This paper proposes a dynamic, decentralized social trust model to meet Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance requirements, especially for individuals lacking formal documentation. Building on previous work, we present a conceptual model for dynamically computing trust and risk values to support financial transaction approvals through innovative recognition schemes. Agent-based simulations across four scenarios demonstrate that dynamic trust mechanisms enhance transaction approval rates and payment volumes, provided malicious agents are controlled. The model is flexible, adaptable to diverse populations, and promotes financial inclusion without compromising compliance requirements. It also offers a foundation for future research on mitigating risks from malicious actors. Furthermore, it is particularly suited for enabling compliant and inclusive decentralized finance (DeFi) applications.

Despite many efforts to increase access to financial services, 1,4 billion people still are unbanked. One significant barrier to decreasing this number is the lack of official personal documents (e.g., government-issued identification or utility bills) to comply with the necessary KYC/AML regulation. Innovative schemes can recognize one by using inputs like the personal trail generated when one uses the phone or engages in some digital activity. This paper proposes a formal language-based approach for modeling financial inclusion services and for representing in a structured way the existing KYC/AML compliance rules from different countries. Currently, those rules are written in an unstructured format using natural language and spread in regulatory documents from these jurisdictions. Our proposed language is a core building block of a computational trust and risk engine model, also discussed in this paper. Our approach supports the use of traditional and innovative recognition schemes, helping to overcome the barrier for those who cannot comply with conventional KYC/AML requirements. Moreover, it can also be used to power the risk calculation of computational trust and risk engines. Finally, the proposal is generic enough to be applied to both traditional and decentralized finance.

Purpose The Bring-Your-Own-Device (BYOD) paradigm favors the use of personal and public devices and communication means in corporate environments, thus representing a challenge for the traditional security and risk management systems. In this dynamic and heterogeneous setting, the purpose of this paper is to present a methodology called opportunity-enabled risk management (OPPRIM), which supports the decision-making process in access control to remote corporate assets. Design/methodology/approach OPPRIM relies on a logic-based risk policy model combining estimations of trust, threats and opportunities. Moreover, it is based on a mobile client – server architecture, where the OPPRIM application running on the user device interacts with the company IT security server to manage every access request to corporate assets. Findings As a mandatory requirement in the highly flexible BYOD setting, in the OPPRIM approach, mobile device security risks are identified automatically and dynamically depending on the specific environment in which the access request is issued and on the previous history of events. Originality/value The main novelty of the OPPRIM approach is the combined treatment of threats (resp., opportunities) and costs (resp., benefits) in a trust-based setting. The OPPRIM system is validated with respect to an economic perspective: cost-benefit sensitivity analysis is conducted through formal methods using the PRISM model checker and through agent-based simulations using the Anylogic framework.

Wireless networks today are partially being formed by nodes (e.g. Internet access points, smartphones, femtocells)that are owned and carried by humans. In such scenarios where several strangers are expected to interact for the sake of robust data transmission, trust and reputation are of vital importance. As such, User Centric Networks require well-defined trust metrics in order to ensure the robustness and reliability of the overall system. Dispositional Trust (DT) is defined as the general willingness of a given user/entity to trust others and it is used in many trust metrics as part of the threshold under which an entity will not trust another. In this paper we propose that dispositional trust should not be a static value and that it should change and self-adapt depending on the surrounding environment and context, in order for the overall trust metric to be more robust and to be able to converge faster to realistic trust measurements regarding the other surrounding entities in the system. To prove our statement, we compare other trust metrics with the one we propose in a simulated environment, in order to quantitatively assess whether our dispositional trust self-adaptation makes a difference in the robustness of the metric while maintaining when possible the network utility.

In this paper, we discuss the remaining security risk of Wi-Fi AP spoofing with current AP joining approaches and how a new solution has been developed as part of the ULOOP project in order to be more user-friendly and secure. It was an important step for increased security because our evaluation shows that even computer aware users do not know or do not bother about this issue although it is a real risk that current approaches do not solve.

Cooperation incentives are essential in user-centric networks to motivate users to share services and resources (including bandwidth, computational power, and storage space) and to avoid selfish nodes to hinder the functioning of the entire system. Virtual currency and reputation mechanisms are commonly adopted in online communities to boost participation, but their joint application has not been deeply explored, especially in the context of wireless communities, where not only the services, but even the enabling infrastructure is opportunistically built by community members. This paper investigates the combined use of virtual currency and reputation-based incentives in the specific context of a community of users with Wi-Fi enabled devices capable of establishing ad-hoc connections.

During the last few years the amount of users with mobile devices (laptops, smartphones, tablets, etc.) with wireless connectivity capabilities has grown at an impressive rate. In the meantime, the number of Wi-Fi networks has also increased a lot, and in addition to this, the emergence and fast growth of applications such as social networking, user generated content, location services, collaborative tools and applications, etc. has fueled the user's need for permanent connectivity. This paper introduces Flexible Communication, a secure and trust-based Wi-Fi password sharing service. Our service architecture provides the user with a solution that enables free Wi-Fi network password sharing, which relies on a social-networking oriented trust model approach and which at the same time allows the user to locate and to connect to those Wi-Fi networks at any time. We validate our solution with a qualitative assessment which compares its features against those of the other similar existent solutions and also with a quantitative assessment which measures the performance both of the server and the client.

No abstract available.