Secure Information Exchange Research Articles

Securing Smart City Services in Cyber-Physical Systems Using the Computation Annealed Selection Process

Cyber-physical systems in a smart city environment offer secure computations in addition to robust resources and secure information exchanges. From the security aspect, the selection of legitimate computing resources is considered the most trustworthy measure for preserving user and data privacy. However, the outlier information results in false computations and time-consuming privacy measures for smart city users. This article introduces the Computation Annealed Selection Process (CASP) for combating outlier information in cyber-physical system networks. This process is assimilated with different infrastructure units in the smart city in an adaptable fashion. The adaptive measure administers information and user privacy through mutual time-key-based authentication. Information privacy is endured until the smart city provider provides a valid service interval. W2The service interval is evaluated for its consistency in maintaining the privacy and is validated using decision-tree learning. The decision tree performs interval classification and key assignment recommendations. Based on the decisions, the privacy is either prolonged or withdrawn for the information exchanged between the users and service providers. This process is repeated until the end of the service interval, identifying the outlier information in legitimate intervals. The proposed process improves detection, legitimacy rate, interval time, and interval rate by 7.57%, 10.4%, 13.15%, and 7.59%, respectively.

Blockchain Technology Implementation for Medical Data Management in Malaysia: Potential, Need and Challenges

This study highlights several challenges along with the potential and need for blockchain technology implementation in the Malaysian healthcare industry context. The systematic review unearths potential technological, organizational, environmental, individual-level acceptance concerns and challenges associated with deploying blockchain to support electronic health records. As such, this research serves as the starting point for a chain of studies aiming at detecting, analyzing, and responding to such demands. The study is expected to guide policy and decision-making procedure of a secure and resilient health information exchange for healthcare stakeholders of developing nations such as Malaysia.

Secure and Privacy-Preserving Formation Control for Networked Marine Surface Vehicles With Sampled-Data Interactions

This paper proposes a cyber-physical framework consisting of the secure and privacy-preserving distributed impulsive-based estimator (DIE) algorithm and the local nonlinear control (LNC) algorithm to solve the cooperative formation tracking problem of networked marine surface vehicles (NMSVs) with sampled-data interactions and external disturbances. In the cyber layer, a secure and privacy-preserving information exchange scheme is proposed based on the Paillier cryptosystem such that the states of the virtual leader can be estimated in a secure and privacy-preserving way. In the physical layer, the LNC algorithm is designed with the utilization of the estimators in the cyber layer to achieve the formation tracking for the NMSVs with disturbance rejection ability. Sufficient conditions for guaranteeing the convergence and the stability of the closed-loop system are derived based on systematic analysis. Finally, numerical simulations are performed on Cyber-Ships II to verify the effectiveness of the main results.

An Efficient AES 32-Bit Architecture Resistant to Fault Attacks

The Advanced Encryption Standard cryptographic algorithm, named AES, is implemented in cryptographic circuits to ensure high security level to any system which required confidentiality and secure information exchange. One of the most effective physical attacks against the hardware implementation of AES is fault attacks which can extract secret data. Until now, a several AES fault detection schemes against fault injection attacks have been proposed. In this paper, so as to ensure a high level of security against fault injection attacks, a new efficient fault detection scheme based on the AES architecture modification has been proposed. For this reason, the AES 32-bit round is divided into two half rounds and input and pipeline registers are implemented between them. The proposed scheme is independent of the procedure the AES is implemented. Thus, it can be implemented to secure the pipeline and iterative architectures. To evaluate the robustness of the proposed fault detection scheme against fault injection attacks, we conduct a transient and permanent fault attacks and then we determine the fault detection capability; it is about 99.88585% and 99.9069% for transient and permanent faults respectively. We have modeled the AES fault detection scheme using VHDL hardware language and through hardware FPGA implementation. The FPGA results demonstrate that our scheme can efficiently protect the AES hardware implementation against fault attacks. It can be simply implemented with low complexity. In addition, the FPGA implementation performances prove the low area overhead and the high efficiency and working frequency for the proposed AES detection scheme.

THE TASKS OF SCALING CLOUD APPLICATIONS FOR THE EDUCATIONAL ENVIRONMENT OF UNIVERSITIES

It is shown that modern cloud technologies in education provide resources to students and teachers as online services. When using a cloud environment, the information will be stored in the cloud. In addition, you do not need to specifically install additional software on your personal computer. In this case, cloud technologies act as a highly effective tool that improves the quality of education and promotes greater mobility of students. It is proved that, speaking about the technical aspects and prospects for the development of cloud applications in the educational process of universities, it is necessary to pay attention to the critical characteristics of cloud solutions in terms of speed and security of information exchange. An algorithm for scaling cloud applications for the digital educational environment of the university, as well as for determining the execution time of a network request, is described. Based on information about the state of the digital educational environment, sets of rules for reactive scaling and evaluating the effectiveness of the university's digital educational environment are formed.

Integration Environment Software Module for Accumulation and Exchange of Digital Medical Data

Introduction. The development of effective digital medicine tools is an intensive and complex process that requires the interdisciplinary efforts of a wide range of experts, from scientists and engineers to ethics experts and lawyers. Digital medicine products have great potential for improving medical measurement, diagnosis and treatment. One of the main challenges for the healthcare sector is to address the issue of fast, convenient and secure exchange of information about patients’ health. Service-oriented architectures of such products may accomplish many of the challenges facing healthcare systems. The purpose of the paper is to develop an information and software module ExchangeDMD to ensure the accumulation, storage and exchange of diagnostic medical data in accordance with modern medical information standards to maintain the interoperability function as one of the leading principles of digital medicine. Results. A special adaptive architecture of digital medicine infrastructure has been developed, which enables an integrated solution of data exchange between participants of providing medical services, which is carried out with the help of web services. The specifics of different types of medical information are analyzed and taken into account in accordance with the access regime for its processing. The module structure has been developed and implemented in software, which has three main levels: central virtual storage (virtual data center to implement certain functions), remote administration segment (technical support and administration network) and user segment (mobile devices and user-patient applications). Conclusions. The ExchangeDMD information and software module is designed to ensure the accumulation of patient data, integration between the various units within the system, as well as to ensure the management of this data by health care personnel. The ExchangeDMD module is built using the international standard HL7 CDA, which enables formalizing electronic medical records using RIM (information model links) to attract the necessary directories and classifiers when creating medical records and documents.

Smartphone-based Handwritten Signature Verification using Acoustic Signals

Handwritten signature verification techniques, which can facilitate user authentication and enable secure information exchange, are still important in property safety. However, on-line automatic handwritten signature verification usually requires dynamic handwritten patterns captured by a special device, such as a sensor-instrumented pen, a tablet or a smartwatch on the dominant hand. This paper presents SonarSign, an on-line handwritten signature verification system based on inaudible acoustic signals. The key insight is to use acoustic signals to capture the dynamic handwritten signature patterns for verification. Particularly, SonarSign exploits the built-in speakers and microphones of smartphones to transmit a specially designed training sequence and record the corresponding echo for channel impulse response (CIR) estimation, respectively. Based on the sensitivity of CIR to the tiny surrounding environment changes including handwritten signature actions, SonarSign designs an attentional multi-modal Siamese network for end-to-end signatures verification. First, multi-modal CIR streams are fused to extract representative signature pattern features from spatio-temporal dimensions. Then an attentional Siamese network is elaborated to verify whether the given two signatures are from the same signatory. Extensive experiments in real-world scenarios show that SonarSign can achieve accurate and robust signatures verification with an AUC (Area Under ROC (Receiver Operating Characteristic) Curve) of 98.02% and an EER (Equal Error Rate) of 5.79% for unseen users.

Мережевий додаток безпечного обміну інформацією (SIENA) як інструмент у протидії кримінальним правопорушенням

The article is devoted to the establishment of cooperation relations between law enforcement agencies of Ukraine and Europol; the use of a network application of secure information exchange (SIENA), during the exchange of operational and strategic information. The problematic issues of the implementation of measures of international cooperation in the exchange of information between law enforcement agencies of Ukraine with Europol, while countering a criminal offense are considered. The main mechanisms for regulating the procedure for establishing, putting into operation and operating a secure communication line for the exchange of information between law enforcement agencies of Ukraine and Europol are disclosed. Disclosed the normative and legal content of the category “secure exchange of information”. Taking into account the goals, the author set himself the following tasks: to analyze the mechanism for the safe exchange of information, securing the right of law enforcement agencies of Ukraine to cooperate with Europol; consider theoretical doctrinal approaches to justify the general obligation of states to cooperate with each other. The analysis of the mechanism for the exchange of operational and strategic information in the implementation of interaction between the law enforcement agencies of Ukraine and Europol is carried out. The author substantiates the expediency of using the Secure Information Exchange Network Application (SIENA) as the main tool for the exchange of operational and strategic information while countering international crime. The article analyzes the statistics of Europol regarding the number of application messages (SIENA) exchanged between interested parties (including requests, responses to information, etc.). Examples of joint operations that have been successfully implemented with the help of modern tools of law enforcement agencies of the member states of the European Union are given. The problematic issues of the exchange of operational and strategic information using the network application (SIENA) between the law enforcement agencies of Ukraine and Europol are considered. Suggestions were made to improve the use of Europol instruments in the exchange of information.

A Blockchain-Based Distributed Authentication System for Healthcare

The use of digital health records, stricter health laws and the growing need for health records exchange points towards the need for an efficient security and privacy preserving mechanism. For Health Insurance management systems, multiple entities exchange health information which is used for decision making. Since multiple authoritative entities are involved, a secure and efficient information sharing protocol is required as extremely sensitive health information is exchanged among the entities. Hence this paper aims to put forward a novel a decentralized authentication system based on Blockchain known as Insurance Claim Blockchain (ICBChain) system. The proposed system ensures privacy of patients, provides secure information exchange and authentication of entities. An implementation of the proposed system is provided using Ethereum Blockchain. The security and performance analysis of the system shows its potential to satisfy Healthcare security requirements and its efficiency respectively

A Novel Encryption System Based on PGP Using Elliptic Curve Cryptosystem and Bézier Curve for Secure Information Exchange

This paper presents an approach to generating a secure ciphertext. Quadratic Bézier curve equation has been used in this paper to add more secure and complexity to elliptic curve cryptosystem. Proposed method using quadratic Bézier curve with ElGamal elliptic curve cryptosystem (ElGamal ECC). The idea of proposed method is encrypt the key that has been generated by public key in ElGamal elliptic curve cryptosystem by using quadratic Bézier curve equation based on PGP behavior. The proposed method have been more efficiency and complex. This method have been compared with different keys size to computing the randomness tests National Institute of Standards and Technology (NIST) and running time for the encryption and decryption process.

Real time secure messaging service for internet of things applications using MQTT

Most of the IoT applications require real time and secure exchange of information among connected devices and hence, currently, security of communication protocols is becoming key topic of research. MQTT, a lightweight communication protocol, is used for real time communication between networks. Authors have reviewed numerous published researches on secure MQTT protocol for IoT networks and have discovered security loop holes of MQTT communication protocol that are needed to be addressed. This article proposes a secure and real time MQTT protocol by incorporating SSL certificate to MQTT broker for IoT applications without data loss. The research has been implemented in Raspberry Pi 3B system using Python 3.4.10 development platform along with Numpy 1.11.1 and scipy 0.18.0 (for mathematical analysis), paho-mqtt 1.5.0 (for MQTT publication/subscription), and Chromium (for displaying research outcome). The outcome of this research shows that the proposed MQTT protocol has tighten security during exchanging information over IoT networks without any loss of data. IIUC Studies Vol.17, December 2020: 27-42

A Blockchain-Based Distributed Authentication System for Healthcare

The use of digital health records, stricter health laws and the growing need for health records exchange points towards the need for an efficient security and privacy preserving mechanism. For Health Insurance management systems, multiple entities exchange health information which is used for decision making. Since multiple authoritative entities are involved, a secure and efficient information sharing protocol is required as extremely sensitive health information is exchanged among the entities. Hence this paper aims to put forward a novel a decentralized authentication system based on Blockchain known as Insurance Claim Blockchain (ICBChain) system. The proposed system ensures privacy of patients, provides secure information exchange and authentication of entities. An implementation of the proposed system is provided using Ethereum Blockchain. The security and performance analysis of the system shows its potential to satisfy Healthcare security requirements and its efficiency respectively

Web-Based Apps for Responding to Acute Infectious Disease Outbreaks in the Community: Systematic Review.

BackgroundWeb-based technology has dramatically improved our ability to detect communicable disease outbreaks, with the potential to reduce morbidity and mortality because of swift public health action. Apps accessible through the internet and on mobile devices create an opportunity to enhance our traditional indicator-based surveillance systems, which have high specificity but issues with timeliness.ObjectiveThe aim of this study is to describe the literature on web-based apps for indicator-based surveillance and response to acute communicable disease outbreaks in the community with regard to their design, implementation, and evaluation.MethodsWe conducted a systematic search of the published literature across four databases (MEDLINE via OVID, Web of Science Core Collection, ProQuest Science, and Google Scholar) for peer-reviewed journal papers from January 1998 to October 2019 using a keyword search. Papers with the full text available were extracted for review, and exclusion criteria were applied to identify eligible papers.ResultsOf the 6649 retrieved papers, 23 remained, describing 15 web-based apps. Apps were primarily designed to improve the early detection of disease outbreaks, targeted government settings, and comprised either complex algorithmic or statistical outbreak detection mechanisms or both. We identified a need for these apps to have more features to support secure information exchange and outbreak response actions, with a focus on outbreak verification processes and staff and resources to support app operations. Evaluation studies (6 out of 15 apps) were mostly cross-sectional, with some evidence of reduction in time to notification of outbreak; however, studies lacked user-based needs assessments and evaluation of implementation.ConclusionsPublic health officials designing new or improving existing disease outbreak web-based apps should ensure that outbreak detection is automatic and signals are verified by users, the app is easy to use, and staff and resources are available to support the operations of the app and conduct rigorous and holistic evaluations.

Embedding the three pass protocol messages into transmission control protocol header

<span>Transmission control protocol provides reliable communication between two or more parties. Each transmitted packet is acknowledged to make sure successful deliveries. Transport layer security protocols send security information exchange as TCP loads. As results, the handshaking stage experiences longer delay as TCP acknowledgement process has already been delay prone. Furthermore, the security message transfers may have their own risks as they are not well protected yet. This paper proposes TCP-embedded three pass protocol for dynamic key exchange. The key exchange is embedded into TCP headers so that transmission delay is reduced, and message transfer is secured. The proposed protocol was assessed on self network by using socket programming in lossless environment. The assessments showed that the proposed protocol reduced three-pass protocol message transfer delay up to 25.8% on lossless channel. The assessment on security also showed that TCP-embedded three pass protocol successfully secured each transmitted TCP load using a unique key; that is much securer than the compared method.</span>

Data Transfer from Clinic to Clinic – Queensland Perspective

AbstractData transfer has been forced to evolve as digital technologies are implemented throughout various aspects of the healthcare system. Despite the uniqueness of both the geography and the population of Queensland, information exchange and data communication has continued to follow this evolutionary trend. There have been a number of different health reforms designed to integrate digital innovations and allow critical data and information to be shared with the appropriate health professionals when necessary. Strict healthcare legislation has been navigated and to provide newly upgraded technologies and processes while maintaining privacy, confidentiality and security standards. A large portion of the digital revolution has been the implementation of the national run project, the My Health Record and the state run project, the Integrated Electronic Medical Record. Both are platforms that allow secure information exchange allowing patients to have improved quality of care. To maintain the steady progress, both the state and federal governments have developed strategies and visions to help provide guidance and direct for ongoing and future digital projects. They also outline areas that require further advancements to ensure Queensland is delivering equitable, high quality healthcare.

Secure exchange of information using artificial intelligence and chaotic system guided neural synchronization

In this paper, a chaos-based neural synchronization has been proposed for the development of the public-key exchange protocol. A special neural network structure called Tree Parity Machine (TPM) is used for neural synchronization. Two TPMs accept the common input and different weight vector and update the weights using neural learning rule by exchanging their output. In some steps, it results in complete synchronization, and the weights of the two TPMs become identical. These identical weights serve as a secret key. There is, however, hardly some investigation to investigate the randomness of the common input vector used in the synchronization process. In this paper, logistic Chaos system based Tree Parity Machine (CTPM) is proposed. For faster synchronization, this proposed CTPM model uses logistic chaos generated random common input vector. This proposed CTPM model is faster and has better security than TPM with the same input, output, and hidden neurons. This proposed technique has been passed through a series of parametric tests. The results have been compared with some recent techniques. The results of the proposed technique have shown effective and robust potential.

Organization of the protected information exchange of the departmental system of electronic document management

A system of formalization the optimization problem of synthesizing the structure of the subsystem of secure information exchange is proposed, analyzes the application of known approaches, identifies the main stages and principles of solution in the interests of a distributed departmental electronic document management system.

A Pairing Free Identity Based Two Party Authenticated Key Agreement Protocol Using Hexadecimal Extended ASCII Elliptic Curve Cryptography

In wireless sensor network (WSN), the secure communication and exchange of confidential information between nodes is a challenging task. To eliminate the security flaws WSN adopts authenticated cryptography mechanisms. The authenticated key agreement protocol guarantees the reality of the users and negotiates the shared session key. In the past years, the two-way authentication scheme has been proved as a better approach for secure and energy efficient communication over Bin and Balls Authentication scheme, Timed Efficient Stream Loss-Tolerant Authentication scheme and so on. However, the recently established identity based protocols are associated with the flaws like inadequate security, high computation cost and latency in communication to a larger extent. The issues related to cost is raised because of the pairing and mapping functionalities in the state-of-the-art techniques. This paper proposes a pairing-free identity based two-party authenticated key agreement protocol based on hexadecimal extended ASCII Elliptic Curve Cryptography. The proposed scheme is developed in an adequate manner with the increased security strength and reduced cost. The security of this protocol is tightened by the extended ASCII code representation of the identity of the user. The performance of this protocol is compared with the Bin and Balls Authentication scheme, Loss-Tolerant Authentication scheme and recently proposed Ramachandran and Shanmugam scheme that show our scheme outperforms these three authentication schemes.

Chaos-Based Secure Communications in Biomedical Information Application

Recently, with the rapid development of biomedical information, establishing secure communication and appropriate security services has become necessary to ensure a secure information exchange process. Therefore, to protect the privacy and confidentiality of personal data, in this study, we use a chaotic system, Lü system of the Lorenz-like system, to generate chaotic signals and apply them to encrypt the biomedical information. In addition, with one of the states of the chaotic system, we design a simple proportional-derivative (PD) controller to synchronize the master-slave chaotic systems for decrypting the biomedical information. Then, we encrypt the biomedical information, electrocardiography (ECG) and electromyography (EMG), measured about 30 s to 60 s to get tens of thousands of data from the subjects at the transmitting side (master) and send them to the receiving side (slave). After the receiving side receives the encrypted information, it decrypts them with the PD controller and then obtains the 1 mV to 2 mV biomedical signals. Thus, the security of the biomedical information can be ensured and realized.

VANET-based Secure Information Exchange for Smart Charging

Smart inventions have led to smart grids, which have paved the way to smart charging means. This smart charging information about a vehicle needs to be properly maintained in order to use it to exchange information between charging stations and electric vehicles. In this work, we have introduced an efficient methodology for managing and disseminating energy from the charging station to the smart vehicle in an urban area where the number of electric vehicles is high. We have designed and implemented a novel concept involving mobile edge computing in VANET. Moreover, we have also used an effective mechanism for communicating the information on charging with the moving electric vehicles and servers. A local relay scheme is used for reducing redundant overheads, increase delivery efficiency of charging information. This scheme is implemented with delay wait model as the base. The output is recorded by means of simulation environment and based on the observations the proposed work is found to be optimal in maintaining, accessing and disseminating the charging information.