Earticle

최근 애플, 구글 등을 비롯한 IT기업들이 기술보안을 강화하면서 정부와 대립하는 일련의 사건들이 발생하였다. 특히 스마트 전자기기 등에 대한 암호화가 일반화된 상황에서 국가안보, 아동 성범죄, 그 밖의 생명 신체에 대한 중대하고 긴급한 수사 필요가 인정될 때에도 기업의 협조를 받지 못해 어려움을 겪었다. 이 연구에서는 우선 피의자 또는 피고인에 대한 스마트 전자기기 등의 암호해제 강제가 헌법 제12조 진술거부권의 침해가 되는지 여부를 살펴보았고, 스마트 전자기기의 특수성을 고려할 때 해당 행위는 위헌적으로 평가하여야 한다고 하였다. 그리고 피의자 또는 피고인에게 스마트 전자기기 등의 암호해제를 강제할 수 없기 때문에 기존 ｢통신비밀보호법｣상의 기업 협조 요청과 같이 IT제조업체에 대해서 필요 정보에 접근할 수 있도록 협조를 요청할 수 있어야 한다고 하였다. 또한 영장주의와 적법절차원칙에 따라 통신제한조치보다는 엄격하고 좁은 범위인 국가안보, 아동 성범죄, 그 밖의 생명 신체에 대한 중대하고 긴급한 수사 필요가 인정될 경우에는 정보 수집이 가능하도록 하여야 한다고 주장하였다. 나아가 정부의 정보 압수 수색 및 증거 수집 절차에서 피의자 또는 피고인의 기본권 침해 사항을 개정하여야 하고, 독립적 지위가 인정되는 감독기구를 통해 국가감시권력이 남용될 수 있는 우려를 실질적으로 견제할 수 있도록 법제화하여야 한다고 하였다.

Recently, as IT companies such as Apple and Google have strengthened their technology security, a series of incidents have occurred against the government. In particular, in a situation where encryption for smart electronic devices has become common, it was difficult to get cooperation from companies when there was a need for serious and urgent investigations on national security, child sex crimes, and other lives. In this study, first, it was examined whether the enforcement of encryption by smart electronic devices on the suspect or the accused violates Article 12 of the Constitution, the right to refuse statements. And considering the specificity of the smart electronic device, the action should be evaluated as unconstitutional. Decryption of passwords such as smart electronic devices should not be forced on the suspect or the accused. Therefore, it is necessary to request cooperation from the IT manufacturer so that the government can access necessary information within the scope of minimizing the infringement of corporate freedom, freedom of expression, and copyright, as in the request for corporate cooperation under the existing CommunicationsSecret Protection Act. In addition, in accordance with warrants and due process, when serious and urgent investigations on national security, child sex crimes, and other lives are required, it should be possible to collect information within a narrower scope than the communication restriction measures. Furthermore, the government's information seizure, search and evidence collection procedures must revise the violation of the basic rights of the suspect or the accused. The entire legal system should be thoroughly reviewed so that the supervisory body, which is recognized for its independent status, can procedurally evaluate and effectively contain the abuse of state surveillance power.

최근에는 전자제품 및 웨어러블 기기를 포함한 IoT 제품들이 증가 추세에 있다. 하지만, IoT 기기가 증가할수록 보안 문제가 대두되면서 유선 및 무선 보안에 대한 관심이 증가하고 있다. 현재 많이 사용하고 있는 알 고리즘으로는 AES가 있으며, 임베디드 기반에서도 사용이 가능한 경량의 암복호화 알고리즘 들이 있다. 본 논문 은 임베디드 경량 블록 암호 알고리즘인의 응용에 관심이 있으며, 평문 데이터 대신에 실시간으로 측정한 심박 데 이터에 경량의 암복호화 알고리즘을 적용하는 실험을 수행하였다. 데이터를 분석한 결과, 본 데이터와 복호화 데 이터가 100% 일치하였다. LEA 알고리즘의 경우에 1개의 심박 데이터에 대한 샘플링 갯수는 초당 100개임을 확 인하였다. 향후, 샘플링 레이트를 높일 수 있도록 고성능의 임베디드 기기에서 실험을 수행할 예정이다.

In recent years, the number of IoT products, including electronics and wearable devices, has been on the rise. However, with the increase in IoT devices comes security concerns, which has led to an increased focus on wired and wireless security. Currently, AES is a popular algorithm, and there are lightweight encryption algorithms that can be used on an embedded basis. This paper is interested in the application of embedded lightweight block cipher algorithms, and experiments were conducted to apply lightweight decryption algorithms to real-time measured heart rate data instead of plain text data. After analyzing the data, we found that the original data and the decrypted data matched 100%. For the LEA algorithm, we found that the number of samples for one heart rate data is 100 per second. In the future, we will conduct experiments on high-performance embedded devices to increase the sampling rate.

본 논문에서는 우주발사체에 적용되는 비행종단시스템의 보안명령 입력을 위한 암호화 장치의 개념설계 결과와 개발 요구조건을보였다. 암호화 장치는 명령신호를 생성하고 암호화하기 위한 명령생성장치와 암호화 명령신호를 연계장치에 입력하기 위한 명령입력장치로 구분하여 개발되도록 설계하였으며, 미국 NIST의 권고안과 한국인터넷진흥원(KISA)의 권고안을 참고하여 보안등급과암호 알고리즘, 암호키 관리방안 등을 설정하였다. 암호화 장치는 AES-256 블록 암호화가 적용된 비밀키 알고리즘과 SHA-256의해쉬 알고리즘을 적용하여 기밀성, 무결성, 가용성이 확보되도록 설계되었다. 설계된 암호화 장치는 우주발사체에 탑재되는 비행종단시스템의 보안명령 입력 용도로 활용되어 비행종단명령의 보안성과 비행종단시스템의 신뢰성 향상에 기여할 것으로 판단된다.

In this paper, we show the design requirements of the cryptographic module and its security algorithm designed to prevent the exposure of the command signal applied to Flight Termination System. The cryptographic module consists of two separate devices that are Command Insertion Device and Command Generation Device. The cryptographic module designed to meet the 3 principles(Confidentiality, Integrity and Availability) for the information security. AES-256 block encryption algorithm and SHA-256 Hash function were applied to the encrypted symmetric key encryption method. The proposed cryptographic module is expected to contribute to the security and reliability of the Flight Termination System for Space Launch Vehicle.

컴퓨터성능의 향상과 인터넷의 발달로 인하여 디지털 이미지의 보안에 대한 중요성이 계속 증 가 하고 있고, 이런 현상때문에 혼돈신호를 이용한 암호화 알고리즘은 새롭고 효과적인 이미지 암호화 방법중의 하나로 제시되고 있다. 본 논문에서 우리는 기존의 혼돈신호를 이용한 암호화 방법의 혼돈신호가 특정 값에 변중된 분포로 생성되는 현상에 대한 암호화의 문제점을 보이고 우 리가 설계한 다중변수 혼돈계를 이용한 암호화 알고리즘은 혼돈신호의 분포가 생성되는 신호의 전체 영역에 일정한 분포로 발생되는 것을 보인다. 우리는 이미지를 암호화하고 복호화한 결과값 으로 우리가 제시한 다중변수 혼돈계를 이용한 암호화 방법의 타당성을 제시한다.

The Security of digital images has become increasingly more important in highly computerized and interconnected world. Therefore, The chaos-based encryption algorithms have suggested some new and efficient ways to develop secure image encryption method. This paper is described for the point at issue in all chaos-based encryption method for distribution of a chaotic signals. It has a method for generation of uniformly distributed chaotic signals that we designed secure algorithm of multi-parameter chaotic systems. So we are present validity of the theoretical models for results of image encryption and decryption for proposed method.

데이터베이스는 중요한 정보를 저장·관리하는 핵심 IT 자산이며, 이를 보호하기 위한 대표적인 기술 중 하나가 암호화 기 술이다. 본 연구에서는 AES, RSA, 그리고 두 방식을 결합한 하이브리드 암호 시스템을 구현하고, 데이터베이스(MySQL, SQLite)와 데이터 유형(텍스트, 이미지)에 따른 암·복호화 성능을 비교 및 분석하였다. 특히, 텍스트 데이터셋(FIFA, Top5) 및 이미지 데이터셋(GTSRB, Chest_xray)을 사용하여 데이터 특성과 크기에 따른 성능 차이를 실험적으로 평가하였다. 실험 결 과, AES는 모든 조건에서 가장 짧은 처리 시간과 낮은 메모리 사용량을 보였으며, 하이브리드 방식은 중간 수준, RSA는 가장 낮은 성능을 나타냈다. 데이터 유형별로는 텍스트가 이미지보다 일관되게 빠르고 경량이었고, 데이터베이스별로는 SQLite가 MySQL보다 전반적으로 우수했다. 이러한 경향은 알고리즘 구조, 데이터 처리 과정의 복잡성, DBMS의 동작 방식 차이에 기 인한다. 본 연구의 성능 비교 결과는 데이터베이스 보안 기능 구현 시 효율적인 암호화 방식 선택을 위한 근거를 제공하며, 제 안한 하이브리드 방식은 보안성과 성능의 균형을 위한 실질적 참고 자료가 될 수 있다.

A database is a core IT asset for storing and managing critical information, and encryption is one of the representative technologies for its protection. This study implements AES, RSA, and a hybrid cryptosystem combining the two methods and compares and analyzes their encryption and decryption performance across different databases (MySQL and SQLite) and data types (text and image). In particular, the performance differences according to data characteristics and sizes were experimentally evaluated using text datasets (FIFA, Top5) and image datasets (GTSRB, Chest_xray). Experimental results show that AES consistently achieved the shortest processing time and lowest memory usage under all conditions, the hybrid approach demonstrated intermediate performance, and RSA exhibited the lowest performance. Text processing was consistently faster and lighter than image processing, whereas SQLite outperformed MySQL. These trends can be attributed to differences in the algorithm structure, complexity of data processing, and operational mechanisms of the DBMSs. The performance comparison results of this study provide a basis for selecting efficient encryption methods when implementing database security features, and the proposed hybrid approach can serve as a practical reference for balancing the security and performance.

In Distributed systems, the users with a certain set of attributes can only be able to access the data. At present this process can be done through a trusted server where we will store the data and there will be certain constraints on the access of the data. In this case there will be a possibility to compromise the data and so the confidentiality of the data is lost. An Attribute-Based Encryption (ABE) is an encryption scheme, where users with some attributes can decrypt ciphertexts associated with these attributes. Now this is our turn to develop a system with a more complex policy of access of the encrypted data and which can be called as Ciphertext Policy Attribute-based Encryption (CP-ABE). By using this method the information can't be traded off even through the trusted server where the information is put away. These methods are also secure against the collusion attack. In this method attributes are generally assigned in the form of access trees. The attributes are placed at the leaf nodes of this access tree. In older Attribute-based encryption strategies encrypted data is described by the attributes and policies are given to the user’s keys, while in our system users credentials are described by the attributes and there will be a policy where it tells us about who should access or decrypt the data. So, this type of access method is very much closer to the Role-based attribute-based encryption.

The Cryptographic systems need a secret key or a random number must be necessarily tied to an individual through a unique identifier. This unique identifier definitely might exist a globally user id or biometric data [2]. In this paper we combined biometric with cryptography in which the intensity of each pixel of iris is changed into the elliptic curve and encrypted using ECC. The receiver end original image is recovered by using their decryption and authentication [8] is performed using ECDSA. The proposed technique is implemented for BMP images. We can enroll and add the number of images for authentication .It has been also performed more security if the image is recovered without being any side channel attack.

Cloud Computing is one of the major trends in today’s information technology and the most likely research area. Cloud Computing is a model of sharing resources, software, information. The user access the cloud via internet and all the resources are open to all. Thus, cloud security is now a challenging problem for the cloud service providers. Cryptography is a good solution of the cloud security and several research works are published to ensure secure cloud using cryptographic tools. This paper proposes an authentic communication between a customer and cloud service provider using encryption, decryption and message digests.

Cloud computing appear to be a very popular and interesting computing technology. Every third person is using cloud computing directly or indirectly for example e-mail, most commonly used application of cloud computing, you can access your mail anywhere anytime. Your e-mail account is not visible on your personal computer but you have to access that with the help of internet. Like e-mail cloud computing provide many other services such as storage of any kind of data, access to different applications, resources etc. So users can easily access and store data with low cost and without worrying about how these services are provided to user. Due to this flexibility everyone is transferring data to cloud. To store data on cloud user has to send their data to the third party who will manage and store data. So it is very important for the company to secure that data. Data is said to be secured if confidentiality, availability, integrity is present. To secure data we have different algorithms. In this paper we will discuss the different cryptography of algorithms.

In view of the simple keys, time-consuming in encryption and decryption process and the loss of original function characteristics in encrypted image QR two-dimensional code, we adobe a kind of encryption method of QR code based on ECA state ring. In this method, the simple structure, highly parallel of elementary cellular automaton is being used. Operating each pixel point on the quick response code except which can express QR code function information. The simulation results show that the method is faster than two kinds of typical QR code encryption method, and the encrypted image can preserve the original QR code function information, while the safety coefficient is very similar.

Cryptography can be defined as the art of secret writing or protecting information by transforming it (encrypting it) into an unreadable format, called cipher text and then transmitting it across insecure networks, so that it cannot be read by anyone except the intended recipient. Only those who possess a secret key can decipher (or decrypt) the message into plain text. Encrypted information can sometimes be broken by cryptanalysis, also called code breaking, although modern cryptography techniques are virtually unbreakable. Various algorithms help achieve flawless encryption results which are mostly unbreakable. This paper is an attempt to improve one such algorithm, i.e. RC6 by adding on to its existing functionalities.

In the era of internet, most of the people all over the world completed their transaction on internet. Though the user of electronic transaction or E-money transaction system increase rapidly but the majority person are concern about the security of this system. The growth in online transactions has resulted in a greater demand for fast and accurate user identification and authentication. Conventional method of identification based on possession of ID cards or exclusive knowledge like a social security number or a password are not all together reliable. Identification and authentication by individuals' biometric characteristics is becoming an accepted procedure that is slowly replacing the most popular identification procedure – passwords. Among all the biometrics, fingerprint based identification is one of the most mature and proven technique. Along with the combination of conventional system, biometric security, Global positioning system(GPS) and mobile messaging we have design an algorithm which increase security of electronic transaction and more reliable to user. A three layer security model to enhancing security of electronic transaction is proposed in this paper.

In this paper we have combined both cryptography and steganography techniques. This provides the higher level of secure system in which the secret information can be transferred over any unsecured communication channel and to overcome the threat of intrusion. The presented work aims at secure image transmission where a random encryption algorithm is used to encrypt different shares of stego image, which is created when a secret image and the cover image are embedded together, and produces shares using a secret sharing technique. At the receiving end, decryption of the encrypted shares are done using an artificial neural network and hence eliminating the need of key exchange before the transmission of data which is a prerequisite for most of the general encryption algorithm. Artificial neural network is used to provide high security of data and to produce distortion less decrypted images. The reversible process is used to reconstruct the secret image from the decrypted images. Peak signal to noise ratio, structure similarity and mean square error are used to analyze the quality of stego images. The simulation results show that the secret is reconstructed without loss and the time taken for encryption and decryption is very less.

DES는 수학의 치환을 사용한 암호 알고리즘이다. 현재는 이를 개선한 AES가 표준화되어 사용되고 있다. 본 논문에서는 중 고등학교의 특별활동 자료로 사용할 수 있도록 DES를 소개하고 이의 구현을 시도하였다. 특히 한글의 처리를 할 수 있도록 하였다. 수학의 간단한 이론이 현대의 복잡한 정보화 사회에서 첨단 기술로 사용하고 있음을 알 수 있다.

DES is a very simple crytosystem that uses only permutation in mathematics. Recently AES is standardized based on DES. In this paper we introduce DES and its implementation. In particular, we tried to process Hangul in DES. This paper may be used in school mathematics education.

Nowadays, the network transmission and video encryption areas have urgently needed high-speed encryption systems for SM4 algorithm. To speed up the SM4 system in small area, three aspects in existing system is analyzed and optimized. Firstly, aiming at the prior encryption must wait long until completing all 32 rounds key expansion, a method is proposed for outputting round key in each key expansion to accelerate encryption response. Secondly, considering most user passwords are unchanged, we adopt additional memory for comparing old and new keys, so that key expansion can be cancelled sometimes. Thirdly, the paper analyses the relationship between key expansion and encryption/decryption algorithm in SM4. Using module reused technology, the designed key expansion module can also encrypt and decrypt, and the designed another two modules can both encrypt and decrypt. Therefore, the system can achieve three tasks’ synchronous encryption/decryption, which greatly improves the system's processing speed. This paper presents a hardware design scheme for the high-speed system. At last, the optimized design is realized in FPGA. The experimental results show that the design is feasible, and the SM4 encryption speed can increase fourfold.

In order to solve the problem of non-restoration of PVSS, in this paper, we propose a method to recover the secret image without using the Boolean operation of the matrix matrix. In the lossless recovery process, each column base matrix will be "and" and "exclusive or" operation to get the original image anti-color image, and then the image can be obtained by the lossless secret image, this method can be applied to the general ( k, n ) threshold lossless recovery. In the absence of a computing device, it can be decrypted by superimposing, in the XOR computing device, it can realize lossless recovery. Experimental results show that the proposed algorithm can guarantee the gradual visual secret sharing, complete the restoration of the secret image, the operation is simple and efficient, and has a strong practicability.

An optical encrypted color video sequence based on a spectral fusion of information has been proposed. Each color image of the sequence is decomposed into three basic color components. Pertinent information fusion is considered as segmentation. Encrypting consists in modulating each of these three components of the image spectrum by a corresponding phase mask. This phase mask includes pertinent information collected from various encrypted color keys according to a fusion criterion. As encrypting keys are formed by real images, it becomes an impossible task to get the target image by any trial and error random images techniques. For decrypting, a simple algorithm based on segmented correlation filters is proposed. Simulation results corroborate the effectiveness of our algorithm.

This paper proposed a algorithm for automatic key generation which generate from an integer value to create more secure communication over cloud architecture. Character based ASCII encryption scheme is used to satisfy the current requirement to establish secure communication. In this work we have a byte level security at each level of data transmission. It helps to create batter security to perform encryption & decryption over cloud infrastructure i.e., from this work we have technique through which we generate private key which help to establish secure communication between two or more node while they are communicating over cloud system.

A day-to-day use of cryptography in our life is increasing tremendously; this is because of necessity of our multimedia documents to be protected from unauthorized person. As the days are passing the old algorithms are not remained so strong as cryptanalyst are familiar with them. Today the computers are faster and in feature its speed will increase more and more. Brute force attacks are made to break the encryption and they are growing so faster. These attacks are the main drawbacks of older algorithm. But with feature this algorithms will be replaced by new techniques that will provide better protection. In this paper we are going to proposed new encryption technique which is more faster, better immune to attacks, more complex, easy to encrypt and many more advanced security feature included. This Document displays the comparison between PSR algorithm and RSA Algorithm which are used in the encryption of plaintext into cipher text that are generally used in cryptography.

In this paper, we introduce a novel approach to enhance document security by integrating Computer Generated Hologram(CGH) encryption technology with a system for document encryption, printing, and subsequent verification using a smartphone application. The proposed system enables the encryption of documents using CGH technology and their printing on the edges of the document, simplifying document verification and validation through a smartphone application. Furthermore, the system leverages highresolution smartphone cameras to perform online verification of the original document and supports offline document decryption, ensuring tamper detection even in environments without internet connectivity. This research contributes to the development of a comprehensive and versatile solution for document security and integrity, with applications in various domains.