• Title/Summary/Keyword: Security Verification

Search Result 697, Processing Time 0.024 seconds

A Design and Analysis of Micro-payment System for Internet Commerce (인터넷 상거래를 위한 소액대금결제 시스템의 설계 및 성능평가)

  • Sung, Won;Kim, Eui-Jung;Park, Jong-Won
    • Journal of the Korea Computer Industry Society
    • /
    • v.4 no.4
    • /
    • pp.533-546
    • /
    • 2003
  • for the low information goods which will be traded through Internet is impossible to manage with previously existed payment system. The reason is that it's not economic because the management cost is bigger than the benefit of the information goods trade. Therefore, recently, there have been micropaymentresearches such as "Milicent", "PayWord", "MicroMint", and "iKP", etc. Though these methods don't have any problem with the low cost of the mechanism and the satisfaction of adequate security, they have big problem with the use of the unnecessary account and the aggregation of payment bill. The PayHash system which has been developed in this study simplifies the system's mechanism with "one-way hash function" which is used in generation, payment, and verification of the bill. And the system removed the generation and use of unnecessary account by making one customer have one account. The system solve the problem of the payment aggregation by using the last payment hash value and its index. And the system improves its performance by reducing the use of "digital signature" drastically, as well. As the result of this study, the PayHash system made it possible for the participants of the Internet Commerce to trade the lowest cost goods through efficient maintenance.o trade the lowest cost goods through efficient maintenance.

  • PDF

A Study on the Influence of Fire Service Budget for Fire Service Force (소방예산이 소방력에 미치는 영향)

  • Kim, Jin-Dong
    • Journal of the Korean Society of Hazard Mitigation
    • /
    • v.8 no.4
    • /
    • pp.67-74
    • /
    • 2008
  • Because the fire service demands are increasing and forms are diversified, the first thing you must do is to make up the fire service budget to keep fire service power sufficiently. Such budget allocation leads to supply enough fire service people want and results in social welfare satisfaction. If the budget of fire service is not enough to meet with its power, sufficient security of the fire fighters would be impossible. Also, when the urgent disasters occur, the government cannot cope with them effectively. In fact, loss of many lives and properties took place in some cities and kuns because of that. The purpose of this study is to investigate the influence of fire service budget for fire service force. To do this, this study reviews fire service budget, fire service force. And this study sets up three hypotheses based on the theoretical backgrounds and the past research. The statistical method used for the verification of hypotheses is multiple regression analysis. The analysis showed that fire service budget per head variable was positive significant, fire service budget ratio variable was not significant. Also, public facilities tax variable was negative significant. Therefore, the analysis showed that public facilities tax couldn't fill the role as a earmarked tax.

A Study on the Application of Cross-Certification Technology for the Automatic Authentication of Charging Users in ISO 15118 Standard (ISO 15118 충전 사용자 자동인증을 위한 교차인증서 기술의 적용에 관한 연구)

  • Lee, Sujeong;Shin, Minho;Jang, Hyuk-soo
    • The Journal of Society for e-Business Studies
    • /
    • v.25 no.2
    • /
    • pp.1-14
    • /
    • 2020
  • ISO 15118 is an international standard that defines communication between electric vehicles and electric vehicle chargers. Plug & Charge (PnC) was also defined as a technology to automatically authenticate users when using charging services. PnC indicates automatic authentication technology where all processes such as electric vehicle user authentication, charging and billing are automatically processed. According to the standard, certificates for chargers and CPSs (Certificate Provisioning Services) should be under the V2G (Vehicle to Grid) Root certificate. In Korea, the utility company operates its own PKI (Public Key Infrastructure), making it difficult to provide chargers under the V2G Root Certificate. Therefore, a method that can be authenticated is necessary even when you have different Root Certificates. This paper proposes to apply cross-certificate technology to PnC authentication. Automatic authentication of Cross Certification is to issue a cross-certificate of the Root CA and include it in the certificate chain to proceed with automatic authentication, even if you have different Root certificates. Applying cross-certificate technology enables verification of certificates under other Root certificates. In this paper, the PnC automatic authentication and cross certificate automatic authentication is implemented, so as to proceed with proof of concept proving that both methods are available. Define development requirements, certificate profiles, and user authentication sequences, and implement and execute them accordingly. This experiment confirms that two automatic authentication are practicable, especially the scalability of automatic authentication using cross-certificate PnC.

A Study on Unconstitutionality of Insurance Premium Rating System in Accordance with National Health Insurance Act. - Focused on Age and Gender in Premium Rating Standards Activity Rate and Living Standards of the Local Insured - (국민건강보험법상 보험료부과체계에 관한 법적 고찰 -지역가입자 생활수준 및 경제활동 참가율 부과기준 중 성과 연령을 중심으로 -)

  • Song, Kimin;Jeong, Jeong-Ile
    • The Korean Society of Law and Medicine
    • /
    • v.15 no.1
    • /
    • pp.185-209
    • /
    • 2014
  • While the local health insurance and the employment-based insurance were integrated in July 2000, the insured is divided into employment-based insured and the local insured and the relevant premium has been applied to both groups. The health insurance premium having the feature of social solidarity has to be determined depending on income, that is, the ability to pay in accordance with the principles of social insurance. While employment-based insurance premium has been determined depending on the earned income, the local insurance premium for the local insured has been determined by scoring gross income(evaluated income), property and possession of automobiles. A variety of improvement approaches has been implemented including introduction of the employment-based insurance premium ceiling system (2002) and the change of property scoring system for the local insured (2006). However, the health insurance system which was merged in 2000 has been implemented up to now without significant change even though there were lots of socio-demographic change including increase of income level and the population structure such as low birth and aging. In other words, it is required to implement the premium rating system securing the income-based equity. Nevertheless, it was inevitable to apply the diverse rating standards in the early stage because it was very difficult to verify the income of the self-employed. Although the income verification rate was significantly increased from 23% in 1989 to 44% in 2010, the irrational standards including property, automobiles, living standard and activity rate have been still applied to the local insured because it is difficult to secure the validity of insurance premium rating system and it severely lacks of security. This paper investigated whether the current insurance premium rating system for the local insured imposing the premium on the basis of 'gender' and 'age' complies with the basic human rights secured by the current Constitution of the Republic of Korea with respect to the practical and theoretic irrationality of insurance premium rating system and standards for he local insured. In accordance with the analysis results, this paper proposed the approach to improve the system.

  • PDF

Intermediate-Representation Translation Techniques to Improve Vulnerability Analysis Efficiency for Binary Files in Embedded Devices (임베디드 기기 바이너리 취약점 분석 효율성 제고를 위한 중간어 변환 기술)

  • Jeoung, Byeoung Ho;Kim, Yong Hyuk;Bae, Sung il;Im, Eul Gyu
    • Smart Media Journal
    • /
    • v.7 no.1
    • /
    • pp.37-44
    • /
    • 2018
  • Utilizing sequence control and numerical computing, embedded devices are used in a variety of automated systems, including those at industrial sites, in accordance with their control program. Since embedded devices are used as a control system in corporate industrial complexes, nuclear power plants and public transport infrastructure nowadays, deliberate attacks on them can cause significant economic and social damages. Most attacks aimed at embedded devices are data-coded, code-modulated, and control-programmed. The control programs for industry-automated embedded devices are designed to represent circuit structures, unlike common programming languages, and most industrial automation control programs are designed with a graphical language, LAD, which is difficult to process static analysis. Because of these characteristics, the vulnerability analysis and security related studies for industry automation control programs have only progressed up to the formal verification, real-time monitoring levels. Furthermore, the static analysis of industrial automation control programs, which can detect vulnerabilities in advance and prepare for attacks, stays poorly researched. Therefore, this study suggests a method to present a discussion on an industry automation control program designed to represent the circuit structure to increase the efficiency of static analysis of embedded industrial automation programs. It also proposes a medium term translation technology exploiting LLVM IR to comprehensively analyze the industrial automation control programs of various manufacturers. By using LLVM IR, it is possible to perform integrated analysis on dynamic analysis. In this study, a prototype program that converts to a logical expression type of medium language was developed with regards to the S company's control program in order to verify our method.

A Study on the Career Decision-Making Patterns of Fisheries High School Students (수산고등학교(水産高等學校) 학생(學生)들의 직업결정형태(職業決定形態)에 관한 연구(硏究))

  • Park, Kwang-Chun
    • Journal of Fisheries and Marine Sciences Education
    • /
    • v.4 no.1
    • /
    • pp.16-29
    • /
    • 1992
  • 1. Purpose of the study: This study was to investigate and analyse the career decision making patterns of students, which would enhance vocational guidance activities for the students. The specific purposes of the study are as follows. 1) To find how much the fisheries high school students are satisfied with the school. 2) To find out the factors which would influence the fisheries high school students in their career decision making. 3) To find out the person who plays the most important role in the career decision making of the students 4) To find out the patterns of behavior taken by the fisheries high school students in their career decision making. 2. Hypotheses: The following hypotheses were tested for this study. 1) There would be significant differences in the extent of school-satisfaction, depending on the class level and major. 2) There would be significant differences in the value criterion with which the fisheries high school students make decisions on their careers, depending on the grades, majors, and the levels of school-satisfaction. 3) There would be significant differences in the human factors which affect their decision-making on their career, depending on the class levels, majors, and the levels of school satisfaction. 4) There would be significant differences in the patterns of behavior they take when they make decisions on their careers depending on the grades, majors and the levels of school satisfaction. 3. Methods of the study: For the verification of the above hypotheses, a questionaire was developed by the researcher, and the questionaire was answered by the total 440 students from three fisheries high schools, located in the rural and urban areas, out of 8 fisheries high schools in Korea. The questionaire was composed of two major parts: school-satisfaction (10 items) and career decision making patterns (39 items). The career decision-making patterns include 16 value criterion items, 10 human category items, and 13 behavior category items. 4. Results of the study: 1) School satisfaction; There was no significant difference in school satisfaction depending on the class level and major. 2) Value criteria; a) Almost of the fisheries high school students think that the potential for advancement, job security, and salary are important factors for their job. b) The seafarer-students rated the salary, prestige of the occupation and leadership to be important than the nonseafarer-students. The nonseafarer-students rated the stabilization of their livelihood and opportunity to use their creative ideas than the seafarer-students. c) The students unsatisfied with their school emphasize the working environment, variety of work duties and leisure more than the satisfied ones. 3) Human factors: a) The fisheries high school students are affected most by their homeroom teachers, major teachers and their parents, but they are less influenced by their counselor. b) The seniors are more affected by their friends or classmates than the freshmen, and especially seafarer-students are more affected by major teachers. c) The persons, who are working in the occupation they are interested in, exert more influence on unsatisfied students than class-teachers do. 4) Behavior patterns; a) Most of them want test their abilities. b) The nonseafarer-students and seniors tend to depend on their own intuitions. c) The seafarer-students, the freshmen, and the satisfied with their school tend to discuss with other persons, and the unsatisfied tend to be influenced by the information that they collect for themselves.

  • PDF

A Study on the Employment Status and Treatment of Temporary Librarians in the School Libraries (학교도서관 비정규직 사서의 고용실태와 처우개선 방안에 관한 연구)

  • Ryu, Jae hee;Noh, Younghee
    • Journal of the Korean BIBLIA Society for library and Information Science
    • /
    • v.26 no.3
    • /
    • pp.101-128
    • /
    • 2015
  • The purpose of this study was to investigate the temporary librarians' employment status that have been placed in over 80% of the school libraries and deduce the issues of their job status for proposing some solutions to improve their job performance. To achieve the above research purposed in this study, the related literature was reviewed and analyzed and an interview was conducted with the librarians in the Chungbuk province and a survey was distributed in the same province. As a result, first, a high correlation was found between the total satisfaction and the factors as follows; 'working satisfaction', 'employment conditions', 'working environment', 'interpersonal relations' etc. In the difference verification based on the satisfaction in accordance with the employment status, a difference of satisfaction was found between the pre and post analyses of the unlimited contractions. Second, the most overall review of the temporary librarians' job performances in relation to the 'reading and lending performances was conducted, regardless of the librarian certification. Third, the temporary librarians working at the school libraries responded that 'the manpower developer' was the most difficult consideration in relation to their employment statuses. And, asked about the solutions for the improvement of their job conditions, most of the librarians wanted their job security.

A Study of the Situation Based Disaster Response Model from the Damage of Storm and Flood Field Manual (풍수해 현장조치 행동매뉴얼 분석을 통한 상황 기반 재난 대응 모델 연구)

  • Lee, Chang Yeol;Park, Gil Joo;Kim, Twehwan;Lee, Hyeon Sung
    • Journal of the Society of Disaster Information
    • /
    • v.15 no.4
    • /
    • pp.617-625
    • /
    • 2019
  • Purpose: The fields manuals which is managed by the each disaster types are the integrated guideline. When the disaster occurred, all kinds of SOPs which are described in the manual does not need. Therefore, the person in charge is confused which SOP is executed. In this study, we propose the disaster response process model based on the specific disaster situation case. Method: Firstly, we define the disaster situation cases which is mentioned in the field manual, and then, we develop the disaster response process model including indispensible SOPs for the specific disaster situation case. As a verification and feedback process, we apply the model to Safety Korea Exercise scenario. Result: We developed SOP model and disaster response process model reflecting the concept of the disaster situation case. Conclusion: Safety Kore Exercise scenario reflecting the developed model may continuously upgrade the field manual.

Derivation of Anti-Tamper System Requirements Based on CMVP Standard for Technology Protection of Weapon Systems (무기 시스템의 기술 보호를 위한 CMVP 표준 기반의 Anti-Tamper 시스템 요구사항 도출)

  • Lee, Min-Woo;Lee, Jae-Chon
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.20 no.4
    • /
    • pp.470-478
    • /
    • 2019
  • As the growth of the domestic defense industry is remarkable regarding technology level and export size, technology protection is necessary. Particularly, there is a need to apply anti-tamper measures to prevent critical technologies from illegally being taken out of weapon systems. However, there is no security protection strategy and system built yet in ROK. Precedent studies discussed the trend analysis and technical research for specific protective techniques, and the application of anti-tamper using limited procedures was provided. Recently, methods of how to select the technology for protection were studied based on risk management. Nonetheless, these studies cannot be associated with the acquisition process for the whole life-cycle, having difficulty with actual development and evaluation of the weapon systems. The objective of our study is to derive the system requirements of the weapon system for which anti-tamper measures have been determined to apply. Specifically, requirements items suitable for the development of anti-tamper weapon systems were derived based on ISO/IEC 19790, the CMVP standard for the development and verification of cryptographic modules. Also, its utilization in technical reviews and test & evaluations was presented. The usefulness of the research results was confirmed through inductive inference and comparative evaluation. The result can be expected to play a role in initiating extensive activities needed for technology protection of the weapon systems.

Development of IFC Standard for Securing Interoperability of BIM Data for Port Facilities (항만 BIM 데이터의 상호운용성 확보를 위한 IFC 표준 개발)

  • Moon, Hyoun-Seok;Won, Ji-Sun;Shin, Jae-Young
    • Journal of KIBIM
    • /
    • v.10 no.1
    • /
    • pp.9-22
    • /
    • 2020
  • Recently, BIM has been extended to infrastructures such as roads and bridges, and the demand for BIM standard development for ports is increasing internationally. Due to the low level of utilization of classification system and drawing standards compared to other infrastructures, and the closed nature of national security facilities, ports have insufficient level of connection and sharing environment among external systems or users. In addition, since the standardization of data for port facilities is not made, it is still necessary to establish an independent DB for each system and to ensure interoperability of data between these systems since it does not have a shared environment among similar data. Therefore, the purpose of this study is to develop and verify IFC, the international standard for BIM, in order to cope with the BIM environment and to be commonly used in the design, construction, and maintenance of port facilities. To this end, we build a standard schema with port-specific Express Notation according to buildingSMART International's standard development methodology. First, domestic and international reference model standards were analyzed to derive components such as space and facilities of port facilities. Based on this, the components of the port facility were derived through the codification, categorization, and normalization process developed by the research team. This was extended based on the port BIM object classification system developed by the research team. Normalization results were verified by designers and associations. Then, IFC schema construction was based on Express-G data modeling based on IFC 4 * 2 Candidate, which is a bridge candidate standard based on IFC4 (ISO16739), and IFC 4 * 3 Draft, which is developed by buildingSMART International. The final schema was validated using the commercialized validation tool. In addition, in order to verify the structural verification of the port IFC schema, the transformation process was verified by converting the caisson model into a Part21 file. In the future, this result will not only be used as a delivery standard for port BIM products, but will also be applied as a linkage standard between systems and a common data format for port BIM platforms when BIM is used in the maintenance phase. In particular, it is expected to be used as a core standard for data exchange in the port maintenance stage.