Third-party Access Research Articles

Transition pathway for the city toward low-emission district heating system with heat auctions promoting third-party network access

Transition pathway for the city toward low-emission district heating system with heat auctions promoting third-party network access

Geopolitics, Privacy, and User Trust: TikTok

The paper uses a thorough review of the current literature, governmental materials, and information available on ByteDance as the major source for analyzing the link between geopolitical aspects, privacy concerns, and user engagement with businesses. The study found that the uncertainty surrounding TikTok’s data usage and the ongoing tensions between China and the United States leads to a decline in user trust. This is particularly evident in the e-commerce sector, where individual privacy concerns directly affect customers’ buying habits and commercial involvement. This phenomenon would directly impact TikTok’s international e-commerce expansion, as well as user engagement on the platform; ultimately affect the platform’s overall growth and revenue potential. The paper concludes with recommendations for enhancing data privacy on TikTok such as reducing data collection from minors, putting stricter regulations on third-party data access and being more transparent about their data policies.

Enhancing Network Security in Mobile Applications with Role-Based Access Control

In today's dynamic networking environment, securing access to resources has become increasingly challenging due to the growth and progress of connected devices. This study explores the integration of Role-Based Access Control (RBAC) and OAuth 2.0 protocols to enhance network access management and security enforcement in an Android mobile application. The study adopts a waterfall methodology to implement access control mechanisms that govern authentication and authorization. OAuth 2.0, a widely adopted open-standard authorization framework, was implemented to secure user authentication by allowing third-party access without exposing user credentials. Meanwhile, RBAC was leveraged to streamline access permissions based on predefined user roles, ensuring that access privileges are granted according to hierarchical role structures. The main outcomes of this study show significance towards the improvements in security enforcement and user access management. Specifically, the implementation of multi-factor authentication, session timeout mechanisms, and user role-based authorization ensured robust protection of sensitive data while maintaining system usability. RBAC proved effective in controlling access to various system resources, such as database operations which was presented in scenario of physical access to doors, while OAuth 2.0 provided a secure communication channel for authentication events. These protocols, working in tandem, addressed key issues like unauthorized access, data integrity, and scalability in network security policy enforcement. This research deduces that combining RBAC and OAuth 2.0 protocols in mobile applications enhances security posture, simplifies access management, and mitigates evolving threats.

An Analytical Study of Image Fusion Techniques in Image Processing for Data Security & Privacy

Security is one of the crucial one in the technologized world, because information grows rapidly day by day. As population grows every year, information shared over internet becomes higher than what we expect and it needs preservation of data because of third party or unauthorized access. There are several techniques and methods are introduced and implemented to protect the data about the users, but security was not upto the level of protecting the data what actually we need. This review article is written about the concepts and methods implemented by various researchers for securing the data using by different users to communicate with known user at destination point without any third-party access with the help of image fusion techniques.

A Nordic Perspective on Patient Online Record Access and the European Health Data Space.

The Nordic countries are, together with the United States, forerunners in online record access (ORA), which has now become widespread. The importance of accessible and structured health data has also been highlighted by policy makers internationally. To ensure the full realization of ORA's potential in the short and long term, there is a pressing need to study ORA from a cross-disciplinary, clinical, humanistic, and social sciences perspective that looks beyond strictly technical aspects. In this viewpoint paper, we explore the policy changes in the European Health Data Space (EHDS) proposal to advance ORA across the European Union, informed by our research in a Nordic-led project that carries out the first of its kind, large-scale international investigation of patients' ORA-NORDeHEALTH (Nordic eHealth for Patients: Benchmarking and Developing for the Future). We argue that the EHDS proposal will pave the way for patients to access and control third-party access to their electronic health records. In our analysis of the proposal, we have identified five key principles for ORA: (1) the right to access, (2) proxy access, (3) patient input of their own data, (4) error and omission rectification, and (5) access control. ORA implementation today is fragmented throughout Europe, and the EHDS proposal aims to ensure all European citizens have equal online access to their health data. However, we argue that in order to implement the EHDS, we need more research evidence on the key ORA principles we have identified in our analysis. Results from the NORDeHEALTH project provide some of that evidence, but we have also identified important knowledge gaps that still need further exploration.

Analysing and managing risk from third-party OAuth application access

Modern cloud application architectures allow users to dynamically grant third-party apps access to their cloud resources. When looking at a large, anonymised dataset of over 600,000 users and their approvals of over 43,000 applications, we found that organisations often are unaware of the magnitude of the access problems: on average, an organisation will grant 440 unique third-party apps access to Google data and resources; one organisation’s users approved 12,330 unique applications; out of all the approved applications, over 44 per cent have been granted access to either sensitive data or all data on the user’s Google Drive. The use of OAuth 2.0 has resulted in users creating numerous, unknown access paths from external third-party apps to organisations’ data and resources, in a way that is often hidden and unmanaged by organisations’ IT or security departments. In addition, the credentials granted to access users’ cloud data and resources often can be refreshed indefinitely. Security operations face challenges such as minimal to no tracking or management of these paths or credentials, along with immature or incomplete technical controls. This paper discusses an approach to understanding, assessing, analysing and managing third-party OAuth application risk, using anonymised real-world data as relevant examples, to provide prescriptive guidance on reducing risk associated with third-party applications.

Zenith Armor : Advancing Security with Zero Trust Measures

In an era of unprecedented digital connectivity and evolving cyber threats, traditional security paradigms have proven insufficient to safeguard sensitive information. This research paper introduces "Zenith Armor," a comprehensive exploration and implementation of Zero Trust Architecture (ZTA) in the realm of cybersecurity. The paper delves into the core principles of ZTA, emphasizing the imperative shift from implicit trust to continuous verification in securing organizational assets. "Zenith Armor" stands as a testament to the evolving landscape of security frameworks, challenging conventional models by prioritizing identity verification, least privilege access, micro-segmentation, and continuous monitoring. The framework not only mitigates the risks associated with unauthorized access but also addresses the lateral movement of threats within a network, enhancing overall resilience. This paper outlines the essential components of Zenith Armor, emphasizing its dynamic risk assessment capabilities, stringent access control policies, and encryption measures for safeguarding data. Additionally, the framework's applicability to diverse devices, coupled with user education initiatives, creates a robust security ecosystem. The implementation extends beyond traditional network perimeters, incorporating adaptive security measures, and continuous updates. Furthermore, "Zenith Armor" recognizes the significance of a proactive approach to security incidents. A well-defined incident response plan, coupled with vendor and third-party access controls, ensures a swift and effective response to potential breaches. The research paper concludes with a reflection on the transformative potential of "Zenith Armor" in redefining organizational security postures. By embracing the Zero Trust paradigm, organizations can fortify their defenses against an ever-evolving threat landscape, thereby establishing a new zenith in cybersecurity resilience. Keywords—delves ,imperative, micro-segmentation,proactive, zenith.v

Legal and ownership unbundling in the Turkish natural gas market: A comparative analysis

This study introduces a theoretical framework for the Turkish natural gas market based on the principles of game theory and industrial organization. It investigates the effects of the legal and ownership unbundling on consumer surplus, social welfare, and competition. The model considers a mixed oligopoly with a transmission system operator (TSO), a state-owned incumbent, and a private firm. The state-owned incumbent is assumed to maximize consumer surplus and its own profit, while the private firm is assumed to be profit-maximizing. Additionally, the state-owned incumbent is assumed to be less efficient than the private firm. The game consists of three stages. In the first two stages, the state-owned incumbent and the private firm sequentially choose contract sizes in the upstream market. In the last stage, a contract size-restricted Cournot game is played. The findings of the study suggest that legal unbundling appears to offer greater advantages for consumer surplus and social welfare compared to ownership unbundling, particularly when considering key factors such as third-party access, non-tariff discrimination, and import liberalization. The results indicate that adopting the role of a Stackelberg follower by the state-owned incumbent in the upstream market is advantageous in terms of consumer surplus, social welfare, and competition under both unbundling approaches.

Testimonial injustice: exploring ‘credibility’ as a barrier to justice for people with learning disabilities/autism who report sexual violence

Rape/sexual assault cases have high levels of attrition, with reports of sexual violence from people with learning disabilities/autism disproportionately represented. This paper presents the results of a small qualitative study in the UK which focuses on how the criminal justice system is experienced by people with learning disabilities/autism who report sexual offences. An adversarial criminal justice system is reliant on normative social constructions of credibility and the embodiment of (ideal) victimhood through testimony. Adopting Fricker’s framework of testimonial injustice (2009) we explore how epistemic assumptions around credibility create a barrier to justice and facilitate case attrition for victim/survivors with learning disabilities/autism. The paper highlights how criminal justice interpretations of behaviour, communication and third-party disclosure limit access to justice for individuals with learning disabilities/autism, rendering the criminal justice process inherently discriminatory to those with atypical frames of reference.

The Double-Edged Sword of Third-Party Resources: Examining Use and Financial Burden of Extracurricular Tools in Medical Students

Background Since before the COVID-19 pandemic, use of third-party resources (or educational tools separate from the in-house medical curriculum) has been steadily increasing. The transition to virtual learning in 2020 fostered a greater reliance on these mostly online resources during medical training, yet their contributions have rarely been evaluated. Thus, we aimed to review third-party resources and their implications for medical education, particularly their financial burden on students. Methods We examined 31 peer-reviewed articles that discuss third-party resources for medical students and relevant studies related to their equitable access. Results Studies suggest third-party resources are used in a task-dependent manner with a supplemental role to the in-house lectures during the preclinical phase and a primary role for USMLE preparation during the clinical phase. Medical students ubiquitously access these resources out of a perceived necessity to use them to perform well on board exams, prompted by studies demonstrating their efficacy in increasing USMLE Step 1 scores. Though certain resources have been more frequently cited for improving board performance (e.g.,First Aid and UWorld), students may combine multiple third-party resources to best serve their exam preparation. Findings also show the subscription-pricing model of most third-party resources and 12-month access prices range from $100 to $479, suggesting that third-party resource use contributes to an increase financial strain on students. This, coupled with overwhelming medical student debt, may exacerbate existing socioeconomic disparities in medical education. Conclusion Institutions should evaluate third-party resource use among their medical students and consider provisions to increase access to these co-curricular tools.

Harmonizing open banking in the European Union: an analysis of PSD2 compliance and interrelation with cybersecurity frameworks and standards

AbstractThis paper focuses on the security protocols enacted in banking transactions across the European Economic Area (EEA), as stipulated by the Second or Revised Payment Service Directive (commonly referred to as ‘PSD2’ or simply ‘the Directive’). The study aims to comprehensively analyse the implementation and efficacy of these security measures within the specified jurisdiction. The Directive incorporates fundamental rights and obligations that all stakeholders are compelled to adhere to and delineates specific security measures and standards that both traditional banking institutions and third-party providers (TPP) are mandated to implement. In particular, one of the cardinal mandates for banking and financial institutions under PSD2 is the obligation to facilitate third-party access to customer data via open application programming interfaces (API). While this open banking paradigm and the consequent proliferation of data sharing unquestionably bring about various advantages, such as enhanced consumer choice and market competition, they concurrently expose the financial ecosystem to a slew of potential security vulnerabilities and privacy risks. Upon conducting a comprehensive review of the security requirements and measures stipulated under PSD2 and a comparative analysis with essential cybersecurity frameworks and standards (NIS2, Cybersecurity Act, GDPR, ISO 27001:22 and PCI DSS), we have ascertained a discernible lack of harmonisation and clarity concerning the technical security specifications for its effective implementation. This lacuna substantiates the challenges banks face in fully grasping the extensive spectrum of compliance obligations mandated by PSD2. The aim of this research is to offer a valuable contribution to both the comprehension and the pragmatic deployment of security standards in the context of banking transactions, as regulated by the PSD2. The paper serves as a valuable resource for traditional banking institutions and relevant stakeholders by guiding them through the complexities of PSD2 implementation while also evaluating the effects of the security measures on transactional safeguards, data security, and the provision of payment services.

Using Large Language Models to Enhance the Reusability of Sensor Data.

The Internet of Things generates vast data volumes via diverse sensors, yet its potential remains unexploited for innovative data-driven products and services. Limitations arise from sensor-dependent data handling by manufacturers and user companies, hindering third-party access and comprehension. Initiatives like the European Data Act aim to enable high-quality access to sensor-generated data by regulating accuracy, completeness, and relevance while respecting intellectual property rights. Despite data availability, interoperability challenges impede sensor data reusability. For instance, sensor data shared in HTML formats requires an intricate, time-consuming processing to attain reusable formats like JSON or XML. This study introduces a methodology aimed at converting raw sensor data extracted from web portals into structured formats, thereby enhancing data reusability. The approach utilises large language models to derive structured formats from sensor data initially presented in non-interoperable formats. The effectiveness of these language models was assessed through quantitative and qualitative evaluations in a use case involving meteorological data. In the proposed experiments, GPT-4, the best performing LLM tested, demonstrated the feasibility of this methodology, achieving a precision of 93.51% and a recall of 85.33% in converting HTML to JSON/XML, thus confirming its potential in obtaining reusable sensor data.

Research on Ethical Issues in the Design of Intelligent Assistive Devices: Privacy, Security, and Responsibility

With the widespread application of intelligent assistive devices, ethical issues in their design are becoming increasingly prominent. This paper explores ethical issues in the design of intelligent assistive devices from three aspects: privacy protection, security assurance, and responsibility attribution, and proposes corresponding solutions. By analyzing the collection and processing of user data, data sharing, and third-party access, device security design, network security, and data encryption, the responsibilities of designers and manufacturers, as well as the responsibilities and obligations of users, this paper aims to provide ethical guidance for the design of intelligent assistive devices, ensuring that they are fully considered in protecting user privacy, ensuring security, and clarifying responsibility attribution.

Is Bangkok Ready for Open Banking? A Research Note on Exploring the Variables that Affect Innovation Adoption

Today, the globe is seeing rapid growth in digital banking. Many financial technologies are vital and have been implemented. The most ground-breaking financial technology is open banking. It is based on the principle that it allows third-party financial service providers access to customer banking, transactional, and other financial data from banks and non-banks. However, the implementation of open banking technology is restricted due to the presence of unclear government regulations. Furthermore, there are many variables that influence the adoption of such technologies by customers. Thus, this article aims to examine the numerous variables that influence the adoption of open banking innovation among customers in Bangkok. We extend the unified theory of acceptance and use of technology 2 by incorporating a conceptual model of perceived security. The hypotheses of the conceptual model were subsequently assessed with partial least squares structural equation modelling using an online survey of 210 Bangkok consumers. Our finding reveals that open banking innovation adoption is directly influenced by performance expectations, social influence, price value, and perceived security. The hypothesis model has a significant amount of predictive ability, with an R2 of 51.3%. In addition, Q2 values demonstrated a moderate to high degree of predictability for open banking adoption.

A Sample Model for Integrating Decentralized Payment Systems Through Common Gateway for E-commerce

E-commerce is constantly exploring opportunities to streamline payment service integration, particularly in terms of purchase channels and settlement methods. Traditionally, such integrations were provided through bank-acquirers. New initiatives such as Open Banking present a novel approach by offering a centralized gateway for third-party access to banking services. The purpose of this paper is to propose a sample model of a merchant gateway that leverages distributed ledger technology to enable seamless integrations with both purchase and settlement systems. The model holds the potential for accelerating purchase and withdrawal processing but also introduces new challenges that need to be addressed.

Advancing Data Privacy: A Novel K-Anonymity Algorithm with Dissimilarity Tree-Based Clustering and Minimal Information Loss

Anonymization serves as a crucial privacy protection technique employed across various technology domains, including cloud storage, machine learning, data mining and big data to safeguard sensitive information from unauthorized third-party access. As the significance and volume of data grow exponentially, comprehensive data protection against all threats is of utmost importance. The main objective of this paper is to provide a brief summary of techniques for data anonymization and differential privacy.A new k-anonymity method, which deviates from conventional k-anonymity approaches, is proposed by us to address privacy protection concerns. Our paper presents a new algorithm designed to achieve k-anonymity through more efficient clustering. The processing of data by most clustering algorithms requires substantial computation. However, by identifying initial centers that align with the data structure, a superior cluster arrangement can be obtained.Our study presents a Dissimilarity Tree-based strategy for selecting optimal starting centroids and generating more accurate clusters with reduced computing time and Normalised Certainty Penalty (NCP). This method also has the added benefit of reducing the Normalised Certainty Penalty (NCP). When compared to other methods, the graphical performance analysis shows that this one reduces the amount of overall information lost in the dataset being anonymized by around 20% on average. In addition, the method that we have designed is capable of properly handling both numerical and category characteristics.

THEORETICAL AND METHODOLOGICAL APPROACHES TO IT INFRASTRUCTURE MANAGEMENT IN CONDITIONS OF DIGITALIZATION

The article proves that the formation and support of IT infrastructure developing is a key strategic factor in the effective functioning of enterprises and organizations. There are the interpretations of the concepts ‘IT infrastructure’, ‘information infrastructure’, ‘technological infrastructure’ and ‘supporting infrastructure’. It has been found that the IT infrastructure needs constant support and updating to ensure the safety and reliability of data, devices, IT services, tools, technological processes, information, and communication technologies. The components of the organization’s IT infrastructure that meet the needs and business development plan are given. It has been established that IT infrastructure components can be deployed, organized and implemented in various ways. The main tasks of the IT infrastructure and its purpose are also given. The article provides the information that the modern version of the organization’s IT infrastructure is cloud infrastructure, which is quite effective for small and medium-sized businesses with a limited budget. It was found out the virtualization of the IT infrastructure of the enterprise is provided by the virtualization of servers, applications, workstations, the use of cloud computing, optimization of the information network, interaction on demand. The areas of management that have developed from the need to maximize the value created by IT assets are characterized: ITOM, ITSM and ITAM. Important to know the role of the IT infrastructure management system because it is manifested in the proactive administration and management of technological tools, in particular: monitoring of errors and problems; patch tracking; tracing all errors back to their original sources. Moreover, it has been established that the role of IT infrastructure security is becoming more complicated as business entities move to cloud models, hybrid models, multi-cloud technologies, etc. Finally, the model of providing cloud services, with the help of which IT organizations can purchase virtualized computing resources from a third-party provider and access them via the Internet, is called infrastructure services (IaaS).

THE INTERDEPENDENCE BETWEEN THE CREATION OF GAS EXCHANGES AND THE FACTORS OF EUROPEAN INTEGRATION

The purpose of this paper is to identify the prerequisites for the creation of gas exchanges in the European gas market in the process of European integration and to identify the impact of strengthening market mechanisms on Ukraine's attractiveness to the EU in this context. In line with this goal, the author has found that the creation of gas exchanges was a direct consequence of European policy documents aimed at liberalizing and building a single internal natural gas market. This is evidenced by the emergence of gas exchanges in European countries over the past twenty years with the introduction of three energy packages. It is argued that gas exchanges and hubs are essential elements of a liberalized gas market, as they ensure its functioning on a competitive basis in accordance with the functions and principles of their activities. The Directives do not directly prescribe the requirements for the establishment of gas exchanges. However, the principles of liberalisation, third-party access, promotion of competition in the energy market and attraction of many sellers and buyers are implemented with the functioning of the gas exchange institute. The author discusses the impact of strengthening market mechanisms on Ukraine's attractiveness to the EU. The measures taken by Ukraine to implement the requirements of the Third Energy Package, together with the potential creation of a gas hub, will contribute to its attractiveness as a reliable partner and a full-fledged player in the gas market, capable of contributing to the achievement of energy security for European countries.

The congestion cost of pipeline networks under third-party access in China's natural gas market

The consolidation of natural gas pipelines and the implementation of Third-Party Access (TPA) are two critical conditions of gas market liberalization that are being implemented in China, but their full impacts are insufficiently understood. This study employs a natural gas market equilibrium model to explore the utilization rate and congestion cost of China's long-distance pipelines, considering the economic properties of the pipelines. Except for the producer and the ending consumer, we envision the trader as a new agent based on the implementation of the TPA and improve the marketing behaviors of independent pipeline and storage operator agents covered in previous studies by adding independent transportation service and seasonal arbitrage. The results show that while the total utilization rate of long-distance pipelines is 87%, many pipeline segments are congested, which suggests that China's long-distance pipeline network has the potential for optimization. By introducing the congestion fee, this study identifies the pipelines that need structural optimization and capacity expansion. The results of this paper suggest that optimizing existing pipeline networks, deepening market liberalization, and developing a functional storage sector should be prioritized in China's gas market development.

Promoting the Flexibility of Thermal Prosumers Equipped with Heat Pumps to Support Power Grid Management

The increasing share of renewable energy sources in energy systems will lead to unpredictable moments of surplus/deficit in energy production. To address this issue, users with heat pumps can provide support to power grid operators through flexible unit operation achieved via Demand Response programs. For buildings connected to low-temperature heating networks with ensured third-party access, further room for flexibility can be explored by investigating the production of surplus heat that can be sold to the network. A key aspect lies in the identification of the energy pricing options that could encourage such flexible operation of a heat pump by “thermal prosumers”. To this aim, the present study investigates the impact of ad hoc variations in the electricity purchasing price through discounts or penalties included in the “network cost” component of the price on cost-effective operation of a heat pump connected to the thermal network. To discuss the effects of different pricing options in terms of increased flexibility, an office building located in Italy and equipped with a high-temperature heat pump is adopted as the case study. A heuristic profit-oriented management strategy of the heat pump is assumed, and dynamic simulations are performed. The results indicate that at current electricity prices, the heat pump operation is profitable both when supplying the heat to meet the building’s requirements and when producing surplus heat for sale to the thermal network. In addition, it is revealed that the penalties applied to the electricity purchasing price are effective in encouraging changes in the heat pump operation strategy, reducing its average production (the building increasingly relying on buying heat from the network) and the associated electricity consumption by 46.0% and 79.7% in the “light” and “severe” local power deficit scenarios, respectively.