• 대한전자공학회:학술대회논문집
• /
• 대한전자공학회 2002년도 ITC-CSCC -3
• /
• pp.2047-2050
• /
• 2002

At present, many applications independently provide access control for their own resources, for example Web, Databases and Operating Systems, etc. Such independent access control systems result in multiple access control configurations each of which deals with the access control in its own application context. Since those multiple configurations are operated in isolation, and maintained by possibly different administrators, they are likely to be incoherent. In this paper, we propose a logical specification to reason about multiple access control configurations. Our specification can be used to detect the incoherence in multiple configurations. Furthermore, it of offers many kinds of policies for multiple configurations that can capture several kinds of requirements for multiple access control systems.

• 융합보안논문지
• /
• 제12권3호
• /
• pp.85-92
• /
• 2012

기존의 보안 관리 수준을 측정하기 위한 방법들이 다양하지만 IT 자산을 중심으로 한 평가만이 이루어지고 있는 관계로 조직 전반에 걸친 분석이 이루어지지 못했다. 따라서 본 논문에서는 보안 관리 수준 점검을 손쉽게 할 수 있도록 웹 기반 보안 관리 수준 분석 도구에 대해 제시한다. 본 도구의 경우는 전사적 정보 보호 관리 방법론인 ISO 27001의 보안통제 항목들을 기반으로 설문 내용을 구성하였다.

• 제어로봇시스템학회:학술대회논문집
• /
• 제어로봇시스템학회 2001년도 ICCAS
• /
• pp.57.5-57
• /
• 2001

This paper presents an enhanced web-based distributed system with Single Access Object Protocol(SOAP), which uses HTTP as a communication protocol and XML as a data presentation. The suggested system is applied into a Generic Equipment Model (GEM) for exchanging specified messages(SECS-II), which are encoded into XML presentation, between Equipment and Host via the web sorrel. In this paper, the designed system architecture and its soap components are presented.

• 한국컴퓨터정보학회논문지
• /
• 제6권4호
• /
• pp.119-124
• /
• 2001

본 논문에서는 실제적인 접근 제어 시스템에 적용이 가능하도록 기존의 검증된 접근 제어 메커니즘을 적용하여 보안성, 무결성 및 흐름제어 보안 기능을 제공하며 직무 중심조직의 접근 제어 요구를 용이하게 수용할 수 있는 안전한 직무 기반 접근 제어 모델을 제안한다. 제안한 모델은 주로 인터넷 상에서 웹을 기반으로 하는 응용 시스템에 적용할 수 있는 간단하면서도 안전한 접근 제어 모델이다.

• 한국정보과학회논문지:데이타베이스
• /
• 제35권2호
• /
• pp.155-168
• /
• 2008

이 논문에서는 관계형 보안 모델 기반의 RDF 웹 온톨로지 접근 제어 모델을 제안한다. 시맨틱 웹은 차세대 웹으로 인식되고 있으며 RDF는 시맨틱 웹을 실현하기 위한 웹 온톨로지 서술 언어이다. RDF와 관련된 많은 연구들이 진행되었으나 대부분 에디터, 저장소 및 추론 엔진 등의 연구에만 집중되었을 뿐 정보 시스템의 가장 중요한 요구 사항 중 하나인 보안 문제에 대한 연구는 매우 미비하다. RDF 온톨로지 보안에 대한 일부 연구들이 제안되었으나 관련 데이타를 모두 메모리에 로딩해야 하는 오버헤드를 지니며, 현재 대부분의 온톨로지 저장소가 관계형 데이타베이스를 기반으로 개발되고 있는 상황을 고려하지 않고 있다. 이 논문에서는 이러한 문제점을 해결하기 위한 관계형 모델 기반의 새로운 RDF 웹 온톨로지 보안 모델을 제안한다. 제안된 보안 모델은 높은 실용성과 활용성을 제공하며, 또한 관계형 보안 모델의 안정성에 기인한 제안 모델의 안정성 확보가 용이하다.

• 제어로봇시스템학회:학술대회논문집
• /
• 제어로봇시스템학회 2000년도 제15차 학술회의논문집
• /
• pp.116-116
• /
• 2000

This paper describes an experimental embedded tiny web server system that monitors the processing of manufacture using the Internet. The object of this study is developing of an embedded tiny web server that connects the stand-alone machines in factory to the Internet. Using the World Wide Web (WWW), we proffer user-friendly environments to users. Anyone with a web browser may easily access the processing of manufacture in the factory. Through connecting different network system, our web server extends the private networks to the Internet, the global networks. Our embedded tiny web server is ideal for process control, building and facility management system, factory automation and even home automation.

• International Journal of Computer Science & Network Security
• /
• 제22권12호
• /
• pp.107-115
• /
• 2022

Recently, big data applications need another database different from the Relation database. NoSQL databases are used to save and handle massive amounts of data. NoSQL databases have many advantages over traditional databases like flexibility, efficiently processing data, scalability, and dynamic schemas. Most of the current applications are based on the web, and the size of data is in increasing. NoSQL databases are expected to be used on a more and large scale in the future. However, NoSQL suffers from many security issues, and one of them is access control. Many recent applications need Fine-Grained Access control (FGAC). The integration of the NoSQL databases with FGAC will increase their usability in various fields. It will offer customized data protection levels and enhance security in NoSQL databases. There are different NoSQL database models, and a document-based database is one type of them. In this research, we choose the CouchDB NoSQL document database and develop an access control mechanism that works at a fain-grained level. The proposed mechanism uses role-based access control of CouchDB and restricts read access to work at the document level. The experiment shows that our mechanism effectively works at the document level in CouchDB with good execution time.

• KEPCO Journal on Electric Power and Energy
• /
• 제7권2호
• /
• pp.277-283
• /
• 2021

Power plant simulators have been used for operator training, control verification and engineering verification. In general, simulators can be used in the place where they are installed by only single user group at a time. Considering high cost of simulator development, a lot of available scenarios, the diversity of user level and accessibility based on users' work location, development of simulator system that can be used by multiple user groups regardless of location is required in order to enhance utilization of simulators. In this paper, the simulator system that can be used by multiple user group simultaneously without location limitation is proposed. The simulator system is composed of simulator servers, database servers, HMI servers, a web server, web clients. Simulator server consists of control model, process model that are developed for Circulating Fluidized Bed power plant located overseas. A web server manages user accounts, operation procedures, multiple server access between web client group and simulator server group. In other words, a web server makes a user group select a simulator server at a time. The developed simulator system is integrated after implementing process model, control model, HMI, and web server. Web client systems are installed on local site where power plant is located, while simulator servers, HMI servers, database servers, and a web server are located in KEPCO RI. The developed simulator system is verified by steady-state test, malfunction test and so on via remote access.

• 한국멀티미디어학회논문지
• /
• 제8권5호
• /
• pp.679-690
• /
• 2005

웹 환경의 비즈니스 모델은 대부분 멀티미디어 데이터의 제공으로 이루어진다. 암호화된 데이터는 해킹으로부터 안전하므로, 사용자와 서비스 제공자 사이의 정보 교환은 암호화된 데이터로 이루어져야 한다. DB 암호와 기술의 적용은 컨텐츠를 보호하는 주요한 기술이다 본 논문에서 DB 암호화는 접근제어 기술을 적용하여 비인가자에 의한 컨텐츠 이용을 방지하였다. 본 논문은 PMI 기반의 역할기반접근제어와 전자서명을 이용한 새로운 DB 암호화 메커니즘을 제안하고 구현하였다.

• 한국멀티미디어학회논문지
• /
• 제22권8호
• /
• pp.823-831
• /
• 2019

In recent years, there has been developed systems such as a surveillance system and access control using a face recognition function instead of a password or an RFID chip, thereby reducing the risk of falsification. Moreover, deep learning technology has been applied to real-time face recognition technology in video, so it makes possible the development of access control system that improves the accuracy of recognition and efficiency of management. In this paper, we propose a real-time access management system based on face recognition using ResNet. The system is based on web server, which make it possible to manage the access by recognizing the person of the image through the camera and access information stored in the database. It can be accessed by a user application to receive various information. The implemented system identifies a person in real time and allows access control by accurately distinguishing whether they are members or not, and the test results can recognize in 0.2 seconds. The accuracy of recognition rate is up to about 97% depending on the experiment environment. With this system, access can be managed quickly and effectively, even many people rush to it.