MyData - A Nordic Model for human-centered personal data management and processing

We modeled the mobility of mobile phone users in order to study the fundamental spreading patterns that characterize a mobile virus outbreak. We find that although Bluetooth viruses can reach all susceptible handsets with time, they spread slowly because of human mobility, offering ample opportunities to deploy antiviral software. In contrast, viruses using multimedia messaging services could infect all users in hours, but currently a phase transition on the underlying call graph limits them to only a small fraction of the susceptible users. These results explain the lack of a major mobile virus breakout so far and predict that once a mobile operating system's market share reaches the phase transition point, viruses will pose a serious threat to mobile communications.

http://absimage.aps.org/image/MAR09/MWS_MAR09-2008-002783.pdf

Understanding the spreading patterns of mobile phone viruses

The users of mobile devices that have access to the Internet services increases while they are on the move (i.e. anywhere and at any time). This results in a new phenomenon- mobile electronic commerce, or m-commerce. Security provision for m-commerce community is a challenging task due to insecure air interface of wireless access networks, limited computational capability and battery of life of mobile devices, and the mobility of users. This paper presents a novel asymmetric end-to-end authentication protocol that is based on the concept of using the wireless access home network of a mobile station to assist its authentication with a service provider. The security of the proposed protocol is analysed and its performance against other related work is evaluated.

An asymmetric authentication protocol for m-commerce applications

Mobile agents traverse the Internet, often on behalf of their users. Intelligent search agents access information in dynamic heterogeneous environments. The legal and technical implications of the use of agents in such situations are not fully understood. In this paper a scenario in which a mobile agent searches a multimedia database on behalf of its user, is used to provide a common ground for discussion of the legal and technical issues involved. Requirements related to identity management, integrity, traceability and availability are identified and discussed in the context of existing technology.

/pdf/issues-in-a-mobile-agent-based-multimedia-retrieval-scenario-53518oxkli.pdf

Issues in a Mobile Agent-based Multimedia Retrieval Scenario

In recent years, advanced in digital technologies have created significant changes in the way we reproduce, distribute and market Intellectual Property (IP). DRM for multicast contents is complicated risk, the further technology development and human demand, this approaching is still being researched by the scientist and all by the company which is conducting in piracy management reduced, and every country has national policy to make this consortium to limit piracy properties, based on this paper research development, just only two approaching to reduce piracy in DRM they are Industrial Property (IP) and Copyright. In this paper, we are not only figuring and analyzing about the processes to reduce and limit the piracy and unprotected copy law but also describing about the encryption process, watermarking and digital signature process algorithms. The basic concepts of this encryption process for web-based multicast content in DRM are implemented in Java. We conduct this method is a computerized through web based application system approaching to reduce unprotected copy and piracy. Which is used in DRM for multicast content in every section, by providing a fundamental in information technology development, we believe this research is reliable to prove that is unprotected copy, and piracy can be reduced by protecting with this paradigm.

Process Analysis of Digital Right Management for Web-Based Multicast Contents

By analyzing logs in computer systems, we can find early various threats and discover answers to respond against them. Also logs can help to collect digital evidences for cybercrimes and to be legal effects for investigation. In this paper, we intend to develop a secure logging in computer systems. Therefore we propose a new secure logging scheme and improve it to apply various environments. The proposed scheme will helps to develop a better logging of collection for digital evidences in computer systems.

A Secure Logging for Collection of Digital Evidences

This paper analyzes the existing copyright management and copyright sharing model and discusses the limitations. It then proposes a consortium Blockchain-based copyright management model in which the service platform participates as a node, and discusses how to combine the My Data concept with Blockchain and smart contracts. Also, Blockchain-based CP-ABE is introduced and applied to the proposed model as a way for users to define access policies and store copyright data in encrypted form on the storage of the online service providers (OSP). Compared with the existing copyright management model, the proposed model allows the copyright holder to focus on copyright registration, license content design, and sharing, as the data subject. And it is expected to be able to transparently manage the usage records and the basis for the settlement of the copyrighted data that are shared and used on each platform.

A Decentralized Copyright Management Model using Mydata Concept

Mobile commerce is becoming more and more commonplace, but security is still a major concern. To provide security, theWAP (Wireless Application Protocol) forum suggests theWAP security architecture. However, it needs theWAP gateway for intermediate process between the WTLS (Wireless Transport Layer Security) and the SSL (Secure Socket Layer) protocol, and it does not guarantee end-to-end security between the mobile devices and the WAP servers. In this paper, we propose a new authentication protocol to solve this problem. Our solution is based on the design of a new network component that is called CRL-agent. Furthermore, we also analyze and evaluate the security strength of the proposed protocol.

An End-to-End Authentication Protocol in Wireless Application Protocol

Cryptographic Traces for the Protection of Mobile Agent Execution

We propose two new Remotely Keyed Encryption protocols; a length-increasing RKE and a length-preserving RKE. The proposed protocols have smaller computations than the existing schemes and provide sufficient security. In proposed protocols, we use the cryptographic transform with all-or-nothing properties proposed by Rivest as encryption operation in the host. By using all-or-nothing transform(AONT), RKE can be more dependent on the entire input and all encryption operation can be implemented only by using hash functions in the host. Moreover, we provide a length-preserving RKE protocol requires only one interaction between the host and the card.

/pdf/all-or-nothing-transform-and-remotely-keyed-encription-1sul5jmqot.pdf

Weon Shin

Papers

A Secure Logging for Collection of Digital Evidences

A Decentralized Copyright Management Model using Mydata Concept

An End-to-End Authentication Protocol in Wireless Application Protocol

Cryptographic Traces for the Protection of Mobile Agent Execution

All-or-Nothing Transform and Remotely Keyed Encription Protocols