The information security domain focuses on security needs at all levels in a computing environment in either the Internet of Things, Cloud Computing, Cloud of Things, or any other implementation. Data, devices, services, or applications and communication are required to be protected and provided by information security shields at all levels and in all working states. Remote authentication is required to perform different administrative operations in an information system, and Administrators have full access to the system and may pose insider threats. Superusers and administrators are the most trusted persons in an organisation. “Trust but verify” is an approach to have an eye on the superusers and administrators. Distributed ledger technology (Blockchain-based data storage) is an immutable data storage scheme and provides a built-in facility to share statistics among peers. Distributed ledgers are proposed to provide visible security and non-repudiation, which securely records administrators’ authentications requests. The presence of security, privacy, and accountability measures establish trust among its stakeholders. Securing information in an electronic data processing system is challenging, i.e., providing services and access control for the resources to only legitimate users. Authentication plays a vital role in systems’ security; therefore, authentication and identity management are the key subjects to provide information security services. The leading cause of information security breaches is the failure of identity management/authentication systems and insider threats. In this regard, visible security measures have more deterrence than other schemes. In this paper, an authentication scheme, “VisTAS,” has been introduced, which provides visible security and trusted authentication services to the tenants and keeps the records in the blockchain.

中文翻译：

---

VisTAS：基于区块链的可见和可信的远程身份验证系统

信息安全领域侧重于物联网，云计算，物联网或任何其他实现的计算环境中各个级别的安全需求。数据，设备，服务或应用程序以及通信都需要在所有级别和所有工作状态下由信息安全防护罩保护和提供。在信息系统中执行不同的管理操作需要进行远程身份验证，并且管理员拥有对该系统的完全访问权限，并且可能构成内部威胁。超级用户和管理员是组织中最受信任的人员。“信任但验证”是一种关注超级用户和管理员的方法。分布式分类帐技术（基于区块链的数据存储）是一种不变的数据存储方案，并提供了一种内置的功能，可以在对等方之间共享统计信息。建议使用分布式分类帐来提供可见的安全性和不可否认性，从而安全地记录管理员的身份验证请求。安全性，隐私性和问责制措施的存在在其利益相关者之间建立了信任。在电子数据处理系统中保护信息是一项挑战，即仅向合法用户提供资源的服务和访问控制。身份验证在系统安全中起着至关重要的作用。因此，身份验证和身份管理是提供信息安全服务的关键主题。信息安全漏洞的主要原因是身份管理/身份验证系统的故障和内部威胁。在这方面，可见的安全措施比其他方案具有更大的威慑力。在本文中，引入了一种身份验证方案“ VisTAS”，该方案为租户提供可见的安全性和受信任的身份验证服务，并将记录保存在区块链中。