检索结果-南通市图书馆

Blockchain-enabled decentralized identity management:The case of self-sovereign identity in public transportation

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Blockchain(Research and Applications) 2021年第2期2卷 50-67页

作者： Lukas Stockburger Georgios Kokosioulis Alivelu Mukkamala Raghava Rao Mukkamala Michel Avital Department of Digitalization Copenhagen Business SchoolHowitzvej 60FrederiksbergDK-2000Denmark Department of Technology Kristiania University CollegeKirkegata 24-260153 OsloNorway

identity management has been ripe for disruption over the past few years due to recurring incidents of data breaches that have led to personal information leaks and identity *** rise of blockchain technology has paved the way for the development of self-sovereign identity(SSI)—a new class of user-controlled resilient identity management systems that are enabled by distributed ledger *** paper examines how SSI management can be used in a public transportation sector that spans different operators in multiple ***,the paper explores how a blockchain-based decentralized identity management system can draw on the SSI framework to provide high-level security and transparency for all involved parties in public transportation ***,building on analyses of the existing public transportation ticketing solutions,we elicited requirements of a comparable system based on the SSI ***,we developed a low-fidelity prototype to showcase how passengers can utilize standardized travel credentials that are valid across different transportation networks in *** proposed system eliminates the need for multiple travel cards(i.e.,one for each transportation provider)and empowers individuals to have better control over the use of their identities while they utilize interoperable ticketing systems across ***,building on the public transportation case,we offer a proof-of-concept that shows how individuals can better manage their identity credentials via the SSI framework.

关键词： identity management Self-sovereign identity Blockchain Distributed ledger Intelligent transport systems Payment systems infrastructure

Open identity management Framework for Mashup

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Open Identity Management Framework for Mashup

Advanced Authentication Mechanisms for identity and Access management inCloud Computing

2010 IEEE 2nd Symposium on Web Society

作者： Ding Chu,Qing Liao,Jingling Zhao Beijing University of Posts and Telecommunications,Beijing,P.R.China

＜正＞Mashups have emerged as a Web 2.0 phenomenon,connecting disjoint applications together to provide unified ***, scalable access control for mashups is *** enable a mashup to gather data from legacy applications and services,users must give the mashup their login names and passwords for those *** is not user-centric and the all-or- nothing approach violates the principle of least privilege and leaves users vulnerable to misuse of their credentials by malicious mashups. To overcome the limitations,this paper proposes an open identity framework,which leverages open identity protocol such as OpenID and *** framework can bring benefits to all the roles involved in the system in a non-intrusive and usercentric *** is a good design principle,and it is also the attitude and sprit of *** think that a mashup system based on open technologies could make the composition of services easier and accelerate the on-boarding of service ***,more customers might also be attracted by the openness of the system.

关键词： Mashup identity management OpenID OAuth

来源： cnki会议评论

在线全文

cnki会议

学校读者我要写书评

暂无评论

Computer Systems Science & Engineering 2022年第12期43卷 967-984页

作者： Amjad Alsirhani Mohamed Ezz Ayman Mohamed Mostafa College of Computer and Information Sciences Jouf UniversitySakaka72314Saudi Arabia

identity management is based on the creation and management of useridentities for granting access to the cloud resources based on the user *** cloud identity and access management (IAM) grants the authorization tothe end-users to perform different actions on the specified cloud resources. Theauthorizations in the IAM are grouped into roles instead of granting them directlyto the end-users. Due to the multiplicity of cloud locations where data resides anddue to the lack of a centralized user authority for granting or denying cloud userrequests, there must be several security strategies and models to overcome theseissues. Another major concern in IAM services is the excessive or the lack ofaccess level to different users with previously granted authorizations. This paperproposes a comprehensive review of security services and threats. Based on thepresented services and threats, advanced frameworks for IAM that provideauthentication mechanisms in public and private cloud platforms. A threat modelhas been applied to validate the proposed authentication frameworks with different security threats. The proposed models proved high efficiency in protectingcloud platforms from insider attacks, single sign-on failure, brute force attacks,denial of service, user privacy threats, and data privacy threats.

关键词： identity management cloud computing security threats and authentication mechanisms

Capability-based IoT access control using blockchain

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Digital Communications and Networks 2021年第4期7卷 463-469页

作者： Yue Liu Qinghua Lu Shiping Chen Qiang Qu Hugo’Connor Kim-Kwang Raymond Choo He Zhang School of Computer Science and Engineering University of New South WalesAustralia Data61 CSIROAustralia Shenzhen Institutes of Advanced Technology Chinese Academy of SciencesChina Department of Information Systems and Cyber Security University of Texas at San AntonioUSA Software Institute Nanjing UniversityChina

Internet of Things(IoT)devices facilitate intelligent service delivery in a broad range of settings,such as smart offices,homes and ***,the existing IoT access control solutions are mainly based on conventional identity management schemes and use centralized *** are knowm security and privacy limitations with such schemes and architectures,such as the single-point failure or surveillance(e.g.,device tracking).Hence,in this paper,we present an architecture for capability-based IoT access control utilizing the blockchain and decentralized identifiers to manage the identity and access control for IoT ***,we propose a protocol to provide a systematic view of system interactions,to improve *** also implement a proof-of-concept prototype of the proposed approach and evaluate the prototype using a real-world use *** evaluation results show that the proposed solution is feasible,secure,and scalable.

关键词： Blockchain Internet of things Capability-based access control identity management Architecture design

identity Governance Framework for Privileged Users

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Computer Systems Science & Engineering 2022年第3期40卷 995-1005页

作者： Mansour Hammoud Alruwies Shailendra Mishra Mohammed Abdul Rahman AlShehri Department of Information Technology College of Computer and Information SciencesMajmaah UniversityAl-Majmaah11952Saudi Arabia Department of Computer Engineering College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia

Information technology companies have grown in size and recognized the need to protect their valuable *** a result,each IT application has its authentication mechanism,and an employee needs a username and *** the number of applications increased,as a result,it became increasingly complex to manage all identities like the number of usernames and passwords of an *** identities had to be retrieved by *** the identities and the access rights associated with those identities had to be protected by an *** couldn’t even capture such access rights because they couldn’t verify things like privacy and *** management can help solve this *** concept behind identity management is to centralize identity management and manage access identity centrally rather than multiple applications with their authentication and authorization *** this research work,we develop governance and an identity management framework for information and technology infrastructures with privileged access management,consisting of cybersecurity policies and *** results show the efficiency of the framework compared to the existing information security *** integrated identity and access management and privileged access management enable organizations to respond to incidents and facilitate *** can automate use cases that manage privileged accounts in the real world.

关键词： Privileged access management(PAM) lightweight directory access protocol(LDAP) identity management access control cyber-attack

Passwords management via Split-Key

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Information Security 2016年第3期7卷 206-214页

作者： Kenneth Giuliani V. Kumar Murty Guangwu Xu Department of Mathematics University of Toronto Toronto Canada Department of EE & CS University of Wisconsin-Milwaukee Milwaukee WI USA

This paper proposes a scheme for password management by storing password encryptions on a server. The method involves having the encryption key split into a share for the user and one for the server. The user’s share shall be based solely on a selected passphrase. The server’s share shall be generated from the user’s share and the encryption key. The security and trust are achieved by performing both encryption and decryption on the client side. We also address the issue of countering dictionary attack by providing a further enhancement of the scheme.

关键词： Password Encryption Password Storage identity management Secret Sharing

The Social identity Approach to Effective Leadership： An Overview and Some Ideas on Cross-Cultural Generalizability

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Frontiers of Business Research in China 2016年第3期10卷 363-384页

作者： Rolf van Dick Rudolf Kerschreiter Department of'Psychology Goethe University 60323 Frankfurt Germany Work ResearchInstitute (AFI) Oslo Norway Department of Education and Psychology Freie Universitat Berlin 14195 Berlin Germany

When employees identify with the groups and organizations they work for, this typically has positive implications for work-related attitudes and behaviors. The present paper provides a focused overview of the social identity approach to leadership and some ideas on its cross-cultural generalizability. To this end, we will first outline the basic tenets of the social identity approach and summarize the relations of organizational identification with work-related variables. Then, we will discuss the role of social identity-related concepts for effective leadership. In particular, we will present empirical studies on the following three aspects：（1） the transfer of leader identification onto their followers, （2） the role of leader prototypicality, and （3） the ways for leaders to actively manage the identities of the groups they lead. Finally, we will provide some suggestions on how to implement the principles of identity management into practice and offer suggestions for future research, with a special focus on China.

关键词： social identity theory leadership identity management socialidentity model of leadership leader-identity-transfer model

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

基于PKI技术构建企业统一认证平台研究

基于PKI技术构建企业统一认证平台研究

作者：王贤鸣复旦大学

学位级别：硕士

PKI是“Public Key Infrastructure”的缩写,意为“公钥基础设施”。简单地说,PKI技术就是利用公钥理论和技术建立的提供信息安全服务的基础设施。公钥体制是目前应用最广泛的一种加密体制,在这一体制中,加密密钥与解密密钥各不相同,发... 详细信息

PKI是“Public Key Infrastructure”的缩写,意为“公钥基础设施”。简单地说,PKI技术就是利用公钥理论和技术建立的提供信息安全服务的基础设施。公钥体制是目前应用最广泛的一种加密体制,在这一体制中,加密密钥与解密密钥各不相同,发送信息的人利用接收者的公钥发送加密信息,接收者再利用自己专有的私钥进行解密。这种方式既保证了信息的机密性,又能保证信息具有不可抵赖性。目前,公钥体制广泛地用于CA认证、数字签名和密钥交换等领域。论文将以企业应用为背景,设计企业应用系统统一的公钥基础设施(PKI)平台,分析了PKI技术的应用,采用了PKI基础平台作为整个企业的安全架构基础。在PKI基础架构的基础之上实现企业级的统一认证平台,并且讨论对公司现有应用进行整合的细节。本文对于PKI系统的研究,不光对企业内部安全建设提供了一个借鉴,同时也可以为即将开展电子商务或者正在思考这个问题的企业提供一些有益的参考。

关键词： PKI Access management identity management SSO