Granted Access Rights Research Articles

A Blockchain-Based Trustworthy Access Control Scheme for Medical Data Sharing

Blockchain is commonly employed in access control to provide safe medical data exchange because of the characteristics of decentralization, nontamperability, and traceability. Patients share personal health data by granting access rights to users or medical institutions. The major purpose of the existing access control techniques is to identify users who are permitted to access medical data. They hardly ever recognize internal assailants from legitimate entities. Medical data will involve multilayer access within the authorized organizations. Considering the cost of permissions management and the problem of insider malicious node attacks, users hope to implement authorization constraints within the authorized institutions. It can prevent their data from being maliciously disclosed by end-users from different authorized healthcare domains. For the purpose to achieve the fine-grained permissions propagation control of medical data in sharing institutions, a trust-based authorization access control mechanism is suggested in this study. Trust thresholds are assigned to different privileges based on their sensitivity and used to generate zero-knowledge proof to be broadcasted among blockchain nodes. This method evaluates the trust of each user through the dynamic trust calculation model. And meanwhile, smart contract is employed to verify whether the user’s trust can activate some permissions and ensure the privacy of the user’s trust in the process of authorization verification. In addition, the authorization transaction between users and institutions is recorded on the blockchain for patient traceability and accountability. The feasibility and effectiveness of the scheme are demonstrated through comprehensive comparisons and extensive experiments.

Basic Principles of Secure Information Systems

The relevance of the work lies in the fact that the pace of development of the field of information security does not correspond to progress in the development of data processing methods, resulting in a serious lack of practical knowledge of the subject area, which prevents the creation of conditions for secure recording, processing and storage of data. In the process of writing the article, modern methods and principles of ensuring information security, including a mandatory approach, were studied, and a brief description of software products supporting this approach was given. The mandatory method of information protection implies granting access rights to certain actions in accordance with the user’s status. Such actions can be, for example, writing, reading and changing data. Examples of user statuses are ‘administrator’ and ‘reader’, where the administrator, as a rule, is provided with the entire list of available actions, and the reader is provided with only a minimum, sufficient for familiarization activities. In its architecture, the mandatory approach often contains tools for conducting cluster analysis. Cluster analysis can be used both to carry out work on risk analysis and assessment, and to determine the degree of protection of an object. In any case, when building a cluster, it should be taken into account that some levels of protection may be represented by more objects than others. There are software products on the information security market that allow the use of a mandatory method of ensuring information security. One of the striking examples is the PostgreSQL database management system, which has an apparatus of labels assigned according to the user’s level of rights: the higher the level of rights, the higher the access level.

Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions.

Internet of Things (IoT) provides a wide range of services in domestic and industrial environments. Access control plays a crucial role in granting access rights to users and devices when an IoT device is connected to a network. However, many challenges exist in designing and implementing an ideal access control solution for the IoT due to the characteristics of the IoT including but not limited to the variety of the IoT devices, the resource constraints on the IoT devices, and the heterogeneous nature of the IoT. This paper conducts a comprehensive survey on access control in the IoT, including access control requirements, authorization architecture, access control models, access control policies, access control research challenges, and future directions. It identifies and summarizes key access control requirements in the IoT. The paper further evaluates the existing access control models to fulfill the access control requirements. Access control decisions are governed by access control policies. The existing approaches on dynamic policies' specification are reviewed. The challenges faced by the existing solutions for policies' specification are highlighted. Finally, the paper presents the research challenges and future directions of access control in the IoT. Due to the variety of IoT applications, there is no one-size-fits-all solution for access control in the IoT. Despite the challenges encountered in designing and implementing the access control in the IoT, it is desired to have an access control solution to meet all the identified requirements to secure the IoT.

Building an Integrity Model of Population Data Utilization Towards Integrated (SATU) Population Data

Utilization of population data for all purposes is a mandate of Law Number 23 of 2013 concerning Amendments to Law Number 13 of 2006 concerning Population Administration. The technical provisions as an elaboration of the mandate of the law related to the use of data are stated in the Minister of Home Affairs Regulation Number 102 of 2019 concerning the Granting of Access Rights and Utilization of Population Data. This regulation regulates how the use of population data is utilized by user institutions engaged in public services to access data verification to the population database managed by the Directorate General of Population and Civil Registration (Ditjen Dukcapil). This research is qualitative descriptive research. Primary and secondary data collection is carried out through the source at the Directorate General of Civil and Civil Registration related to the use of population data. Access to this data verification systemically by using the Population Identification Number (NIK) results in an "APPROPRIATE" or "NOT COMPATIBLE" response to population data thrown by the user agency. The more user institutions that utilize population data, the more it leads to the realization of one population data that encourages NIK as a Single Identity Number (SIN). The results of the research carried out show that there is an integrity model for the use of population data that is built in granting access rights to the use of the data. The integrity model is an integrated series in the process of utilizing population data that must be fulfilled, namely regarding the legitimacy of the institution, permits, institutional commitments, statements of absolute responsibility, statements of maintaining confidentiality, and monitoring and evaluation. By building the integrity model of the use of population data, the negative issue of misuse of population data is very easy to trace through digital traces. To strengthen the implementation of the integrity model of the use of population data, the development of the competence of human resources involved in every series of processes or stages in building the integrity model of the use of population data need to be done. This competency development also includes material regarding soft skills.

RANCANG BANGUN SISTEM INFORMASI ADMINISTRASI PEMBAYARAN SISWA BERBASIS WEB DI SMK KESEHATAN MANDALA BHAKTI SURAKARTA

Mandala Bhakti Health Vocational School Surakarta is a vocational school that focuses on the health sector and has two majors, namely nursing and pharmacy. The use of computers at the Mandala Bhakti Health Vocational School in Surakarta has begun to be applied to help work in the field of school administration, especially the student payment administration section which serves all student payments including medical tests, tuition fees, practicum, competency tests, re-registration, and registration.However, the administrative process for student payments still takes quite a long time because students must first write a payment slip and wait for a payment receipt from the treasurer which is written manually and the recording process must be done twice, namely per day and class. In addition, the passbooks and receipts that are used by students to see the payments that have been made, are mostly lost and damaged, making students not know what bills to pay. Therefore, it is necessary to have a Student Payment Administration Information System that can speed up the payment process, simplify the reporting process, and grant access rights for students to view payment history and bill payments.This Student Payment Administration Information System was created based on a website using visual studio code software (text editor), MySQL database management system (DBMS), Xampp, and the PHP programming language. Methods of data collection are done using interviews, observation, and literature study. While in its construction, the author uses the RAD (Rapid Application Development) development method which consists of requirements analysis, modeling analysis, modeling design, and construction.Testing the student payment administration information system uses black box testing which shows that the system is functioning properly without any errors. User testing was carried out using a questionnaire which showed the results that for the admin, treasurer, and principal access rights questionnaire the highest score was the 'agree' option with a percentage of 60%, while for the student access rights questionnaire, the highest score was the 'agree' option. with a percentage of 55%. This shows that the student payment administration information system is following the needs of its users

Design of the Secure Smart Home System Based on the Blockchain and Cloud Service

In this paper, a variety of cloud service combinations is used to form the control core of a smart home, realize data forwarding, storage, and analysis in the cloud, and complete the remote management of smart home devices. This paper studies the secure access control of smart home data combined with the blockchain technology and password technology to realize the secure and efficient access control of smart home data. The system can achieve the goal of independent research and development. Aiming at the problem that the access control of a smart home is generally managed by third-party authorized institutions and there is an unauthorized access, a blockchain-based smart home (BSH) access control scheme is proposed. The scheme extends the attribute-based access control model (ABAC) and applies the blockchain technology to the smart home ABAC model to realize fine-grained access control. In the scheme, the resource provider first publishes the access control policy of the resource to the blockchain. If the resource visitor wants to access the resource, he needs to submit an access request to the blockchain and use an SM2 threshold signature to process the transaction proposal. The endorsement peer node in the blockchain runs the access control policy smart contract to decide whether to grant access rights. This scheme can ensure that resource providers can participate in all the processes of access control and avoid the risk of unauthorized access caused by the centralized management of the third party. Finally, the simulation experiment is carried out on the Hyperledger Fabric alliance chain development platform. The results show that the BSH access control scheme has good applicability in the smart home scenario.

Contractual and legal regulation of preservation of results of scientific research in confidentiality and use of such information in case of research and development: practices of EU and countries of the world

The article analyzes the category of agreements in the field of research and development – non-disclosure agreements (confidentiality agreements), provides examples of such agreements with different sources of funding; as well as there are being considered the wordings of confidentiality provisions in general agreements for research and development – the article compares the practice of application of these provisions in the EU and countries of the world. The requirements are considered for settling the issues of protection of intellectual property rights in the aspect of confidentiality and distribution of rights to use the information, obtained during the research in the project, use of such info during the further researches and granting access rights to such information to third parties. Aspects that should be included in similar types of agreements in Ukraine are proposed.

MICROSOFT FORMS CLOUD APPLICATION IN COLLECTION AND ANALYTICS OF STUDENT ATTENDANCE REPORTS

Вступ. В роботі працівника деканату факультету підготовки іноземних громадян багато важких моментів. Більшість з них пов’язані з транс культурними конфліктами, різниці в системі цінностей учасників педагогічного процесу, несумісності релігій та психологій, що нашаровується на значний об’єм внутрішнього і зовнішнього документообігу та щомісячної аналітики.
 Результати дослідження та їх обговорення. Одне з таких завдань - контроль відвідування студентами навчальних занять. Проблема полягає в необхідності помісячно обробляти значний об’єм розрізненої за способом доставки, слабко уніфікованої інформації. В такій ситуації в нагоді може стати доступний за підпискою Office365 інструмент Microsoft Forms, який передбачає створення опитувань та тестувань. В попередньо створеній формі, ми використаємо можливість отримання файлів. Це перетворить інструмент опитування в систему збору звітів з можливістю автоматизованого маркування документів, розміщення їх в захищеному сховищі, попередньої перевірки на відповідність умові формату та розміру, спільної обробки групами допущених осіб, та зведенням опитаної інформації до формату таблиці Microsoft Excel, де можливо, з легкістю, застосовувати сортування за необхідним критерієм, для контролю факту виконання завдання окремими респондентами.
 Для уніфікації звітньої інформації та забезпечення її придатності до автоматизованої обробки рекомендуємо звіти приймати у форматі захищеної таблиці Excel залишаючи доступними для зміни лише необхідні комірки. Для забезпечення спільного перегляду результатів членами контролюючої команди необхідно роздати права доступу на перегляд форми та можливість перегляду папки, де акумулюються файли звітів.
 Висновки. За період впровадження отримано 390 звітів від 50 кафедр на яких викладається 106 предметів. Завдяки двох сторонньому контролю підвищилась ефективність та вчасність подачі документів. Скоротився час затрачений на зведення інформації представниками деканату. Зросла достовірність кінцевих даних, завдяки зменшенню числа механічних помилок, а відповідно ефективність контролю успішності студентів факультету.

The Essential Facilities Doctrine in the Digital Economy: Dispelling Persistent Myths

The antitrust “essential facilities” doctrine is reawakening. After decades of rejection and decline, the doctrine’s approach of granting access rights to facilities for which there is no reasonable alternative in the market has received several high-profile endorsements across the political spectrum. While courts have mainly applied the doctrine to physical infrastructure, its potential now lies in addressing the gatekeeping power of online platforms. However, despite its recent endorsements, the doctrine’s criticisms linger. Many of the objections to the essential facilities doctrine are fueled by persistent myths and misconceptions, most prominently related to its economic justification, administrability, and propensity to entrench monopoly power. This Article lays out the case for the essential facilities doctrine in the digital economy and addresses the most common counterarguments that limit the doctrine’s potential to open digital markets.

Threat Analysis using N-median Outlier Detection Method with Deviation Score

Any organization can only operate optimally if all employees fulfil their roles and responsibilities. For the majority of tasks and activities, each employee must collaborate with other employees. Every employee must log their activities related with their roles, responsibilities, and access permissions. Some users may deviate from their work or abuse their access rights in order to gain a benefit, such as money, or to harm an organization's reputation. Insider threats are caused by these types of users/employees, and those users are known as insiders. Detecting insiders after they have caused damage is more difficult than preventing them from posing a threat. We proposed a method for determining the amount of deviation a user has from other users in the same role group in terms of log activities. This deviation score can be used by role managers to double-check before sharing sensitive information or granting access rights to the entire role group. We first identified the abnormal users in each individual role, and then used distance measures to calculate their deviation score. In a large data space, we considered the problem of identifying abnormal users as outlier detection. The user log activities were first converted using statistics, and the data was then normalized using Min-Max scalar standardization, using PCA to transform the normalized data to a two-dimensional plane to reduce dimensionality. The results of N-Median Outlier Detection (NMOD) are then compared to those of Neighbour-based and Cluster-based outlier detection algorithms.

CHALLENGES OF INFLUENCE DYNAMIC AND INTERACTIVE EVENTS ON RESOURCE DISCOVERY FUNCTIONALITY OUTSIDE OF DISTRIBUTED EXASCALE SYSTEMS

The resource discovery in Exascale systems should support the occurrence of dynamic nature in each stakeholder's elements in the resource discovery process. The occurrence of dynamic and interactive nature in the accountable computational element creates challenges in executing the activities related to resource discovery, such as the continuation of the response to the request, granting access rights, and the resource allocation to the process. In the case of a lack of management and dynamic and interactive event control in the accountable computational element, the process of activities related to the resource discovery will fail. In this paper, we first examine the concept function of resource discovery in the accountable computational element. Then, to analyze the effects of occurrence, dynamic, and interactive event effects on resource discovery function in the accountable computational element are discussed. The purpose of this paper is to analyze the use of the traditional resource discovery in the Exascale distributed systems and investigate the factors that should be considered in the function of resource discovery management to have the possibility of application in the Exascale distributed system.

-MABE: Distributed Multilevel Attribute-Based EMR Management and Applications

Current systems used by medical institutions for the management and transfer of Electronic Medical Records (EMRs) can be vulnerable to security and privacy threats. In addition, these systems are centralized, often lack interoperability, and give patients limited or no access to their own EMRs. In this article, we propose a novel distributed data sharing scheme that applies the security benefits of blockchain to address these concerns. We deploy smart contracts on Ethereum blockchain and utilize a distributed storage system to alleviate the dependence on the record-generating institutions to manage and share patient records. To preserve privacy of patient records, we implement our smart contracts as a method to allow patients to verify attributes prior to granting access rights. Our proposed scheme also facilitates selective sharing of medical records among staff members that belong to different levels of a hierarchical institution. We provide extensive security, privacy, and evaluation analyses to show that our proposed scheme is both efficient and practical.

Cloud platform-based real-time supervision to safety inspection of hydraulic engineering metallic structures and equipments

The safety inspection network of hydraulic engineering metallic structures and equipments was developed based on the Cloud platform technology. The experimental inspections of metallic structures in terms of the coating thickness, metal substrate thickness, welding defect and the structure stress were conducted in the under-constructed hydraulic projects in Shenzhen City. The results showed that the manual inspection data of the coating and metal thickness and the non-destructive testing scene photos and results can be transmitted to the cloud platform in real time through semi-automatic mode. Differently, the dynamic variation value of structure stress is automatically collected by the intelligent acquisition module and then wirelessly transmitted to the Cloud platform. By granting access rights to relevant personnel of quality and safety supervision department, they can ensure real-time supervision of safety inspection results and receive alarm information.

PENTINGNYA PEMANFAATAN DATA KEPENDUDUKAN DI ERA DIGITAL

Government Work Units to use a one data policy approach. The purpose of using this data includes the use of data for schools, taking care of data licensing, managing social assistance, all of which must be the same as the data sources in the Population and Civil Registration Office so that no more people have different identities. Based on the Minister of Home Affairs Regulation No. 61 of 2015 concerning Requirements, Scope and Procedures for Granting Access Rights and Utilization of Population Identification Number, Population Data, and Electronic Resident Identity Cards, data utilization access permits are granted by the Regent / Mayor. After submitting the permit to the Regent / Mayor, then the Cooperation Agreement (PKS) is signed. Furthermore, the Regional Apparatus Organization or public service agencies form a Technical Team implementing the cooperation. Furthermore, data access will be given according to their needs and usage. The user access institution will be monitored by the Regent / Mayor through the Department of population and civil registration, and periodic control, supervision and evaluation will be conducted.

Implementasi Access Control List Pada Mikrotik dalam Mengamankan Koneksi Internet Koperasi Sumber Dana Mutiara

The need for information and internet access at this time is very high. To accept it is wrong only with computer networks as a medium. In a network that requires a network that has been segmented using a Virtual Local Area Network (VLAN), the application of an Access Control List (ACL) is required to be granted access rights for each device in the network. The Access Control List (ACL) can filter the data traffic of a network by controlling whether the packets are passed or issued. A network is built using several different network devices, one of which is a router. A router is a tool that can process different data packet networks (between networks) through a process called routing. lots of companies that produce routers, mikrotik is one of the companies that produce routers. mikrotik is easy to do because it uses Winbox in Gui's view, besides that the hotspot server in it is provided with several management facilities that can be arranged according to network requirements

Utilization of Blockchain Technology for Management E-Certificate Open Journal System

The application of blockchain technology in e-certificates in the open journal system is needed to validate and distribute managed e-certificates in each journal issue. With tools in the form of conceptualized and managed blockcerts allows users to use and verify the authenticity of e-certificates that are closely linked to the blockchain. Observation on the open journal system and applied blockchain tools in the form of blockcerts as a place to issue e-certificates with guaranteed security so that e-certificates are verified as well as managed data. Issuance of e-certificates is still considered unsafe because it can be easily forged. Specifically, this study produced two benefits, namely: (1) Issuance of e-certificates in an open journal system is more verified, data is managed and there will not be duplications or even falsification of e-certificates. (2) The reputation of the open journal system is better with a sense of trust. This research uses library study method by implementing e-certificate in an open journal system with blockchain technology tools such as blockcerts. In order that the results of the e-certificate issuance go well and to avoid any crime that threatens the authenticity of the e-certificate, this blockchain is used to guarantee that the e-certificate is safe and not easily falsified, duplicated or even easily replaced by those not granted access rights. By using blockchain technology, the data collected will be well managed and not easily falsified.

Exploiting Smart Contracts for Capability-Based Access Control in the Internet of Things.

Due to the rapid penetration of the Internet of Things (IoT) into human life, illegal access to IoT resources (e.g., data and actuators) has greatly threatened our safety. Access control, which specifies who (i.e., subjects) can access what resources (i.e., objects) under what conditions, has been recognized as an effective solution to address this issue. To cope with the distributed and trust-less nature of IoT systems, we propose a decentralized and trustworthy Capability-Based Access Control (CapBAC) scheme by using the Ethereum smart contract technology. In this scheme, a smart contract is created for each object to store and manage the capability tokens (i.e., data structures recording granted access rights) assigned to the related subjects, and also to verify the ownership and validity of the tokens for access control. Different from previous schemes which manage the tokens in units of subjects, i.e., one token per subject, our scheme manages the tokens in units of access rights or actions, i.e., one token per action. Such novel management achieves more fine-grained and flexible capability delegation and also ensures the consistency between the delegation information and the information stored in the tokens. We implemented the proposed CapBAC scheme in a locally constructed Ethereum blockchain network to demonstrate its feasibility. In addition, we measured the monetary cost of our scheme in terms of gas consumption to compare our scheme with the existing Blockchain-Enabled Decentralized Capability-Based Access Control (BlendCAC) scheme proposed by other researchers. The experimental results show that the proposed scheme outperforms the BlendCAC scheme in terms of the flexibility, granularity, and consistency of capability delegation at almost the same monetary cost.

REVIEW OF IMPLEMENTATION OF IMMIGRATION INVESTIGATION AND ACTION APPLICATIONS (NYIDAKIM) IN THE CLASS I IMMIGRATION OFFICE OF TPI YOGYAKARTA


 
 Technology and information systems have played a very important role in people's lives in this era of industrial revolution 4.0. It is undeniable that technology and information systems. Investgation and prosection (Nyidakim) is an application that is used to assist processes in the field of intelligence and immigration enforcement in the form of making examination reports, incident reports, and others. In this case the author focuses on discussing the implementation of the Immigration Investigation and Enforcement application at the TPI Yogyakarta Class I Immigration Office. The implementation of the Application for Immigration Investigation and Enforcement (Nyidakim) at the TPI Yogyakarta Class I Immigration Office is one of the supports in making incident reports, examination minutes, opinion reports, and case decisions. The Immigration Investigation and Enforcement Application can also be accessed by staff to the head of the office at the TPI Yogyakarta Class I Immigration Office, so that each user is granted access rights from the Immigration Investigation and Enforcement Application.
 
 

Privacy aware decentralized access control system

Abstract IoT security and privacy have proven to be a significant challenge. The traditional access control protocols are not suitable for IoT mainly due to a massive scale, ubiquitous connectivity and distributed nature. Blockchain based access control approaches provide decentralized security but they involve scalability problem, high transaction fees, a significant delay, and computational overhead that is not acceptable for resource-constrained IoT devices. Moreover, data published on the blockchain are public which is not ideal for many scenarios. In this paper, we proposed a new decentralized access control system based on the Tangle which empowers the users to dictate the access to their resource. In our proposed decentralized access control model the policies and access rights are published on the Tangle which guarantees distributed auditability and prevents the user from fraudulently denying the granted access rights. The main contribution of the paper is to provide privacy of the policy by leveraging Masked Authenticated Messaging (MAM) data communication protocol. The proposed work is validated by implementation and is tested with AVISPA tool which confirms security in the presence of the intruder.

Secure chaotic maps‐based authenticated key agreement protocol without smartcard for multi‐server environments

AbstractModern individuals heavily rely on the support of information systems. Various applications and information processing systems provide all kinds of assistance for people's lives such as information search, work scheduling, entertainment, and online shopping. For a user, in order to access an Internet‐connected system or an internal system within an enterprise, in general, a unique password is given to the user to log into the system. Therefore, how to conveniently maintain or remember multiple passwords has become a serious headache for people. In this study, a new chaotic maps‐based authenticated key agreement protocol is first proposed for multi‐server environments. A trusted third party, called the registration center (RC), is introduced in our protocol. Once a legal user has registered with the RC, this user can log into any server with only one memorable password in a multi‐server environment as long as the user has been granted access rights in advance. As security robustness of our protocol is built on randomly generated nonces and chaotic maps, there is no time synchronization issue. Security analyses and comparisons on performance efficiency and security features among existing protocols show that our protocol is computationally efficient, and withstands password‐guessing attacks and other well‐known security threats. Copyright © 2014 John Wiley & Sons, Ltd.