Access Control Information Research Articles

Security monitoring via sound analysis and voice identification with artificial intelligence

The article demonstrates the possibility of monitoring user access through authentication based on voice profiles using the means of Artificial Intelligence. A two-stage approach is proposed for sound analysis and voice recognition using Feed-Forward Neural Networks (FFNNs) and Cascade-Forward Neural Networks (CFNNs). Seven test voice profiles were pre-processed to extract quantitative sound features. The procedure involves registration of a set of sound parameters concerning three categories, respectively, for all audio and acoustic measurements in the entire sound spectrum, measurements up to and above 100 dBA. The neural architectures were trained with Scaled Gradient Descent (SCG) and Levenberg Marquardt (LM) algorithms, using different transfer functions in the output structural layers. In the initial phase of neural training, the entire sound spectrum of registered indicators was used, and high levels of Accuracy around 90.0% were reached. Subsequently, steps were taken to reduce the informative features when searching for similar levels of accuracy in order to limit the necessary computational procedures in neural training, but maintain the threshold of successful user authentication. In the analysis of neural performance, in addition to accuracy, additional criteria were used, namely Mean-Squared Error (MSE) and Root Mean Squared Error (RMSE). About the achieved and analyzed results, a synthesis was conducted of a set of four informative features with the highest significance, respectively LAE (A-weighted, sound exposure level), Laeq (A-weighted, equivalent sound level), LAF (A-weighted, fast time-constant, sound level) and LAS (A-weighted, slow time constant response, sound level). In the course of subsequent neural training processes, unsuitability was found when using the Log-sigmoid activation type with greatly underestimated accuracy readings and errors below 58.0% and above thresholds of 0.2300 and 0.4800. Positive performance indicators of voice recognition were achieved with Softmax and Hyperbolic tangent sigmoid activations in SCG and LM training procedures in levels of accuracy of 98.7 % and 96.1 % at FFNN models. Successful correct recognition of the test voice profiles on access and security personalization with a quantitative equivalent of 100.0 % accuracy was achieved in the Linear transfer function for Cascade-Forward Neural Networks. The proposed method and the synthesized neural models in the research can be used as units and modules in access control systems with biometric diagnostics and intelligent recognition of employees in company departments to electronically store classified information and physical access control.

Confusion and Diffusion Techniques for Image Encryption Process Based on Chaos System

Face recognition uses biometric technologies to identify humans based on their facial characteristics. This method is commonly used to restrict information access control. The benefits of face recognition systems encompass their ease of use and security. The human face recognition process consists of face detection, face tracking, and face recognition. The process uses some algorithms: the Viola-Jones for face detection, the Kanade-Lucas-Tomasi (KLT) for face tracking, and the principal component analysis (PCA) for face recognition. Furthermore, this research proposed face recognition with an encryption process to protect the data stored in a database. The encryption process consists of two main processes: confusion and diffusion. The confusion process is randomizing the position of the original image pixels. This research utilized the Arnold’s cat map (ACM) for the confusion process, and the diffusion process was performed using the XOR operation with the key generated from the 1D chaos system. Three different 1D chaos systems, namely logistic map, Bernoulli map, and tent map, were compared to see which chaos system had the best encryption results. Tests were conducted by comparing various parameters on the three proposed 1D chaos systems, including correlation coefficient, histogram analysis, entropy value, number of pixel rate changes (NPCR), and unified average change intensity (UACI). Based on testing the image encryption results, the diffusion process utilizing the tent map produced the best image encryption compared to other chaotic systems.

Effects of blockchain technology (BT) on the university librarians and libraries: a systematic literature review (SLR)

PurposeThe objectives of the study were to identify the effects of blockchain technology (BT) on the university librarians, the impact of BT on the university library services and to reveal the challenges to adopt BT in the university libraries.Design/methodology/approachA systematic literature review was applied to address the objectives of the study. Around 25 studies published in peer-reviewed journals were selected to conduct the study.FindingsThe findings of the study revealed that blockchain technology (BT) has positive effects on the university librarians as it assists them in digital resources management, provision of integrated library services, effective records management and continued professional development. The study also displayed that BT has a positive impact on the university libraries through effective information management, user privacy, collaboration, technological innovation and access control. Results also revealed that technical issues, financial constraints, security problems, skill issues and sociocultural issues created challenges to adopt BT in the university libraries.Originality/valueThe study has offered theoretical implications for future investigators through the provision of innovative literature on the prospectus and challenges associated with blockchain in the context of librarianship. The study has also provided practical implications for management bodies by offering recommendations for the successful adoption of blockchain in the university libraries. Additionally, a framework has been developed to adopt BT successfully in the university libraries for the delivery of smart library services to library patrons.

Medical record information storage scheme based on blockchain and attribute role-based access control

The integration of the Internet with the healthcare industry has ushered in a transformative revolution in the medical field, where efficient and prompt electronic medical records can save precious resources.However, incomplete or tampered electronic medical records have serious implications on patient. Ensuring the complete, accurate storage of medical record information is an urgent problem that needs to be addressed.Therefore, this paper proposes a blockchain-based solution for secure storage and sharing of medical record information, combining the role-based access control (RBAC) with the attribute-based access control (ABAC). Firstly, by utilizing RBAC and ABAC, dynamic fine-grained access control for medical information is achieved based on role differences. Then, the medical record information is stored in the blockchain through chaincode. In addition, Advanced Encryption Standard and Feature-Aware Stateful Routing technology is applied to further enhance security and storage efficiency of the scheme. Experimental results demonstrate that the proposed solution ensures the security and integrity of medical record, while providing efficient information storage and access.

Circuit Cipher Text - Policy Attribute - Based Encryption with Verifiable Delegation by using Cloud Computing

To keep data secure and under control when stored in the cloud, data owners might encrypt it using attribute-based encryption. Users with less powerful computers often utilize cloud servers to decrypt tasks in order to save computing expenses. Because of this, attribute-based encryption with delegation comes into being. Nevertheless, there are still certain restrictions and unresolved problems about the past relevant work. If you delegate encryption to a cloud server, there's a chance the service may change rewrite the supplied content, provide a false calculation result. In an effort to save costs, they may mistakenly treat qualified customers as ineligible. In addition, there's a chance that the access limits won't be flexible enough while encryption is underway. Given that the most stringent form of access control may be achieved with a policy for generic circuits, our research takes into account a framework for constructing hybrid encryption using circuit cipher and text-policy attributes, with verifiable delegation.Not only do such a system and verifiable computation ensure that delegated computing outputs are accurate, but they also guarantee protected information and fine-grained access control. Our method also protects against chosen-plaintext assaults, as long as you use the Deterministic k-multilinear style We assume Diffie-Hellman algorithm. The feasibility and efficacy of the proposed solution are further confirmed by an exhaustive simulation exercise.

Application of Hierarchical Protection Security Mechanism in Database to Party Building in Colleges and Universities

Abstract With the deepening of digital development, the security protection of databases becomes more important while carrying out the digital transformation of party-building work in colleges and universities. In this study, for the database security in the party building work in colleges and universities, the protection framework of database security protection and the database hierarchical protection system based on the party building work in colleges and universities are constructed according to the needs of data hierarchical security protection. Then, on the basis of the intrusion tolerance mechanism, a database security monitoring system is established using a voting algorithm, and a multilevel information access control method is proposed for hierarchical protection. On this basis, an encryption protection mechanism based on the RSA algorithm is proposed for the sensitive information in the database of university party-building work. Through the empirical analysis of the security mechanism of counterattack protection of the university party building database, it is known that the security of the system in this paper and the probability of normal operation are both greater than 99%, and the likelihood of danger is 0.000002%. In the application of party building work, the data security of the three kinds of business is still maintained above 99.6%. The encryption time consumed is not more than 525ms, which shows that the database hierarchical protection security mechanism system constructed in this paper can meet the requirements of database security in the party building work in colleges and universities and provide a reliable guarantee for the security of the party building work database.

Legality for Electronic Signatures in Implementing Electronic Medical Records

An electronic signature is an authentic marker to show a person's responsibility. Electronic signatures also ensure confidentiality, integrity, authorization, access control, and non-repudiation of information in electronic medical records. Therefore, this research was conducted to determine the legal aspects of electronic signatures in administering electronic medical records. This research used a qualitative method with a normative juridical approach. The research sources were based on laws, government regulations, journals, and other tertiary sources related to electronic signatures and electronic medical records in health facilities. Research findings illustrated that Minister of Health Regulation Number 24 of 2022 concerning medical records only defined electronic signatures as an authentication and verification of the security and privacy of medical record information. Electronic signatures are specifically regulated by Constitution Number 11 of 2008 concerning Information and Electronic Transactions and Government Regulation Number 71 of 2019 concerning Electronic Systems and Transaction Operators. Both certified and uncertified electronic signatures have legal legitimacy in their application in electronic medical records. However, how they are supported by evidence is what makes them different. Certified electronic signatures are more trustworthy than uncertified electronic signatures.

Enabling Trust and Security in Digital Twin Management: A Blockchain-Based Approach with Ethereum and IPFS.

The emergence of Industry 5.0 has highlighted the significance of information usage, processing, and data analysis when maintaining physical assets. This has enabled the creation of the Digital Twin (DT). Information about an asset is generated and consumed during its entire life cycle. The main goal of DT is to connect and represent physical assets as close to reality as possible virtually. Unfortunately, the lack of security and trust among DT participants remains a problem as a result of data sharing. This issue cannot be resolved with a central authority when dealing with large organisations. Blockchain technology has been proposed as a solution for DT information sharing and security challenges. This paper proposes a Blockchain-based solution for digital twin using Ethereum blockchain with performance and cost analysis. This solution employs a smart contract for information management and access control for stakeholders of the digital twin, which is secure and tamper-proof. This implementation is based on Ethereum and IPFS. We use IPFS storage servers to store stakeholders' details and manage information. A real-world use-case of a production line of a smartphone, where a conveyor belt is used to carry different parts, is presented to demonstrate the proposed system. The performance evaluation of our proposed system shows that it is secure and achieves performance improvement when compared with other methods. The comparison of results with state-of-the-art methods showed that the proposed system consumed fewer resources in a transaction cost, with an 8% decrease. The execution cost increased by 10%, but the cost of ether was 93% less than the existing methods.

A Lightweight CP-ABE Scheme with Direct Attribute Revocation for Vehicular Ad Hoc Network.

Ciphertext-Policy Attribute-Based Encryption (CP-ABE) technology provides a new solution to address the security and fine-grained access control of traffic information in vehicular ad hoc networks (VANETs). However, in most CP-ABE schemes for VANETs, attribute revocation suffers from high system consumption and complex revocation operations, as well as from high computational overhead and low efficiency due to the use of bilinear pairwise operations. Based on this, this paper proposes a lightweight CP-ABE scheme that supports direct attribute revocation in VANETs. The scheme implements an agent-based direct attribute revocation mechanism by separating dynamic and static attributes of vehicle terminals, which reduces system consumption and simplifies the revocation operation process. The scheme uses scalar multiplication on elliptic curves instead of bilinear pairing operations and uses computational outsourcing techniques to reduce the terminal decryption cost and improve the efficiency of the scheme. The security and performance analysis shows that the overall efficiency of our scheme is better than the existing schemes under the premise of ensuring data confidentiality and integrity.

Accelerating GRAPPA reconstruction using SoC design for real-time cardiac MRI

Real-time cardiac MRI is a rapidly developing area of research that has the potential to improve the diagnosis and treatment of cardiovascular diseases. However, the acquisition of high-quality real-time cardiac MR (CMR) images is challenging as it requires a high frame rate and temporal resolution. To overcome this challenge, there have been recent efforts on several approaches including hardware-based improvements and image reconstruction techniques such as compressed sensing and parallel MRI. The use of parallel MRI techniques such as GRAPPA (Generalized Autocalibrating Partial Parallel Acquisition) is a promising approach for improving the temporal resolution of MRI and expanding its applications in clinical practice. However, the GRAPPA algorithm involves a significant amount of computation, particularly for high acceleration factors and large datasets. This can result in long reconstruction times, which can limit the ability to achieve real-time imaging or high frame rates. One solution to this challenge is to use specialized hardware i.e. field-programmable gate arrays (FPGAs). In this work, a novel 32-bit floating-point FPGA-based GRAPPA accelerator is proposed with an aim to reconstruct high-quality cardiac MR images at higher frame rates, making it well suited for real-time clinical applications. The proposed FPGA-based accelerator consists of custom-designed data processing units named as dedicated computational engines (DCEs) that allow for a continuous flow of data between the calibration and synthesis stages of GRAPPA reconstruction process. This greatly increases the throughput and reduces the latency of the overall proposed system. Moreover, a high-speed memory module (DDR4-SDRAM) is integrated with the proposed architecture to store the multi-coil MR data. An on-chip quad-core ARM Cortex-A53 processor is used to manage access control information required for data transfer between the DCEs and DDR4-SDRAM. The proposed accelerator is implemented on Xilinx Zynq UltraScale + MPSoC using high-level synthesis (HLS) and hardware descriptive language (HDL) with an aim to explore the trade-offs between the reconstruction time, resource utilization and design effort. Several experiments have been performed using in-vivo cardiac datasets i.e. 18-receiver coil and 30-receiver coil to evaluate the performance of the proposed accelerator. A comparison is performed with the contemporary CPU and GPU-based GRAPPA reconstruction methods in terms of reconstruction time, frames-per-second and reconstruction accuracy (RMSE and SNR). The results show that the proposed accelerator achieves speed-up factors up to 121× and 9× as compared to the contemporary CPU-based and GPU-based GRAPPA reconstruction methods, respectively. Moreover, it has been demonstrated that the proposed accelerator can achieve reconstruction rates of up to ∼27 frames-per-second while maintaining the visual quality of the reconstructed images.

An effectual spectrum sharing and battery utilization strategy using fuzzy enabled dynamic relay polling transmission in WSN

Power dissipation at the network level to improve lifespan without degrading the bandwidth and collaboration is a fundamental impediment to effective spectral efficiency in wireless sensor networks (WSNs). This issue is made much more difficult. Wireless energy transfer (WET) for energizing remote sensor nodes gained interest. This research explores an FDD-based on-demand scenario with many relays where a transmitter is powered by direct and relayed links. A threshold is set for transmission energy & channel quality to decide whether the broadcasting can be efficient (for spectrum utilization) or the packet would not arrive at its destination. The network model offers an energy-efficient scheduling strategy to decide whether to transmit information or not depending on the stored higher energy and network status. An energy-aware polling-based medium access control (MAC) mechanism, composite energy, and information first (CEDF) has also been developed to fine-tune packet delivery ratio by utilizing datagrams and energy packages to set polling prioritization. Computational simulations indicate that energy relayed and the recommended energy-efficient scheduled technique decrease the system’s active power losses supporting all theoretical predictions.

The Influence of Information Security Management on Operational Performance of Humanitarian Value Chains in Arid and Semi-Arid Lands of Kenya

Purpose: Managements of humanitarian organizations in arid and semi-arid lands have recently become sensitized to the vulnerability of their supply chains. This is due to an ever-increasing range of security breaches and disruptions that affect global value chains especially in information security management. The current study sought to determine the influence of information security management on the operational performance of humanitarian value chains in arid and semi-arid lands of Kenya.
 Methodology: The study adopted a cross-sectional design. A target population of 100 respondents was studied through census method from humanitarian organizations operating in arid and semi-arid lands of Kenya. A semi-structured questionnaire was used to collect information whereas descriptive and inferential statistics were used to analyze the data. The results were presented by use of tables.
 Findings: Scrutiny of the results of linear regression analysis indicated that information security management significantly predicted the operational performance of the organizations (r=.659, p=0.000).
 Unique contribution to theory, practice and policy: The study recommends that humanitarian organizations should put measures into place to ensure access control and safe storage of information. Employees should also be trained in information security management to understand their role on overall organizational performance.

CVTEE: A Compatible Verified TEE Architecture With Enhanced Security

Sensitive resources in Trusted Execution Environment (TEE) have suffered serious security threats in recent years. Previous protection approaches either lack a strong assurance of TEE security properties or are limited to a single platform. We propose a compatible verified TEE architecture, called <monospace>CVTEE</monospace> , which delegates a security monitor to manage TEE resources securely. This architecture has two key advantages: i) its functional correctness and security are guaranteed by a machine-checkable proof of security objectives of Trusted Application (TA) isolation, runtime confidentiality, and runtime integrity, and ii) it is applicable to different TEE platforms and implementation-independent due to its high level of abstraction and non-determinism of data types. Note that access control policy and information flow control policy are the core for security management of resources. After formally specifying the security attributes of TEE resources, we develop these policies based on Common Criteria (CC) in the security monitor and provide atomic interfaces. <monospace>CVTEE</monospace> is formally verified with 386 lemmas/theorems and <inline-formula><tex-math notation="LaTeX">$\sim$</tex-math></inline-formula> 10,000 LOC of Isabelle/HOL. In addition, we implement a proof of concept for the access control module of Teaclave, and prove that the constructed access control model meets the security requirements through 5 theorems.

Blockchain-Based Service-Oriented Architecture for Consent Management, Access Control, and Auditing

Continuity of care requires the exchange of health information among organizations and care teams. The EU General Data Protection Regulation (GDPR) establishes that subject of care should give explicit consent to the treatment of her personal data, and organizations must obey the individual’s will. Nevertheless, few solutions focus on guaranteeing the proper execution of consents. We propose a service-oriented architecture, backed by blockchain technology, that enables: (1) tamper-proof and immutable storage of subject of care consents; (2) a fine-grained access control for protecting health data according to consents; and (3) auditing tasks for supervisory authorities (or subjects of care themselves) to assess that healthcare organizations comply with GDPR and granted consents. Standards for health information exchange and access control are adopted to guarantee interoperability. Access control events and the subject of care consents are maintained on a blockchain, providing a trusted collaboration between organizations, supervisory authorities, and individuals. A prototype of the architecture has been implemented as a proof of concept to evaluate the performance of critical components. The application of subject of care consent to control the treatment of personal health data in federated and distributed environments is a pressing concern. The experimental results show that blockchain can effectively support sharing consent and audit events among healthcare organizations, supervisory authorities, and individuals.

Noninvasive real-time traffic and congestion control algorithm based on policy

The Internet of Things has a large number of terminal devices and a wide range of deployment. This feature has higher requirements for reliable transmission and parallel connection, and is more prone to network congestion resulting in the loss of power information flow and excessive delay. The traditional congestion control algorithm is not suitable for the high concurrent mass heterogeneous iot terminal access control and mass information flow storage control. In this paper, the Transformer BBR algorithm is proposed, which is a congestion control algorithm based on BBR deep reinforcement learning combined with Transformer’s excellent long-term prediction ability. In the BBR algorithm bandwidth detection stage, transformer model is used as an agent to detect the network state and map it to the congestion window, so as to find the network changing state in time and make the corresponding decision action. Firstly, the congestion control strategy is learned in the simulation network environment, and then the efficiency is verified in the simulation environment. Finally, the experiment shows that the algorithm can reduce the delay while ensuring good bandwidth performance, and is superior to the main application algorithms in network throughput.

Sprawozdanie z konferencji naukowej „XX lat ustawy o dostępie do informacji publicznej – podsumowanie i perspektywy ustawowej regulacji prawa do informacji publicznej”, Warszawa, 28 października 2021 r.

The online conference was organized by the Department of Administrative Law of the Institute of Legal Sciences of the Polish Academy of Sciences to commemorate Professor Teresa Górzyńska, pioneer and promoter of the right to information in Poland, who died in 2013. In the report, the author focused on several fundamental problems arising in the practice of applying the Act of 2001 on access to public information: is there a need for a new act regulating the fundamental principles of the right to information, does the Act of 2001 deserve a positive assessment of how administrative courts interpreted basic concepts contained therein, how to counteract the abuse of the right to information, how the mutual relationship between the right to information and personal data protection has developed, whether the right to information can replace the procedural rights of citizens, whether an additional information access control authority (ombudsman) is needed, should there be a payment for access to information.

Privacy Protected Preservation of Electric Vehicles’ Data in Cloud Computing Using Secure Data Access Control

Cloud computing provides a ubiquitous data storage and access mechanism for organizations, industries, and smart grids to facilitate their operations. However, the concern in cloud storage systems is to secure data access control toward authentication for sensitive data, such as the electric vehicles (EVs) requesting information for attending a charging service. Consequently, denying an authentic user’s request will result in delaying the requested service, thereby leading to service inefficiency. The role-based access control (RBAC) plays a crucial role in securing and authenticating such time-sensitive data. The design mechanism of roles is based on skills, authority, and responsibilities for organizations. For EVs, the roles are based on the type of membership, such as permanent, occasional, or one-time. In this paper, we propose a new RBAC access control and privacy-preserving information access method toward the coarse-grained measure control and privacy protection in the cloud storage system for EVs. The data can be encrypted and decrypted based on the types of users who possess appropriate access permission toward authorized and unauthorized users according to their roles specified by role-based access control policies. The proposed approach has been simulated with various role-based scenarios, and the efficiency was evaluated against state-of-the-art role-based access-control techniques.

Design of chemically modified bacteriorhodopsin films for information protection systems

The object of this study is the processes of interaction of fragments of purple membranes with certain chemicals, which affect the photochromic properties of bacteriorhodopsin films. This paper considers the possibility of modifying the properties of bacteriorhodopsin films by changing their chemical composition, which will make it possible to use such films to protect information. For this purpose, it has been determined which optical properties of bacteriorhodopsin are most important for its use in the field of information protection; films were made using various chemicals as impurities. It was shown that the introduction of impurities does not affect the absorption spectrum of bacteriorhodopsin, which indicates that it retains its properties. It has been established that impurity substances are evenly distributed in films. By studying the dynamics of photoinduced changes in films with different concentrations of chemical components, the effect of chemical modification on the photocycle of bacteriorhodopsin and the properties of film structures based on it was studied. Based on the results of experimental studies, it was found that by changing the chemical composition of films, it is possible to change the time of storage of the information recorded on them in the range from several to hundreds of seconds continuously. The sensitometric sensitivity of film structures also depends on the chemical composition and can vary in the range from 3.9·10–3 to 54·10–3 m2/J. At the same time, chemical modification is simpler from a technological point and cheaper from a financial point of view compared to other methods that make it possible to achieve similar results. The reported results suggest that chemically modified films based on bacteriorhodopsin have great potential for practical application in the field of information protection and access control

Enhance Software-Defined Network Security with IoT for Strengthen the Encryption of Information Access Control.

The Internet of Things (IoT) is legitimately growing quicker. The operators have already started setting up a diligent infrastructure for these gadgets. Various technologies need to be developed for this type of sensor, including enterprise safety initiatives. This paper covers the stability routing protocol, which assumes an assessment of credibility in gadgets and packet flow. To build reliable Software-Defined Network (SDN) routes, build on the trust between network element flows and Quality of Service (QoS) or energy conditions. The SDN architecture is used for the Cognitive Protocol Network (CPN) technical platform to increase the energy level. Stochastic Neural Networks (SNNs) are accredited with information extracted from perceptual packets and make decentralized decisions. The proposed network infrastructure is designed and integrated into the SerIoT techniques to strengthen IoT encryption for information access control. The versatility of the technology is to circumvent the unpredictable connectivity of the system and the node decreases in terms of potential cryptographic capacity, limited interval, a target node, and deterministic energy. Based on factual statistical data, appropriate marketing generates an end-to-end antitheft solution that meets a set of predetermined circuit restrictions. A study must collaborate by demonstrating numerous flaws due to the obvious instability of clusters, which is essential for the efficiency of the platform.

Certificateless Remote Data Integrity Auditing with Access Control of Sensitive Information in Cloud Storage

With the spread of cloud storage technology, checking the integrity of data stored in the cloud effectively is increasingly becoming a concern. Following the introduction of the first remote data integrity audit schemes, different audit schemes with various characteristics have been proposed. However, most of the existing solutions have problems such as additional storage overhead and additional certificate burden. This paper proposes a certificateless remote data integrity auditing scheme which takes into account the storage burden and data privacy issues while ensuring the correctness of the data audit results. In addition, the certificateless design concept enables the scheme proposed in this paper to avoid a series of burdens brought by certificates. The scheme designed in this paper provides a data access control function whereby only users who hold a valid token generated by the data owner can access the target data from the cloud. Finally, this paper provides a detailed security proof to ensure the rationality of the results. A theoretical analysis and subsequent experimental verification show that the proposed scheme is both effective and feasible.