• Title/Summary/Keyword: Policy 서버

Search Result 341, Processing Time 0.031 seconds

Design and Analysis of a Secure Protocol for the P3P Standard (S-P3P: P3P 표준을 반영한 보안 프로토콜 설계 및 분석)

  • Choi, Hyun-Woo;Jang, Hyun-Su;Ko, Kwang-Sun;Kim, Gu-Su;Eom, Young-Ik
    • The KIPS Transactions:PartC
    • /
    • v.14C no.7
    • /
    • pp.545-552
    • /
    • 2007
  • P3P(Platform for Privacy Preference) that is used in the World Wide Web is a standard to define and negotiate policies about definition, transmission, collection, and maintenance of personal information. Current P3P standard provides methods that define client personal information protection policy and P3P policy associated with web server. It also provides a method that compares these two policies. The current P3P standard, however, does not handle detail functions for safe transmission of the personal information and data. Also, it does not handle problems that can be induced by the detail functions. In this paper, in order to solve these problems, we propose a Secure P3P(S-P3P) protocol, which is a security protocol for the current P3P standard, offers mutual authentication between the web server and the client, and guarantees integrity and confidentiality of the messages and data. Furthermore, a S-P3P protocol provides non-repudiation on transmission and reception of personal information that is transmitted from the client to the web server.

The research of posture training system in self-directed learning golf (자기주도 학습식 골프의 운동자세 트레이닝 시스템 연구)

  • Ko, Yun-Hwa
    • Journal of Digital Convergence
    • /
    • v.11 no.6
    • /
    • pp.151-157
    • /
    • 2013
  • This research is about set-up own posture standard and enables to compare the set-up and own posture; therefore, this posture training system leads the user's active learning through the method of self-directed learning. This system includes the camera part that shoots user's posture and save the movie clip for comparison about the user and target, the training server that provides a comparison screen playing clips simultaneously by user's input, and the terminal equipment that connects the training server and a network, transmits the user's input to the server, and displays them from the comparison screen. The Journal of Digital Policy & Management. This space is for the abstract of your study in English.

Study on Agent based Internetworking Platform (에이전트 기반 인터네트워킹 플랫폼 연구)

  • 전준현
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.29 no.3B
    • /
    • pp.314-324
    • /
    • 2004
  • Recently, high-speed internet subscribers have grown continuously, and reached up to 10 millions. But existing network management that is responsible only for user access is confronted with many difficulties, since user access network(xDSL, Cable, B-WILL, and so on) has diversified and value added wired/wireless contents service has developed. In this paper propose the Agent based Inter Networking platform as object-oriented hierarchical system that can provide various service such as access QoS(Quality of Service), customized application service and security service according to user on demand. This system has divided into two parts(user agent and agent management system & local and central management systems). Management system periodically receive status information such as bandwidth, download speed, delay, current service, and so on, and process them, then build a policy based on processed information. According to personal user profile that is generated by this policy, the customized service can be provided for users. And This system adopt the object-oriented modeling in case that system migration and integration, and implement a system that is robust and stable for security through hierarchical server system.

An Extended SIP-based Network Architecture and Session Management Methods for Internet QoS (QoS를 지원하는 확장 SIP 기반 네트워크 구조 및 세션 제어 방법)

  • Shin Kang-Sik;Lee Jong-Hoon;Hong Kyung-Pyo;Yoo Sang-Jo;Cho Eun-Hee
    • Journal of Korea Multimedia Society
    • /
    • v.9 no.1
    • /
    • pp.73-88
    • /
    • 2006
  • With the development of Next Generation convergence Network, the current Internet needs a new network architecture and new session establishment methods, which can support various applications requiring differentiated traffic processing and high quality of service instead of the conventional best-effort service. It is expected that, in next generation network based on All-IP. SIP will play an important role in the session establishment between the end to end user terminals. In this paper, we propose a new network architecture that can provide quality of service based on SIP using the QoS enabled SIP servers and policy servers, and we also propose a new session establishment method that apply the user's demands participating the session establishment when setting up the session using the SIP. Through simulations under various environments, we show the parameter ranges in terms of server capacity and the number of users in access networks to achieve reasonable delay bounds.

  • PDF

On the Application for Minimum Server Cores in Public Sector (공공부문 도입서버의 최소코어수 적용에 관한 고찰)

  • Lee, Tae-Hoon;Ra, Jong-Hei
    • Journal of Digital Convergence
    • /
    • v.9 no.3
    • /
    • pp.213-223
    • /
    • 2011
  • Today, information resource management is key task in the data-centre as like as NCIA(National computing integration Agency of Korea). In IRM, the server's performance is one of the core elements, it must be importantly managed during whole of system life cycle. As first step of such management is in purchase phase, it is very important that the optimum specification is determined. The server's specification contains such as performance of core, criteria for performance verification, minimum cores, etc. There is constant controversy concerning the minimum cores. In this article, we present criteria for determination of the minimum cores that considered three aspects: (1) Costly aspect as TCO(Total Cost of Ownership, (2) Environmental aspect as Green IT (3) Technical aspect as RAS(Reliability, Availability, Serviceability) functionality. Finally, we propose scheme to ideally determinate the minimum cores.

A Design of RBAC_Linux for Linux Security Systems (리눅스 보안 시스템을 위한 RBAC_Linux 설계)

  • 오석균;김성열
    • Journal of Korea Society of Industrial Information Systems
    • /
    • v.4 no.4
    • /
    • pp.137-142
    • /
    • 1999
  • This paper applies role-based access control(RBAC) policy for solving security problems when it will be operated business of many field on the Linux sever environments and designed RBAC_Linux security systems that it is possible to manage security systems on the Linux environments. In this paper, the RBAC_Linux is security system which is designed for applicable on the Linux enviroment The applying RBAC model is based on RBAC96 model due to Sandhu et al. Therefor, the using designed RBAC_Linux security system on the Linux sever system have the advantage of the following: it can be implemented sever system without modifying its source code, high migration, easy and simple of secure managing.

  • PDF

Architecture of Network Security Control Server for applying Security Policy Model (보안정책모델을 적용한 네트워크보안제어서버 구조)

  • Bang, Hyo-Chan;Kim, Ki-Young;Kim, Geon-Lyang;Jang, Jong-Soo
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2001.10b
    • /
    • pp.993-996
    • /
    • 2001
  • 본 논문에서는 정책기반 네트워크보안 프레임워크의 전체적인 구조와 주요 아키텍쳐에 대해서 논하고 특히 보안정책 서버의 역할을 담당하는 네트워크보안제어서버의 구조와 메커니즘에 대해 구체적으로 기술한다.

  • PDF

Vulnerability of Directory List and Countermeasures (디렉토리 리스팅 취약점 및 대응책)

  • Hong, Sunghyuck
    • Journal of Digital Convergence
    • /
    • v.12 no.10
    • /
    • pp.259-264
    • /
    • 2014
  • The web server is configured to display the list of files contained in this directory. This is not recommended because the directory may contain files that are not normally exposed through links on the web site. The directory list have some serious vulnerability to show internal files and directory to outsider attackers. Therefore, the proposed countermeasure of directory list is presented to prevent unnecessary valuable information from outsider attackers.

Design Issues and QoS Negotiation Protocol Model for Networked Multimedia Systems (네트워크 멀티미디어 시스템 구현 이슈 및 QoS 협상 프로토콜 모델)

  • Lee, Won-Jun
    • The KIPS Transactions:PartC
    • /
    • v.9C no.5
    • /
    • pp.757-764
    • /
    • 2002
  • This Paper describes our experiences with the design and implementation of a networked multimedia information management system in an object-oriented framework for distributed multimedia applications, and an integrated QoS-resource negotiation protocol which has been applied to a video server in our networked multimedia infrastructure. The salient features of our framework to support efficient multimedia streaming are explained. Next the paper explores the challenges faced in integrating the proposed QoS negotiation policy into the framework.

A Lifetime-based Cache Policy for Stable Data Distribution in NDN (NDN에서 안정성 있는 데이터 배포를 위한 Lifetime 기반의 캐시 정책)

  • CHOI, SU-HO;JOE, IN-WHEE
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2019.05a
    • /
    • pp.92-95
    • /
    • 2019
  • CDN은 여러 서버에 데이터를 분산하여 캐시 한 뒤 빠르게 데이터를 배포하는 네트워크이다. 하지만 CDN은 서버 성능에 영향을 받고 데이터의 Lifetime이 얼마 없는 경우 중앙 서버 혹은 데이터 제작자와의 통신을 통해 데이터를 새로 받아야 한다. 반면에, NDN은 데이터를 라우터별로 캐시하여 트래픽을 분산시키고 딜레이를 줄였다. 하지만, 캐시 된 데이터의 Lifetime에 따라 데이터를 받지 못하는 문제가 있다. 본 논문에선 데이터 요청자가 Lifetime 내에 데이터를 못 받으면 요청자의 네트워크 상황과 Interest 패킷의 주기를 고려하여 캐시 된 데이터의 Lifetime을 증가시켜 안정성 있는 데이터 배포를 목표로 하였다. 캐시 정책이 적용된 시뮬레이션을 진행했으며, 얼마 남지 않은 Lifetime을 증가시켜 데이터 요청자가 데이터를 온전히 받을 수 있음을 확인하였다.