• Review of KIISC
• /
• v.15 no.4
• /
• pp.44-49
• /
• 2005

전자금융거래를 포함하여 안전한 전자거래 기반 마련을 위해 1999년 7월 1일 전자서명법의 시행과 더불어 시작된 공인인증서비스는 비대칭형(공개키) 암호기술을 기반으로 하는 전자서명(Digital Signature)에 법적 효력을 부여하여, 온라인 전자결제 등 전자거래를 위한 안전한 기반을 마련하여 왔다. 그러나, 최근 정보화의 급속한 발전으로 일반인도 쉽게 해킹툴을 접할 수 있게 되어, 인터넷뱅킹 해킹사고 등 전자금융거래의 안전성이 위협을 받고 있다. 본고에서는 전자금융거래에서 중요한 역할을 담당하는 공인인증서비스의 취약점을 분석하고 공인인증서비스 안전성 강화 방안에 대하여 기술한다.

• Journal of the Korea Convergence Society
• /
• v.10 no.4
• /
• pp.25-32
• /
• 2019

From the viewpoint of fire-fighting activities, public building have structural and management problems in fire, so evacuation disturbance and risk of expanding combustion are high. As a result of analyzing various fire fragile factors of public building, The evaluation areas were derived from safety systems, fire-fighting facility, structure safety, general safety and the evaluation factors were presented. Also, the characteristics of domestic and foreign certification systems were analyzed by comparing and analyzing the status of fire safety performance certification system for 6 domestic and overseas apartment houses. In conclusion, the 5 convergence directions of certification system and 22 evaluation items by 4 evaluation fields were derived, and based on this, we have established 3 convergence introduction plans of fire safety performance certification system of public building.

• Proceedings of the Safety Management and Science Conference
• /
• 1999.11a
• /
• pp.469-479
• /
• 1999

Internet상의 전자문서, 전자거래 등과 관련된 전자업무에서는 다음과 같은 중요 인증 문제를 필요로 하게 한다. 첫째, 당사자(사용자)의 신분확인 기능(신원확인). 둘째, 전자업무 내용의 정보보호 및 무결성 기능(비밀성 보장). 셋째, 전자행위에 대한 부인봉쇄(분쟁해결) 등이 그것이다. 따라서 이러한 전자업무의 중요 인증 문제와 관련하여 신뢰할 만한 제3자, 즉 인증기관(CA : Certificate Authority)의 확인 및 증명해주는 제도가 필요하다. 위에서 언급한 제 가지 인증 문제 중 전자업무에서의 가장 기초적인 인증 문제인 당사자(사용자)의 신분확인 기능(신원확인)에 대한 문제를 연구하고자 한다.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2015.07a
• /
• pp.283-284
• /
• 2015

본 논문에서는 기존 인증체계의 문제점을 살펴보고 이를 개선하기 위한 방안을 제안한다. 현재 국내에서 금융관련 서비스에서 공인인증서를 사용하는 서비스가 대부분이나 실용성 및 보안 문제로 인해 최근 정부에서는 공인인증서 사용 의무제도를 폐지하기에 이르렀지만 현재 공인인증서를 대체할만한 안전한 수단을 확보하지 못했고 기존의 OTP나 보안카드로 공인인증서의 공백을 메우기에는 역부족이다. 따라서 공인인증서를 대체할 수 있는 인증방안에 대해 제안하고 이를 통해 보다 안전한 인터넷 전자상거래를 유도하고자 한다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.10c
• /
• pp.547-549
• /
• 2002

Seo와 Sweeny는 통신 당사자간의 직접적인 세션키(session key) 교환을 위해 SAKA(Simple Authenticated Key Agreement Algorithm)를 제안했다. SAKA는 패스워드(password)를 사용하여 사용자인증 기능을 제공하는 변형된 Diffie-Hellman 키 교환 프로토콜로써, 키 생성 및 사용자 인증 시 요구되는 계산량과 메시지 전송량을 고려할 때 효율적인 프로토콜이다. 그러나, 최근에 Lin은 SAKA의 안전성에 취약점이 있음을 지적하고 개선된 프로토콜을 제안하였다. 본 논문에서는 개선된 프로토콜이 여전히 재전송 공격(replay attack)에 안전하지 않기 때문에 사용자 인증을 제공 할 수 없음을 보인다.

• Proceedings of the Korean Society of Disaster Information Conference
• /
• 2023.11a
• /
• pp.180-181
• /
• 2023

2022년 1월 「중대재해처벌법」시행 후 기업에서 경영책임자로써의 안전보건확보 의무에 대한 책임이 강화되어 건설산업에서는 안전보건관리체계를 구축하고 이행 확인 활동을 통하여 중대산업재해예방에 노력하고 있다. 동법 시행령 제4조 제9호에서 요구하는 안전보건 역량을 평가하여 업체를 선정할 수 있는 기준과 절차 즉'적격수급업체 선정체계'가 중대산업재해 예방에 핵심과제라 할 수 있으며, 이를 위해서는 안전보건수준을 평가할 수 있는 시스템이 필요하다. 이에 건설업에서 민간기업 스스로 적격수급업체 선정을 위한 안전보건수준평가를 운영하고 있으나 전문성과 신뢰성이 부족하다. 또한 민간 건설업체마다 안전보건수준 평가방법이 명확하지 않고 표준화 되어 있지 않아 하수급업체에서는 입찰마다 평가 수검을 받고 있어 효율성이 낮게 나타나고 있다. 본 연구는 선행연구 고찰과 공공기관에서 운영되고 있는 건설업 원도급사에 관한 안전 평가제도 실태조사를 통하여 하수급업체 안전보건수준평가 인증제도의 필요성을 확인하였다. 이에 건설업의 적격수급업체 선정체계 운영이 필요한 표준화된 안전보건수준 인증제도 도입 방안을 제시하기 위함이다.

• Journal of the Institute of Electronics Engineers of Korea TC
• /
• v.48 no.2
• /
• pp.105-115
• /
• 2011

User authentication service is an absolutely necessary condition while securely implementing an IT service system. It allows for valid users to securely log-in the system and even to access valid resources from database. For efficiently and securely authenticating users, smart-card has been used as a popular tool because of its convenience and popularity. Furthermore the smart-card can maintain its own power for computation and storage, which makes it easier to be used in all types of authenticating environment that usually needs temporary storage and additional computation for authenticating users and server. First, in 1981, Lamport has designed an authentication service protocol based on user's smart-card. However it has been criticized in aspects of efficiency and security because it uses hash chains and the revealment of server's secret values are not considered. Over the years, many smart-card based authentication service protocol have been designed. Very recently, Xu, Zhu, Feng have suggested a provable and secure smart-card based authentication protocol. In this paper, first, we define all types of attacks in the smart-card based authentication service. According to the defined attacks, however, the protocol by Xu, Zhu, Feng is weak against an attack that an attacker with secret values of server is able to impersonate a valid user without knowing password and secret values of user. An efficient and secure countermeasure is suggested, then the security is analyzed.

• 한국노년학
• /
• v.38 no.1
• /
• pp.15-26
• /
• 2018

This study was aimed to investigate the influencing level of nursing staff's recognition for the health care accreditation on patient safety managing activities by identifying the relationship between them and other factors affecting on patient safety managing activities. Subjects of this study were 182 nursing staffs working in six geriatric hospitals accredited for health care in Seoul metropolitan area. Data was collected during April, 2016 by structured questionnaires. And SPSS/WIN 15.0 program with t-test, ANOVA, Pearson's correlation, and stepwise multiple regression analysis were employed for analyzing them. 96.2% of the subjects have recognized the accreditation and 31.8% of them have acknowledge it in detail. The average level of recognition for the health care accreditation and patient safety managing activity were 3.60 and 4.39 point (max.5.0) respectively. Correlation between them was positive(r=.339, p<.001). Significant factors influencing patient safety managing activity were internal service quality promotion (t=5.292, p<.001) and academic background (t=2.836, p=.005). Education program or information on health care accreditation system, and action plans for promoting internal service quality for the nursing staffs including job standardization of the jobs are recommended for the better patient safety managing activities.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.21 no.5
• /
• pp.161-168
• /
• 2011

In 2009, Jeon et al proposed the lightweight strong authentication and strong privacy protocol, where the tag requrires only simple bitwise operations and random number generator. JK-RFID authentication protocol provides strong security: eavesdropping, replay, spoofing, Location tracking, DoS attack and forward security. Nevertheless, this paper points out the vulnerability of the forward security and improve the process of key updating. As a result, proposes an enhanced JK-RFID authentication protocol providing forward security and verify its satisfaction. In addition, a security and an efficiency of the proposed scheme analyze. Since partial adjustments of the key updating operation in JK-RFID authentication protocol, our protocol improve the forward security.

• Land and Housing Review
• /
• v.14 no.3
• /
• pp.107-123
• /
• 2023

In order to create a safe and comfortable educational environment and improve the quality of education, the 'Act on the Safety and Maintenance of Educational Facilities' was enacted in 2021. Accordingly, 'Educational Facility Safety Certification Operation Regulations' was established. Safety certification targets are classified into 'kindergarten', 'elementary/middle/high school and special schools', and 'university and other educational facilities'. Other educational facilities include libraries and student training facilities. However, student training facilities and libraries are different from schools as facilities for special activities such as training and reading. Therefore, the unique characteristics of the facility must be reflected in the 'Educational Facility Safety Certification Operation Regulations'. This study analyzed how the 'Educational Facility Safety Certification Operation Regulation' reflects the special characteristics of student training facilities and libraries that are 'other educational facilities'. The previous certification system and guidelines were compared and analyzed, and the on-site survey method was used. Finally, it was confirmed that each of the library and the student training facility needed 9 detailed criteria reviews.