Problem Of Identity Management Research Articles

Self-sovereign identity management in ciphertext policy attribute based encryption for IoT protocols

In the Internet of Things, access control and identity management rely on centralized platforms. However, centralized platforms will compromise user privacy with identity leakage. Self-sovereign identity (SSI) is a novel model for identity management that does not require third-party centralized authority. Thus, SSI is a potential solution to the identity management problem in IoT access control. This paper’s motivation is to address the problems of lack of identity sovereignty, centralized authorization, and high computational overhead for IoT access control. We propose a novel access control scheme for IoT that decentralizes identity management and tackles single-point-of-failure issues. This scheme leverages ciphertext policy attribute-based encryption (CP-ABE) and SSI to achieve the overall goal. Specifically, Our scheme eliminates the central authority and empowers users to manage their identity, allowing users to decide what attributes they disclose. Regarding the distribution of roles in the architecture, this paper follows the generic SSI model (ISSUER–HOLDER—VERIFIER) that allows a user to access a service from a service provider. To enable real-world deployment of our scheme, we establish an attribute authorization authority(such as the government) as a trusted identity point of entry. Users generate decentralized identifiers to enjoy services of interest in a privacy-preserving manner. The analysis demonstrates the practicality and superiority of our scheme. Our scheme requires less computation and is suitable for resource-constrained IoT scenarios.

A random-sampling approach to track cell divisions in time-lapse fluorescence microscopy

BackgroundParticle-tracking in 3D is an indispensable computational tool to extract critical information on dynamical processes from raw time-lapse imaging. This is particularly true with in vivo time-lapse fluorescence imaging in cell and developmental biology, where complex dynamics are observed at high temporal resolution. Common tracking algorithms used with time-lapse data in fluorescence microscopy typically assume a continuous signal where background, recognisable keypoints and independently moving objects of interest are permanently visible. Under these conditions, simple registration and identity management algorithms can track the objects of interest over time. In contrast, here we consider the case of transient signals and objects whose movements are constrained within a tissue, where standard algorithms fail to provide robust tracking.ResultsTo optimize 3D tracking in these conditions, we propose the merging of registration and tracking tasks into a registration algorithm that uses random sampling to solve the identity management problem. We describe the design and application of such an algorithm, illustrated in the domain of plant biology, and make it available as an open-source software implementation. The algorithm is tested on mitotic events in 4D data-sets obtained with light-sheet fluorescence microscopy on growing Arabidopsis thaliana roots expressing CYCB::GFP. We validate the method by comparing the algorithm performance against both surrogate data and manual tracking.ConclusionThis method fills a gap in existing tracking techniques, following mitotic events in challenging data-sets using transient fluorescent markers in unregistered images.

Identity management practices in cloud computing environments

The increased global connectivity has increased the number of identities taking part in the digital world, as well as their interactions. In such an environment, the identity management becomes a superset of all corresponding issues in establishing trust and reputation among customers. This paper presents identity management problem as a whole, with specific identity breach incidents. Composition of the identities and their attributes has also been discussed in detail. Best practices for identity management and access control services like Active Directory Federation Services (ADFS) for intra-organisation services, as well as services such as Windows Live ID, Google, Yahoo, Facebook and OpenID for worldwide control across internet have been presented. Each application has a choice to accept an identity provider it trusts. The paper further addresses future identity management problems, which will be more complex in nature and will deal with interconnected devices, machines, software components and addresses along with the user identities.

Security of Information Systems in Organization: A Bank Model

Security of Information Systems concentrates on the collective efforts of all institutions to produce markedly secured Information systems to help deal with the threats or problems of Identity management within and outside the banking institution. Identity Management (IDM)” refers to the analysis of procedures of utilizing technologies, models/methods, standards/mechanisms in order to manage essential information in the institution’s network about the identity of all users, and control access to Bank resources. In this project, apart from the design implementation and analysis, emphasis was also placed on the Identity Management(IDM), which guarantees the Identity and Integrity of every registered users in the Network in order to apply appropriate access policy, deliver visibility into Network activity, and secure the local, centralized, distributed, and web/globalizes management of remote devices, while providing Authentication, Authorization, and Accounting functionality across the institution’s Network devices. The Security of information systems and the need to have an effective management system in any organization cannot be overemphasized, because any attempt to undermine this laudable objective in any organization could obviously lead to an array of conflicts/crises within the organization. Essentially, this project is focussed on a design of a security requirements, analysis, and policy formulation in organization with a bias in the banking industry. Availability of such model can help management to formulate policy in terms of the security of operations in the system. In particular, the policy spells out the various authentication and authorization actions to be carried out by clients and personnel in the bank. However, there are strings of threats such as identity theft, “phishing mail”, false accounts, fraudulent loans, wire fraud, credit card fraud, etc associated to the system. In other to have effective system in place, the system must be such that is capable of detecting these threats before they are carried out. DOI: 10.5901/mjss.2013.v4n7p101

Security Requirements, Analysis and Policy Formulation for Educational Institutions

This project is a design implementation of Security requirements, analysis, and policy formulation of Educational Systems. Security of Information Systems in Educational institutions therefore concentrates on the collective efforts of all institutions to produce markedly secured Information systems to help deal with the threat or problems of Identity management within and outside the institution. Identity Management (IDM)” refers to the analysis of procedures of utilizing technologies, models/methods, standards/mechanisms in order to manage essential information in the institution’s network about the identity of all users, and control access to School’s resources. In this project, apart from the design implementation and analysis, emphasis was also placed on the Identity Management(IDM), which guarantees the Identity and Integrity of every registered users in the Network in order to apply appropriate access policy, deliver visibility into Network activity, and secure the local, centralized, distributed, and web/globalizes management of remote devices, while providing Authentication, Authorization, and Accounting functionality across the institution’s Network devices. DOI: 10.5901/jesr.2013.v3n5p93

Genetic Algorithm Based Palm Recognition Method for Biometric Authentication Systems

Biometric authentication systems are steadily becoming a solution to wide number of authentication and identity management problems. Unique parts of human body that can be recognized and used as a mean to identify a person include fingerprints, iris, lips, etc. Though fingerprint and facial recognition systems are most widely used and developed, most of the systems and methods are slow or require expensive technical equipment. In this article genetic algorithm based palm recognition method is proposed, which does not require special equipment and can be used in systems where fast detection is needed. Method is compared to other existing methods. Method description, test results and evaluation are provided. DOI: http://dx.doi.org/10.5755/j01.eee.19.2.3473

모바일 네트워크에서 인터넷 응용을 위한 향상된 ID관리 프로토콜

최근 급속도로 보급되고 있는 스마트폰과 SNS(Social Network Service)로 인한 인터넷 응용프로그램 활용의 증가는 3G 네트워크 이상의 네트워크 대역폭을 빠르게 잠식해가고 있으며 이로 인한 속도 저하와 서비스 질 저하로 인한 기간통신사들의 시설투자비 증가 요구가 강하게 대두되고 있다. 아울러 모바일 네트워크 사용자의 폭증에 따르는 모바일 서비스 제공자와 모바일 네트워크상의 ID관리문제를 촉발하고 있다. 본 논문은 3G 네트워크에서 모바일 인터넷 응용 서비스상의 사용자 ID관리와 보안문제를 해결하기 위한 프로토콜로 제안된 IDM3G[1]를 기반으로 보다 향상된 인증관리 프로토콜을 제안한다. 제안하는 <TEX>$I^2DM$</TEX> 프로토콜은 기존의 IDM3G 프로토콜이 MO를 통한 상호 인증을 수행하면서 발생시키는 부하를 모바일 인터넷 응용 서비스 제공자에게 일정 부분의 역할을 분산시킴으로써 모바일 및 서비스 제공자의 ID관리와 함께 네트워크 부하와 정보처리를 위한 프로세스 부하 그리고 송수신되는 패킷의 수를 보다 효율화한다. 향후 더욱 그 수요가 폭증할 것으로 예상되는 3G 이후의 모바일 네트워크에 대한 수요를 대비하여 보다 최적화된 프로토콜을 제안한다. Due to rapid spread of smart phones and SNS(Social Network Service), using of Internet applications has increased and taking up bandwidth more than 3G network's capacity recently. This caused reduction of speed and service quality, and occurred strong needs that backbone network company to increasing investment costs. Also a great rise of mobile network users causing identity management problems on mobile service provider through mobile network. This paper proposes advanced IDM3G[1] - to solve user ID management and security problems on mobile internet application services over 3G network and more - authentication management protocol. <TEX>$I^2DM$</TEX> protocol breakup loads which made by existing IDM3G protocol's mutual authentication via mobile operator, via sending some parts to internet application service provider, enhancing mobile and ID management of service provider and network load and process load from information handling and numbers of transmitting packets, to suggest more optimized protocol against further demanding of 3G mobile network.

Security for Web Services

This article discusses the main security requirements for Web services and it describes how such security requirements are addressed by standards for Web services security recently developed or under development by various standardizations bodies. Standards are reviewed according to a conceptual framework that groups them by the main functionalities they provide. Covered standards include most of the standards encompassed by the original Web Service Security roadmap proposed by Microsoft and IBM in 2002 (Microsoft and IBM 2002). They range from the ones geared toward message and conversation security and reliability to those developed for providing interoperable Single Sign On and Identity Management functions in federated organizations. The latter include Security Assertion Markup Language (SAML), WS-Policy, XACML, that is related to access control and has been recently extended with a profile for Web services access control; XKMS and WS-Trust; WS-Federation, Liberty Alliance and Shibboleth, that address the important problem of identity management in federated organizations. The article also discusses the issues related to the use of the standards and open research issues in the area of access control for Web services and innovative digital identity management techniques are outlined.

A Network-Economic Policy Study of Identity Management Systems and Implications for Security and Privacy Policy

Solving the problems associated with identity management in the “virtual” world is proving to be one of the keys to full realization of the economic and social benefits of networked information systems. By definition, the virtual world lacks the rich combination of sensory and contextual cues that permit organizations and individual humans interacting in the physical world to reliably identify people and authorize them to engage in certain transactions or access specific resources. Being able to determine who an online user is and what they are authorized to do thus requires an identity management infrastructure. Some of the most vexing problems associated with the Internet (the deluge of spam, the need to regulate access to certain kinds of content, securing networks from intrusion and disruption, problems of inter-jurisdictional law enforcement related to online activities, impediments to the sharing of distributed computing resources) are fundamentally the problems of identity management. And yet, efforts by organizations and governments to solve those problems by producing and consuming identity systems may create serious risks to freedom and privacy. Thus the implementation and maintenance of identity management systems raises important public policy issues. The identity management systems (the IMS-s) often tend to require more information from the consumers than would otherwise be necessary for the authentication purposes. The typical choice being analyzed in IMS is the one between a completely centralized or integrated system (one ID - one password, and a single sign-on) and the one comprising a plethora of (highly) specialized IMS-s (multiple ID-s and passwords). While the centralized system is the most convenient one, it is also likely to require too much personal information about the users, which may infringe on their rights to privacy and which definitely will result in serious damage should this personal information be stolen and/or abused. When more than two IMS-s interconnect (more of a practical side with various types of commercial values), they share the private information with each other, thus increasing consumers’ exposure to possible information misuse. It is thus rather obvious that the public policy plays an important role to maintain the structure of identity management systems ensuring the existence of a sound balance between the authentication requirements and consumers’ rights to privacy. The focus of this paper is on investigating this type of tradeoff by employing a theoretical framework with agents whose utility depends on the amount of private information revealed, and on making policy recommendations related to the issue of interconnection between alternative IMS-s. Our model derives optimal process of interconnection between IMS-s in the simple case of three IMS-s, then generalizing it to the case of more than three firms. The socially optimal outcome of the interconnection process in our model implies encouraging the interconnection between smaller rather than larger IMS-s.

FOAF: Connecting People on the Semantic Web

SUMMARY This article introduces the Friend Of A Friend (FOAF) vocabulary specification as an example of a Semantic Web technology. A real world case study is presented in which FOAF is used to solve several specific problems of identity management. The main goal is to provide some basic theory behind the Semantic Web and then attempt to ground that theory in a practical solution.

Microsoft .NET Passport and identity management

Abstract As part of its .NET initiative, Microsoft developed and is currently deploying a Web-based single sign-in (SSI) service called .NET Passport. In this article, we overview, discuss, and put into perspective Microsoft .NET Passport's SSI service. More specifically, we address the question whether Microsoft .NET Passport provides an appropriate solution for the user authentication and authorization or identity management problem on the World Wide Web (WWW).

Man-Boy Lovers:

Clinical experiences with 36 males, between the ages of 21 and 60 are described. All of them felt an enduring sexual attraction for boys. Sixteen males were treated for sexual identity conflicts. For eight of them this ended in a positive self-labeling as pedophile, the others had severe problems with accepting sexuality as positive and lustful. Twenty males were treated for identity management problems and counseled how to handle their relationships with boys. Several modalities of interpersonal interaction in man-boy relationships are proposed and the ways conflicts can arise within these frames of reference are explored in counseling and psychotherapy.