Dizertační práce se zabývá kryptografickými schématy zvyšující ochranu soukromí uživatelů v systémech řízení přístupu a sběru dat. V současnosti jsou systémy fyzického řízení přístupu na bázi čipových karet využívány téměř dennodenně většinou z nás, například v zaměstnání, ve veřejné dopravě a v hotelech. Tyto systémy však stále neposkytují dostatečnou kryptografickou ochranu a tedy bezpečnost. Uživatelské identifikátory a klíče lze snadno odposlechnout a padělat. Funkce, které by zajišťovaly ochranu soukromí uživatele, téměř vždy chybí. Proto je zde reálné riziko možného sledovaní lidí, jejich pohybu a chovaní. Poskytovatelé služeb nebo případní útočníci, kteří odposlouchávají komunikaci, mohou vytvářet profily uživatelů, ví, co dělají, kde se pohybují a o co se zajímají. Za účelem zlepšení tohoto stavu jsme navrhli čtyři nová kryptografická schémata založená na efektivních důkazech s nulovou znalostí a kryptografii eliptických křivek. Konkrétně dizertační práce prezentuje tři nová autentizační schémata pro využití v systémech řízení přístupu a jedno nové schéma pro využití v systémech sběru dat. První schéma využívá distribuovaný autentizační přístup vyžadující spolupráci více RFID prvků v autentizačním procesu. Tato vlastnost je výhodná zvláště v případech řízení přístupu do nebezpečných prostor, kdy pro povolení přístupu uživatele je nezbytné, aby byl uživatel vybaven ochrannými pomůckami (se zabudovanými RFID prvky). Další dvě schémata jsou založena na atributovém způsobu ověření, tj. schémata umožňují anonymně prokázat vlastnictví atributů uživatele, jako je věk, občanství a pohlaví. Zatím co jedno schéma implementuje efektivní revokační a identifikační mechanismy, druhé schéma poskytuje nejrychlejší verifikaci držení uživatelských atributů ze všech současných řešení. Poslední, čtvrté schéma reprezentuje schéma krátkého skupinového podpisu pro scénář sběru dat. Schémata sběru dat se používají pro bezpečný a spolehlivý přenos dat ze vzdálených uzlů do řídící jednotky. S rostoucím významem chytrých měřičů v energetice, inteligentních zařízení v domácnostech a rozličných senzorových sítí, se potřeba bezpečných systémů sběru dat stává velmi naléhavou. Tato schémata musí podporovat nejen standardní bezpečnostní funkce, jako je důvěrnost a autentičnost přenášených dat, ale také funkce nové, jako je silná ochrana soukromí a identity uživatele či identifikace škodlivých uživatelů. Navržená schémata jsou prokazatelně bezpečná a nabízí celou řadu funkcí rozšiřující ochranu soukromí a identity uživatele, jmenovitě se pak jedná o zajištění anonymity, nesledovatelnosti a nespojitelnosti jednotlivých relací uživatele. Kromě úplné kryptografické specifikace a bezpečnostní analýzy navržených schémat, obsahuje tato práce také výsledky měření implementací jednotlivých schémat na v současnosti nejpoužívanějších zařízeních v oblasti řízení přístupu a sběru dat.

De nombreuses études tendent à démontrer qu’au Québec et au Canada, les personnes immigrantes font face à divers obstacles pour accéder au marché de l’emploi québécois, surtout lorsqu’il s’agit d’y exercer une profession réglementée par un ordre professionnel. En effet, avant de décerner un permis, les ordres doivent s’assurer de la compétence des candidats à la profession, conformément à la mission de protection du public qui leur a été déléguée par l’État. Pour ce faire, ils imposent diverses conditions d’admission aux professions, dont celle d’obtenir un diplôme reconnu. Pour ne pas restreindre indûment l’accès aux professions, la loi prévoit que les ordres ont l’obligation d’offrir aux personnes aux parcours atypiques – dont la quasi-totalité sont formées à l’étranger – la possibilité de démontrer l’équivalence de leurs qualifications. Lorsque les ordres estiment qu’il n’y a pas équivalence, des mesures de compensation – sous forme de formations d’appoint, de stages ou d’épreuves d’aptitude – sont prescrites aux candidats. Or, certaines conditions d’admission et procédures de reconnaissance sont aujourd’hui contestées, car considérées inadaptées ou discriminatoires à l’égard des personnes immigrantes. Il convenait donc d’examiner la compatibilité des normes d’admission et de reconnaissance des ordres professionnels québécois au droit à l’égalité, tel que garanti par la Charte des droits et libertés de la personne. La présente thèse conclut que les personnes formées à l’étranger sont victimes de discrimination systémique dans l’admission aux professions. Pour en arriver à cette conclusion, nous avons, dans un premier temps, brossé le portrait du cadre juridique entourant l’admission aux professions, puis identifié, par le biais d’une revue de la littérature, les difficultés que les conditions d’admission et les mécanismes de reconnaissance posent aux personnes formées à l’étranger. Dans un deuxième temps, nous avons appliqué la méthode du droit classique pour mettre en exergue les exigences du droit à la non-discrimination en contexte d’admission aux professions et de reconnaissance des qualifications. L’analyse de la jurisprudence pertinente démontre d’ailleurs que les personnes formées à l’étranger disposent de chances raisonnables de faire valoir le caractère à première vue discriminatoire des normes, pratiques et décisions en la matière. Dans un troisième temps, l’enquête empirique de type qualitatif que nous avons menée, en complément de la méthode du droit classique, mène à la conclusion que les ordres professionnels comprennent mal le sens que prend la protection du public et ses exigences particulières dans le contexte propre des professions qu’ils réglementent. Non seulement ce constat permet-il de remettre en doute la légitimité de l’ensemble des normes, pratiques et décisions des ordres relatives au contrôle de l’admission, mais il confirme que, dans de nombreux cas, les normes d’admission et de reconnaissance, prisent isolément ou lorsque considérées dans leur ensemble, portent atteinte, de façon injustifiée, au droit à l’égalité des personnes formées à l’étranger. Dans un dernier temps, l’ensemble de nos recherches nous a permis de proposer différentes mesures d’ordre systémique à l’attention des ordres, à titre de principaux responsables du contrôle de l’admission, et aux autres acteurs impliqués dans le parcours d’admission et dont l’action concertée est requise pour remédier à la situation. / Multiple studies tend to demonstrate that in Québec, and elsewhere in Canada, immigrants must overcome many obstacles to work in the field in which they were trained. These difficulties are even greater when it comes to accessing a regulated profession. Obtaining a license from a professional regulatory body is contingent on the candidates meeting various requirements, for example having obtained a recognized diploma, which are made to ensure that candidates are sufficiently qualified to practice the profession in a manner deemed safe for the public. In order to not unduly restrict access to these professions, regulatory bodies are legally obliged to offer foreign-trained candidates the opportunity to show that their qualifications are equivalent to those of locally trained candidates. If the qualifications are not deemed equivalent, compensatory measures, such as a training program, an internship, or qualification exams, are imposed. However, certain admission requirements and procedures for recognition of qualifications are now being challenged, as they are considered inappropriate or discriminatory towards immigrants. As a result, it is timely to examine whether these admission and recognition standards respect the right to equality as guaranteed by the Charter of Human Rights and Freedoms (Québec Charter). In this thesis, I conclude that foreign-trained professionals are victims of systemic discrimination when it comes to accessing regulated professions. To arrive at this conclusion, I reviewed the legal framework regulating admission to these professions, and the academic and professional literature relating to the difficulties faced by foreign-trained professionals throughout the admission process. Then, using the traditional legal method, I set out the teachings and principles of anti-discrimination law, and in particular under the Québec Charter. The decisions rendered across Canada in cases brought forward by foreign-trained professionals seeking access to a regulated profession show that, despite some loopholes, immigrants have reasonable chances to prove they are the victims of prima facie discrimination. In addition to the traditional legal method, I conducted a qualitative empirical research that demonstrates that Québec’s professional regulatory bodies misunderstand the meaning of public safety, and what it requires in the specific context of each profession. These observations confirm that, in many cases, norms regarding admission to regulated professions and the recognition of qualifications, whether by themselves or considered as a whole, are not justified, and therefore infringe the provisions of the Québec Charter. I conclude this thesis by proposing various measures, some of which are systemic, that professional regulatory bodies and other actors implicated in the admission processes can put in place in order to ensure that foreign-trained professionals’ equality rights are respected.

No description available.

In recent years, there have been incidents which decreased people's trust in some organizations and authorities responsible for ratings and accreditation. For a few prominent examples, there was a security breach at Equifax (2017), misconduct was found in the Standard & Poor's Ratings Services (2015), and the Accrediting Council for Independent Colleges and Schools (2022) validated some of the low-performing schools as delivering higher standards than they actually were. A natural solution to these types of issues is to decentralize the relevant trust management processes using blockchain technologies. The research problems which are tackled in this thesis consider the issue of trust in reputation for assessment and review credibility at different angles, in the context of blockchain applications. We first explored the following questions. How can we trust courses in one college to provide students with the type and level of knowledge which is needed in a specific workplace? Micro-accreditation on a blockchain was our solution, including using a peer-review system to determine the rigor of a course (through a consensus). Rigor is the level of difficulty in regard to a student's expected level of knowledge. Currently, we make assumptions about the quality and rigor of what is learned, but this is prone to human bias and misunderstandings. We present a decentralized approach that tracks student records throughout the academic progress at a school and helps to match employers' requirements to students' knowledge. We do this by applying micro-accredited topics and Knowledge Units (KU) defined by NSA's Center of Academic Excellence to courses and assignments. We demonstrate that the system was successful in increasing accuracy of hires through simulated datasets, and that it is efficient, as well as scalable. Another problem is how can we trust that the peer reviews are honest and reflect an accurate rigor score? Assigning reputation to peers is a natural method to ensure correctness of these assessments. The reputation of the peers providing rigor scores needs to be taken into account for an overall rigor of a course, its topics, and its tasks. Specifically, those with a higher reputation should have more influence on the total score. Hence, we focused on how a peer's reputation is managed. We explored decentralized reputation management for the peers, choosing a decentralized marketplace as a sample application. We presented an approach to ensuring review credibility, which is a particular aspect of trust in reviews and reputation of the parties who provide them. We use a Proof-of-Stake based Algorand system as a base of our implementation, since this system is open-source, and it has a rich community support. Specifically, we directly map reputation to stake, which allows us to deploy Algorand at the blockchain layer. Reviews are analyzed by the proposed evaluation component using Natural Language Processing (NLP). In our system, NLP gauges the positivity of the written review, compares that value to a scaled numerical rating given, and determines adjustments to a peer's reputation from that result. We demonstrate that this architecture ensures credible and trustworthy assessments. It also efficiently manages the reputation of the peers, while keeping reasonable consensus times. We then turned our focus on ensuring that a peer's reputation is credible. This led us to introducing a new type of consensus called "Proof-of-Review". Our proposed implementation is again based on Algorand, since its modular architecture allows for easy modifications, such as adding extra components, but this time, we modified the engine. The proposed model then provides a trust in evaluations (review and assessment credibility) and in those who provide them (reputation credibility) using a blockchain. We introduce a blacklisting component, which prevents malicious nodes from participating in the protocol, and a minimum-reputation component, which limits the influence of under-performing users. Our results showed that the proposed blockchain system maintains liveliness and completeness. Specifically, blacklisting and the minimum-reputation requirement (when properly tuned) do not affect these properties. We note that the Proof-of-Review concept can be deployed in other types of applications with similar needs of trust in assessments and the players providing them, such as sensor arrays, autonomous car groups (caravans), marketplaces, and more.

La « responsabilité de protéger », concept politique adopté en 2005 pour prévenir et mettre fin aux atrocités criminelles, repose sur un premier pilier —l'obligation de l'Etat de protéger ses populations— dont le consensus apparent a conduit à un manque d’analyse institutionnelle dans sa double dimension constitutionnelle comparée et internationale. Or, l’obligation de l’Etat incombe enparticulier au chef d'Etat. Son obligation de protéger est un élément commun de définition de sa fonction, mais aussi un critère essentiel de différenciation —selon que le chef d’Etat relève d’un modèle étatiste, privilégiant la protection de l’Etat quitte à suspendre le droit, ou d’un modèle libéral, privilégiant la protection de la Constitution et la soumission permanente de l’action politique au droit. La thèse analyse d'abord les sources de l'obligation de protéger du chef d’Etat,successivement théorisée, constitutionnalisée et internationalisée, puis l'exécution de cette obligation résultant de prérogatives, d'immunités et de contrôles de la protection. Les sources de l’obligation révèlent que le chef d’Etat, à l’interface des ordres juridiques interne et international, aune obligation spécifique, non réductible à celle de l’Etat ou de l’individu, qui comporte à la fois une dimension négative (ne pas commettre de crimes contre la population) et une dimension positive(empêcher la commission de tels crimes) et dont l’internationalisation permet de combler les lacunes des Constitutions. Si l’exécution par le chef d’Etat de son obligation de protéger, par la mise en oeuvre de ses prérogatives de protection, est soumise à un contrôle croissant, tant politique que juridictionnel, ce processus reste néanmoins inachevé, faute d'une responsabilité politique internationale, systématique et institutionnalisée. La thèse conclut à l’utilité d'une individualisation de la « responsabilité de protéger » et à l’enrichissement de ce concept par le contrôle de l’obligation de protéger du chef d’Etat. / The political concept of the “responsibility to protect” was adopted in 2005 to prevent and p ut anend to criminal atrocities. The apparent consensus over its first pillar, the State’s obligation to protect its populations, has resulted in a lack of institutional analyses regarding its combined comparative constitutional and international aspects. Importantly, the State’s obligation rests in particular with the Head of State. The obligation to protect is common to all heads of state, but it also differentiates among them, depending on whether their obligation is State-oriented (with the aim to protect the State, even if that requires the suspension of the rule of law) or Rule-of-law oriented (with the aim to protect a liberal constitutional order while always subjecting political actionto the rule of law). The thesis begins with an analysis of the sources of law relating to the Head of State’s obligation to protect, as it was successively theorised, constitutionalised and internationalised. It then turns to the execution of this obligation, which derives from the Head of State’s prerogatives, the relevant immunities involved and available institutional review over his orher activities. The study of the sources reveals that the Head of State (at the interface between the domestic and the international legal orders) is bound by a specific obligation, which exceeds the confines of the obligations of either the State or the individual. This obligation is both negative and positive as it requires both not to commit crimes against the population, and to prevent and put an end to such crimes. Its international dimension supplements the missing parts in the Constitutions.The execution of this obligation, by the implementation of the Head of State’s prerogatives, is subject to an increasing political and judicial control. However, this control remains under construction due to a lack of systematic and institutionalized international political responsibility. The thesis concludes that the “responsibility to protect” could be usefully “individualized” and enriched by institutional supervision and judicial review of the Head of State’s obligation to protect.

This thesis proposes an Ecosystem perspective for the engineering of SoS and CPS and illustrates the impact of this perspective in three areas of contribution category First, from a conceptual and Systems Engineering perspective, a conceptual framework including the Ecosystems of System Unified Language Modeling (EoS-UML) profile, a set of Ecosystem Ensemble Diagrams, the Arms :Length Trust Model and the Cyber Physical Threat Model are provided. Second, having established this conceptual view of the ecosystem, we recognize unique role of the cryptographic credentials within it, towards enabling the ecosystem long-term value proposition and acting as a value transfer agent, implementing careful balance of properties meet stakeholder needs. Third, we propose that the ecosystem computers can be used as a distributed compute engine to run Collaborative Algorithms. To demonstrate, we define access control scheme, risk-balanced Cellular Access Control (rbCAC). The rbCAC algorithm defines access control within a cyber-physical environment in a manner which balances cost, risk, and net utility in a multi-authority setting. rbCAC is demonstrated it in an Air Travel and Border Services scenario. Other domains are also discussed included air traffic control threat prevention from drone identity attacks in protected airspaces. These contributions offer significant material for future development, ongoing credential and ecosystem design, including dynamic perimeters and continuous-time sampling, intelligent and self optimizing ecosystems, runtime collaborative platform design contracts and constraints, and analysis of APT attacks to SCADA systems using ecosystem approaches.

No description available.

This dissertation interrogates the deficit assumptions about English proficiency of skilled immigrants who were recruited by Canadian governments between the late 1990s and early 2000s. Through the lens of literacy as social practice, the eighteen-month ethnographic qualitative research explores the sequential experiences of settlement and economic integration of seven well-educated Chinese immigrant professionals. The analytical framework is built on sociocultural approaches to literacy and learning, as well as the theories of discourses and language reproduction. Using multiple data sources (observations, conversational interviews, journal and diary entries, photographs, documents, and artifacts collected in everyday lives), I document many different ways that well-educated Chinese immigrants take advantage of their language and literacy skills in English across several social domains of home, school, job market, and workplace. Examining the trans-contextual patterning of the participants’ language and literacy activities reveals that immigrant professionals use literacy as assistance in seeking, negotiating, and taking hold of resources and opportunities within certain social settings. However, my data show that their language and literacy engagements might not always generate positive consequences for social networks, job opportunities, and upward economic mobility. Close analyses of processes and outcomes of the participants’ engagements across these discursive discourses make it very clear that the monolithic assumptions of the dominant language shape and reinforce structural barriers by constraining their social participation, decision making, and learning practice, and thereby make literacy’s consequences unpredictable. The deficit model of language proficiency serves the grounds for linguistic stereotypes and economic marginalization, which produces profoundly consequential effects on immigrants’ pathways as they strive for having access to resources and opportunities in the new society. My analyses illuminate the ways that language and literacy create the complex web of discursive spaces wherein institutional agendas and personal desires are intertwined and collide in complex ways that constitute conditions and processes of social and economic mobility of immigrant populations. Based on these analyses, I argue that immigrants’ successful integration into a host country is not about the mastery of the technical skills in the dominant language. Rather, it is largely about the recognition and acceptance of the value of their language use and literacy practice as they attempt to partake in the globalized new economy.

This dissertation interrogates the deficit assumptions about English proficiency of skilled immigrants who were recruited by Canadian governments between the late 1990s and early 2000s. Through the lens of literacy as social practice, the eighteen-month ethnographic qualitative research explores the sequential experiences of settlement and economic integration of seven well-educated Chinese immigrant professionals. The analytical framework is built on sociocultural approaches to literacy and learning, as well as the theories of discourses and language reproduction. Using multiple data sources (observations, conversational interviews, journal and diary entries, photographs, documents, and artifacts collected in everyday lives), I document many different ways that well-educated Chinese immigrants take advantage of their language and literacy skills in English across several social domains of home, school, job market, and workplace. Examining the trans-contextual patterning of the participants’ language and literacy activities reveals that immigrant professionals use literacy as assistance in seeking, negotiating, and taking hold of resources and opportunities within certain social settings. However, my data show that their language and literacy engagements might not always generate positive consequences for social networks, job opportunities, and upward economic mobility. Close analyses of processes and outcomes of the participants’ engagements across these discursive discourses make it very clear that the monolithic assumptions of the dominant language shape and reinforce structural barriers by constraining their social participation, decision making, and learning practice, and thereby make literacy’s consequences unpredictable. The deficit model of language proficiency serves the grounds for linguistic stereotypes and economic marginalization, which produces profoundly consequential effects on immigrants’ pathways as they strive for having access to resources and opportunities in the new society. My analyses illuminate the ways that language and literacy create the complex web of discursive spaces wherein institutional agendas and personal desires are intertwined and collide in complex ways that constitute conditions and processes of social and economic mobility of immigrant populations. Based on these analyses, I argue that immigrants’ successful integration into a host country is not about the mastery of the technical skills in the dominant language. Rather, it is largely about the recognition and acceptance of the value of their language use and literacy practice as they attempt to partake in the globalized new economy.