• Journal of Korean Society for Geospatial Information Science
• /
• v.20 no.4
• /
• pp.11-17
• /
• 2012

The study aims to secure an integrated UFID system-based ID system as it defines the three-dimensional land registration record through selection and standardization of objects. By comparing the integrated ID system secured by the study and the objected ID system proposed by Seoul City, the study came up with practicality of the integrated ID system for the three-dimensional land registration record information system. An integrated UFID-based intellectual spacial information which is consisted of 41 figures in total was developed by the study. The study confirmed the practicality of the integrated ID system by comparing it with the objected ID of the three dimensional land registration record information system established by Seoul City.

• The KIPS Transactions:PartC
• /
• v.15C no.2
• /
• pp.125-132
• /
• 2008

As the development of Internet technology, the number of IDs managed by each individuals has been increased. And many software development institutes have developed ID/PW management solutions to facilitate secure and convenient management of ID/PW. However, these solutions also can be vulnerable in case of administrator's password exposure. Thus, we need to derive security requirements from the vulnerability analysis of these solutions, also we need evaluation criteria for secure ID/PW management solution development. In this paper, we analyze the vulnerability of ID/PW management solution and propose the evaluation criteria for secure ID/PW management solution.

• Journal of Internet Computing and Services
• /
• v.16 no.1
• /
• pp.9-20
• /
• 2015

Nowadays, Smart Wallet technology trend that is able to save users' consuming costs and also retain users' redundant behaviors such as Single-tapping, One-way communication, Integrated ID, has been issued in recent Mobile Industrial Fields. As one of Smart Wallet functions, Integrated ID is proposed for users' convenience, handiness, and immediate responses. It is designed for the effective management of users' IDs which are easy to be forgot because of its unusual structures. To be detail, instead of user, Integrated ID system can certificate users identification from various online sites (where user resisted) authorization requests via one-clicking, not putting identification data in each sites. So, this technology would be helpful much to a certain user who has lots ID and its Password in multiple Online shopping companies by establishing integrated ID. However, although Integrated ID has lots advantages to be used, most Mobile Service Companies has hesitated to apply Integrated ID service in their shopping systems because this technology requires them sharing their users' data. They have worried that this service would be not helpful to gain their profits. Furthermore, Users who join in multiple shopping companies and use Integrated ID services also are difficult to decide which company they have to save their points in before payment because this system could not show any financial benefit analysis data to their users. As following facts, via this paper majorly we propose the advanced Integrated ID system which concern shopping point management. Basically, this system has a strong security payment service and secure network services like other mobile Shopping systems. Additionally, this system is able to service (or to support) shopping -point -saving guide for customers' financial benefits and conveniences.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.35 no.6B
• /
• pp.901-907
• /
• 2010

This paper proposes a standard method for linking data between the U-City Integrated Urban Management Platform and u-service systems through systemization of event identification and standardization of event priority. By applying the proposed method, the incoming events to the Management Platform are listed and processed according to their priority of urgency. The application of the systemized event ID and standardized event priority enables prompt counter-measures against urban emergencies and disasters, which improves the efficiency of business processes by reducing the time and cost to complete required actions.

• Journal of Advanced Navigation Technology
• /
• v.15 no.4
• /
• pp.664-671
• /
• 2011

The development of IT technology and breakthrough of the network and the wired network, wireless network boundaries disappear and wired and wireless integrated service environment is the advent in online game environment. However, the wired and wireless integrated service environment appropriate security technology is still inactive, wired and wireless integration environment due to the characteristic as well as security threats wired network and security threats in wireless networks should be considered. Therefore, This wired and wireless integrated environment has been considering studied various, Among them wired and wireless environment considering the lightweight of ID-based authentication and key management has been in progress. In recent, Moon et al. pervasive environment in authentication and ID-based key management protocol is proposed. However, Moon et al.'s scheme is use the ID-based public-key approach to decreased the amount of computation. However, pairing by using a technique similar to the existing public key scheme can represent the amount of computation. Therefore, In this paper the way of Moon etc in security vulnerability analysis.

• Journal of Digital Convergence
• /
• v.13 no.7
• /
• pp.197-205
• /
• 2015

Existing Web authentication method utilizes the resident registration number by credit rating agencies separating i-PIN authentication method which has been improved authentication using resident registration number via the real name confirmation database. By improving the existing authentication method, and it provides the available integrated ID authentication on Web. In order to enhance safety, the proposed authentication method by encrypting the user of the verification value, and stores the unique identifier in the database of the certificate authority. Then, the password required to log in to the Web is for receiving a disposable random from the certificate authority, the user does not need to remember a separate password and receives the random number by using the smart phone. It does not save the user's personal information in the database, and it is easy to management of personal information. Only the integration ID needs to be remembered with random number on every time. It doesn't need to use various IDs and passwords if you use this proposed authentication methods.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.31 no.5
• /
• pp.941-950
• /
• 2021

Single Sign-On (SSO) service manages user's account passwords from multiple websites so that security in a high level is required. Users who use the SSO service are authenticated through the Identity Provider (IdP) when logging into the website. We present the security requirements that IdP can take in order to minimize the user's risk whose IdP account is compromised. We describe the security threats that arise when the security requirements are not satisfied. Through evaluation, we prove that the attacker's session cannot be canceled even if the user recognizes the attack if the IdP does not satisfy the security requirements.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2009.04a
• /
• pp.1381-1384
• /
• 2009

인터넷 인구가 크게 증가함에 따라 인터넷 상의 ID와 개인정보 관리 문제가 크게 대두되고 있다. 이에 대한 해결책으로 통합 ID 관리 시스템이 고안되었으며 이 방법들 중 하나로 사용자 중심의 분산형 인증을 제공하는 OpenID가 있다. 현재 OpenID는 보안적인 기능을 담당하는 신뢰모델에 대한 표준화가 되어있지 않기 때문에 ID와 Password 이외에 사용자를 인증하는 다른 방법이 없는 문제점이 있다. 본 논문에서는 OpenID의 인증 및 신뢰성을 강화하기 위해 OTP 생성 매체인 Mobile One Time Password를 적용한 OpenID기반의 MOTP를 이용한 사용자 인증 시스템을 제안하고 설계한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2003.05c
• /
• pp.1969-1972
• /
• 2003

전통적인 IDS는 단일 시스템, 단일 환경하의 침입 탐지만을 제공하므로, 보안대상 제한, 유연성 한계, 다양한 형태의 침입탐지 불가 등의 문제점이 대두되고 있다. 최근 이러한 문제점을 해결하기 위하여 여러 IDS의 침입정보를 통합, 분석하는 연구가 활발히 진행되고 있다. IDWG는 IDS간 상호운용을 지원하고자 침입정보 전송 프로토콜과 메시지 친환 형태를 표준화하는 작업을 진행하고 있다. 본 논문은 이 기종 IDS 관리 및 침입정보 통합을 위한 테스트베드 구축 과정을 제시한다. 단위 IDS는 Snort와 Snare를 사용하였으며, 국제표준을 준수하는 RoadRunner 라이브러리를 이용하였다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2001.04a
• /
• pp.829-831
• /
• 2001

현재의 정보통신 사회에서 널리 사용되는 인터넷 서비스는 기본적으로 ID/PW(PassWord) 기반의 인증을 사용한다. 이때 사용자는 여러 웹 서비스에 대해서 각각 다양한 ID/PW를 기억해야 한다는 어려움을 가진다. 마찬가지로 웹 서비스 관리자 역시 여러 사용자들의 ID/PW를 관리하는데 많은 비용 및 노력을 소모해야 한다. 따라서 한 번의 안전한 인증 과정을 통해 사용자 및 관리자의 편리를 도모할 수 있는 SSO(Single Sign-On) 시스템의 적용이 필수적으로 요구되고 있다. 본 연구에서는 기존의 SSO 시스템을 분석하여 새롭게 모든 인터넷 환경에서 보다 안전하게 사용자에게 서비스를 제공하며, 관리자에게는 편리성을 제공하는 브로커와 에이전트의 기능을 포함한 통합 SSO 시스템을 설계하며, 추후 연구과제로서 실제 브로커 및 에이전트 기반 통합 SSO 시스템 구현 및 적용에 대하여 연구 할 것이다.