Identity Access Management Research Articles

HYBRID CLOUD DATABASES FOR BIG DATA ANALYTICS: A REVIEW OF ARCHITECTURE, PERFORMANCE, AND COST EFFICIENCY

The increasing reliance on big data analytics has driven organizations to seek more flexible, scalable, and cost-effective data management solutions, with hybrid cloud databases emerging as a prominent option. Hybrid cloud databases integrate both public and private cloud environments, allowing businesses to balance the scalability and cost advantages of public clouds with the security and control provided by private clouds. This systematic review, conducted according to the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) guidelines, examines the architecture, performance, cost efficiency, security, and technological advancements of hybrid cloud databases. The study synthesizes findings from 40 peer-reviewed articles published between 2015 and 2024, focusing on key factors that affect the performance of hybrid cloud databases, such as workload distribution, network latency, and the use of advanced data analytics tools like Hadoop and Spark. The review also explores cost-saving mechanisms, including dynamic resource scaling and pay-as-you-go pricing models, which help organizations reduce infrastructure costs by up to 28%. Additionally, it discusses the security risks and privacy concerns associated with hybrid cloud environments, highlighting the effectiveness of encryption protocols and identity access management systems in mitigating data breaches by as much as 40%. Furthermore, the review identifies emerging trends in the integration of machine learning and artificial intelligence (AI), which have significantly enhanced system automation and resource optimization in hybrid cloud infrastructures, leading to performance improvements of up to 45%.

Exploring Iot Embedded Systems Along the Line of Identity Access Management for Enhanced Health Data Security

A. Overview of IoT Embedded Systems The pervasiveness of Internet of Things (IoT) embedded systems in the digital era has significantly transformed numerous industries, including healthcare. These interconnected devices, capable of collecting, transmitting, and analyzing data, offer immense potential to improve healthcare service efficiency, accessibility, and quality. However, the escalating volume of sensitive health data being generated and exchanged necessitates the implementation of robust security measures. A critical element in this regard is Identity and Access Management (IAM), which governs the control of user identities and their access privileges within a specific system [1].

User-Centric Privacy Control in Identity Management and Access Control within Cloud-Based Systems

The ability to effectively implement user-centric privacy controls in cloud-based identity access management (IAM) systems is crucial in today's age of rapidly rising data and increased privacy concerns. The study tackles the scalability issue inside cloud-based IAM systems, where user-centric privacy controls are paramount. The study aims to guarantee effective system performance despite growing numbers of users and data items by following a carefully crafted approach that uses user-centric privacy algorithms. The findings are expected to increase scalability while maintaining security and user privacy, significantly improving current cloud security and IAM techniques. This study provides significant findings for businesses adapting to the changing environment of cloud-based access and identity management, enhancing the security and privacy aspects of the online environment.

Why policy-based authorisation is critical for identity-first security

The enterprise perimeter is changing; it is now about data objects, application programming interfaces (APIs), microservices and applications. In this evolving, decentralised and highly segmented world, security and identity access management (IAM) leaders find themselves struggling with a security methodology to address their concerns — specifically to answer the very basic question: Who has access to what and when? Identity-first security is emerging as the most effective way to answer these concerns, by placing identity at the centre of the security design. This paper will cover the ‘why’ of identity-first security, what is important to know and consider, and then the ‘how’ it can be achieved. The paper argues for this methodology and presents detailed flow of why modernised policy-based authorisation is crucial for identity-first security. The paper is directed to security and IAM professionals and leaders who want to learn more about how security and identity are tightly coupled and the way to get there with policy-based authorisations.

Designing Secure and Robust E-Commerce Plaform for Public Cloud


 
 
 
 The migration of e-commerce platforms to the public cloud has become a pivotal strategy for businesses seeking enhanced scalability, performance, and cost-efficiency. This paper explores the multifaceted design considerations critical to deploying robust e-commerce systems within the public cloud infrastructure. It delves into scalability, ensuring that platforms can handle varying loads with elasticity and grace. Security is examined as a paramount concern, addressing the need for stringent data protection, compliance with industry standards, and the implementation of best practices such as encryption and identity access management. Performance optimization is discussed, with a focus on leveraging content delivery networks and optimizing database operations to ensure swift customer experiences. The paper also covers reliability and availability, emphasizing the necessity of multi-regional deployment and sophisticated disaster recovery plans to guarantee uninterrupted service. Cost management is analyzed, highlighting the importance of understanding cloud pricing models and employing cost-effective resource utilization strategies. Data management is scrutinized, considering secure storage, privacy, and efficient data handling. User experience is identified as a critical component, with personalization and session management being key to customer satisfaction. The role of DevOps and automation in achieving efficient deployment cycles through continuous integration and delivery is outlined. The benefits of a microservices architecture are presented, along with the challenges of managing such distributed systems. Multi-tenancy and isolation are discussed in the context of security and resource optimization. Integration and APIs are explored for their role in facilitating extensibility and seamless third-party service incorporation. Compliance and legal considerations are addressed, underscoring the importance of data sovereignty and regular audits. Lastly, the paper touches on the incorporation of emerging technologies such as AI, ML, and IoT to stay at the forefront of innovation, and concludes with a discussion on environmental considerations for sustainable cloud practices. This comprehensive analysis provides a roadmap for businesses to navigate the complexities of cloud-based e-commerce, ensuring robust, secure, and efficient online retail operations.
 
 
 

IAM Identity Access Management—Importance in Maintaining Security Systems within Organizations

Identity and Access Management proposes a web service that assists in controlling the entire work through secured ways. This research study has been started to highlight the importance of IAM by discussing its roles, characteristics, advantages and disadvantages. It is a framework comprising processes, policies, and the latest technologies, allowing the organization to monitor digital identities and control exclusive access to follow information based on user data. The IAM component proposes an approach of centralized user management, account management console, authentication approaches, and so on. In this research work, roles and key components of IAM have been discussed with all types of possible challenges. Furthermore, this research will help readers and future researchers easily identify the importance of IAM in maintaining security systems within organizations.

MyEasyHealthcare: An efficient and secure three‐tier blockchain‐based healthcare system

AbstractBlockchain systems have seen vast growth due to the immense potential in developing secure applications for education, healthcare, and so forth. The healthcare system is extensively researched to provide convenience to human life. With the exponential growth in healthcare systems and devices, patient data security and privacy issues are becoming primary concerns. Blockchain is emerging as a solution to secure healthcare records, but it faces certain shortcomings like transaction time, execution time, gas cost consumption, bandwidth utilization, and so forth. The current article designed an extensive blockchain‐based healthcare system (MyEasyHealthcare) with reduced gas consumption, transaction cost, execution cost, and bandwidth utilization, along with enhanced security at three levels. At the first level, the professionals and patients get registered, which provides identity access management. Secondly, authorization is required for each registered entity by the owners. Lastly, the third level includes a doctor‐patient relationship where the hospital's owner assigns a patient to a particular doctor. The data is protected from the outer world and is preserved only between the doctor and the patient. Moreover, to include the majority of tasks for hospital management, the developed system incorporates a smart contract to record seven different parameters for patient diagnosis by a physician and 15 different parameters by a pathologist. The designed system is evaluated for the amount of gas consumed, transaction cost, execution cost, and bandwidth utilization by simulating/executing the written smart contract on InterPlanetary File System (IPFS) and Remix to check the feasibility of the developed system (MyEasyHealthcare) for the real world; the results testify the proposed system is useful in the real world.

Identity Access Management via ECC Stateless Derived Key Based Hierarchical Blockchain for the Industrial Internet of Things

Recently, the adoption of the industrial Internet of things (IIoT) has optimized many industrial sectors and promoted industry “smartization.” Smart factories and smart industries connect the real and virtual worlds through cyber-physical systems (CPS). However, these linkages will increase the cyber security danger surface to new levels, putting millions of dollars' worth of assets at risk if communications in big network systems like IIoT settings are left unsecured. To solve these problems, the fundamental method is security, such as authentication and confidentiality, and it should require the encryption key. However, it is challenging the security performance with the limited performance of the sensor. Blockchain-based identity management is emerging for lightweight, integrity and persistence. However, the key generation and management issues of blockchain face the same security performance issues. First, through blockchain smart contracts and hierarchical deterministic (HD) wallets, hierarchical key derivation efficiently distributes and manages keys by line and group in the IIoT environment. Second, the pairing verification value based on an elliptic curve single point called Root Signature performs efficient public key certificate registration and verification and improves the key storage space. Third, the identity log recorded through the blockchain is the global transparency of the key lifecycle, providing system reliability from various security attacks. Keyless Signature Infrastructure (KSI) is adopted to perform efficiently via hash-based scheme (hash calendar, hash tree etc.). We analyze our framework compared to hash-based state commitment methods. Accordingly, our method achieves a calculation efficiency of O(nlog N) and a storage space saving of 60% compared to the existing schemes.

COVID-19 surge readiness: use cases demonstrating how hospitals leveraged digital identity access management for infection control and pandemic response

BackgroundSurging volumes of patients with COVID-19 and the high infectiousness of SARS-CoV-2 challenged hospital infection control/safety, staffing, care delivery and operations as few crises have. Imperatives to ensure security of...

A Novel Approach towards Healthcare using Identity Access Management and Machine Learning

Abstract: Advances around the field of deep learning and cognitive computing have allowed mankind to look at and solve the problems of the world in a completely new way. Early detection of some deadly diseases helps save millions of lives but still, it has been observed that there seems to be no change in the way diagnosis of a particular disease takes place even in the 21st Generation of Medical Health Care. The highlight of the reasons happens to be Lack of Trust, Lack of Awareness, and Lack of Infrastructure. The health care industry seems to land blocked by their rigid methodologies and to this date, there is no involvement of the patient and caretaker staff in the digitalization of healthcare. In this project, we will introduce a digital platform for healthcare that aims to reduce the gap between a doctor, patient, and the caretaker staff. This platform is based on data, that can assist surgeons, patients, and care teams throughout the patient journey by automating some of the critical processes that are now done manually, including decision-making, post-surgery planning, tracking, and estimating recovery time, smart disease detection models, and collecting patient feedback. An important aspect of this platform will be the disease prediction models wherein we have prepared three different disease prediction models that will be able to detect if a user has that specific disease or not without the consultation of the Doctor. Here we have talked about the adoption of Deep Learning and Artificial Intelligence in today’s Healthcare scenario and the crucial role of delivering such applications to the user on a single platform.

Identity Access Management (IAM), Privilege Access Management (PAM) & Security Operation Center (SOC)

Identity Access Management (IAM), Privilege Access Management (PAM) & Security Operation Center (SOC)

Integration of Identity Governance and Management Framework within Universities for Privileged Users

The development of high-tech progression around the world, with the attentions of governance body and private companies towards well-organized setup access control measures within the organization. The importance of these exceedingly essential perception, this article is proposing an integrated approach with the assimilation of IAM (identity access management) as an authentication tool and PAM (privilegd access management) as a restricting accessing control measure in terms of an active directory. Originally the experimental setup organized within the Prince Sattam Bin Abdulaziz University, and it is analyzed using the real-time data which is available within the university database. We found that the proposed mechanism can be a vital method for protecting governance data or key business-oriented data from the unauthorized or adversarial attack. We also reviewed and compared other access control methods and find that the integrated method is relatively have an advantage to deal accessing task in any premier organization.

A Joint Optimization Approach to Security- and Insurance Management System on Cloud

The fundamental point of this undertaking is to joined way to deal with protection and cyber insurance provisioning in the cloud based assets. Right now have introduced a joint way to deal with security and cyber insurance provisioning in the cloud. Utilizing a stochastic improvement, introduced a technique for ideally provisioning the two administrations despite vulnerability in regards to future valuing, approaching traffic and digital assaults. Hence, an application may make preparations for assaults by provisioning security administrations from suppliers, for example, Vast and Trend Micro. These administrations may take different structures; for example, secure information stockpiling, Identity Access Management (IAM), and interruption location administrations to mirror approaching traffic. And afterward cyber insurance is utilized to give express if malignant movement prompts money related misfortune. Protection inclusion might be first or outsider with, for example, burglary of cash and advanced resources, business interference, and digital blackmail, security breaks, loss of outsider information.

An Efficient Framework for Sharing a File in a Secure Manner Using Asymmetric Key Distribution Management in Cloud Environment

Cloud computing is a platform to share the data and resources used among various organizations, but the survey shows that there is always a security threat. Security is an important aspect of cloud computing. Hence, the responsibility underlines to the cloud service providers for providing security as the quality of service. However, cloud computing has many challenges in security that have not yet been addressed well. The data accessed or shared through any devices from the cloud environment are not safe because they are likely to have various attacks like Identity Access Management (IAM), hijacking an account or a service either by internal/external intruders. The cryptography places a major role to secure the data within the cloud environment. Therefore, there is a need for standard encryption/decryption mechanism to protect the data stored in the cloud, in which key is the mandatory element. Every cloud provider has its own security mechanisms to protect the key. The client cannot trust the service provider completely in spite of the fact that, at any instant, the provider has full access to both data and key. In this paper, we have proposed a new system which can prevent the exposure of the key as well as a framework for sharing a file that will ensure security (CIA) using asymmetric key and distributing it within the cloud environment using a trusted third party. We have compared RSA with ElGamal and Paillier in our proposed framework and found RSA gives a better result.

Product vs toolkit: API and IAM security

Marketing departments are great at capitalising on the latest industry trends. Whether it's slapping the ‘cloud’ badge onto their product or putting ‘security’ in their verbiage to appease their customers, it is a common marketing approach to reposition a product in a way that will improve sales. In the current era of conglomerate-acquired technologies, large-scale marketing departments will pay top dollar to get air cover from analysts (such as paying for a dot on the Gartner Magic Quadrant) to claim universal capabilities in niche market segments. The term ‘security’ when used in the context of application programming interface (API) and identity access management (IAM) solutions doesn't always mean what you might expect. Many frameworks aimed at these areas are often little more than increasingly large collections of features built on a baseline that is inherently insecure, argues Jason Macy of Forum Systems. Security products are built with a locked-down architecture with self-integrity checks to ensure that the product itself cannot be compromised. And the two functions are being combined in technology known as an API security gateway.

Security strategies for cloud identity management - a study

Emphasis on security for providing Access Control in Cloud computing environment plays a significant role. Cloud computing provides number of benefits such as resource sharing, low speculation and large storage space. Huge amount of information stored in cloud can be accessed from anywhere, anytime on pay-per use basis. Resources in cloud should be accessed only by the authorized clients. Access Control in cloud computing has become a critical issue due to increasing number of users experiencing dynamic changes. Authentication, authorization and approval of the access ensuring liability of entities from login credentials including passwords and biometric scan is essential. Also, the federated authentication management is secured. Current approaches require large-scale distributed access control in cloud environment. Data security and access control are the drawbacks in existing access control schemes. Due to the drawbacks in existing access control schemes such as privacy of information when susceptible information is stored in intermediary service provider a federated identity access management is essential. Access control applications majorly concentrate on Healthcare, Government Organizations, Commercial, Critical Infrastructure and Financial Institutions. This review illustrates a detailed study of access control models in cloud computing and various cloud identity management schemes.

WSN 환경에서 Biometric 정보를 이용한 사용자 인증 스킴의 안전성 분석

A novel authentication mechanism is biometric authentication where users are identified by their measurable human characteristics, such as fingerprint, voiceprint, and iris scan. The technology of biometrics is becoming a popular method for engineers to design a more secure user authentication scheme. In terms of physiological and behavioral human characteristics, biometrics is used as a form of identity access management and access control, and it services to identity individuals in groups that are under surveillance. In this article, we review the biometric-based authentication protocol by Althobati et al. and provide a security analysis on the scheme. Our analysis shows that Althobati et al.'s scheme does not guarantee server-to-user authentication. The contribution of the current work is to demonstrate this by mounting threat of data integrity and bypassing the gateway node on Althobati et al.'s scheme. In addition, we analysis the security vulnerabilities of Althobati et al.'s protocol.

Trusted Computing Strengthens Cloud Authentication

Cloud computing is a new generation of technology which is designed to provide the commercial necessities, solve the IT management issues, and run the appropriate applications. Another entry on the list of cloud functions which has been handled internally is Identity Access Management (IAM). Companies encounter IAM as security challenges while adopting more technologies became apparent. Trust Multi-tenancy and trusted computing based on a Trusted Platform Module (TPM) are great technologies for solving the trust and security concerns in the cloud identity environment. Single sign-on (SSO) and OpenID have been released to solve security and privacy problems for cloud identity. This paper proposes the use of trusted computing, Federated Identity Management, and OpenID Web SSO to solve identity theft in the cloud. Besides, this proposed model has been simulated in .Net environment. Security analyzing, simulation, and BLP confidential model are three ways to evaluate and analyze our proposed model.

Validating the IAMS Framework

The wide spread of services on the internet has aggravated the issue of maintaining multiple identities such as the virtual identities that are based on specific login credentials like username, passwords and PINs. On the other hand, multiple physical identities also prove to be difficult to maintain since different sources require the presence of different smart cards, mobile devices or other proofs of identities. This paper addresses the problem of how to design an optimum user experience for Integrating Physical and Virtual Identity Access Management System (IAMS) by combining theories in three research perspectives: Security, which includes identity; User Experience, comprising Usability; and Acceptability, containing Accessibility. Existing research in this area tend to focus on one of these research perspectives. However, there is little evidence that researchers have approached the issue of an overlap and conflict between these three research perspectives with the intent of building a cohesive understanding of Integrating Physical and Virtual IAMSs in e-government domain and the relationships that exist between the different dimensions and components. Consequently, this research has developed a conceptual IAMS Framework for Integrating Physical and Virtual IAMS, and used expert evaluations for validating the components of the framework.

Acceptance Theories and Models for Studying the Integrating Physical and Virtual Identity Access Management Systems

The success of any technology is not only dependent on the number of good reviews or great revenues, but also on the factors that can help one comprehend the level of acceptance that can be expected from any technology. This paper discusses the progress of acceptance theories and models, which have led to the development of an effective model that can be used to calculate the level of predicting, explaining, and understanding individuals’ acceptance for a new proposed system, called Ubiquitous Identity Access Management System (UbIAMS), that provides interoperability between the physical and virtual spaces, alongside three perspectives: Security, which includes identity; User Experience, comprising Usability; and Acceptability, containing Accessibility. Existing research in this area tend to focus on one of these research perspectives. However, there is little evidence that researchers have approached the issue of an overlap and conflict between these three research perspectives with the intent of building a cohesive understanding of integrating physical and virtual Identity Access Management Systems (IAMSs) in e-government domain and the relationships that exist between the different dimensions and components. Consequently, this paper has developed a conceptual Unified Theory of Acceptance and Use of Technology (UTAUT)-based model for integrating physical and virtual IAMSs.