Search

With the rapid advancement of information technology, the security of digital libraries, as critical platforms for modern knowledge dissemination, has become increasingly significant. User identity authentication in digital libraries is pivotal to ensuring system security. Traditional authentication methods often have security vulnerabilities and cannot effectively prevent unauthorized access. Therefore, this paper proposes a security authentication scheme based on chebyshev chaotic mapping for library. It addresses security issues in identity authentication in digital libraries. The proposed scheme integrates smart card, password and biometric factor, leveraging the chebyshev chaotic mapping algorithm to achieve stringent user authentication and generate secure session keys, thereby effectively countering security threats. Additionally, the scheme employs physical unclonable function (PUF) to enhance the protection of stored confidential data. The security of this scheme is rigorously analyzed using the Scyther. Security analysis and performance experiments indicate that the scheme not only ensures security but also optimizes authentication efficiency. • This paper presents a three-factor secure authentication scheme for library. • The security of this scheme is validated through security analysis. • This scheme achieves an equilibrium between security and efficiency. [ABSTRACT FROM AUTHOR]

The intelligent grid environment is an electricity transmission and distribution system utilizing information and communication technology with two main components: the Smart Meter (SM) and the Service Provider (SP). Unfortunately, wireless mode communication allows the attacker to get data from the public channels and then alter, delete the data, and perform a severe attack such as DoS, impersonation, and tracking attack. In addition, the smart meter is vulnerable to cloning attacks. This research proposes a new authentication protocol utilizing Biometrics and Physical Unclonable Function (PUF). Intuitive analysis DY model ensures our protocol successfully attains security properties and withstands well-known attacks; formal analysis using mathematical and programming models such as Mao-and-Boyd Logic, Real-or-Random Model, and Scyther tools prove that our protocol also satisfies security features and resists well-known attacks. Subsequently, computational complexity comparisons are carried out to prove that our proposal has a low computational burden. [ABSTRACT FROM AUTHOR]

Internet-of-Things (IoT) is an awaited technology in real-world applications to process daily tasks using intelligent techniques. The main process of data in IoT involves communication, integration, and coordination with other real-world applications. The security of transferred, stored, and processed data in IoT is not ensured in many constraints. Internet-enabled smart devices are widely used among populations for all types of applications, thus increasing the popularity of IoT among widely used server technologies. Smart grid is used in this article with IoT to manage large data. A smart grid is a collection of numerous users in the network with the fastest response time. This article aims to provide high authentication to the smart grid, which constitutes secure communication in cloud-based IoT. Many IoT devices are deployed openly in all places. This open-access is vulnerable toward cloning attacks. Authentication is a significant process that provides strength while attacking. The security of the cloud and IoT must be computationally high. A lightweight authentication using hashing technique is proposed considering the aforementioned condition. The main factor of the authentication involves physically unclonable functions, which are utilized in improving the performance of the authentication. The proposed approach is evaluated with the existing techniques. Results show that the performance of the proposed algorithm provides high robust security. [ABSTRACT FROM AUTHOR]

The technical transformation and transfer of most services to digital platforms require that everyone has an electronic device connected to the Internet to assist them accomplish their tasks. Smartphones are one of the best options for everyone because of their small size and ease of transport, in addition to their high capabilities equivalent to a personal computer. It is necessary to identify these devices, usually by checking their IMEI (International Mobile Equipment Identity), to provide and manage several services like the cellular network service. On the other hand, criminals and counterfeiters can manipulate this identity to hide the device and prevent it from being tracked or to make high profits from selling substandard devices. Therefore, several recent proposals have emerged to create a strong fingerprint for use in device identification purposes. This paper reviews and discusses the existing methods to generate a device identity and defines their gaps. Also, it classifies the methods into four categories based on the used technique, namely PUF, machine learning, comparison approach, and sensor calibration. Additionally, it introduces the factors to consider when choosing the technique of device identification. It provides a list of possible attacks on each technology used in device identification methods. [ABSTRACT FROM AUTHOR]

As the power Internet of Things (IoT) enters the security construction stage, the massive use of perception layer devices urgently requires an identity authentication scheme that considers both security and practicality. The existing public key infrastructure (PKI)-based security authentication scheme is currently difficult to apply in many terminals in IoT. Its key distribution and management costs are high, which hinders the development of power IoT security construction. Combined Public Key (CPK) technology uses a small number of seeds to generate unlimited public keys. It is very suitable for identity authentication in the power Internet of Things. In this paper, we propose a novel identity authentication scheme for power IoT. The scheme combines the physical unclonable function (PUF) with improved CPK technology to achieve mutual identity authentication between power IoT terminals and servers. The proposed scheme does not require third-party authentication and improves the security of identity authentication for power IoT. Moreover, the scheme reduces the resource consumption of power IoT devices. The improved CPK algorithm solves the key collision problem, and the third party only needs to save the private key and the public key matrix. Experimental results show that the amount of storage resources occupied in our scheme is small. The proposed scheme is more suitable for the power IoT. [ABSTRACT FROM AUTHOR]

As a result of the increasingly pervasive deployment of the Internet of Things(IoT), the cybersecurity of IoT has already attracted more and more research efforts. Identity management is believed to be the fundamental keystone to build security mechanisms. The traditional centralized identity management scheme suffers from a single point of failure and identity forgery. A secure IoT system framework was proposed leveraging blockchain as the basic infrastructure with Physical Unclonable Functions (PUFs) identifying the sensors uniquely. We brought up a scheme to improve the identity authentication protocol. Experiments showed that our approach was more effective and secure against attacks. [ABSTRACT FROM AUTHOR]

Abstract Polyurethane foam passive samplers were deployed between May 2016 and January 2017 to evaluate concentrations of polybrominated diphenyl ethers (PBDEs), selected alternative flame retardants (AFRs) and total hexabromocyclododecane (HBCDD) (sum of α -, β -, and γ -HBCDD). The PUF air samplers were deployed in semi–urban, urban, industrial and landfill sites in Gauteng Province, South Africa. The acquired results presented a clear semi urban–industrial–urban–landfill concentration gradient for all BFRs measured. Taking into account 2 sampling periods (cold and warm periods) (n = 16), the atmospheric concentrations of ∑ 9 PBDEs, HBCDDs and ∑AFRs were 100–2820 pg m−3, 12–117 pg m−3 and 41–4660 pg m−3, respectively, for the sparsely populated residential area, densely populated residential area, industrial area and the landfill area. In all cases, BDE 47, 99, and 209 were the most dominant congeners with high detection frequencies. The highest calculated daily exposure dose in Gauteng Province atmosphere was 0.61 and 1.54 ng kg −1 – bw d −1 for adults and children respectively. The estimated total intake of PBDEs was 0.47–33.4 ng kg −1 – bw d −1, which was generally below the lowest adverse effect limit (LOAEL), suggesting that the residents of Gauteng Province may not be significantly affected as a result of their exposure to these pollutants through inhalation. However, this does not necessarily suggest that the pollutants are harmless to human health, since they have the tendency to bioaccumulate in biological systems. Incidentally, this is the first study from Africa to report on the atmospheric concentrations of PBDEs, HBCDDs and AFRs in urban, landfill and industrial areas. The findings from this study further highlight the contributory role of landfills as potential sources of BFRs into the atmosphere. Graphical abstract Image 1 Highlights • First measurement of BFRs in the landfill, industrial and urban areas in the African outdoor environment. • The landfill site had the highest levels of BFRs. • Gauteng Province may not be significantly affected as a result of their exposure to BFRs through inhalation. [ABSTRACT FROM AUTHOR]

Passive air samplers (PAS) were evaluated for measuring indoor concentrations of phthalates, novel brominated flame retardants (N-BFRs), polybrominated diphenyl ethers (PBDEs), and organophosphate esters (OPEs). Sampling rates were obtained from a 50-day calibration study for two newly introduced PAS, polydimethylsiloxane (PDMS) or silicone rubber PAS (one with and one without a coating of styrene divinyl benzene co-polymer, XAD) and the commonly used polyurethane foam (PUF) PAS. Average sampling rates normalized to PAS surface area were 1.5 ± 1.1 m 3 day −1  dm −2 for both unsheltered PDMS and XAD-PDMS, and 0.90 m 3  ± 0.6 day −1 dm −2 for partially sheltered PUF. These values were derived based on the compound-specific sampling rates measured here and in the literature for the PAS tested, to reasonably account for site-specific variability of sampling rates. PDMS and PUF were co-deployed for three weeks in 51 homes located in Ottawa and Toronto, Canada. Duplicate PUF and PDMS samplers gave concentrations within 10% of each other. PDMS and PUF-derived air concentrations were not statistically different for gas-phase compounds. PUF had a higher detection of particle-phase compounds such as some OPEs. Phthalate and OPE air concentrations were ∼100 times higher than those of N-BFRs and PBDEs. Concentrations were not systematically related to PM 10 , temperature or relative humidity. We conclude that both PAS provide replicable estimates of indoor concentrations of these targeted semi-volatile organic compounds (SVOCs) over a three-week deployment period. However, PUF is advantageous for collecting a wider range of compounds including those in the particle phase. [ABSTRACT FROM AUTHOR]

Rapid technological development has far-reaching implications for every aspect of life, including transportation. The emerging Intelligent Transportation System (ITS) based on the Internet of Vehicles (IoV) requires robust security measures due to the public channels used to communicate between vehicles and trusted authorities. These channels create opportunities for adversaries to intercept and exploit the transmitted data, leading to severe attacks. Moreover, cars are often parked in public areas, making them vulnerable to physical attacks such as theft of smart cards/devices, cloning, and impersonation. In this paper, we propose a new protocol for IoV that addresses these security concerns. Our protocol offers user authentication based on biometrics, using a biometric key to prevent revealing data from theft of smart cards/devices. Additionally, we use The Physical Unclonable Function (PUF) to resist cloning attacks. We have conducted an informal analysis, which confirms that our protocol fulfills security features. Furthermore, we have conducted a formal analysis using the RoR model and the Scyther tool to verify that our protocol achieves security properties and withstands well-known attacks. We also demonstrate the time complexity and show that our protocol has low computation time. Therefore, our protocol is secure and has a low computation time. [ABSTRACT FROM AUTHOR]

Gamma radiography devices are widely used in industries for Non-Destructive Examination (NDE). Board of Radiation and Isotope Technology (BRIT) has recently designed and developed COCAM-120 an innovative compact industrial radiography device. The device is designed as a Type B (U) package and can carry 120 Ci of Co 60 . To make design of COCAM-120 light in weight and compact in size, different shielding materials viz., Depleted Uranium, Tungsten and Lead are used optimally. Stainless steel is used as structural material and house the shielding material. One of the main design features is that indigenously developed Polyurethane Foam (PUF) encased in stainless steel is used as impact limiter. The PUF not only protect the device from the damage under 9m drop test but also act as a thermal barrier during fire test. Since, these devices carry radioactive material and move in public domain these packages need to demonstrate conformance to Type B (U) requirement, as per regulations of International Atomic Energy Agency (IAEA) and Atomic Energy Regulatory Board (AERB). One such requirement is that the package should maintain its structural integrity under 9m drop onto an unyielding target. Numerical simulation of impact tests are carried out using explicit finite element code PAM – CRASH specialized for a nonlinear dynamic simulation. The paper brings out the performance of the package under 9m drop on an unyielding target. The most damaging drop orientation was found out from simulation of different possible drop orientations. The instrumented drop test of full scale model of COCAM-120 on an unyielding target is performed. The numerical results and experimental results are presented and found to be in good agreement which demonstrates compliance with regulatory tests. [ABSTRACT FROM AUTHOR]

Due to the growth in the amount and type of connected devices, mainly IoT devices, new scalable, lightweight and security-aware protocols, e.g., CoAP and MQTT, have been defined. For the definition of these protocols, the axioms concerning security must cover all the needs regarding authentication, confidentiality, integrity and availability of both devices and servers. CoAP specifies mainly protocol security based on the transport layer through DTLS. Nevertheless, OSCORE (Object Security for Constrained RESTful Environments) has been recently defined to support end-to-end protection of RESTful interactions over the CoAP protocol. It was designed for constrained devices and networks supporting a range of proxy operations, including translation between different transport protocols. The main challenge presents in OSCORE is the establishment and exchange of pre-shared keys required to protect data. For that, this paper defines how use an optimised version of SRAM-based PUF (Physical Unclonable Functions) for a secure authentication, key establishment and exchanging model. The proposal has been implemented and evaluated in a scenario including IoT devices. [ABSTRACT FROM AUTHOR]

Within the framework of the Spanish monitoring program, this study reports on air concentration of DDTs, HCB, HCHs, NDL-PCBs, DL-PCBs, PCDD/Fs and PBDEs measured during the five-year sampling period 2008–2013. Spanish coastal remote and urban locations were studied using PUF disk passive air samplers which were deployed and collected every three months. Despite the wide range of concentrations measured for most contaminants, a common pattern of relative abundance (median values): NDL-PCBs (36.6 pg/m 3 ) > HCB (24.8 pg/m 3 ) ≈ HCHs (17.9 pg/m 3 ) ≈ DDTs (16.6 pg/m 3 ) > PBDEs (3.65 pg/m 3 ) > DL-PCBs (2.99 pg/m 3 ) >> PCDD/Fs (0.060 pg/m 3 ) was found fairly consistent across most seasons and locations. Nevertheless, important variations in yearly concentrations were measured for different POPs. In general, higher levels of DDTs, HCHs, NDL-PCBs, DL-PCBs and PCDD/Fs were found in urban sites highlighting important differences between remote and urban sampling locations for most target contaminants. Greater concentrations of the banned organochlorine pesticides in urban locations suggested the existence of unexpected pointed sources that need to be further investigated and characterized. The limited dataset collected thus far rendered no clear temporal trends for most study target compounds, which emphasizes the necessity of the Spanish monitoring program future maintenance in time. [ABSTRACT FROM AUTHOR]

Internet of Things (IoT) emerges as a global network in which any things (including humans and the real world things) having unique identifier can communicate each other. The RFID system has very important role in the IoT system for solving the identification issues of things cost-effectively. However, RFID systems have serious security and privacy issues. In the literature, there are many proposals that aim to solve to security and privacy issues of RFID systems. The common drawback of these solution is scalability because they generally require a linear search on the back-end database in order to identify a tag. Some proposals use tree structures to store the keys. They reduce the search complexity from O ( n ) to O ( log n ). However, these protocols are susceptible to compromising attack in which an adversary compromising one tag can reveal the secrets of other tags. That means tree-based protocols can provide only a weak level of privacy. In this paper, we propose a scalable authentication protocol for RFID systems. Our solution utilizes Physically Unclonable Functions (PUFs) in order to achieve higher level of privacy with constant identification time. It provides destructive privacy according to the Vaudenay’s privacy and security model. It defends against compromising attack by using PUFs as a secure storage to keep secrets of the tag. To the best of our knowledge, it is the first protocol providing such a privacy level with constant identification time. [ABSTRACT FROM AUTHOR]

Since semi-volatile organic compounds (SVOCs), in-cluding biocides and polychlorinated biphenyls (PCBs), occur indoors as well as outdoors, air sampling adsorbents and measuring methods for all these compounds are in-dispensable. This paper presents the initial steps in the development of such a method, the aim of which is the analysis of selected compounds in the above-mentioned classes using low air sampling volumes and air-exchange rates close to zero, as is common in museum showcases. For measurements under easily controlled conditions, a mi-cro-chamber system was used at different temperatures. A surface modified styrene divinylbenzene (SDVB) polymer was selected as the air sampling adsorbent for the elution experiments. After successfully performing pretests using the micro-chamber system with target compound solu-tions, the emissions of these compounds from self-soaked wood samples and contaminated wood samples were inves-tigated for method development. [ABSTRACT FROM AUTHOR]

In Internet of Things (IoT) systems with security demands, there is often a need to distribute sensitive information (such as encryption keys, digital signatures, or login credentials etc.) to the devices, so that it can be retrieved for confidential purposes at a later moment. However, this piece of information cannot be entrusted to any individual device, since the malfunction of one device will jeopardize the security of the entire network. Even if the information is split among the devices, there is still a danger when attackers compromise a group of them. Therefore we have designed and implemented a secure and robust scheme to facilitate the sharing of sensitive information in IoT networks. This solution provides two important features: 1) This scheme uses Threshold Secret Sharing (TSS) to split the information into shares to be kept by all devices in the system. And so the information can only be retrieved collaboratively by groups of devices. 2) This scheme ensures the privacy and integrity of that piece of information even when there is a large amount of sophisticated and collusive attackers who can hijack the devices. It is able to identify all the compromised devices, while still keeping the secret unknown and unforgeable to attackers. [ABSTRACT FROM AUTHOR]