• The Journal of Society for e-Business Studies
• /
• v.8 no.3
• /
• pp.241-257
• /
• 2003

XML is a global standard for the Internet and e-business, and its use is growing in proportion to the spreading speed of e-Commerce. Thus, a policy for providing more safe security service for exchanging e-documents within e-Commerce is necessary. XKMS, one of XML security specification, defines the protocol for distributing and registering public keys for verifying electronic signatures and enciphering e-documents of e-Commerce applications with various and complicate functions. In this paper, we propose X-KISS service reference model and implement service component based on standard specification. Also describes the analysis and security of XML key information service for safe e-Commerce, paying attention to the features of XML based security service. This reference model supported include public key location by given identifier information, the binding of such keys to identifier information. The client service component controls the number of locate threads and validate threads to analyze the minimum requirements of real-time key retrievals. This service modeling offers the security construction guideline for future domestic e-business frameworks.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.28 no.7B
• /
• pp.605-619
• /
• 2003

The main memory DBMS(MMDBMS) efficiently supports various database applications that require high performance since it employs main memory rather than disk as a primary storage. In this paper, we discuss the index manager of the Tachyon, a next-generation MMDBMS. Recently, the gap between the CPU processing and main memory access times is becoming much wider due to rapid advance of CPU technology. By devising data structures and algorithms that utilize the behavior of the cache in CPU, we are able to enhance the overall performance of MMDBMSs considerably. In this paper, we address the practical implementation issues and our solutions for them obtained in developing the cache-conscious index manager of the Tachyon. The main issues touched are (1) consideration of the cache behavior, (2) compact representation of the index entry and the index node, (3) support of variable-length keys, (4) support of multiple-attribute keys, (5) support of duplicated keys, (6) definition of the system catalog for indexes, (7) definition of external APIs, (8) concurrency control, and (9) backup and recovery. We also show the effectiveness of our approach through extensive experiments.

• Proceedings of the Korean Information Science Society Conference
• /
• 2001.10c
• /
• pp.292-294
• /
• 2001

멀티캐스트 정보보호 기술은 순수만 멀티캐스트 기술을 실용화 하는데 있어서 없어서는 안될 기술이다. 멀티캐스트 정보보호 기술에서 이슈가 되는 것은 여러 가지가 있으나, 본 논문에서는 인증된 수신자만이 데이터를 볼 수 있도록 하기 위해 필요한 키의 분배 및 rekey 연산에 대해 제안된 몇 가지 기술을 알아보고. 무선환경에서도 확장성을 제공할 수 있는 방안으로 기존의 OFT(One-way Function Tree) 메커니즘을 토대로 하는 WOFT(Mobile OFT) 메커니즘을 제안하고 제안하는 MOFT 메커니즘의 효율성을 분석한다.

• Proceedings of the Korea Multimedia Society Conference
• /
• 2003.05b
• /
• pp.799-802
• /
• 2003

컴퓨터 보급 증가와 인터넷 발전으로 다양한 종류와 다량의 디지털 데이터들이 제작, 유포되고 있다. 디지털 컨텐츠는 기존 아날로그 컨텐츠와 비교할 때 생성, 가공, 유통, 분배 등의 측면에서 많은 장점을 갖는 반면, 원본과 동일한 복사본을 쉽게 생성할 수 있는 특징 때문에 디지털 창작물에 대한 저작권 보호가 중요시 본다. 본 논문에서는 디지털 컨텐츠 보호 기술로 각광 받고 있는 DRM(Digital Rights Management)기술에서 컨텐츠 유통 시 개인키가 노출될 경우 비인가자에 의한 컨텐츠 불법접근이 가능해지는 취약성에 대한 개선책으로 PDMS (Publlic-Key Distributed Management System ： 개인키 분산관리 시스템)를 확장 적용하는 방안에 대하여 논한다.

• The Transactions of the Korea Information Processing Society
• /
• v.6 no.12
• /
• pp.3597-3605
• /
• 1999

We introduce a new satellite Conditional Access System(CAS) that a subscriber could watch a pay-TV knowing only his or her identity and password, without using a smart card. For this new system, two password-based protocols are presented which not only share a session key and authenticate each other but also download an authorization key. This system has some merits: First, compared with current systems, it reduces the amount of computations by eliminating the AK-encryption module in SMS(Subscriber Management System) and simplifying the receiver's CW-decryption process. Second, since this system does not need an expensive Card Adaptive Device(CAD), it can reduce costs. finally it provides descrambler independence allowing it to be used through any TV set-top box that includes a descrambler, unlike the current system that a descrambler is linked with a smart card.

• Smart Media Journal
• /
• v.7 no.4
• /
• pp.52-60
• /
• 2018

Energy Management System(EMS) of Microgrid(MG) collects and analyzes data from devices in the microgrid to provide information to operators, users and other systems. In the middle of the process, it is required to securely provide information through both wired and wireless communication networks. In this paper, we design and implement a module that provides encryption and decryption, key management, key distribution, and message authentication functions, thus enabling the development of a system which is safe from the exposure and modulation of data potentially occurrable during data transmission between RTU(Remote Terminal Unit) and EMS. Our method can increase the efficiency of connection and key management for RTU by connecting a virtual device(VD) to RTU.

• Proceedings of the Korean Information Science Society Conference
• /
• 2006.10c
• /
• pp.526-529
• /
• 2006

대리서명은 원서명자의 서명 권한을 대리 서명자에게 위임하여 원서명자의 행위에 대해 서명할 수 있게 한 서명 방식이다. 이것은 일상생활에서 도장을 다른 사람에게 위임하는 것을 전자적으로 구현한 것이라 할 수 있다. 본 논문에서는 자기가 자신에게 서명 권한을 위임하는 방법을 통해 임시로 사용 할 수 있는 서명 키 쌍을 만들어내는 방법을 제안한다. 이 방법을 통해 원 서명 쌍을 보호할 수 있으며 동시에 여러 쌍의 키들을 사용할 수 있으므로 작업들과 키 쌍들을 구분하여 관리할 수 있다. 또한 임시 서명 키 쌍의 폐기는 원 서명 키 쌍의 폐기보다 쉽기 때문에 제안하는 재귀 대리 서명은 실제적이라 할 수 있다.

• Journal of the Institute of Electronics Engineers of Korea TC
• /
• v.43 no.7 s.349
• /
• pp.32-40
• /
• 2006

It is very important to establish a pairwise key securely in wireless sensor networks. Because sensor networks consist of devices with weak physical security, they are likely to be compromised by an attacker. However, some approaches using key pre-distribution and other approaches using one hop local keys are known to be very vulnerable to threats caused by compromised nodes, even a small number. This paper proposes a scheme where each node establishes three hop local keys and employs them for a later pairwise key establishment. When any two nodes agree a pairwise key, all nodes on the route between two nodes contribute to the agreement of the pairwise key. Here, the initial three hop local keys are employed for encrypting a secret key delivered from a node to other nodes. Therefore, the proposed scheme bothers attackers to compromise much more nodes than the scheme using one hop local keys only. The simulation results have proven that the proposed scheme provides better performance and higher security than the scheme using one hop local keys in terms of message exchange, the number of encryption and decryption, and pairwise key exposure rate.

• The KIPS Transactions:PartC
• /
• v.17C no.5
• /
• pp.415-426
• /
• 2010

CAS is an access control system by which only legal users can access contents. IPTV is a spotlighted system that uses CAS. H.264/SVC is a coding standard that provides a scalable coding method by which users who are in various network environments and have various devices can receive the contents. In this method, the contents are coded in a layered structure to make users choose the quality of the receiving contents. Therefore, contents provider should be able to control users to access only appropriate contents according to their subscriptions. The structure of CAS being employed in many applications is not suitable to control access for H.264/SVC. In this paper, we provide an efficient access control method and a key management method for H.264/SVC contents using CAS.

• Journal of the Korea Society of Computer and Information
• /
• v.28 no.3
• /
• pp.59-65
• /
• 2023

As research on blockchain applications in various fields is actively increasing, management of private keys that prove users of blockchain has become important. If you lose your private key, you lose all your data. In order to solve this problem, previously, blockchain wallets, private key recovery using partial information, and private key recovery through distributed storage have been proposed. In this paper, we propose a safe private key backup and recovery method using Shamir's Secrete Sharing (SSS) scheme and biometric information, and evaluate its safety. In this paper, we propose a safe private key backup and recovery method using Shamir's Secrete Sharing (SSS) scheme and biometric information, and evaluate its safety against robustness during message exchange, replay attack, man-in-the-middle attack and forgery and tampering attack.