[KSCI] Korea Science Citation Index Service

http://dx.doi.org/10.13089/JKIISC.2003.13.2.13

Design of a Secure Web-mail System based on End-to-End

전철우 (충북대학교 컴퓨터과학과)
이종후 (충남대학교 컴퓨터과학과)
이상호 (충북대학교 컴퓨터과학과)

Publication Information

Journal of the Korea Institute of Information Security & Cryptology / v.13, no.2, 2003 , pp. 13-29 More about this Journal

Abstract

Web-mail system is worthy of note as a next generation e-mail system for its mobility and easiness. But many web-mail system does not have any kind of security mechanism. Even if web-mail system provides security services, its degree of strength is too low. Using these web-mail systems, the e-mail is tabbed, modified or forged by attacker easily. To solve these problems, we design and implement secure web-mail system based on the international e-mail security standard S/MIME in this thesis. This secure web-mail system is composed of server system and client system The server system performs basic mail functions - sending/receiving the mails, storing the mails, and management of user information, etc. And the client system performs cryptographic functions - encryption/decryption of the mails, digital signing and validation, etc. Because client system performs cryptographic functions this secure web-mail system gives its reliability and safety, and provides end-to-end security between mail users. Also, this secure web-mail system increase system efficiency by minimize server load.

Keywords

secure web-mail; S/MIME; end-to-end security;

Citations & Related Records

Reference

1	/ [] /
2	S/MIME Version 3 Message Specification / [ B.Ramsdell ] / IETF RFC2633
3	/ [] / daum
4	PPP Challenge Handshake Authentication Protocol (CHAP) / [ W.Simpson ] / IETF RFC2334
5	/ [] /
6	An Improved E-Mail Security Protocol / [ B.Schneier ] / 13th Annual Computer Security Applications Conference
7	A Chosen Ciphertext Attack against Several E-Mail Encryption Protocols / [ J.Katz;B.Schneier ] / 9th USENIX Security Symposium
8	MIME Security with OpenPGP / [ M.Elkins;D.Del Torto;R.Levien;T.Roessler ] / IETF RFC3156
9	/ [] /
10	S/MIME Version 3 Certificate Handling / [ B.Ramsdell ] / IETF RFC2632
11	/ [] /
12	Diffie-Hellman Key Agreement Method / [ E.Rescorla ] / IETF RFC2631
13	Enhanced Secruity Service for S/MIME / [ P.Hoffman ] / IETF RFC2634
14	Cryptographic Message Syntax / [ R.housley ] / IETF RFC2630
15	OpenPGP Message Fomat / [ J.Callas;L.Donnerhacke;H.Finney;P,Thayer ] / IETF RFC2440

KSCI

Design of a Secure Web-mail System based on End-to-End End-to-End 기반의 안전한 웹 메일 시스템 설계

Design of a Secure Web-mail System based on End-to-End