Business Information Exchange System with Security, Privacy, and Anonymity

Muftic, Sead; Abdullah, Nazri; Kounelis, Ioannis

doi:10.1155/2016/7093642

Cited by 10 publications

(7 citation statements)

References 20 publications

(23 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Our current implementation is based on the concept of the Business Information Exchange (BIX) proxy system [4]. The technology used is PrimeFaces [7].…”

Section: Methodsmentioning

confidence: 99%

“…With our security architecture, however, users access all ASP and SSP servers only indirectly, through the secure proxy [4]. The proxy assists users with all security protocols and in that way extends all security services with privacy and anonymity against both ASPs and SSPs.…”

Section: Modified Protocols Based On Secure Proxiesmentioning

confidence: 99%

“…The concept and operations of the secure proxy server has already been described in our report [1] and in our research paper [4]. In those documents, we described how the secure proxy server provides privacy and anonymity only against ASPs but not against security service providers (SSPs).…”

Section: Introduction: Problems and Motivationsmentioning

confidence: 98%

See 2 more Smart Citations

Security Protocols with Privacy and Anonymity of Users

Abdullah¹,

Muftic²

2015

ujcn

Self Cite

View full text Add to dashboard Cite

Security is very important for many Internet and mobile applications, but with the recent proliferation of tracking and profiling of users and unauthorized distribution of their personal data, user privacy is also becoming a very important issue. In addition, new technologies are introducing the possibility of innovative applications that require user anonymity. Privacy means that user identities and transactions are revealed and known only to transaction partners and only during the execution of the transaction. Anonymity, on the other hand, means that even transaction partners do not have access to that information. The requirements for providing standard security services, that require sharing of user identities and security credentials, are contrary to the requirements of privacy and anonymity. This paper describes an innovative solution to this problem: a design of extensions of standard security protocols-user authentication, key exchange protocol, and authorization protocol-to include privacy and even anonymity of users. The solution is based on the concept of a secure application proxy server, special cryptographic protocols, and encapsulated security objects.

show abstract

“…Our current implementation is based on the concept of the Business Information Exchange (BIX) proxy system [4]. The technology used is PrimeFaces [7].…”

Section: Methodsmentioning

confidence: 99%

Section: Modified Protocols Based On Secure Proxiesmentioning

confidence: 99%

See 1 more Smart Citation

Security Protocols with Privacy and Anonymity of Users

Abdullah¹,

Muftic²

2015

ujcn

Self Cite

View full text Add to dashboard Cite

show abstract

“…By the trusted ring signature scheme based on property certificate, the authors have achieved the anonymity of computing nodes and prevented the leakage of platform configuration information. Muftic et al have combined this method with the characteristics of business data to build the business information exchange system with security, privacy, and anonymity which provides innovative features of privacy and full anonymity of users in the paper [7].…”

Section: Related Workmentioning

confidence: 99%

The Anonymization Protection Algorithm Based on Fuzzy Clustering for the Ego of Data in the Internet of Things

Xie

Huang

Bai

et al. 2017

Journal of Electrical and Computer Engineering

View full text Add to dashboard Cite

In order to enhance the enthusiasm of the data provider in the process of data interaction and improve the adequacy of data interaction, we put forward the concept of the ego of data and then analyzed the characteristics of the ego of data in the Internet of Things (IOT) in this paper. We implement two steps of data clustering for the Internet of things; the first step is the spatial location of adjacent fuzzy clustering, and the second step is the sampling time fuzzy clustering. Equivalent classes can be obtained through the two steps. In this way we can make the data with layout characteristics to be classified into different equivalent classes, so that the specific location information of the data can be obscured, the layout characteristics of tags are eliminated, and ultimately anonymization protection would be achieved. The experimental results show that the proposed algorithm can greatly improve the efficiency of protection of the data in the interaction with others in the incompletely open manner, without reducing the quality of anonymization and enhancing the information loss. The anonymization data set generated by this method has better data availability, and this algorithm can effectively improve the security of data exchange.

show abstract

“…1, the message sender will negotiate the secret session key (marked as SK AB ) only with the specified recipient. The IM server in this type of system cannot do anything but transmit the encrypted data Enc(SK AB , M) accurately [2]. There is no doubt that architecture of type (b) is sufficiently safe for the most fastidious users.…”

Section: Introductionmentioning

confidence: 99%

Key Escrow Protocol Based on a Tripartite Authenticated Key Agreement and Threshold Cryptography

Wang

et al. 2019

IEEE Access

View full text Add to dashboard Cite

While instant messaging systems bring convenience to people's lives and work, they also make it easier for malicious users to discuss and plot illegal activities. Therefore, determining how to balance the privacy protection requirements of user communication in the network with the authorized monitoring requirements of law enforcement agencies (LEAs) is a meaningful task. To solve this problem, a new tripartite authenticated key agreement (Tri-AKA) protocol and a session key escrow scheme based on threshold cryptography and the new Tri-AKA protocol were proposed. In the proposed scheme, the LEA participates as a normal user in the key agreement process of two users and uses (t, n) threshold cryptography to share its ephemeral private key with n key escrow agents (KEAs). When necessary, the LEA can combine t KEAs to recover the specified session key and decrypt the communications, thereby preventing malicious administrators in the LEA from arbitrarily monitoring user communications. Finally, we proved the security of the proposed Tri-AKA protocol under the Computational Diffie-Hellman (CDH) assumption with the Random Oracle Model and the security of the proposed key escrow scheme under the Elliptic Curve Discrete Logarithm (ECDL) assumption. Analysis of our session key escrow scheme and comparison with other schemes show that our scheme can avoid the ''once monitor, monitor forever'' scenario and achieve finegrained control in each session. Moreover, our scheme has low storage overhead for each KEA.

show abstract

Business Information Exchange System with Security, Privacy, and Anonymity

Cited by 10 publications

References 20 publications

Security Protocols with Privacy and Anonymity of Users

Security Protocols with Privacy and Anonymity of Users

The Anonymization Protection Algorithm Based on Fuzzy Clustering for the Ego of Data in the Internet of Things

Key Escrow Protocol Based on a Tripartite Authenticated Key Agreement and Threshold Cryptography

Contact Info

Product

Resources

About