• Journal of the Korea Convergence Society
• /
• v.11 no.5
• /
• pp.19-25
• /
• 2020

As the number of mobile device users increases, research on various user authentication methods has been actively conducted to protect sensitive personal information. Knowledge-based techniques have the disadvantage that security is deteriorated due to easy exposure of authentication means, and proprietary-based techniques have a problem of increasing construction cost and low user convenience to use the service. In order to solve this problem, a FIDO authentication system, which is a user authentication method using a smart device, has been proposed. Since the FIDO authentication system performs authentication based on the biometric information of the user, the risk of the authentication means being leaked is low, and since the authentication information is stored in the user's smart device, the user information due to server hacking is solved. Through this, it is possible to select and utilize user authentication technology suitable for the security level of the service. In this paper, we introduce the FIDO authentication system, explain the main parts required for FIDO UAF client-server development, and show examples of implementation using UAF open source provided by ebay.

• Journal of Internet Computing and Services
• /
• v.22 no.1
• /
• pp.99-107
• /
• 2021

With the recent establishment of a ubiquitous-based medical and healthcare environment, the medical information system for obtaining situation information from various sensors is increasing. In the medical information system environment based on context-awareness, the patient situation can be determined as normal or emergency using situational information. In addition, medical staff can easily access patient information after simple user authentication using ID and Password through applications on smart devices. However, these services of authentication and patient information access are staff-oriented systems and do not fully consider the ubiquitous-based healthcare information system environment. In this paper, we present a authentication service model based context-awareness system for providing situational information-driven authentication services to users who access medical information, and implemented proposed system. The authentication service model based context-awareness system is a service that recognizes patient situations through sensors and the authentication and authorization of medical staff proceed differently according to patient situations. It was implemented using wearables, biometric data measurement modules, camera sensors, etc. to configure various situational information measurement environments. If the patient situation was emergency situation, the medical information server sent an emergency message to the smart device of the medical staff, and the medical staff that received the emergency message tried to authenticate using the application of the smart device to access the patient information. Once all authentication was completed, medical staff will be given access to high-level medical information and can even checked patient medical information that could not be seen under normal situation. The authentication service model based context-awareness system not only fully considered the ubiquitous medical information system environment, but also enhanced patient-centered systematic security and access transparency.

• 보일러설비
• /
• s.82
• /
• pp.65-66
• /
• 2000

`고`마크는 고효율(${\Phi}$) 의 고를 형상화해 기기의 성능 인정과 환경을 고려한 인증 마크이다. 수요관리방안의 하나로 전기이용효율향상과 전력수급안정을 위해 실시중인 고마크제도가 본격적인 고유가 시대에 에너지 절약의 첨병으로 떠오르고 있다.

• Electronics and Telecommunications Trends
• /
• v.22 no.6
• /
• pp.96-103
• /
• 2007

본 논문에서는 무전극 고주파 조명기기의 빛 발생원리와 불요발사를 중심으로 동 기기에 대한 국내외 전자파장해 방지기준을 소개한 후, 실제 측정결과를 통하여 무전극 고주파조명기기의 구동 주파수에 의한 하모닉 성분으로 인하여 VHF 대역에서 TV 및 FM 방송의 혼신 가능성을 제시하였다. 또한, 국내 무전극 고주파조명기기의 제도적 개선점으로 50W 초과 조명기기를 허가제도에서 인증제도로 전환하여 운영하는 방안과 현행 전자파장해 방지기준의 개선방안을 제안하고 있다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.23 no.4
• /
• pp.593-607
• /
• 2013

The In-Vehicle-Networking(IVN) of modern cars is constituted by an small electronic control device called ECU. In the past, there was no way to be able to access the IVN of a driving car. so IVN has been recognized as a closed environment so there is no need to exist authentication protocol between devices which are to configure the internal network and to communicate with other devices. However, constant improvements made it possible to access the IVN in many different ways as the communication technology evolves. This possibility created a need for device authentication in IVN. HB-Family are representative authentication schemes in RFID environment which has similar restrictions to IVN. In this paper, we propose an implementation method of HB-Family for device authentication between ECU considering ECU has low computing power and the message field of CAN protocol has restricted size of 8 bytes. In order to evaluate the efficiency and availability of the authentication schemes adopted our method, we have evaluated the performance based on DSP-28335 device. Further, it was possible to improve the efficiency rate of at lest 10%, up to 36%, and we then analyze this result in various aspects of the IVN.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2013.11a
• /
• pp.811-814
• /
• 2013

한 번의 인증으로 다양한 서비스들을 이용할 수 있는 SSO(Single Sign-On) 인증 시스템은 기존에 사용자의 인증정보인 아이디와 패스워드를 서비스별로 설정하고 관리해야하는 문제점을 해결하였다. 최근에는 스마트기기의 보급이 빠르게 진행됨에 따라 다양한 서비스들이 웹 기반 형태로 변화되고 있으며, SSO 인증 시스템의 활용 또한 증가하게 되었다. 하지만 SSO 인증 시스템의 경우 공격자로 인해 사용자의 인증정보가 탈취되었을 경우 재전송 공격을 통한 세션 취득이 가능하다는 문제점이 존재한다. 뿐만 아니라 스마트기기로의 SSO 인증 시스템 적용을 위해 기존 방식에 비해 연산의 경량화가 필요하게 되었다. 본 논문에서는 SSO 인증 시스템의 구조를 분석하고, 보안요구사항을 만족하는 인증정보 재전송 공격에 안전한 SSO 경량화 메커니즘을 제안한다.

• Convergence Security Journal
• /
• v.14 no.3_1
• /
• pp.11-19
• /
• 2014

As both medical and IT technologies advance, convergent medical technologies such as implantable medical devices are receiving a lot of attentions from the research and medical appliance market. On the other hand, such a new medical service is facing several new security threats including patient privacy breach since the service is based on the wireless communication. Especially, the new security threat could induce the patient's life threatening accident, so that more secure measures should be provided. In this paper, a variety of security threats associated with the implantable medical devices are pinpointed and a new security mechanism against such threats is proposed.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.27 no.2
• /
• pp.233-240
• /
• 2017

Fingerprint authentication identifies individuals based on user specific information. It is widely used as it is convenient, secure and has no risk of leakage, loss, or forgotten. However, the latent fingerprints remaining on the smart device's surface are vulnerable to smudge attacks. We analyze the usage patterns of individuals using smart device and propose methods to reconstruct damaged fingerprint images using fingerprint smudges. We examine the feasibility of smudge attacks with frequent usage situations by reconstructing fingerprint smudges collected from touch screens. Finally, we empirically verify the vulnerability of fingerprint authentication systems by showing high attack rates.

• Review of KIISC
• /
• v.28 no.1
• /
• pp.8-15
• /
• 2018

전통적인 인증 기법(예: 패스워드, PINs, 안드로이드 패턴 락)들은 사용빈도가 많은 모바일 기기의 특성으로 인해 사용자에게 불편함을 가중시킨다. 본 논문에서는 사용성을 고려한 Smart Lock 인증 기법에서 사용되는 요소 기술에 대한 연구 동향에 대해 분석하였다. 요소 기술 한 가지를 독립적으로 사용하는 방법보다는 다양한 요소 기술들을 동시에 활용한다면 보안성과 사용성을 모두 만족할 수 있는 인증 기법으로 사용될 것이다.

• Fire Protection Technology
• /
• s.4
• /
• pp.2-3
• /
• 1988