• Title/Summary/Keyword: BREACH

Search Result 428, Processing Time 0.021 seconds

Key Management Server Design in Multiuser Environment for Critical File Protection

  • Sung-Hwa Han
    • Journal of information and communication convergence engineering
    • /
    • v.22 no.2
    • /
    • pp.121-126
    • /
    • 2024
  • In enterprise environments, file owners are often required to share critical files with other users, with encryption-based file delivery systems used to maintain confidentiality. However, important information might be leaked if the cryptokey used for encryption is exposed. To recover confidentiality, the file owner must then re-encrypt and redistribute the file along with its new encryption key, which requires considerable resources. To address this, we propose a key management server that minimizes the distribution of encryption keys when critical files are compromised, with unique encryption keys assigned for each registered user to access critical files. While providing the targeted functions, the server employs a level of system resources comparable to that of legacy digital rights management. Thus, when implemented in an enterprise environment, the proposed server minimizes cryptokey redistribution while maintaining accessibility to critical files in the event of an information breach.

Recent Developments in Law of International Electronic Information Transactions (국제전자정보거래(國際電子情報去來)에 관한 입법동향(立法動向))

  • Hur, Hai-Kwan
    • THE INTERNATIONAL COMMERCE & LAW REVIEW
    • /
    • v.23
    • /
    • pp.155-219
    • /
    • 2004
  • This paper focuses on two recent legislative developments in electronic commerce: the "Uniform Computer Information Transactions Act" ("UCITA") of USA and the "preliminary draft convention on the use of data message in [international trade] [the context of international contracts]" ("preliminary draft Convention") of UNCITRAL. UCITA provides rules contracts for computer information transactions. UCITA supplies modified contract formation rules adapted to permit and to facilitate electronic contracting. UCITA also adjusts commonly recognized warranties as appropriate for computer information transactions; for example, to recognize the international context in connection with protection against infringement and misappropriation, and First Amendment considerations involved with informational content. Furthermore, UCITA adapts traditional rules as to what is acceptable performance to the context of computer information transactions, including providing rules for the protection of the parties concerning the electronic regulation of performance to clarify that the appropriate general rule is one of material breach with respect to cancellation (rather than so-called perfect tender). UCITA also supplies guidance in the case of certain specialized types of contracts, e.g., access contracts and for termination of contracts. While for the most part carrying over the familiar rules of Article 2 concerning breach when appropriate in the context of the tangible medium on which the information is fixed, but also adapting common law rules and rules from Article 2 on waiver, cure, assurance and anticipatory breach to the context of computer information transactions, UCITA provides a remedy structure somewhat modeled on that of Article 2 but adapted in significant respects to the different context of a computer information transaction. For example, UCITA contains very important limitations on the generally recognized common law right of self-help as applicable in the electronic context. The UNCITRAL's preliminary draft Convention applies to the use of data messages in connection with an existing or contemplated contract between parties whose places of business are in different States. Nothing in the Convention affects the application of any rule of law that may require the parties to disclose their identities, places of business or other information, or relieves a party from the legal consequences of making inaccurate or false statements in that regard. Likewise, nothing in the Convention requires a contract or any other communication, declaration, demand, notice or request that the parties are required to make or choose to make in connection with an existing or contemplated contract to be made or evidenced in any particular form. Under the Convention, a communication, declaration, demand, notice or request that the parties are required to make or choose to make in connection with an existing or contemplated contract, including an offer and the acceptance of an offer, is conveyed by means of data messages. Also, the Convention provides for use of automated information systems for contract formation: a contract formed by the interaction of an automated information system and a person, or by the interaction of automated information systems, shall not be denied on the sole ground that no person reviewed each of the individual actions carried out by such systems or the resulting agreement. Further, the Convention provides that, unless otherwise agreed by the parties, a contract concluded by a person that accesses an automated information system of another party has no legal effect and is not enforceable if the person made an error in a data message and (a) the automated information system did not provide the person with an opportunity to prevent or correct the error; (b) the person notifies the other party of the error as soon as practicable when the person making the error learns of it and indicates that he or she made an error in the data message; (c) The person takes reasonable steps, including steps that conform to the other party's instructions, to return the goods or services received, if any, as a result of the error or, if instructed to do so, to destroy such goods or services.

  • PDF

A Study on Recognition of Foreign Judgements Obtained by Fraud (사기에 의하여 취득한 외국재판의 승인에 관한 연구)

  • Lee, Hun-Mook
    • Journal of Legislation Research
    • /
    • no.53
    • /
    • pp.553-591
    • /
    • 2017
  • This article discussed whether so-called 'foreign judgments obtained by fraud' is in breach of public policy provided in Article 217(1)(3) of Civil Procedure Act and, if so, what the specific requirements could be. The summary of the conclusion is as follows. The 'foreign judgments obtained by fraud' is against the municipal procedural public policy and then shall not be recognized. In this regard one more question comes up whether reviewing if 'foreign judgments obtained by fraud' is in breach of the municipal procedural public policy is allowed in consideration of the principle of prohibition of $r{\acute{e}}vision$ au fond. Since the principle is applied entirely in the course of the above reviewing, it is allowed only when it does not breach the principle. The two instances that the reviewing is allowed are where the defendant was not able to produce evidences of fraud during foreign procedures and where the defendant's claim of fraud without evidences was rejected by the foreign court and then evidences of fraud were found after the foreign procedure was completed. On the other hand, the specific requirements for 'foreign judgments obtained by fraud' to be against public policy are following four requirements based on principle of strict interpretation of public policy. (1) plaintiff's intention to fraud, (2) preventing the defendant from being involved in the procedure by fraud or cheating the foreign court using manipulated evidences, (3) the defendant could not present himself in the foreign court procedure due to the plaintiff's extraneous fraud or the foreign court decided wrongly due to intrinsic fraud, and (4) defendant's fundamental procedural rights were breached to the extent that recognizing the effect of foreign judgments was against justice defendant's fundamental procedural rights. These results differ from the Supreme Court 2004. 10. 28. ruling 2002da74213 in many aspects. Most of all, in my opinion there is no need to distinguish between intrinsic fraud and extraneous fraud and reviewing 'foreign judgments obtained by fraud' is not in conflict with the principle of prohibition of $r{\acute{e}}vision$ au fond but the both may coexist. In this regard I expect the variation of the Supreme Court's position and hope to contribute to academia and practitioners.

A study on the legal relationship between the change in the date of performance of trade contracts and the date of shipment of letters of credit (무역계약의 이행기일과 신용장 선적기일의 변경 간의 법률관계에 대한 연구)

  • Je-Hyun Lee
    • Korea Trade Review
    • /
    • v.48 no.3
    • /
    • pp.23-41
    • /
    • 2023
  • The seller and the buyer write down the agreed details in the trade contract as trade contract clauses. In the case where a letter of credit is agreed to be the payment condition, the buyer shall open a letter of credit to the seller with the shipping date specified in the trade contract through its bank. In this case, the legal relationship between the performance date of the trade contract and the shipment date of the letter of credit, the change of the performance date of the trade contract due to the change of the trade contract and the change of the shipment date specified in the letter of credit, the seller's letter of credit A problem arises in the legal interpretation of the approval period and the change request period. Therefore, this paper analyzed the precedents of the Seongnam Branch of the Suwon District Court and the Seoul High Court related to these legal issues. The performance date of a trade contract is the seller's delivery date and the buyer's payment date. In the letter of credit transaction, the date of performance of the trade contract is regarded as the date of shipment and the date of negotiation of documents specified in the letter of credit. The seller must decide whether to accept the letter of credit within 5 banking days after receiving the letter of credit from the buyer. After this period has elapsed, the seller cannot refuse the letter of credit. However, if the buyer is unable to decide whether to accept the letter of credit within 5 banking days due to reasons attributable to the buyer, the delivery date specified in the letter of credit will be extended. If the seller requests an amendment to the letter of credit, the buyer must accept it and open the letter of credit the seller desires to the seller. If the buyer refuses the seller's request to change the letter of credit, company A has the obligation to change and reopen the letter of credit as requested by company B. Expect by agreeing on the quotation As it is a fundamental breach of contract stipulated in Article 25 of the United Nations Convention on Contracts for the International Sale of Goods, company B can cancel the trade contract and claim damages from company A. Compensation for damages caused by Company A's breach of the trade contract shall be an amount equal to the loss suffered by Company B as a result of the breach, including loss of profits.

A Empirical Study on the Relationships between Leader Supervisory Style, Psychological Contract Breach and Employee Resistance in the convergence age (융·복합 시대의 리더 감독 유형, 심리적 계약위반과 종업원 저항에 관한 실증적 연구)

  • Kim, Yuen-Kyu;So, Byung-Sam;Lee, Sun-Kyu;Kang, Eun-Gu;Cho, You-Jin
    • Journal of Digital Convergence
    • /
    • v.13 no.10
    • /
    • pp.107-120
    • /
    • 2015
  • In this paper, we study the conflict management plan of the organization in the age of convergence. More specifically, we reveal the impact of the conflict according to behavior of the leader. To this purpose, The behavior of the leader were classified as Supportive Leader and Controlled Leader, and forms of Resistance wert classified as Functional Resistance and Dysfunctional Resistance that results of the conflict. Also, Psychological Contract Violation and Breach was set up as a mediate variable. The results were as follows. First, When employee resistance comes up in the organization, Support behavior of Leaders leads to desirable changes in the organization through the functional and constructive resistance. In contrast, Controlled behavior of Leaders leads the destructive and dysfunctional resistance of employee. Second, Since the perception that the follower is receiving assistance to leaders, it reduces the perception of psychological contract violation, but Controlled leader is largely perceived as the Psychological Contract Violation to the followers. Third, Supportive Leader is not influence the affect of employee, and They resolve the Conflict in objective and positive way. Therefore, the results of this study have many theoretical and practical implications.

Development of a Hydrograph Triggered by Earth-Dam-Break for Compiling a Flood Hazard Map (홍수위험지도 작성을 위한 댐 붕괴 지점에서의 유량곡선 산정)

  • Lee, Khil-Ha;Kim, Sung-Wook;Yu, Soonyoung;Kim, Sang-Hyun;Cho, Jinwoo;Kim, Jin-Man
    • The Journal of Engineering Geology
    • /
    • v.23 no.4
    • /
    • pp.381-387
    • /
    • 2013
  • In compiling flood hazard maps for the case of dam-failure, a scenario-based numerical modeling approach is commonly used, involving the modeling of important parameters that capture peak discharge, such as breach formation and progress. In this study, an earth-dam-break model is constructed assuming an identical mechanism and hydraulic process for all dam-break processes. A focus of the analysis is estimation of the hydrograph at the outlet as a function of time. The constructed hydrograph then serves as an upper boundary condition in running the flood routing model downstream, although flood routing is not considered here. Validation was performed using the record of the Tangjishan dam-break in China. The results were satisfactory, with a coefficient of determination of 0.974, Nash-Sutcliffe Coefficient of Efficiency (NSC) of 0.94, and Root Mean Square Error (RMSE) of $610m^3/sec$. The proposed model will contribute to assessments of potential flood hazards caused by dam-break.

Organizational Liability for Adverse Reactions to the Contrast Media (조영제 부작용에 대한 조직책임)

  • Lim, Chang-Seon
    • Journal of radiological science and technology
    • /
    • v.30 no.2
    • /
    • pp.89-93
    • /
    • 2007
  • Contrast medium is a very useful tool for X-ray examinations. But contrast medium has some unavoidable adverse reactions. For those patients who have never received contrast medium before, it is impossible to predict whether they will suffer from certain kinds of adverse reactions. Thus, radiologists should use strategies to minimize adverse events and be prepared to promptly recognize and manage any reactions to the contrast media. If a radiologist commits medical malpractice, he will face civil responsibility. Medical malpractice means a tort or breach of contract that occurs in a medical setting. Medical malpractices happen, despite the efforts of hospital staff. Many courts have applied the traditional doctrine of respondeat superior in actions against organizations for injuries caused by their employees. It is a legal doctrine, which states that an employer is responsible for employee actions performed within the course of the employment. A hospital is an organization for health purposes. An organization may be convicted of an offense committed by an employee of the organization acting in its behalf and within the scope of his office or employment. Organizational liability involves a wide variety of legal issues, including tort liability, wrongful employment practices, personal injury, breach of fiduciary duty, and so on. Many executive directors of organizations are aware of their personal and organizational risks of exposure to legal liabilities. The employer must have the right to control the physical conduct of the employee and must consent to receive the employee's services, while expecting some benefits from the services offered. Therefore, legal liability can be imposed for improper selection, assignment, training, and supervision of employees. In conclusion, the hospital itself has organizational liability for adverse reactions to the contrast medium.

  • PDF

The Functional Classification of Physician's Duty of Information and Liability for Violation of the Duty (의사 설명의무의 법적 성질과 그 위반의 효과)

  • Suk, HeeTae
    • The Korean Society of Law and Medicine
    • /
    • v.18 no.2
    • /
    • pp.3-46
    • /
    • 2017
  • Physician's Duty of Information is classified into three categories by legal function: 'Duty of Information to Report' to fulfill the patient's right to know; 'Duty of Information to Guide' patient's convalescing and staying healthy; 'Duty of Information to Contribute' to patient's self-determination. We classify the physician's duty of information because the legal effect from the breach of duty varies accordingly. The legal effect is focused on damage compensation responsibility for breach of duty. When a physician violates 'Duty of Information to Report', he subjects himself to liability of compensation for infringing on the patient's 'Right to Know'. When a physician violates 'Duty of Information to Guide', she subjects herself to liability for general medical malpractice. Finally, when a physician violates 'Duty of Information to Contribute', the physician is basically liable for violation of the patient's 'Right to Self- Determination' which refers to infringement on freedom of choice. However, in the case of situation that patient's refusal to the medical treatment would be presumed, the physician bears all liability for the patient's damage which includes both of property and mental damage.

  • PDF

Shipowner's Lost Profit and Its Claim resulted from Delay in Redelivery under Time Charter (정기용선계약에서 반선지연에 의한 선주의 상실수익과 손해배상청구)

  • Han, Nak-Hyun;Jung, Jun-Sik
    • Journal of Korea Port Economic Association
    • /
    • v.23 no.3
    • /
    • pp.29-51
    • /
    • 2007
  • The purpose of this study aims to explore shipowner's lost profit and its claim resulted from delay in redelivery under time charter with the Achilleas case. In this case, the charterers submitted that there was an established prima facie measure of damages in cases of late delivery, namely the difference between the market rate and the charter-party rate for the period from the time when the vessel should have been delivered until the time of her actual redelivery. An award for lost profit in respect of a subsequent charter could only be made under the second limb because the charterers had not been told, at or before the making of the addendum, that the owners were going to enter into a subsequent fixture and that it was critical that redelivery take place on time. However, the owners said their losses that was a not unlikely consequence of the charterers' breach. There was no special rule that the first limb could only lead to damages calculated by taking the difference between the market and the charter-party rate for the overrun. To award damages in the Achilleas case on the basis of the difference between the market and the charter rate for the overrun would compensate the owners for only a fraction of the true loss caused by the breach.

  • PDF

Two-Dimensional Flood Inundation Analysis Resulting from Irrigation Reservoir Failure - Focused on the Real Case with the Minimal Data Set - (농업용 저수지 붕괴에 따른 2차원 홍수범람해석 -계측자료가 부족한 실제사례를 중심으로-)

  • Lee, Jae Young;Kim, Byunghyun;Park, Jun Hyung;Han, Kun Yeun
    • KSCE Journal of Civil and Environmental Engineering Research
    • /
    • v.36 no.2
    • /
    • pp.231-243
    • /
    • 2016
  • This study presents the applicability of two-dimensional (2D) flood inundation model by applying to real irrigation reservoir failure with limited available data. The study area is Sandae Reservoir placed in Gyeongju and downstream area of it and the reservoir was failured by piping in 2013. The breach hydrograph was estimated from one-dimensional (1D) hydrodynamic model and the discharge was employed for upstream boundary of 2D flood inundation model. Topography of study area was generated by integrating digital contour map and satellite data, and Cartesian grids with 3m resolution to consider geometry of building, road and public stadium were used for 2D flood inundation analysis. The model validation was carried out by comparing predictions with field survey data including reservoir breach outflow, flood extent, flood height and arrival time, and identifying rational ranges with allowed error. In addition, the applicability of 2D model is examined using different simulation conditions involving grid size, building and roughness coefficient. This study is expected to contributed to analysis of irrigation reservoirs were at risk of a failure and setting up Emergency Action Plan (EAP) against irrigation reservoir failure.