Management Of Sensitive Information Research Articles

A Study on Reinforcing Non-Identifying Personal Sensitive Information Management on IoT Environment

A Study on Reinforcing Non-Identifying Personal Sensitive Information Management on IoT Environment

Privacy Preservation of Sensitive Data using Polymorphic Encryption and Cryptographic Techniques

The compilation and analysis of health records on a big data scale is becoming an essential approach to understand problematical diseases. In order to gain new insights it is important that researchers can cooperate: they will have to access each other's data and contribute to the data sets. In many cases, such health records involves privacy sensitive data about patients. Patients should be cautious to count on preservation of their privacy and on secure storage of their data. Polymorphic encryption and Pseudonymisation, form a narrative approach for the management of sensitive information, especially in health care. The conventional encryptionsystem is rather inflexible: once scrambled, just one key can be utilized to unscramble the information. This inflexibility is turning into an each more noteworthy issue with regards to huge information examination, where various gatherings who wish to research some portion of an encoded informational index all need the one key for decoding. Polymorphic encryption is another cryptographic strategy that tackles these issues. Together with the related procedure of polymorphic pseudonymisation new security and protection assurances can be given which are fundamental in zones, for example, (customized) wellbeing area, medicinal information accumulation by means of self-estimation applications, and all the more by and large in protection inviting character the board and information examination.Encryption, pseudonymization and anonymization are some of the importanttechniques that facilitate the usders on security of sensitive data, and ensure compliance both from an Data Regulation act and any other information security act like Health Insurance Portability and Accountability Act - (HIPAA) regulations.

Uncommon sense: A review of challenges and opportunities for aggregating disaster risk information

The ambition to integrate disaster risk information from multiple stakeholders exists at different scales in any country and serve to control the risk of losses within companies, organizations and countries as a whole. Against the backdrop of extensive deliberations with risk management professionals in Sweden, this paper is based on an interdisciplinary scoping study of literature aimed to enhance our understanding about and possibility of aggregating disaster risk information from organizations across administrative levels and societal sectors. Whilst conceiving that aggregation involves collecting and synthesizing information, the paper exposes a number of barriers and opportunities related to these processes. Major impediments include unawareness of information needs, fragmented and highly distributed knowledge; distrust, prestige and secrecy, lack of empirical and quantitative data, heterogeneous ways of assessing and describing risk as well as the vast volume of information vis-à-vis the time and cognitive abilities available to process it. Remedial measures include multi-stakeholder risk assessment processes, trainings and exercises, allowances and regulations as catalysts for inter-organizational collaboration, trainings on the management of sensitive information, standardizations and the increased use of visualizations and GIS to support analysis and presentation of disaster risk information. The paper highlights existing research that may be particularly conducive for addressing problems communicated by risk management professionals as well as concerns that hitherto have not been thoroughly addressed by research. It also stresses the need to further strengthen the rigor of normative proposals by establishing cause-effect relationships and the influence of contextual factors.

Design of enterprise massive sensitive information management algorithm based on linear tree thinking

Due to the principle of confidentiality of enterprises massive sensitive information, it is difficult to achieve efficient management. The conventional management algorithm has the problems of large error and long time consuming. This paper proposes an algorithm of enterprise massive sensitive information management based on linear tree thinking. A MMBST linear data structure is designed. MMBST is used to divide sensitive information into fixed-size information blocks and it establishes corresponding information management line tree. Priority and sensitivity probability are set to balance the data. The experimental results show that the proposed algorithm has high accuracy and less time consuming, and can effectively manage the sensitive information under the enterprise resource sharing platform.

Privacy preserving security using biometrics in cloud computing

Cloud computing and the efficient storage provide new paradigms and approaches designed at efficiently utilization of resources through computation and many alternatives to guarantee the privacy preservation of individual user. It also ensures the integrity of stored cloud data, and processing of stored data in the various data centers. However, to provide better protection and management of sensitive information (data) are big challenge to maintain the confidentiality and integrity of data in the cloud computation. Thus, there is an urgent need for storing and processing the data in the cloud environment without any information leakage. The sensitive data require the storing and processing mechanism and techniques to assurance the privacy preservation of individual user, to maintain the data integrity, and preserve confidentiality. Face recognition has recently achieved advancements in the unobtrusive recognition of individuals to maintain the privacy-preservation in the cloud computing. This paper emphasizes on cloud security and privacy issues and provides the solution using biometric face recognition. We propose a biometrics face recognition approach for security and privacy preservation of cloud users during their access to cloud resources. The proposed approach has three steps: (1) acquisition of face images (2) preprocessing and extraction of facial feature (3) recognition of individual using encrypted biometric feature. The experimental results establish that our proposed recognition approach can ensure the privacy and security of biometrics data.

Sensitive information management system for un-trusted system platforms

Sensitive information management system for un-trusted system platforms

Organizational principles of cloud storage to support collaborative biomedical research.

This paper describes organizational guidelines and an anonymization protocol for the management of sensitive information in interdisciplinary, multi-institutional studies with multiple collaborators. This protocol is flexible, automated, and suitable for use in cloud-based projects as well as for publication of supplementary information in journal papers. A sample implementation of the anonymization protocol is illustrated for an ongoing study dealing with Automated Prediction of EXtubation readiness (APEX).

Secure key management scheme for dynamic hierarchical access control based on ECC

An access control mechanism in a user hierarchy is used to provide the management of sensitive information for authorized users. The users and their own information can be organized into a number of disjoint sets of security classes according to their responsibilities. Each security class in a user hierarchy is assigned an encryption key and can derive the encryption keys of all lower security classes according to predefined partially ordered relation. In 2006, Jeng and Wang proposed an efficient key management scheme based on elliptic curve cryptosystems. This paper, however, pointed out that Jeng–Wang scheme is vulnerable to the so-called compromising attack that the secret keys of some security classes can be compromised by any adversary if some public information modified. We further proposed a secure key management scheme based on elliptic curve cryptosystems to eliminate the pointed out the security leak and provide better security requirements. As compared with Jeng and Wang's scheme ( Jeng and Wang, 2006), the proposed scheme has the following properties. (i) It is simple to execute the key generation and key derivation phases. (ii) It is easily to address dynamic access control when a security class is added into or deleted from the hierarchy. (iii) It is secure against some potential attacks. (iv) The required storage of the public/secret parameters is constant.

核物質防護に関わる機微情報管理の現状と課題に関する考察

The confidentiality system concerning the physical protection of nuclear materials and nuclear facilities was enacted by revision of the Nuclear Reactor Regulation Law in 2005. We made a comparative analysis with the information security in governmental agencies or financial sectors, in order to consider the way the sensitive information management concerning the physical protection of nuclear materials and nuclear facilities should be. The considerations in this paper are as follows. (1) In order to secure a suitable level of security, close cooperation should be achieved among related governmental agencies. (2) A cycle that continuously evaluates whether suitable management is performed should be established. (3) Excessive secretiveness should be eliminated. (4) An information-sharing system among the related persons beyond the frame of governmental agencies and electricity companies should be established. (5) Improvement in the social acceptability of the sensitive information management is important. (6) Although it is important to perform evaluation by the consideration of suitable balance with information disclosure, it is also important that it is positively shown to society.

Cryptographic key assignment schemes for any access control policy

The access control problem deals with the management of sensitive information among a number of users who are classified according to their suitability in accessing the information in a computer system. The set of rules that specify the information flow between different user classes in the system defines an access control policy. Akl and Taylor first considered the access control problem in a system organized as a partially ordered hierarchy. They proposed a cryptographic key assignment scheme, where each class is assigned an encryption key that can be used, along with some public parameters generated by a central authority, to compute the key assigned to any class lower down in the hierarchy. Subsequently, many researchers have proposed schemes that either have better performances or allow insertion and deletion of classes in the hierarchy. In this paper we show how to construct a cryptographic key assignment scheme for any arbitrary access control policy. Our construction uses as a building block a cryptographic key assignment scheme for partially ordered hierarchies. The security of our scheme holds with respect to adversaries of limited computing power and directly derives from the security of the underlying scheme for partially ordered hierarchies. Moreover, the size of the keys assigned to classes in our scheme is exactly the same as in the underlying scheme.