• The Journal of the Korea Contents Association
• /
• v.11 no.4
• /
• pp.33-41
• /
• 2011

Although conventional text-based passwords are used as the most common authentication method, they have significant drawbacks such as guess attacks, dictionary attacks, key loggers, and shoulder-surfing. To address the vulnerabilities of traditional text-based passwords, graphical password schemes have been developed as possible alternative solutions, but they have a potential drawback that they are more vulnerable to shoulder-surfing than conventional text-based passwords. In this paper, we present a new Hangul password input method to prevent shoulder-surfing attacks. Our approach uses Hangul as a password, and it requires the users to locate their password in the given wheeling password grid instead of entering the password. Our approach makes it difficult for attackers to observe a user's password since the system shows the users' passwords with decoy characters as the noise on the screen. Also, we provide security analysis for random attacks, dictionary attacks, and shoulder-surfing attacks, and it shows that our password system is robust against these attacks.

• Proceedings of the Korean Information Science Society Conference
• /
• 2006.10a
• /
• pp.542-546
• /
• 2006

그리드[1, 2]는 많은 응용분야에서 보다 효율적인 실험을 위한 컴퓨팅 자원들을 제공한다. 응용연구자들은 지리적으로 분산되어 있는 각 자원들과 서비스를 사용하기에 앞서 사용자 인증과 자원의 사용권한에 대한 인증과정을 거쳐야 한다. 아이디와 패스워드를 사용한 전통적 인증방식은 데이터의 공유와 통합을 전제로 하는 그리드환경에 적용하기에는 평범한 보안수준을 제공한다. 따라서 그리드 환경에 적합한 보안 수준을 제공하는 인증방식이 필요하다 또한 기존의 아이디와 패스워드 인증방식에 익숙한 사용자들을 위해 편리한 인터페이스가 요구된다. 이러한 요구사항을 해결하기 위해 본 논문에서는 인증서를 활용한 그리드 포탈 기반의 인증시스템 모델을 제안하고자 한다.

• Journal of the Korea Society of Computer and Information
• /
• v.12 no.3
• /
• pp.19-26
• /
• 2007

In recent rears. web portal system has received much attention as a user interface for the grid environment. Grid system uses symmetric key for authenticating user identity while the traditional portal system does a password-based authentication. Regarding this, many researches are progressing to integrate portal accounts with symmetric key. Specially. researches such as GAMA and PURSE are active and those focus on easy usability for users who familiar with password-based authentication. However the protection of data and resources is a critical issue in Grid environment, because those are shared through a wide-area network. In this paper, we suggest a new authentication mechanism which unify authentication mechanisms between portal system and grid service by using symmetric key. It will improve a security level in UI layer as much as in grid service.