Implement Access Control Research Articles

Face Recognition-Based Surveillance System in Mining Industry

Access control in mining construction areas is crucial for the operations of mining companies. This access control functions to secure and restrict unauthorized parties from mining activities. Violations of access rights in the mining industry result in significant losses for companies. This access control can also be utilized to record employee attendance, serving as input for the contract work system commonly applied in mining areas. Closed-circuit television (CCTV) is commonly used to monitor activities; however, the current use of CCTV still requires direct human observation, which may result in important events being overlooked. The functionality of these CCTVs can be enhanced to manage access rights and monitor employee attendance to support company operations through face recognition methods. In this study, a system design was carried out through a research approach to determine the technology to be used in the system. The development of a face recognition-based access control system was conducted based on system engineering methodology. This development includes system requirements analysis, the design of a face recognition-based access control system, implementation, and system performance evaluation. The resulting system was tested through simulation processes based on actual field conditions, and the test results showed that the system could recognize faces registered in the dataset and identify subjects not registered in the dataset with an accuracy of 60%, precision of 96%, recall of 58%, and an F-score of 72%. Additionally, the system was able to connect to a database to store face recognition results and then display them on an employee attendance monitoring dashboard. The delay between the face recognition system and actual time ranged from 2-4 seconds and was still tolerable.

E-EWS-based Governance Framework for Sharing Cyber Threat Intelligence in the Energy Sector

The integration of traditional energy technologies with modern digital technologies increases the risks of cyber-attacks and data breaches. Sharing cyber threat intelligence (CTI) is important for the common defense. The DYNAMO project has chosen the ECHO Early Warning System (E-EWS) as a tool for CTI information sharing. The management of E-EWS becomes the basis for guiding the ethical and efficient operation of the DYNAMO platform and the wider energy sector. The governance framework defines roles, responsibilities, and procedures that are tailored to sharing information, enhancing collaboration, and ensuring the integrity of shared information. Effective governance promotes transparency, compliance, and trust among stakeholders, which ultimately strengthens the security posture of the DYNAMO platform and improves the energy industry's resilience against cyber threats. This paper proposes a governance framework for the DYNAMO platform, including a committee, data security policies, and NIS2 and GDPR compliance. It emphasizes user-friendly collaboration tools, access control, continuous monitoring, stakeholder training, compliance, and phased implementation. The goal is iterative improvements through continuous evaluation.

Design and Implementation of Bluetooth Low Energy Based Access Control System

This paper discusses the design of a Bluetooth Low Energy (BLE) based access control system intended to make access control more practical to implement on areas with high personnel turnover rate by making access rules easy to set and making access keys relatively safe to distribute compared to existing key-based access control systems. The use of BLE technology allows the system to estimate key position within the system by utilizing the curve fitting method for distance estimation and the trilateral method for positioning. The proposed system consists of a server, an admin panel, electronic locks, access keys in the form of a wearable, and access keys in the form of an Android application. The system is found to be capable of implementing access control functionalities and capable of implementing indoor positioning based on sections.

A security-enhanced scheme for MQTT protocol based on domestic cryptographic algorithm

Recently, the rapid advancement of Industrial Internet of Things (IIoT) technology has led to the utilization of various communication protocols. Among these, the Message Queue Telemetry Transport (MQTT) protocol has become prevalent. Operating on a publish/subscribe model, MQTT’s popularity in IIoT because of simplicity, lightweight nature, and ease of implementation. However, traditional MQTT protocol standards have neglected critical security concerns during the communication process, such as ineffective identity authentication, weak data confidentiality, and a lack of access control functions. To address these challenges, this paper introduces a security-enhanced scheme for the MQTT protocol based on domestic cryptographic algorithms. The proposed method enforces mutual identity authentication between the MQTT Client and the MQTT Broker using digital certificates. It also implements access control through an Access Control List (ACL) and ensures end-to-end data security via the symmetric encryption algorithm SM4. Through comprehensive security analysis and experimental validation, this paper demonstrates that the enhanced scheme effectively rectifies the MQTT protocol’s security deficiencies, achieving these improvements with small overhead.

Problems of ensuring the safety of automated systems

The article discusses the issue of "automated system and its security", which is actively used today in the framework of Information Systems. In what areas are automated systems used, the problem of strength in terms of safety and analysis of the state of protection is solved. Automated systems are of great importance in the modern world, as they greatly simplify and speed up the implementation of various daily tasks, data and process management. The relevance of automated systems depends on such factors as efficiency and productivity, improving data quality, scaling, and developing analytics. However, it is important to understand that with the growth of automation, the risk in the field of data security and privacy will also increase.Automated systems become targets of cyber attacks and can threaten the confidentiality, integrity and availability of data. Thus, the safety of automated systems remains one of the main issues. That is, the lack of appropriate security measures can lead to data loss, privacy violations and financial losses. Therefore, organizations need to actively invest in the protection and control of their nuclear power plants by implementing access control, encryption, incident detection mechanisms, and training employees in safety regulations.

Fine-Grained Encrypted Image Retrieval in Cloud Environment

With the growing emphasis on privacy awareness, there is an increasing demand for privacy-preserving encrypted image retrieval and secure image storage on cloud servers. Nonetheless, existing solutions exhibit certain shortcomings regarding retrieval accuracy, the capacity to search large images from smaller ones, and the implementation of fine-grained access control. Consequently, to rectify these issues, the YOLOv5 technique is employed for object detection within the image, capturing them as localized images. A trained convolutional neural network (CNN) model extracts the feature vectors from the localized images. To safeguard the encrypted image rules from easy accessibility by third parties, the image is encrypted using ElGamal. In contrast, the feature vectors are encrypted using the skNN method to achieve ciphertext retrieval and then upload this to the cloud. In pursuit of fine-grained access control, a role-based multinomial access control technique is implemented to bestow access rights to local graphs, thereby achieving more nuanced permission management and heightened security. The proposed scheme introduces a comprehensive cryptographic image retrieval and secure access solution, encompassing fine-grained access control techniques to bolster security. Ultimately, the experiments are conducted to validate the proposed solution’s feasibility, security, and accuracy. The solution’s performance across various facets is evaluated through these experiments.

Cybersecurity Framework for Ensuring Confidentiality, Integrity, and Availability of University Management Systems in Bangladesh.

In an increasingly interconnected and technologically advanced world, the efficient operation of University Management Systems (UMS) is essential for the proper functioning of educational institutions. However, with the rapid digitization of processes, the risk of cyber threats targeting these systems has also grown significantly. This research presents a comprehensive Cybersecurity Framework tailored to the context of Bangladesh, aimed at ensuring the confidentiality, integrity, and availability of University Management Systems. The proposed framework is designed to address the unique challenges and requirements faced by universities in Bangladesh, considering factors such as the evolving threat landscape, resource constraints, and regulatory environment. Drawing upon established cybersecurity principles and best practices, the framework encompasses a multi-layered approach that encompasses preventive, detective, and responsive measures. Key components of the framework include the identification and assessment of potential vulnerabilities within UMS, the implementation of robust access controls and encryption mechanisms, continuous monitoring and threat detection, incident response planning, and user awareness training. The framework's adaptability allows universities to tailor its components to their specific organizational structures and risk profiles, thus promoting a proactive and dynamic approach to cybersecurity. The research further evaluates the effectiveness of the proposed framework through a combination of quantitative and qualitative methods, including system assessments, penetration testing, and stakeholder surveys. Results demonstrate the framework's ability to enhance the security posture of UMS in Bangladesh, contributing to the preservation of sensitive data, the prevention of unauthorized access, and the sustained availability of critical services.

A Systematic Comparison between the Ethereum and Hyperledger Fabric Blockchain Platforms for Attribute-Based Access Control in Smart Home IoT Environments.

Despite the lack of blockchain systems being utilized in modern IoT environments, the prevalence of blockchain technology is increasing, due to its high level of security and accountability. The integration of blockchain technology and access control in a decentralized system for smart home networks is a promising solution to this issue. This paper compares the implementation of attribute-based access control (ABAC) with two popular blockchain platforms, Ethereum and Hyperledger Fabric, for a smart home internet of things (IoT) environment. We present a comprehensive summary of access-control and blockchain-access-control methods, to provide the necessary background for this study. Additionally, we present an original ABAC smart contract for Ethereum, and the modification of a pre-existing Hyperledger Fabric ABAC smart contract, for this comparison. Through the simulation of both implementations, the advantages and limitations will be considered, to determine which is better suited for a smart home IoT environment.

PDPChain: A Consortium Blockchain-Based Privacy Protection Scheme for Personal Data

With the advances and innovations in digital technologies, blockchain has empowered advancements in communications and networking, promising to build trust and establish secure decentralized communications networks. Unfortunately, current personal data privacy protection schemes still suffer from explicit storage, lack of data ownership and implementation of fine-grained access control by users, and lack of transparency and auditability of data. In this article, we propose a personal data privacy protection scheme based on consortium blockchain that stores original data encrypted with an improved Paillier homomorphic encryption mechanism, namely PDPChain, where users realize fine-grained access control based on ciphertext policy attribute-based encryption (CP-ABE) on blockchain. In this scheme, consortium blockchain combines distributed private clusters to store the encrypted data, improving data transmission efficiency, and guaranteeing user privacy and security through off-chain storage and on-chain transmission synergy. In addition, it is more lightweight encryption and demarcation, ultimately protecting personal data privacy and providing a secure and trusted way to obtain information for data mining. For the performance testing, data in the form of files are used as an example, and the scheme is designed and simulated on Hyperledger Fabric and InterPlanetary File System. Experimental results show that the improved Paillier encryption mechanism reduces the overall encryption and decryption elapsed time by 25% and encryption elapsed time by 48%. Furthermore, the proposed CP-ABE access control method is adaptive to storing and sharing a massive amount of data. With the increase in the number of access control policies, the overall time-consuming of the scheme does not increase, and the time-consuming of decryption can also be stabilized at about 2 s.

Computer network information security and protection strategies in the era of big data

The Internet has entered the big data era, and as more and more businesses employ big data, cloud computing, the Internet of Things, artificial intelligence, and other technologies, the amount of data on the Internet as a whole has also grown dramatically. While Big Data technology has improved the efficiency of many companies, it has also brought challenges for computer network information security protection technology, including massive data privacy leaks that seriously jeopardize the privacy of Internet users. This paper synthesizes literature review findings proving that computer network information security in the big data era has the characteristics of universality, suddenness, concealment, and intelligence in order to address this issue. It also studies the main network information security technologies, such as network situational awareness, vulnerability scanning, intrusion detection and firewall, and identity authentication. In addition, the paper finds that the current problems of network information security mainly include phishing attacks, computer viruses, ransomware, denial of service attacks, APT attacks and threats from inside the network. Finally, the paper explores a number of protective measures to address existing security issues, including the development of network monitoring and threat intelligence systems, the implementation of access control and authentication technologies, network isolation methods, regular software scanning and updates, and organising internal staff security training. Through this study we are able to fully understand the overall pulse of current computer network information security technology and development trends in the era of Big Data, thus providing a more comprehensive and accurate reference for Big Data-related participants to develop responsive information security protection measures and strategies to provide designation.

UML design for access control architecture in smart building application

SummaryCyber physical systems are complex systems to build and implement, electronic devices and concepts such as the energy saving, the user comfort and the privacy of sensitive data. In the physical world, buildings represent a major part of total energy consumption, that's why improving the energy efficiency levels of buildings is topical by which the emergence of smart buildings. Since, even if efforts are being made in normalizing the process of energy saving management while maintaining a high level of users' comfort, managing the access control in smart buildings systems remains an ad‐hoc process. This is why a number of researches focus on the design and implementation of solutions aimed at covering the process of access control management. In the context of developing a smart building application, already developed in our laboratory, we have set up an access control management system to manage users' access. We present the design of an access control architecture, using the Unified Modeling Language, upon the smart building application which is the subject of a maintenance work. The designed solution is implemented with the purpose of evolving the application to be used by multiple users. The implemented access control solution is an extended role‐based access control model.

MULTI-OWNER DATA SHARING

In the case of Provable Multiple files Data that changes over time in cloud computing,possession refers to the dynamic transfer of stored data to a cloud server. Multiple files indicate that the data will be replicated on multiple servers. The project owner uploads the data to the cloud server using automatic data capture, and the files are then stored on multiple servers. Data loss due to hacking and server crashes can be avoided by uploading data to multiple servers. By distributing the secret key among the several users, multi-user searchable encryption directly adapts a single-user system to a multi-user environment. This is obviously not capable of achieving user accountability, and in the event of user revocation, it necessitates key renewal among non-revoked users, which then necessitates re-encrypting the external database. These issues might be resolved if the cloud implemented access control before responding to user search requests, but as noted in, access control deployment is prohibitively expensive in practise. To make matters worse, users must maintain a separate set of secrets for authentication and authorization. We introduced a new technique, fully homomorphic encryption (FHE), in this project for multiple data file acquisition, file security, and data corruption. For data protection, we must use the FHE algorithm in this project. There are three of them: keygen, copygen, and taggen.The process described above was carried out in the existing system. Keywords- Multiple file data; Cloud server; Fully homomorphic encryption ; FHE algorithm;

Secure cloud file sharing scheme using blockchain and attribute-based encryption

This paper presents a novel collaboration scheme for secure cloud file sharing using blockchain and attribute-based encryption(ABE). Blockchain enables us to implement access control as a smart contract between data owner and users. Each data owner creates its own smart contract where in a data user can request to access a specific file by registering a transaction. In response transaction, the data owner sends the required credential to the user thereby enabling her/him to decrypt the intended file on the cloud storage. This scheme is decentralized, fault tolerant and secured against DoS attacks. The cipher-key, which is used for file encryption, is embedded into a set of coefficients of a polynomial so-called access polynomial. It is attached to the encrypted file on the cloud storage as a metadata. The data user can restore the cipher-key by means of the credential receiving in response transaction and access polynomial. The data owner uses ABE scheme in response transaction to impose her/him access policy to the file as well as preserving user anonymity. This scheme supports fast revocation of the user access by means of updating the access polynomial coefficients and without any communication overhead to non-revoked users. Through formal verification, we show that the scheme is secure in terms of secrecy of credential information and authentication of participants. Finally, the evaluation results show that our scheme is scalable with acceptable performance up to 20,000 users.

A Brief Review on Cloud Computing Authentication Frameworks

Cloud computing is among the most widely used technologies worldwide as it helps individual users and organizations to store and share information conveniently and cost-effectively. However, data security is a major concern in cloud computing. Security involves guaranteed access to the data only to authorized users and protection against various threats and attacks. Security is generally achieved through the appropriate and efficient implementation of access control, authentication, and authorization mechanisms. Various frameworks have been proposed and implemented for authentication and access control in cloud computing. This paper discusses some of the main authentication frameworks in cloud computing, highlighting their methodologies, algorithms, and problems and identifying the issues that should form the focus of research in the area.

Techno-Economic Design and Implementation of Vehicular Access Control

Techno-Economic Design and Implementation of Vehicular Access Control

A novel system for medical equipment supply chain traceability based on alliance chain and attribute and role access control

With the increasing sales of the medical device market, the medical incidents caused by passive medical devices are increasing, which needs to be solved from the medical device supply chain. In addition, there are complex rights retrieval and assignment problems in the medical device supply chain system, and the traditional Role-based Access Control (RBAC) model is no longer suitable for the actual application environment of the supply chain.This article combines the traditional RBAC model and the Attribute-based Access Control (ABAC) model for access control management in the medical device supply chain to overcome the limitations abovementioned, taking advantage of the ABAC model’s flexibility to achieve granular and dynamic management of permissions, as also the RBAC model to simplify the permissions management of the entire system. Blockchain technology’s traceability, non-tampering, and decentralization features are essential to eliminate passive and inferior medical equipment sales activities, solving the problem of mutual mistrust and ‘Information Silo’ between the two sides of medical device transactions. The access control model is implemented in the blockchain’s smart contract, providing granular and dynamic authority management for the medical equipment supply chain and guaranteeing the security and privacy of medical device information in the supply chain. Three smart contracts on Hyperledger Fabric are designed for device management information, storage of implemented access control models, and implementation of access control policies. Experimental results show that the entire system is stable, ensuring high throughput and high security and promising.

AC-ABAC: Attribute-based access control for electronic medical records during acute care

Acute care demands fast response and procedures from the healthcare professionals involved in the emergency. The availability of electronic medical records (EMR) enables acute care teams to access patient data promptly, which is critical for proper treatment. The EMR contains sensitive data, so proper access control is a necessity. However, acute care situations entail the introduction of dynamic authorisation techniques that are able to swiftly grant access to the acute care teams during the treatment and that at the same time can revoke it as soon as the treatment is over. In this work, our contributions are threefold. First, we propose a step-by-step methodology that defines dynamic and fine-grained access control in acute care incidents. Then, we applied this methodology with the Amsterdam University Medical Center acute stroke care teams, resulting in a new model coined ’Acute Care Attribute-Based Access Control (AC-ABAC)’. AC-ABAC implements access control policies that take into account contextual attributes for dynamically sharing patient data with the appropriate healthcare professionals during the life cycle of acute care. Finally, we evaluate the performance and show the feasibility and correctness of AC-ABAC through a prototype implementation of the model and simulation of patient data requests in various scenarios. The results show that the most complex policy evaluation takes on average 194.89 ms, which is considered worthwhile when compared to the added value to the system’s security and the acute care process.

G-DaM: A Distributed Data Storage with Blockchain Framework for Management of Groundwater Quality Data.

Groundwater overuse in different domains will eventually lead to global freshwater scarcity. To meet the anticipated demands, many governments worldwide are employing innovative and traditional techniques for forecasting groundwater availability by conducting research and studies. One challenging step for this type of study is collecting groundwater data from different sites and securely sending it to the nearby edges without exposure to hacking and data tampering. In the current paper, we send raw data formats from the Internet of Things to the Distributed Data Storage (DDS) and Blockchain (BC) edges. We use a distributed and decentralized architecture to store the statistics, perform double hashing, and implement access control through smart contracts. This work demonstrates a modern and innovative approach combining DDS and BC technologies to overcome traditional data sharing, and centralized storage, while addressing blockchain limitations. We have shown performance improvements with increased data quality and integrity.

Blockchain Based Multi-Authority Fine-Grained Access Control System With Flexible Revocation

Traditional data sharing systems are facing new challenges when implementing access control with more and more complex data sharing requirements. Flexibility of user revocation in completely decentralized environments needs to be taken into account. In this article, we propose a Key-Policy Attribute-Based Encryption scheme with Multiple and Flexible Revocation (MAFR-KP-ABE) to achieve the features of decentralized authorization and flexible revocation. We prove the security of our MAFR-KP-ABE scheme in the standard model and provide the comparison with relevant schemes to demonstrate its efficiency. Then we propose a fine-grained access control system based on MAFR-KP-ABE scheme and blockchain that matches the need of paid data sharing services with several security properties enhanced. Security analysis and system implementation are given subsequently to demonstrate our system efficient and secure.

A New Attribute-Based Access Control Model for RDBMS

Abstract One of the challenges in Attribute-Based Access Control (ABAC) implementation is acquiring sufficient metadata against entities and attributes. Intelligent mining and extracting ABAC policies and attributes make ABAC implementation more feasible and cost-effective. This research paper focuses on attribute extraction from an existing enterprise relational database management system – RDBMS. The proposed approach tends to first classify entities according to some aspects of RDBMS systems. By reverse engineering, some metadata elements and ranking values are calculated for each part. Then entities and attributes are assigned a final rank that helps to decide what attribute subset is a candidate to be an optimal input for ABAC implementation. The proposed approach has been tested and implemented against an existing enterprise RDBMS, and the results are then evaluated. The approach enables the choice to trade-off between accuracy and overhead. The results score an accuracy of up to 80% with no overhead or 88% of accuracy with 65% overhead.