Legal and ethical considerations of biometric identity card: Case for Mauritius

The highly connected nature of the current era has raised the need for more secure systems, and hence the demand for biometric-based authentication methods. In 2013, the Mauritian Government invested massively in the collection of data, and implementation of the national biometric identity card scheme. The latter has suffered a number of contestations among the population, and several cases were consequently filed at the Supreme Court of Mauritius to oppose the use of this biometric card. The main concern was the collection of biometric data which posed threats to the privacy of individuals. Additionally, the collection and retention of biometric data lead to security issues. In this paper, the challenges with respect to the usage of the biometric card are analysed. The laws governing data protection are discussed, together with the legal framework used for data collection and retention. Following the court decisions, several amendments have been made to the existing laws in order to cater for the usage of biometric data for the public interest. Finally, recommendations are made with regards to a legal framework which will enhance the security of biometric data, and eventually encouraging public acceptance of this biometric identification system.     

试论社会治安防控体系的理论框架--公安工作的基本视角

置于公安工作的开放性视角,耗散结构治安防控体系构建,不仅需要人力、器物上的更替与补充,更具意义的是要包含制度建设、信息主导、价值能动在内防控要素的合理创新和有序流动.治安防控体系应是一个包含"人力器物防控、制度信息防控、人文价值防控"三个层面逻辑递进、功能耦合和优势互补的公安运作机制和工作系统.     

The principle of security safeguards: Unauthorized activities

The principle of information security safeguards is a key information privacy principle contained in every privacy legislation measure, framework, and guideline. This principle requires data controllers to use an adequate level of safeguards before processing personal information. However, privacy literature neither explains what this adequate level is nor how to achieve it. Hence, a knowledge gap has been created between privacy advocates and data controllers who are responsible for providing adequate protection. This paper takes a step toward bridging this knowledge gap by presenting an analysis of how Data Protection and Privacy Commissioners have evaluated the adequacy level of security protection measures given to personal information in selected privacy invasive cases. This study addresses both security measures used to protect personal information against unauthorized activities and the use of personal information in authentication mechanisms. This analysis also lays a foundation for building a set of guidelines that can be used by data controllers for designing, implementing, and operating both technological and organizational measures used to protect personal information.     

The application of geographic information systems and spatial analysis to assess dumped and subsequently scattered human remains

This study utilizes geographic information systems (GIS) and spatial analysis (SA) technology to address the problems associated with prediction of location and effective recovery of dumped and scattered human remains in Louisiana. The goals are to determine if a selective bias exists in Louisiana as to where and when human remains are dumped and to assess whether or not geographically specific patterns exist in the dispersal of human remains. We hypothesized that a positive relationship exists between postmortem interval (PMI) and dispersal distance, and that there are negative relationships between PMI and dispersal direction and between dispersal direction and distance. Our results indicate that, in Louisiana, remains are more often dumped in rural areas away from a structure, and are found within (1/4) mile of the nearest road. For Louisiana, no seasonal bias was found in the analysis of when remains are dumped. Furthermore, with the exception of the relationship between PMI and the shortest distance remains were dispersed, no geographically specific patterns were detected in the analyses of dispersal distance, dispersal direction, and PMI.     

论以信息为主导的社会治安防控体系

建立以信息为主导的社会治安防控体系，应坚持信息导侦，构建精确打击体系，即以信息为基础、依据、导向，准确而有效地打击犯罪；信息预警，构筑有效防范体系，即通过对信息的综合分析研判，对治安动向和犯罪态势作出准确预警，指导做好防范工作；信息促管，构筑社会化管理体系，即整合社会各方面治安力量及其信息资源，形成全民参与社会治安防控的格局；信息促控，完善治安监控体系，即通过各种基础信息和动态信息的收集、研判，有效掌握监控对象的基本情况，实现对它们的动态控制。     

法治系统工程:实现依法治国方略的科学途径(续)

本文以系统工程在我国的发展为开端,结合法律知识解释了系统工程的基本原理;阐述了法治系统工程的基本概念与原理、法治系统工程与系统工程之本质区别,进而介绍了法治系统工程所采用的综合集成方法。此外,本文还论述了现代信息技术与法治系统工程的关系、系统工程对现代法律科学的优化功能。文章的结论是：法治系统工程是运用现代科学方法实现“依法治国”的方略、促进社会主义法治现代化的必由之路。     

Avoiding the internet of insecure industrial things

Security incidents such as targeted distributed denial of service (DDoS) attacks on power grids and hacking of factory industrial control systems (ICS) are on the increase. This paper unpacks where emerging security risks lie for the industrial internet of things, drawing on both technical and regulatory perspectives. Legal changes are being ushered by the European Union (EU) Network and Information Security (NIS) Directive 2016 and the General Data Protection Regulation 2016 (GDPR) (both to be enforced from May 2018). We use the case study of the emergent smart energy supply chain to frame, scope out and consolidate the breadth of security concerns at play, and the regulatory responses. We argue the industrial IoT brings four security concerns to the fore, namely: appreciating the shift from offline to online infrastructure; managing temporal dimensions of security; addressing the implementation gap for best practice; and engaging with infrastructural complexity. Our goal is to surface risks and foster dialogue to avoid the emergence of an Internet of Insecure Industrial Things.     

法医物证DNA自动化检验技术体系的研究

目的建立自动化工作站同步提取不同种类涉案法医生物检材DNA的新方法。方法选用TECAN Freedom EVO100．4、75—2型自动化提取、加样工作站,采用磁珠法及Chelex-100法对各类涉案生物检材进行DNA提取、PCR扩增、毛细管电泳检测其STR分型,进行比较测试。在“全国公安机关DNA数据库应用系统”中建立并应用实验室信息管理系统（LIMS）模拟实施规范化DNA检案。结果1552份各类检材,采用工作站-磁珠法提取DNA效果最佳,STR检测成功率为95％,工作站-Chelex法为88％;二者分别与其手工提取法比较,成功率无明显差异。92个样本同期检测,自动化工作站较手工操作DNA检案时间可缩减1．25倍。结论工作站域珠法提取涉案检材DNA,可获得满意的STR分型结果。应用LIMS管控,可有效防控污染,明显提高检案效率及鉴定质量。     

毒品滥用行为网络防控体系的多维建构

毒品滥用行为的网络化为其防控带来了新的命题,传统的防控体系愈发难以适应网络空间的特性,亟需根据空间要素、主体要素、对象要素的新变化构建科学的网络防控体系。在模式维度,应推动刑事政策由"重刑治毒"转向"打早打小",推动法律体系分纵向、横向两个角度实现网络化。在主体维度,应肯定网络服务提供者的独立地位,使其与毒品滥用者、毒品贩卖者、主管部门在毒品滥用行为网络防控中产生有效互动。在客体维度,应当构建毒品与毒品信息并行的二元对象模式,并且推动对象防控的信息化。