Wi-Fi Secure Access Control System Based on Geo-fence

Software testing is one activity for Software Quality Assurance (SQA). One way to test is through Black box test cases at design level. Since UML is a de-facto design language and is one of the most used design language now a day. Therefore, there is need to design black box test cases using UML behavioral diagrams. Object Constraint Language (OCL) is a formal language to write constraints on UML diagrams as it is unambiguous. Although test cases against robustness have been designed through OCL expressions but no test cases as yet have been designed against security specific authentication, access control and availability. Specification and testing of security specific authentication, access Control and availability through OCL. An experiment is performed with a hypothesis ‘if Security Specific Authentication, Access Control and Availability is specified through OCL in state diagram then Test cases can be designed’. We have specifiedsecurity in OCL then same OCL expressions are used to model security in UML state diagram. Furthermore, mutation testing is performed on OCL expressions. Then ECP is done using same extracted mutants. Security specific authentication, access control and availability is specified in OCL and then test cases are designed using a black box testing technique Equivalence Class Partitioning. Hypothesis results shows that one can design test cases through OCL. This thesis shows that Specification and Testing of Security specific authentication, access control and availability through OCL.

The convenience and flexibility of wireless networks to allow clients (user nodes) to be connected to the network at any place and any time have resulted in the growth and increased popularity of wireless networks. Access control in wireless networks is very important to prevent unauthorized users from accessing the network. Besides this, client anonymity and resistance to Denial-of-Service (DoS) attacks are also important and should be provided by access control protocols for wireless networks. Password-based authentication provide good solutions for access control protocols, however they usually do not provide client identity confidentiality and DoS resistance. In this paper, we review a DoS-resistant anonymous access control (AAC) protocol and point out that the protocol does not provide protection against three different DoS attacks. We then propose a new DoS-resistant AAC protocol that avoids the flaws of the previous protocol. Our proposed protocol also provides client anonymity and protection against DoS attacks. A security and complexity analysis shows that our proposed protocol is secure and efficient for access control in wireless networks.

In the contemporary digital era, access control is one of the security issues in the modern Electronic Healthcare System (EHS). In particular, the E-Health Cloud (EHC) needed a secure and reliable access control to access the EHC resources. In the past, several attempts have been made to provide secure and reliable access control (AC) to the EHS. But, due to lack of trust and dynamic nature of EHC, the model will suffer from different types of attacks and threats. The provided Access Control Models (ACMs) does not provide complete security to EHS. So, in this paper, we have proposed a Secure Access Control Model (SACM) for E-Health Cloud. The proposed model dynamically calculates the trust degree of the users based on their behavior. The computed trust degree will be used for adjusting the access view of the user. The access view is controlled with the help of access control rule set. We also verified our proposed rule set by using CPN Tools.

Smart mobile devices have become an essential part of our lives, both professionally and privately. As we expand our digital presence and usage of these devices, we also increase the amount of evidence left behind. Locard's principle states that every contact leaves a trace, a principle applicable not only to traditional crime but also the cyber realm. This project addresses an area in which this principle is applied, in terms of wireless networks and their access points that have been identified through the wireless scanning process. Both access points and smart devices use different, yet similar, network frames to advertise their existence before a connection can be established between two devices. These frames contain the data that this project aims to locate, MAC addresses, which are uniquely identifiable data, that can be used to identify any device that holds a wireless interface. By analysing the mobile device of a user after a short, city centre walk, the MAC addresses of nearby wireless access points were identified and used to retrace the route travelled by the user. However, as the information was only found in volatile memory, there was a limited timeframe to capture this data.

This research study is an attempt to investigate and recommend the applications and usefulness of social media as a knowledge sharing platform using smart mobile devices and students’ academic performances. Research literature reveals that further examination of this idea is a must as it is increasingly becoming an integral part and a current mandate for digital-era learners. This study is exploratory based on learners’ data which includes students from foundation, junior and senior courses at a university. The objective was to cognize learners’ perceptions on collaborative learning while using applications of social media knowledge platform and smart mobile devices. Structural Model approach is followed to validate the data and undertake the required analysis. The resulting analysis shows that a significantly positive relation exists between the available platforms of knowledge applications using smart devices and its substantial impact on students’ overall performances. In addition, it could be observed that generally students have positive and valuable perception on the use of social media knowledge platform and smart mobile devices in collaborative learning settings. Moreover, such settings encourage students-students’ interactions, studentsteachers’ interactions, and the growing trends of students to online experts’ interactions. Furthermore, it was noticed that these interactions improve students’ engagement with such platforms using smart devices, which consequently has significant positive impact on students’ academic performances. The findings propose the inculcation in students the positive role of the use of social media knowledge platforms using smart devices so to encourage collaborative learning, to enhance active learning, to be more dynamic & engaging, to broaden their domain-knowledge, and to promote academic researchoriented learning, which are all crucial for graduate employability.

In this paper, a variety of cloud service combinations is used to form the control core of a smart home, realize data forwarding, storage, and analysis in the cloud, and complete the remote management of smart home devices. This paper studies the secure access control of smart home data combined with the blockchain technology and password technology to realize the secure and efficient access control of smart home data. The system can achieve the goal of independent research and development. Aiming at the problem that the access control of a smart home is generally managed by third‐party authorized institutions and there is an unauthorized access, a blockchain‐based smart home (BSH) access control scheme is proposed. The scheme extends the attribute‐based access control model (ABAC) and applies the blockchain technology to the smart home ABAC model to realize fine‐grained access control. In the scheme, the resource provider first publishes the access control policy of the resource to the blockchain. If the resource visitor wants to access the resource, he needs to submit an access request to the blockchain and use an SM2 threshold signature to process the transaction proposal. The endorsement peer node in the blockchain runs the access control policy smart contract to decide whether to grant access rights. This scheme can ensure that resource providers can participate in all the processes of access control and avoid the risk of unauthorized access caused by the centralized management of the third party. Finally, the simulation experiment is carried out on the Hyperledger Fabric alliance chain development platform. The results show that the BSH access control scheme has good applicability in the smart home scenario.

This paper describes some of the attacker utilize to disrupt wireless networks through MAC address, and then perform the simple protection through Traffic Protocol Authentication Module (TPAM). This module perform Challenge-Respond based on the hash part of MAC by using the hashing operation, this challenge will occur between the administrator, and the group of the customers through wireless network, and then generate and captured MAC address for all computers connect to wireless network detection unspecified MAC address, filtering it from the MAC address spooling according to protocol programmed by Visual Java#.Net. At the first stage the generation of MAC addresses must capture by many wireless networks tools such as AirJack, FakeAp and Wellenreiter, through analysis the traces. Then the programmer identifies the techniques which can be employed the used the capability to detect the anomaly MAC address, which also the user must alert the administrator of the wireless networks, or alert the others his/her friends in same workgroup. Wireless access points have large scale of the security problems, one of them are the suffering the unauthorized access and use. So the administrator or the wireless network should deal with his/her others groups to the specified generation of MAC address, and then registered the newest of the overall MAC address of the wireless network.

With proliferation of ubiquitous computing, digital access is facing an increasing risk since unauthorized client located at any place may intrude a local server. Location Based Access Control (LBAC) is a promising solution that tries to protect the client's access within some user-defined secure zones. Although a lot of prior work has focused on LBAC, most of them suffer from coarse judgment resolution problem or considerable manual setting-up efforts. This paper proposes LOCK, a highly accurate, easy-to-use LBAC system, which uses autonomous ultrasound positioning devices and an access control engine to precisely characterize the secure zones and accurately judge the online access authority. Particularly, the ultrasound positioning device provides relative 3D coordinate of the mobile clients. Measurement-Free Calibration (MFC) is proposed to easily calibrate these positioning devices to transform their relative positioning results into an absolute coordinate system. In this coordinate system, secure zones are characterized by a Coherent Secure Zone Fitting (CSZF) method to compensate the disparity between manually measured secure zone and the secure zone seen by the positioning devices. Furthermore, a Round-Trip Judgment (RTJ) algorithm is designed to fast online determine the geographical relationship between the client's position and such secure zones. A prototype of LOCK system was implemented by defining a meeting table as secure zone to control the client's access to a FTP server. Experiment results show that the system can be easily set up and can control the client's access with centimeter level judgment resolution.

The concept of shared IoT devices has attracted much attention from the industry sector, academia, and financial institutions, providing various benefits, such as saving resources, reducing personal expenses, and providing convenience. Although shared IoT devices facilitate people’s lives and work, the information exchange is over wireless networks that may suffer from some security attacks such as unauthorized access to a shared device or some private information of legitimate users being leaked. It makes the secure access control to the shared IoT devices become an intractable issue. In order to guarantee the access right of the legitimate users, to prevent the problems of privacy leakage and unnecessary economic disputes, a secure decentralized access control scheme for shared IoT devices is proposed leveraging the technologies of blockchain and a proposed authentication protocol in this paper. The new lightweight authentication protocol is proposed to perform mutual authentication between the user and the IoT device. To protect the privacy of the user, the instruction data are encrypted by a temporary session key negotiated between the user and the IoT device with the help of blockchain which enables nontamperable transactions and prevents central corruption and single point of failure. In our scheme, blockchain is maintained by the gateway nodes an acts as a distributed database and a smart contract for shared service is deployed on it. The smart contract has three functions in our scheme: (1) achieving the prepayment of users and settlement for the service contributor, (2) participating in a verification step during the key negotiation to prevent some malicious behaviour from users or devices, (3) recording the workload of the gateway. Finally, a comprehensive analysis on the safety and reliability of the entire scheme is carried out; extensive simulation experiments are conducted to reveal the authentication protocol is efficient and the scheme is feasible.

As smart mobile devices are widely used, mobile threats are more serious, so security in mobile becomes more and more important. However, the performance of these devices are not powerful enough to use the same security algorithms as PCs. Public key cryptosystems such as RSA need big primes to enhance the security, however, generating a big prime takes substantial time even on a PC. In this paper, we study two prime generation algorithms for smart mobile devices. First, we analyze a previous prime generation algorithm using a GCD test, named PGCD-MR, and show it sometimes performs inferior to the traditional TD-MR test. Second, we propose a new GCD test, named m-bit GCD-MR, for fast prime generation in both PCs and smart mobile devices. We compare the running times of PGCD-MR, m-bit GCD-MR, and TD-MR combinations on PCs and Samsung Galaxy Tab 10.1. The experimental results show our running time analysis is accurate (only 2% error) and m-bit GCD-MR test is the fastest among three prime generation algorithms. More exactly, m-bit GCD-MR test is about 20% faster than the TD-MR combination.

PurposeThe purpose of this paper Computing is a recent emerging cloud model that affords clients limitless facilities, lowers the rate of customer storing and computation and progresses the ease of use, leading to a surge in the number of enterprises and individuals storing data in the cloud. Cloud services are used by various organizations (education, medical and commercial) to store their data. In the health-care industry, for example, patient medical data is outsourced to a cloud server. Instead of relying onmedical service providers, clients can access theirmedical data over the cloud.Design/methodology/approachThis section explains the proposed cloud-based health-care system for secure data storage and access control called hash-based ciphertext policy attribute-based encryption with signature (hCP-ABES). It provides access control with finer granularity, security, authentication and user confidentiality of medical data. It enhances ciphertext-policy attribute-based encryption (CP-ABE) with hashing, encryption and signature. The proposed architecture includes protection mechanisms to guarantee that health-care and medical information can be securely exchanged between health systems via the cloud. Figure 2 depicts the proposed work's architectural design.FindingsFor health-care-related applications, safe contact with common documents hosted on a cloud server is becoming increasingly important. However, there are numerous constraints to designing an effective and safe data access method, including cloud server performance, a high number of data users and various security requirements. This work adds hashing and signature to the classic CP-ABE technique. It protects the confidentiality of health-care data while also allowing for fine-grained access control. According to an analysis of security needs, this work fulfills the privacy and integrity of health information using federated learning.Originality/valueThe Internet of Things (IoT) technology and smart diagnostic implants have enhanced health-care systems by allowing for remote access and screening of patients’ health issues at any time and from any location. Medical IoT devices monitor patients’ health status and combine this information into medical records, which are then transferred to the cloud and viewed by health providers for decision-making. However, when it comes to information transfer, the security and secrecy of electronic health records become a major concern. This work offers effective data storage and access control for a smart healthcare system to protect confidentiality. CP-ABE ensures data confidentiality and also allows control on data access at a finer level. Furthermore, it allows owners to set up a dynamic patients health data sharing policy under the cloud layer. hCP-ABES proposed fine-grained data access, security, authentication and user privacy of medical data. This paper enhances CP-ABE with hashing, encryption and signature. The proposed method has been evaluated, and the results signify that the proposed hCP-ABES is feasible compared to other access control schemes using federated learning.

Ubiquitous computing (ubicomp) demands new security and privacy enhancing technologies for the new information and communication environments where a huge number of computers interact with each other in a distributed and ad hoc manner to access various resources and services. This paper surveys emerging security and privacy enhancing technologies, focusing on access control in ubiquitous computing environments because this is the underlying core technology to enforce security and privacy policies. We classify access control technologies into three types associated with the three access control phases of prevention, avoidance, and detection, and provide an overview of ubiquitous computing-oriented technologies and solutions, ranging from security and privacy models and policies to the enforcement of policies and system implementation.

Nowadays, Security Information and Event Management (SIEM) is very important in software. SIEM stores and monitors events in software and unauthorized access to logs can prompt different security threats such as information leakage and violation of confidentiality. In this paper, a novel method is suggested for secured and integrated access control in the SIEM. First, the key points where the SIEM accesses the information within the software is specified and integrated policies for access control are developed in them. Accordingly, the threats entered into the access control module embedded in this system are carefully detected. By applying the proposed method, it is possible to provide the secured and integrated access control module for SIEM as well as the security of the access control module significantly increases in these systems. The method is implemented in the three stages of the requirements analysis for the establishment of a secure SIEM system, secure architectural design, and secure coding. The access control module is designed to create a secured SIEM and the test tool module is designed for evaluating the access control module vulnerabilities. Also, to evaluate the proposed method, the dataset is considered with ten thousand records, and the accuracy is calculated. The outcomes show the accuracy of the proposed method is significantly improved. The results of this paper can be used for designing an integrated and secured access control system in SIEM systems.

To develop access control mechanisms, particularly in terms of maintaining effective and secure access control within Internet of Things (IoT) networks. Whereas the sufficient use must be made of blockchain-based access control technology. This is because of the sheer volume of connected devices and the subsequent increase in transactions. This can negatively impact the performance and responsiveness of the networks. Thus, this article proposes a comprehensive approach that evaluates the requester’s reputation with respect to regulating access requests for IoT resources. The proposed approach combines fuzzy reputation with a decay algorithm. It then calculates the quantitative reputation value for each IoT user. This considers multiple variables, such as the Access Request Rate, frequency of requests, etc. This new reputation value serves as the basis for access-control decisions. Extensive simulations and experiments are conducted to evaluate the effectiveness of the proposed framework. For the simulation, we used a single-board Raspberry Pi. We also used a hybrid blockchain network environment comprising Geth and Hyperledger Fabric. We then analyzed and compared the performance of the proposed framework with that of the existing approaches. The results demonstrated that compared to the mathematical mechanism, the framework provides improved access control in IoT networks. The fuzzy-based reputation framework captures the dynamic nature of IoT environments, and effectively identifies trustworthy and malicious devices, whereas the decay algorithm reflects the most recent user behavior.

This work aims to provide a more secure access control in Hyperledger Fabric blockchain by combining multiple ID’s, attributes, and policies with the components that regulate access control. The access control system currently used by Hyperledger Fabric is first completely analyzed. Next, a new implementation is proposed that builds upon the existing solution but provides users and developers with easier ways to make access control decisions based on combinations of multiple ID’s, attributes, and policies. Our proposed implementation encapsulates the Fabric CA client to facilitate attribute addition and simplify the process of registering and enrolling a newly created certificate (corresponding to a new user). This research, concludes that it is possible to combine multiple ID’s, attributes, and policies with the help of Hyperledger Fabric’s smart contract technology. Furthermore, it could be seen that the performance impact for real-world applications is negligible compared to the insecure case of always providing access to a resource without performing access control.