Existing Access Control Systems Research Articles

Capability and Blockchain-Based Fine-Grained and Flexible Access Control Model

Currently, integrating blockchain into access control systems has become a new research trend. However, existing access control systems still have problems such as easy confusion of capability authorisation subjects, inflexible capability granting and revocation, insufficient granularity of capability, insecure capability transfer and lack of capability verification. To solve these problems, this work proposes Capability- & Blockchainbased Fine-grained and Flexible Access Control (CB2FAC), defines new capability authorisation rules, and designs an authorisation tree with capability revocation list to meet the needs of flexibility and timeliness of capability revocation. Finally, simulation experiments show that CB2FAC is flexible and secure in granting, revoking, granularity control and verification of capability, and significantly outperforms the existing schemes in terms of performance.

Analisis Control Access Dalam Strategi Pencegahan Tindakan Tawuran Di Jakarta International Stadium

This study aims to analyze the use of access control strategies as part of efforts to prevent acts of violencein Jakarta International Stadium. The study utilizes the CPTED (Crime Prevention ThroughEnvironmental Design) theory, with a focus on access control as a key component of the preventionstrategy. The research methodology involves analyzing the existing access control system in JakartaInternational Stadium, including evaluating entrances, parking areas, and the surrounding vicinity. Datais collected through direct observations, interviews with security personnel, and analysis of relevantdocuments. The findings of the study indicate that the implementation of access control strategies basedon the CPTED theory can contribute to the prevention of violence in Jakarta International Stadium.Effective access control measures, such as enhanced entrance monitoring, well-regulated traffic inparking areas, and adequate barrier installations, can reduce the potential for conflicts among spectators.In conclusion, the implementation of access control strategies based on the CPTED theory is an effectivemeasure in preventing acts of violence in stadiums.

SYSTEM OF CONTROL AND MANAGEMENT OF ACCESS ON THE BASIS OF ARDUINO MICROCONTROLLERS

Objectives. The aim of the study is to select methods and means for the effective modernization of the security system existing in the enterprise.Method. It is proposed to improve the access control mode using the access control system based on ARDUINO microcontrollers. To highlight the functions of the system and the requirements for it were built UML-diagrams. On the basis of these diagrams, the balls have developed a schematic electrical diagram of the hardware of the system with an indication of all its elements. At the next stage, an algorithm was proposed for the operation of the hardware of the access control system. The implementation of a part of the algorithm for information exchange between the device and the information system is shown in the form of a sketch using the example of packet transmission over an Ethernet network using the TCP protocol. An intuitive interface has been developed for interaction between the access control system and the end user. The necessary information is stored in a database created in a Microsoft SQL Server environment.Result. The developed system was tested at the enterprise by means of sketches and a multimeter. Test results allow us to conclude that the system is ready for implementation. Conclusion. The article describes one of the methods for upgrading the existing access control system through a more user-friendly interface and the addition of entry/exit functions.Acknowledgments. The work was commissioned by the company LLC «Kalinin Baranchinsky Electromechanical Plant».

A Novel OA System Access Control Method Based on Improved RBAC Model

Access control is an indispensable part of the OA system. Reasonable access control can fundamentally guarantee data security. With the expansion of enterprise business scale and the adjustment of organizational structure, there will be more and more system users. Due to the sensitivity and privacy of business data, it is necessary to manage the authority of users in this system. In order to solve the problem of large granularity of permission management and strong coupling between access control code and business code, this paper compares the implementation scheme of existing access control system, realizes a fine-grained access control method based on improved RBAC model and achieves good results in practical system application.

Towards a Secure and Borderless Collaboration between Organizations: An Automated Enforcement Mechanism

During the last decade, organizations have been more and more aware of the benefits of engaging in collaborative activities. To attain a required collaborative objective, they are obligated to share sensitive resources such as data, services, and knowledge. However, sharing sensitive and private resources and exposing them for an external usage may prevent the organizations involved from collaborating. Therefore, this usage requires more preoccupation with security issues. Access control is one of these required security concerns. Several access control models are defined in the literature and this multitude of models creates heterogeneity of access control policies between the collaborating organizations. In this paper, we propose Access Control in Cross-Organizational coLLABoration ACCOLLAB, a solution for automatic mapping between heterogeneous access control policies in cross-organizational collaboration. To carry out this mapping, we suggest a mechanism founded mainly on XACML profiles and on a generic language derivative of XACML we define as Generic-XACML. We also formally prove that the mapping does not affect decision evaluation of policies. Thereby the proposed contribution ACCOLLAB allows each collaborating organization to communicate their access control policies and adopt other’s policies without affecting their existing access control systems.

Access control system using beacon-based indoor location data pattern analysis

Background/Objectives: With the development of IT, accidents of industrial secret leakage have occurred more than before. Such acci-dents are mostly caused by insiders. Methods/Statistical analysis: An existing access control system uses RFID and NFC tag. The system saves only the final location in-formation in DB. For the reason, it is hard to track a user’s location data in real time. However, a beacon-based access control system saves a user’s location information in DB in real time. By analyzing the location information of DB, it is possible to track a user. Findings: Beacons are used for determining a user’s location. The determined location information is converted into location data which is saved into DB. The location data is converted into coordinates. The converted coordinate data is analyzed for understanding a user’s behavior pattern. In the pattern analysis, if a user takes an abnormal behavior, policy-based response is performed. The user behavior pattern analysis system proposed in this study is able to respond to an accident in real time. Therefore, it is expected to contribute to reducing the number of industrial secret leakage accidents caused by insiders. Improvements/Applications: This study designs a model that analyzes behavior pattern by using the indoor location data of a user based on beacon.

Capability-Based Access Control with ECC Key Management for the M2M Local Cloud Platform

One of the critical requirement in managing security of any computing system is access control, which includes protection and access management to the available resources. This requirement becomes more strict especially in a distributed computing environment that consists of constrained devices such as Machine-to-Machine (M2M). New challenges in access control are identified in a system comprises a group of distributed multiple M2M gateways forming a so called M2M local cloud platform (Vallati et al. in Wirel Trans Commun 87(3):1071–1091, 2016). Scalability is obviously a necessity which is lacking in some existing access control system. In addition, flexibility in managing access from users or entity belonging to other authorization domains as well as delegating access right are not provided as an integrated features. Lately, the capability-based access control has been suggested as method to manage access for M2M as the key enabler of Internet of Things. In this paper, a capability based access control equipped with Elliptic Curve Cryptography based key management is proposed for the M2M local cloud platform. The feasibility of the proposed capability based access control and key management are tested by implementing them within the security manager that is part of the overall component of the platform architecture, and evaluating their performances by a series of experimentations.

Using classification for role-based access control management

Access control is based on the specification of rights to resources. Role-based access control (RBAC) has emerged as one of the most robust security models which significantly simplifies administrative overheads. Despite all the compelling benefits that RBAC offers, it still lacks the ability to handle dynamic environment aspect and handling any unforeseen situations. Manual intervention becomes necessary when a user who is not previously defined in the system requests an access. For a system administrator, it becomes challenging to decide whether a submitted request should be honoured or not and how a new user can be added to the existing system in a secure manner. These issues have significantly increased the demand for new access control solutions that provide flexible, yet secure access. In this paper, we present an approach to facilitate automatic enforcement of access control policies when a new user is added to an existing access control system. Our approach is based on classification method. To evaluate the effectiveness of our approach we performed extensive experiments on both real and synthetic datasets. We compare the performance of our approach to another well-known approach that was proposed earlier to handle a similar problem. Experimental results show that our approach performs very well. Moreover, we have found that our approach is relatively easier to implement.

LED-QR Authentication Technology for Access Control and Security

There are several possible places which are accessible in many buildings and facilities, various types of systems have been utilized such as access control or surveillance depending on the purpose. Especially if security is important, it must go through the various authentication procedures when people can access. Until now many access control systems have been proposed and developed, they are applied and utilized to companies which security is needed. However, as time passes the problems with existing access control systems occur or the vulnerabilities related to access control are reported, as technology advances. The solution to this, we propose authentication technology related to access control using LED-QR tag.

Dynamic Authentication with Sensory Information for the Access Control Systems

Access card authentication is critical and essential for many modern access control systems, which have been widely deployed in various government, commercial, and residential environments. However, due to the static identification information exchange among the access cards and access control clients, it is very challenging to fight against access control system breaches due to reasons such as loss, stolen or unauthorized duplications of the access cards. Although advanced biometric authentication methods such as fingerprint and iris identification can further identify the user who is requesting authorization, they incur high system costs and access privileges cannot be transferred among trusted users. In this work, we introduce a dynamic authentication with sensory information for the access control systems. By combining sensory information obtained from onboard sensors on the access cards as well as the original encoded identification information, we are able to effectively tackle the problems such as access card loss, stolen, and duplication. Our solution is backward-compatible with existing access control systems and significantly increases the key spaces for authentication. We theoretically demonstrate the potential key space increases with sensory information of different sensors and empirically demonstrate simple rotations can increase key space by more than 1,000,000 times with an authentication accuracy of 90 percent. We performed extensive simulations under various environment settings and implemented our design on WISP to experimentally verify the system performance.

A business-driven decomposition methodology for role mining

It is generally accepted that role mining – that is, the discovery of roles through the automatic analysis of data from existing access control systems – must count on business requirements to increase its effectiveness. Indeed, roles elicited without leveraging on business information are unlikely to be intelligible by system administrators. A business-oriented categorization of users and permissions (e.g., organizational units, job titles, cost centers, business processes, etc.) could help administrators identify the job profiles of users and, as a consequence, which roles should be assigned to them. Nonetheless, most of the existing role mining techniques yield roles that have no clear relationship with the business structure of the organization where the role mining is being applied. To face this problem, we propose a methodology that allows role engineers to leverage business information during the role finding process. The key idea is decomposing the dataset to analyze into several partitions, in a way that each partition is homogeneous from a business perspective. Each partition groups users or permissions with the same business categorization (e.g., all the users belonging to the same department, or all the permissions that support the execution of the same business process). Such partitions are then role-mined independently, hence achieving three main results: (1) elicited roles have a clearer relationship with business information; (2) mining algorithms do not seek to find commonalities among users with fundamentally different job profiles or among uncorrelated permissions; and, (3) any role mining algorithm can be used in conjunction with our approach. When several business attributes are available, analysts need to figure out which one produces the decomposition that leads to the most intelligible roles. In this paper, we describe three indexes that drive the decomposition process by measuring the quality of a given decomposition: entrustability, minability gain, and similarity gain. We compare these indexes, pointing out pros and cons. Finally, we apply our methodology on real enterprise data, showing its effectiveness and efficiency in supporting role engineering.