Secure Management Scheme Research Articles

A secure and lightweight data management scheme based on redactable blockchain for Digital Copyright

Traditional Digital Copyright (DC) management system faces a single point of failure, and has no strict traceability. Meanwhile, the current blockchain-based DC schemes take less consideration to the authenticity of DC information stored on the blockchain. Additionally, the full node storage overhead and computation overhead of information retrieval and traceability increase significantly with the number of blocks. Therefore, in this paper, we propose a secure and lightweight data management scheme based on the redactable blockchain for DC. Users generate their public and private keys, which provide a legitimate signature. Then, we propose a transaction control mechanism based on ECDSA, which means that the storage of DC information can only be accomplished by providing a legitimate and verifiable signature, including registration and transaction information. Furthermore, we adopt blockchain to record DC information and the chameleon hash algorithm to modify DC information stored on the blockchain when making DC transactions, while keeping the block headers unchanged. System analysis and experimental results confirm that our scheme can address a single point of failure and ensure the authenticity of the information. Meanwhile, our scheme effectively reduces full node storage overhead, and computation overhead of information retrieval and traceability.

Redactable Blockchain-Based Secure and Accountable Data Management

Blockchain provides trustworthy properties such as decentralization, traceability, and transparency, and has been applied in various fields. Given the complexity of guaranteeing the accuracy of the input data, erroneous data may be stored on the blockchain, making it hard to modify. As an effective solution, redactable blockchain allows on-chain data to be modified by introducing a chameleon hash function with a trapdoor, which enables on-chain erroneous data to be corrected. However, existing redactable blockchain solutions often require trusted third parties, have huge overhead, or lack effective accountability mechanisms to meet data security needs. Therefore, this paper proposes a secure, efficient and accountable data management scheme based on redactable blockchain. To cope with the possible frequent editing needs, we design an efficient and accountable distributed trapdoor recovery mechanism that reliably maintains data security while avoiding the security risks associated with centralized management. Various information during the trapdoor management process is also recorded on the chain as the basis for implementing accountability mechanisms. In addition, the one-time trapdoor technology allows the blockchain system to reduce the maintenance complexity of the system by eliminating the need to frequently update the system parameters when partial trapdoor information needs to be published. Theoretical and experimental results show that our scheme can achieve an efficient accountability mechanism while modifying the data on the chain at low cost.

The key security management scheme of cloud storage based on blockchain and digital twins

As a secure distributed ledger technology, blockchain has attracted widespread attention from academia and industry for its decentralization, immutability, and traceability characteristics. This paper proposes a cloud storage key security management scheme based on blockchain. To resist brute-force attacks launched by adversaries on ciphertexts, the scheme uses an oblivious pseudo-random function (OPRF) to generate randomized convergent keys and improve data confidentiality. Second, the scheme enhances the reliability of concurrent key management through a secret sharing mechanism, where convergent keys are split into key fragments and distributed on blockchain for storage. Even if a certain number of key fragments are lost or damaged, users can still recover complete key information through block transaction records. In addition, the scheme effectively supports file-level and block-level data security deduplication. Security analysis and experimental performance evaluation indicate that this scheme can ensure the security of keys and the confidentiality of data, and it has a low computational overhead for generating file-level encryption keys under this scheme. Even for a 100 MB file, the computational overhead required for generating encryption keys is less than 2 s, which improves computational efficiency.

Security and Trust Management in the Internet of Vehicles (IoV): Challenges and Machine Learning Solutions.

The Internet of Vehicles (IoV) is a technology that is connected to the public internet and is a subnetwork of the Internet of Things (IoT) in which vehicles with sensors are connected to a mobile and wireless network. Numerous vehicles, users, things, and networks allow nodes to communicate information with their surroundings via various communication channels. IoV aims to enhance the comfort of driving, improve energy management, secure data transmission, and prevent road accidents. Despite IoV's advantages, it comes with its own set of challenges, particularly in the highly important aspects of security and trust. Trust management is one of the potential security mechanisms aimed at increasing reliability in IoV environments. Protecting IoV environments from diverse attacks poses significant challenges, prompting researchers to explore various technologies for security solutions and trust evaluation methods. Traditional approaches have been employed, but innovative solutions are imperative. Amid these challenges, machine learning (ML) has emerged as a potent solution, leveraging its remarkable advancements to effectively address IoV's security and trust concerns. ML can potentially be utilized as a powerful technology to address security and trust issues in IoV environments. In this survey, we delve into an overview of IoV and trust management, discussing security requirements, challenges, and attacks. Additionally, we introduce a classification scheme for ML techniques and survey ML-based security and trust management schemes. This research provides an overview for understanding IoV and the potential of ML in improving its security framework. Additionally, it provides insights into the future of trust and security enhancement.

A Federated Unlearning-Based Secure Management Scheme to Enable Automation in Smart Consumer Electronics Facilitated by Digital Twin

A Federated Unlearning-Based Secure Management Scheme to Enable Automation in Smart Consumer Electronics Facilitated by Digital Twin

A secure blockchain-enabled vehicle identity management framework for intelligent transportation systems

The need for secure and reliable identity management and authentication scheme for vehicles is becoming increasingly prominent with the digitization of the Intelligent Transportation System (ITS) in smart cities. Today, ITS is extensively acknowledged and employed in a variety of nations. Several existing ITS solutions in smart cities have observant limitations such as trust, security, threats, and centralization platform that can be vulnerable to the authentication and validation of vehicles. The differentiation in compatibility and requirement of IoT-based applications/services produced different challenges for establishing a uniform standard for data exchange, data usage, encoding mechanisms, and data storage for the identity management of vehicles. In this paper, identity generation and management methods are proposed using Blockchain to address existing challenges in ITS applications prevailing with the security of existing identity management and authentication of vehicles. The proposed solution focuses mainly on assurance of the validity of Personal Identification Information (PII) used for producing identity and usability of the application to make the solution suitable to raise the vehicle administration in the ITS. The experiment results and performance analysis represent that the proposed method ensures the correctness and validity of the PII and ensures the reliability and trustworthiness of such identity by securing the correct mapping of a user.

A Secure Interoperability Management Scheme for Cross-Blockchain Transactions

Blockchain technology has recently attracted tremendous interest due to its potential to revolutionize the industry by achieving decentralization while increasing the number of data sources, transparency, reliability, auditability, and trustworthiness. However, one of the major barriers to the widespread adoption of blockchain applications is the lack of mutual consensus and management across blockchains. Cross-blockchain consensus refers to one blockchain network reaching a consensus with another blockchain network to provide the ability to interact and share data. In this paper, we propose a secure management scheme with symmetric cross-blockchain communication and certificateless signature primitives, in which two heterogeneous blockchains are linked by a relay chain to simultaneously deliver cross-blockchain transaction security, achieve compatibility among various blockchains, and ensure the consistency of data exchanged, in practice. Additionally, our evaluation and security analysis shows the practicability and security of our proposed management scheme and demonstrates that a common test platform based on Ethereum can achieve acceptable computation costs.

Secure Vehicular Platoon Management against Sybil Attacks.

The capacity of highways has been an ever-present constraint in the 21st century, bringing about the issue of safety with greater likelihoods of traffic accidents occurring. Furthermore, recent global oil prices have inflated to record levels. A potential solution lies in vehicular platooning, which has been garnering attention, but its deployment is uncommon due to cyber security concerns. One particular concern is a Sybil attack, by which the admission of fake virtual vehicles into the platoon allows malicious actors to wreak havoc on the platoon itself. In this paper, we propose a secure management scheme for platoons that can protect major events that occur in the platoon operations against Sybil attacks. Both vehicle identity and message exchanged are authenticated by adopting key exchange, digital signature and encryption schemes based on elliptic curve cryptography (ECC). Noteworthy features of the scheme include providing perfect forward secrecy and both group forward and backward secrecy to preserve the privacy of vehicles and platoons. Typical malicious attacks such as replay and man-in-the-middle attacks for example can also be resisted. A formal evaluation of the security functionality of the scheme by the Canetti-Krawczyk (CK) adversary and the random oracle model as well as a brief computational verification by CryptoVerif were conducted. Finally, the performance of the proposed scheme was evaluated to show its time and space efficiency.

A blockchain-based credible and secure education experience data management scheme supporting for searchable encryption

With the in-depth application of new technologies such as big data in education fields, the storage and sharing model of student education records data still faces many challenges in terms of privacy protection and efficient transmission. In this paper, we propose a data security storage and sharing scheme based on consortium blockchain, which is a credible search scheme without verification. In our scheme, the implementation of data security storage is using the blockchain and storage server together. In detail, the smart contract provides protection for data keywords, the storage server stores data after data masking, and the blockchain ensures the traceability of query transactions. The need for precise privacy data is achieved by constructing a dictionary. Cryptographic techniques such as AES and RSA are used for encrypted storage of data, keywords, and digital signatures. Security analysis and performance evaluation shows that the availability, high efficiency, and privacy-preserving can be achieved. Meanwhile, this scheme has better robustness compared to other educational records data sharing models.

Research on Clustering Management of Power Distribution Internet of Things Based on Trusted Blockchain

Since the topological structure of power distribution Internet of Things is getting more and more complicated, and the amount of new services, such as remote dynamic monitoring and two-way real-time interaction, has been increasing, it is urgent and necessary to study the clustering management technology of power distribution Internet of Things combined with its running scenarios, security requirements and dynamic access characteristics. In this paper, a clustering security management scheme of power distribution Internet of Things based on trusted blockchain is proposed. The clustering management and data communication of power distribution Internet of Things are conducted based on trusted blockchain, which can improve the security of data interaction.

Management of Schemes and Threat Prevention in ICS Partner Companies Security

An analysis of the recent major security incidents related to industrial control systems, revealed that most had been caused by company employees. Therefore, enterprise security management systems have been developed to focus on companies’ personnel. Nonetheless, several hacking incidents, involving major companies and public/financial institutions, were actually attempted by the cooperative firms or the outsourced manpower undertaking maintenance work. Specifically, institutions that operate industrial control systems (ICSs) associated with critical national infrastructures, such as traffic or energy, have contracted several cooperative firms. Nonetheless, ICT's importance is gradually increasing, due to outsourcing, and is the most vulnerable factor in security. This paper proposes a virtualized security management scheme for the resident cooperative firms in the industrial control infrastructure. Since such companies often cannot afford adequate investment in security, the scheme is to let an ICS company provide the virtualized system. One of its merits is the convenience of controlling a VDI server at the center. The cooperative firms were classified, based on their respective security levels, and statistics were collected throughout a four-year period for the results. This paper analyzes the policies and virtualization systems that have been applied to the security of the partner companies, which engaged in ICS security. A suitable model for ICS security was then proposed by analyzing their effects on the system efficiencies, based on the comparisons of the security inspection results obtained before and after virtualization. The proposed system is expected to contribute to industrial safety.

Correction to: LKM-AMI: A Lightweight Key Management Scheme for Secure two Way Communications between Smart Meters and HAN Devices of AMI System in Smart Grid

The original version of this article unfortunately contained mistakes.

Distributionally Robust Hydrogen Optimization With Ensured Security and Multi-Energy Couplings

Power-to-gas (P2G) can convert excessive renewable energy into hydrogen via electrolysis, which can then be transported by natural gas systems to bypass constrained electricity systems. However, the injection of hydrogen could impact gas security since gas composition fundamentally changes, adversely effecting the combustion, safety and lifespan of appliances. This paper develops a new gas security management scheme for hydrogen injection into natural gas systems produced from excessive wind power. It introduces four gas security indices for the integrated electricity and gas system (IEGS) measuring gas security, considering the coordinated operation of tightly coupled infrastructures. To maintain gas security under an acceptable range, the gas mixture of nitrogen and liquid petroleum gas with hydrogen is adopted to address the gas security violation caused by hydrogen injection. A distributionally robust optimization (DRO) modelled by Kullback-Leibler (KL) divergence-based ambiguity set is applied to flexibly control the robustness to capture wind uncertainty. The KL divergence-based ambiguity set defines uncertainties within a measured space which limits the shape of probability distributions. Case studies illustrate that wind power is maximally utilized and gas mixture is effectively managed, thus improving gas security and performance of IEGS. This work can bring many benefits: i) ensured gas security under hydrogen injection ii) low system operation cost and iii) high renewable energy penetration. It can be easily extended to manage injections of other green gases into IEGS.

LKM-AMI: A Lightweight Key Management Scheme for Secure two Way Communications between Smart Meters and HAN Devices of AMI System in Smart Grid

Smart Grid (SG) is a modernized power grid. Nowadays changing the power grid system into a smart grid is revolution and evolution. Owing to the widespread use of wireless communication technologies in Advanced Metering Infrastructure (AMI) of SG, security is one of the most significant and challenging problem. A specific feature of AMI systems is that it requires hybrid transmission modes of data which includes unicast, multicast and broadcast communication modes. Moreover, Smart Meters (SMs) and smart home appliances may have limited computing and storage capability and only authorized Home Area Network (HAN) appliances may communicate with SMs. Various key management systems have been presented to address these issues. However, performance and /or security issues are still exist in most of them. To meet these distinctive requirements and ensure confidentiality during communications in HAN of AMI, secure and robust key management scheme is required. This paper proposes a key management scheme tailored for HAN with significantly lower rekeying overhead and enhanced robustness which allows the SM and HAN devices to share a session key between them. In our scheme, when any smart device joins/leaves the system, there is no need to update the keys of existing devices. As a result, the rekeying cost is decreased to $$ \mathcal{O}(1) $$ . Compared with existing key management schemes, the proposed scheme achieves fast key distribution and message transmission between SM and the HAN devices while ensuring the privacy. The results illustrate that our scheme can outperform the related schemes in terms of rekeying cost while ensuring privacy protection.

Security and Privacy in IoT: A Survey

The Internet of Things (IoT) is a network of globally connected physical objects, which are associated with each other via Internet. The IoT foresees the interconnection of few trillions of intelligent objects around us, uniquely and addressable every day, these objects have the ability to accumulate process and communicate data about themselves and their surrounding environment. The best examples of IoT systems are health care, building smart city with advance construction management system, public and defense surveillance and data acquisition. Recent advancement in the technology has developed smart and intelligent sensor nodes and RFIDs lead to a large number of wireless networks with smart and intelligent devices (object, or things) connected to the Internet continuously transmit the data. So to provide security and privacy to this data in IoT is a very challenging task, which is to be concerned at highest priority for several current and future applications of IoT. Devices such as smart phone, WSNs and RFIDs etc., are the major components of IoT network which are basically resource constrained devices. Design and development of security and privacy management schemes for these devices is guided by factors like good performance, low power consumption, robustness to attacks, tampering of the data and end to end security. Security schemes in IoT provide unauthorized access to information or other objects by protecting against alterations or destruction. Privacy schemes maintain the right to control about the collected information for its usage and purpose. In this paper, we have surveyed major challenges such as Confidentiality, Integrity, Authentication, and Availability for IoT in a brief manner.

Privacy and Security Management in Intelligent Transportation System

Metropolitan transportation is a dynamic and non-linear complex system. In such a system, there are possibilities of altering, monitoring, forging, and accessing private, public, and resource information of depot staff and communicating agents by unauthorized agencies the metropolitan area. Existing solutions for the management of security and privacy of communicating agents in an intelligent public transportation system (IPTS) do not adapt to the dynamic occurrence of real-time event information. Therefore, existing solutions are insufficient to address the randomness and other characteristics pertaining to a non-linear complex system such as an intelligent transport system (ITS). To this end, in this article, we propose a privacy and security management scheme for ITS depot staff in a metropolitan area. This scheme provides privacy and security management in the transportation industry during the exchange of information regarding vehicle allocation, dispatch, revocation, financial, and maintenance. Absence of such an aforementioned scheme leads to anomalies such as impersonation of genuine staff and malicious and greedy staff. We use the emergent intelligence (EI) technique to collect, analyze, and share information, and take dynamic decisions during the security and privacy management of the depot staff in transport industries. The EI technique provides autonomy, flexibility, adaptiveness, robustness, self-organization, and evolution to address the randomness and behavior of a non-linear complex system pertaining to the transportation system in metropolitan areas. The proposed scheme is implemented using the Crypto++ package, and the results indicate that the scheme efficiently manages the security and privacy in transportation industries in metropolitan areas.

A Lightweight Secure Management Scheme for Energy Harvesting Dynamic Wireless Charging System

In recent years, electric vehicles with low cost and zero emission have been accepted and chosen by more and more people. In order to further shorten the charging time of electric vehicles, improve charging efficiency of electric vehicles and promote the development of green smart transportation, a new promising Energy Harvesting-Dynamic Wireless Charging (EH-DWC) system is currently much attracting extensive attention and research. EH-DWC system, on the one hand, can convert nature energy such as wind or solar nature energy into electricity energy by using energy harvesting technology, on the other hand, the system can directly provide charging service for the moving electric vehicle through wireless electromagnetic induction technology. However, during the charging process, since the electric vehicle and the EH-DWC need to communicate over an open wireless channel, it is inevitable to be attacked by some malicious, which can influence the charging process, privacy leakage or even property losses between the system and the electric vehicle. In this paper, we propose a lightweight secure management scheme for energy harvesting dynamic wireless charging system. The proposed scheme can achieve effective authentication, secure communication, privacy protection and reliable payment for the system. Moreover, considering that there are some weather that are not conducive to harvesting energy, the scheme divides the system into three different working states to ensure the safe operation. Finally, the security analysis and performance evolution prove our scheme is secure and efficient in the end of the paper.

Reliable AODV for DANET using Homomorphic Encryption Scheme

DANETs, when compared to MANETs, have high network density and mobility over time. To maintain a secure communication over DANET, requires the knowledge of mobility and complex key management scheme based on the topology change. Operation of DANETs can be categorized into two types based on the activity: 1. Activities requiring small key length 2. Activities requiring large key length. For disaster detection and emergency rescues, key length with reduced size (partial authentication mechanism) is preferable, whereas military operation or critical data sharing needs larger key size (complete authentication mechanism). The challenges for key management in DANETs include the identification of which routing information to be trusted, legitimate nodes with the key for conducting safety communication. Maintaining existing key management schemes over network density change leads to a complex routing and data handling methods.. In this paper we propose a novel approach of homomorphic encryption scheme for data communication security by combining network protocol steganographic security management scheme which reduces the critical information leakage in DANETs. The proposed algorithm helps to identify the distributed denial of service attack and identification of malicious nodes. The malicious activities in a group are identified by analysis of link failures, retransmission information encoded over application layers. In order to assure reliability, encoded data is used as a means to monitor, detect and remove malicious nodes from routing table. We conduct simulation experiments by using network simulator 3.26, Open street Map to verify that our method achieves significant improvement in preventing critical data leakage in presence of malicious nodes.

글로벌 해상공급사슬 보안 제도의 비교를 통한 국내 해운물류회사의 보안관리 정책에 관한 연구

According to the recent trend of advanced countries and international trade organizations, the strengthening of security and efficiency of international logistics such as airport, ship, port, railway has emerged as a major issue in the international community after 9.11 terrorist attacks and the establishment of an international logistics security system has been actively promoted to secure international trade safety net led by WCO(World Customs Organization), U.S. and EU. Especially, although the importance of cyber security risks related to MASS and vessel for carrying dangerous good is emphasized, it is still necessary to manage the safety of unit connection with nodes, to prevent security accidents and prevention plan has not been achieved. Therefore, in this study, the characteristics and characteristics of ship security management are analyzed and the weakness of ship security management scheme is analyzed. In addition, this study identified the concept and characteristics of global maritime supply chain security, the vulnerability of security risks and supply chain, analyzed the status of global maritime supply chain security systems related to international organizations, and drew up implications for global maritime supply chain security certification systems in major countries, and suggested policy improvement (proposals) for enhancing the competitiveness of shipping & logistics companies.

Secure and reliable certification management scheme for large-scale MANETs based on a distributed anonymous authority

This paper proposes a compromise-tolerant (t,n)-threshold certification management scheme for MANETs. Our solution allows to mitigate the impact of compromised nodes that participate in the certification service. In our design, certification management is achieved anonymously by an Anonymous Certification Authority (ACA). The latter is fully distributed into multiple disjointed coalitions of nodes whose structure is made hidden. This prevents an adversary from taking the control of the ACA by arbitrarily compromising t or more nodes. In other words, our proposal enhances the compromise-tolerance to more than the threshold number t of nodes without breaking down the whole certification system. As a result, our scheme requires a very smaller threshold than traditional schemes, which improves considerably the service availability. The experimental study shows a clear advantage over traditional threshold-based certification schemes by ensuring a significant positive compromise between security and availability of certification service.