An Efficient and Flexible Authentication Scheme with User Anonymity for Digital Right Management

Streaming media is widely adopted by thousands of applications in cloud computing, how to effectively protect streaming media contents is a new challenge. In this paper, we propose an efficient online digital rights management (DRM) scheme supporting dynamic license in cloud computing. The content provider encrypts media content and outsources the encrypted content to cloud storage, while the user acquires dynamic license from the license server and consumes the streaming media content from the cloud storage. Further, we present a secure key distribution protocol based on proxy re-encryption, which protects the confidentiality of content encryption key, and reduces the work of key management in the cloud, and also supports domain key to realize user domain management. In addition, we develop a prototype system with Google cloud storage APIs based on the proposed scheme, and the implementation and comparison results show that the proposed scheme satisfies the requirements of online media content protection in cloud computing.

In the increasingly developing digital era, data security and access rights management have become crucial aspects in information systems, especially on platforms that manage specific content such as anime. The Anime Content Management Information System (SIPKA) requires a robust security mechanism to protect user data, content and access rights in order to prevent security threats such as unauthorized access, data theft and content manipulation. This study discusses various methods and technologies that can be applied to improve data security and access rights management in SIPKA. Through literature analysis and case studies, this research found that implementing data encryption, multifactor authentication, and role-based access rights management (RBAC) systems are effective strategies in maintaining data integrity and confidentiality. It is hoped that the results of this research can provide guidance for SIPKA developers and managers in implementing appropriate security policies and technology to ensure the security and operational continuity of the system.

Session initiation protocol (SIP) is a kind of powerful and common protocols applied for the voice over internet protocol. The security and efficiency are two urgent requirements and admired properties of SIP. Recently, Hamed et al. proposed an efficient authentication and key agreement scheme for SIP. However, we demonstrate that Hamed et al.`s scheme is vulnerable to de-synchronization attack and cannot provide anonymity for users. Furthermore, we propose an improved and efficient authentication and key agreement scheme by using elliptic curve cryptosystem. Besides, we prove that the proposed scheme is provably secure by using secure formal proof based on Burrows-Abadi-Needham logic. The comparison with the relevant schemes shows that our proposed scheme has lower computation costs and can provide stronger security.

Group formation and access rights management become crucial issues when shared workspaces are used to support flexible, emerging group work. End-Users should be able to form groups and adapt access rights for changing groups and workspaces. Current shared workspace systems do not support this sufficiently. Our approach combines a room metaphor-based shared workspace with the key-metaphor for facilitating both, end-user controlled flexible group formation and access rights management. An evaluation of this approach during four month of use has indicated that end-users can form groups and manage the access rights of their shared spaces.

Due to the growth of the broadband and wireless communications network, it has been increasingly popular in recent years to promote the Internet of Vehicles (IoV) as a research topic. The IoV is different from Vehicular Ad hoc NETworks (VANETs). The IoV requires more security considerations than a VANET would. For example, the services provided must be effectively managed. Some vehicles must allow different drivers to use them, and are given different service rights (In a taxi fleet, the same car is driven by different people in shifts) and the identities of vehicles and drivers must be protected by anonymity. Given the above security considerations, we present a method of privacy-preserving authentication and services access control in the IoV. In this system, only the Certificate Authority (CA) can perform the revocation process when a vehicle or driver is judged as invalid. To achieve this purpose of services access control, we propose a new Service Rights Management (SRM) scheme that is given their different services depending on the different objects and then assign different digital rights for managing services and access rights separately. In threats and at-tacks analysis, our scheme is compared to other mechanisms of preventing all kinds of wireless network attacks.

A complete remote authentication scheme should provide the following security properties: (1) mutual authentication, (2) session key exchange, (3) protection of user anonymity, (4) support of immediate revocation capability, (5) low communication and computation cost, (6) resistance to various kinds of attacks, (7) freely choosing and securely changing passwords by users, and (8) without storing password or verification tables in servers. However, none of the existing schemes meets all the requirements. In this paper, along the line of cost effective approach using hash functions for authentication, we propose an efficient and practical remote user authentication scheme with smart cards to support the above complete security properties.

The desires for robust digital rights management (DRM) systems are not new to the commercial world. Indeed, industrial research, development and deployment of systems with DRM aspects (most notably crude copy-control schemes) have a long history. Yet to date the industry has not seen much commercial success from shipping these systems on top of platforms that support general-purpose computing. There are many factors contributing to this lack of acceptance of current DRM systems, but I see three specific areas of work that are key adoption blockers today and ripe for further academic and commercial research. The lack of a general-purpose rights expression/authorization language, robust trust management engines and attestable trusted computing bases (TCBs) all hamper industrial development and deployment of DRM systems for digital content. In this paper I briefly describe each of these challenges, provide examples of how the industry is approaching each problem, and discuss how the solutions to each one of them are dependent on the others.

Sun proposed an efficient remote authentication scheme using smart cards which ensures low communication and computation cost, but the user cannot choose his/her password at will. Thus, Wu and Chieu presented an improvement. However, Yang and Wang pointed out that Wu and Chieu's scheme is vulnerable to the password guessing and forgery attacks. To preserve the advantage of Sun's scheme and Wu and Chieu's scheme and to amend the security weakness, we propose an improvement in this paper. Moreover, our scheme needs no time concurrency mechanism and ensures mutual authentication.

In this paper, the business model and digital rights management (DRM) solution are proposed for the home TV based on scalable video coding and convergent networks. In this environment, the TV program is broadcasted via digital video broadcasting for handheld terminals (DVB-H) to mobile phones, the access right is transmitted by Global System for Mobile communication (GSM/GPRS) channel, and the TV program can also be transmitted from mobile phones to home TV through WiFi. The typical application scenario is that the TV program with low quality (base layer) in the mobile phone can be enriched by enhancement information and shown on home TV. The business model is presented to pay for the enhancement information, and the DRM solution is proposed for solving the copyright issues in the convergence between the DVB-H broadcasting, GSM/GPRS and home network. Since few work has been done to solve this problem, the work proposed in this paper is expected to attract more researchers.

There is a need to protect digital information content and the associated usage rights from unauthorized access, use, and dissemination. The protection mechanisms should meet the requirements for the correct management of fine-grained access and usage controls and the protection of user privacy. Digital rights management (DRM) solutions have significant relevance in this context. This paper describes a distributed DRM model for a secure information-distribution system consisting of six trust-building blocks. These are (i) the user application, (ii) the authentication and authorization module, (iii) Rights-Carrying and Self-Enforcing Objects (SEOs), (iv) the privacy enforcement module, (v) theUsage Tracking and Monitoring Proxy (UTMP), and (vi) thesecurity infrastructure. SEOs are information objects that carry access and usage rights and are responsible for the fine-grained enforcement of these rights. The security infrastructure plays a pivotal role in the creation, distribution, storage, manipulation, and communication of information objects across organizational boundaries with the required level of security. Our model was originally developed for an Internet-based learning project in Norwegian schools and meets most of the aforementioned requirements.

Wireless mesh network (WMN) is considered as one of most emerging field for the research work in today's networking area due to its various approaches available to handle the network resources. Various architectures have been proposed so far and main key challenge for the design of this network is their vulnerability to security attacks. Therefore an efficient key management is required to overcome from such security exploitation such as unauthorised access to the network. WMNs need to be clustered into multiple groups to achieve fast and efficient security mechanism to overcome from security attacks. Therefore, we have proposed a group key agreement protocol based on Diffie-Hellman protocol and digital signature to authenticate the mesh entities within the group. The authentication took place between trusted authority (TA) and mesh clients with efficient communication and computational cost and results in reduction of packet loss by an attacker in wireless network which improves the overall performance of the WMNs. Our experimental result proves that it achieves better communication and computational cost with non-repudiation attack.

In a digital TV system, the Conditional Access (CA) system is essential to protect programs from unauthorized access. However, the encryption technique alone is not sufficient to protect or control the use of contents after decryption. To provide flexible and complete Digital Rights Management (DRM) protection on the Digital Video Broadcasting (DVB) programs, we propose a method that adapts the MPEG- 21 REL technology and integrates it into a DVB-T system. By extending the Service Information (SI) section of a DVB stream to include an REL license, the transmitted content can be conveniently consumed and legally protected. Our design is verified by an experimental hardware system. The results show that the proposed method can provide both the conditional access functionality and the usage control of broadcasted contents.

Internet of Things (IoT) is increasingly used through smart devices with internet-based networks. Communication and data sharing between these devices have also grown in several ways. It is presenting a new dimension to the whole digital right management (DRM) industry. The main focus of IoT based DRM technology is to facilitate the authorised user for using multimedia content through smart devices. However, threats of information breach between communication channels also rapidly increasing, which is making content distribution a challenging task. Moreover, the computation and communication efficiency along with user privacy also requires an ideal DRM system. To address concerns of security, efficiency and privacy over internet-based networks, we design a content key distribution framework for DRM systems. The security proof of the proposed framework is given in the random oracle model along with informal security analysis. Moreover, the security analysis performed using widely adopted simulation tool, namely, ???Automated Validation of Internet Security Protocol and Application (AVISPA)???. The study of performance is conducted, which indicates that it fulfils the requirements of computation and computation efficiency.

The Importance of Data Access Regimes for Artificial Intelligence and Machine Learning

Blockchain for digital rights management