• The KIPS Transactions:PartC
• /
• v.10C no.4
• /
• pp.433-440
• /
• 2003

According as the real economic activities are carried out in the cyber world and the identity problem of a trade counterpart emerges, digital signature has been diffused. Due to the weakness for real-time validation using the validation method of digital signature, Certificate Revocation List, On-line Certificate Status Protocol was introduced. In this case, every transaction workload requested to verify digital signature is concentrated of a validation server node. Currently this method has been utilized on domestic financial transactions, but sooner or later the limitation will be revealed. In this paper, the validation method will be introduced which not only it can guarantee real-time validation but also the requesting node of certificate validation can maintain real-time certificate status information. This method makes the revocation management node update the certificate status information in real-time to the validation node while revoking certificate. The characteristic of this method is that the revocation management node should memorize the validation nodes which a certificate holder uses. If a certificate holder connects a validation node for the first time, the validation node should request its certificate status information to the above revocation management node and the revocation management node memorizes the validation node at the time. After that, the revocation management node inform the revocation information in real-time to all the validation node registered when a request of revocation happens. The benefits of this method are the fact that we can reduce the validation time because the certificate validation can be completed at the validation node and that we can avoid the concentration of requesting certificate status information to a revocation node.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.10c
• /
• pp.550-552
• /
• 2002

인증서기반의 인터넷뱅킹과 온라인증권거래에서, 금융거래 서비스 제공자는 많은 사용자의 인증서상태 검증이 요구된다. 금융거래 서비스는 사용자 인증서상태를 실시간의 검증이 보장되어야 한다. 인증서 상태 검증을 위해 기존의 CRL(Certificate Revocation List), Delta CRL, Freshest CRL과 실시간 인증서상태 검증을 위하여 OCSP(Online Certificate Status Protocol)의 표준이 제안된 바 있다. 실시간성과 검증속도는 상호 대비되기 때문에 응용프로그램의 특성을 고려하여 인증서상태 검증방법을 채택한다. 본 논문에서는 CRL의 갱신되기 이전의 폐지에 대하여 실시간으로 전송하는 시스템을 설계한다. 제안하는 인증서폐지 전송서버는 서명자의 검증자 리스트를 관리하여 금융거래 사용자가 CA에 폐지를 요청하면 사용자가 이용하는 금융거래 서비스 제공자들에게 실시간으로 폐지를 고지한다. 본 논문은 CRL 생성이후 갱신까지의 인증서 폐지정보를 검증자에게 전송하여 인증서의 실시간 상태정보를 유지하면서 OCSP보다는 검증속도를 향상시켜 금융거래 환경에서 향상된 효율성을 제공한다.

• Journal of Korea Multimedia Society
• /
• v.10 no.3
• /
• pp.373-380
• /
• 2007

In this paper we propose a new efficient authentication protocol that reduces overheads of computation for digital signature generation/verification on mobile devices in the Personal Area Network (PAN). In particular, we focus on eliminating the traditional public key operations on mobile devices without any assistance of a signature server. Moreover, the proposed protocol provides a simplified procedure for certificate status management to alleviate communication and computational costs on mobile devices in the PAN.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.10c
• /
• pp.604-606
• /
• 2002

PKI에 필수적인 요소인 인증서 검증에 있어 인증서 검증서버인 ETRI/VA는 인증서의 상태 검증의 적시성을 제공하고 인증경로 생성 및 검증에 대한 클라이언트의 부담을 줄이며. PKI 상호연동을 지원하고 도메인간의 인중서 정책을 중앙집중 관리한다. 본 논문은 ETRI/VA에서의 신속하고 효율적인 인증경로 생성 방법을 제안하였다. 인중기관 인증서로 이루어진 인증경로를 미리 생성하고 저장하여 사용함으로써 검증 요청시 빠르게 인증경로를 생성할 수 있고. 요청에 의해 생성된 인증경로를 저장하여 이후 동일한 검증대상 인증서의 검증시 기 저장된 인증경로를 재사용하게 함으로써 효율적으로 인증경로를 생성한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2002.11b
• /
• pp.913-916
• /
• 2002

정보보호 핵심 기반 구조인 PKI는 인증서 검증에 따르는 클라이언트의 부담 및 CRL의 적시성 부재와 관리 문제, 또한 각각의 환경에 따라 구축된 PKI 도메인 간의 상호 연동 등 해결해야 할 문제점들이 있다. ETRI/VA는 클라이언트의 인증서 검증을 대신하여 클라이언트의 부담을 줄이고, 인증서의 상태 검증의 적시성 및 OCSP를 사용함으로써 CRL의 문제점을 해결하며, PKI 상호연동을 지원 및 도메인간의 인증서 정책을 중앙집중 관리함으로써 기존 PKI의 문제점들을 제거할 수 있다 본 논문에서는 이러한 ETRI/VA의 각 모듈 및 프로토콜에 대하여 간략히 소개하고 ETRI/VA의 인증서 검증 방법을 설명하였다.

• Journal of the Korea Society of Computer and Information
• /
• v.13 no.3
• /
• pp.91-97
• /
• 2008

The conventional CA(Certificate Authority) has problems in dealing with certificates whose valid time is expired and in managing CRI (Certificate Revocation Information) produced by clients. Many researches are conducted to solve them, but they have limitations in providing real-time verifications of certificates' status for clients. In this paper, we propose a new CRI management model to address these limitations in distributed OCSP(On-line Certificate Status Protocol) environments. CRL(Certificate Revocation List) is divided into two parts: one part that is recent is replicated over several OCSP servers, the other part is replicated and distributed over servers. Our methods can help to break the bottleneck of CA, and effectively reduce the size of CRL transferred. Therefore, with our methods, clients can verify the state of certificates in real time.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.04a
• /
• pp.832-834
• /
• 2002

현재 인터넷 상에서 가장 많이 제공되고 사용되는 서비스는 전자 상거래에 관련된 서비스이다. 이러한 서비스에서 각 사용자 사이의 신원을 증명해 줄 인증서는 절대적인 위치를 차지하게 된다. 따라서 전자 상거래의 성격에 비추어 그 인증서는 항상 적시에 유지 관리 되어야하며, 그 상태가 매 순간마다 정확하게 변경되어야 할 것이다. 그리고 그 보안성도 높아야 한다. 이러한 요구사항을 만족하기 위해서 많은 연구가 진행되고 있다. 본 논문에서는 이를 현재 인터넷 환경에서 반드시 사용되어야 하는 DNS를 이용하여 해결하는 방법을 제안하고자 한다. 자원레코드의 한 속성을 사용하여 인증서를 배포하고, 그를 검증하여 안전하고 적시 적용이 가능하도록 한다.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.27 no.11C
• /
• pp.1090-1096
• /
• 2002

The HTTP does not support continuity for browser-server interaction between successive visits or a user due to a stateless feature. Cookies were invented to maintain continuity and state on the Web. Because cookies are transmitted in plain and contain text-character strings encoding relevant information about the user, the attacker can easily copy and modify them for his undue profit. In this paper, we design a secure cookies scheme based on X.509 public key certificate for solving these security weakness of typical web cookies. Our secure cookies scheme provides not only mutual authentication between client and server but also confidentiality and integrity of user information. Additionally, we implement our secure cookies scheme and compare it to the performance with SSL(Secure Socket Layer) protocol that is widely used for security of HTTP environment.

• The Sea:JOURNAL OF THE KOREAN SOCIETY OF OCEANOGRAPHY
• /
• v.26 no.3
• /
• pp.185-200
• /
• 2021

The Marine Environment QA/QC management system has been operated since 2010 to secure the reliability of data and improve the analysis capabilities of measurement and analysis institutions. From 2010 to 2020, the cumulative number of measurement and analysis institutions participated in the QA/QC management system was 266. And the number of certificates issued by the ministry of oceans and fisheries is 182. A total of 32 reference materials for proficiency testing and interlaboratory comparisons have been developed. They were first developed focusing on items (Nutrients, COD) commonly analyzed in marine environmental measuring network, marine pollution impact surveys, sea area utilization impact assessment, deepsea water surveys, and information network on fishing ground environments. In addition, it is time to expand the filed of the QA/QC management system, such as seawater temperature, salinity, PCBs and PAHs in sediments, which are mainly analyzed in most monitoring programs. On-site assessment has been conducted for 162 laboratories according to ISO/IEC 17025 to evaluate their conformity of the quality management system and deficiency. In terms of management and technology requirements, about 4.2% of organizations showed insufficient division of duties among employees 8.7% of them revealed the lack of employee training. By test item, about 6.3% of organizations showed the lack of standard substance management and the state of the cleaning glassware was pointed out in about 5.4% of them. The QA/QC management system should be continuously supplemented by identifying the causes of nonconformities and area for improvement.

• Journal of KIISE:Information Networking
• /
• v.36 no.4
• /
• pp.297-308
• /
• 2009

In 2008, ETRI developed a new mobile digital ID wallet, in which anyone can store personal information and PKI credential. When the wallet is used, privacy protection is one of the most important problems and personal information should be protected under various usage scenarios such as exchanging sensitive information in on/off-line environments, joining as a new member in the web site, etc. In this paper, we propose a triangular trust management scheme that can effectively manage trustness and also protect sensitive personal information. This scheme relies on three techniques: PKI, reputation and condition (situation context). We implemented prototype of our scheme, and tested it under various scenarios, which showed that the proposed scheme can effectively be used for diverse cases.