Enterprise Digital Rights Management Research Articles

Understanding employee's emotional reactions to ISSP compliance: focus on frustration from security requirements

ABSTRACT As the importance of information assets increases, employees are increasingly required to comply with organisational policies for information security (InfoSec). Since security-related demands lead to stressful situations, employees are likely to bypass security policies to perform their tasks. Extant literature does not sufficiently address the detrimental factors of information system security policies (ISSP). This study investigates employees’ emotional reactions to ISSP compliance from the perspectives of technostress and coping. The aim of this study is to identify behaviour antecedents of frustration in the context of InfoSec and provide factors for mitigating the negative effects of frustration on ISSP compliance intentions. This study followed a survey approach and conducted structural equation modelling using the WarpPLS program to examine its research model and hypotheses. The survey respondents comprised employees who used an enterprise digital rights management system. The results demonstrated that frustration negatively affected employees’ intentions to comply with ISSP, but these negative effects of frustration decreased when autonomy was granted. Further, this study provides critical new insights on ISSP compliance from an emotional perspective.

Provably secure authenticated content key distribution framework for IoT-enabled enterprise digital rights management systems

The internet of things (IoT) is one of the fastest growing technology, which is helping the enterprise industry. However, it brings greater challenges to privacy and security. Moreover, online piracy of content is an emerging issue. Thus, authorised content access is required. Enterprise digital rights management (E-DRM) systems aim to manage the access of electronic records necessitates establishing a standard set of access requirements, binding those access requirements to the electronic records, and computing the permission criteria. In this chain of control, efficient authenticated access to electronic documents is a crucial task. To address the issues, a protocol is designed. Security of the proposed scheme is proved in the random oracle model. Validation of security is done using 'Automated Validation of Internet Security Protocols and Applications (AVISPA)', which indicates that the protocol is safe. Moreover, the comparative study shows that it has a desirable attribute of efficiency.

Provably secure authenticated content key distribution framework for IoT-enabled enterprise digital rights management systems

The internet of things (IoT) is one of the fastest growing technology, which is helping the enterprise industry. However, it brings greater challenges to privacy and security. Moreover, online piracy of content is an emerging issue. Thus, authorised content access is required. Enterprise digital rights management (E-DRM) systems aim to manage the access of electronic records necessitates establishing a standard set of access requirements, binding those access requirements to the electronic records, and computing the permission criteria. In this chain of control, efficient authenticated access to electronic documents is a crucial task. To address the issues, a protocol is designed. Security of the proposed scheme is proved in the random oracle model. Validation of security is done using 'Automated Validation of Internet Security Protocols and Applications (AVISPA)', which indicates that the protocol is safe. Moreover, the comparative study shows that it has a desirable attribute of efficiency.

Exploring the role of intrinsic motivation in ISSP compliance: enterprise digital rights management system case

PurposeEmployee compliance with information system security policies (ISSPs) has been emphasized as a key factor in protecting information assets against insider threats. Even though previous studies have identified extrinsic factors (in the form of external pressure, rewards and social norms) influencing employee compliance, the functioning of employees' intrinsic motivation has not been clearly analyzed. Thus, the aim of this study is to explore the influence of intrinsic motivations on employees' ISSP compliance.Design/methodology/approachThis study follows a survey approach and conducts structural equation modeling using WarpPLS 5.0 to test the research model and hypotheses. The survey respondents are users of an enterprise digital rights management (EDRM) system.FindingsThe analysis results demonstrate that work impediments, perceived responsibility and self-efficacy significantly influence the intention to comply with ISSP. Additionally, autonomy significantly affects self-efficacy and perceived responsibility. Furthermore, autonomy plays a moderating role in the relationship between work impediment and ISSP compliance intentions.Originality/valueThis study initiatively explores the effect of intrinsic motivations on ISSP compliance intention of employees for a specific information security system (i.e. the EDRM system). This study clarifies the enabling role of intrinsic motivations in ISSP compliance and helps organizations to understand that employee's self-motivated intention, i.e. autonomy, is an essential factor that achieves a higher level of ISSP compliance in the workplace.

An improved E-DRM scheme for mobile environments

With the rapid development of information science and network technology, Internet has become an important platform for the dissemination of digital content, which can be easily copied and distributed through the Internet. Although convenience is increased, it causes significant damage to authors of digital content. Digital rights management system (DRM system) is an access control system that is designed to protect digital content and ensure illegal users from maliciously spreading digital content. Enterprise Digital Rights Management system (E-DRM system) is a DRM system that prevents unauthorized users from stealing the enterprise's confidential data. User authentication is the most important method to ensure digital rights management. In order to verify the validity of user, the biometrics-based authentication protocol is widely used due to the biological characteristics of each user are unique. By using biometric identification, it can ensure the correctness of user identity. In addition, due to the popularity of mobile device and Internet, user can access digital content and network information at anytime and anywhere. Recently, Mishra et al. proposed an anonymous and secure biometric-based enterprise digital rights management system for mobile environment. Although biometrics-based authentication is used to prevent users from being forged, the anonymity of users and the preservation of digital content are not ensured in their proposed system. Therefore, in this paper, we will propose a more efficient and secure biometric-based enterprise digital rights management system with user anonymity for mobile environments.

An anonymous and secure biometric-based enterprise digital rights management system for mobile environment

In 1 the authorship was originally shown as “Ashok Kumar Das, Dheerendra Mishra and Sourav Mukhopadhyay”. This has now been corrected to “Dheerendra Mishra, Ashok Kumar Das and Sourav Mukhopadhyay”. We apologize for any inconvenience caused.

Secure Anonymously Authenticated and Traceable Enterprise DRM System

Anonymity is one of the important services that must be available to users in the digital world as long as they behave honestly. Users’ communication must be kept authenticated and anonymous unless malicious behaviors are detected. In this case the accused user’s clear identity must be traced and revealed by the system to solve accusations. Enterprise Digital Rights Management (E-DRM) protects business digital applications by allowing an author in an organization to securely upload his confidential package/file(s) and store the contents in a private way on secure servers. This is done in a way that – later – allows an authorized user who is able to prove his authorization for the package to an authorization authority to download and use these contents in a private way. In this paper, we extend our previously proposed E-DRM protocols and propose an E-DRM protocol that allows authorized users to upload, store and download packages in an efficiently secure, anonymous and authenticated way. On the other hand, in case of an accusation or a dispute, our system is able to trace the user to his clear identity to solve accusations.

An anonymous and secure biometric‐based enterprise digital rights management system for mobile environment

AbstractInternet‐based content distribution facilitates an efficient platform to sell the digital content to the remote users. However, the digital content can be easily copied and redistributed over the network, which causes huge loss to the right holders. On the contrary, the digital rights management (DRM) systems have been introduced in order to regulate authorized content distribution. Enterprise DRM (E‐DRM) system is an application of DRM technology, which aims to prevent illegal access of data in an enterprise. Earlier works on E‐DRM do not address anonymity, which may lead to identity theft. Recently, Chang et al. proposed an efficient E‐DRM mechanism. Their scheme provides greater efficiency and protects anonymity. Unfortunately, we identify that their scheme does not resist the insider attack and password‐guessing attack. In addition, Chang et al.'s scheme has some design flaws in the authorization phase. We then point out the requirements of E‐DRM system and present the cryptanalysis of Chang et al.'s scheme. In order to remedy the security weaknesses found in Chang et al.'s scheme, we aim to present a secure and efficient E‐DRM scheme. The proposed scheme supports the authorized content key distribution and satisfies the desirable security attributes. Additionally, our scheme offers low communication and computation overheads and user's anonymity as well. Through the rigorous formal and informal security analyses, we show that our scheme is secure against possible known attacks. Furthermore, the simulation results for the formal security analysis using the widely accepted Automated Validation of Internet Security Protocols and Applications tool ensure that our scheme is also secure. Copyright © 2015 John Wiley & Sons, Ltd.

A Novel Approach towards EDRM System Design for Android Devices

digital content services gain importance in the mobile world, this paper proposes Digital Rights Management implementation for android devices. EDRM (Enterprise Digital Rights Management) system provides a novel solution to control access to documents such as Microsoft word, PDF and images from unauthorized copying, modification, and re- distribution. The work protects personal digital content like photos, documents etc. This modeled design aims how security is been provided to mobile devices using password mechanism, hash function and encryption and it is been tested using 100 samples. The individualization, flexibility, efficiency and practicability issues will be assured. The implementation permits the mobile user to conduct a preview-before-download activity and the digital content provider will not suffer from unauthorized mobile users accessing digital content. Proposed system uses a two level security using a Universal Unique Identifier, which is hashed using the (Simple Hashing Algorithm) SHA algorithm, then that key is used for the encryption of the content in Advanced Encryption Standard (AES) algorithm. The parameters used to measure system performance are response-time and throughput and were found out to be 0.022-sec/request and 45.54 respectively. Thus the paper achieves better security and faster processing. General Terms EDRM, Android, DRM, Digital, Security, Encryption

A practical secure and efficient enterprise digital rights management mechanism suitable for mobile environment

ABSTRACTDigital rights management (DRM) is a term for access control technologies that are used by hardware manufacturers, publishers, copyright holders, and individuals to limit the use of digital content and devices. Enterprise digital rights management (E‐DRM) is the application of DRM technology to prevent illegal users from accessing the confidential data of an enterprise. In 2010, Chang et al. proposed an efficient E‐DRM scheme to solve the flaws of Chen's scheme. However, we still found some weaknesses in their scheme. In this article, we propose an improved secure and efficient E‐DRM mechanism based on a one‐way hash function and exclusive‐or. Our mechanism overcomes the weaknesses in the scheme of Chang et al. and also reduces computation costs. In addition, we used BAN logic to show the correctness of our mechanism. Copyright © 2012 John Wiley & Sons, Ltd.

Quantitative Evaluation of Enterprise DRM Technology

It is of critical business importance for organizations to keep confidential digital documents secure, as the potential cost and damage incurred from the loss of confidential digital documents have increased significantly in recent years. Digital Rights Management (DRM) was developed to help organizations keep digital documents secure, as one of many digital information security solutions.In this study, the functions of eight popular DRM products currently available on the market are reviewed, and the impact of using of these DRM products is evaluated quantitatively. A group of metrics is defined reflecting the potential costs and impact to the organization incurred by implementing DRM products. Stochastic models are used to quantitatively evaluate the costs and impact of implementing a particular DRM product. In this study, it is found that although DRM products protect digital assets by encryption and by providing central control on information within the organization, this comes at a cost, since these security mechanisms typically reduce the productivity of the staff. The reduction in productivity is in turn measured in the form of non-productive time (NPT) which is an inherent part of the stochastic modeling process.

Solvable problems in enterprise digital rights management

PurposeDigital rights management (DRM) is often promoted as the technical basis for solutions to enterprise security problems requiring persistent protection. Yet to date, DRM has failed to take hold within the enterprise sphere. This paper aims to examine some possible reasons for the slow adoption of enterprise DRM.Design/methodology/approachIt is argued that contrary to the common perception current DRM technology is sufficiently robust for use in enterprise applications. Then three problems that may serve as barriers to enterprise DRM adoption, namely, trustworthy authentication, access policy management and the lack of compelling enterprise applications that require DRM are discussed. Finally, brief examples are presented drawn from the real world that illustrate that the first two barriers can be overcome, and it is argued that regulatory compliance is the “killer app” that will drive enterprise DRM adoption.FindingsFinds, amongst other things, that technical weakness in enterprise DRM systems, especially regarding authentication and authorization, can be addressed with relatively simple mechanisms.Originality/valueThis paper points up the need for more sophisticated enterprise DRM solutions.