Using Graphs to Visualise and Detect Anomalies in Access Control System Transactions

Physical Access Control Systems are commonly used to secure doors in buildings such as airports, hospitals, government buildings and offices. These systems are designed primarily to provide an authentication mechanism, but they also log each door access as a transaction in a database. Unsupervised learning techniques can be used to detect inconsistencies or anomalies in the mobility data, such as a cloned or forged Access Badge, or unusual behaviour by staff members. In this paper, we present an overview of our method of inferring directed graphs to represent a physical building network and the flows of mobility within it. We demonstrate how the graphs can be used for Visual Data Exploration, and outline how to apply algorithms based on Information Theory to the graph data in order to detect inconsistent or abnormal behaviour.

Event-driven implicit authentication for mobile access control

In order to protect user privacy on mobile devices, an event-driven implicit authentication scheme is proposed in this paper. Several methods of utilizing the scheme for recognizing legitimate user behavior are investigated. The investigated methods compute an aggregate score and a threshold in real-time to determine the trust level of the current user using real data derived from user interaction with the device. The proposed scheme is designed to: operate completely in the background, require minimal training period, enable high user recognition rate for implicit authentication, and prompt detection of abnormal activity that can be used to trigger explicitly authenticated access control. In this paper, we investigate threshold computation through standard deviation and EWMA (exponentially weighted moving average) based algorithms. The result of extensive experiments on user data collected over a period of several weeks from an Android phone indicates that our proposed approach is feasible and effective for lightweight real-time implicit authentication on mobile smartphones.

Fuzzy logic-based implicit authentication for mobile access control

In order to address the increasing compromise of user privacy on mobile devices, a Fuzzy Logic based implicit authentication scheme is proposed in this paper. The proposed scheme computes an aggregate score based on selected features and a threshold in real-time based on current and historic data depicting user routine. The tuned fuzzy system is then applied to the aggregated score and the threshold to determine the trust level of the current user. The proposed fuzzy-integrated implicit authentication scheme is designed to: operate adaptively and completely in the background, require minimal training period, enable high system accuracy while provide timely detection of abnormal activity. In this paper, we explore Fuzzy Logic based authentication in depth. Gaussian and triangle-based membership functions are investigated and compared using real data over several weeks from different Android phone users. The presented results show that our proposed Fuzzy Logic approach is a highly effective, and viable scheme for lightweight real-time implicit authentication on mobile devices.

Performance analysis of an improved power-saving medium access protocol for IEEE 802.11 point coordination function WLAN

Wireless enabled portable devices must operate with the highest possible energy efficiency while still maintaining a minimum level and quality of service to meet the user's expectations. The authors analyse the performance of a new pointer-based medium access control protocol that was designed to significantly improve the energy efficiency of user terminals in wireless local area networks. The new protocol, pointer controlled slot allocation and resynchronisation protocol (PCSAR), is based on the existing IEEE 802.11 point coordination function (PCF) standard. PCSAR reduces energy consumption by removing the need for power saving stations to remain awake and listen to the channel. Using OPNET, simulations were performed under symmetric channel loading conditions to compare the performance of PCSAR with the infrastructure power saving mode of IEEE 802.11, PCF-PS. The simulation results demonstrate a significant improvement in energy efficiency without significant reduction in performance when using PCSAR. For a wireless network consisting of an access point and 8 stations in power saving mode, the energy saving was up to 31% while using PCSAR instead of PCF-PS, depending upon frame error rate and load. The results also show that PCSAR offers significantly reduced uplink access delay over PCF-PS while modestly improving uplink throughput.

Improved power-saving medium access protocol for IEEE 802.11e QoS-enabled wireless networks

The performance of a new pointer-based medium-access control protocol that was designed to significantly improve the energy efficiency of user terminals in quality-of-service-enabled wireless local area networks was analysed. The new protocol, pointer-controlled slot allocation and resynchronisation protocol (PCSARe), is based on the hybrid coordination function-controlled channel access mode of the IEEE 802.11e standard. PCSARe reduces energy consumption by removing the need for power-saving stations to remain awake for channel listening. Discrete event network simulations were performed to compare the performance of PCSARe with the non-automatic power save delivery (APSD) and scheduled-APSD power-saving modes of IEEE 802.11e. The simulation results show a demonstrable improvement in energy efficiency without significant reduction in performance when using PCSARe. For a wireless network consisting of an access point and eight stations in power-saving mode, the energy saving was up to 39% when using PCSARe instead of IEEE 802.11e non-APSD. The results also show that PCSARe offers significantly reduced uplink access delay over IEEE 802.11e non-APSD, while modestly improving the uplink throughput. Furthermore, although both had the same energy consumption, PCSARe gave a 25% reduction in downlink access delay compared with IEEE 802.11e S-APSD.

Do environmental and task characteristics matter in the control of externalized local public services? Unveiling the relevance of party characteristics and citizens’ offstage voice

Purpose: The purpose of this paper is to investigate the mechanisms adopted by cities to control the provision of externalized public services and to explore the determinants of such control choices.

Design/methodology/approach: The paper presents the results of a multiple case study based on the experiences of three cities and three public services (transport, solid waste collection and home care services for the elderly), where control mechanisms and their possible antecedents were analyzed.

Findings: The results show that the control models found in the cases analyzed do not correspond to the "pure" patterns described in the private sector literature and that the factors identified by management control contributions do not seem to be exhaustive in explaining the configuration of control systems in the public sector. While environmental and task characteristics only partially explain the adoption of certain configurations of control, the features of the control systems seem to be rather influenced by variables that are related to party characteristics.

Originality/value: The paper shows that the combinations of control mechanisms are more multifaceted than those presented in the literature, and that the factors identified in the private sector literature do not seem to explain comprehensively the configuration of control systems in the public sector. © Emerald Group Publishing Limited.

A Question of Legitimacy? A Dynamic Perspective on Multinational Firm Control

The control and coordination of a network of geographically and culturally dispersed subsidiaries is one of the most prominent challenges in international management. However, many empirical findings on the effectiveness of various control mechanisms and combinations thereof are still counterintuitive. This study uses longitudinal case studies and cross-sectional interview data to extend control theory by examining why, how, and in what sequence large multinational firms (MNCs) implement controls in their networks of foreign subsidiaries. Our analysis draws from literature on institutional theory, embeddedness, and organizational power to demonstrate that MNC headquarters need to overcome institutional duality when implementing their controls abroad. We find that headquarters do so by using social controls, primarily as a way of legitimizing and institutionalizing their process and output controls that are implemented subsequently.

Control Patterns in Contracting-Out Relationships: It Matters What You Do, Not Who You Are

The contracting-out of public services has often been accompanied by a strong academic focus on the emergence of new governance forms, and a general neglect of the processes and practices through which contracted-out services are controlled and monitored. To fill this gap, we draw on contracting-out and inter-organizational control literatures to explore the adoption of control mechanisms for public service provision at the municipal level and the variables that can explain their choice. Our results, based on a survey of Italian municipalities, show that in the presence of contracting-out, market-, hierarchy- and trust-based controls display different intensities, can co-exist and are explained by different variables. Service characteristics are more effective in explaining market- and hierarchy-based controls than relationship characteristics. Trust-based controls are the most widespread, but cannot be explained by the variables traditionally identified in contracting-out and inter-organizational control studies.

Cross-layer Framework for Fine-grained Channel Access in Next Generation High-density WiFi Networks

Densely deployed WiFi networks will play a crucial role in providing the capacity for next generation mobile internet. However, due to increasing interference, overlapped channels in WiFi networks and throughput efficiency degradation, densely deployed WiFi networks is not a guarantee to obtain higher throughput. An emergent challenge is how to efficiently utilize scarce spectrum resources, by matching physical layer resources to traffic demand. In this aspect, access control allocation strategies play a pivotal role but remain too coarse-grained. As a solution, this research proposes a flexible framework for fine-grained channel width adaptation and multi-channel access in WiFi networks. This approach, named SFCA (Sub-carrier Fine-grained Channel Access), adopts DOFDM (Discontinuous Orthogonal Frequency Division Multiplexing) at the PHY layer. It allocates the frequency resource with a sub-carrier granularity, which facilitates the channel width adaptation for multi-channel access and thus brings more flexibility and higher frequency efficiency. The MAC layer uses a frequency-time domain backoff scheme, which combines the popular time-domain BEB scheme with a frequency-domain backoff to decrease access collision, resulting in higher access probability for the contending nodes. SFCA is compared with FICA (an established access scheme) showing significant outperformance. Finally we present results for next generation 802.11ac WiFi networks.