Search

With the continuous increase in the proportion of wind power construction and grid connection, the deployment scale of state sensors in wind-power-monitoring systems has grown rapidly with an aim on the problems that the communication authentication process between the wind turbine status sensor and the monitoring gateway is complex and the adaptability of the massive sensors is insufficient. A security access control method for a wind-power-monitoring system based on agile authentication mechanism is proposed in this paper. First, a lightweight key generation algorithm based on one-way hash function is designed. The algorithm realizes fixed-length compression and encryption of measurement data of any length. Under the condition of ensuring security, the calculation and communication cost in the later stage of authentication are effectively reduced. Second, to reduce the redundant process of wind turbine status sensor authentication, an agile authentication model of wind turbine status sensor based on a lightweight key is constructed. Constrained by the reverse order extraction of key information in the lightweight keychain, the model can realize lightweight communication between massive wind turbine status sensors and regional gateways. Finally, the proposed method is compared and verified using the wind turbine detection data set provided by the National New Energy Laboratory of the United States. The experimental results show that this method can effectively reduce the certification cost of a wind-power-monitoring system. Additionally, it can improve the efficiency of status sensor identity authentication and realize the agility and efficiency of the authentication process. [ABSTRACT FROM AUTHOR]

Concussions among athletes in contact sports are a prevalent health concern in the United States. There are few studies that have assessed concussion from the perspective of judo coaches. This is a descriptive study of a survey sent to 1,056 United States judo coaches assessing their attitudes, knowledge, and practices toward concussion. The survey had a response rate of 21 %, with 215 total responses. Though most coaches could accurately identify common symptoms of concussion from a case presentation, many also misidentified nonconcussion and red flags (e.g., facial droop) as symptoms of concussion. A minority of coaches reported any formal training in concussion management. USA Judo coaches are receptive to and would benefit from a sportspecific standardized concussion training program. [ABSTRACT FROM AUTHOR]

Encryption protects digital information from unauthorized access by making it illegible to anyone without an encryption key. While this ensures the security of digital communications, it also prevents the government from accessing evidence it needs for national security investigations. This creates an apparent conflict between the private sector's desire for strong encryption and the government's interest in "back door" access, thus raising the normative question of whether governments should be able to legally require companies to maintain "back doors" to encrypted information. In view of the significant impact of this debate on economic, privacy, security, and diplomatic interests of states around the world, this Article explores two lines of inquiry: First, what legal frameworks should courts and legislators use to approach encryption? Second, which framework produces the best policy outcomes--in particular, which stakeholders are benefitted or harmed under each approach? To answer these questions, this Article examines legal approaches to encryption in the U.S. and U.K., countries with contrasting policies on the subject. It evaluates the pros and cons of each approach, situating encryption within existing legal frameworks. This includes the First Amendment argument of "code as free speech," government investigatory powers under the Fourth Amendment, and the U.K.'s Investigatory Powers Act permitting government-mandated back doors. This is the first paper clarifying, surveying, and comparing the legal approaches to encryption in the U.S. and U.K. Such a comparative analysis explaining the consequences of each legal approach could help countries choose the most effective approach to encryption. By applying existing laws to the novel problems posed by encryption, this Article generates new evidence against the implementation of encryption back doors. [ABSTRACT FROM AUTHOR]

The article presents the discussion on reproductive health providers and people seeking abortion care. Topics include patients living in abortion ban states facing extreme legal risks; dissemination of photographs and home addresses raising issues of physical safety; and abortions facing privacy breaches placing the providers and families at risk from doxing, threats, and other harms.

The recent case between Apple and the FBI, in which Apple refused to comply with a court order to aid the FBI in overriding the security features of an iPhone used by one of the San Bernardino terrorists, brought the tension between national security and individual rights to the forefront. This article looks at the case and these two core values from a liberal communitarian ethics perspective, and provides an analysis of how these values are reflected in U.S. law. It concludes with an ethical discussion relevant to the resolution of differences between high-tech corporations and the government. [ABSTRACT FROM AUTHOR]

The concept of smart grid gained tremendous attention among researchers and utility providers in recent years. How to establish a secure communication among smart meters, utility companies, and the service providers is a challenging issue. In this paper, we present a communication architecture for smart grids and propose a scheme to guarantee the security and privacy of data communications among smart meters, utility companies, and data repositories by employing decentralized attribute based encryption. The architecture is highly scalable, which employs an access control Linear Secret Sharing Scheme (LSSS) matrix to achieve a role-based access control. The security analysis demonstrated that the scheme ensures security and privacy. The performance analysis shows that the scheme is efficient in terms of computational cost. [ABSTRACT FROM AUTHOR]

Advances in technology in the past decade have blurred the line between individuals' privacy rights and the government's ability to access information. How should this issue be handled in a manner that balances the privacy rights of individuals and the government's access to information in the interest of national security?. This Note proposes a bright-line rule that would continue to allow the government to obtain specific information from a data service provider without forcing the company to circumvent its own security features. Under this rule, a company shall relinquish specific information in its control or possession only by court order and only when necessary to aid the government in the interest of national security. Such information would not include security software, but instead only account information, which the company can readily access. Further, no court shall order a data service provider to create or modify programming that would bypass security features as a means to access protected information. Such programming would provide hackers and governmental entities with a backdoor into other similar devices. Indeed, once created and surrendered, this programming is at risk of being hacked or used by the government in other circumstances. The suggested legislation would not bar a technology company from voluntarily assisting the government or law enforcement in gaining access to encrypted data by creating or modifying programming. If a company chooses to do so, the company could assist and would receive reasonable compensation for the costs incurred. The legal battles between Apple and the FBI demonstrate that without a brightline rule, the government will continue to attempt to gain access to as much information as it can through legislation such as the All Writs Act. Further, forcing a technology company to create or modify programming violates constitutional rights. The costs associated with creating a backdoor far exceed the benefits. Therefore, until Congress speaks to this issue, the legal battle will continue, as the line between privacy rights and the government's access to information remains blurred. [ABSTRACT FROM AUTHOR]

The article focuses on encryption, the iPhone's security system and tension between law enforcement and advancing technology of the U.S. Federal Bureau of Investigation (FBI). It mentions All Writs Act and First Amendment arguments with issues of law enforcement, compelled computer code, and free speech are bound to come up again. It also mentions Congress should enact a new federal statutory regime that will balance privacy concerns.

At the moment, there is a debate between law enforcement and the technology industry, on behalf of their users, about the whether technology companies should provide backdoors or assistance when users encrypt their communications. Despite the needs of law enforcement, backdoors or other unlocking measures can severely intrude into consumer privacy interests. At the risk of losing evidence, privacy should be the dominant concern, which has been supported by the Supreme Court noting that "privacy comes at a cost".1 Stephanie Pell and others have discussed the problems with current statutes for privacy interests, but the discussions surrounding encryption technology are a new issue that has not been closely covered by legal scholarship. This note uses a privacy rights analysis to support technology companies' arguments for noncompliance with law enforcement requests to de-encrypt encrypted communications. As the debate continues ahead, this note may provide support for consumer privacy against law enforcement intrusion. [ABSTRACT FROM AUTHOR]

The encrypted smartphone presents a novel legal issue that is hard to crack. Smartphone data is essential to investigating and prosecuting a range of crimes, such as murder, human trafficking, child pornography, and terrorism. However, Apple and Google's recently reengineered mobile operating systems threaten to lock out law enforcement completely. These operating systems use full-disk encryption technology, which converts everything on a hard drive into an unreadable format until the passcode is entered. Additionally, other security features on the smartphone could result in the data being completely destroyed if the passcode is incorrectly entered a certain number of times. Locked smartphones are thus quickly becoming expensive paperweights filing the evidence rooms of state and federal law enforcement. This Note provides relevant background information on Apple and Google's use of full-disk encryption technology on their respective mobile operating systems. Based on the necessity of smartphone data in the twenty-first century, this Note explains that the inaccessibility of such crucial data will likely frustrate investigations and prosecutions because law enforcement cannot access it elsewhere. This Note concludes that to prevent "Going Dark," Congress must immediately enact an amendment to the Communications Assistance for Law Enforcement Act that subjects the manufacturer and mobile operating system provider to a civil penalty for each instance that law enforcement cannot decrypt a smartphone it has the legal authority to search. [ABSTRACT FROM AUTHOR]

The article attempts an unbiased and impartial look at the facts about the debate over whether or not to give U.S. law enforcement officials the ability to decrypt encrypted messaging. It demonstrates how well the law enforcement agencies correspond to the main talking points of the privacy advocates of each side of the debate.

To analyze self-reported HIPAA compliance with mobile technologies among residents, fellows, and attendings at ACGME training programs. A digital survey was sent to 678 academic institutions over a 1-month period. 2427 responses were analyzed using Chi-squared tests for independence. Post-hoc Bonferroni correction was applied for all comparisons between training levels, clinical setting, and specialty. 58 % of all residents self-report violating HIPAA by sharing protected health information (PHI) via text messaging with 27 % reporting they do it 'often' or 'routinely' compared to 15-19 % of attendings. For all specialties, 35 % of residents use text messaging photo or video sharing with PHI. Overall, 5 % of respondents 'often' or 'routinely' used HIPAA compliant (HCApps) with no significant differences related to training level. 20 % of residents admitted to using non-encrypted email at some point. 53 % of attendings and 41 % of residents utilized encrypted email routinely. Physicians from surgical specialties compared to non-surgical specialties demonstrated higher rates of HIPAA violations with SMS use (35 % vs. 17.7 %), standard photo/video messages (16.3 % vs. 4.7 %), HCApps (10.9 % vs. 4.9 %), and non-HCApps (5.6 % vs 1.5 %). The most significant barriers to complying with HIPAA were inconvenience (58 %), lack of knowledge (37 %), unfamiliarity (34 %), inaccessible (29 %) and habit (24 %). Medical professionals must acknowledge that despite laws to protect patient confidentiality in the era of mobile technology, over 50 % of current medical trainees knowingly violate these rules regularly despite the threat of severe consequences. The medical community must further examine the reason for these inconsistencies and work towards possible solutions. [ABSTRACT FROM AUTHOR]

Summary: The aims of this study are to develop a cloud-based application of the Fracture Liaison Service for practitioners to coordinate the care of osteoporotic patients after suffering primary fractures and provide a performance feedback portal for practitioners to determine quality of care. The application provides continuity of care, improved patient outcomes, and reduced medical costs. Introduction: The purpose of this study is to describe the content development and functionality of a cloud-based application to broadly deploy the Fracture Liaison Service (FLS) to coordinate post-fracture care for osteoporotic patients. Methods: The Bone Health Collaborative developed the FLS application in 2013 to support practitioners' access to information and management of patients and provide a feedback portal for practitioners to track their performance in providing quality care. A five-step protocol (identify, inform, initiate, investigate, and iterate) organized osteoporotic post-fracture care-related tasks and timelines for the application. A range of descriptive data about the patient, their medical condition, therapies and care, and current providers can be collected. Seven quality of care measures from the National Quality Forum, The Joint Commission, and the Centers for Medicare and Medicaid Services can be tracked through the application. Results: There are five functional areas including home, tasks, measures, improvement, and data. The home, tasks, and data pages are used to enter patient information and coordinate care using the five-step protocol. Measures and improvement pages are used to enter quality measures and provide practitioners with continuous performance feedback. The application resides within a portal, running on a multitenant, private cloud-based Avedis enterprise registry platform. All data are encrypted in transit and users access the application using a password from any common web browser. Conclusion: The application could spread the FLS model of care across the US health care system, provide continuity of care, effectively manage osteoporotic patients, improve outcomes, and reduce medical costs. [ABSTRACT FROM AUTHOR]

Recent revelations of heretofore secret U.S. government surveillance programs have sparked national conversations about their constitutionality and the delicate balance between security and civil liberties in a constitutional democracy. Among the revealed policies asserted by the National Security Agency (NSA) is a provision found in the "minimization procedures" required under section 702 of the Foreign Intelligence Surveillance Act of 1978. This provision allows the NSA to collect and keep indefinitely any encrypted information collected from domestic communications--including the communications of U.S. citizens. That is, according to the U.S. government, the mere fact that a U.S. citizen has encrypted her electronic communications is enough to give the NSA the right to store that data until it is able to decrypt or decode it. Through this provision, the NSA is automatically treating all electronic communications from U.S. citizens that are hidden or obscured through encryption--for whatever reason--as suspicious, a direct descendant of the "nothing-to-hide" family of privacy minimization arguments. The ubiquity of electronic communication in the United States and elsewhere has led to the widespread use of encryption, the vast majority of it for innocuous purposes. This Article argues that the mere encryption by individuals of their electronic communications is not alone a basis for individualized suspicion. Moreover, this Article asserts that the NSA 's policy amounts to a suspicionless search and seizure. This program is therefore in direct conflict with the fundamental principles underlying the Fourth Amendment, specifically the protection of individuals from unwarranted government power and the establishment of the reciprocal trust between citizen and government that is necessary for a healthy democracy. [ABSTRACT FROM AUTHOR]

A film criticism is presented for the documentary film "Citizenfour" directed by Laura Poitras. Topics discussed include the film's documenting of U.S. whistleblower Edward Snowden, the mass surveillance carried out by the U.S. National Security Agency (NSA) that Snowden exposed, and the film's focus on internet encryption.

Kim Dotcom, founder of Megaupload Limited, has been in many news headlines over the past year. Megaupload--one of Dotcom's many peer-to-peer sharing sites--was the center of controversy, as it allowed users to upload and share all sorts of files, including copyrighted material. After an organized effort by the Department of Justice and several foreign governments, Dotcom was arrested for (secondary) copyright infringement and his site was ultimately shut down. Dotcom has recently launched a new service, MEGA, which he claims will evade copyright laws entirely. Like other well-known cloud-sharing services such as Dropbox and Google Drive, MEGA allows users to upload files and to share them with select users. In an attempt to avoid liability, MEGA locally encrypts all files on the user's computer before they are uploaded to the site. The private key and public key used to encrypt and decrypt the file are retained solely by the user; MEGA gets no part of that information. This, Dotcom argues, will shift the entirety of the copyright onus to the user. This Issue Brief analyzes the protections afforded cyberlocker services like MEGA by the DMCA, including tensions raised in actual litigation. This Issue Brief argues that, while an ex ante secondary-liability analysis is difficult due to its contextual nature, MEGA's use of user-controlled encryption (UCE), deduplication, and distributed host servers may lend to an affirmative finding of liability. [ABSTRACT FROM AUTHOR]

The focuses on independent cyber security risk management audit for in public library systems. Topics discussed include public awareness regarding cyber security, need of cyber security audits in libraries, information technology (IT) infrastructure of libraries include components such as servers and public wifi network, compliance to data breach policy of the U.S. government, and use of data encryption for protection of data.