• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.14 no.3
• /
• pp.3-12
• /
• 2004

Secure operating system is a special operating system that integrates some security functions(i.e. access control, user authentication, audit-trail and etc.) with normal operating system in order to protect system from various attacks. But it doesn't consider my security of network traffic. To guarantee the security of the whole system, network traffic must be protected by a certain way and IPsec is a representative technology for network security. However, it requires administrator's carefulness in managing security policies and the key management mechanism is very heavy as well as complicated. Moreover, it doesn't have a suitable framework for delivery of security information for access control mechanism. So we propose a simple trusted channel mechanism for secure communication between secure operating systems. It provides confidentiality md authentication for network traffic and ability to deliver security information. It is implemented at the kernellevel of IP layer and the simplicity of the mechanism can minimize the overhead of trusted channel processing.

• The Korean Journal of Archival Studies
• /
• no.38
• /
• pp.3-35
• /
• 2013

The physical access or control of records with material entities is relatively easy. However, in the case of electronic records, due to its heightened applicative aspect that allows anyone with the authority to have access over the data, it requires an appropriate standard and stability to ensure the authenticity and integrity of electronic records. This study performed functional evaluation by extracting the minimum critical items from the national functional requirements documents and standards to explore the access control function that play an important role for the standard records management system to maintain quality requirements of electronic records. Based on this checklist, it evaluates whether the standard records management system properly carries out the access control function and investigates the current condition of application to practical records management work. Records managers generally do not use access control function, which may be because they do not feel the necessity, since the application of records management system is not yet actively promoted. In order for the standard records management system to be developed to become a more active system, it requires system improvement as well as considerations for below factors: First, although the necessity of establishing access control conditions is already recognized, it requires a clear stipulation of the regulation. Second, measures must be taken to implement access control in the records management system through document security solution. Third, it requires self-reflection of records manager, who utilizes the records management system. Instead of placing all responsibility on the National Archives, which established the system, professionals must further develop the system through continuous evaluation and improvement. Finally, a general discussion is required to publicize the issue of functional improvement of records management system. Although there is a bulletin board already created for this purpose, its users are extremely limited and it only deals with current problems. A space in online as well as in offline is required to solve the fundamental problems and exchange opinions.

• The Korean Journal of Archival Studies
• /
• no.73
• /
• pp.47-79
• /
• 2022

NFT is literally a 'non-fungible token', a digital file that records specific virtual assets on a blockchain. Events such as ownership of the asset and transaction history are recorded on the blockchain through the token transaction, so counterfeiting and falsification are impossible. Therefore, NFT is used as a tool that can uniquely represent a specific virtual asset. The main purpose of this paper is to examine the characteristics of NFT from a records management point of view and to find ways to use them, and focuses on digital records that have the characteristics of assets as digital works. For this purpose, we first examine the basic concept of NFT and the principle of ownership and proof of value as an asset for digital works. In addition, it was confirmed how the advantages of NFT were applied through NFT use cases in various fields, and in particular, areas related to audio-visual records such as art, music, sports, and fashion were focused on. Furthermore, by comparing the characteristics of digital records with those of NFT, factors applicable to electronic records were identified. Finally, the types of digital records that are expected to be effective in the application of NFT were identified, and the possibility of their use and discussion points for introduction in records management are presented.