• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2021.05a
• /
• pp.117-119
• /
• 2021

In this paper, the strengths and weaknesses of each type of personal authentication system are examined and the development direction of the personal authentication system is presented. Currently, the personal authentication system commonly used is a text-based password system. However, most of the current text-based password systems are weak in usability and security. In order to solve this problems a personal authentication system that can replace the text-based password system is required. In this paper, we take the recently developed graphical password system as an example to find the conditions and possibilities to replace the text-based password system, and present the development direction of the personal authentication system.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.42 no.2
• /
• pp.349-357
• /
• 2017

Many Web sites adopt SMS(Short Message Service)-based user authentication when a user loses her password or approves an online payment. In SMS-based authentication, the authentication server sends a text in plaintext to a user's phone, and it allows an attacker who eavesdrops or intercepts the text to impersonate a valid user(victim). We propose a challenge-response scheme to prove to the authentication server that a user is in a certain place at the moment with her smartphone beside her. The proposed scheme generates a response using a challenge by the server, user's current location, and a secret on the user's smartphone all together. Consequently, the scheme is much more secure than SMS-based authentication that simply asks a user to send the same text arrived on her phone back to the server. In addition to entering the response, which substitutes the SMS text, the scheme also requests a user to input a passphrase to get the authentication process started. We believe, however, the additional typing should be tolerable to most users considering the enhanced security level of the scheme.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.12 no.5
• /
• pp.915-922
• /
• 2017

The rapid increase in users of mobile smart devices has greatly expanded their range of activities. Compare to conventional mobile devices, smart devices have higher security requirements because they manage and use various kind of confidential information of the owners. However, the cation schemes provided by conventional smart devices are vulnerable to recent attacks such as shoulder surfing, recording, and smudge attacks, which are the social engineering attacks among the types of security attacks targeting the smart devices. In this paper, we propose a novel authentication method that is robust against social engineering attacks but sufficiently considering user's convenience. The proposed method is robust by using combination of a graphical authentication method and a text-based authentication method. Furthermore, our method is easier to memorize the password compare to the conventional graphical authentication methods.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2002.11b
• /
• pp.1419-1422
• /
• 2002

SIP(Session Initiation Protocol)는 기존의 VoIP(Voice over IP)를 위한 시스템에서 뿐만 아니라 호설정의 처리와 제어가 필요한 여러 인터넷 응용분야에 적용이 가능한 확장성이 뛰어난 프로토콜이다. 또한 HTTP(Hyper Text Transfer Protocol)와 유사한 텍스트 기반의 응용계층의 프로토콜로서 호처리시 절차가 비교적 간결하다. 본 논문에서는 이러한 SIP의 장점을 이용하여 화상회의를 위한 시스템을 구현하였다. 이때. 인증 기능을 부여하여 화상회의시 세션 연결을 위한 호설정을 이루는 과정에서 상대방을 인증할 수 있도록 하였고 인증방법으로는 메시지 인증기능과 함께 리플레이 공격(replay attack)의 방지기능을 가진 SIP 다이제스트 인증(Digest Authentication) 방법을 사용하였다. 본 화상회의 시스템에 사용된 SIP 사양은 최근에 발표된 RFC 3261을 기준으로 하였다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.27 no.4
• /
• pp.843-853
• /
• 2017

In the case of electronic payment, the obligation to use the certificate-based authentication was abolished. As Fin-tech service providers gain autonomy, various authentication methods are provided. SMS, ARS, PIN, Text-passwords, Fingerprints are popular authentication methods in the mobile Fin-tech services. In this study evaluate the usability and security of authentication methods in a unified mobile environment. We evaluate the usability through SUS and interview. Also we evaluate the security level of authentication methods through NIST guideline. At the result of the usability evaluation, Fingerprint authentication method had been determined as the highest usability, also Fingerprint authentication method had been determined as the safest authentication method by obtaining Security Level 4.

• Journal of KIISE:Computing Practices and Letters
• /
• v.15 no.8
• /
• pp.582-585
• /
• 2009

VoIP technology for transmitting voice over IP network such as packet-based network has a lot of benefits by integrating services and reducing costs. The network is different from PSTN-based communications in some aspect such as transmitting not only voice but also text, image, multimedia data. In addition, portable terminals like a mobile phone, and ubiquitous communicator can easily access the internet for VoIP. Therefore, To prevent illegal users, offering certificate services is necessary, This study proposes a solution of user certification for a VoIP environment.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2003.05b
• /
• pp.1281-1284
• /
• 2003

인스턴트 메시징(Instant Messaging: IM) 서비스는 인터넷 또는 IP 네트워크상에서 온라인 상태에 있는 사용자들간에 간단한 메시지를 주고 반을 수 있는 서비스이다. Presence 서비스는 통신을 원하는 사용자들의 온라인 상태 및 최신의 위치 정보를 제공함으로써 IM 서비스와 같은 Presence 정보를 기반으로 하는 다른 응용 서비스와 연계하여 활용할 수 있다. 본 논문에서는 이러한 Presence 서비스와 IM 서비스를 통합한 시스템을 SIP(Session Initiation Protocol)를 기반으로 하여 구현하였다. SIP는 텍스트 기반의 호설정을 처리하는 프로토콜로서 혜더 부분의 확장을 통해 다른 응용 서비스에 쉽게 적용이 가능한 장점을 가지고 있다. 구현된 시스템에서 Presence 서비스의 Presence 정보는 XML로 인코드된 CPIM(Common Presence and Instant Messaging) PIDF(Presence Information Data Format) 포맷으로 하여 처리하였고 IM 서비스는 페이저 모델(Pager Model)로 구현하였다 또한 시스템 내에서 필요한 보든 인증 처리 부분을 RFC 2617에 정의되어 있는 HTTP 다이제스트 인증을 사용하여 보안기능을 높였다.

• Smart Media Journal
• /
• v.6 no.3
• /
• pp.29-40
• /
• 2017

Lately weight for smartphone mounted to function for NFC is increasing, rapidly. Because of this, NFC related technology is made by many companies. We developed Gallery-Auction for security enhancements and new services of NFC-based 2 factor electronic payment system. Enhanced security features development of user authentication module through fingerprint recognition to apply FIDO authentication technology and developed electronic contract voice service of Gallery-Auction using TTS(Text to Speech). Therefore we enhanced convenient and simple authentication method and security through NFC mobile electronic payment.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2022.11a
• /
• pp.473-474
• /
• 2022

텍스트를 기반으로 하는 패스워드는 다방면에서 가장 많이 사용되고 있는 인증 수단이다. 하지만 이러한 패스워드는 사용자의 기억에 의존하기 때문에 사람들은 일반적으로 기억하기 쉽게 '!iloveY0u'와 같은 암호를 사용한다. 이로 인해 사용자들의 패스워드 간에 규칙성이 생기게 되어 HashCat과 같은 크래킹 도구에 의해 해킹될 수 있다. 딥러닝을 통한 패스워드 예측의 경우, 일반적인 패스워드 크래킹 도구와 달리 패스워드 구조 및 속성에 대한 사전 지식 및 전문적 지식 없이도 패턴을 추출하고 학습할 수 있어 활발히 연구되고 있다. 본 논문에서는 딥러닝 모델 중에서도 순환 신경망을 사용하여 텍스트 기반의 패스워드를 예측하는 연구의 동향에 대해 알아본다.

• The Journal of Society for e-Business Studies
• /
• v.10 no.2
• /
• pp.89-108
• /
• 2005

The SOAP specifications are not provided a functions of information security, especially authentication function. In case of user authentication, delivery of the username and password elements can be exposed to sniffing/replay attack by malicious attacker. In this paper, we propose a new mechanism to protect authentication attacks for the SOAP messages. The proposed mechanism is compensated for weakness of S/KEY system. Our mechanism has no limitation for time and overhead and also provide a more effective and secure delivery.