The Journal of the Institute of Internet, Broadcasting and Communication (한국인터넷방송통신학회논문지)

The Institute of Internet, Broadcasting and Communication (한국인터넷방송통신학회)
권호 표지
DOI QR코드

DOI QR Code

Private Key Management Scheme Using Secret Sharing and Steganography

비밀 분산 및 스테가노그래피를 이용한 개인 키 보관 기법

  • Lee, Jaeheung (Department of Computer & Information Security, Daejeon University)
  • 이재흥 (대전대학교 정보보안학과)
  • Received : 2017.07.25
  • Accepted : 2017.08.11
  • Published : 2017.08.31
Download PDF
⟨ Previous Next ⟩

Abstract

This paper introduces a new method for storing a private key. This method can be achieved by dividing the private key into "n" pieces by a (k, n) secret sharing method, and then storing each piece into photo files utilizing a steganography method. In this way, a user can restore a private key as long as he can remember the locations of "k" photos among the entire photo files. Attackers, meanwhile, will find it extremely difficult to extract the private key if a user has hidden the pieces of the private key into numerous photo files stored in the system. It also provides a high degree of user convenience, as the user can restore the private key from his memory of k positions among n photo files. Coupled with this, a certain level of security can be guaranteed because the attacker cannot restore a private key, even if he knows k-1 photo file locations.

본 논문은 개인 키 저장을 위해, 개인 키를 (k, n) 비밀 분산 기법을 통하여 n개의 조각으로 나눈 후, 스테가노그래피 기술을 사용하여 각 조각을 서로 다른 사진 파일에 저장하는 기법을 제안한다. 사용자는 전체 n개의 사진 파일 중 k개가 어디에 있는지만 기억하고 있으면 개인 키를 복구할 수 있으며, 시스템에 저장된 수많은 사진 파일들 사이에 적절하게 개인 키 조각들을 숨겨놓으면 공격자는 어디에 개인 키가 저장되어 있는지 찾아내기가 힘들다. 사용자는 n개의 사진 파일 중 k개의 위치만 기억하면 개인 키를 복구 할 수 있기 때문에 사용자 편의성도 높은 편이고, 공격자가 k-1개의 사진 파일을 찾아내더라도 개인 키를 복구하는 것은 불가능하기 때문에 안전성도 보장된다.

Keywords

References

  1. D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R. Housley, and W. Polk, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, RFC 5280, May (2008). DOI: https://doi.org/10.17487/RFC5280
  2. S. Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System, http://bitcoin.org/bitcoin.pdf, (2009).
  3. T. Moore and C. Nicolas, Beware the middleman: Empirical analysis of Bitcoin-exchange risk, International Conference on Financial Cryptography and Data Security, Springer Berlin Heidelberg, (2013). DOI: https://doi.org/10.1007/978-3-642-39884-1_3
  4. B. Kaliski, PKCS #5: Password-Based Cryptography Specification Version 2.0, RFC 2898, September (2000). DOI: https://doi.org/10.17487/RFC2898
  5. B. Kaliski, PKCS #8: Private-Key Information Syntax Specification Version 1.2, RFC 5208, May (2008). DOI: https://doi.org/10.17487/RFC5208
  6. Mike Caldwell and Aaron Voisine, Passphrase-protected private key, https://github.com/bitcoin/bips/blob/master/bip-0038.mediawiki.
  7. Andreas M. Antonopoulos, Mastering Bitcoin: Unlocking Digital Cryptocurrencies, O'Reilly Media, Inc., (2014).
  8. Adi Shamir, How to share a secret, Communications of the ACM, Volume 22, Issue 11, Pages 612-613, Nov. (1979). DOI: https://doi.org/10.1145/359168.359176
  9. Hie-Do Kim, A Study on the Secure Double Pipe Hash Function, The Journal of The Institute of Internet, Broadcasting and Communication, Vol. 10, No. 6, pp. 201-208, Dec 2010. DOI: https://doi.org/10.7236/JIIBC.2010.12.201.
  10. Hyung-Kyu Yang, A Fast and Secure Method to Preserve Anonymity in Electronic Voting, The Journal of The Institute of Internet, Broadcasting and Communication, Vol. 14, No. 1, pp. 245-251, Feb 2014. DOI: https://doi.org/10.7236/JIIBC.2014.02.245.
  11. Jessica Fridrich, Miroslav Goljan, and Rui Du, Detecting LSB steganography in color, and gray-scale images, IEEE multimedia, Volume 8, Issue 4, Pages 22-28, (2001). DOI: https://doi.org/10.1109/93.959097
  12. Jessica Fridrich, Tomas Pevny, and Jan Kodovsky, Statistically Undetectable JPEG Steganography: Dead Ends, Challenges, and Opportunities, In Proceedings of the 9th workshop on Multimedia & security (MM&Sec '07), ACM, New York, NY, USA, 3-14, (2007). DOI: https://doi.org/10.1145/1288869.1288872
  13. D. Upham, Jsteg, http://www.securityfocus.com/tools/1434, (1997).
  14. Ralph Norman Haber, How we remember what we see, Scientific American, Volume 222, Issue 5, Pages 103-112, May (1970).
  15. L. Standing, J. Conezio, and R.N. Haber, Perception and memory for pictures: Single-trial learning of 2500 visual stimuli, Psychonomic Science, Volume 19, Issue 2, Pages 73-74, (1970). https://doi.org/10.3758/BF03337426
  16. R. Dhamija, A. Perrig, Deja Vu: User study using images for authentication, In Ninth Usenix Security Symposium, (2000).