Search NASA⌕ Search

SEARCH · Search NASA

Results for “authentication”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Fermilab's Transition to Token Authentication

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in their grid jobs. Many software components have been either updated or created for this transition, and most of the software is available to others as open source. The tokens are defined using the WLCG Common JWT Profile. Token attributes for all the tokens are stored in the Fermilab FERRY system which generates the configuration for the CILogon token issuer. High security-value refresh tokens are stored in Hashicorp Vault configured by htvault-config, and JWT access tokens are requested by the htgettoken client through its integration with HTCondor. The Fermilab job submission system jobsub was redesigned to be a lightweight wrapper around HTCondor. The grid workload management system GlideinWMS which is also based on HTCondor was updated to use tokens for pilot job submission. For automated job submissions a managed tokens service was created to reduce duplication of effort and knowledge of how to securely keep tokens active. The existing Fermilab file transfer tool ifdh was updated to work seamlessly with tokens, as well as the Fermilab POMS (Production Operations Management System) which is used to manage automatic job submission and the RCDS (Rapid Code Distribution System) which is used to distribute analysis code via the CernVM FileSystem. The dCache storage system was reconfigured to accept tokens for authentication in place of X.509 proxy certificates. As some services and sites have not yet implemented token support, proxy certificates are still sent with jobs for backwards compatibility, but some experiments are beginning to transition to stop using them.

Dykstra, Dave [Fermilab] (ORCID:0000000326539015)↗
DOE OSTI2025

Simulation of a Wireless Authentication Protocol

Abstract—A wireless authentication protocol that employs timeslots and associated frequency-channels (APEC) is simulated using Python as the simulation environment and implemented into radio hardware as a proof of concept. The APEC protocol does not rely on the use of challenge-response, multifactor authentication schemes but relies instead on the physical properties of a wireless signal. The APEC protocol provides opportunities for real-time deployment in cell phone network infrastructure, as well as in adverse civil and military applications. Description of the APEC implementation and the corresponding results of the simulation study are presented.

42 - ENGINEERING↗
DOE OSTI2021

Source Authentication of Distribution Synchrophasors for Cybersecurity of Microgrids

This letter proposes a hybrid approach combining Self-Adaptive Mathematical Morphology (SAMM) and Time-Frequency (TF) techniques to authenticate the source information of Distribution Synchrophasors (DS) within near-range locations. The SAMM can adaptively regulate the synchrophasors variations which are representatives of local environmental characteristics. Subsequently, TF mapping is employed to extract informative signatures from the regulated synchrophasors variation. Finally, Random Forest Classification (RFC) is used to correlate the extracted signatures with the source information based on the derived TF mapping. Experiment results using DS collected at multiple small geographical scales validated the proposed methodology.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2018

A Measurement Source Authentication Methodology for Power System Cyber Security Enhancement

This letter proposes a spatial signature-based power system measurement source identification and authentication methodology. A mathematical morphology method is used to decompose the power system measurement signals and obtain the intrinsic components, which sparsity trends and roughness values are further derived to establish the time-frequency (TF) sparsity mapping. Then random forest classification is utilized to correlate the correct measurement source for each measurement signal based on the derived TF sparsity mapping. Finally, experiment results using five phasor measurement units has validated the effectiveness of this methodology.

42 ENGINEERING↗
DOE OSTI2020

Model-Free Data Authentication for Cyber Security in Power Systems

With the development and wide deployment of measurement equipment, data can be automatically measured and visualized for situation awareness in power systems. However, the cyber security of power systems is also threated by data spoofing attacks. This letter proposed a measurement data source authentication (MDSA) algorithm based on feature extraction techniques including ensemble empirical mode decomposition (EEMD) and fast Fourier transform (FFT), and machine learning for real-time measurement data classification. Compared with previous work, the proposed algorithm can achieve higher accuracy of MDSA using a shorter window of data from closely located synchrophasor measurement sensors.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2018

ExMASS: A viable model for authentic student-scientist research partnerships

The Exploration of the Moon and Asteroids by Secondary Students (ExMASS) program provides students the opportunity to conduct authentic, student-led, open-inquiry research with assistance from their teacher and a scientist. One goal of the program is to enhance participants’ attitudes toward science. Most students enter the ExMASS program with positive attitudes toward science. However, the attitude survey developed for ExMASS measured small but statistically significant increases in attitudes. This paper discusses the ExMASS program, an attitude towards science survey designed for the program’s specific audience, and the results of statistical analyses of the survey. The validity of the attitudes survey was tested with an exploratory factor analysis (EFA). The results of the EFA revealed two salient factors measured by the survey: 1) Personal Importance of Science and 2) Importance of Science to Society. A reliability analysis revealed a Cronbach alpha value of 0.89. Paired t-tests revealed statistically significant differences in students’ attitudes before and after the program. For Factor 1, participants’ before scores were statistically significantly lower than their post scores, t(88) = 3.16, p<0.05. For Factor 2, participants’ before scores were statistically significantly lower than their post scores, t(88) = 4.47, p<0.05. ExMASS has been shown to be a practical model for programs designed to increase high school student attitudes toward science. More information on the ExMASS program is available at https://www.lpi.usra.edu/exploration/education/hsResearch/.

science↗
DOE OSTI2024

Fractionation of critical metals from authentic acid mine drainage using a multi-bed immobilized amine sorbent setup: A field site study

Here for the first time reported, a flow-through multi-fixed bed immobilized amine/silica sorbent strategy was employed to fractionate purified critical metals from authentic acid mine drainage (AMD). The U.S. Department of Energy’s (DOE) National Energy Technology Laboratory’s (NETL) patent-pending Multi-functional Sorbent Technology (MUST) sorbents were used to recover critical metals from AMD at the Pittsburgh Botanic Garden (Pittsburgh, PA USA). By adjusting the AMD/sorbent ratio, we recovered > 80% of pure adsorbed Mn (by adsorbed metal weight) and >90% pure adsorbed Al at lab-scale. Further optimizing the weight hourly space velocity (WHSV) enhanced the rate of adsorbed Al recovery by over five times, justifying a field site test. After treating >100 L of AMD at the field site, the optimized polyamine/epoxysilane/aminosilane sorbent recovered approximately 0.7 wt% adsorbed Al at > 90% purity. A tangible amount of purified aluminum hydroxide [Al(OH) 3 ] and aluminum sulfate [Al 2 (SO 4 ) 3 ] solids were then recovered after eluting and precipitating the previously adsorbed metals.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2022

Mild, Electroreductive Lignin Cleavage: Optimizing the Depolymerization of Authentic Lignins

Among candidate strategies to depolymerize lignin, electroreduction has promise as a mild, environmentally friendly, low-cost method to cleave lignin’s most common linkage, the β-O-4 bond. Much of the prior work on lignin electrolysis has focused on anodic (oxidative) approaches, while most available electroreduction studies have studied lignin model compounds rather than authentic lignin. Here, after optimizing with a model system, we investigated the room-temperature electroreductive cleavage of four common lignin samples from different pretreatment approaches, including Kraft, Soda, GVL, and Cu-AHP lignin. This mild electrolysis process resulted in the solubilization of 45% of the GVL lignin and 60% of the Cu-AHP lignin, affording approximately 17.6 and 19.4 wt % of monomeric materials, respectively. Furthermore, the present work is an encouraging first step toward an electroreductive strategy for lignin depolymerization and upgrading.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2019

N2O5 Reactive Uptake Kinetics and Chlorine Activation on Authentic Biomass-Burning Aerosol

We examined the reactive uptake of dinitrogen pentoxide (N2O5) to authentic biomass-burning aerosol (BBA) using a small chamber reservoir in combination with an entrained aerosol flow tube. BBA was generated from four different fuel types and the reactivity of N2O5 was probed from 30 to 70% relative humidity (RH). The N2O5 reactive uptake coefficient, ?(N2O5), depended upon RH, fuel type, and to a lesser degree on aerosol chloride mass fractions. The ?(N2O5) ranged from 2.0 (±0.4) x10-3 on black needlerush derived BBA at 30% RH to 6.0 (±0.6) x10-3 on wiregrass derived BBA at 65% RH. Major N2O5 reaction products were observed including gaseous ClNO2 and HNO3 and particulate nitrate, and used to create a reactive nitrogen budget. Black needlerush BBA had the most particulate chloride, and the only measured ClNO2 yield > 1%. The ClNO2 yield on black needlerush decayed from an initial value of ~100% to ~ 30% over the course of the burn experiment, suggesting a depletion of BBA chloride over time. Black needlerush was also the only fuel for which the reactive nitrogen budget indicated other N-containing products were generated. Generally, the results suggest limited chloride availability for heterogeneous reaction for BBA in the RH range probed here, including BBA with chloride mass fractions on the higher end of reported values (~17-34%)(1,2). though less than sea spray aerosol, ~50%(3). We use these measured quantities to discuss the implications for nocturnal aerosol nitrate formation, the chemical fate of N2O5 (g), and the availability of particulate chloride for activation in biomass burning plumes.

Goldberger, Lexie A.↗
DOE OSTI2021

Secure Command Line Solution for Token-based Authentication

The WLCG is modernizing its security infrastructure, replacing X.509 client authentication with the newer industry standard of JSON Web Tokens (JWTs) obtained through the Open ID Connect (OIDC) protocol. There is a wide variety of software available using the standards, but most of it is for Web browser-based applications and doesn’t adapt well to the command line-based software used heavily in High Throughput Computing (HTC). OIDC command line client software did exist, but it did not meet our requirements for security and convenience. This paper discusses a command line solution we have made based on the popular existing secrets management software from Hashicorp called vault. We made a package called htvault-config to easily configure a vault service and another called htgettoken to be the vault client. In addition, we have integrated use of the tools into the HTCondor workload management system, although they also work well independent of HTCondor. All of the software is open source, under active development, and ready for use.

Dykstra, Dave↗
DOE OSTI2022

Secure Firmware Update and Device Authentication for Smart Inverters using Blockchain and Physically Uncloable Function (PUF)-Embedded Security Module

Cybersecurity of inverters has been significantly important as inverters become smarter in cyber-physical environments. However, firmware security of smart inverters against firmware attacks from various attack vectors has been less studied. Furthermore, this paper proposes a secure firmware update and device authentication method using a blockchain-based public key infrastructure (PKI) management system and a physically unclonable function (PUF)-embedded security module in a smart inverter. The proposed method is validated by experiments.

blockchain↗
DOE OSTI2017

Evolving bipartite authentication graph partitions

As large scale enterprise computer networks become more ubiquitous, finding the appropriate balance between user convenience and user access control is an increasingly challenging proposition. Suboptimal partitioning of users’ access and available services contributes to the vulnerability of enterprise networks. Previous edge-cut partitioning methods unduly restrict users’ access to network resources. This paper introduces a novel method of network partitioning superior to the current state-of-the-art which minimizes user impact by providing alternate avenues for access that reduce vulnerability. Networks are modeled as bipartite authentication access graphs and a multi-objective evolutionary algorithm is used to simultaneously minimize the size of large connected components while minimizing overall restrictions on network users. Lastly, results are presented on a real world data set that demonstrate the effectiveness of the introduced method compared to previous naive methods.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

Exploiting Spatial Signatures of Power ENF Signal for Measurement Source Authentication

Electric Network Frequency (ENF) signals are the signatures of power systems that are either directly recorded from the power outlets or extracted from multimedia recordings near the electrical activities. Variations of ENF signals collected at different locations possess local environmental characteristics, which can be used as a potential fingerprint for authenticating measurements' source information. Within this paper is proposed a computational intelligence-based framework to recognize the source locations of power ENF signals within a distribution network in the US. To be more specific, a set of informative location-sensitive signatures from ENF measurements are initially extract with such measurements representative of local grid characteristics. Then these distinctive location-dependent signatures are further fed into a data mining algorithm yielding the “source-of-origin” of ENF measurements. Experimental results using ENF data at multiple intra-grid locations have validated the proposed methodology.

CUI, YI↗
DOE OSTI2022

Hardware-Based Randomized Encoding for Sensor Authentication in Power Grid SCADA Systems

Supervisory Control and Data Acquisition (SCADA) systems are utilized extensively in critical power grid infrastructures. Modern SCADA systems have been proven to be susceptible to cyber-security attacks and require improved security primitives in order to prevent unwanted influence from an adversarial party. One section of weakness in the SCADA system is the integrity of field level sensors providing essential data for control decisions at a master station. In this paper we propose a lightweight hardware scheme providing inferred authentication for SCADA sensors by combining an analog to digital converter and a permutation generator as a single integrated circuit. Through this method we encode critical sensor data at the time of sensing, so that unencoded data is never stored in memory, increasing the difficulty of software attacks. We show through experimentation how our design stops both software and hardware false data injection attacks occurring at the field level of SCADA systems.

42 ENGINEERING↗
DOE OSTI2020

A holistic cyber-physical security protocol for authenticating the provenance and integrity of structural health monitoring imagery data

Modern infrastructure systems, such as bridges, dams, power generation stations, and buildings increasingly have an intrinsic cyber-physical nature to them. Infrastructure now commonly, includes actuators, network connections, sensors, control systems, and computational resources. It is of increasing concern that modern infrastructure is vulnerable to cyber-attacks that can damage both the cyber and physical nature of the infrastructure. To date, the physical and cyber health of infrastructure has been considered separately. However, the increasing concerns associated with the cyber-physical security of infrastructure coupled with the emergence of 5G networks made using components that are not universally considered trustworthy, and the emergence of techniques for creating deepfakes and adversarial examples suggests the time has come to begin considering cyber health and structural health with a more holistic approach. In this work, a protocol is developed for ensuring the imagery data captured by a structural health monitoring system can be unambiguously attributed to legitimate sensors associated with the structural health monitoring system. A computer vision approach based on the idea of mutual information is then presented to detect damage in an image. This work presents the protocol for authenticating the provenance of imager data and demonstrates that this protocol does not have overly adverse effects when used with the mutual information-based technique for detecting damage in the resulting imagery data.

Jung, HweeKwon↗
DOE OSTI2020

An Integrated Two-Factor Authentication Solution Using Pulse Connect Secure and Apache HTTP Server

Complex system requirements can often lead to a situation wherein no single product or platform can provide a solution. In these cases, a solution integrating the features of multiple products and platforms is needed. Recently, a program sponsor required discontinued use of a third-party Security Assertion Markup Language Identity Provider that was being used to implement a two-factor authentication (2FA) solution that fully integrated with Pulse Connect Secure (PCS). PCS alone could not provide the features necessary to meet all the requirements of a new 2FA solution. The challenge was to leverage the features of additional platforms to design an integrated solution to meet all requirements. This paper presents a solution that integrates the features of PCS, Apache HyperText Transfer Protocol Server, and a custom application that meets all requirements, including a requirement to defend against Uniform Resource Locator manipulation as means to gain unauthorized access to backend applications.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2026

Extracting Critical Metals from Authentic Bauxite Residue

Securing domestic sources of critical minerals (CM) is paramount to ensuring a robust and self-sustaining technology infrastructure. Utilizing untapped non-conventional sources, like acid mine drainage, coal ash, bauxite residue/red mud, and more is an emerging approach that addresses this national concern while identifying new value-added pathways originating from waste streams. Red mud is a byproduct of the Bayer process that produces alumina and contains a wealth of CM – 50 µg/g Ga, 2.9 mg/g total rare earth elements plus yttrium, 12 mg/g Mn, 58 mg/g Al, and others. About 170 MM tonnes of red mud are co-produced annually alongside the 142 MM tonnes of alumina generated, highlighting the abundancy of this feedstock. In this work, different strategies were explored for extracting CM from authentic bauxite residue that involve thermal heating, microwave heating, and sonication all with different acids and buffers. CM recovery was then explored one step further by testing the adsorption of the extracted metals onto NETL’s Multi-functional Sorbent Technology (MUST). Microwave treatment of red mud proved the most effective CM extraction, whereas sonication was less desirable due to scale-up concerns. Successful recovery of CM from this leachate with MUST supports further studies toward optimizing the overall process.

bauxite residue↗
DOE OSTI2021

Securing Environmental IoT Data Using Masked Authentication Messaging Protocol in a DAG-Based Blockchain: IOTA Tangle

The demand for the digital monitoring of environmental ecosystems is high and growing rapidly as a means of protecting the public and managing the environment. However, before data, algorithms, and models can be mobilized at scale, there are considerable concerns associated with privacy and security that can negatively affect the adoption of technology within this domain. In this paper, we propose the advancement of electronic environmental monitoring through the capability provided by the blockchain. The blockchain’s use of a distributed ledger as its underlying infrastructure is an attractive approach to counter these privacy and security issues, although its performance and ability to manage sensor data must be assessed. We focus on a new distributed ledger technology for the IoT, called IOTA, that is based on a directed acyclic graph. IOTA overcomes the current limitations of the blockchain and offers a data communication protocol called masked authenticated messaging for secure data sharing among Internet of Things (IoT) devices. We show how the application layer employing the data communication protocol, MAM, can support the secure transmission, storage, and retrieval of encrypted environmental sensor data by using an immutable distributed ledger such as that shown in IOTA. Finally, we evaluate, compare, and analyze the performance of the MAM protocol against a non-protocol approach.

Gangwani, Pranav (ORCID:0000000159226002)↗