Earticle

전장 지역에서 각종 전술정보를 실시간으로 수집할 수 있는 센서기반의 감시체계인 감시정찰 센서네트워크는 Sensor-to-Shooter 개념의 네트워크 중심전 환경에서 핵심 역할을 수행한다. 그 러나 네트워크를 구성하는 센서노드들의 자원제약적 특성과 무선통신 사용 등 센서네트워크 자 체의 특성으로 인해 감시정찰 센서네트워크는 일반 네트워크에 비해 보안이 취약해 질 수 있다. 이에 본 논문에서는 감시정찰 센서네트워크 운용 간 기밀성, 무결성, 가용성 및 인증 등을 보장 하기 위한 기반이 되는 그룹 키 관리 기법을 제안한다. 제안된 키 관리 기법은 감시정찰 센서네 트워크의 토폴로지 특성과 확률론적 키 공유를 기반으로 그룹 키를 생성하고 분배하며, 그룹 키 분배에 소요되는 통신 비용은 O(logn)이다.

Survelliance and Reconnaissance Sensor Network(SRSN) which can collect various tactical information within battlefield in real time plays an important role in NCW environment, of sensor to shooter architecture. However, due to the resource-limited characteristics of sensor nodes and the intrinsic attributes of sensor network such as wireless communication, the SRSN may be vulnerable to various attacks compared to traditional networks. Therefore, in this paper, we propose a new group key management scheme to guarantee confidentiality, integrity, availability, and authentication during the operation of the SRSN. Proposed scheme generates and distributes the group key based on the topological characteristic of the SRSN and the probabilistic key sharing. The communication cost for distributing the group key is O(logn).

센서네트워크는 매우 제한된 자원을 갖는 작은 노드들로 구성되어 온도, 진동 등의 지역적 정보를 수집하고 통신망을 통하여 이들 정보를 제공한다. 센서네트워크는 일반적으로 매우 작고 제한적인 자원을 갖는 노드들로 구성되므로 이러한 노드들에 보안 서비스를 추가하는 것은 상당히 어려운 문제이다. 센서네트워크의 안정성을 위해서는 일반 네트워크 노드들에 비하여 보다 더 효율적인 키 관리 기법이 필요하다. 본 논문에서는 원형 좌표계를 이용한 위치 정보를 기반으로 키 관리하는 기법을 제시한다. 원형좌표계의 원점을 중심으로 노드와 노드간의 상대적인 위치 정보를 이용하여 키를 생성하였다. 이러한 방법은 대칭적 위치 구조에 의해 키 생성이 다른 방법에 비하여 간결하면서도 효율적임을 보였다

Sensor network is made from very small and restrictive-power nodes, and they collect some information of environment like as thermal and tremor, etc. And they transfer the information to each other. Generally, supporting the Security service of sensor network is a difficult work, because the nodes have very smal cpu-power and low electronic-power. So, More effective Key management scheme will needed for the maintenance of stability.In this paper, we propose the location based key scheme with circular coordinates. We were make the key with the relative location information from one node to other. The new scheme show more simple and effective result then the other method for key management.

VANET(Vehicular Ad-hoc Network)은 원활한 교통 소통, 사고 방지 등 여러 가지 편리한 기능들을 제공하지만 그기반을 애드혹 네트워크에 두고 있기 때문에 애드혹 망에서 발생하는 보안 문제를 가지고 있다. VANET에서 사용자의프라이버시를 보호하기 위해 그룹 서명방식 등이 연구되어졌다. 그러나 그룹 간에 그룹 키 생성 단계 및 그룹 키 갱신단계에서 RSU(Road-Side Unit) 및 차량의 계산상 오버헤드가 발생한다. 본 논문에서는 효율적인 그룹 키 관리 기술을 제안한다. 즉, 그룹 키 생성 및 갱신 단계에서 CBF(Counting Bloom Filter)를 사용하므로 RSU 및 차량의 계산상 오버헤드를 감소시킨다. 또한, RSU와 차량에서 그룹 키를 자체적으로 갱신하여 관리하는 기법이다.

VANET(Vehicular Ad-hoc Network) is a kind of ad hoc networks which is consist of intelligence vehicular ad nodes, and has become a hot emerging research project in many fields. It provides traffic safety, cooperative driving and etc. but has also some security problems that can be occurred in general ad hoc networks. In VANET, it has been studies that group signature method for user privacy. However, among a group of group key generation phase and group key update phase, RSU(Road-Side Unit) and the computational overhead of the vehicle occur. In this paper, we propose an efficient group key management techniques with CBF(Counting Bloom Filter). Our group key management method is reduced to the computational overhead of RSU and vehicles at the group key generation and renewal stage. In addition, our method is a technique to update group key itself

Secure broadcasting is requirement for payment of TV systems, government or company. Hierarchical key management for access control provides efficient key management in those environment. Also, time-bound hierarchical key management technique generates different keys in each time period. In 2004, Tzeng proposed a time-bound cryptgraphic key assignment scheme for access control in a hierarchy and in 2008, Bertino et al proposed an efficient time-bound hierarchical key management scheme for secure broadcasting. Tzeng’s scheme and Bertino et al’s scheme are organized in different environment and primitive. In this paper, we analysis above two time-bound hierarchical key management scheme.

클라우드 컴퓨팅 서비스가 대중적으로 보급됨에 따라 공공분야에서 해당 서비스의 도입에 대한 관심이 증가 하고 있다. 이에 따라 국내에서는 클라우드 컴퓨팅을 공공분야에 도입하거나 계획하고 있으며 점차 구체적으로 구축 하고 있다. 하지만 공공분야에서의 클라우드 도입 및 활성화를 위해서는 서비스 가용성 장애요인 및 인증 받지 않은 사용자의 무단 접근, 불분명한 출처로부터 다운로드 받은 데이터로 인한 클라우드 데이터센터의 신뢰성 저하 등의 보 안 위협에 대한 해결방안을 모색할 필요성이 있다. 따라서 본 논문에서는 공공기관 클라우드 데이터센터에서 활용 가 능한 공개키 기반의 안전한 데이터 관리 기법에 대해서 제안한다. 이를 통해 공공기관에 클라우드 컴퓨팅을 도입할 때 인증 받은 사용자만 데이터센터를 사용할 수 있고, 공공 데이터의 중요도와 난이도를 공용데이터, 개인데이터, 기 밀데이터로 설정해주어 체계적이고 안전하며 효율적으로 데이터 관리를 가능하게 한다. 따라서 공공기관에서의 클라 우드 서비스에 대해 전반적인 보안성과 편의성을 향상시킬 수 있을 것으로 기대된다.

The cloud computing has propagated rapidly and thus there is growing interest on the introduction of cloud services in the public institution. Accordingly, domestic public institution are adoption of cloud computing impose and devise a plan. In addition, more specifically, is building a cloud computing system in the public institution. However, solutions to various security threats(e.g., availability invasion of storage, access by unauthorized attacker, data downloaded from uncertain identifier, decrease the reliability of cloud data centers and so on) is required. For the introduction and revitalize of cloud services in the public institution. Therefore, in this paper, we propose a public key based secure data management scheme for the cloud data centers in public institution. Thus, the use of cloud computing in the public institutions, the only authorized users have access to the data center. And setting for importance and level of difficulty of public data management enables by systematic, secure, and efficient. Thus, cloud services for public institution to improve the overall security and convenience.

u-헬스케어에서는 무선 센서와 에드혹 네트워크를 통해 사용자의 건강 정보, 응급 정보를 수집, 분석하고 있으며 상호 운용이 가능한 전자 헬스 정보의 기록 및 전송을 위하여 동적인 액세스 제어를 수행하고 있다. 네트워크 시스템을 이용한 u-헬스케어의 경우 상호 운용 가능한 전자 건강 기록과 민감한 환자 의료 정보 전송은 개인 정보 보호 및 보안에 대한 문제점을 해결하기 위하여 키 관리 체계를 사용하고 있으나 동적인 액세스 제어에서는 그룹 키 관리가 어려우며 그룹에서 접근 맴버를 추가하거나 삭제할 경우에 매번 그룹 키를 변경해야하는 문제점을 가지고 있다. 따라서 본 논문에서는 유비쿼터스 헬스 케어의 동적 액세스를 수행하는 네트워크 환경에서 헬스 정보 교환을 위한 융합형 키 관리 체계방식을 제안한다.

The threats to privacy and security have received increasing attention as ubiquitous healthcare applications over the Internet become more prevalent, mobile and universal. In particular, we address the communication security issues of access sharing of health information resources in the ubiquitous healthcare environment. The proposed scheme resolves the sender and data authentication problem in information systems and group communications. We propose a novel key management scheme for generating and distributing cryptographic keys to constituent users to provide form of data encryption method for certain types of data concerning resource constraints for secure communications in the ubiquitous healthcare domains.

Wireless Body Area Networks (WBANs) have an important role in healthcare. So, the security of WBANs becomes a challenging issue. High performance encryption method and efficient key management scheme are required for securing WBAN communications. This study presents and evaluates an efficient key management scheme and efficient encryption method for improving WBAN security. We proposed a new random key management scheme. The proposed method utilized Advanced Encryption Standard (AES)-256 to encrypt the bio signals. Simulation results show that the proposed method has advantages compared to other secure WBAN communication methods.

Wireless sensor networks (WSNs) are a technology of various uses from monitoring surrounding environment to collecting data. Because WSNs operate with limited resources of sensor nodes, its life is extended by cluster-based routing methods. However, WSNs which communicate through a wireless transmission medium are quite vulnerable in terms of security compared to wired networks and their sensor nodes have very limited communication and computing capacities and a small memory space. For these reasons, it is difficult to apply the established public key encryption technology. Accordingly, a large number of sensor nodes should be tolerable to errors and failures, and it is essential to achieve effective management and reinforced security functions through autonomous network construction. The cluster-based routing protocol proposed in this study showed energy-efficient key management by establishing a common shared key through the key of key ring or through authentication by a reliable institution.

Key management is the base of wireless sensor network security, key pre-distribution way is a high feasibility method in key management. The network connectivity rate, resilience against node capture and the storage consumption are important performance indicators in key pre-distribution way. However, most of the existing key pre-distribution schemes of wireless sensor network have the problems of low connectivity rate ，large storage consumption or poor resilience against node capture .On the basis of Overlap-Key-Sharing (OKS) management scheme and the group-based model of Wenliang Du and Donggang Liu et, an improved Overlap-Key-Sharing key management scheme is proposed. The management scheme has little storage consumption and good resilience against node capture. In this paper, we mainly do some analyses and evaluations on a basic random key pre-distribution scheme (E-G scheme) which is proposed by Eschenauer and Gligor et and the improved Overlap-Key-Sharing key management scheme. Result analyses show that under the same network connectivity rate, compared to E-G management scheme, the improved scheme has better resilience against node capture and the smaller storage consumption.

Many key management schemes have been proposed in systematically deployed Wireless Sensor Networks (WSNs).The sensor nodes are equipped with inadequate battery power, low memory, limited computation and communication range. Energy efficient secure routing is major issue in wireless sensor networks. In this paper, the hybrid key management scheme is proposed by combining public key cryptography scheme with symmetric scheme. The symmetric keys are generated by using genetic algorithm. Initial input for the genetic algorithm is the seed key generated by Hyperelliptic Curve Cryptography (HECC).The proposed scheme addresses the energy efficiency, resilience against node capture attack, key refreshment between the cluster head and member nodes in the cluster. The simulation results show that the hybrid scheme is more robustness, efficient energy with reduced key size.

Key management in multicast dynamic groups, where users can leave or join at their ease is one of the most crucial and essential part of secure communication. Because communication bandwidth, storage memory, and computational power are limited resources, group key management schemes for scalable secure multicast communications have to consider these factors however, most of proposed key management schemes focus on guarantying secure distribution of keys. Even though security assurance is critical, reducing the number of update messages, number of stored keys and computational load also needs equivalent attention. Scalability, security, computation, and communication complexities are some of the tradeoffs. Here, we propose an efficient secure scheme in such a way that solves these problems and that can be implemented easily. In our scheme, we applied very simple mathematical concept with modulo and XOR operations in order to make the system simple for implementation and management. As a novel feature, the scheme is scalable with key update message of order O(1) - logM N, storage overhead of order O(1) and computational load of order O(log(N/M))- O(1).

With the development of Wireless Sensor Network (WSN) technology, it has been adopted in a wide variety of applications such as the health care system and so on. Yet, there are still some problems need to be addressed, one of which is the security issue. A lot of schemes from different points of view were proposed to ensure the security in WSNs, however, most of them are proposed for static networks while it is less to consider the situation for the security of the dynamic topology update. Our paper is a novel key management scheme for the dynamic WSNs. The security authentication and random key distribution were initialized in the network deployment phase. During the network stable phase, in order to ensure the real-time update security for the network topology, our scheme proposed a dynamic updated key based on the AVL tree. Simulation result shows that this program can ensure the WSN’s dynamic security as well as achieve the energy efficiency goal.

In the information exchange through network, the security risks always exist, that is eavesdropping, defacing, and spoofing by the attacker. PKI (Public Key Infrastructure) will prevent such attacks. But key management is very serious problem in PKI. The public key certificate is issued and distributed by certificate authority, but we think that the updating of expired certificate etc. are very costly for users. And secret key management is more serious problem. In order to solve above problems, we propose the scheme that stores protected secret key which is made by combination of biometrics and secret key in the smartcard in IDbased cryptography system. The user can restore the secret key from protected secret key by presenting his fingerprint to smartcard that has protected secret key and helper data. In our scheme, the template is not need for authentication. So, the problem of the template leakage won't arise. Lastly, we proposed the concrete operation scheme in which our scheme is used and how to make signature or authentication by applying our scheme. We show that the cost of the public key and secret key management will be reduced by using this operation scheme.

Identity-based signature (IBS) scheme can be widely used in resource-limited situations such as mobile e-commerce. In this paper, a lattice-based IBS scheme is first established by using trapdoor generation algorithm GenTrap, preimage sample algorithm SampleD and trapdoor delegated algorithm DelTrap put forward by Micciancio and Peikert in Eurocrypt’12; then the proposed scheme is proven to satisfy strong unforgeability against selective ID and static chosen massage attack in the standard model based on small integer solutions (SIS); and finally the proposed scheme is compared with the existing similar scheme in computing performance. The results show that the scheme presented in this paper enjoys the highest efficiency.

In this paper, a key management and security multi-hop routing scheme based on cross layer (SMRCL) was proposed for wireless sensor networks. The core of SMRCL has two parts as following. Firstly, a key management based on polynomial and time deployment for wireless sensor networks is proposed. In this scheme, the sensor nodes are divided into several deployment groups and deployed the network according to the time. Moreover polynomial is used instead of common key, which the redundant polynomial is deleted when a deployment group has been deployed to the network. Secondly, a multi-hop routing algorithm is proposed based on cross-layer, which can be used in large scale. In the algorithm, we can use the information of the MAC layer, consider the cross-layer design by the ratio of the packet sending/reception rate and queue length to improve the network load ability. Simulation results demonstrate that SMRCL can save energy and balance the network load and improve the network lifetime. Comparison of the probability of the sensor connectivity, performance of resistance to the node capture and the sensor node overheads, show that the scheme can guarantee the high probability of node secure connectivity, improves the performance of resistance to the node capture, reduces the node storage overhead effectively.

The nodes of Wireless Sensor Networks (WSNs) are deployed in hostile environments faces the security problem of eavesdropping and capturing by an adversary. To achieve the security of this resource constraint device is a challenging task. This paper proposed a secured key management scheme for hierarchical WSNs that distributed the keys within a cluster efficiently and update the pre-deployed keys to mitigate the node compromised attack. We use one way hash function and random variable that broadcasted to update the pre-deployed keys.

본 논문은 개인 키 저장을 위해, 개인 키를 (k, n) 비밀 분산 기법을 통하여 n개의 조각으로 나눈 후, 스테가 노그래피 기술을 사용하여 각 조각을 서로 다른 사진 파일에 저장하는 기법을 제안한다. 사용자는 전체 n개의 사진 파 일 중 k개가 어디에 있는지만 기억하고 있으면 개인 키를 복구할 수 있으며, 시스템에 저장된 수많은 사진 파일들 사 이에 적절하게 개인 키 조각들을 숨겨놓으면 공격자는 어디에 개인 키가 저장되어 있는지 찾아내기가 힘들다. 사용자 는 n개의 사진 파일 중 k개의 위치만 기억하면 개인 키를 복구 할 수 있기 때문에 사용자 편의성도 높은 편이고, 공격 자가 k-1개의 사진 파일을 찾아내더라도 개인 키를 복구하는 것은 불가능하기 때문에 안전성도 보장된다.

This paper introduces a new method for storing a private key. This method can be achieved by dividing the private key into "n" pieces by a (k, n) secret sharing method, and then storing each piece into photo files utilizing a steganography method. In this way, a user can restore a private key as long as he can remember the locations of "k" photos among the entire photo files. Attackers, meanwhile, will find it extremely difficult to extract the private key if a user has hidden the pieces of the private key into numerous photo files stored in the system. It also provides a high degree of user convenience, as the user can restore the private key from his memory of k positions among n photo files. Coupled with this, a certain level of security can be guaranteed because the attacker cannot restore a private key, even if he knows k-1 photo file locations.

PMIPv6 (Proxy Mobile IPv6)는 유망한 차세대 이동성 프로토콜이지만 신속성과 안전성 측면에서 아직 보완되어야 할 점이 많다. 본 논문에서는 안전한 PMIPv6를 위한 기존연구의 문제점을 지적하고, 안전한 이동성 제공을 위한 새로운 PMIPv6 기법을 제안한다. 제안기법에서는 AAA 서버와의 접속을 최소화하여 핸드오버로 인한 지연을 감소시켰으며, MN (Mobile Node)과 MAG (Mobile Access Gateway), MAG과 LMA (Local Mobility Anchor) 각 개체간의 비밀키를 설정, 관리함으로써 안전한 핸드오버를 수행한다.

PMIPv6 (Proxy Mobile IPv6) is a promising next-generation mobility protocol. But in terms of speed and security is yet to be supported is that a lot of points. In this paper, point out some problems of previous authentication mechanisms associated with PMIPv6 and propose a new secure authentication mechanism for secure handover. In that, minimize connections with the AAA server, so the delay caused by the handover was reduced, and secret keys between MN (Mobile Node) and MAG (Mobile Access Gateway), MAG and LMA (Local Mobility Anchor) are used to perform secure handover.

In this paper, we propose a key management scheme which can provide delivery of the key used to encrypt a digital content from the package server to digital rights management (DRM) clients in a secure manner. The proposed scheme can protect digital content from attacks since an encrypted digital content is sent by a package server and only DRM clients can decrypt the encrypted digital content. It protects the key not only from purchasers but also among the other principals who manage the distribution and license servers.