1,721,018 research outputs found
Security Technologies for Open Networking Environments (STONE)
Get PDFUnder this project SETECS performed research, created the design, and the initial prototype of three groups of security technologies: (a) middleware security platform, (b) Web services security, and (c) group security system. The results of the project indicate that the three types of security technologies can be used either individually or in combination, which enables effective and rapid deployment of a number of secure applications in open networking environments. The middleware security platform represents a set of object-oriented security components providing various functions to handle basic cryptography, X.509 certificates, S/MIME and PKCS No.7 encapsulation formats, secure communication protocols, and smart cards. The platform has been designed in the form of security engines, including a Registration Engine, Certification Engine, an Authorization Engine, and a Secure Group Applications Engine. By creating a middleware security platform consisting of multiple independent components the following advantages have been achieved - Object-oriented, Modularity, Simplified Development, and testing, Portability, and Simplified extensions. The middleware security platform has been fully designed and a preliminary Java-based prototype has been created for the Microsoft Windows operating system. The Web services security system, designed in the project, consists of technologies and applications that provide authentication (i.e., single sign), authorization, and federation of identities in an open networking environment. The system is based on OASIS SAML and XACML standards for secure Web services. Its topology comprises three major components: Domain Security Server (DSS) is the main building block of the system Secure Application Server (SAS) Secure Client In addition to the SAML and XACML engines, the authorization system consists of two sets of components An Authorization Administration System An Authorization Enforcement System Federation of identities in multi-domain scenarios is supported by a set of security engines that represent the core of the Federated Identities Management Server, which is also an extension of the Domain Security Server. The Federated Identity Management server allows users to federate their identities or terminate the federation between the service provider and the identity provider. At the service provider web site, the users are offered a list of identity providers to which they can choose to federate their identities. After users federate their identity, they can perform Single Sign-On protocol in an environment of federated domains. The group security system consists of a number of security technologies under a unified architecture, which supports creation of secure groups and execution of secure group transactions and applications in an open networking environment. The system is based on extensions of the GSAKMP standard for group key distribution and management. The Top layer is the Security Infrastructure with the Security Management and Administration System components and protocols that provide security functions common to all secure network applications The Middle layer is the Secure Group Protocols and Applications layer, consisting of the Policy and Group Key Distribution Server and Web-based (thin) Client. The Bottom layer is the supporting Middleware Security Platform, the cryptographic platform already described above. The group security system is designed to perform the functions necessary to create secure groups and enable secure group applications. Specifically, the system can manage group roles, create and disseminate a group security policy, perform authentication and authorization of users using PKI certificates and Web services security, generate group keys, and recover from compromises. In accordance with the GSAKMP standard, the group security system must perform all the required group life-cycle functions: group definition, group establishment, group maintenance, and group removal. The group security system has been designed to support four roles: The Security Domain Administrator is responsible for providing security functions defined in the top layer The Server Administrator. The central component of the group security system is the Policy and Group Key Distribution Server The Group Officer (GO) authorizes the creation of groups at a specific Policy and Group Key Distribution Server The Group Member (user) is any entity that participates in group transactions. Secure Group Applications The group security system has been designed to support four secure group applications: A Secure Instant Messaging: with the Secure Instant Messaging application A Secure Whiteboard A Secure Document Sharing A Secure Document Archiving: During the project, the group security system architecture was fully designed and preliminary prototyping was carried out for some of its components
Management of Groups and Group Keys in Multi-Level Security Environments
No full textThis paper describes techniques and solutions for management of groups and cryptographic keys when sharing secure documents protected at different classification levels. Such access control environment enforces access to documents at multiple security classification levels, starting from the membership in the group, then access to particular group applications, then access to individual documents and finally even their sections.</p
Experiences on Mobile-ATM Deployment in a Developing Country [Elektronisk resurs]
No full textMobile-Commerce is the latest concept of enabling the financial transactions on mobile phones and hand-held devices. With the rapid development of the society, the M-Commerce applications play a vital role. Mobile-ATM is one such application, enabling the banking services on mobile phones. Even though users have a poor computer literacy, they will be able to use the Mobile-ATM system easily. This kind of application is very useful, especially in rural areas, where accessing financial and banking services is a critical issue due to the distance barriers. Hence this paper discusses the social, economical and technical impact of the Mobile-ATM system, which is developed by the authors. Moreover the paper points out the essential value added services provided by our system with respect to financial transactions services such as security and confidentiality. Although the Mobile-ATM is technically feasible and practically deployed, it is important to have community acceptance. This paper discusses the community acceptance of this system and related issues.</p
SAFE SYSTEM: SECURE APPLICATIONS FOR FINANCIAL ENVIRONMENTS USING MOBILE PHONES [Elektronisk resurs]
No full textMobile financial transactions are used by more and more people due to a widespread proliferation of mobile phones and wireless technologies. One of the most important concerns with such transactions is their security. The reasons are based on weaknesses of wireless protocols and handling of financial data. These aspects make mobile financial applications even more vulnerable to fraud and illegal use than similar transactions performed over fixed networks. Therefore, one of the main prerequisites for successful, large-scale and broad deployment of mobile financial applications is their security. This paper introduces the concept of SAFE system (Secure Applications for Financial Environment) that represents a secure, convenient and reliable infrastructure for mobile financial transactions. The infrastructure comprises Mobile Wallet, three servers: Gateway, IDMS and Bank servers, security protocols, and messages between all components.</p
Experiences on Mobile-ATM Deployment in a Developing Country
No full textMobile-Commerce is the latest concept of enabling the financial transactions on mobile phones and hand-held devices. With the rapid development of the society, the M-Commerce applications play a vital role. Mobile-ATM is one such application, enabling the banking services on mobile phones. Even though users have a poor computer literacy, they will be able to use the Mobile-ATM system easily. This kind of application is very useful, especially in rural areas, where accessing financial and banking services is a critical issue due to the distance barriers. Hence this paper discusses the social, economical and technical impact of the Mobile-ATM system, which is developed by the authors. Moreover the paper points out the essential value added services provided by our system with respect to financial transactions services such as security and confidentiality. Although the Mobile-ATM is technically feasible and practically deployed, it is important to have community acceptance. This paper discusses the community acceptance of this system and related issues
SAFE SYSTEM: SECURE APPLICATIONS FOR FINANCIAL ENVIRONMENTS USING MOBILE PHONES
No full textMobile financial transactions are used by more and more people due to a widespread proliferation of mobile phones and wireless technologies. One of the most important concerns with such transactions is their security. The reasons are based on weaknesses of wireless protocols and handling of financial data. These aspects make mobile financial applications even more vulnerable to fraud and illegal use than similar transactions performed over fixed networks. Therefore, one of the main prerequisites for successful, large-scale and broad deployment of mobile financial applications is their security. This paper introduces the concept of SAFE system (Secure Applications for Financial Environment) that represents a secure, convenient and reliable infrastructure for mobile financial transactions. The infrastructure comprises Mobile Wallet, three servers: Gateway, IDMS and Bank servers, security protocols, and messages between all components
- …
