Browse > Article
http://dx.doi.org/10.5392/JKCA.2015.15.10.607

Management Method for Private Key File of PKI using Container ID of USB memory  

Kim, Seon-Joo (한국정보통신기술협회)
Joe, In-June (배재대학교 사이버보안학과)
Publication Information
The Journal of the Korea Contents Association / v.15, no.10, 2015 , pp. 607-615 More about this Journal
Abstract
Mosts user of internet and smart phone has certificate, and uses it when money transfer, stock trading, on-line shopping, etc. Mosts user stores certificate in a hard disk drive of PC, or the external storage medium. In particular, the certification agencies are encouraged for user to store certificate in external storage media such as USB memory rather than a hard disk drive. User think that the external storage medium is safe, but when it is connect to a PC, certificate may be copied easily, and can be exposed to hackers through malware or pharming site. Moreover, if a hacker knows the user's password, he can use user's certificate without restrictions. In this paper, we suggest secure management scheme of the private key file using a password of the encrypted private key file, and a USB Memory's hardware information. The private key file is protected safely even if the encrypted private key file is copied or exposed by a hacker. Also, if the password of the private key file is exposed, USB Memory's container ID, additional authentication factor keeps the private key file safe. Therefore, suggested scheme can improve the security of the external storage media for certificate.
Keywords
PKI; Certificate; Private Key File; USB Memory; Container ID;
Citations & Related Records
Times Cited By KSCI : 4  (Citation Analysis)
연도 인용수 순위
1 www.boannews.com/media/view.asp?idx=45468
2 www.boannews.com/media/view.asp?idx=44245
3 www.boannews.com/media/view.asp?idx=45221
4 "보안토큰(HSM) 활성화 방안", 2007.04. 소프트포럼
5 http://www.usimcert.com
6 위유경, 곽진, "USIM을 활용한 스마트워크 사용자 및 디바이스 인증 기술 연구", 멀티미디어학회논문지, 제16권, 제3호, pp.309-317, 2013.
7 김선주, 조인준, "OTP를 이용한 PKI 기반의 개인키 파일의 안전한 관리방안", 한국콘텐츠학회논문지, 제14권, 제12호, pp.565-573, 2014.   DOI
8 김선영, 김선주, 조인준, "이동 저장매체를 활용한 패스워드 기반 사용자 인증 강화 방안", 한국콘텐츠학회논문지, 제14권, 제11호, pp.533-540, 2014(11).   DOI
9 http://word.tta.or.kr
10 김미혜, 서세영, "모바일 PKI 기반한 인증구조", 한국콘텐츠학회논문지, 제4권 제1호, pp.67-75, 2004(3).
11 B. Kaliski, PKCS #5, Password Based Cryptography Standard V2.1, RSA Laboratories, 2000.
12 B. Kaliski, PKCS #8: Private-Key Information Syntax Standard V1.2, RSA Laboratories, 2008.
13 http://it.donga.com/
14 https://ko.wikipedia.org/
15 MSDN, https://msdn.microsoft.com/en-us/library/windows/hardware/ff540024(v=vs.85).aspx
16 B. Kaliski, PKCS #10: Certification Request Syntax Standard V1.7, RSA Laboratories, 2008.
17 박영진, 김선종, 이동훈, "인증서와 개인키 유출 방지를 위한 보안키 저장소 Secure Key Store", 정보보호학회논문지, 제24권, 제1호, pp.31-40, 2014(2).   DOI
18 "대국민 전자서명 이용실태 조사", 한국인터넷진흥원.