Current approaches to access control on Web servers do not scale to enterprise-wide systems because they are mostly based on individual user identities. Hence we were motivated by the need to manage and enforce the strong and efficient RBAC access control technology in large-scale Web environments. To satisfy this requirement, we identify two different architectures for RBAC on the Web, called user-pull and server-pull. To demonstrate feasibility, we implement each architecture by integrating and extending well-known technologies such as cookies, X.509, SSL, and LDAP, providing compatibility with current Web technologies. We describe the technologies we use to implement RBAC on the Web in different architectures. Based on our experience, we also compare the tradeoffs of the different approaches .

No abstract

The colonization of Staphylococcus aureus is one of the most important aggravating factors of atopic dermatitis (AD). Until now, the importance of S. aureus in AD and a positive correlation between colonization with S. aureus and clinical severity/skin barrier function has been demonstrated. The aim of this study was to determine whether there are certain clones of S. aureus which colonize the skin of AD patients. For this purpose, the genotype of S. aureus isolated from AD patients was examined by newly-developed typing methods. With 36 strains of S. aureus isolated from 35 patients with AD, spa typing, multi-locus sequence typing (MLST), and staphylococcal toxin gene assay by multiplex polymerase chain reaction, were performed. Clinical severity and skin barrier function were evaluated with eczema area and severity index (EASI) and with transepidermal water loss (TEWL). Among 36 strains of S. aureus, 14 sequence types (ST) and 20 spa types were identified, suggesting a very heterogeneous genetic composition of S. aureus and the absence of a prevailing genotype in S. aureus colonized with AD patients. Furthermore, there was no specific genotype of S. aureus which was associated with the clinical severity of AD or skin barrier dysfunction. A toxin gene assay, however, showed the predominance of S. aureus strains carrying sea and/or tsst-1. To the best of our knowledge, this is the first report to show the genetic composition of S. aureus strains isolated from AD patients determined by sequence-based typing methods.

In the fight against COVID-19, there remains an unmet need for point-of-care (POC) diagnostic testing tools that can rapidly and sensitively detect the causative SARS-CoV-2 virus to control disease transmission and improve patient management. Emerging CRISPR-Cas-assisted SARS-CoV-2 detection assays are viewed as transformative solutions for POC diagnostic testing, but lack of streamlined sample preparation and full integration within an automated and portable device hamper their potential for POC use. We report herein POC-CRISPR – a single-step CRISPR-Cas-assisted assay that leverages facile magnetic concentration and transport of nucleic acid-binding magnetic beads to incorporate sample preparation with minimal manual operation. Moreover, POC-CRISPR has been adapted into a compact thermoplastic cartridge within a palm-sized yet fully-integrated and automated device. During analytical evaluation, POC-CRISPR was able detect 1 genome equivalent/μL SARS-CoV-2 RNA from a sample volume of 100 μL in < 30 min. Finally, when evaluated with 27 unprocessed clinical nasopharyngeal swab eluates that were pre-typed by standard RT-qPCR (C q values ranged from 18.3 to 30.2 for the positive samples), POC-CRISPR achieved 27 out of 27 concordance and could detect positive samples with high SARS-CoV-2 loads (C q < 25) in 20 min.

As more businesses engage in globalization, inter-organizational collaborative computing grows in importance. Since we cannot expect homogeneous computing environments in participating organizations, heterogeneity and Internet-based technology are prevalent in inter-organizational collaborative computing environments. One technology that provides solutions for data sharing and work coordination at the global level is interorganizational workflow. In this paper, we investigate the access control requirements for inter-organizational workflow. We then present access control solutions for inter-organizational workflow based on our implementation. Many of the requirements and solutions in this paper address the scalability of existing security solutions, the separation of inter-organizational workflow security from concrete organization level security enforcement, and the enforcement of fine-grained access control for inter-organizational workflow.