Secure Channel Research Articles

Authentication, Authorization, Access Control, and Key Exchange in Internet of Things

The Internet of Things (IoT) is a dynamic network of devices and infrastructure supporting instances composed to platforms being based on cloud/fog and blockchain technologies. Its intervention in more and more sensitive areas requires IoT entities (devices and platform instances) to communicate with each other via secure channels generally established by using cryptographical methods. This needs an authentic key exchange, which in turn requires an authentication process. Moreover, it has to be ensured that client entities can access only authorized services provided by authorized server entities. Additionally, requirements specifically introduced by IoT complicate realizing these security goals even more. This article introduces a novel approach providing authentication, authorization, access control, and key exchange in instance-to-instance, device-to-instance, and device-to-device communications to handle cloud/fog-based and blockchain-based platforms. In contrast to related work, realizations of these security goals are not disjunct processes and are integrated with each other in our approach combining zero-knowledge and identity-based schemes while meeting the IoT security requirements. Thus, it does not require any public data pre-distribution or secret pre-sharing between communicating entities, and no entity has to hold any device-specific or instance-specific data to be used for authentication or authorization. While supporting the autonomous character of IoT, our approach is independent of application and platform types without requiring additional components or procedures. Moreover, it is resistant to active man-in-the-middle attacks and does not include costly cryptographic operations. This article also demonstrates the high performance of our approach with regard to multiple affecting factors.

Fortifying Cyber Resilience

Ensuring secure communication between different zones during armed action is the main goal of this project. The majority of communications take place by wireless (satellite) means because this is the medium that attackers target the most. As such, it is the responsibility of the informing general officer to guarantee a secure communication channel. We now introduce the idea of ransomware, which is a type of software that prevents a user from accessing their data or device and then demands payment in order to unlock it.These days, ransomware assaults are more common due to the rise of cryptocurrencies. Crypto-ransomware, the most dangerous type of ransomware, encrypts the victim's important files and demands payment in ransom.Malware of the ransomware type encrypts computer files, rendering them unreadable by the user. After that, the attacker demands a ransom from the user in return for the key that unlocks the data, thus extorting them. Cybercriminals first infiltrate a system, encrypt all data, and then demand payment in bitcoin for the victim's decryption key. This is how ransomware operates. Some ransomware operators will employ multipleextortion tactics in addition to breaking into a system and inserting encryption malware. These tactics include copying and obtaining the unencrypted data, embarrassing the victim on social media, threatening further attacks like denial-of-service attacks, or disclosing the stolen data to customers or the dark web.

Utilizing Watermarking Technique for Detecting Data Leakage in Cloud Environment

Ensuring safety in dossier management is paramount due to the immense value of stored information. While hackers are often attributed to security breaches, the reality is that a significant portion of data loss stems from insiders. In traditional setups, the transfer of critical data from suppliers to trusted entities is a frequent occurrence. Preserving the security and integrity of these transactions is crucial to meeting the increasing demands of consumers. Any leakage of sensitive data exposes customers to potential risks from the outset. Therefore, establishing secure channels for data transfer between suppliers and recipients is imperative. This project proposes a solution for detecting data leaks using watermarking technology, which detects tampering attempts and identifies the source of leaked information. The system operates within a cloud environment, ensuring accessibility and scalability.

Selective comparison of verifiable online voting systems

AbstractThis paper aims to provide a guideline for identifying the most suitable online voting system under the given requirements and acceptable tradeoffs. We have selected twelve (more or less) well‐known online voting systems that rely on distinct cryptographic mechanisms for achieving security. For each of the systems, we summarized the key architectural and cryptographic ideas behind their design. Then, we analyzed the required trust assumptions for achieving the three most important security properties (i.e., verifiability, divided between cast‐as‐intended, recorded‐as‐cast, and tallied‐as‐recorded verifiabilities, privacy, and receipt‐freeness). To make a fair comparison, we did our analysis based on identical security definitions. Note that we selected wildly known and well‐accepted definitions, which are scheme‐neutral, to avoid any biases. Also, we discussed some of the most critical practical aspects of those systems, such as–the necessity for secure or anonymous channels, reliance on secure printer facilities and so forth. To facilitate the comparison, we suggested a unified naming convention for system elements based on their roles and functions. Then, based on the unified naming convention, we compared all twelve online voting systems for both the security properties and practical aspects. Finally, we summarized our observations regarding patterns and dependencies we observed, provided guidelines for selecting the online voting system, and gave recommendations regarding system design. We hope our work contributes to the online literature and facilitates the process of selecting the most suitable e‐voting system depending on the requirements of a specific election.

A Lightweight Chaotic Map-Based Key Agreement Scheme for the Advanced Metering Infrastructure

In the advanced metering infrastructure (AMI), impersonation, eavesdropping, man-in-the-middle and other attacks occur in the process of communication between entities through public channels, which will lead to the leakage of user privacy or the incorrect issuance of control instructions, resulting in economic losses and even power system operation failures. In view of this situation, we design a lightweight key agreement scheme based on a chaotic map for the AMI. We use the chaotic map to replace the time-consuming bilinear pairing and elliptic curve method and establish a secure communication channel between legal entities. In addition, we also design a multicast key generation mechanism for message transmission in AMI. The security analysis proves the security of the proposed scheme in the random oracle model, which can meet the security characteristics of anonymity and forward secrecy, and can effectively resist common attacks such as impersonation, replay and man-in-the-middle. The performance analysis results show that the proposed scheme requires lower computational and communication costs than related schemes, so it is more suitable for AMI scenarios with limited resources.

A Survey on Mutual Authentication and Key Agreement Scheme Combined with Migration Model For Peer to Peer Cloud

The demand for efficient and secure data exchange in Peer-to-Peer (P2P) cloud environments, this survey paper meticulously investigates the landscape of mutual authentication and key agreement schemes complemented by migration models. The seamless integration of these two essential components plays a pivotal role in fortifying the security infrastructure of P2P cloud systems. Our survey begins by providing an overview of the challenges and vulnerabilities associated with conventional P2P cloud architectures. Subsequently, delves into the diverse array of mutual authentication mechanisms, scrutinizing their strengths and weaknesses in the context of peer communication. Emphasis is placed on evaluating the adaptability of these schemes to dynamic P2P cloud environments, where nodes may frequently join or depart. In tandem with mutual authentication, the paper comprehensively explores key agreement schemes vital for establishing secure communication channels among peers. This scrutinizes various cryptographic protocols and algorithms, assessing their applicability in the P2P cloud paradigm. Furthermore, the survey investigates the efficacy of these key agreement schemes in ensuring confidentiality, integrity, and authenticity. A distinctive feature of this survey is its in-depth analysis of migration models integrated with mutual authentication and key agreement schemes. P2P cloud systems are inherently dynamic, necessitating the seamless movement of data and processes between peers. It examines migration strategies and their impact on security protocols, ensuring a holistic understanding of the intricate relationship between migration models and authentication mechanisms. The survey concludes by synthesizing the key findings, identifying current challenges, and proposing potential avenues for future research. By providing a comprehensive analysis of mutual authentication, key agreement schemes, and migration models, this survey aims to serve as a valuable resource for researchers, practitioners, and policymakers involved in enhancing the security and efficiency of P2P cloud environments

Efficient secure channel free identity-based searchable encryption schemes with privacy preserving for cloud storage service

Cloud storage is a basic service model of the cloud computing. Since the cloud data is stored in the ciphertext for the data confidentiality, how to search the cloud data again in ciphertext state for users is a natural requirement. The searchable encryption (SE) gives an efficient solution to achieve both the data confidentiality and the searchable requirement simultaneously. In SE schemes, the user can transfer a search trapdoor to the cloud server from a secure channel and the cloud server can use the received trapdoor to search the corresponding keyword ciphertext. Since the keywords are with low entropy, the traditional SE is vulnerable to keyword guessing attack. In order to remove the need of the secure channel and also to achieve the security against the keyword guessing attack, we build a single-user identity-based secure channel free SE scheme in the random oracle model by using lattice-based tools. Only the designated cloud server can finish the ciphertext search which means the secure channel between the user and the cloud server is not needed in the proposed scheme. Under the hardness of the learning with errors problem, we prove that the proposed scheme is ciphertext indistinguishable under the selective identity and chosen keyword attacks. Moreover, the proposed scheme also satisfies the trapdoor indistinguishability which directly leads to the security against the outside offline keyword guessing attack. Furthermore, we extend the proposed single-user scheme into the multi-user scenario. The proposed multi-user scheme inherits all functions achieved in the single-user scheme, such as secure channel free. Meanwhile, ciphertext length is fixed with the number of users increasing, which is more suitable for the large group users. In addition, we analyze the theoretical evaluation and experimental evaluation between the proposed schemes and some known literatures respectively. The results demonstrate that our proposed algorithms have several advantages in the both single-user and multi-user schemes, for example, the ciphertext lengths in the single/multi-user schemes are only 5.632KB and 6.016KB respectively and the running time of Test algorithm for any user groups is fixed to be 0.65ms in our simulated experiments.

A Systematic Review of Blockchain Technology Assisted with Artificial Intelligence Technology for Networks and Communication Systems

Blockchain is a very secure, authentic, and distributed technology and is very prominent in areas such as edge computation, cloud computation, and Internet-of-things. Artificial intelligence assists in the completion of activities efficiently and effectively by providing intelligence, analytics, and predicting capabilities. There is an obvious convergence between the two technologies. Artificial intelligence systems can utilize blockchain to establish trust in communication channels, ensuring that messages are securely transmitted and received without the need for a centralized intermediary. By leveraging blockchain, artificial intelligence systems can maintain an immutable record of communications, ensuring transparency and preventing unauthorized modifications. The integration of blockchain and artificial intelligence technologies can enhance the security, transparency, and privacy of communication systems. By leveraging blockchain’s decentralized nature and artificial intelligence’s analytical capabilities, secure and trustworthy communication channels can be established, benefiting various domains such as finance, healthcare, and supply chain. Overall, the integration of blockchain and artificial intelligence has the potential to offer several benefits, and as these technologies continue to evolve, new and innovative applications will continue to emerge.

Robust Channels: Handling Unreliable Networks in the Record Layers of QUIC and DTLS 1.3

The common approach in secure communication channel protocols is to rely on ciphertexts arriving in-order and to close the connection upon any rogue ciphertext. Cryptographic security models for channels generally reflect such design. This is reasonable when running atop lower-level transport protocols like TCP ensuring in-order delivery, as for example, is the case with TLS or SSH. However, protocols like QUIC or DTLS which run over a non-reliable transport such as UDP, do not—and in fact cannot—close the connection if packets are lost or arrive in a different order. Those protocols instead have to carefully catch effects arising naturally in unreliable networks, usually by using a sliding-window technique where ciphertexts can be decrypted correctly as long as they are not misplaced too far. In order to be able to capture QUIC and the newest DTLS version 1.3, we introduce a generalized notion of robustness of cryptographic channels. This property can capture unreliable network behavior and guarantees that adversarial tampering cannot hinder ciphertexts that can be decrypted correctly from being accepted. We show that robustness is orthogonal to the common notion of integrity for channels, but together with integrity and chosen-plaintext security it provides a robust analog of chosen-ciphertext security of channels. In contrast to prior work, robustness allows us to study packet encryption in the record layer protocols of QUIC and of DTLS 1.3 and the novel sliding-window techniques both protocols employ. We show that both protocols achieve robust chosen-ciphertext security based on certain properties of their sliding-window techniques and the underlying AEAD schemes. Notably, the robustness needed in handling unreliable network messages requires both record layer protocols to tolerate repeated adversarial forgery attempts. This means we can only establish non-tight security bounds (in terms of AEAD integrity), a security degradation that was missed in earlier protocol drafts. Our bounds led the responsible IETF working groups to introduce concrete forgery limits for both protocols and the IRTF CFRG to consider AEAD usage limits more broadly.

Android App for People with IDD to Report Abuse

Abuse is a significant concern within the Intellectual and Developmental Disabilities (IDD) community, often accompanied by communication challenges and vulnerability. Our project, the "Speak Up IDD" Android application, is designed to empower and safeguard individuals with IDD by offering a platform to educating them, reporting abuse and seek assistance. This innovative app addresses the urgent issue of abuse within the IDD community. "Speak Up IDD" focuses on providing individuals with IDD a means to express their concerns, ensuring their safety and well-being. The app features a user-friendly interface that caters to varying communication abilities. It offers diverse reporting options, including text-to-speech capabilities, symbol-based communication boards, and voice recognition, ensuring accessibility for users with diverse communication needs. The central function of the app revolves around abuse reporting. Users can confidentially report instances of abuse, whether physical, emotional, or neglect, through a secure and private channel. The app guides users through the reporting process, providing prompts and assistance while safeguarding their anonymity and protection. To further support users, "Speak Up IDD" includes real-time alerts and notifications that can be sent to designated contacts, such as caregivers, family members, or support organizations, ensuring swift responses to reported incidents. The "Speak Up IDD" app is more than just a reporting tool; it is a lifeline for those in the IDD community who are at risk of abuse. Its mission is to create a safer environment, raise awareness, and ensure that no individual with IDD suffers in silence. By providing them with the means to speak up, we aim to empower individuals with IDD, protect their rights, and foster a more supportive and secure community for all

Enhancing Security Mechanisms for IoT-Fog Networks

This study contributes to improving Morocco's fish canning industry by integrating artificial intelligence (AI). The primary objective involves developing an AI and image processing-based system to monitor and guarantee canning process quality in the facility. It commenced with an IoT-enabled device capable of capturing and processing images, leading to the creation of an AI-driven system adept at accurately categorizing improperly crimped cans. Further advancements focused on reinforcing communication between IoT devices and servers housing individual client's neural network weights. These weights are vital, ensuring the functionality of our IoT device. The efficiency of the IoT device in categorizing cans relies on updated neural network weights from the Fog server, crucial for continual refinement and adaptation to diverse can shapes. Securing communication integrity between devices and the server is imperative to avoid disruptions in can classification, emphasizing the need for secure channels. In this paper, our key scientific contribution revolves around devising a security protocol founded on HMAC. This protocol guarantees authentication and preserves the integrity of neural network weights exchanged between Fog computing nodes and IoT devices. The innovative addition of a comprehensive dictionary within the Fog server significantly bolsters security measures, enhancing the overall safety between these interconnected entities.

A secure multi-party payment channel on-chain and off-chain supervisable scheme

With the increasing demand for digital currencies and other blockchain transactions, the contradiction between the growing demand and the limited blockchain space has become increasingly prominent, and the scalability of the blockchain urgently needs to be resolved. The existing off-chain payment channel solutions do not give enough consideration to the multi-party parallel transaction process, and the transaction process lacks supervision, making it difficult to meet the actual demand. In this paper, we propose a multi-party secure, flexible, concurrent and supervisable off-chain payment channel scheme. Our scheme not only optimizes the current transaction process so that the participants and channel balance within the channel can be flexibly changed without affecting the normal transaction process, but also designs a multi-level collaborative supervision mechanism from multiple perspectives of positive and negative, active and passive, and multiple layers of on-chain and off-chain to ensure the safety and convenience of the transaction process. The security of the scheme was also analyzed, especially the possible collusion in the channel. We simulated the operation of the channel in the blockchain simulation and testing software Simblock and tested the scheme from various aspects. The experiments show that our scheme is able to achieve secure supervision within the channel with a modest overhead (about 15%). Testing of the mentioned smart contracts further illustrates the feasibility of the scheme.

A positive feedback mechanism? Institutional responsiveness to bribery reporting by citizens in 12 African countries

Paying bribes to access public services is a common form of corruption faced by citizens worldwide. A standard policy recommendation to address this problem is to create secure channels and encourage citizens to report bribery to authorities. Bribery reporting tools aim to decrease the incidence of bribery, but they could also serve to bolster anti-corruption commitment. Can bribery reporting channels also inspire citizens to fight corruption? This paper tests the claim that institutional responsiveness to bribery reporting triggers a positive feedback mechanism. The positive feedback mechanism refers to the proposition that advertising successful cases of institutional responsiveness not only persuades citizens of institutional commitment to fighting corruption but also inspires them to uptake various anti-corruption activities. The empirical strategy relies on Afrobarometer survey data from 12 countries, specifically focusing on individuals reporting bribery incidents who also answer a survey question about the subsequent actions taken by authorities. The paper assesses the persuasion effect by examining whether institutional responsiveness correlates with more positive perceptions of public institutions. Additionally, the paper assesses the inspiration effect by investigating whether this responsiveness is associated with citizens' willingness to take part in anti-corruption activities. The findings show that, even though those who have observed responsiveness to bribery reporting tend to evaluate public institutions more positively, they do not seem more willing to engage against corruption than those who do not observe responsiveness.

Hybrid QKD-based framework for secure enterprise communication system

This research paper proposes a hybrid quantum key distribution (QKD)-based framework for secure enterprise communication using post-quantum cryptography (PQC) and smart cards. The paper discusses the limitations of current PQC implementations and the need for a hybrid approach that combines classical non-PQC algorithms with quantum-resistant PQC algorithms to establish secure communication channels. The proposed framework utilizes point-to-point QKD links between quantum devices to establish a shared secret key, which is then used to encrypt and decrypt data using PQC algorithms. Smart cards are used for authentication and key synchronization to ensure the security of end-user devices. The paper also reviews relevant literature on QKD and PQC and discusses future work. The proposed framework offers a cost-effective and secure way for enterprises to communicate with each other.

Quantum Computing in Cryptographic Systems

Quantum computing represents a transformative advancement in computational power, with profound implications for cryptographic systems. This paper explores the intersection of quantum computing and cryptography, examining the potential for quantum computers to both break traditional cryptographic algorithms and enable new forms of secure communication. Classical cryptographic systems, such as RSA and ECC, rely on the computational difficulty of problems like integer factorization and discrete logarithms. However, quantum algorithms, notably Shor's algorithm, can solve these problems exponentially faster than the best-known classical algorithms, posing a significant threat to the security of current cryptographic practices. This vulnerability necessitates the development and implementation of quantum-resistant algorithms to ensure data security in a post-quantum world. The paper reviews the state-of-the-art in quantum-resistant cryptographic algorithms, including lattice-based, hash-based, code-based, and multivariate polynomial cryptography. These algorithms are analyzed for their security properties, efficiency, and practicality for real-world deployment. Additionally, the paper discusses the ongoing standardization efforts led by organizations such as NIST, which are crucial for establishing widely accepted quantum-safe cryptographic protocols. Beyond the threat posed by quantum computing, this paper also highlights the potential benefits quantum computing can bring to cryptographic systems. Quantum Key Distribution (QKD) is one such advancement, offering theoretically unbreakable encryption by leveraging the principles of quantum mechanics. QKD enables secure communication channels that are immune to any computational advances, including those of quantum computers, by ensuring that any attempt at eavesdropping can be detected. The practical implementation challenges of QKD and other quantum cryptographic protocols are also addressed, including issues related to transmission distance, error rates, and integration with existing communication infrastructures. Experimental results from recent QKD trials are presented, showcasing significant progress in extending the viability of quantum-secure communication over long distances. Furthermore, the paper delves into the hybrid approaches combining classical and quantum cryptographic techniques. These approaches aim to leverage the strengths of both paradigms to enhance security and performance. For instance, hybrid protocols might use classical encryption for bulk data transfer, supplemented by quantum techniques for key exchange, thereby ensuring robust security even against future quantum adversaries. In conclusion, while quantum computing poses substantial risks to existing cryptographic systems, it also offers novel opportunities for creating highly secure communication protocols. The transition to quantum-safe cryptography is imperative to protect sensitive information in the quantum era. This paper underscores the urgency of advancing quantum-resistant cryptographic research, promoting international collaboration for standardization, and exploring innovative applications of quantum technologies in cryptography. Continued research and development in these areas are essential to stay ahead of the evolving threat landscape and harness the full potential of quantum computing for secure communications.

Federated and Online Dynamic Spectrum Access for Mobile Secondary Users

Users in dynamic spectrum access (DSA) with federated reinforcement learning (FRL) autonomously access channels, avoiding centralized coordination and protecting users’ privacy. However, existing FRL-based DSA mechanisms are limited to ideal network states, i.e., assuming that channel states and users’ interference relationships are unchanged. Besides, users should upload intermediate results simultaneously for federated aggregation. The above conditions are impractical for mobile users since their network states and locations are unstable. Meanwhile, newly connected users have to train their models through local data with numerous computing resources since global models are unsuitable for them. We propose FRDSA, an FRL-based secure and lightweight channel selection mechanism in DSA for mobile users under dynamic network states. An independent channel selection environment with a virtual group strategy is presented to avoid interference between users under unstable channel states. Furthermore, an asynchronous parameter aggregation method in FRDSA dynamically adjusts the aggregation factors without users simultaneously uploading intermediate results. Simulations based on real trajectory data show that FRDSA significantly reduces approximately 60% interference between mobile users under unstable network states. Newly connected users can directly apply the well-trained global model to access channels autonomously instead of retraining a model, effectively reducing mobile users’ computing resource requirements.

Fortifying Connected Vehicles Based Cybersecurity Measures for Secure Over-the-Air Software Updates

The emergence of connected vehicles has transformed the automotive sector by enhancing the vehicle’s functionality, efficiency, and safety. The performance and security of these vehicles significantly rely on the deployment of the over-the-air software update. However, the execution of OTA comes with many challenges, especially with regard to security vulnerabilities and risks. The current paper delves into the complexities of the secure OTA software update for connected vehicles addressing the most critical issues; authentication; encryption and integrity verification, and risk management. Through advanced cryptographic methodologies, stringent authentication processes, and secure communication channels, automotive manufacturers and other service providers can guarantee the integrity and confidentiality of the updates, and consumers’ data from malicious attack. Moreover, the paper explores the regulatory and other standards-related matters that control the use of OTA in the automotive sector. An understanding of the secure OTA update mechanisms aids the stakeholders in establishing a resilient connection in connected vehicles boosting consumer trust and the future of the automobiles industry.

Path Prediction Optimization and Secure Traffic Management Using VANET

There has been a significant growth in the number of private automobiles in the previous decade as a result of technological advancements and changes in people’s lifestyles. This creates a major problem of congestion main reason being the transportation infrastructure’s inadequately construction and maintenance, which is the case in most major cities. By broadcasting the vehicle’s current location and surroundings in real time to other adjacent cars and roadside devices, VANETs may help alleviate traffic congestion by using intelligent algorithms to anticipate and avoid potential bottlenecks on the route. This can also be used to predict the shortest path from initial location to destination making it easy for the drivers in the choosing the right path. To implement all these functionalities, we need a robust and secure communication channel and also an intelligent and complex algorithm. Our aim is to predict a lane with least probability of accidents and find the shortest path with least travelling time and congestion. This keeps the user informed regarding the surrounding scenario’s and makes more coordinated, safer, and optimal use of transport networks.

Internet Traffic Privacy Enhancement with Masking: Optimization and Trade-Offs

An increasing number of recent experimental works have demonstrated that the supposedly secure channels in the Internet are prone to privacy breaking under many respects, due to packet traffic features leaking information on the user activity and traffic content. We aim at understanding if and how complex it is to obfuscate the information leaked by packet traffic features, namely packet lengths, directions, times: we call this technique traffic masking. We define a security model that points out what the ideal target of masking is, and then define the optimized traffic masking algorithm that removes any leaking (full masking). Further, we investigate the trade-off between traffic privacy protection and masking cost, namely required amount of overhead and realization complexity/feasibility. Numerical results are based on measured Internet traffic traces. Major findings are that: i) optimized full masking achieves similar overhead values with padding only and in case fragmentation is allowed; ii) if practical realizability is accounted for, optimized statistical masking attains only moderately better overhead than simple fixed pattern masking does, while still leaking correlation information that can be exploited by the adversary.

Desktop aplikacija za razmenu kriptozaštićenog govora

Introduction/purpose: All data exchanged over the Internet as well as other computer networks should be considered exposed to various types of security threats. In light of this, the transmission of voice over applications that do not use any type of crypto-protection allows anyone to discern the content of communication. Since voice transmission requires as little delay as possible, various protocols are used to enable crypto protected real-time communication. This paper presents one solution in a desktop application variant. Methods: The essence in voice exchange systems as well as in other systems where real-time communication is necessary is the establishment of a crypto-protected session which is a virtual secure channel for communication to which only the communicating parties have access. Voice sessions in the application are established with the SIP (Session Initiation Protocol) protocol. The sessions are further protected using the ZRTP (Zimmerman Real-time Transport Protocol) protocol. FusionPBX was used as the SIP server (registrar) for testing purpouses. The application is developed in C++ language using the Qt framework. Results: The final version of the application demostrates that ZRTP and SIP protocols are well suited for establishing crypto protected voice communications with low delay. Conclusion: This solution provides cryptographic functions for data secrecy and the management of cryptographic keys. Improving the solution with digital signatures and certificates will result in additional cryptographic functions: data integrity and personal identification. With this improvement, this solution will be able to withstand modern security threats with low delay.