• Title/Summary/Keyword: Certificate System

Search Result 577, Processing Time 0.022 seconds

A Design and Implementation of Two-Phase Server Login Authentication System based on XML-Signature Extension (XML-Signature 확장을 통한 2단계 서버 로그인 인증 시스템의 설계 및 구현)

  • Kim, Yong-Hwa;Kim, Jin-Sung;Kim, Yong-Sung
    • The KIPS Transactions:PartC
    • /
    • v.14C no.4
    • /
    • pp.321-330
    • /
    • 2007
  • This paper proposes a two-phase server login authentication system by XML-Signature schema extension to protect server's information resources opened on network which offer various web contents. A proposed system requests and publishes XML-based certificate through on-line, registers certificate extension information provided by CA(Certification Authority) to XCMS(XML Certificate Management Server), and performs prior authentication using user's certificate password. Then, it requests certificate extension information added by user besides user's certificate password and certificate extension information registered in XCMS by using SOAP message, and performs posterior authentication by comparing these certificate extension information. As a result, a proposed system is a security reinforced system compared with existing systems.

A Study on secure authentication system using integrated authentication service

  • Lee, Hyung-Su
    • Journal of the Korea Society of Computer and Information
    • /
    • v.22 no.2
    • /
    • pp.59-63
    • /
    • 2017
  • Recently, Certificate has been loosed 100 times in a four years as Phising or hacking. The service that use certificate in financial services occurs practical and secure issues. Therefore, the Korea government abolished the mandatory system used in the certificate service. However, they did not provide a replacing method for a certificate. And is not to fill the gaps of the certificate with one time password or secure card. Therefore this paper is propose the alternative method with total authentication service, that is lead the more secure electronic commercial.

Decentralized Identity Based Digital Certificate System for Prevention of Infectious Diseases (감염병 예방을 위한 분산ID 기반 디지털 증명서 시스템)

  • Park, Sung-chae;Lee, Ju hyun;Park, Keundug;Youm, Heung Youl
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.32 no.1
    • /
    • pp.49-66
    • /
    • 2022
  • The COVID-19 pandemic has led many countries around the world to introduce and employ a digital certificate system to prevent infectious diseases, however, there are difficulties in using the compatible digital certificate between countries in that the international standards of the system have not been developed. Accordingly, we propose an improved system, comparing two methods of presenting a certificate, existing QR code-based and a short-range wireless communication-based certificates. The proposed system is a digital certificate system against the spread of infectious disease by storing verification information of the certificate using decentralized identity-based technology on the blockchain. Blockchain-based trust anchor improves security by solving the problem of forgery and alteration of certificates and guaranteeing the identity of certificate issuers and presenters. This system is also expected to enhance usability providing concurrent verification of a number of certificates(vaccination certificates, recovery certificates, test results, identity certificates, etc.) in a single certificate presentation.

Modeling and Simulation of the Efficient Certificate Status Validation System on Public Key Infrastructure (공개키 기반 구조에서의 효율적인 인증서 상태 검증 방법의 모델링 및 시뮬레이션)

  • Seo, Hee-Suk;Kim, Tae-Kyoung;Kim, Hee-Wan
    • Journal of the Korea Computer Industry Society
    • /
    • v.5 no.5
    • /
    • pp.721-728
    • /
    • 2004
  • OCSP (Online Certificate Status Protocol) server which checks the certificate status provides the real time status verification in the PKI (Public Key Infrastructure) system which is the essential system of certificate. However, OCSP server need the message authentication with the server and client, so it has some shortcomings that has slow response time for the demands of many clients concurrently and has complexity of the mathematical process in the public encryption system. In this research, simulation model of the certificate status vertification server is constructed of the DEVS (Discrete EVent system Specification) formalism. This sever model is constructed to practice the authentication with hash function when certificate is checked. Simulation results shows the results of increase of the certificate status verification speed and decrease of the response time to the client.

  • PDF

HyperCerts : Privacy-Enhanced OTP-Based Educational Certificate Blockchian System (HyperCerts : 개인정보를 고려한 OTP 기반 디지털 졸업장 블록체인 시스템)

  • Jung, Seung Wook
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.28 no.4
    • /
    • pp.987-997
    • /
    • 2018
  • Blockchain has tamper-free, so many applications are developing to leverage tamper-free features of blockchain. MIT Media Labs proposed BlockCerts, educational certificate blockchain System, to solve problems of legacy certificate verifications. Existing educational certificate blockchain Systems are based on public blockchain such as bitcoin, Ethereum, so any entity can participate educational institute in principal. Moreover, the exisitng educational certricate blockchain system utilizes the integrity of blockchain, but the confidentiality of the educational certificate is not provided. This paper propose a digital certificate system based on private blockchain, name HyperCerts. Therefore, only trusted entity can participate in the private blockchain network, Hyperledger, as the issuer of digital certificate. Furthermore, the practical byzantine fault tolerance is used as consensus algorithm, HyperCerts reduce dramatically the latency of issuing digital certificate and required computing power. HyperCerts stores the hash value of digital certificate into the ledger, so breach of personal information by malicious entity in the private blockchain is protected.

A Study on the Real-Time Certificate Status Verification System Using VDN (VDN을 이용한 실시간 인증서 상태 검증 시스템의 관한 연구)

  • Lee, Kwang-Hyoung;Kim, Hyun-Chul
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.7 no.5
    • /
    • pp.858-865
    • /
    • 2006
  • A certificate that is issued by the certification authority can be revoked within the period of validity by various reasons such as the loss of private key, disqualification or the change in key. Therefore, the certificate status verification must precede prior to use Currently, the CRL or the OCSP methods are used in most cases. But the CRL system can't guarantee the present status of the certificate, and the OCSP generates heavy network traffic by checking or requesting certificate status in real-time using high-capacity messages. In this paper, we propose a system that requests the certificate verification by creating VDN for user identity information. Through this system, the certification authority will be able to guarantee the certificate's status in real-time, and solve the problem of the sewer and network overload by verifying and finding user identity information from VDN, Based on the results, we propose a real-time certificate status verification system which can improve the speed of the verification. We confirmed the improvement in speed by testing and comparing it with the existing methods.

  • PDF

A Study on the Introduction of a Rigging and Slinging Certificate System to Reduce a Struck by Object Accidents (건설현장 물체에 맞음 사고 저감을 위한 줄걸이 작업 전문 자격제도 도입에 관한 연구)

  • Yeom, Chun Ho;Lee, Jinho;Park, Hyeon
    • Journal of the Korean Society of Safety
    • /
    • v.33 no.5
    • /
    • pp.92-100
    • /
    • 2018
  • According to 'The Analysis of Industrial Accidents in 2016' by Ministry of Employment and Labor, the number of deaths caused by accidents in the construction field is 391, accounting for 47% of 826 industrial fatalities in all industries. The breakdown of the 391 fatalities of the construction industry shows that 'struck by an object' accident had 30 fatalities, the 3rd in frequency following falling (235) and crashing (32) accidents. This study aims to explore ways to reduce the 'struck by an object' accident with emphasis on safety education and certificate system for rigging and slinging works. This study reviews literature on rigging and slinging works and analyzes 'struck by an object' accidents. The rules and regulation on the rigging and slinging works are also reviewed both for Korea and other countries with best practices in construction safety such as Singapore, Japan, U.K., and U.S. The rigging and slinging certificate systems of those countries are also reviewed to find any advantage in the construction safety management. In addition, a pilot rigging and slinging certificate system was executed in one of domestic construction site followed by two surveys: one on the riggers who participated in the pilot operation and the other on general managers in domestic construction sites. Based on the analysis of the 'struck by an object' accidents and pilot operation, this study proposes a rigging and slinging certificate system to reduce accidents, enhancing safety condition of construction sites. The certificate system was proposed in a way to accommodate working practice of construction sites. Depending on rigging careers and a crane load capacity, riggers are eligible to apply either basic or master certificate which makes difference in the level of rigging works. The safety condition of rigging and slinging work could be substantially enhanced if workers, managers, supervisors, administrators, and policy makers work together consistently.

Algorithm of certificate security based-on using query language (사용자 질의어를 이용한 개인 인증 보안 알고리즘)

  • Lee, Chang-Jo
    • Convergence Security Journal
    • /
    • v.11 no.6
    • /
    • pp.45-51
    • /
    • 2011
  • Certificate security oriented cyber certificate is important tool for the purpose of offering user-authentication service based on on-line system. In the paper, we analyzed management implement which could make the efficient use of certificate security oriented cyber terror response. This algorithm called SOL(Security Oriented Language) will make efficient use of the service about authentication consisting of the basis in the age of information through efficient management and partial use of each certificates. Especially, SOL could be used efficiently by grafting a small group of on-line system which is operated with particular purposes.

An Structural Model Study on the Effect of KS Certificate and the Enterprise Performance (KS표시 인증과 경영성과와의 영향력에 관한 구조모델연구)

  • Koo Il Seob;Kim Tae Sung;Yim Chun Soon
    • Proceedings of the Korean Society for Quality Management Conference
    • /
    • 2004.04a
    • /
    • pp.618-624
    • /
    • 2004
  • Korean Standard Certificate , suitable for the korean industrial standards is one which was designed not only to spread and utilize the industrial standard established for the industrial standardization but to protect the consumer In this study, the practical effects of the Korean Standard Certificate will be examined in various fields, based on the small medium enterprises which achieved the K.S. Certificate In order to look into how the system has effects on the performance of the management in a company, the method of the actual approach will be used. In the end, the purpose of this study is to find the plan in which KS Certificate can be helpful to the development of the company.

  • PDF

A Study on the National System of the Professional Qualification -for Terecommunication Profession- (국제기술 자격제도에 관한 연구 -통신 전문직을 중심으로-)

  • 조정현
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.4 no.1
    • /
    • pp.8-24
    • /
    • 1979
  • Including the Qualfication of Staffer required for Commuinication, the National Law of Professional qualification is a basic law for supply with manpower of high growth industry, and it is aiming at perfect the national Policy Concerned improvement for education and training of staff, carrying out of state examination for qualification and getting an occupation or application for special qualification. This law has established a management committee for qualification system in The Ministry of Science and Technique ROK, and authorized competence Minister according to kind of special qualification aiming at getting employment, practical use and courteous treatment in society and economy for national qualification, and also regulated their each official duty. A qualification of staffer required for communication is an administrative measure giving as occupational certificate after some examination for knowledge, technique and faculty in vocational ability to adapt to intrinsic of telecommunication. This certificate has the cause of an attribution of over the sphere of telecommunication, and so it has been originated in international situation, and then some of them is forced by international law, otherwise it be in common use between the nations. The Characteristic and orthodox of communication certificate has been succeded continually in company with development of telecommunication and the appliable field of them is specified, but the sovereign power of nation is approved by ITU that she can extent the applicable position for communication certificate and coordinate the utility of qualification for telecommunication value. Korean telecommunication law excepted the application of communication certificate in public communication field. It is unreasonable and even disobeyed against the theory of communication science and intrinsic of telecommuncation. Therefore it should be corrected immediately and then communication certificate have to accept in the public communication field at all, if so, the application field of communication certificate can have more than useful extenxion such as administration measure should be achieved by the management committee for qualification system in Ministry of Science and Technique and competemce Minister appointed according to special kind of certificate and the administration have to manage by the method and proccess caused by communication science or cooperative system between administration, industry, education and science. And, then, every acquisitor of qualification also has to try to perfect his vocational duty sincerely and to promote each self-realization.

  • PDF