Earticle

스마트폰을 이용하면 쉽고 빠르게 인증과 결제가 가능하다. 하지만 스마트폰 보안 위협이 다양하고 새로운 해킹 기술로 진화하고 있고 모바일 환경에 특화된 공격 형태로 변화하고 있다. 따라서 모바일 환경에 적합한 인증방법이 요구 되고 있다. 현재 지식기반 인증의 보안 취약점을 해결하기 위한 방법으로 금융, 게임, 로그인 등 인증 서비스를 제공하기 위해서 많은 업체에서 일회용 비밀번호(One Time Password)와 같은 2단계 인증 서비스를 제공하고 있다. OTP 서비 스는 사용하기 쉽지만 난수표에 대한 복제가 용이하며 제한시간 내에는 유효한 값으로 사용되기 때문에 재사용이 가능 한 단점이 존재한다. 본 논문에서는 스마트폰의 전용 애플리케이션을 통해 특수 문자를 인식한 인증 방법을 이용하여 이용자가 높은 보안성을 가지고 쉽고 빠르게 인증을 진행할 수 있는 매커니즘에 대해서 제안한다.

Using a smartphone allows quick and easy authentication and payment. However, smartphone security threats are evolving into a variety of new hacking technologies, and are changing to attacks specific to the mobile environment. Therefore, there is a demand for an authentication method suitable for a mobile environment. In order to solve security weaknesses in knowledge-based authentication, many companies provide two-step authentication services such as OTP(One Time Password) to provide authentication services such as finance, games, and login. Although OTP service is easy to use, it is easy to duplicate random number table and has a disadvantage that can be reused because it is used as valid value within time limit. In this paper, we propose a mechanism that enables users to quickly and easily authenticate with high security using the authentication method that recognizes special characters through smartphone's dedicated application.

인터넷 상의 사용자가 목적지 시스템으로 정보를 전송할 수 있도록 라우팅 정보를 서로 교환하여 라우팅 테이블을 생성하 고 변화된 정보를 업데이트 해주는 라우팅 프로토콜 중 가장 중요한 프로토콜이 BGP 이다. 본 논문은 현재 사용되고 있는 BGPv4의 취약성을 이용하여 악의적인 공격과 네트워크 관리자의 실수로 발생할 수 있는 문제점을 사전에 차단하는 방법과 BGP의 대표적인 보안 취약점에 대한 공격기법인 AS-PATH 공격에 대한 실제 공격실험을 수행하여 공격기법들을 분석하고, AS-PATH 공격을 식별하는 알고리즘을 제안하였다

BGP is the most important protocol among routing protocols that exchange routing information to create routing tables and update changed information so that users on the Internet can send information to destination systems. This paper analyzes how to prevent malicious attacks and problems caused by network administrator's mistakes by using vulnerabilities in BGPv4 that are currently used. We analyzed the attack methods by performing the actual attack experiment on the AS-PATH attack, which is the attack method for BGP's representative security vulnerability, and proposed the algorithm to identify the AS-PATH attack.

Partial transactions which use computer networks are formed in the cyberspace due to rapid progress of communication and computer technology. Electronic business transactions have security problems according to the special quality of opening networks, while it can be approached easily by anyone without being tied to time and places through Internets. To revitalize the electronic business transactions, security technology which can establish its security and trust is the prior task and both safe information communication and better information security service offer are essential factors. The method to exchange information through Internets must be made after confirming one another's exact connection in the mutual identity certification to prevent a lot of threat which can occur in the use of password techniques. To satisfy these electronic business transactions, we intend to increase understanding of authentication algorithm provided with authentication function of messages and users as well to plan safety and trust of business information and contents in the electronic business transactions.

Grain Stream Cipher 기반의 Light Weight 병렬 알고리즘 연산 방식으로 구현하였다. 제안된 병렬 연산 방식의 알고리즘을 FPGA로 구현하여 동작을 검증하였고, 0.18um CMOS 공정으로 설계하여 UHF RFID 시스템에 적용 가능성을 타진하였다. 제안된 병령 연산 방식의 보안 알고리즘의 설계 및 ASIC 구현 결과를 실제 UHF RFID 표준 프로토콜에 적용하여 현재의 보안 문제 및 복제 방지 기능이 내장된 태그 칩 제작에 활용할 수 있음을 실험을 통해 확인하였다. 0.18um CMOS 공정의 경우에 Radix-16의 경우에도 ASIC 구현 결과 면적 및 전력소비에서도 UHF RFID 시스템에 적용 가능함을 확인하였다.

We have implemented a parallel operation of the Light Weight algorithm based on Grain Stream Cipher authentication algorithm for UHF RFID systems. We also verified parallel operation algorithm by Verilog coding and ASIC implementation of the Radix-1, 2, 4, 8 and 16 structures using a 0.18um CMOS process. The implemented results show that proposed parallel architecture can be used for design of UHF RFID tag for anti-cloning protection or authentication. We have verified that chip area and power consumption of the Radix-16 designed by 0.18um CMOS process can be applied to the UHF RFID tag design.

일회용 패스워드는 정적인 패스워드 사용에 따른 위험을 해결하고 사용자 인증을 강화하기 위해 필요하다. 개인정보 유출에 따른 사용자를 인증을 강화하기 위해 OTP 생성 알고리즘이 중요시 되고 있다. 본 논문에서 제안하는 OTP 생성 알고리즘은 값과 값을 이용하여 256비트 크기의 OTP Data를 생성하게 된다. 생성한 OTP Data를 행렬로 나열하고 불규칙적으로 32비트의 값을 추출하게 되는 이 값이 최종적인 OTP값이 된다. OTP 생성 횟수가 많을수록 제안하는 알고리즘이 기존 알고리즘에 비해 충돌내성의 확률이 낮음을 알 수 있다.

A disposable password is necessary to avoid any danger by the use of a static password and reinforce the user's authentication. In order to prevent personal information from being exposed, OTP generation algorithm is regarded as important. The OTP generation algorithm we suggest in this thesis generates 256-bit-size OTP Data by using Seed value and Time value. This value that the generated OTP Data are arranged with a matrix and a 32-bit-value is extracted on an irregular basis becomes the final value. We can find out that the more OTP generation frequency we have, the lower probability of clash tolerance we get in our suggested algorithm, compared to the previous algorithm.

Mobile Internet can access to the Internet networkat anytime and anywhere, thus bringing convenient in the application. At the same time, it also brings the hidden trouble of safety certification, and reduces the cost of access, aiming at this problem, this paper proposes the authentication signature algorithm. This algorithm is based on domain alliance, which can effectively prevent attacks, so as to improve the safety and the stability of the system, and enhance its ability to deploy.

This paper presents a proposal for a large-scale lecture authentication algorithm for an electronic attendance system. The utilization rate for existing electronic attendance systems is low. Because it couldn't solve the problems that occur by special conditions of university such as vicarious attendance, bottlenecking during attendance check-in, and attendees departure at intermission. The most important things are not the authentication problems or errors on the technical issues. Instead, issues are related to attempts to check attendance simultaneously by a number of students, failure to prevent vicarious attendance, and the uncertainties of students remaining in the classroom following check-in. The authentication algorithm of the proposed system uses smartphone in attendance check. So it will save time and prevent bottlenecks as large numbers of students will not need to stand in line to check-in their attendance in the wall-mounted attendance device. And, it will minimize, if not eliminate, students who might leave at intermission. Because the instructor can verify attendance many times with the simplicity of the attendance check verification procedure and the short authentication time. Thus, the proposed algorithm will facilitate the implementation of a smart electronic attendance system in the construction of the smart campus.

Speech perceptual hashing authentication algorithm is an efficient method for content integrity authentication and identity authentication. But the algorithm becomes transparent under the principle of Kerckhoffs which makes the algorithm unsafe. In this paper, the algorithm is encrypted under the principle of Kerckhoffs to protect the security of the algorithm. Then the specific link that won’t affect the performance of the algorithm is identified through the experiments. Next, this paper analyzes the security of the encrypted algorithm based on the concept of Shannon unicity distance. The unicity distance is figured out finally based on the experiments. That is to say, the algorithm loses its security even though the algorithm has been encrypted. Under this circumstances, the most important thing is to continue keeping the safety of the algorithm. Therefore, this paper proposed an efficient random secret key method to guarantee the safety of the algorithm after the unicity distance is figured out.

The integrity video watermarking authentication algorithm is proposed based on DCT coefficients. Because of the characteristic of vulnerable to interference for high-frequency DCT coefficients, we use the relationship between the average energy of the high frequency coefficients and the energy of every the high frequency coefficients and Substitution cipher to beneficiate the Image Watermarking. The result is embedded in the intermediate frequency coefficients. Experimental results show that image of minor attacks will cause severe deformation so that it is difficult to extract the identifiable watermark. It can achieve the integrity authentication purposes.

In this paper we proposed a novel video watermarking technique using Discrete Wavelet Transform and Singular Value Decomposition based on subband selection procedure. To increase the level of authentication, the two watermarks are used: one is the original watermark and the other is the owners’ fingerprint. These two watermarks are embedded into the cover video based on the subband selection scores. From the experimental analysis, we found that the proposed watermarking technique is more robust to all possible attacks than existing video watermarking technique.

Building applications on on-demand infrastructures instead of building applications on fixed and rigid infrastructures was provided by cloud computing providers. By simply positing into the cloud, it gains fast access to business applications or infrastructure resources with reduced Capital Expenditures (CAPEX). Dramatic increase in amount of information’s are placed into the cloud by individuals and industries, security issues are vital concern in mobile computing (MCC) and impends fast deployment of applications on the cloud. This work discus the different security issues that arises about how safe the mobile cloud computing environment is and provides a unified reliable security mechanism. There are two different types of the cloud users are: On-demand and Optimistic. On-demand is a non-preemptible for flexible leases given a user accessing to the resources within an interactive time of making the request and makes the resources available for an agreed-upon period of time, user can deploy any virtual machine (VM) compatible with the system. Optimistic is preemptible and pre-set contract gives a user access to resources at an indeterminate time and make resources available to the user for an insufficient amount of time. After that, this resources are initially (pre)-defined for the user by the cloud admin, that is the user cannot provide his or her own virtual machine (VM) based on defined access control for security.

This study presents a new algorithm for biometric-based iris recognition system. The proposed iris identification algorithm consists of four major fundamental steps: image processing; image localization; IER extraction; and image pattern recognition. An image of an individual’s eye is processed into an 8-bit grayscale BMP image until the boundaries of the iris are detected. The IER (Iris Effective Region) feature is then extracted using the feature extraction algorithm. This IER feature is a 12x8 BMP image pattern which contains the gray values of the iris and will be used for pattern matching. The IER feature extracted is then used as input for the pattern recognition algorithm wherein the linear correlation coefficients are analyzed and will be used as the basis for the identification and verification of an individual.

Iris biometric is most mature and secure authentication system as compared to other systems. Other authentication system does exist apart from biometrics such as PIN, password etc., which are not secure and more vulnerable to attacks and can be hacked or spoofed easily. Using, Iris biometric we can enhance overall performance in terms of accuracy, which is possible if and only if the pupil part must be removed perfectly and efficiently. Pupil part is unwanted part for our system. Pupil part is surrounded by iris part when extracted successfully we get two approximate concentric circle. Proposed scanning algorithm successfully extracts pupil part and defines iris part with less complexity and more efficiently. Iris part is consisting of patterns which are desired for authenticating a person and each patterns are represented in terms of feature vectors and stored in database. Proposed system focuses on feature extraction using five level decomposition technique implemented with haar, db2 and db4 and achieves high accuracy with reduced error rates. Due to reduced errors and considering lower half of iris part, proposed algorithm can be used for larger database such as for Aadhar because it takes less time for feature extraction and has less complexity with reduced mathematical burden on the system and improves good accuracy.

위성통신망은 방송과 마찬가지로 지구국만 갖추고 있다면 누구나 수신이 가능한 특성을 가져 반드시 보안이 요구되는 내용이 있다면 암호화를 행해 주어야 한다. 본 논문에서는 위성통신망 IPsec VPN에서 전송모드 AH 보안헤더를 추가하여 인증데이터 부분에 인증알고리즘 MD-5와 SHA-256을 적용하여 BER과 Error rate 및 Throughput을 분석하였다. 먼저 일반 IP 패킷을 생성하여 IPsec 전송모드 AH 보안헤더를 추가하여 내부 인증 데이터를 SHA-256 및 MD-5알고리즘을 적용하여 구성하였다. 채널코더는 Rate Compatible Punctured Turbo Codes를 적용하였고, 패킷 재전송 기법은 Hybrid-ARQ Type-Ⅱ와 Type-Ⅲ을 사용하였다. 변조방식은 BPSK를 적용하였고, 무선채널은 마르코프 채널 (Rician 80%, Rayleigh 20%와 Rician 90%, Rayleigh 10%)로 위성채널 상태에 따라 인증알고리즘이 에러율과 Throughput에 어떤 영향을 미치는지 분석하였다.

Satellite broadcasting networks, like if you have if you have just received information that everyone must bring the required security attributes this earth should be done as encryption. In this paper, a satellite communication network AH additional security header in transport mode IPsec VPN by applying the SHA-256 and MD-5 authentication algorithm to authenticate the data portion Error rate and analyze the BER and Throughput. First, to generate a normal IP packet added to IPsec transport mode security header AH were constructed internal authentication data by applying the SHA-256 and MD-5 algorithm. Channel coder was applied to the Rate Compatible Punctured Turbo Codes, packet retransmission scheme Hybrid-ARQ Type-Ⅱ and Type-Ⅲ were used. Modulation method was applied to the BPSK, the wireless channel Markov channel (Rician 80%, Rayleigh 20% and Rician 90%, Rayleigh 10%) as an authentication algorithm according to the satellite channel state analyzed how they affect the error rate and Throughput.

본 논문에서는 RFID 시스템에서 개인 정보보호를 위해 보안성이 강화된 인증 프로토콜의 설계를 제안한다. 제안된 방법에서는 AES(Advanced Encryption Standard) 암호 알고리듬을 기반으로 하여 3중 CRA(challenge response authentication) 방식을 사용한다. 또한, 개선된 인증 메카니즘의 실현을 위해 기존의 ISO/IEC 18000-3 표준을 수정한3종류의 프로토콜 프레임 패킷 형식을 제안한다. 보안성 비교를 통하여 제안한 알고리듬이 보다 보안성이 강인함을 제시하였으며, 제안한 프로토콜의 검증을 위해 RFID Tag을 위한 디지털 Codec을 설계하였다. 설계된 Codec은 Verilog HDL을 사용하였고, Xilinx Virtex XCV400E device를 사용하여 합성을 수행하였다. 시뮬레이션 결과를 통하여 제안한 프로토콜이 안정성 향상과 함께 정확히 동작함을 보였다.

This paper proposes the design of a security-enhanced RFID authentication protocol which meets the privacy protection for tag bearers. The protocol which uses AES(Advanced Encryption Standard) cipher algorithm is based on a three-way challenge response authentication scheme. In addition, three different types of protocol packet formats are also presented by extending the ISO/IEC 18000-3 standard for realizing the security-enhanced authentication mechanism in RFID system environment. Through the comparison of security, it was shown that the proposed scheme has better performance in user data confidentiality, Man-in-the-middle replay attack, and replay attack, and forgery resistance, compared with conventional some protocols. In order to validate the proposed protocol, a digital Codec of RFID tag is also designed based on the protocol. This Codec has been described in Verilog HDL and also synthesized using Xilinx Virtex XCV400E device.

최근 인공지능 분야는 구글, 아마존, 마이크로 소프트 등 선진 기업을 중심으로 머신러닝에 대한 투자와 연구 경쟁이 가속화 되고 있다. 가상화 기술은 가상화 보안 구조에 대한 보안 취약점 문제가 지속적으로 이슈화 되었다. 또 한 내부 데이터 보안이 플랫폼 제공자의 가상화 보안 기술에 의존적인 경우가 대부분이다. 이는 기존 소프트웨어, 하드 웨어 보안 기술은 가상화 영역 접근이 어렵고 보안 기능 수행에 데이터 분석 및 처리 효율성이 낮기 때문이다. 본 논 문은 사용자 중요 정보를 기계학습 알고리즘을 적용하고, 학습 가능한 보안 인증벡터 생성하여 이를 가상화 내부 영역 에서 보안 검증을 수행할 수 있는 방법을 제안한다. 성능분석 결과 인증벡터의 가상화 환경의 내부 전송 효율성, 연산 방법의 높은 효율성과 주요 생성 파라미터에 대한 안전성을 입증하였다.

Recently, the investment and study competition regarding machine running is accelerating mainly with Google, Amazon, Microsoft and other leading companies in the field of artificial intelligence. The security weakness of virtualization technology security structure have been a serious issue continuously. Also, in most cases, the internal data security depend on the virtualization security technology of platform provider. This is because the existing software, hardware security technology is hard to access to the field of virtualization and the efficiency of data analysis and processing in security function is relatively low. This thesis have applied user significant information to machine learning algorithm, created security authentication vector able to learn to provide with a method which the security authentication can be conducted in the field of virtualization. As the result of performance analysis, the interior transmission efficiency of authentication vector in virtualization environment, high efficiency of operation method, and safety regarding the major formation parameter were demonstrated.

Recently the numbers of patent about the technology for mobile payment with Ie or bluetooth-chip are being increased more and more. The reasons of patent increment for mobile payment are advancement of wireless internet technology and rising of customer's request for it. The customer wants to be able to pay for purchase, tax and aid with own mobile phone. So every mobile service provider applies for patents about that competitively. And in the near future the biometrics is generalized in the mobile payment system. Especially the payment service of iris recognition is significant technique in this area for the future prospect. The biometrics of iris is an accurate authentication method because it has about 250 distinguish parameters to the finger print's 30. The biometrics of iris can recognize and identify a person for 2 seconds. But the image of iris is changed by transformation of body in the life. And the existing iris authentication system has problem that can be miss-recognized. In this paper, we propose the new method that reduces miss-recognizing rate with Renewable Iris Authentication Algorithm(RIAA) in mobile system.

For the effective use of information in the information society, information should be protected and outflow of information by illegal users should be prevented. This study sets up user authentication policy, user authentication regulations and procedures for information protection and builds information protection key distribution center and encryption user Authentication system, which can protect information from illegal users.

전자와 컴퓨터 기술의 발전은 무선 센서 네트워크 증대의 토대를 마련하였다. 이에 따라, 센서 네트워크상의 충돌 방지와 인증 기술의 필요성이 증대되어 지고 있다. 센서 네트워크의 충돌 방지를 위해 개발될 알고리즘은 무선 센서 네트워크 플랫폼 상에 쉽게 적용될 수 있으며 또한 동시에 분산 연산, 분산 저장, 데이터 강인성, 센싱된 데이터를 자동 분류할 수 있어야한다. 그리고 무선 센서 네트워크에서 보안을 유지하기 위하여 여러 센서 간에 안전하게 채널을 확립할 수 있어야한다. 본 논문 우리는 센서의 인증과 충돌 방지를 위하여 유비쿼터스 센서 네트워크 채널 확립 알고리즘을 제안하였다. 본 논문에서는 두 가지 다른 형태의 구조를 제안하였으며, 각 구조에서는 센서 노드 사이에서 채널을 확립하기위하여 웨이블렛 필터를 사용한 알고리즘과 센서의 충돌 방지를 위하여 BIBD(Balanced Incomplete Block Design) 코드를 사용하였다. 결과적으로, BIBD와 웨이블렛 필터 기반으로 제안된 알고리즘은 이상적인 환경에서 98% 충돌 검출율을 가졌다.

Advances in electronic and computer technologies have paved the way for the proliferation of WSN(wireless sensor networks). Accordingly, necessity of anti-collusion and authentication technology is increasing on the sensor network system. Some of the algorithm developed for the anti-collision sensor network can be easily adopted to wireless sensor network platforms and in the same time they can meet the requirements for sensor networks like: simple parallel distributed computation, distributed storage, data robustness and auto-classification of sensor readings. To achieve security in wireless sensor networks, it is important to be able to establish safely channel among sensor nodes. In this paper, we proposed the USN(Ubiquitous Sensor Network) channel establishment algorithm for sensor's authentication and anti-collision. Two different data aggregation architectures will be presented, with algorithms which use wavelet filter to establish channels among sensor nodes and BIBD (Balanced Incomplete Block Design) which use anti-collision methods of the sensors. As a result, the proposed algorithm based on BIBD and wavelet filter was made for 98% collision detection rate on the ideal environment.

Electrocardiogram(ECG) signal is one of the unique bio-signals of individuals and is used for personal authentication. The existing studies on personal authentication method using ECG signals show a high detection rate for a small group of candidates, but a low detection rate and increased execution time for a large group of candidates. In this paper, we propose a hierarchical algorithm that extracts fiducial points based on curvature of ECG signals as feature values for grouping candidates ?and identifies candidates using waveform-based comparisons. As a result of experiments on 74 ECG signal records of QT-DB provided by Physionet, the detection rate was about 97% at 3-heartbeat input and about 99% at 5-heartbeat input. The average execution time was 22.4 milliseconds. In conclusion, the proposed method improves the detection rate by the hierarchical personal authentication process, and also shows reduced amount of computation which is plausible in real-time personal authentication usage in the future.