• 제목/요약/키워드: certification authority

검색결과 150건 처리시간 0.026초

전자 상거래 인증 기술 (Public Key Certification Technology for Electronic Commerce)

  • 하영국;임신영;강상승;함호상;박상봉
    • 한국전자거래학회지
    • /
    • 제4권2호
    • /
    • pp.23-40
    • /
    • 1999
  • Nowadays, major application of public key certification technology based on PKI(Public Key Infrastructure) is electronic commerce. Public key certification technology may include various sub-technologies such as key recovery, secret sharing, certificate/key management, and directory system technology. This thesis discusses PKI-based certification authority technology for electronic commerce on the Internet.

  • PDF

DPD/DPV 프로토콜 요구기준을 만족하는 개선된 OCSP (I-OCSP) 설계 (Design of the Improved OCSP (I-OCSP) satisfying the DPD/DPV protocol requirements)

  • 박종욱;서정훈;이용;이재일
    • 한국정보과학회:학술대회논문집
    • /
    • 한국정보과학회 2003년도 봄 학술발표논문집 Vol.30 No.1 (A)
    • /
    • pp.458-460
    • /
    • 2003
  • 본 고에서는 현재 X.509 인증서를 검증하기 위하여 온라인으로 인증서 상태정보를 제공하는 OCSP가 클라이언트.프로토콜.서버 주체별로 IETF 공개키기반구조 워킹그룹에서 정의한 총 23개의 DPD/DPV 프로토콜 요구기준에 적절히 부합하는지 고찰하고 도출된 기술적 보완사항을 적용하여 다양한 응용환경에 적합하며 신뢰성 있는 서비스를 제공할 수 있는 개선된 OC5P를 제시하고자 한다.

  • PDF

MAC Layer Based Certificate Authentication for Multiple Certification Authority in MANET

  • Sekhar, J. Chandra;Prasad, Ramineni Sivarama
    • IEIE Transactions on Smart Processing and Computing
    • /
    • 제3권5호
    • /
    • pp.298-305
    • /
    • 2014
  • In this study, a novel Randomly Shifted Certification Authority Authentication protocol was used in ad hoc networks to provide authentication by considering the MAC layer characteristics. The nodes achieve authentication through the use of public key certificates issued by a CA, which assures the certificate's ownership. As a part of providing key management, the active CA node transfers the image of the stored public keys to other idle CA nodes. Finally the current active CA randomly selects the ID of the available idle CA and shifts the CA ownership by transferring it. Revoking is done if any counterfeit or duplicate non CA node ID is found. Authentication and integrity is provided by preventing MAC control packets, and Enhanced Hash Message Authentication Code (EHMAC) can be used. Here EHMAC with various outputs is introduced in all control packets. When a node transmits a packet to a node with EHMAC, verification is conducted and the node replies with the transmitter address and EHMAC in the acknowledgement.

무선 인터넷 환경에 적합한 PKI 기술 연구 (A Study on the PKI technology for the Mobile Phone)

  • 이재일;정찬주;이용;송주석
    • 한국정보보호학회:학술대회논문집
    • /
    • 한국정보보호학회 2003년도 하계학술대회논문집
    • /
    • pp.167-172
    • /
    • 2003
  • 무선 단말기에서 인터넷 서비스를 제공하기 위한 인터넷 접속 프로토콜이 등장함에 따라 무선 인터넷 사용의 편리성과 특성에 대한 인식이 급속한 속도로 확산되고 있다. 무선 인터넷에서 전자상거래를 비롯한 데이터 서비스가 성공적으로 제공되기 위해서는 반드시 해결되어야 할 요소가 보안이다. 무선 인터넷의 안전한 전자상거래 서비스를 제공하기 위해서는 통신정보에 대한 기밀성, 개체인증 등의 정보보호를 위한 기능과 부인방지 기능 등을 제공해야 한다. 공개키 기반구조 (Public Key Infrastructure, PKI)는 사용자에게 정보보호기능과 부인방지 기능을 제공한다. 본 논문에서는 무선 인터넷 환경에 적용 가능한 공개키 기반구조 적용 모델을 제안한다.

  • PDF

국제전자상거래(國際電子商去來)의 발전과제(發展課題)에 관한 소고(小考) (A Study on the issues for Developing Int'l Electronic Commerce)

  • 하강헌
    • 무역상무연구
    • /
    • 제13권
    • /
    • pp.1033-1055
    • /
    • 2000
  • Almost business enterprises have recently used electronic commerce to conduct their business. Electronic commerce has come to encompass the Internet as well as EDI on private networks begun in the 1960s. The Internet is already changing the way that many companies conduct their business. Domestic electronic commerce has rapidly enhanced, while Int'l electronic commerce has gone steady. There are four issues for developing of Int'l Electronic Commerce. Firstly, The EDI Standardization is to be uniformed and prevailed over the world in UN/EDIFACT authorized by ISO. Secondly, There are two useful systems on Electronic Document Transmission, so called, Bolero project system and Trade Card System. It is thought that Bolero system will be more useful for large trading enterprises, especially, who need a Letter of Credit and electronic B/L, while T/C system is proper to small trade companies who do not need those. Successful results of Bolero system is very important for Int'l electronic commerce enterprises. Thirdly, to secure electronic signature, Int'l Certification Authority is essential for the users of Int'l electronic commerce. Trusted way of distributing public keys is to use a Int'l Certification Authority. The Int'l Certification Authority will accept user's public key, along with some proof of identity and serve as a depository of digital certificates. Both governments and the International business community must involve archiving keys with trusted third parties. Finally, It is important that all the nations and UNCITRAL continue efforts to make legal bases in Int'l electronic commerce concerned, including electronic signature, certification etc.

  • PDF

전문간호사 자격인정의 공공성 (Publicity of Certification of Advanced Practice Nurse in Korea)

  • 김기경;조재현
    • 의료법학
    • /
    • 제6권2호
    • /
    • pp.291-310
    • /
    • 2005
  • Most of all countries have a governmental system for regulating the certification of nursing. In Korea, certification of advanced practice nurse(APN) is statuary regulation under supervision of government. In this article, the writers discuss the legal characters and effects of certification and regulatory body for certification and suggest the new regulatory system. The advanced practitioner may be recognize "new" health provider in the future. The nursing specialist have right to use title and practice expanded role. It's different things with physicians certification. The regulatory body is important because certification protected the title and empower APN authorize of expanded role. The certification of nursing is closely connected with public interest. The Korea government delegate power of national examination to private institute. To improve utility and publicity of certification system, we suggest that statutory empower the certification authority to public institute which composed with nursing professionals.

  • PDF

전자무역에서 전자인증제도의 문제점과 개선방안 (The Some Problems and Improvement Scheme of Electronic Certification System in International Electronic Commerce)

  • 오현석
    • 통상정보연구
    • /
    • 제6권2호
    • /
    • pp.85-105
    • /
    • 2004
  • International electronic commerce is different with international commerce in the aspect using electronic media and non-face transaction so there are some problems as authentication, integrity and non-reputation. These problems of electronic document and signature are resolved from electronic certification system. To introduce and develop the electronic certification in the international electronic commerce, it needs to authorize and operate certification authority under the uniform regulation base. But, because the laws and guidelines that related to electronic certification system are different among the nations and international organizations, it needs to compare each nation's law or guideline. In conclusion, to resolve problems of certification and develop certification system in the international electronic commerce, we make uniform rule of international electronic certification and harmonize the technology of electronic certification.

  • PDF

NEIS를 위한 PMI 기반의 RBAC 인증과 DB 보안 구현 (Implementation of RBAC Certification & DB Security Based on PMI for NEIS)

  • 유규두;문봉근;전문석
    • 정보처리학회논문지C
    • /
    • 제11C권7호
    • /
    • pp.981-992
    • /
    • 2004
  • 기존의 교육행정정보시스템(NEIS)은 보안 관리에 많으 문제점이 있다. 사용자 인증에서 PKI 인증만을 사용하여 권한에 따른 접근제어를 실현하지 못하고 있으며, 중앙 집중식 DRMS 운용과 평문화된 데이터의 사용으로 NEIS의 해킹 가능성을 증가시키고 있다. 따라서 데이터의 안전한 관리와 권한 인증을 위하여 새로운 교육행정정보시스템(RNEIS)을 제안한다. 첫 번째, 권한기반관리구조(PMI)의 속성인증서(AC)에 의한 접근 권한과 역할에 따른 사용자 인증 및 접근제어(RBAC)를 제시한다. 두 번째, DB의 해킹 방지를 위하여 전자서명에 의한 DB암호화를 설계 구현하였다. 세 번째, 일방향 해쉬함수에 의한 SQL 쿼리 위변조 방지 미 안전한 데이터 전송 방식을 제시한다.

속성기반 재 암호화를 이용한 스마트카드 인증권한 분배스킴 (Smart Card Certification-Authority Distribution Scheme using Attributes-Based Re-Encryption)

  • 서화정;김호원
    • 대한임베디드공학회논문지
    • /
    • 제5권3호
    • /
    • pp.168-174
    • /
    • 2010
  • User authentication is an important requirement to provide secure network service. Therefore, many authentication schemes have been proposed to provide secure authentication, such as key agreement and anonymity. However, authority of scheme is limited to one's self. It is inefficient when authenticated users grant a certification to other users who are in an organization which has a hierarchical structure, such as a company or school. In this paper, we propose the first authentication scheme to use Attributes-Based Re-encryption that creates a certification to other users with specified attributes. The scheme, which has expanded from Rhee et al. scheme, has optimized computation performance on a smart card, ensuring the user's anonymity and key agreement between users and server.

친환경선박 인증과 연계한 톤세제도 합리화 방안 (Renewing Tonnage Taxation of Shipping in Linkage to Greenship Certification Scheme)

  • 안준건;이지은
    • 대한조선학회논문집
    • /
    • 제60권2호
    • /
    • pp.86-94
    • /
    • 2023
  • Tonnage taxation has contributed to developing the Korean maritime industry through tax relief for shipping companies. The current tonnage taxation relies on the net tonnage as an earning-capacity indicator in a merchant ship. Although the tonnage tax accords with horizontal equity, it does not match vertical equity because of the different taxable capacities of an individual company. Nowadays, maritime transport uses a dedicated vessel, and each shipping freight embeds a different value of time. It means the tonnage taxation regime should consider the added value of each shipping freight. Meanwhile, as the environmental regulations led by the International Maritime Organization are being strengthened, the Korean merchant fleet must be eco-friendly soon after. This study explores the alternative to renewing tonnage taxation by utilizing the Greenship certification and considering the ability-to-pay principle. Because the Greenship certification scheme encourages shipping decarbonization, maritime transport by a certified ocean-going vessel comes to be treated as an activity for the green economy. Special taxation for the green economy may contribute to shipping sustainability and market competitiveness.