes in which the error probability of a verifier decreases exponentially with the verifier running time. We propose theoretical schemes for the RSA and ECDSA signatures based on some elegant idea proposed by Bernstein in 2000 and some additional tricks. We also present a general practical method, that makes use of efficient error-correcting codes, for signature schemes for which verification involves a matrix/vector multiplication.

Research of the corporate network information protection system based on GNS3

A study of the information protection system of a corporate network based on GNS3 was performed. A simulation model of the corporate network protection system based on GNS3 has been built. The GNS3 program is a graphical network emulator that allows you to simulate a virtual network that consists of network equipment of more than twenty different manufacturers on a local computer, and connect a virtual network to a real network. The corporate network information protection system consists of Gateway, Firewall, Digital Signature Verifier and Logger microservices. We used elements that will allow us to test the protection system as a complete simulation model. A software package was developed using ASP.NET Core technology. The application architecture is implemented using the design pattern of "microservice architecture". Each element of the protection system, its role, functions and implementation are considered. SQL Injection and Cross-site scripting threat protection was implemented. Digital signature verification provides an additional layer of information security. The response of the corporate network information protection system to a threatened request is presented. Logging was analyzed using the Logger microservice, protection analysis will further identify weak points of protection and develop improvements. Conducted stress tests using the Vega program (to fulfill the goals of the attacker, the Kali Linux software operating system was chosen) showed that the system is very resistant to attacks such as SQL Injection and Cross-site scripting. A simulation model of the corporate network protection system based on GNS3 using a digital signature of a minimum size with a specified level of stability has been developed. Statistical data on the reaction of the information protection system are analyzed. Conclusions are drawn about the effectiveness of the developed information protection system in the corporate network.

On Challenges in Verifying Trusted Executable Files in Memory Forensics

Memory forensics is a fundamental step in any security incident response process, especially in computer systems where malware may be present. The memory of the system is acquired and then analyzed, looking for facts about the security incident. To remain stealthy and undetected in computer systems, malware are abusing the code signing technology, which helps to establish trust in computer software. Intuitively, a memory forensic analyst can think of code signing as a preliminary step to prioritize the list of processes to analyze. However, a memory dump does not contain an exact copy of an executable file (the file as stored in disk) and thus code signing may be useless in this context. In this paper, we investigate the limitations that memory forensics imposes to the digital signature verification process of Windows PE signed files obtained from a memory dump. These limitations are data incompleteness, data changes caused by relocation, catalog-signed files, and executable file and process inconsistencies. We also discuss solutions to these limitations. Moreover, we have developed a Volatility plugin named sigcheck that recovers executable files from a memory dump and computes its digital signature (if feasible). We tested it on Windows 7 x86 and x64 memory dumps. Our experiments showed that the success rate is low, especially when the memory is acquired from a system that has been running for a long time.

Securing Fog Storage Nodes u sing a n Attribute b ased Encryption Scheme a nd Multi Factor Authentication

Fog computing is an extended and distributed infrastructure where the application processes are managed between the end devices and the edge of the grouped system for better and reliable services. Fog computing is a non-insignificant augmentation of cloud which comes in to the same security and production difficulties of cloud computing. Existing conventional techniques like digital certificates and signature verification schemes suffers due to the advancement of cyber criminals in revoking the certificates. To enable authentication and confidentiality among a group of gathered fog nodes, in this paper, a novel CP-ABE based scheme along with multi-factor user authentication (CP-ABE-MA) is proposed. Further, the paper uses some obfuscation technique which obscures the data to evade the illegal user access. In general, the cloud is a RAW data type which consists of any data format, hence respective on the data type the encryption conversion can be used. CP-ABE can be connected to letters in order and alphanumeric sort of information and jumbling can be connected to a numeric kind of information. Applying encryption methods on the cloud information will give more security against unapproved use. Privacy could be accomplished with a blend of encryption and confusion. In order to evaluate the efficiency, the proposed protocol is implemented and tested in AVISPA and compared with the certificate-based schemes. Further, the proposed protocol outflanks the existing certificate based schemes with 97% accuracy.