Identity management : strengthening one-time password authentication through usability

Usability in HCI (Human-Computer Interaction) is normally understood as the simplicity and clarity with which the interaction with a computer program or a web site is designed. Identity management systems need to provide adequate usability and should have a simple and intuitive interface. The system should not only be designed to satisfy service provider requirements but it has to consider user requirements, otherwise it will lead to inconvenience and poor usability for users when managing their identities. With poor usability and a poor user interface with regard to security, it is highly likely that the system will have poor security. The rapid growth in the number of online services leads to an increasing number of different digital identities each user needs to manage. As a result, many people feel overloaded with credentials, which in turn negatively impacts their ability to manage them securely. Passwords are perhaps the most common type of credential used today. To avoid the tedious task of remembering difficult passwords, users often behave less securely by using low entropy and weak passwords. Weak passwords and bad password habits represent security threats to online services. Some solutions have been developed to eliminate the need for users to create and manage passwords. A typical solution is based on generating one-time passwords, i.e. passwords for single session or transaction usage. Unfortunately, most of these solutions do not satisfy scalability and/or usability requirements, or they are simply insecure. In this thesis, the security and usability aspects of contemporary methods for authentication based on one-time passwords (OTP) are examined and analyzed. In addition, more scalable solutions that provide a good user experience while at the same time preserving strong security are proposed.

An efficient public key management regime for vehicular ad hoc networks (VANETS)

The primary goal of the Vehicular Ad Hoc Network (VANET) is to provide real-time safety-related messages to motorists to enhance road safety. Accessing and disseminating safety-related information through the use of wireless communications technology in VANETs should be secured, as motorists may make critical decisions in dealing with an emergency situation based on the received information. If security concerns are not addressed in developing VANET systems, an adversary can tamper with, or suppress, the unprotected message to mislead motorists to cause traffic accidents and hazards. Current research on secure messaging in VANETs focuses on employing the certificate-based Public Key Infrastructure (PKI) scheme to support message encryption and digital signing. The security overhead of such a scheme, however, creates a transmission delay and introduces a time-consuming verification process to VANET communications. This thesis has proposed a novel public key verification and management approach for VANETs; namely, the Public Key Registry (PKR) regime. Compared to the VANET PKI scheme, this new approach can satisfy necessary security requirements with improved performance and scalability, and at a lower cost by reducing the security overheads of message transmission and eliminating digital certificate deployment and maintenance issues. The proposed PKR regime consists of the required infrastructure components, rules for public key management and verification, and a set of interactions and associated behaviours to meet these rule requirements. This is achieved through a system design as a logic process model with functional specifications. The PKR regime can be used as development guidelines for conforming implementations. An analysis and evaluation of the proposed PKR regime includes security features assessment, analysis of the security overhead of message transmission, transmission latency, processing latency, and scalability of the proposed PKR regime. Compared to certificate-based PKI approaches, the proposed PKR regime can maintain the necessary security requirements, significantly reduce the security overhead by approximately 70%, and improve the performance by 98%. Meanwhile, the result of the scalability evaluation shows that the latency of employing the proposed PKR regime stays much lower at approximately 15 milliseconds, whether operating in a huge or small environment. It is therefore believed that this research will create a new dimension to the provision of secure messaging services in VANETs.

The aetiology, impact and management of cancer-related fatigue in patients with advanced cancer

Cancer-related fatigue (CRF) is a distressing symptom frequently experienced by patients with advanced cancer. While there have been some advances in the understanding of the management of fatigue associated with cancer treatment, CRF associated with advanced cancer remains a phenomenon that is not well-managed. The aetiologic factors associated with CRF, the impacts of CRF and the current management of CRF are discussed in this review article in relation to patients with advanced cancer. The paper concludes that while further research is required in the area, there are several potentially effective strategies currently available that can reduce the severity of CRF in patients with advanced cancer.

Understanding user differences in open-source workflow management system usage intentions

Open-source software systems have become a viable alternative to proprietary systems. We collected data on the usage of an open-source workflow management system developed by a university research group, and examined this data with a focus on how three different user cohorts – students, academics and industry professionals – develop behavioral intentions to use the system. Building upon a framework of motivational components, we examined the group differences in extrinsic versus intrinsic motivations on continued usage intentions. Our study provides a detailed understanding of the use of open-source workflow management systems in different user communities. Moreover, it discusses implications for the provision of workflow management systems, the user-specific management of open-source systems and the development of services in the wider user community.

The role of knowledge in the project management office

Both Knowledge Management (KM) and Project Management (PM) are known as crucial factors to develop competitive advantage(CA). PM Office (PMO) is recognized as a strong solution to institutionalize PM practices in organization. However, according to the literature there is a significant gap in addressing KM practices in the PMO. In other words, existing PMO maturity models has not been addressed from KM perceptive. This paper discusses undertaken investigations of both KM and PM as an initial part of PhD research on the role of knowledge in PMO

Management and engineering of process aware information systems : introduction to the special issue

In this editorial letter, we provide the readers of Information Systems with a birds-eye introduction to Process-aware Information Systems (PAIS) – a sub-field of Information Systems that has drawn growing attention in the past two decades, both as an engineering and as a management discipline. Against this backdrop, we briefly discuss how the papers included in this special issue contribute to extending the body of knowledge in this field.

Corporate governance mechanisms and earnings management in transitional countries – evidence from Chinese listed firms

The objective of this thesis is to investigate whether the corporate governance practices adopted by Chinese listed firms are associated with the quality of earnings information. Based on a review of agency and institutional theory, this study develops hypotheses that predict the monitoring effectiveness of the board and the audit committee. Using a combination of univariate and multivariate analyses, the association between corporate governance mechanisms and earnings management are tested from 2004 to 2008. Through analysing the empirical results, a number of findings are summarised as below. First, board independence is weakened by the introduction of government officials as independent directors on the boards. Government officials acting as independent directors, claim that they meet the definition of independent director set by the regulation. However, they have some connection with the State, which is the controlling shareholder in listed SOEs affiliated companies. Consequently, the effect of the independent director’s expertise in constraining earnings management is mitigated as demonstrated by an insignificant association between board expertise and earnings management. An alternative explanation for the inefficiency of board independence may point to the pre-selection of independent directors by the powerful CEO. It is argued that a CEO can manipulate the board composition and choose the "desirable" independent directors to monitor themselves. Second, a number of internal mechanisms, such as board size, board activities, and the separation of the roles of the CEO and chair are found to be significantly associated with discretionary accruals. This result suggests that there are advantages in having a large and active board in the Chinese setting. This can offset the disadvantages associated with large boards, such as increased bureaucracy, and hence, increase the constraining effects of a large and resourceful board. Third, factor analysis identifies two factors: CEO power and board power. CEO power is the factor which consists of CEO duality and turnover, and board power is composed of board size and board activity. The results of CEO power show that if a Chinese listed company has CEO duality and turnover at the same time, it is more likely to have a high level of earnings management. The significant and negative relationship between board power and accruals indicate that large boards with frequent meetings can be associated with low level of earnings management. Overall, the factor analysis suggests that certain governance mechanisms complement each other to become more efficient monitors of opportunistic earnings management. A combination of board characteristics can increase the negative association with earnings management. Fourth, the insignificant results between audit committees and earnings management in Chinese listed firms suggests that the Chinese regulator should strengthen the audit committee functions. This thesis calls for listed firms to disclose more information on audit committee composition and activities, which can facilitate future research on the Chinese audit committee’s monitoring role. Fifth, the interactive results between State ownership and board characteristics show that dominant State ownership has a moderating effect on board monitoring power as the State totally controls 42% of the issued shares. The high percentage of State ownership makes it difficult for the non-controlling institutional shareholders to challenge the State’s dominant status. As a result, the association between non-controlling institutional ownership and earnings management is insignificant in most situations. Lastly, firms audited by the international Big4 have lower abnormal accruals than firms audited by domestic Chinese audit firms. In addition, the inverse U-shape relationship between audit tenure and earnings quality demonstrates the changing effects of audit quality after a certain period of appointment. Furthermore, this thesis finds that listing in Hong Kong Stock Exchanges can be an alternative governance mechanism to discipline Chinese firms to follow strict Hong Kong listing requirements. Management of Hong Kong listed companies are exposed to the scrutiny of international investors and Hong Kong regulators. This in turn reduces their chances of conducting self-interested earnings manipulation. This study is designed to fill the gap in governance literature in China that is related to earnings management. Previous research on corporate governance mechanisms and earnings management in China is not conclusive. The current research builds on previous literature and provides some meaningful implications for practitioners, regulators, academic, and international investors who have investment interests in a transitional country. The findings of this study contribute to corporate governance and earnings management literature in the context of the transitional economy of China. The use of alternative measures for earnings management yields similar results compared with the accruals models and produces additional findings.

Non-pharmacological interventions for breathlessness management in patients with lung cancer : A systematic review

The aim is to review the published scientific literature for studies evaluating nonpharmacological interventions for breathlessness management in patients with lung cancer. The following selection criteria were used to systematically search the literature: studies were to be published research or systematic reviews; they were to be published in English and from 1990 to 2007; the targeted populations were adult patients with dyspnoea/breathlessness associated with lung cancer; and the study reported on the outcomes from use of non-pharmacological strategies for breathlessness. This review retrieved five studies that met all inclusion criteria. All the studies reported the benefits of non-pharmacological interventions in improving breathlessness regardless of differences in clinical contexts, components of programmes and methods for delivery. Analysis of the available evidence suggests that tailored instructions delivered by nurses with sufficient training and supervision may have some benefits over other delivery approaches. Based on the results, non-pharmacological interventions are recommended as effective adjunctive strategies in managing breathlessness for patients with lung cancer. In order to refine such interventions, future research should seek to explore the core components of such approaches that are critical to achieving optimal outcomes, the contexts in which the interventions are most effective, and to evaluate the relative benefits of different methods for delivering such interventions.

Quality management system and construction performance

This paper discusses the level of effectiveness of quality principles and quality management system implementation and the relationship with performance of ISO9000 certified Indonesian contractors. It also discusses the statistical relationship between quality management systems (QMSs) and key performance indicators (KPIs) amongst a large sample of Indonesian construction companies. Data collected is from questionnaire surveys involving Quality Managers, Managers, and Project and Site Engineers representing 77 different companies. Results indicate that even though some contractors have not yet effectively implemented an effective QMS, most of the KPIs of respondent companies are still at the level of high performance. The statistical results show that the relationship between variables of ISO9000 QMS principles and contractors’ KPIs is significant. These results suggest that an increment in the implementation level of QMS principles can increase KPIs, however that much effort is still required for Indonesian contractors to fully effectively implement QMS principles and thus substantially improve performance against KPIs.

Knowledge management in law enforcement : knowledge views for patrolling police officers

This paper describes and classifies different types of knowledge that are a part of police patrol officer's practice. Even though an investigation usually forces a police officer to apply several different knowledge types, this paper discusses different forms of professional knowledge separately to enable categorisation.

Psycho-markers of weight loss. The roles of TFEQ Disinhibition and Restraint in exercise-induced weight management

Eating behaviour traits, namely Disinhibition and Restraint, have the potential to exert an effect on food intake and energy balance. The effectiveness of exercise as a method of weight management could be influenced by these traits. Fifty eight overweight and obese participants completed 12-weeks of supervised exercise. Each participant was prescribed supervised exercise based on an expenditure of 500 kcal/session, 5 d/week for 12-weeks. Following 12-weeks of exercise there was a significant reduction in mean body weight (-3.26 ± 3.63 kg), fat mass (FM: -3.26 ± 2.64 kg), BMI (-1.16 ± 1.17 kg/m2)and waist circumference (WC: -5.0 ± 3.23 cm). Regression analyses revealed a higher baseline Disinhibition score was associated with a greater reduction in BMI and WC, while Internal Disinhibition was associated with a larger decrease in weight, %FM and WC. Neither baseline Restraint or Hunger were associated with any of the anthropometric markers at baseline or after 12-weeks. Furthermore, after 12-weeks of exercise, a decrease in Disinhibition and increase in Restraint were associated with a greater reduction in WC, whereas only Restraint was associated with a decrease in weight. Post-hoc analysis of the sub-factors revealed a decrease in External Disinhibition and increase in Flexible Restraint were associated with weight loss. However, an increase in Rigid Restraint was associated with a reduction in %FM and WC. These findings suggest that exercise-induced weight loss is more marked in individuals with a high level of Disinhibition. These data demonstrate the important roles that Disinhibition and Restraint play in the relationship between exercise and energy balance.

Policy analysis of disaster health management in China

Humankind has been dealing with all kinds of disasters since the dawn of time. The risk and impact of disasters producing mass casualties worldwide is increasing, due partly to global warming as well as to increased population growth, increased density and the aging population. China, as a country with a large population, vast territory, and complex climatic and geographical conditions, has been plagued by all kinds of disasters. Disaster health management has traditionally been a relatively arcane discipline within public health. However, SARS, Avian Influenza, and earthquakes and floods, along with the need to be better prepared for the Olympic Games in China has brought disasters, their management and their potential for large scale health consequences on populations to the attention of the public, the government and the international community alike. As a result significant improvements were made to the disaster management policy framework, as well as changes to systems and structures to incorporate an improved disaster management focus. This involved the upgrade of the Centres for Disease Control and Prevention (CDC) throughout China to monitor and better control the health consequences particularly of infectious disease outbreaks. However, as can be seen in the Southern China Snow Storm and Wenchuan Earthquake in 2008, there remains a lack of integrated disaster management and efficient medical rescue, which has been costly in terms of economics and health for China. In the context of a very large and complex country, there is a need to better understand whether these changes have resulted in effective management of the health impacts of such incidents. To date, the health consequences of disasters, particularly in China, have not been a major focus of study. The main aim of this study is to analyse and evaluate disaster health management policy in China and in particular, its ability to effectively manage the health consequences of disasters. Flood has been selected for this study as it is a common and significant disaster type in China and throughout the world. This information will then be used to guide conceptual understanding of the health consequences of floods. A secondary aim of the study is to compare disaster health management in China and Australia as these countries differ in their length of experience in having a formalised policy response. The final aim of the study is to determine the extent to which Walt and Gilson’s (1994) model of policy explains how disaster management policy in China was developed and implemented after SARS in 2003 to the present day. This study has utilised a case study methodology. A document analysis and literature search of Chinese and English sources was undertaken to analyse and produce a chronology of disaster health management policy in China. Additionally, three detailed case studies of flood health management in China were undertaken along with three case studies in Australia in order to examine the policy response and any health consequences stemming from the floods. A total of 30 key international disaster health management experts were surveyed to identify fundamental elements and principles of a successful policy framework for disaster health management. Key policy ingredients were identified from the literature, the case-studies and the survey of experts. Walt and Gilson (1994)’s policy model that focuses on the actors, content, context and process of policy was found to be a useful model for analysing disaster health management policy development and implementation in China. This thesis is divided into four parts. Part 1 is a brief overview of the issues and context to set the scene. Part 2 examines the conceptual and operational context including the international literature, government documents and the operational environment for disaster health management in China. Part 3 examines primary sources of information to inform the analysis. This involves two key studies: • A comparative analysis of the management of floods in China and Australia • A survey of international experts in the field of disaster management so as to inform the evaluation of the policy framework in existence in China and the criteria upon which the expression of that policy could be evaluated Part 4 describes the key outcomes of this research which include: • A conceptual framework for describing the health consequences of floods • A conceptual framework for disaster health management • An evaluation of the disaster health management policy and its implementation in China. The research outcomes clearly identified that the most significant improvements are to be derived from improvements in the generic management of disasters, rather than the health aspects alone. Thus, the key findings and recommendations tend to focus on generic issues. The key findings of this research include the following: • The health consequences of floods may be described in terms of time as ‘immediate’, ‘medium term’ and ‘long term’ and also in relation to causation as ‘direct’ and ‘indirect’ consequences of the flood. These two aspects form a matrix which in turn guides management responses. • Disaster health management in China requires a more comprehensive response throughout the cycle of prevention, preparedness, response and recovery but it also requires a more concentrated effort on policy implementation to ensure the translation of the policy framework into effective incident management. • The policy framework in China is largely of international standard with a sound legislative base. In addition the development of the Centres for Disease Control and Prevention has provided the basis for a systematic approach to health consequence management. However, the key weaknesses in the current system include: o The lack of a key central structure to provide the infrastructure with vital support for policy development, implementation and evaluation. o The lack of well-prepared local response teams similar to local government based volunteer groups in Australia. • The system lacks structures to coordinate government action at the local level. The result of this is a poorly coordinated local response and lack of clarity regarding the point at which escalation of the response to higher levels of government is advisable. These result in higher levels of risk and negative health impacts. The key recommendations arising from this study are: 1. Disaster health management policy in China should be enhanced by incorporating disaster management considerations into policy development, and by requiring a disaster management risk analysis and disaster management impact statement for development proposals. 2. China should transform existing organizations to establish a central organisation similar to the Federal Emergency Management Agency (FEMA) in the USA or the Emergency Management Australia (EMA) in Australia. This organization would be responsible for leading nationwide preparedness through planning, standards development, education and incident evaluation and to provide operational support to the national and local government bodies in the event of a major incident. 3. China should review national and local plans to reflect consistency in planning, and to emphasize the advantages of the integrated planning process. 4. Enhance community resilience through community education and the development of a local volunteer organization. China should develop a national strategy which sets direction and standards in regard to education and training, and requires system testing through exercises. Other initiatives may include the development of a local volunteer capability with appropriate training to assist professional response agencies such as police and fire services in a major incident. An existing organisation such as the Communist Party may be an appropriate structure to provide this response in a cost effective manner. 5. Continue development of professional emergency services, particularly ambulance, to ensure an effective infrastructure is in place to support the emergency response in disasters. 6. Funding for disaster health management should be enhanced, not only from government, but also from other sources such as donations and insurance. It is necessary to provide a more transparent mechanism to ensure the funding is disseminated according to the needs of the people affected. 7. Emphasis should be placed on prevention and preparedness, especially on effective disaster warnings. 8. China should develop local disaster health management infrastructure utilising existing resources wherever possible. Strategies for enhancing local infrastructure could include the identification of local resources (including military resources) which could be made available to support disaster responses. It should develop operational procedures to access those resources. Implementation of these recommendations should better position China to reduce the significant health consequences experienced each year from major incidents such as floods and to provide an increased level of confidence to the community about the country’s capacity to manage such events.

To bound or not to bound: preliminary Theory of Time Bounds Specification in strategic alliances

This article augments Resource Dependence Theory with Real Options reasoning in order to explain time bounds specification in strategic alliances. Whereas prior work has found about a 50/50 split between alliances that are time bound and those that are open-ended, their substantive differences and antecedents are ill understood. To address this, we suggest that the two alliance modes present different real options trade-offs in adaptation to environmental uncertainty: ceteris paribus, time-bound alliances are likely to provide abandonment options over open-ended alliances, but require additional investments to extend the alliance when this turns out to be desirable after formation. Open-ended alliances are likely to provide growth options over open-ended alliances, but they demand additional effort to abandon the alliance if post-formation circumstances so desire. Therefore, we expect time bounds specification to be a function of environmental uncertainty: organizations in more uncertain environments will be relatively more likely to place time bounds on their strategic alliances. Longitudinal archival and survey data collected amongst 39 industry clusters provides empirical support for our claims, which contribute to the recent renaissance of resource dependence theory by specifying the conditions under which organizations choose different time windows in strategic partnering.

Body composition and appetite : fat-free mass (but not fat mass or BMI) is positively associated with self-determined meal size and daily energy intake in humans

The idea of body weight regulation implies that a biological mechanism exerts control over energy expenditure and food intake. This is a central tenet of energy homeostasis. However, the source and identity of the controlling mechanism have not been identified, although it is often presumed to be some long-acting signal related to body fat, such as leptin. Using a comprehensive experimental platform, we have investigated the relationship between biological and behavioural variables in two separate studies over a 12-week intervention period in obese adults (total n 92). All variables have been measured objectively and with a similar degree of scientific control and precision, including anthropometric factors, body composition, RMR and accumulative energy consumed at individual meals across the whole day. Results showed that meal size and daily energy intake (EI) were significantly correlated with fat-free mass (FFM, P values ,0·02–0·05) but not with fat mass (FM) or BMI (P values 0·11–0·45) (study 1, n 58). In study 2 (n 34), FFM (but not FM or BMI) predicted meal size and daily EI under two distinct dietary conditions (high-fat and low-fat). These data appear to indicate that, under these circumstances, some signal associated with lean mass (but not FM) exerts a determining effect over self-selected food consumption. This signal may be postulated to interact with a separate class of signals generated by FM. This finding may have implications for investigations of the molecular control of food intake and body weight and for the management of obesity.

Editoral : Correspondence regarding Anker SD, Koehler F, Abraham WT. Telemedicine and remote management of patients with heart failure. The Lancet 2011; 378: 731–39. Published 20 August 2011.

We read the excellent review of telemonitoring in chronic heart failure (CHF)1 with interest and commend the authors on the proposed classification of telemedical remote management systems according to the type of data transfer, decision ability and level of integration. However, several points require clarification in relation to our Cochrane review of telemonitoring and structured telephone support2. We included a study by Kielblock3. We corresponded directly with this study team specifically to find out whether or not this was a randomised study and were informed that it was a randomised trial, albeit by date of birth. We note in our review2 that this randomisation method carries a high risk of bias. Post-hoc metaanalyses without these data demonstrate no substantial change to the effect estimates for all cause mortality (original risk ratio (RR) 0·66 [95% CI 0·54, 0·81], p<0·0001; revised RR 0·72 [95% CI 0·57, 0·92], p=0·008), all-cause hospitalisation (original RR 0·91 [95% CI 0·84, 0·99] p=0·02; revised RR 0.92 [95% CI 0·84, 1·02], p=0·10 ) or CHF-related hospitalisation (original RR 0·79 [95% CI 0·67, 0·94] p=0·008; revised RR 0·75 [95% CI 0·60, 0·94] p=0·01). Secondly, we would classify the Tele-HF study4, 5 as structured telephone support, rather than telemonitoring. Again, inclusion of these data alters the point-estimate but not the overall result of the meta-analyses4. Finally, our review2 does not include invasive telemonitoring as the search strategy was not designed to capture these studies. Therefore direct comparison of our review findings with recent studies of these interventions is not recommended.