The advent of miniaturized mobile devices with wireless communication capability and integrated with biosensors has revolutionized healthcare systems. The devices can be used by individuals as wearable accessories to collect health data regularly. This type of medical assistance supported by mobile devices to monitor patients and offer health services remotely is known as mobile health (mHealth). Although mHealth provides many benefits and has become popular, it can pose severe privacy risks. Many features in mHealth are managed through a smartphone. Thus, one of the most worrying issues involves communication between the monitoring devices and the smartphone. When communication uses Bluetooth, it is standard for a device to be paired with the smartphone; but generally, it is not exclusively associated with a specific mHealth app. This characteristic can allow a data theft attack by a malicious app or fake data injection by an illegitimate device. To address this issue, we present an authentication scheme based on Non-Interactive Zero-Knowledge Proof that is lightweight enough to run on mHealth devices with minimal resources. Our scheme ensures that legitimate devices interact exclusively with the official mHealth application. To ensure the patient’s privacy-preserving throughout the system, we address the issues of storing, managing, and sharing data using blockchain. Since there is no privacy in the standard blockchain, we present a scheme in which the health data transmitted, stored, or shared are protected by Attribute-Based Encryption. The outcome is a system with fine-grained access control, entirely managed by the patient, and an end-to-end privacy guarantee.

Authenticity represents an essential facet of information security explored across various Information Systems (IS), including Internet of Things (IoT) devices in Industry 4.0. However, deploying authentication mechanisms in specific IoT devices poses significant challenges, particularly for those with energy, memory, and computational power constraints. Given this context, this ongoing research project aims to compare conventional authentication mechanisms for low-resource IoT devices and identify the most efficient one among them. As an initial result, this paper aims to present our methodological scope and discuss preliminary empirical results derived from a computational experiment using the Non Interactive Zero Knowledge Proofs (NIZKP), algorithm in Arduino Nano. This research seeks to enhance the comprehension of authentication mechanisms in low-resource IoT devices, thus facilitating better decision-making processes in IS settings and contributing to academia and practice.

Generative AI (GenAI) introduces transformative challenges and opportunities to Intellectual Property (IP) processes in countries like Brazil, where existing laws, such as Copyright and IP Laws, do not explicitly account for AI-generated nuances. This paper explores the emerging idea behind GenAI’s impact and disruptive potential on the current Brazilian IP landscape. Using a qualitative approach, we apply McLuhan’s tetrad analysis, informed by Sociotechnical Theory, to identify potential enhancements, obsolescence, retrievals, and reversals that GenAI can bring to IP management in Brazil. Our contributions include advancing the understanding of the influence of GenAI on IP and offering preliminary insights for stakeholders to address emerging challenges and optimize opportunities in Brazil’s evolving IP scenario.

Com o avanço dos Sistemas de Informação, a privacidade de dados tornou-se uma preocupação central. As Redes Virtuais Privadas (em inglês, Virtual Private Networks ou VPNs), embora amplamente utilizadas, apresentam vulnerabilidades relacionadas à autenticação tradicional (usuário e senha) e ao uso de meios de pagamento rastreáveis, como cartões de crédito. Esta pesquisa em andamento propõe uma arquitetura de autenticação anônima para VPNs baseada em blockchain e Prova de Conhecimento Zero (ZKP), que permite validar a identidade do usuário sem expô-la, enquanto pagamentos com criptomoedas eliminam dados identificáveis. A solução busca oferecer maior segurança, privacidade e anonimato, sendo relevante, por exemplo, para cidadãos em contextos de vigilância e censura.