Remote User Access Research Articles

Design of proactive management system for residential buildings by using smart equipment

This study's object is an energy efficiency of residential sector. The work is aimed at solving the task to improve the energy efficiency of the housing sector by devising technical solutions for monitoring and managing energy consumption and microclimate parameters of buildings. The proposed proactive management system for residential buildings consists of multi-sensors measuring CO2, temperature and humidity, smart meters of heat and electricity consumption, and smart plugs. The equipment is combined into single system through an integration controller with remote user access through an interactive web interface. A feature of the technical solution is the ability to collect, process, visualize, and archive data on the consumption of energy, as well as on the key parameters of the microclimate of residential premises. The advantages of the system are its flexibility due to the possibility of integrating additional devices during operation, as well as the use of standard communication protocols, which enables the interchangeability of component elements. The implementation and testing were carried out under the conditions of a real pilot site. The use of the system in practice confirmed the efficiency and stability of the operation, making it possible to obtain data on the parameters of energy consumption and microclimate and devising recommendations for reducing energy consumption at the pilot site. It was established that the microclimate meets the requirements of the standards (air temperature is about 22 °С while relative humidity does not exceed 60 %). Decrease in energy consumption can be achieved by reducing the temperature of the heat carrier in the absence of residents, as well as by considering the influence of weather conditions. During periods of residents activity, an excess of the permissible level of CO2 was recorded, therefore, automatic ventilation systems should be provided in the apartments

A High-Fidelity Unity Simulator for ROV Pilot Training

Work-class ROVs are essential vehicles for subsea inspection, maintenance, and repair tasks. To improve ROV piloting skills, a virtual environment can be exploited to train pilots in underwater operations without the logistical and financial expenses of actual sea deployments. This paper presents a high-fidelity ROV simulator for pilot training, utilizing the Unity framework for photorealistic scene rendering. The simulator integrates with ROS for control tasks and is accessible via a WebSocket TCP/IP package, enabling remote user access. A practical application is demonstrated, where a simulated work-class ROV (Merlin ROV) engages with a visually rendered scene of a subsea installation in the North Sea. The simulation framework aims to bridge the gap between virtual training and real-world operations by providing realistic graphics and accurate control dynamics. This work highlights the potential of game engine-based simulators in advancing the capabilities and efficiency of ROV pilot training.

Architecting an Open-Source IIoT Framework for Real-Time Control and Monitoring in the Bioleaching Industry

Electronic waste (e-waste) contains toxic elements causing an important impact on environmental and human health. However, the presence of valuable metals, such as copper or gold, among others, make recycling a necessity for obtaining an alternative source of raw materials. Conventional metal recovery methods are environmentally unsound, prompting the exploration of greener alternatives like bioleaching, which utilizes the activity of microorganisms for a more sustainable recovery. However, the mechanisms involved in the process and the conditions to optimize the metabolic paths are still not completely known. Monitorization and automatization of the different stages composing the global process are crucial for advancing in the implementation of this novel technology at an industrial scale. For the first time, an open-source industrial IoT system is designed to enhance and regulate bioleaching by implementing real-time monitoring and control within the plant’s infrastructure. This system includes an Android app that displays real-time plant data from sensors and a robust server featuring a flexible application programming interface (API) for future applications. The app caters to specific needs such as remote sensor reading, actuator control, and real-time bioleaching alerts, ensuring secure access and proactive event management. By utilizing collected data, it minimizes downtime, equipment failures, and supply chain disruptions. The server maintains seamless communication with the plant controller, enabling efficient pump activation and sensor data transmission. A telegram bot demonstrates the API’s flexibility by forwarding plant alerts to users. During validation with concurrent remote user access, the application demonstrated its ability to prevent irreversible plant failures through an advanced alarm system. Ultimately, this IIoT system amplifies plant performance, safety, and efficiency by optimizing processes and decision-making capabilities. It emerges as a pivotal open-source tool, securing remote oversight and management of large-scale bioleaching plants, promising adaptability for future enhancements.

A Light Weight Temper Resistance Client File in an External Memory for Remote User Authentication and Access Control

This research proposes a lightweight tamper resistant client file in an external memory as an alternative to smart card for remote user authentication and access control. The benefit of using this special client file is portability and ease of acquirement, especially in school online portals, online resources portals, and e-commerce portals. The characteristics and design considerations that make smart card tamper resistant are reviewed. Techniques and characteristics to make a client file in an external memory to exhibit a lightweight tamper resistant property has been formulated. The Kumari et al.'s scheme, which is the latest research that uses external memory for remote user authentication, has been reviewed. The basic system design and software design of the proposed client file is presented and modeled. This will enable implementation of the proposed system using any prepared programming or scripting language of one's choice. The proposed scheme and reviewed scheme are also evaluated for efficiency, tamper resistance, and impersonation attack.

Improvement of the Regulatory Framework of Information Security for Terminal Access Devices of the State Information System

The aim of the study is to increase the effectiveness of information security management for state information systems (SIS) with terminal access devices by improving regulatory legal acts that should be logically interconnected and not contradict each other, as well as use a single professional thesaurus that allows understanding and describe information security processes.Currently, state information systems with terminal access devices are used to ensure the realization of the legitimate interests of citizens in information interaction with public authorities [1].One of the types of such systems are public systems [2]. They are designed to provide electronic services to citizens, such as paying taxes, obtaining certificates, filing of applications and other information. The processed personal data may belong to special, biometric, publicly available and other categories [3]. Various categories of personal data, concentrated in a large volume about a large number of citizens, can lead to significant damage as a result of their leakage, which means that this creates information risks.There are several basic types of architectures of state information systems: systems based on the “thin clientpeer-to-peer network systems; file server systems; data processing centers; systems with remote user access; the use of different types of operating systems (heterogeneity of the environment); use of applications independent of operating systems; use of dedicated communication channels [4]. Such diversity and heterogeneity of state information systems, on the one hand, and the need for high-quality state regulation in the field of information security in these systems, on the other hand, require the study and development of legal acts that take into account primarily the features of systems that have a typical modern architecture of “thin customer". Materials and research methods. The protection of the state information system is regulated by a large number of legal acts that are constantly being improved with changes and additions to the content. At the substantive level, it includes many stages, such as the formation of SIS requirements, the development of a security system, its implementation, and certification. The protected information is processed in order to enforce the law and ensure the functioning of the authorities. The need to protect confidential information is determined by the legislation of the Russian Federation [5, 6]. Therefore, to assess the quality of the regulatory framework of information security for terminal access devices of the state information system, the analysis of the main regulatory legal acts is carried out and on the basis of it, proposals are developed by analogy to improve existing regulatory documents in the field of information security.Results. The paper has developed proposals for improving the regulatory framework of information security for terminal access devices of the state information system- for uniformity and unification, the terms with corresponding definitions are justified for their establishment in the documents of the Federal Service for Technical and Export Control (FSTEC) or Rosstandart;- rules for the formation of requirements for terminals, which should be equivalent requirements for computer equipment in the “Concept for the protection of computer equipment and automated systems from unauthorized access to information ".Conclusion. General recommendations on information protection in state information systems using the “thin client" architecture are proposed, specific threats that are absent in the FSTEC threat bank are justified, and directions for further information security for the class of state information systems under consideration are identified. Due to the large number of stakeholders involved in the coordination and development of unified solutions, a more specific consideration of the problems and issues raised is possible only with the participation of representatives of authorized federal executive bodies and business representatives for discussion.

Digital Platform for Distance and On-site Engineering Learning

This paper considers the experience of elaborating and implementing an on-site and distance practical study of electronics and circuit Engineering in the educational process. Authors provide possibilities of using both distance and on-site laboratory practical works. The paper includes recommendations for choosing hardware-based solutions. It also shows the implemented version of remote user access to individual data of laboratory research, which provides individualization of obtaining experiment data, when using FTP means of data transfer. Data from a remote experiment, in this case, is completely closed from access by third parties, while the teacher is given access to data from experimental studies of all students. The solution was implemented in the LabVIEW platform, as well as the general solution for implementing software access to a remote bench. The paper describes the main elements of the hardware and software system, shows its structure and presents the work examples. It also notes the integration of the LabVIEW software and the Multisim circuit and system simulating platform, which serves to improve the quality of specialists training during distance and on-site practical works. The authors consider several options for conducting distance and on-site laboratory practical works when preparing laboratory layouts for use. The work of students, both distance and on-site, as well as teacher-student interaction, is organized using the MOODLE platform.

Development of the distributed information system for the cooperative work under the design and optimizationof charged particle accelerators

A problem of the development of distributed information system for carrying out numerical experiments in the purpose of design and optimizations of charged particle accelerators is discussed. The infrastructure of a considered informational system should provide an effective methods for organizing calculations, storing, sharing, exchanging and analyzing the results of numerical experiments and data, remote user access to the system for group of researchers. To achieve this aim we proposed distributed architecture based on independent components: database server, high-performance distributed calculation services, web interface that provides tools for interaction of users with information system. To ensure flexible changing of models we proposed the ”lazy filling” conception of database table.

Application of Light Sensors Amplifier and Wireless Networking Sensor for Ambient Light Data to the Android Platform

Modern technologies of growing different plants types in greenhouses envisage automated systems use for monitoring climatic parameters, on which the ripening of fruits and yields depend. At the development and application of such automated systems, the focus is on measuring the accuracy of temperature and humidity soil, whereas to determine the level of illumination used sensors, that measure the total illumination or Photosynthetic Active Radiation (400-700 nm) with error up to 20%. Under conditions of insufficient photon flux density, even at the optimal moisture level and temperature in the greenhouse, fruiting and crop yields may not achieve high performance. This article proposes a greenhouse lighting control system in which the LI-200R Pyranometer and LI-190R-BL Quantum Sensor measure not only total illumination from the wavelength of 400–1000 nm, but also PPFD from a wavelength of 400–700 nm. Light Sensor Amplifier provides an increase in the source signal of the measuring sensors and reduces their measurement error to 1%. The applied SMART Connectivity Platform ESP8266 Version ESP 07 is more robust to interference and ensures the transfer of measured data to the server. Created software application for smartphones with Android OS, ensures remote user access to the database via the Internet for remote control and analysis of climatic indicators in the greenhouse. The proposed illumination control system in the greenhouse contributes to the improvement of precision farming.

APS Data Management System.

As the capabilities of modern X-ray detectors and acquisition technologies increase, so do the data rates and volumes produced at synchrotron beamlines. This brings into focus a number of challenges related to managing data at such facilities, including data transfer, near real-time data processing, automated processing pipelines, data storage, handling metadata and remote user access to data. The Advanced Photon Source Data Management System software is designed to help beamlines deal with these issues. This paper presents the system architecture and describes its components and functionality; the system's current usage is discussed, examples of its use have been provided and future development plans are outlined.

Advanced formal authentication protocol using smart cards for network applicants

The rapid growth of internet technologies has provided various functions that allow easy remote user or customer access to its many systems. However, the responsibility of the system does not end after providing access to such remote users. The framework must consummate a precise level of security, because otherwise, an adversary may be able to disrupt the system or use its resources without authorization. This affects the system and its clients directly or obliquely, and to restrict access, an authentication scheme must be implemented. Recently, Nikooghadam et al. proposed an authentication and key agreement protocol and illustrated how it would be secure against various types of security attacks. In this study, we show that their proposed system is susceptible to insider, replay, and password-guessing attacks. We propose a more secure authentication system that can withstand discrete attacks, and measure the total execution time to determine what realistic implementation is needed to carry out an entire scheme.

Fast Access to Remote Objects 2.0 a renewed gateway to ENEAGRID distributed computing resources

This paper introduces a renewed gateway to ENEAGRID distributed computing resources named Fast Access to Remote Objects 2.0 (FARO 2.0). FARO 2.0 is a tool for application and desktop virtualization with a focus towards user experience (UX), providing trained as well as untrained users with a collection of centralized services that can be seamlessly used on their client through a remote desktop protocol. FARO 2.0 is a JavaFX application whose graphical user interface (GUI) and whose main logics have been implemented through the well-known Web technologies (HTML5, CSS3, Javascript) for easier maintainability and customizability, taking full advantage of the WebView component. The FARO 2.0 framework has been deployed both as a general purpose GUI for remote user access to ENEAGRID resources and as a specialized application or workflow-oriented GUI. They are applied in a set of applicative domains, ranging from materials science to technologies for energy and industry, environmental modeling, and nuclear fusion. Some examples and results are also presented.

Comparative Analysis of Smart Card Authentication Schemes

Various kinds of authentication schemes have been deployed to secure the information or resources from unauthorized access. In these schemes, server maintains a verification table which is vulnerable to a variety of attacks. To withstand the possible attacks for verification table, smart card based authentication scheme has been proposed as an alternative solution. Smart card is a small, tamper-resistant device providing users with a convenient storage and processing capability, it is widely used for a range of applications such as remote user login, online banking, ID verification, access control and e-commerce etc. This article gives comparative analysis of major smart card authentication schemes for single server as well as multi-server environment.

Security flaw of Hölbl et al.’s protocol

Recently, Hölbl et al. [M. Hölbl, T. Welzer, B. Brumen, Improvement of the Peyravian–Jeffries’s user authentication protocol and password change protocol, Computer Communications 31 (2008) 1945–1951] have proposed an improvement of Peyravian–Jeffries’s user authentication protocol and password change protocol [M. Peyravian, C. Jeffries, Secure remote user access over insecure networks, Computer Communications 29 (5–6) (2006) 660–667]. Peyravian–Jeffries’s scheme suffers from an active off-line password-guessing attack [J. Munilla, A. Peinado, Off-line password-guessing attack to Peyravian–Jeffries’s remote user authentication protocol, Computer Communications 30 (1) (2006) 52–54], and Hölbl et al. state that their improved protocol overcomes this weakness. However, we show in this paper that although this proposed protocol prevents this active attack, it remains vulnerable to a passive (simpler) off-line password-guessing attack.

Improvement of the Peyravian–Jeffries’s user authentication protocol and password change protocol

Remote authentication of users supported by passwords is a broadly adopted method of authentication within insecure network environments. Such protocols typically rely on pre-established secure cryptographic keys or public key infrastructure. Recently, Peyravian and Jeffries [M. Peyravian, C. Jeffries, Secure remote user access over insecure networks, Computer Communications 29 (5–6) (2006) 660–667] proposed a protocol for secure remote user access over insecure networks. Shortly after the protocol was published Shim [K.A. Shim, Security flaws of remote user access over insecure networks, Computer Communications 30 (1) (2006) 117–121] and Munilla et al. [J. Munilla, A. Peinado, Off-line password-guessing attack to Peyravian–Jeffries’s remote user authentication protocol, Computer Communications 30 (1) (2006) 52–54] independently presented an off-line guessing attack on the protocol. Based on their findings we present an improved secure password-based protocol for remote user authentication, password change, and session key establishment over insecure networks, which is immune against the attack.

Security flaws of remote user access over insecure networks

Remote user authentication based on passwords over untrusted networks is the conventional method of authentication in the Internet and mobile communication environments. Typical secure remote user access solutions rely on pre-established secure cryptographic keys, public-key infrastructure, or secure hardware. Recently, Peyravian and Jeffries proposed password-based protocols for remote user authentication, password change, and session key establishment over insecure networks without requiring any additional private- or public-key infrastructure. In this paper we point out security flaws of Peyravian–Jeffries’s protocols against off-line password guessing attacks and Denial-of-Service attacks.

Off-line password-guessing attack to Peyravian–Jeffries’s remote user authentication protocol

Recently, Peyravian and Jeffries [M. Peyravian, C. Jeffries, Secure remote user access over insecure networks, Computer Communications 29 (2006) 660–667] have proposed two set of protocols to perform remote user authentication and password change in a secure manner. The first set of protocols is based on hash functions, where no symmetric or asymmetric encryption scheme is applied. As Peyravian and Jeffries claim, these protocols suffer from an off-line password-guessing attack. They propose a second set of protocols based on Diffie–Hellman key agreement scheme to overcome the mentioned weakness. However, we show in this paper that this second set of protocols suffers also from the off-line password-guessing attack when a server impersonation attack is performed.

Secure remote user access over insecure networks

Remote user authentication based on passwords over untrusted networks is the conventional method of authentication in the Internet and mobile communication environment. Typical secure remote user access solutions rely on pre-established secure cryptographic keys, public-key infrastructure, or secure hardware. In this paper, we present secure password-based protocols for remote user authentication, password change, and session key establishment over insecure networks. The proposed protocols do not require the use of any additional private- or public-key infrastructure.