• Proceedings of the Korean Information Science Society Conference
• /
• 2003.10a
• /
• pp.652-654
• /
• 2003

패스워드를 이용한 사용자 인증은 인증을 요청 한 사용자와 인중 서버간의 인증 자료의 흐름이 매우 중요하다. 사용자 또는 인중 서버의 단 방향에서의 인증이 갖는 한계는 사용자에 대한 비밀 정보를 인중 서버에서 모두 관리함으로써 인증 서버의 해킹에 무방비하다는 점과 단 방향으로의 인증으로 사용자 또는 인증 서버를 가장한 해킹에 취약하다는 단점을 지니고 있다. 그러므로, 본 논문은 사용자-인중 서버를 One Time Password를 이용하여 발생시킨 난수를 기반으로 상호 인중을 할 수 있는 효율적인 방안을 제시하였다.

• International Journal of Contents
• /
• v.8 no.1
• /
• pp.16-22
• /
• 2012

In this paper we propose a method for verifying video in a video telephony system implemented in DM6446 DaVinci Processor. Each frame is categorized either error free frame or error frame depending on the predefined criteria. Human face is chosen as a basic means for authenticating the video frame. Skin color based algorithm is implemented for detecting the face in the video frame. The video frame is classified as error free frame if there is single face object with clear view of facial features (eyes, nose, mouth etc.) and the background of the image frame is not different then the predefined background, otherwise it will be classified as error frame. We also implemented the image histogram based NCC (Normalized Cross Correlation) comparison for video verification to speed up the system. The experimental result shows that the system is able to classify frames with 90.83% of accuracy.

• Journal of the Korea Computer Industry Society
• /
• v.2 no.6
• /
• pp.845-852
• /
• 2001

Electronic commerce and application service is to universal on the internet, and a large quantity information transmitted on the network, It's needs procedure to access only permit objects for the integrity of information. In order to provide regional services is authentication for control resource and client identification. In particular, public key system is to implement in distributed environment, it is able to insurance users convenience and integrity at the same time. In this paper designed mechanism of cross certification between realms in PKI based on X.509 associated with DNS (Domain Name System) that is presented.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.22 no.3
• /
• pp.473-483
• /
• 2012

To achieve an entire end-to-end security, the classical authentication setting such that all participants have a same password is not practical since a password is not a common secret but a personal secret depending on an individual. Thus, an efficient client to client different password-based authenticated key agreement protocol (for short, EC2C-PAKA) has been suggested in the cross-realm setting. Very recently, however, a security weakness of the EC2C-PAKA protocol has been analyzed by Feng and Xu. They have claimed that the EC2C-PAKA protocol is insecure against a password impersonation attack. They also have presented an improved version of the EC2C-PAKA protocol. In this paper, we demonstrate that their claim on the insecurity of EC2C-PAKA protocol against a password impersonation attack is not valid. We show that the EC2C-PAKA protocol is still secure against the password impersonation attack. In addition, ironically, we show that the improved protocol by Feng and Xu is insecure against an impersonation attack such that a server holding password of Alice in realm A can impersonate Bob in realm B. We also discuss a countermeasure to prevent the attack.

• Journal of the Institute of Electronics Engineers of Korea SP
• /
• v.40 no.6
• /
• pp.10-19
• /
• 2003

As the technical demand for biometrics is increasing, users expect that fingerprint recognition systems are operable with various fingerprint readers. However, current commercial off-the-shelf fingerprint recognition systems are no interoperable due to the lack of standardization in application program interfaces for fingerprint readers. A cross-matching fingerprint recognition system is a person authentication system based on fingerprints and utilizing different types of fingerprint readers. It should be able to overcome variations in fingerprint images acquired by different readers, such as the size, resolution, contrast of images. The purpose of this research is to develop across-matching fingerprint recognition system for fingerprint research of different sensing mechanism. The fingerprint readers tested in this study are optical, semiconductor and thermal sensor modules, and the prpoposed cross-matching system utilizes both a minutiae-based similarity and a ridge count-based similarity in matching fingerprint images acquired by different sensors.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.39B no.3
• /
• pp.162-168
• /
• 2014

Cross-Site Request Forgery is one of the attack techniques occurring in today's Web Applications. It allows an unauthorized attacker to send authorized requests to Web Server through end-users' browsers. These requests are approved by the Web Server as normal requests therefore unexpected results arise. The problem is that the Web Server verifies an end-user using his Cookie information. In this paper, we propose an enhanced CSRF defense scheme which uses Page Identifier and user password's hash value in addition to the Cookie value which is used to verify the normal requests. Our solution is simple to implement and solves the problem of the token disclosure when only a random token is used for normal request verification.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.13 no.7
• /
• pp.3386-3411
• /
• 2019

Secured and reliable routing is a crucial factor for improving the performance of Wireless Mesh Networks (WMN) since these networks are susceptible to many types of attacks. The existing assumption about the internal nodes in wireless mesh networks is that they cooperate well during the forwarding of packets all the time. However, it is not always true due to the presence of malicious and mistrustful nodes. Hence, it is essential to establish a secure, reliable and stable route between a source node and a destination node in WMN. In this paper, a trust based secure routing algorithm is proposed for enhancing security and reliability of WMN, which contains cross layer and subject logic based reliable reputation scheme with security tag model for providing effective secured routing. This model uses only the trusted nodes with the forwarding reliability of data transmission and it isolates the malicious nodes from the providing path. Moreover, every node in this model is assigned with a security tag that is used for efficient authentication. Thus, by combining authentication, trust and subject logic, the proposed approach is capable of choosing the trusted nodes effectively to participate in forwarding the packets of trustful peer nodes successfully. The simulation results obtained from this work show that the proposed routing protocol provides optimal network performance in terms of security and packet delivery ratio.

• Journal of Ginseng Research
• /
• v.38 no.2
• /
• pp.123-129
• /
• 2014

Korean ginseng (Panax ginseng) and American ginseng (Panax quinquefolius) are widely used medicinal plants with similar morphology but different medicinal efficacy. Roots, flowers, and processed products of Korean and American ginseng can be difficult to differentiate from each other, leading to illegal trade in which one species is sold as the other. This study was carried out to develop convenient and reliable chloroplast genome-derived DNA markers for authentication of Korean and American ginseng in commercial processed products. One codominant marker could reproducibly identify both species and intentional mixtures of the two species. We further developed a set of species-unique dominant DNA markers. Each species-specific dominant marker could detect 1% cross contamination with other species by low resolution agarose gel electrophoresis or quantitative polymerase chain reaction. Both markers were successfully applied to evaluate the original species from various processed ginseng products purchased from markets in Korea and China. We believe that high-throughput application of this marker system will eradicate illegal trade and promote confident marketing for both species to increase the value of Korean as well as American ginseng in Korea and worldwide.

• Proceedings of the KIEE Conference
• /
• 2005.05a
• /
• pp.269-271
• /
• 2005

EMV was formed in February 1999 by Europay International, MasterCard International and Visa International to manage, maintain and enhance the EMV Integrated Circuit Card Specifications for Payment Systems as technology advances and the implementation of chip card programs become more prevalent. The formation of EMV ensures that single terminal and card approval processes are developed at a level that will allow cross payment system interoperability through compliance with the EMV specifications. A credit card environment of the domestic market adopted the standard Local-EMV to have the compatibility with EMV international standard and the EMV migration have been carried out b,# the step-by-step process. It may be possible to adopt various kinds of cryptographic algorithms, however, RSA public key algorithm is currently used. In this paper, as a public key algorithm for the authentication process, Elliptic Curve Cryptographic algorithm is applied to the EMV process. Implementation results is shown. and the possible changes necessary to accommodate Elliptic Curve Cryrtography is proposed.

• The KIPS Transactions:PartC
• /
• v.8C no.3
• /
• pp.245-252
• /
• 2001

인터넷의 이용증가와 전자상거래의 활성화 등으로 인해 급속도로 발전하는 공개키 기반구조에 능동적으로 대처하기 위해서는 확정성과 상호 운용성, 관리용이성, 나 공개키 기반구조 기관의 수용 등 여러 가지 문제를 고려한 인증 모델이 제시되어야 한다. 이 논문에서는 인터넷에서 이기종의 컴퓨터들이 서로 연결되어 자료를 공유하고 분산되어 실행할 수 있는 개방 분산 시스템인 CORBA 기반의 상호인증 모델을 설계한다. 공개케 기반 시스템(PKI)을 도입하되 CCCA(Cross Certification CA)를 이용하여 효율적으로 상호인증 할 수 있는 모듈과 인터페이스를 설계하고 기존 모델과 비교 분석하여 우수성을 증명한다.