Browse > Article
http://dx.doi.org/10.6109/jkiice.2015.19.4.855

Design and Implementation of Physical Secure Card for Financial Security  

Seo, Hwa-Jeong (Department of Computer Engineering, Pusan National University)
Kim, Ho-Won (Department of Computer Engineering, Pusan National University)
Abstract
In this paper, we present a novel method to verify the financial site and prevent sensitive information disclosure with financial security card and smart phone. This method allows homepage access when user accesses to the valid site with right security card and smart phone. Furthermore, traditional OTP method cannot be secure against to Man in the middle attack, but out method presents the countermeasure of this. User can readily recognize the phishing and pharming sites and even avoid Man in the middle attack by malicious users.
Keywords
Physical Security Card; Financial Security; Design and Implementation;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Y. L. Park, J. W. Son, S. H. Shin and M. K. Yoon, "Methods for Multi-channel based Financial Input", Review of KIISC, vol.23 no.1, pp. 9-17, Feb 2013.
2 The bank of Korea, "2014 third quarter Reports on Domestic Internet Banking Services," 2014.
3 Research Center on Security Policy of Police University, "Future of Security 2014," 2014.
4 AhnLab. Social engineering method [Internet] Available: http://www.ahnlab.com/kr/site/securityinfo/secunews/secuNewsView.do?menu_dist=3&seq=9761
5 J. K. Park and J. H. Lee, "Miss-type-proof based Techniques to Prevent from Phising and Phaming," Review of KIISC, vol.23 no. 6, pp. 9-17, Dec. 2013.
6 ZDNET. New Financial Phishing Attack [Internet]. Available:http://www.zdnet.co.kr/news/news_view.asp?artice_id=20130702122904
7 Wikipedia. Personal identification number [Internet]. Available: http://en.wikipedia.org/wiki/Personal_identification_number
8 Wikipedia. ISO 9564 [Internet]. Available: http://en.wikipedia.org/wiki/ISO_9564#PIN_ entry_devices
9 Wikipedia. One-time password [Internet]. Available: http://en.wikipedia.org/wiki/One-time _password