The Experts below are selected from a list of 5325 Experts worldwide ranked by ideXlab platform

Robert Steele - One of the best experts on this subject based on the ideXlab platform.

  • HealthPass: Fine-Grained Access Control to Portable Personal Health Records
    2010 24th IEEE International Conference on Advanced Information Networking and Applications, 2010
    Co-Authors: Robert Steele
    Abstract:

    At present, emerging possibilities for patients to access their health records or health information may potentially lead to changes within the current health care delivery system from an institution-centered to a patient-centered model and an electronic personal health record (PHR) may greatly influence such a shift. However, the use of PHRs does introduce specific challenges in terms of accidental disclosure of or malicious access to an individual's health data. Hence a high level of security for data access is required due to the sensitivity and confidentiality of the health data in PHRs. In this paper, we present extensible models for defining and configuring fine-grained, role-based access control policies for XML-based portable personal health records using an extended Digital Certificate approach, called HealthPass which enables flexible and dynamic interactions without using a classical authorization and authentication approach like username and password.

  • role based access to portable personal health records
    Mobile Adhoc and Sensor Systems, 2009
    Co-Authors: Robert Steele, Kyongho Min
    Abstract:

    Electronic health information systems (e.g. health record systems, clinical information systems) can assist in the provision of better health care services for patients and help doctors and other health care workers treat and diagnose patients more effectively and efficiently. One of the most important issues in health-related information systems is high information security and stringent access control for patient's health data to protect the patient's privacy and to prevent the use of data harmfully or illegally. Carrying health records with a patient, for example in a personal Digital assistant (PDA) or a mobile phone, could provide greater control of the patient's health data and privacy. It can also facilitate exchanging this health data with health care workers at the point of care and only to the level desired. In this paper, we propose a portable personal electronic health record architecture which natively supports a greater level of privacy using an extended Digital Certificate- based approach. Other challenges to security accompanying a portable device-based approach are also considered.

Wu Yisong - One of the best experts on this subject based on the ideXlab platform.

  • Digital Certificate based mobile terminal network security trading system and Digital Certificate based mobile terminal network security trading method
    2013
    Co-Authors: Wu Yisong
    Abstract:

    The invention relates to a Digital Certificate-based mobile terminal network security trading system and a Digital Certificate-based mobile terminal network security trading method; the system comprises a mobile terminal application system, an interface service center and a CA management system, wherein 1, the mobile terminal application system comprises a local Certificate management module and a communication module; 2, the interface service center comprises a dynamic password verification module, a decryption module, a user information verification module and a communication module; and 3, the CA management system comprises a Digital Certificate generation module, a Digital Certificate signature module, a Digital Certificate attestation module, an encryption module, a decryption module, a notification module and a Digital Certificate management center module. Compared with the prior art, the invention has the beneficial effect that the mutual two-way certification and identification between a mobile terminal and a transaction server can be realized, so that the safety of internet electronic commerce application is improved. The invention is application to mobile terminal products such as a smartphone, a tablet personal computer and the like.

Liu-jun Wang - One of the best experts on this subject based on the ideXlab platform.

  • experimental authentication of quantum key distribution with post quantum cryptography
    npj Quantum Information, 2021
    Co-Authors: Liu-jun Wang, Kai-yi Zhang, Jia-yong Wang, Jie Cheng, Yong-hua Yang, Shi-biao Tang, Di Yan, Yan-lin Tang, Zhen Liu
    Abstract:

    Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computers. However, QKD requires the classical channel to be authenticated, the current method for which is pre-sharing symmetric keys. For a QKD network of n users, this method requires $${C}_{n}^{2}=n(n-1)/2$$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of a mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum-resistant security, each user only needs to apply for one Digital Certificate from a Certificate authority (CA) to achieve efficient and secure authentication for QKD. We need to assume only the short-term security of the PQC algorithm to achieve long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency, and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using the PQC public-key infrastructure, the nodes need to mutually trust only the CA to authenticate each other. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum-safe communication.

  • Experimental Authentication of Quantum Key Distribution with Post-quantum Cryptography
    2020
    Co-Authors: Liu-jun Wang, Kai-yi Zhang, Jia-yong Wang, Jie Cheng, Yong-hua Yang, Shi-biao Tang, Di Yan, Yan-lin Tang, Zhen Liu
    Abstract:

    Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of $n$ users, this method requires $C_n^2 = n(n-1)/2$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a Digital Certificate from Certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.Comment: 8 pages, 6 figure

Zhen Liu - One of the best experts on this subject based on the ideXlab platform.

  • experimental authentication of quantum key distribution with post quantum cryptography
    npj Quantum Information, 2021
    Co-Authors: Liu-jun Wang, Kai-yi Zhang, Jia-yong Wang, Jie Cheng, Yong-hua Yang, Shi-biao Tang, Di Yan, Yan-lin Tang, Zhen Liu
    Abstract:

    Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computers. However, QKD requires the classical channel to be authenticated, the current method for which is pre-sharing symmetric keys. For a QKD network of n users, this method requires $${C}_{n}^{2}=n(n-1)/2$$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of a mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum-resistant security, each user only needs to apply for one Digital Certificate from a Certificate authority (CA) to achieve efficient and secure authentication for QKD. We need to assume only the short-term security of the PQC algorithm to achieve long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency, and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using the PQC public-key infrastructure, the nodes need to mutually trust only the CA to authenticate each other. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum-safe communication.

  • Experimental Authentication of Quantum Key Distribution with Post-quantum Cryptography
    2020
    Co-Authors: Liu-jun Wang, Kai-yi Zhang, Jia-yong Wang, Jie Cheng, Yong-hua Yang, Shi-biao Tang, Di Yan, Yan-lin Tang, Zhen Liu
    Abstract:

    Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of $n$ users, this method requires $C_n^2 = n(n-1)/2$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a Digital Certificate from Certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.Comment: 8 pages, 6 figure

Li Yi - One of the best experts on this subject based on the ideXlab platform.

  • social security Digital Certificate management method readable storage medium terminal device and apparatus
    2019
    Co-Authors: Li Yi
    Abstract:

    The present application relates to the field of computer technology, and in particular, to a social security Digital Certificate management method, a computer readable storage medium, a terminal device and an apparatus. The method comprises: sending to a preset social security Digital Certificate center server a Certificate creation request carrying user's social security information; receiving a social security Digital Certificate sent by the social security Digital Certificate center server; signing the social security Digital Certificate by means of a preset first private key to obtain user signature information, and sending the user signature information to the social security Digital Certificate center server; receiving center verification information sent by the social security Digital Certificate center server; and if the center verification information is verification success information, determining that the creation of the social security Digital Certificate is successful. By means of the interaction process between the social security Digital Certificate center server and the terminal device of the user, in particular the signature and verification processes of the social security Digital Certificate between the social security Digital Certificate center server and the terminal device of the user, the reliability of the social security Digital Certificate is improved.

  • social security Digital Certificate management method computer readable storage medium and terminal equipment
    2018
    Co-Authors: Li Yi
    Abstract:

    The invention belongs to the computer technology field, especially relates to a social security Digital Certificate management method, computer readable storage medium, and terminal equipment. The social security Digital Certificate management method comprises steps that a Certificate creating request provided with user social security information is transmitted to a preset social security DigitalCertificate center server; the social security Digital Certificate transmitted by the social security Digital Certificate center server is received; a preset first private key is used to sign the social security Digital Certificate to acquire user signature information, and the user signature information is transmitted to the social security Digital Certificate center server; center verificationinformation transmitted by the social security Digital Certificate center server is received; when the center verification information is verification successful information, the social security Digital Certificate is successfully created. By adopting an interaction process between the social security Digital Certificate center server and the terminal equipment of the user, especially the signature process and the verification process of the social security Digital Certificate of the social security Digital Certificate center server and the terminal equipment of the user, the reliability of the social security Digital certification is greatly improved.