Identity Management Solutions Research Articles

An Analysis on the Influence of Organisational Culture on Employee Performance and Job Satisfaction at Emudra LTD,Bangalore.

This study explores the influence of organizational culture on employee performance and job satisfaction at eMudra Ltd., a leading provider of digital identity and transaction management solutions. Organizational culture, encompassing shared values, beliefs, and practices, plays a pivotal role in shaping workplace dynamics and outcomes. The research examines how the distinct cultural elements at eMudra Ltd. impact employee motivation, productivity, and overall satisfaction levels. A mixed-method approach, integrating quantitative surveys and qualitative interviews, was employed to gather insights from employees across various departments. The findings reveal that a positive, inclusive, and innovation-driven organizational culture significantly enhances employee engagement and performance. Conversely, rigid hierarchies and lack of recognition adversely affect job satisfaction and retention. The study highlights key cultural factors such as leadership style, communication patterns, and professional development opportunities as critical determinants of employee performance. Recommendations include fostering open communication, implementing transparent reward systems, and promoting work-life balance to sustain a high-performing workforce. This analysis underscores the necessity of aligning organizational culture with employee needs to achieve strategic goals. The insights contribute to the growing discourse on human resource management and provide actionable strategies for optimizing organizational effectiveness at eMudra Ltd. Keywords 1. Organizational Culture 2. Employee Performance 3. Job Satisfaction 4. Workplace Dynamics 5. Human Resource Management

A Cyber Risk Assessment Approach to Federated Identity Management Framework-Based Digital Healthcare System.

This paper presents a comprehensive and evidence-based cyber-risk assessment approach specifically designed for Medical Cyber Physical Systems (MCPS)- and Internet-of-Medical Devices (IoMT)-based collaborative digital healthcare systems, which leverage Federated Identity Management (FIM) solutions to manage user identities within this complex environment. While these systems offer advantages like easy data collection and improved collaboration, they also introduce new security challenges due to the interconnected nature of devices and data, as well as vulnerabilities within the FIM and the lack of robust security in IoMT devices. To proactively safeguard the digital healthcare system from cyber attacks with potentially life-threatening consequences, a comprehensive and evidence-based cyber-risk assessment is crucial for mitigating these risks. To this end, this paper proposes a novel cyber-risk assessment approach that leverages a three-dimensional attack landscape analysis, encompassing existing IT infrastructure, medical devices, and Federated Identity Management protocols. By considering their interconnected vulnerabilities, the approach recommends tailored security controls to prioritize and mitigate critical risks, ultimately enhancing system resilience. The proposed approach combines established industry standards like Cyber Resilience Review (CRR) asset management and NIST SP 800-30 for a comprehensive assessment. We have validated our approach using threat modeling with attack trees and detailed attack sequence diagrams on a diverse range of IoMT and MCPS devices from various vendors. The resulting evidence-based cyber-risk assessments and corresponding security control recommendations will significantly support healthcare professionals and providers in improving both patient and medical device safety management within the FIM-enabled healthcare ecosystem.

An Extensive Analysis on Zero Trust Architecture

Zero Trust Architecture (ZTA) addresses a change in perspective in cyber security, challenging the conventional security-based model by expecting no certain trust inside or outside the network limits. This approach exemplifies the standards of constant confirmation, strong access controls, and the idea of "never trust, always verify" (Stafford, 2020). ZTA is intended to address the weaknesses inborn in conventional security models, particularly even with dynamic IT environments, cloud services, and the rising refinement of cyber-attacks. This paper presents a top-tobottom investigation of ZTA, its main components including severe identity verification, least privilege access, micro-segmentation, and multifaceted verification, as well as its fundamental relationship with Identity and Access Management (IAM) solutions. Moreover, this paper looks at the critical job of ZTA in lowering the attack surface, strengthening an organization's security posture, and ensuring regulatory regulations are being followed. This paper’s goal is to examine the shortcomings and weaknesses of conventional perimeter-based security models in the current digital environment and to suggest Zero Trust Architecture (ZTA) as a more potent security paradigm to deal with these issues. This research attempts to give insights into how businesses might switch from traditional security techniques to ZTA to improve their security posture.

MetaSSI: A Framework for Personal Data Protection, Enhanced Cybersecurity and Privacy in Metaverse Virtual Reality Platforms

The Metaverse brings together components of parallel processing computing platforms, the digital development of physical systems, cutting-edge machine learning, and virtual identity to uncover a fully digitalized environment with equal properties to the real world. It possesses more rigorous requirements for connection, including safe access and data privacy, which are necessary with the advent of Metaverse technology. Traditional, centralized, and network-centered solutions fail to provide a resilient identity management solution. There are multifaceted security and privacy issues that hinder the secure adoption of this game-changing technology in contemporary cyberspace. Moreover, there is a need to dedicate efforts towards a secure-by-design Metaverse that protects the confidentiality, integrity, and privacy of the personally identifiable information (PII) of users. In this research paper, we propose a logical substitute for established centralized identity management systems in compliance with the complexity of the Metaverse. This research proposes a sustainable Self-Sovereign Identity (SSI), a fully decentralized identity management system to mitigate PII leaks and corresponding cyber threats on all multiverse platforms. The principle of the proposed framework ensures that the users are the only custodians and proprietors of their own identities. In addition, this article provides a comprehensive approach to the implementation of the SSI principles to increase interoperability and trustworthiness in the Metaverse. Finally, the proposed framework is validated using mathematical modeling and proved to be stringent and resilient against modern-day cyber attacks targeting Metaverse platforms.

Blockchain‐based decentralized oracle network framework for identity management in metaverse environment

AbstractManaging identities in metaverse environment is challenging due to the conflicting requirements of ensuring user privacy while enforcing accountability. Users may participate in the metaverse through multiple virtual identities or avatars for different applications/scenarios. Thus, virtual identities must be continuously generated and mapped with real identities. Further, user privacy needs to be protected while not ensuring blanket anonymity to indulge in objectionable or unlawful conduct. Ensuring privacy for the metaverse while still being able to pinpoint users for their actions in the metaverse is a significant research issue. Solving the aforementioned issue, we propose a third‐party identity management solution for the metaverse based on creating a decentralized oracle network (DON) providing identity authentication and mapping service. The proposed identity management framework is metaverse platform agnostic, ensuring users' privacy on the platform while still being able to uncover their real identities if warranted. The proposed framework is viable as evidenced by experimental results of DON and blockchain implementation. The DON based framework leverage the benefits of blockchain technology and introduces immutability, transparency, and traceability into the the metaverse environment. This ensures data integrity and minimizes the frequency of cyber attacks in the metaverse ecosystem.

Challenges and opportunities in achieving secure hospital clinical mobility management: An illustrative use case

Objective: To qualitatively describe a use case at Yale New Haven Health System (YNHHS) illustrating the need for and effective deployment of innovative technologies to manage an enterprise-owned shared device (EOSD) management program. EOSD management provides clinicians with secure, rapid access to enterprise mobile devices and applications, maintains devices in functional, use ready condition for clinicians, and enables enterprise tracking and reduced loss of devices.Methods: Executive leaders in clinical information technology and informatics management at YNHHS were interviewed through written and telephonic communication. Qualitative data was gathered through communications between clinical and information technology executives and the implementation support team of a leading identity and access management (IAM) solutions and EOSD management solution provider. Use case information was gathered, integrated and shared with health system executives and health IT/informatics leaders to verify the description of unmet needs, solution objectives and impact/value delivered after implementation of the EOSD management solution.Results: Benefits realized from implementation of an enterprise-shared mobility management solution included establishment of a cohesive and comprehensive enterprise-owned, shared device management strategy. This included effective monitoring and dynamic management of the system’s mobile device fleet, and better IT resource management with reduced mobile device loss. The IT administrative burden was reduced. While not surveyed systematically, improved clinician experience and satisfaction were reported to IT leaders anecdotally. EOSD management solution deployment was rapid, as was the time to improved clinician mobile experience and clear demonstration of value.Conclusions: A leading US health system was able to rapidly deploy a shared mobile device management solution that enabled effective monitoring and dynamic management of the enterprise mobile device fleet, with easier and faster clinician device access and workflows, and reduced IT administrative demand and costs. While the complexities associated with increased clinical mobility in healthcare will likely continue to grow, issuing future device and mobile management challenges that require effective hospital system response, technologies have emerged that enable more effective, efficient and satisfactory organizational mobility performance.

Avatars as Digital Identity: A Case Study of Avatar in Facial Recognition Technology & eKYC by IndoAI

In today’s digital era, avatars have metamorphosized their conventional role, emerging as important tools for safeguarding digital identities in response to the prevalence of facial recognition technology. This article-case study explores the expanding importance of avatars, not only as representations of identity but as protective shields in the digital space. Avatars, once confined to gaming and virtual worlds, now play a crucial role in digital identity formation across various fields. The case study on avatar generation in facial recognition technology with eKYC highlights sophisticated security measures, and fusion of facial recognition, eKYC, artrimetrics and avatar authentication signals a new era where avatars play a pivotal role in retail industry. This study anticipates the growing integration of avatars into our social existence, offering innovative solutions for identity management and security in the digital realm. Scholars Middle East Publishers

INTEGRATING AI WITH BLOCKCHAIN FOR ENHANCED FINANCIAL SERVICES SECURITY

Integrating artificial intelligence (AI) with blockchain technology presents a transformative approach to enhancing security in financial services. This fusion leverages the strengths of both AI and blockchain to mitigate various security risks, including fraud, data breaches, and identity theft, thereby bolstering trust and confidence in financial transactions. This abstract explores the synergies between AI and blockchain, highlighting their combined capabilities, applications, and potential benefits for the financial services industry. AI algorithms, including machine learning and natural language processing, empower financial institutions to analyze vast amounts of data in real-time, identifying patterns, anomalies, and suspicious activities indicative of fraudulent behavior. By integrating AI-powered fraud detection systems with blockchain-based transactional networks, organizations can enhance security and transparency throughout the entire financial ecosystem. Blockchain's immutable ledger ensures the integrity and traceability of transactions, while AI algorithms provide advanced analytics and predictive insights to detect and prevent fraudulent activities effectively. Furthermore, AI-driven identity verification and authentication systems enhance security in digital transactions by accurately verifying user identities and detecting unauthorized access attempts. By integrating AI-based biometric authentication with blockchain-based identity management solutions, financial institutions can streamline customer onboarding processes, enhance security, and protect sensitive information from unauthorized access. Moreover, AI-powered smart contracts automate and enforce the execution of contractual agreements, reducing the risk of fraud, errors, and disputes in financial transactions. By combining AI-driven smart contract platforms with blockchain technology, organizations can facilitate secure, transparent, and tamper-proof transactions, eliminating intermediaries and reducing transaction costs. The integration of AI with blockchain also offers opportunities for regulatory compliance and risk management in financial services. AI-powered regulatory compliance solutions analyze vast amounts of regulatory data, identify compliance risks, and ensure adherence to regulatory requirements. By integrating these solutions with blockchain-based regulatory reporting systems, financial institutions can enhance transparency, auditability, and regulatory oversight, fostering trust and compliance in the financial ecosystem. In conclusion, the integration of AI with blockchain technology holds immense potential for enhancing security in financial services. By harnessing the combined capabilities of AI and blockchain, organizations can detect and prevent fraudulent activities, enhance identity verification and authentication, streamline transaction processes, and ensure regulatory compliance. This abstract underscores the transformative impact of integrating AI with blockchain on security in financial services, paving the way for a more secure, efficient, and trusted financial ecosystem..
 Keywords: Al, Blockchain, Enhanced, Financial, Services Security.

Mitigating Vulnerabilities in Large-Scale Network Environments: Strategies and Best Practices

In the modern world of networks, managing multiple threats in large-scale network environments is an essential goal of organizations to protect their system and essential information. Measures to counter threats and sources of vulnerability and the chances of cyber threats and cyber incidences are the primary focuses of this paper. Vulnerability management, network segmentation, and access controls are the first pillars of a sound cybersecurity program. Vulnerability management is a repeated process of discovering, analyzing, documenting, addressing, and checking general and individual protection flaws before an attacker can. Dividing the network becomes effective in preventing threats from affecting certain highly vulnerable areas of the network, as well as improving the levels of security control. Adopting robust identity and access management solutions, including MFA and RBAC, adds another layer of protection to the network by limiting access to networks and resources to only authorized users. Furthermore, the relevance of repeating vulnerability assessments and penetration testing is underlined, as these activities help update the information on the organization’s security and identify insecure positions. However, factors like the increasing pace of vulnerabilities and the necessity to adapt instantly to novel threats show that protection is not easy. Cyber threats are still on the rise, and as a result, the adoption of the spur) advanced technologies like AI in security frameworks boost detection rates and reaction time. The paper concludes by emphasizing the need for constant monitoring and implementing preventive measures to safeguard against emerging and evolving cyber threats.

ESIM and blockchain integrated secure zero-touch provisioning for autonomous cellular-IoTs in 5G networks

The growth of the Internet of Things (IoT) paradigm has resulted in a proliferation of connected devices and their applications. Autonomous IoT (AIoT) refers to a network of interconnected devices that operate without human intervention, making decisions and performing tasks autonomously. Traditional methods of provisioning IoT devices, such as manual configuration and over-the-air updates, are error-prone and insecure. The emergence of eSIMs (embedded SIMs) provides a viable solution for secure and flexible identity management in IoT devices. This work implements a low-cost, zero-touch remote provisioning system using GSMA standard Over-The-Air (OTA) IoT-SAFE protocol. This research predicts that future IoT devices will be eSIM-enabled, which are simple to configure, provision, validate profiles, and check security policies remotely. IoT onboarding processes are designed where blockchains are used to verify immutable repositories to store this network manifests, verifiable by Ethereum smart contracts. The integrated framework combines blockchain contracts, eSIM-based remote SIM provisioning through IoT-SAFE protocol, and SDN to manage IoT ecosystems' security. The proposed solution is evaluated using simulations and security analysis, and it demonstrates its feasibility at scale and resilience to attacks even under insecure environments. When compared with the baseline IEEE 802.15.4 protocol, our SDN-based Remote-SIM provisioning system (SIeSIM) reduces overhead to about 240 ms Time-To-Provision (TTP), outperforming manual provisioning by nearly 320 % and 210 % compared to expert provisioning in terms of TTP performances, respectively.

Investigating Identity Management and Authentication Solutions Using Blockchain Technology

Investigating Identity Management and Authentication Solutions Using Blockchain Technology

Open source as a gateway to artificial intelligence

Open source has been widely adopted across the entire solution set in the library world, including software for traditional library services, digital libraries, discovery systems, identity management and persistent identifier solutions. Open source is also foundational in the development of artificial intelligence (AI) solutions. Open source AI toolkits have driven the adoption of AI in machine learning, image recognition, video analysis and many other areas relevant to library systems. The communities supporting open source library software are among the largest and most dynamic in the library world. The Koha library management system is supported by a community of developers, librarians, service providers and participating libraries around the world, and is probably the most widely adopted library management system in the world. This article explores the evolution of open source in libraries and the ways in which the open source solutions can facilitate the introduction of AI in libraries in a way that gives libraries agency on the AI model development and implementation. Examples are provided on the use of AI toolkits in the library context.

An identity management scheme for cloud computing: Review, challenges, and future directions

Cloud computing is a cost-effective way for organizations to access and use IT resources. However, it also exposes data to security threats. Authentication and authorization are crucial components of access control that prevent unauthorized access to cloud services. Organizations are turning to identity management solutions to help IT administrators face and mitigate security concerns. Identity management (IDM) has been recognized as a more robust solution for validating and maintaining digital identities. Identity management (IDM) is a key security mechanism for cloud computing that helps to ensure that only authorized users have access to data and resources. Traditional IDM solutions are centralized and rely on a single authority to manage user identities, which makes them vulnerable to attack. However, existing identity management solutions need to be more secure and trustworthy. Blockchain technology can create a more secure and trustworthy cloud transaction environment. Purpose: This paper investigates the security and trustworthiness of existing identity management solutions in cloud computing. Comparative results: We compared 14 traditional IDM schemes in cloud systems to explore contributions and limitations. This paper also compared 17 centralized, decentralized, and federated IDM models to explain their functions, roles, performance, contribution, primary metrics, and target attacks. About 17 IDM models have also been compared to explore their efficiency, overhead consumption, effectiveness to malicious users, trustworthiness, throughput, and privacy. Major conclusions: Blockchain technology has the potential to make cloud transactions more secure and reliable. It featured strong authentication and authorization mechanisms based on smart contracts on the Ethereum platform. As a result, it is still regarded as a reliable and immutable solution for protecting data sharing between entities in peer-to-peer networks. However, there is still a large gap between the theoretical method and its practical application. This paper also helps other scholars in the field discover issues and solutions and make suggestions for future research.

The Role of Cloud Service Brokers: Enhancing Security and Compliance in Multi-cloud Environments


 The goal of this study is to put encryption key management strategies into practice while taking legal restrictions and the necessity for data accessibility into account. In order to reduce the danger of unauthorized access to cloud resources, this article explores the creation of Identity and Access Management (IAM) solutions that successfully apply role-based access control and abide by the least privilege principle. The advancement of digital business is both facilitated and disrupted by the usage of cloud technologies. Spending on cloud computing platforms and infrastructure is expected to rise significantly, with a compound annual growth rate (CAGR) of 30% predicted for the period between 2013 and 2018. In comparison, the corporate IT industry as a whole is anticipated to develop at a rate that is quite slow—5%. Additionally, an increasing number of businesses—precisely 85%—are seeing the benefits of using several cloud platforms to boost employee productivity, encourage collaboration, and spur corporate innovation. Regulations and standards are quite complicated, with possibilities for repetition and occasionally discrepancies. Utilizing existing standard models, patterns, architectures, and best practices is one efficient way to manage the difficulties brought on by compliance complexity, uncertainties, and overlaps. Examining regulatory practices and looking for overlaps have been efforts.

The importance of achieving a 360-degree view of patient identity: A survey of US healthcare providers

Objective: To describe the perceived importance among healthcare leaders of accurate patient identity in meeting organizational needs and objectives for improved clinical, operational and financial performance.Methods: Survey of 100 US healthcare executives evaluated priorities and needs of care organizations as impacted by the imperative to ensure accurate patient identity in care delivery, operations, and meeting strategic objectives.Results: Healthcare executives (72%) reported concern that inaccurate patient identity data reduces care quality/safety and healthcare organization financial performance. Only 14% were highly or extremely satisfied with the accuracy level of their existing patient identity management solutions. Inability to know “who is who” is perceived as increasing risk of patient harm and inferior care outcomes, low patient satisfaction, impeded operational efficiency and financial performance, and a key challenge to achieving strategic initiatives such as digital transformation and effective population health management. Accuracy in patient identity was linked to nearly all strategic priorities, with 60% considering it vital to every aspect of organizational performance, and 64% stating it can improve operational efficiency. Eighty-eight percent regarded accurate patient identity as essential to improving patient experience, care management (75%), and establishing an effective digital front door (73%). Majorities recognized the importance of accurate patient identity to organizational growth initiatives and digital transformation.Conclusions: Although patient identity impacts most aspects of healthcare operations, leadership of most healthcare organizations surveyed understood the criticality of accurate patient identity in optimizing organizational performance, but lacked confidence in their ability to achieve a complete an accurate 360-degree view of patients.

Decentralized Blockchain-Enabled Employee Authentication System

In recent years, there have been many attempts to introduce blockchain-based identity management solutions, which allow the user to take over control of his/her own identity. In this paper, the authors have reviewed in-depth existing blockchain-based identity management papers and patents published online. Based on that analysis of the literature, a system will be implemented which will come up with the current issues and try to minimize them. Being transparent, immutable, and decentralized in nature, blockchain mechanism is found to be a better technology which can reduce the corruption in the experimental scenario. The objective is to develop a decentralized system which can be used for the verification of the employees in an organization. This is done to stop or reduce the cases of identity theft and data leakage in recent time. This system will be using Ethereum blockchain platform for monitoring the information and smart contract for authentication.

A Systematic Review of Blockchain-based Identity Management Solutions

The involvement of digital identity in almost all online services contributes to the growing reliance on Identity Management Systems (IDMS) that establish, verify, and manage digital identities. However, digital identities are still kept in central repositories. Which are controlled by a single authority that may have many vulnerabilities due to low security, leading attackers to exploit these vulnerabilities and causing various security breaches such as identity theft or disclosure of sensitive information. Additionally, powerful entities who have access to these repositories, could gather and abuse users' information without their knowledge or consent. The concept of Self-sovereign Identity (SSI) allows users to exert ownership of their identity and gain insight into how their data is being used. The development of Blockchain technology has made a breakthrough in achieving SSI by giving individuals the ability to be the final arbiter of who can access and use their own identity. This paper overviews the traditional identity management (IdM) models and presents the next generation of distributed IDMS using Blockchain technology that targets user-centricity and eliminates the identity provider as a trusted third party. Furthermore, It gives an analysis of the recent Blockchain-based IdM solutions, discussing their architecture, components, and features. It also, reveals their weaknesses to identify the gaps between these solutions for future secure IDMS.

DIdM-EIoTD: Distributed Identity Management for Edge Internet of Things (IoT) Devices.

The Internet of Things (IoT) paradigm aims to enhance human society and living standards with the vast deployment of smart and autonomous devices, which requires seamless collaboration. The number of connected devices increases daily, introducing identity management requirements for edge IoT devices. Due to IoT devices' heterogeneity and resource-constrained configuration, traditional identity management systems are not feasible. As a result, identity management for IoT devices is still an open issue. Distributed Ledger Technology (DLT) and blockchain-based security solutions are becoming popular in different application domains. This paper presents a novel DLT-based distributed identity management architecture for edge IoT devices. The model can be adapted with any IoT solution for secure and trustworthy communication between devices. We have comprehensively reviewed popular consensus mechanisms used in DLT implementations and their connection to IoT research, specifically identity management for Edge IoT devices. Our proposed location-based identity management model is generic, distributed, and decentralized. The proposed model is verified using the Scyther formal verification tool for security performance measurement. SPIN model checker is employed for different state verification of our proposed model. The open-source simulation tool FobSim is used for fog and edge/user layer DTL deployment performance analysis. The results and discussion section represents how our proposed decentralized identity management solution should enhance user data privacy and secure and trustworthy communication in IoT.

A federated authentication and authorization approach for IoT farming

IoT devices can be applied in diverse domains, including farming to maximize CAPEX and OPEX costs. Despite the increased gain in production through IoT, there are still challenges that need to be properly tackled for wider adoption. Traditional authentication and authorization mechanisms cannot be blindly applied to IoT due to the associated limitations. This tutorial presented a solution for an IoT Farm scenario, with multiple authentications across different geographic locations with a centralized identity provider and application in the cloud, and IoT devices on the edge. The proposed approach relies on standard protocols and tools, like Keycloak, as the identity management solution. By using OpenID Connect (OIDC), we can assure a secure federated authentication and authorization of both users and IoT devices for IoT farming scenarios.

Harmonizing Sensitive Data Exchange and Double-spending Prevention Through Blockchain and Digital Wallets: The Case of E-prescription Management

The digital transformation of the medical sector requires solutions that are convenient and efficient for all stakeholders while protecting patients’ sensitive data. One example that has already attracted design-oriented research are medical prescriptions. However, current implementations of electronic prescription management systems typically create centralized data silos, leaving user data vulnerable to cybersecurity incidents and impeding interoperability. Research has also proposed decentralized solutions based on blockchain technology, but privacy-related challenges have often been ignored. We conduct design science research to develop and implement a system for the exchange of electronic prescriptions that builds on two blockchains and a digital wallet app. Our solution combines the bilateral, verifiable, and privacy-focused exchange of information between doctors, patients, and pharmacies through verifiable credentials with a token-based, anonymized double-spending check. Our qualitative and quantitative evaluations as well as a security analysis suggest that this architecture can improve existing approaches to electronic prescription management by offering patients control over their data by design, a high level of security, sufficient performance and scalability, and interoperability with emerging digital identity management solutions for users, businesses, and institutions. We also derive principles on how to design decentralized, privacy-oriented information systems that require both the exchange of sensitive information and double-usage protection.