• The Journal of Society for e-Business Studies
• /
• v.10 no.2
• /
• pp.89-108
• /
• 2005

The SOAP specifications are not provided a functions of information security, especially authentication function. In case of user authentication, delivery of the username and password elements can be exposed to sniffing/replay attack by malicious attacker. In this paper, we propose a new mechanism to protect authentication attacks for the SOAP messages. The proposed mechanism is compensated for weakness of S/KEY system. Our mechanism has no limitation for time and overhead and also provide a more effective and secure delivery.

• 전자공학회논문지 IE
• /
• v.48 no.2
• /
• pp.52-60
• /
• 2011

RFID is method used on wireless system. However, this mechanism is not used for authentication and security. Therefore, it is very vulnerable to attacks such as dropping attacks and traffic attacks. the RFID Tags are of the limited nature due to environment factors and there is greater constraints in designing authentication protocol. If we do not RFID to secure corporate information and product all the information will be exposed. The attacker will break into the RFID system and stop the distribution system. So, this paper proposes a new authentication protocol which provides not only unlimited access to Tag&Reader and connection between Tag and Reader bet also provides authentication mechanism by defining the key distribution.

• The Journal of Korea Institute of Information, Electronics, and Communication Technology
• /
• v.8 no.1
• /
• pp.51-58
• /
• 2015

Internet of Thing is a collection of various technical components, and the interworking among heterogeneous devices, networks, applications is expected to be accelerated through the openness of IoT platform. For this reason, many technical and administrative security threats will occur in IoT environments. In this paper, authentication methods of recent researches are analyzed for safe IoT services, and new mutual authentication protocol is proposed to provide more secure communication. The proposed protocol prevents an impersonation as malicious gateway or illegal device providing mutual authentication between gateway and IoT device. The performance analysis and evaluation of proposed authentication protocol are performed.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.10 no.12
• /
• pp.1355-1360
• /
• 2015

Recently MANET application is diversified studies on the MANET routing security and the reliable authentication mechanism is actively in progress. Stand-alone network structure of a MANET is an important field of ubiquitous computing environment of interest, Authentication techniques are already provided safety when applied to MANET reliability and efficiency in a secure authentication mechanism using the session key. However, most of the MANET environment, the model has been based on the assumption that the safety is guaranteed, When applied to an actual network situation, we can not rule out a variety of threats. This study is the testing and analysis to add the malicious node extracted at random to demonstrate the safety and efficacy of the session key certification techniques of the MANET environment.

• The Journal of Korea Institute of Information, Electronics, and Communication Technology
• /
• v.17 no.1
• /
• pp.47-52
• /
• 2024

Through the coronavirus pandemic, research on the use and advancement of blockchain-based decentralized identity authentication (Decentralized ID) technology is being actively conducted in various fields, centered on the central government, local governments, and private businesses. In this paper, we introduce the results of development based on Hyperledger Fabric to change the existing central server-based identity authentication to a decentralized one. These development results can strengthen the security and transparency of identity authentication systems for commercial purposes and provide stable services for user ID issuance, inquiry, and disposal. In addition, the decentralized identity authentication system verified performance results of DID creation of 262,000 rps and DID inquiry of 1,850 rps, DID VP creation of 200 rps, and DID VP inquiry of 220 rps or less through public authentication.

• Proceedings of the Korean Information Science Society Conference
• /
• 2004.04a
• /
• pp.334-336
• /
• 2004

무선 인터넷의 발전과 우선 단말기의 성능이 발달함에 따라 무선 인터넷 환경에서의 전자상거래(M-Commerce)가 활성화되고 있다. 이러한 전자상거래에서는 사용자 인증 기술과 데이터 보안이 중요한 기술로 인식되고 있으며, 무선 인터넷에서의 WPKI나 유선 인터넷 환경에서의 XML 전자서명 같은 인증기술이 연구되고 있다. XML 전자서명은 XML 문서를 이용하는 전자상거래분야에 사용되어 전자서명 시스템간의 상호 연동성을 높일 수 있다. 따라서 본 논문에서는 무선 인터넷 환경에서도 기존의 유선 인터넷환경에서 사용되고 있는 XML 전자서명 기법을 적용하여 XML 문서 및 전자서명 시스템들간에 상호 연동 가능할 수 있는 시스템을 설계하였고, 실제로 자바 카드를 이용하여 XML 전자서명이 가능한 시스템을 구현하였다. 본 논문을 통해 무선 인터넷 환경에서도 XML 전자서명을 제공할 수 있다.

• Proceedings of the CALSEC Conference
• /
• 2000.08a
• /
• pp.291-303
• /
• 2000

◈ 개요 ㆍ PC표준 USB포트에 바로 연결하여 사용 ㆍ 열쇠 크기의 휴대용 개인 정보보호 장치 ◈ 휴대용 전자서명기 ㆍ 별도의 리더기가 필요 없음 ㆍ Strong Authentication (Two-Factor 인증)(중략)

• Review of KIISC
• /
• v.8 no.3
• /
• pp.71-82
• /
• 1998

공개키 기반구조에서는 인증서를 사용 함으로서 기본적으로 암호 및 인증기능을 제공한다. 이와 더불어 신뢰성 있는 부인방지기능을 제공하기 위하여 사위등급의 보안기능을 가진 인증기관 혹은 제3의 신뢰성 있는 공증기관을 별도로 둠으로서 타임스탬프 기능과 공증기능을 부가하여 전자공증 서비스를 제공할 수 있다. 사용자의 요구에 따라 데이타 혹은 인증서에 대하여 타임스탬프를 발행하는 타임스탬프 발행당국(TSA)과 공증을 행하는 공증당국(NA)을 살펴보고, 현재까지 제안된 타임스탬프 및 공증 프로토콜에 대한 분석과 더불어 전자공증 서비스에 대한 국제동향을 검토, 분석한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2004.05a
• /
• pp.435-438
• /
• 2004

전자 상거래에서 보안과 신뢰성을 보장하는 것은 매우 중요하다. 공개키 기반 구조에서는 인증서를 사용 함으로서 암호 및 인증기능을 제공하나, 신뢰성 있는 부인 방지 기능을 제공하기 위해서는 상위 기관의 인증기관이나 타임 스탬프 기능과 공증 기능을 위한 제 3의 신뢰성 있는 공증 기관이 필요하다. 본 논문에서는 전자공증의 기능과 필요성 및 동향에 대하여 소개한다.

• Convergence Security Journal
• /
• v.14 no.6_1
• /
• pp.147-155
• /
• 2014

Encryption and authentication system in National Defense is divided into three system; KMI, MPKI, and GPKI. In this paper, we report inherent problem and security threaten in MPKI and propose an attribute-based authentication scheme using attribute-based signature in order to improve user authentication. In our scheme, access structure is used by Monotone Span Program, and system server provides service after user authentication.