Strengthening and formally verifying privacy in identity management systems

In a digital world, users’ Personally Identifiable Information (PII) is normally managed with a system called an Identity Management System (IMS). There are many types of IMSs. There are situations when two or more IMSs need to communicate with each other (such as when a service provider needs to obtain some identity information about a user from a trusted identity provider). There could be interoperability issues when communicating parties use different types of IMS. To facilitate interoperability between different IMSs, an Identity Meta System (IMetS) is normally used. An IMetS can, at least theoretically, join various types of IMSs to make them interoperable and give users the illusion that they are interacting with just one IMS. However, due to the complexity of an IMS, attempting to join various types of IMSs is a technically challenging task, let alone assessing how well an IMetS manages to integrate these IMSs. The first contribution of this thesis is the development of a generic IMS model called the Layered Identity Infrastructure Model (LIIM). Using this model, we develop a set of properties that an ideal IMetS should provide. This idealized form is then used as a benchmark to evaluate existing IMetSs. Different types of IMS provide varying levels of privacy protection support. Unfortunately, as observed by Jøsang et al (2007), there is insufficient privacy protection in many of the existing IMSs. In this thesis, we study and extend a type of privacy enhancing technology known as an Anonymous Credential System (ACS). In particular, we extend the ACS which is built on the cryptographic primitives proposed by Camenisch, Lysyanskaya, and Shoup. We call this system the Camenisch, Lysyanskaya, Shoup - Anonymous Credential System (CLS-ACS). The goal of CLS-ACS is to let users be as anonymous as possible. Unfortunately, CLS-ACS has problems, including (1) the concentration of power to a single entity - known as the Anonymity Revocation Manager (ARM) - who, if malicious, can trivially reveal a user’s PII (resulting in an illegal revocation of the user’s anonymity), and (2) poor performance due to the resource-intensive cryptographic operations required. The second and third contributions of this thesis are the proposal of two protocols that reduce the trust dependencies on the ARM during users’ anonymity revocation. Both protocols distribute trust from the ARM to a set of n referees (n > 1), resulting in a significant reduction of the probability of an anonymity revocation being performed illegally. The first protocol, called the User Centric Anonymity Revocation Protocol (UCARP), allows a user’s anonymity to be revoked in a user-centric manner (that is, the user is aware that his/her anonymity is about to be revoked). The second protocol, called the Anonymity Revocation Protocol with Re-encryption (ARPR), allows a user’s anonymity to be revoked by a service provider in an accountable manner (that is, there is a clear mechanism to determine which entity who can eventually learn - and possibly misuse - the identity of the user). The fourth contribution of this thesis is the proposal of a protocol called the Private Information Escrow bound to Multiple Conditions Protocol (PIEMCP). This protocol is designed to address the performance issue of CLS-ACS by applying the CLS-ACS in a federated single sign-on (FSSO) environment. Our analysis shows that PIEMCP can both reduce the amount of expensive modular exponentiation operations required and lower the risk of illegal revocation of users’ anonymity. Finally, the protocols proposed in this thesis are complex and need to be formally evaluated to ensure that their required security properties are satisfied. In this thesis, we use Coloured Petri nets (CPNs) and its corresponding state space analysis techniques. All of the protocols proposed in this thesis have been formally modeled and verified using these formal techniques. Therefore, the fifth contribution of this thesis is a demonstration of the applicability of CPN and its corresponding analysis techniques in modeling and verifying privacy enhancing protocols. To our knowledge, this is the first time that CPN has been comprehensively applied to model and verify privacy enhancing protocols. From our experience, we also propose several CPN modeling approaches, including complex cryptographic primitives (such as zero-knowledge proof protocol) modeling, attack parameterization, and others. The proposed approaches can be applied to other security protocols, not just privacy enhancing protocols.

Repeatability of measuring corneal subbasal nerve fiber length in individuals with Type 2 Diabetes

Purpose: To analyze the repeatability of measuring nerve fiber length (NFL) from images of the human corneal subbasal nerve plexus using semiautomated software. Methods: Images were captured from the corneas of 50 subjects with type 2 diabetes mellitus who showed varying severity of neuropathy, using the Heidelberg Retina Tomograph 3 with Rostock Corneal Module. Semiautomated nerve analysis software was independently used by two observers to determine NFL from images of the subbasal nerve plexus. This procedure was undertaken on two occasions, 3 days apart. Results: The intraclass correlation coefficient values were 0.95 (95% confidence intervals: 0.92–0.97) for individual subjects and 0.95 (95% confidence intervals: 0.74–1.00) for observer. Bland-Altman plots of the NFL values indicated a reduced spread of data with lower NFL values. The overall spread of data was less for (a) the observer who was more experienced at analyzing nerve fiber images and (b) the second measurement occasion. Conclusions: Semiautomated measurement of NFL in the subbasal nerve fiber layer is highly repeatable. Repeatability can be enhanced by using more experienced observers. It may be possible to markedly improve repeatability when measuring this anatomic structure using fully automated image analysis software.

The ghrelin receptor isoforms (GHS-R1a and GHS-R1b) and GPR39 : an investigation into receptor dimerisation

Prostate cancer is the second most common cause of cancer-related deaths in Western males. Current diagnostic, prognostic and treatment approaches are not ideal and advanced metastatic prostate cancer is incurable. There is an urgent need for improved adjunctive therapies and markers for this disease. GPCRs are likely to play a significant role in the initiation and progression of prostate cancer. Over the last decade, it has emerged that G protein coupled receptors (GPCRs) are likely to function as homodimers and heterodimers. Heterodimerisation between GPCRs can result in the formation of novel pharmacological receptors with altered functional outcomes, and a number of GPCR heterodimers have been implicated in the pathogenesis of human disease. Importantly, novel GPCR heterodimers represent potential new targets for the development of more specific therapeutic drugs. Ghrelin is a 28 amino acid peptide hormone which has a unique n-octanoic acid post-translational modification. Ghrelin has a number of important physiological roles, including roles in appetite regulation and the stimulation of growth hormone release. The ghrelin receptor is the growth hormone secretagogue receptor type 1a, GHS-R1a, a seven transmembrane domain GPCR, and GHS-R1b is a C-terminally truncated isoform of the ghrelin receptor, consisting of five transmembrane domains. Growing evidence suggests that ghrelin and the ghrelin receptor isoforms, GHS-R1a and GHS-R1b, may have a role in the progression of a number of cancers, including prostate cancer. Previous studies by our research group have shown that the truncated ghrelin receptor isoform, GHS-R1b, is not expressed in normal prostate, however, it is expressed in prostate cancer. The altered expression of this truncated isoform may reflect a difference between a normal and cancerous state. A number of mutant GPCRs have been shown to regulate the function of their corresponding wild-type receptors. Therefore, we investigated the potential role of interactions between GHS-R1a and GHS-R1b, which are co-expressed in prostate cancer and aimed to investigate the function of this potentially new pharmacological receptor. In 2005, obestatin, a 23 amino acid C-terminally amidated peptide derived from preproghrelin was identified and was described as opposing the stimulating effects of ghrelin on appetite and food intake. GPR39, an orphan GPCR which is closely related to the ghrelin receptor, was identified as the endogenous receptor for obestatin. Recently, however, the ability of obestatin to oppose the effects of ghrelin on appetite and food intake has been questioned, and furthermore, it appears that GPR39 may in fact not be the obestatin receptor. The role of GPR39 in the prostate is of interest, however, as it is a zinc receptor. Zinc has a unique role in the biology of the prostate, where it is normally accumulated at high levels, and zinc accumulation is altered in the development of prostate malignancy. Ghrelin and zinc have important roles in prostate cancer and dimerisation of their receptors may have novel roles in malignant prostate cells. The aim of the current study, therefore, was to demonstrate the formation of GHS-R1a/GHS-R1b and GHS-R1a/GPR39 heterodimers and to investigate potential functions of these heterodimers in prostate cancer cell lines. To demonstrate dimerisation we first employed a classical co-immunoprecipitation technique. Using cells co-overexpressing FLAG- and Myc- tagged GHS-R1a, GHS-R1b and GPR39, we were able to co-immunoprecipitate these receptors. Significantly, however, the receptors formed high molecular weight aggregates. A number of questions have been raised over the propensity of GPCRs to aggregate during co-immunoprecipitation as a result of their hydrophobic nature and this may be misinterpreted as receptor dimerisation. As we observed significant receptor aggregation in this study, we used additional methods to confirm the specificity of these putative GPCR interactions. We used two different resonance energy transfer (RET) methods; bioluminescence resonance energy transfer (BRET) and fluorescence resonance energy transfer (FRET), to investigate interactions between the ghrelin receptor isoforms and GPR39. RET is the transfer of energy from a donor fluorophore to an acceptor fluorophore when they are in close proximity, and RET methods are, therefore, applicable to the observation of specific protein-protein interactions. Extensive studies using the second generation bioluminescence resonance energy transfer (BRET2) technology were performed, however, a number of technical limitations were observed. The substrate used during BRET2 studies, coelenterazine 400a, has a low quantum yield and rapid signal decay. This study highlighted the requirement for the expression of donor and acceptor tagged receptors at high levels so that a BRET ratio can be determined. After performing a number of BRET2 experimental controls, our BRET2 data did not fit the predicted results for a specific interaction between these receptors. The interactions that we observed may in fact represent ‘bystander BRET’ resulting from high levels of expression, forcing the donor and acceptor into close proximity. Our FRET studies employed two different FRET techniques, acceptor photobleaching FRET and sensitised emission FRET measured by flow cytometry. We were unable to observe any significant FRET, or FRET values that were likely to result from specific receptor dimerisation between GHS-R1a, GHS-R1b and GPR39. While we were unable to conclusively demonstrate direct dimerisation between GHS-R1a, GHS-R1b and GPR39 using several methods, our findings do not exclude the possibility that these receptors interact. We aimed to investigate if co-expression of combinations of these receptors had functional effects in prostate cancers cells. It has previously been demonstrated that ghrelin stimulates cell proliferation in prostate cancer cell lines, through ERK1/2 activation, and GPR39 can stimulate ERK1/2 signalling in response to zinc treatments. Additionally, both GHS-R1a and GPR39 display a high level of constitutive signalling and these constitutively active receptors can attenuate apoptosis when overexpressed individually in some cell types. We, therefore, investigated ERK1/2 and AKT signalling and cell survival in prostate cancer the potential modulation of these functions by dimerisation between GHS-R1a, GHS-R1b and GPR39. Expression of these receptors in the PC-3 prostate cancer cell line, either alone or in combination, did not alter constitutive ERK1/2 or AKT signalling, basal apoptosis or tunicamycin-stimulated apoptosis, compared to controls. In summary, the potential interactions between the ghrelin receptor isoforms, GHS-R1a and GHS-R1b, and the related zinc receptor, GPR39, and the potential for functional outcomes in prostate cancer were investigated using a number of independent methods. We did not definitively demonstrate the formation of these dimers using a number of state of the art methods to directly demonstrate receptor-receptor interactions. We investigated a number of potential functions of GPR39 and GHS-R1a in the prostate and did not observe altered function in response to co-expression of these receptors. The technical questions raised by this study highlight the requirement for the application of extensive controls when using current methods for the demonstration of GPCR dimerisation. Similar findings in this field reflect the current controversy surrounding the investigation of GPCR dimerisation. Although GHS-R1a/GHS-R1b or GHS-R1a/GPR39 heterodimerisation was not clearly demonstrated, this study provides a basis for future investigations of these receptors in prostate cancer. Additionally, the results presented in this study and growing evidence in the literature highlight the requirement for an extensive understanding of the experimental method and the performance of a range of controls to avoid the spurious interpretation of data gained from artificial expression systems. The future development of more robust techniques for investigating GPCR dimerisation is clearly required and will enable us to elucidate whether GHS-R1a, GHS-R1b and GPR39 form physiologically relevant dimers.

Predicting the consumption of foods low in saturated fats among people diagnosed with Type 2 diabetes and cardiovascular disease. The role of planning in the theory of planned behaviour

The present study tested the utility of an extended version of the theory of planned behaviour that included a measure of planning, in the prediction of eating foods low in saturated fats among adults diagnosed with Type 2 diabetes and/or cardiovascular disease. Participants (N = 184) completed questionnaires assessing standard theory of planned behaviour measures (attitude, subjective norm, and perceived behavioural control) and the additional volitional variable of planning in relation to eating foods low in saturated fats. Self-report consumption of foods low insaturated fats was assessed 1 month later. In partial support of the theory of planned behaviour, results indicated that attitude and subjective norm predicted intentions to eat foods low in saturated fats and intentions and perceived behavioural control predicted the consumption of foods low in saturated fats. As an additional variable, planning predicted the consumption of foods low in saturated fats directly and also mediated the intention–behaviour and perceived behavioural control–behaviour relationships, suggesting an important role for planning as a post-intentional construct determining healthy eating choices. Suggestions are offered for interventions designed to improve adherence to healthy eating recommendations for people diagnosed with these chronic conditions with a specific emphasis on the steps and activities that are required to promote a healthier lifestyle.

Randomised controlled trial of an automated, interactive telephone intervention to improve type 2 diabetes self-management (Telephone-Linked Care Diabetes Project) : study protocol

Background: An estimated 285 million people worldwide have diabetes and its prevalence is predicted to increase to 439 million by 2030. For the year 2010, it is estimated that 3.96 million excess deaths in the age group 20-79 years are attributable to diabetes around the world. Self-management is recognised as an integral part of diabetes care. This paper describes the protocol of a randomised controlled trial of an automated interactive telephone system aiming to improve the uptake and maintenance of essential diabetes self-management behaviours. ---------- Methods/Design: A total of 340 individuals with type 2 diabetes will be randomised, either to the routine care arm, or to the intervention arm in which participants receive the Telephone-Linked Care (TLC) Diabetes program in addition to their routine care. The intervention requires the participants to telephone the TLC Diabetes phone system weekly for 6 months. They receive the study handbook and a glucose meter linked to a data uploading device. The TLC system consists of a computer with software designed to provide monitoring, tailored feedback and education on key aspects of diabetes self-management, based on answers voiced or entered during the current or previous conversations. Data collection is conducted at baseline (Time 1), 6-month follow-up (Time 2), and 12-month follow-up (Time 3). The primary outcomes are glycaemic control (HbA1c) and quality of life (Short Form-36 Health Survey version 2). Secondary outcomes include anthropometric measures, blood pressure, blood lipid profile, psychosocial measures as well as measures of diet, physical activity, blood glucose monitoring, foot care and medication taking. Information on utilisation of healthcare services including hospital admissions, medication use and costs is collected. An economic evaluation is also planned.---------- Discussion: Outcomes will provide evidence concerning the efficacy of a telephone-linked care intervention for self-management of diabetes. Furthermore, the study will provide insight into the potential for more widespread uptake of automated telehealth interventions, globally.

Theoretical analysis of serrated chip formation based on ideal models in high speed cutting

In this paper, two ideal formation models of serrated chips, the symmetric formation model and the unilateral right-angle formation model, have been established for the first time. Based on the ideal models and related adiabatic shear theory of serrated chip formation, the theoretical relationship among average tooth pitch, average tooth height and chip thickness are obtained. Further, the theoretical relation of the passivation coefficient of chip's sawtooth and the chip thickness compression ratio is deduced as well. The comparison between these theoretical prediction curves and experimental data shows good agreement, which well validates the robustness of the ideal chip formation models and the correctness of the theoretical deducing analysis. The proposed ideal models may have provided a simple but effective theoretical basis for succeeding research on serrated chip morphology. Finally, the influences of most principal cutting factors on serrated chip formation are discussed on the basis of a series of finite element simulation results for practical advices of controlling serrated chips in engineering application.

Improving matching process in social network

Online dating networks, a type of social network, are gaining popularity. With many people joining and being available in the network, users are overwhelmed with choices when choosing their ideal partners. This problem can be overcome by utilizing recommendation methods. However, traditional recommendation methods are ineffective and inefficient for online dating networks where the dataset is sparse and/or large and two-way matching is required. We propose a methodology by using clustering, SimRank to recommend matching candidates to users in an online dating network. Data from a live online dating network is used in evaluation. The success rate of recommendation obtained using the proposed method is compared with baseline success rate of the network and the performance is improved by double.

Person-independent facial expression detection using constrained local models

In automatic facial expression detection, very accurate registration is desired which can be achieved via a deformable model approach where a dense mesh of 60-70 points on the face is used, such as an active appearance model (AAM). However, for applications where manually labeling frames is prohibitive, AAMs do not work well as they do not generalize well to unseen subjects. As such, a more coarse approach is taken for person-independent facial expression detection, where just a couple of key features (such as face and eyes) are tracked using a Viola-Jones type approach. The tracked image is normally post-processed to encode for shift and illumination invariance using a linear bank of filters. Recently, it was shown that this preprocessing step is of no benefit when close to ideal registration has been obtained. In this paper, we present a system based on the Constrained Local Model (CLM) which is a generic or person-independent face alignment algorithm which gains high accuracy. We show these results against the LBP feature extraction on the CK+ and GEMEP datasets.

Rapid displacement of dengue virus type 1 by type 4, Pacific region, 2007-2009

Since 2000-2001, dengue virus type 1 has circulated in the Pacific region. However, in 2007, type 4 reemerged and has almost completely displaced the strains of type 1. If only 1 serotype circulates at any time and is replaced approximately every 5 years, DENV-3 may reappear in 2012.

Drawing on imagination : primary students' ideal learning environments

Research has established a close relationship between learning environments and learning outcomes (Department of Education and Early Childhood Development, Victoria, 2008; Woolner, Hall, Higgins, McCaughey & Wall, 2007) yet little is known about how students in Australian schools imagine the ways that their learning environments could be improved to enhance their engagement with the processes and content of education and children are rarely consulted on the issue of school design (Rudduck & Flutter, 2004). Currently, school and classroom designers give attention to operational matters of efficiency and economy, so that architecture for children’s education is largely conceived in terms of adult and professional needs (Halpin, 2007). This results in the construction of educational spaces that impose traditional teaching and learning methods, reducing the possibilities of imaginative pedagogical relationships. Education authorities may encourage new, student-centred pedagogical styles, such as collaborative learning, team-teaching and peer tutoring, but the spaces where such innovations are occurring do not always provide the features necessary to implement these styles. Heeding the views of children could result in the creation of spaces where more imaginative pedagogical relationships and student-centred pedagogical styles can be implemented. In this article, a research project conducted with children in nine Queensland primary schools to investigate their ideas of the ideal ‘school’ is discussed. Overwhelmingly, the students’ work emphasised that learning should be fun and that learning environments should be eco-friendly places where their imaginations can be engaged and where they learn from and in touch with reality. The children’s imagined schools echo ideas that have been promoted over many decades by progressive educators such as John Dewey (1897, in Provenzo, 2006) (“experiential learning”), AS Neill (in Cassebaum, 2003) (Summerhill school) and Ivan Illich (1970) (“deschooling”), with a vast majority of students suggesting that, wherever possible, learning should take place away from classrooms and in environments that support direct, hands-on learning.

The organisational gender diversity-performance link : does industry type matter?

Research on workforce diversity gained momentum in the 1990s. However, empirical findings to date on the link between gender diversity and performance have been inconsistent. Based on contrasting theories, this paper proposes a positive linear and a negative linear prediction of the gender diversity-performance relationship. The paper also proposes that industry type (services vs. manufacturing) moderates the gender diversity-performance relationship such that the relationship will be positive in service organisations and negative in manufacturing organisations. The results show partial support for the positive linear gender diversity-performance relationship and for the moderating effect of industry type. The study contributes to the field of diversity by showing that workforce gender diversity can have a different impact on organisational performance in different industries.

Fast content-based file type identification

Digital forensic examiners often need to identify the type of a file or file fragment based only on the content of the file. Content-based file type identification schemes typically use a byte frequency distribution with statistical machine learning to classify file types. Most algorithms analyze the entire file content to obtain the byte frequency distribution, a technique that is inefficient and time consuming. This paper proposes two techniques for reducing the classification time. The first technique selects a subset of features based on the frequency of occurrence. The second speeds classification by sampling several blocks from the file. Experimental results demonstrate that up to a fifteen-fold reduction in file size analysis time can be achieved with limited impact on accuracy.

Living well with diabetes: a randomized controlled trial of a telephone-delivered intervention for maintenance of weight loss, physical activity and glycaemic control in adults with type 2 diabetes

Background By 2025, it is estimated that approximately 1.8 million Australian adults (approximately 8.4% of the adult population) will have diabetes, with the majority having type 2 diabetes. Weight management via improved physical activity and diet is the cornerstone of type 2 diabetes management. However, the majority of weight loss trials in diabetes have evaluated short-term, intensive clinic-based interventions that, while producing short-term outcomes, have failed to address issues of maintenance and broad population reach. Telephone-delivered interventions have the potential to address these gaps. Methods/Design Using a two-arm randomised controlled design, this study will evaluate an 18-month, telephone-delivered, behavioural weight loss intervention focussing on physical activity, diet and behavioural therapy, versus usual care, with follow-up at 24 months. Three-hundred adult participants, aged 20-75 years, with type 2 diabetes, will be recruited from 10 general practices via electronic medical records search. The Social-Cognitive Theory driven intervention involves a six-month intensive phase (4 weekly calls and 11 fortnightly calls) and a 12-month maintenance phase (one call per month). Primary outcomes, assessed at 6, 18 and 24 months, are: weight loss, physical activity, and glycaemic control (HbA1c), with weight loss and physical activity also measured at 12 months. Incremental cost-effectiveness will also be examined. Study recruitment began in February 2009, with final data collection expected by February 2013. Discussion This is the first study to evaluate the telephone as the primary method of delivering a behavioural weight loss intervention in type 2 diabetes. The evaluation of maintenance outcomes (6 months following the end of intervention), the use of accelerometers to objectively measure physical activity, and the inclusion of a cost-effectiveness analysis will advance the science of broad reach approaches to weight control and health behaviour change, and will build the evidence base needed to advocate for the translation of this work into population health practice.