• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.31 no.3
• /
• pp.341-351
• /
• 2021

Recently, user-driven privacy control technology, such as distributed ID management, has been gaining attention. However, the existing blockchain-based access control studies have not provided a sufficient level of privacy control method to users. This paper proposes a method that combines permissioned blockchain technology and a recent privacy control standard. To allow users to participate in privacy control, a token-based user access control service that conforms to the UMA2 standard was applied to the blockchain dApp. By combining the blockchain and UMA2, the proposed method provides a user-centered privacy control function that the existing blockchain could not provide. In addition, we solved the problem of privacy, security, and availability of entities, which are the disadvantages of UMA2.

• Journal of KIISE
• /
• v.42 no.12
• /
• pp.1611-1622
• /
• 2015

Although Android systems provide a permission-based access control mechanism and demand a user to decide whether to install an app based on its permission list, many users tend to ignore this phase. Thus, an improved method is necessary for users to intuitively make informed decisions when installing a new app. In this paper, with regard to the permission-based access control system, we present a novel approach based on a machine-learning technique in order to support a user decision-making on the fly. We apply the K-NN (K-Nearest Neighbors) classification algorithm with necessary weighted modifications for malicious app classification, and use 152 Android permissions as features. Our experiment shows a superior classification result (93.5% accuracy) compared to other previous work. We expect that our method can help users make informed decisions at the installation step.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.18 no.5
• /
• pp.149-160
• /
• 2008

As individual users have to provide more information than the minimum for using information communication service, the invasion of privacy of Individual users is increasing. That is why client/server based personal information security platform technologies are being developed such as P3P, EPAL and XACML. By the way enterprises and organizations using primarily role based access control can not use these technologies. because those technologies apply access control policies to individual subjects. In this paper, we suggest an expression language for privacy enhancing role-based access control policy. Suggested privacy enhancing role-based access control policy language model is a variation of XACML which uses matching method and condition, and separately contains elements of role, purpose, and obligation. We suggest policy language model for permission assignment in this paper, shows not only privacy policy scenario with policy document instance, but also request context and response context for helping understanding.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.15 no.5
• /
• pp.949-958
• /
• 2020

The functions of shock absorbers are to dampen body, suspend motions, dissipate impact energy, and control tire force variation. During the operation, hydraulic oil is passed between the chambers via a flow restrictions. Therefore the damping force characteristics of shock absorber is determined by the characteristics of orifices and flow restrictions. The uncertainty in design variable affects the performance of suspension system strongly. But, the researches about the influence of uncertainty in design variable such as a fluid restriction's property of shock absorber, on the suspension system performance was hardly ever proposed. In this paper, we used statistical method of Latin Hypercube sampling, and the effects of design variables uncertainty on the performance of suspension system was presented.

• Information Systems Review
• /
• v.9 no.3
• /
• pp.99-132
• /
• 2007

As customer management rises by important issue in electronic commerce, virtue study about CRM have proceeded much. However, because existent researches were positive researches of most statistical base, There are some limitation that does not show dynamic change with CRM flow by flowing of time, and can not forecast propriety and future result about CRM strategy. Therefore, in order to overcome existent limitation on these CRM study, this study designed dynamic model which draws factors that compose CRM strategy of on-line shopping mall, and do based on technique in system dynamics so that can analyze dynamic change between these factors. Concretely, atomized customer focuses in the on-line shopping mall and does based on Permission marketing theory, and applied CRM of different level to atomized customers and know change of customer satisfaction measurement and discomfort degree accordingly. According to the result of Simulation practice, situation that achieve CRM strategy of different level by atomize customer more increase the customer satisfaction than situation that is not so. Dynamic pattern that presented in this study is expected that can verify validity about CRM achievement strategy of different level at each CRM point of contact & how Internet enterprise including on-line shopping mall is establishing CRM strategy reasonably.