检索结果-内蒙古大学图书馆

distributed access control with Privacy Support in Wireless Sensor Networks

IEEE TRANSACTIONS ON WIRELESS COMMUNICATIONS 2011年第10期10卷 3472-3481页

作者： He, Daojing Bu, Jiajun Zhu, Sencun Chan, Sammy Chen, Chun Zhejiang Univ Coll Comp Sci Hangzhou Zhejiang Peoples R China Penn State Univ Dept Comp Sci & Engn Coll Informat Sci & Technol University Pk PA 16802 USA City Univ Hong Kong Dept Elect Engn Hong Kong Hong Kong Peoples R China

A distributed access control module in wireless sensor networks (WSNs) allows the network to authorize and grant user access privileges for in-network data access. Prior research mainly focuses on designing such access control modules for WSNs, but little attention has been paid to protect user's identity privacy when a user is verified by the network for data accesses. Often, a user does not want the WSN to associate his identity to the data he requests. In this paper, we present the design, implementation, and evaluation of a novel approach, Priccess, to ensure distributed privacy-preserving access control. In Priccess, users who have similar access privileges are organized into the same group by the network owner. A network user signs a query command on behalf of his group and then sends the signed query to the sensor nodes of his interest. The signature can be verified by its recipient as coming from someone authorized without exposing the actual signer. In addition to the theoretical analysis that demonstrates the security properties of Priccess, this paper also reports the experimental results of Priccess in a network of Imote2 motes, which show the efficiency of Priccess in practice.

关键词： Authentication privacy distributed access control wireless sensor network

来源：评论

学校读者我要写书评

暂无评论

Decentralized Opportunistic access for D2D Underlaid Cellular Networks

引用

IEEE TRANSACTIONS ON COMMUNICATIONS 2018年第10期66卷 4842-4853页

作者： Chen, Zheng Kountouris, Marios Linkoping Univ Dept Elect Engn ISY S-58183 Linkoping Sweden Huawei Technol Co Ltd Math & Algorithm Sci Lab Paris Res Ctr F-92100 Boulogne France

In this paper, we propose a decentralized access control scheme for interference management in device-to-device (D2D) underlaid cellular networks. Our method combines signal-to-interference ratio (SIR)-aware link activation with cellular guard zones in a system, where D2D links opportunistically access the licensed cellular spectrum when the activation conditions are satisfied. Analytical expressions for the success/coverage probability of both cellular and D2D links are derived. We characterize the impact of the guard zone radius and the SIR threshold on the D2D potential throughput and cellular coverage. A tractable approach is proposed to find the SIR threshold and guard zone radius that maximize the potential throughput of the D2D communication while ensuring sufficient coverage probability for the cellular uplink users. Simulations validate the accuracy of our analytical results and show the performance gain of the proposed scheme compared to prior state-of-the-art solutions.

关键词： D2D communication underlay distributed access control link scheduling guard zones stochastic geometry

来源：评论

学校读者我要写书评

暂无评论

Lightweight distributed secure data management system for health internet of things

引用

JOURNAL OF NETWORK AND COMPUTER APPLICATIONS 2017年 89卷 26-37页

作者： Yang, Yang Zheng, Xianghan Tang, Chunming Fuzhou Univ Coll Math & Comp Sci Fuzhou Peoples R China Guangzhou Univ Sch Math & Informat Sci Key Lab Informat Secur Guangzhou 510006 Guangdong Peoples R China

Internet of Things (IoT) connects various kinds of sensors and smart devices using the internet to collect data. The adoption of IoT in medical care field will bring great convenient to both doctors and patients for effective illness monitoring and diagnosis. Due to the high value of medical data and the openness character of health IoT, the protection of data confidentiality is of crucial importance. In this paper, we propose a novel distributed secure data management with keyword search system for health IoT. Since the patients are usually managed by diverse medical institutions, the proposed system enables distributed access control of protected health information (PHI) among different medical domains. On the other hand, the accumulation of electronic health records (EHR) makes effective data retrieval a challenge task. Our scheme could provide efficient keyword search function on cross-domain PHI. For the resource limited devices in health IoT, it is an essential requirement to design lightweight algorithms in the secure data management system. The proposed system realizes lightweight data encryption, lightweight keyword trapdoor generation and lightweight data recovery, which leaves very few computations to user's terminal. The security of this system is reduced to the decisional bilinear Diffie-Hellman (DBDH) assumption. The comparison analysis is made between this scheme and other existing systems. The extensive experiments on both laptop and smart phone platforms show that the proposed scheme has greatly improved the computation efficiency and requires much less communication cost.

关键词： Health Internet of Things Searchable encryption distributed access control Attribute based encryption Lightweight computation

来源：评论

学校读者我要写书评

暂无评论

A metamodel of access control for distributed environments: Applications and properties

引用

INFORMATION AND COMPUTATION 2014年 238卷 187-207页

作者： Bertolissi, Clara Fernandez, Maribel LIF UMR CNRS & AMU 7279 Marseille France Kings Coll London Dept Informat London WC2R 2LS England

We describe a metamodel for access control, designed to take into account the specific requirements of distributed environments. We see a distributed system consisting of several sites, each with its own resources to protect, as a federation, and propose a framework for the specification (and enforcement) of global access control policies that take into account the local policies specified by each member of the federation. The framework provides mechanisms to specify heterogeneous local access control policies, to define policy composition operators, and to use them to define conflict-free access authorisation decisions. We use a declarative formalism in order to give an operational semantics to the distributed metamodel. We then show how properties of policies can be directly obtained from standard results for the operational semantics of access request evaluation. (C) 2014 Elsevier Inc. All rights reserved.

关键词： Security policies distributed access control Operational semantics Rewriting

来源：评论

学校读者我要写书评

暂无评论

A new construction of threshold cryptosystems based on RSA

引用

INFORMATION SCIENCES 2016年 363卷 140-153页

作者： Zhang, Chenchen Luo, Yuan Xue, Guangtao Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai Peoples R China

There have been many ways to construct a threshold cryptosystem. Most often they are constructed by combining original public encryption schemes with some methods such as Shamir's secret sharing. In this paper a new threshold cryptosystem based on RSA is presented, which is constructed by several RSA instances with chosen moduli and private keys. In fact, by computing the common private keys of some individual RSA instances and modifying the moduli, we combine those RSA instances and get a new threshold cryptosystem (hereinafter called, combined RSA for simplification). First, it is proved that this system has, similar security properties, to the CRT-based (Chinese remainder theorem) threshold RSA while being convenient to implement, i.e., it only heeds modular-multiplication once to encrypt or decrypt respectively. Although the new system has the same security strength as the CRT-based RSA theoretically, it will provide fewer opportunities for adversaries in practical applications as there is only one step for encryption or decryption. Second, for complexity, as plain RSA is efficient, the combined RSA is also practical in computation. Therefore, if a plain RSA user wants to develop threshold decryption or threshold signature more conveniently and more securely, the combined RSA would be suitable. Finally, an application of the combined RSA is provided in this paper to, realize distributed data access control with collusion-resistance. (C) 2016 Elsevier Inc. All rights reserved.

关键词： Threshold cryptosystem distributed access control

来源：评论

学校读者我要写书评

暂无评论

Construction of High Dependable distributed access control Architecture Based on Quorum System

引用

Wuhan University Journal of Natural Sciences 2010年第3期15卷 210-216页

作者： XIONG Tinggang LU Zhengding ZHANG Jiahong MA Zhong School of Computer Science and Technology Huazhong University of Science and Technology Wuhan 430074 Hubei China Wuhan Digital and Engineering Institute Wuhan 430074 Hubei China

Quorum system is a preferable model to construct distributed access control architecture, but not all quorum system can satisfy the requirements of distributed access control architecture. Aiming at the dependable problem of authorization server in distributed system and combining the requirements of access control, a set of criterions to select and evaluate quorum system is presented. The scheme and algorithm of constructing an authorization server system based on Paths quorum system are designed, and the integrated sys- tem performance under some servers attacked is fully analyzed. Role-based access control on the Web implemented by this scheme is introduced. Analysis shows that with certain node failure probability, the scheme not only has high dependability but also can satisfy the special requirements of distributed access control such as real-time, parallelism, and consistency of security policy.

关键词： distributed access control quorum system dependability construction algorithm

来源：评论

学校读者我要写书评

暂无评论

TikiriAC: Node-Level Equally distributed access control for Shared Sensor Networks

TikiriAC: Node-Level Equally Distributed Access Control for ...

引用

4th International Workshop on Real-World Wireless Sensor Networks

作者： Laxaman, Nayanajith M. Goonatillake, M. D. J. S. De Zoysa, Kasun Univ Colombo Sch Comp Colombo 7 Sri Lanka

In this paper, we propose an access control mechanism that can be used to overcome challenges and problems related to access controlling in a shared Wireless Sensor Network (WSN) databases with complex connectivity to... 详细信息

ISBN: (纸本)9783642175190

关键词： distributed access control Shared Wireless Sensor Networks Privilege Management Infrastructure Public Key Infrastructure

来源：评论

学校读者我要写书评

暂无评论

Achieve distributed, scalable and effective access control in cloud storage services

Achieve distributed, scalable and effective access control i...

引用

ICINS 2014 - 2014 International Conference on Information and Network Security

作者： Su Huang Yuan Luo Department of Computer Science and Engineering Shanghai Jiao Tong University China

ISBN: (纸本)9781510804289

Cloud storage services enable users to remotely store their data and conveniently share their information. One critical issue is how to achieve data security and realize data access policy in cloud storage services. Existing schemes based on Ciphertext-Policy Attribute-Based Encryption (CP-ABE) have been proposed to achieve secure access control for outsourced data in cloud computing. However, due to the inefficiency of decryption and the inflexibility, most of these schemes are not suitable to realize distributed access control for cloud storage systems. In this paper, we propose a fully distributed, scalable and effective data access control scheme to encrypt and decrypt data, which bases on the lowest density maximum distance separable (LD-MDS) *** introduction of the LD-MDS code in this field improves performance greatly in decryption stage. Security analysis indicates that the proposed scheme is secure and achieves fine-grained access control, collusion resistant, backward security and forward security simultaneously. Extensive performance analysis and experiment show that our scheme is much more efficient than existing CP-ABE system in cloud storage services.

关键词： access control CP-ABE Cloud Storage MDS Code access control maximum distance separable codes Cloud Computing luggage retention Decryption Scheme Scalability Legal Services distributed access control Data Security

来源：评论

学校读者我要写书评

暂无评论

Token based Privacy Preserving access control in Wireless Sensor Networks 21

Token based Privacy Preserving Access Control in Wireless Se...

引用

21st Annual International Conference on Advanced Computing and Communications (ADCOM)

作者： Tanuja, R. Shruthi, Y. R. Manjula, S. H. Venugopal, K. R. Patnaik, L. M. Bangalore Univ Coll Engn Univ Visvesvaraya Dept Comp Sci & Engn Bangalore Karnataka India Indian Inst Sci Bangalore Karnataka India

ISBN: (纸本)9781467397773

In large scale Wireless Sensor Network the network owner and the users of the sensor network may be different. A distributed access control module allows the users to access data from the network for which the user has privileges. The users of such a network required the privacy of their identity and access patterns from the network and other users. To support this user privacy previous works proposed techniques where a user sends a query with a signature generated based on a group of authorised users. With such a technique the sensor nodes verify the query and know it is a valid signature without being able to know the actual signer of the query. Due to this signer ambiguity in such an approach the dishonest or malicious users are not identified. In this paper, we present Token based Privacy Preserving access control (TPPAC) algorithm which preserves essential user privacy and identify the dishonest user. A set of tokens are distributed to different user groups by the network owner. A network user sends the query with signature based on the group and the token. This is verified by the sensor nodes and token count is stored. When a threshold value is exceeded for the token count it is reported to network owner for necessary actions. The experimental results show our algorithm is attack resilient and efficient that provides distributed privacy preserving access control.

关键词： Authentication distributed access control Privacy Security Token generation Wireless Sensor Networks

来源：评论

学校读者我要写书评

暂无评论

QoS-Aware Joint access control and Duty Cycle control for Machine-to-Machine Communications

QoS-Aware Joint Access Control and Duty Cycle Control for Ma...

引用

IEEE Global Communications Conference

作者： Yun Li Kok Keong Chai Yue Chen Jonathan Loo School of Electronic Engineering and Computer Science Queen Mary University of London School of Science and Technology Middlesex University

ISBN: (纸本)9781479959532

Massive devices and various applications imposes new challenges for Machine-to-Machine (M2M) communications to enable Internet of Things (IoT). In this paper, we investigate a QoS-aware joint access control and duty cycle control problem for M2M communications to optimise the overall network performance, including energy efficiency, end-to-end delay, reliability, throughput and fairness. We first model a practical hybrid M2M communication network and measure the overall network performance through a cost function. Then, an optimisation problem is formulated to minimise the long-term aggregated network cost. Further more, we overcome the non-convexity of the cost function and mathematically derive the optimal access control. Finally, we propose a distributed access control followed by a reinforcement learning (RL) based duty cycle control which adapts to various network dynamics without priori network information. Simulation results show that, the proposed joint access control and duty cycle control minimise the network long-term aggregated cost, while achieving fairness among cluster heads with QoS differentiation.

关键词： access control machine to machine cycle control DUTY CYCLE Cost functions distributed access control optimal access Joints Joints

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：