Authentication and Authorisation Mechanisms in support of Secure Access to WMN Resources

Over the past several years, a number of design approaches in wireless mesh networks have been introduced to support the deployment of wireless mesh networks (WMNs). We introduce a novel wireless mesh architecture that supports authentication and authorisation functionalities, giving the possibility of a seamless WMN integration into the home's organization authentication and authorisation infrastructure. First, we introduce a novel authentication and authorisation mechanism for wireless mesh nodes. The mechanism is designed upon an existing federated access control approach, i.e. the AAI infrastructure that is using just the credentials at the user's home organization in a federation. Second, we demonstrate how authentication and authorisation for end users is implemented by using an existing web-based captive portal approach. Finally, we observe the difference between the two and explain in detail the process flow of authorized access to network resources in wireless mesh networks. The goal of our wireless mesh architecture is to enable easy broadband network access to researchers at remote locations, giving them additional advantage of a secure access to their measurements, irrespective of their location. It also provides an important basis for the real-life deployment of wireless mesh networks for the support of environmental research.

O âmbito de aplicação material da legislação de proteção de dados pessoais e o tratamento de imagem por pessoa singular

Images have gained a never before seen importance. Technological changes have given the Information Society extraordinary means to capture, treat and transmit images, wheter your own or those of others, with or without a commercial purpose, with no boundaries of time or country, without “any kind of eraser”. From the several different ways natural persons may engage in image processing with no commercial purpose, the cases of sharing pictures through social networks and video surveillance assume particular relevance. Consequently there are growing legitimate concerns with the protection of one's image, since its processing may sometimes generate situations of privacy invasion or put at risk other fundamental rights. With this in mind, the present thesis arises from the question: what are the existent legal instruments in Portuguese Law that enable citizens to protect themselves from the abusive usage of their own pictures, whether because that image have been captured by a smartphone or some video surveillance camera, whether because it was massively shared through a blog or some social network? There is no question the one's right to not having his or her image used in an abusive way is protected by the Portuguese constitution, through the article 26th CRP, as well as personally right, under the article 79th of the Civil Code, and finally through criminal law, articles 192nd and 193rd of the Criminal Code. The question arises in the personal data protection context, considering that one's picture, given certain conditions, is personal data. Both the Directive 95/46/CE dated from 1995 as well as the LPD from 1998 are applicable to the processing of personal data, but both exclude situations of natural persons doing so in the pursuit of activities strictly personal or family-related. These laws demand complex procedures to natural persons, such as the preemptive formal authorisation request to the Data Protection National Commission. Failing to do so a natural person may result in the application of fines as high as €2.500,00 or even criminal charges. Consequently, the present thesis aims to study if the image processing with no commercial purposes by a natural person in the context of social networks or through video surveillance belongs to the domain of the existent personal data protection law. To that effect, it was made general considerations regarding the concept of video surveillance, what is its regimen, in a way that it may be distinguishable from Steve Mann's definition of sousveillance, and what are the associated obligations in order to better understand the concept's essence. The application of the existent laws on personal data protection to images processing by natural persons has been analysed taking into account the Directive 95/46/CE, the LPD and the General Regulation. From this analysis it is concluded that the regimen from 1995 to 1998 is out of touch with reality creating an absence of legal shielding in the personal data protection law, a flaw that doesn't exist because compensated by the right to image as a right to personality, that anyway reveals the inability of the Portuguese legislator to face the new technological challenges. It is urgent to legislate. A contrary interpretation will evidence the unconstitutionality of several rules on the LPD due to the obligations natural persons are bound to that violate the right to the freedom of speech and information, which would be inadequate and disproportionate. Considering the recently approved General Regulation and in the case it becomes the final version, the use for natural person of video surveillance of private spaces, Google Glass (in public and private places) and other similar gadgets used to recreational purposes, as well as social networks are subject to its regulation only if the images are shared without limits or existing commercial purposes. Video surveillance of public spaces in all situations is subject to General Regulation provisions.

Quarterly analysis of Mental Capacity Act 2005, Deprivation of Liberty Safeguards Assessments (England) Quarters 1 to 3 2009/10

Hospitals and care homes are making use of new measures designed to protect people unable to give consent for their care.The Mental Capacity Act Deprivation of Liberty Safeguards were introduced by law on 1 April 2009 to provide a legal framework for depriving someone of their liberty where they are unable to give informed consent regarding their care. The statistics presented here provide the first official information about authorisations to legally detain a person using the legislation.The safeguards apply to people aged 18 and above who suffer from a mental disorder of the mind (such as dementia or a profound learning disability) and who lack capacity to give consent to the arrangements made for their care and / or treatment. The safeguards cover people in all hospitals and care homes in the statutory, independent and voluntary sectors.A rigorous, standardised assessment and authorisation process is used to ensure only appropriate use is made of the safeguards.Key facts?The number of authorisation requests were: 1,772 in quarter 1 1,681 in quarter 2 and, 1,869 in quarter 3. ?Of the total assessments completed in each quarter, a higher proportion were for females than for males ?For each quarter, around three out of four assessments were made by local authorities while the remaining ones were made by primary care trusts. ?The percentage of authorisations granted leading to someone being deprived of their liberty varied between 33.5 per cent and 50.7 per cent across quarters 1 to 3. ?At 31 December 2009 1,074 people were subject to such authorisations.Quarterly analysis of Mental Capacity Act 2005, Deprivation of Liberty Safeguards Assessments (England) Quarter 1 (0.31MB)Quarterly analysis of Mental Capacity Act 2005, Deprivation of Liberty Safeguards Assessments (England) Quarter 2 (0.31MB)Quarterly analysis of Mental Capacity Act 2005, Deprivation of Liberty Safeguards Assessments (England) Quarter 3 (0.31MB)Have your say - give us your comments on this publication��

The right to appeal in cases of forensic autopsies. [Le droit de recours en matière d'autopsies médico-légales.]

The decision to carry out forensic autopsies is frequently made to determine the reasons of the death, especially in cases of non-natural death. In Switzerland, the judge strictly controls the authorisation to conduct forensic autopsies and the possibility to appeal against such a decision remains limited. This article aims to analyse the legal framework that enables appeals against a decision to conduct a forensic autopsy, taking into account the jurisprudence from the High Court of Switzerland (Tribunal Fédéral) and the European Court of Human Rights. La décision de pratiquer des autopsies médico-légales est très fréquente pour déterminer les causes de décès, notamment lorsque ceux-ci semblent avoir des causes non naturelles. En Suisse, l'autorisation de procéder à des autopsies médico-légales est strictement encadrée sur le plan légal et la faculté de s'opposer à une telle autorisation reste très limitée. L'article s'attache à analyser les conditions qui permettent de recourir contre une décision d'autopsie médico-légale, à la lumière notamment des décisions du Tribunal Fédéral et de la Cour européenne des droits de l'homme.

Institucionalización de la evaluación del impacto en la salud en Andalucía.

Health impact assessment (HIA) aims to incorporate people's health and wellbeing as a key feature in policy-making. Many authors believe that HIA might be systematically integrated into all decision-making processes as a way to achieve that goal. To that end, there is need to overcome a number of challenges, including the fact that Andalusia (Spain) has made HIA compulsory by law, the need for awareness of all public sectors whose decisions might have substantial impacts on health and for a methodology that would enable a comprehensive approach to health determinants and inequalities, and the training of both the public health staff and professional sectors responsible for its application. In Andalusia, a law provides mandatory and binding health impact reports for most authorisation procedures in different areas: from sectoral plans to urban planning schemes, and especially projects subject to environmental assessment. Implementation of this law has required its integration into authorisation procedures, the training of interdisciplinary working groups in public health, the preparation of technical guidelines, and the organisation of dissemination and training seminars for developers.

Protecting mobile agents from external replay attacks

Peer-reviewed