User Certification Research Articles

Security Enhancement in IoV using User and Vehicle Certification

Security Enhancement in IoV using User and Vehicle Certification

Fast Identity Online-Based Facial Authentication System Development in Mobile

Recently, research on methods to improve upon the security vulnerability of password based authentication is being actively conducted. Research on how to use real-time biometric recognition is also actively underway. The system development of Public Key Infrastructure (PKI) key pairs and uses a method that safely stores the produced keys in secure zones, and encryption key data is composed so that access can only be made in Fast Identity Online (FIDO) Authenticator zones. Face certification data extracted from the face recognition engine is created, data can be accessed and saved through encryption. With the Fast Identity Online (FIDO) Authenticator, a method was developed that compares and face certification data. The system in this thesis developed a Fast Identity Online (FIDO) based face certification system that uses biometric authentication to supplement the weaknesses of password based systems which were used for user certification in the past because they cost little and are convenient. System development in this thesis was conducted by applying a Fast Identity Online (FIDO) based certification system to an Active Shape Model (ASM) style face recognition algorithm. After taking a photo of the face with the user’s cellular phone and saving it, certification is carried out through comparisons made of the photo and real-time input images. Once certification is made using Fast Identity Online (FIDO) protocols, tests of face detection speed and matching speed are conducted to measure accuracy and speed. A total of 30 tests were conducted and test results showed that detection speed was an average of 30.35 f/s and matching speed was 14.16 ms. In this paper, biometric authentication security and convenience are provided by using security functions provided by user devices and supplementing them with a server operation method.

Lattice‐based nominative signature using pseudorandom function

A nominative signature (NS) is a cryptographic primitive where two parties collude to produce a signature. It is a user certification system and has applications in a variety of sectors where nominee cannot trust heavily on the nominator to validate the nominee's certificate and only targeted entities are allowed to verify the signature on sensitive data. A new construction for NS from standard assumptions on lattice is provided. The authors’ construction relies on collision-resistant preimage sampleable function and symmetric key primitives like collision-resistant pseudorandom function and zero knowledge proof system ZKB++ for Boolean circuits. The authors provide detailed security analysis and show that their construction achieves security under unforgeability, invisibility, impersonation, and non-repudiation in the existing model. Furthermore, our construction exhibits non-transferability. The security under non-repudiation is achieved in the quantum random oracle model using Unruh transform to ZKB++.

Elementos que motivan al usuario a obtener certificación de “cursos en línea” en Educación Superior

Debido al aumento mundial del interés en los cursos en línea, toma importancia adaptar los cursos de Unimet en línea a las necesidades de sus usuarios. El objetivo de este estudio es determinar los elementos que motivan a los usuarios a obtener certificaciones de cursos en línea en Educación Superior. Lo anterior se logra mediante el instrumento de una encuesta a 899 usuarios de los 11.000 inscritos en la plataforma Unimet en línea para el momento del estudio. Las respuestas recibidas indican que la mayor parte de los que realizan cursos son personas con grado de licenciatura. Se observa que una mayoría del 80% no adquirió certificados en la plataforma, debido a razones de índole monetaria, de relevancia y la no culminación del curso. Se puede decir que los usuarios le han dado mayor importancia a los conocimientos que a la obtención del certificado. Mediante el estudio se logró una perspectiva más amplia de los elementos estudiados, que permiten ajustar los cursos para promover la certificación de los usuarios.

The difference of information diffusion for Seoul tourism destination according to user certification on Sina Weibo: through data crawling method

Consumer’s information search and sharing behaviour is critical to firm’s stratigic decision-making in SNS tourism marketing. Although there are many studies on SNS marketing, unlike previous resea...

A study on secure user authentication and authorization in OAuth protocol

When developing the client with the social network service, the OAuth protocol gets to be mostly followed. The OAuth protocol is the protocol which is being most much used in the company providing the social network service as the protocol which doesn’t expose the user certification information in 3rd Party and is developed in order to give the user resources accessible rights like Google or facebook, twitter, and etc. However, when of the authentication information of this user is exposed on network by the attacker, there is the malicious problem that it can be used. It can classify as the replay attack, phishing attack, and impersonation attack as the general security vulnerability which it can happen in this OAuth protocol. Therefore, before the Access Token is issued in order to this solve the security vulnerability in the OAuth protocol. By using E-mail, the resource owner is authenticated and the access token is safely issued. And it distribute the Access Token and stores. When using the proposed method, it uses the E-mail authentication less than 0.8% can confirm the authentication success rate of the attacker to be safer than the existing method. Because of distributes the access token and storing, although the attacker won the some of user information, it would not allow to use for the user authentication. When seven over distributed the access token, it can check that as in the E-mail authentication it can use since the release time of the access Token has 10 min or greater.

Convertible Nominative Signatures from Standard Assumptions without Random Oracles

While standard signatures provide an efficient mechanism for information certification, the lack of privacy protecting measures makes them unsuitable if sensitive or confidential information is being certified. In this paper, we revisit nominative signatures, first introduced by Kim, Park and Won, which provides the functionality and security guarantees required to implement a certification system allowing the user (and not the authority) to control the verifiability of an obtained certificate. Unlike systems based on related primitives, the use of nominative signatures protects the user against authority information leaks and impersonation attacks based on these. We refine the security model of nominative signatures, and propose a new efficient scheme which is provably secure based on the computational Diffie-Hellman problem and the decisional linear problem. To the best of our knowledge, our scheme is the the only nominative signature scheme which is provably secure in the standard model based on standard assumptions. Furthermore, unlike most previous schemes, the proposed scheme provides signatures which hide both the signer and user identity. Hence, through our nominative signature scheme, we achieve an efficient non-transferable user certification scheme with strong security guarantees.

A Study on Service Architecture for Secure Authentication System

This study designed a safe combined certification system by approaching the matter of certification upon recent expansion of the cyber world and the market size of mobile shopping through a newer plan. Recently, mobile field has drawn much attention and it is used for most means of living for users like purchase of commodity, payment, and user certification. The mobile economy also grows by this trend, but hacking accidents or financial crimes are also in full swing. It is expected that the service for mobile in the future will increase more than ever, but in security aspects we still use problematic certification and security system. Data control service in the future is expected to do a lot with the service, which basically stores all services in phones as well as service providers through cloud service. Data control service will lead to the expansion of IoT (Internet of Things) service, as it substitutes existing off-line backup and safely provide user data regardless of location or kinds of devices. That is, users can use data from the devices connected to the Internet without copying or moving to devices users want to use. To use this data safely, establishing a certification system of users will be an ever more important factor. Therefore, this treatise is going to suggest the plan that we can conduct the certification in a safer way among several threats. In particular, mobile hacking is a very serious and important issue, as it could directly lead to monetary loss. When certification is insufficient, the possibility of a third party reaping benefits through hacking is greater. This treatise is going to suggest a model that service providers can provide safe certification service by performing verification of transaction and data through electronic certification. Building of a combined and safe certification system upon recent FinTech boom is a very important factor and this study is going to suggest various structures in aspects of security and convenience. Keyword: Certificate, ISP, Authentication, Mobile, Payment

소셜 네트워크 서비스의 만족도를 위한 연구 - 인스타그램과 페이스북의 기능적 요소를 중심으로 -

In a digital environment that is keep in change content from smart phones to tablet PC are a social network service is holding deep place in our lives. Social networking applications has building a network and communication with others than other application, it means that Social networking applications are sharing not only personal purpose in that trend of variety and competition of these social networks can be expected to trend and be developed thru analysis of user certification. this study of social network service application is proposed to developing of application thru analyze the two-effective application which is high ranked in google store. the theoretical foundation was set based on the seven elements of the social network service of the information structures designed by Jean Smith. This study proceeded analysis is for the functional elements of Facebook and Instagram, and the advantages and disadvantages through survey research. As a result of the empirical analysis to user of Instagram and face book of communication, identity, satisfaction for the group are equally. Instagram is about the presence, reputation, and Facebook has had a high level of satisfaction for each sharing and relationship. Facebook got high satisfaction from sharing features, but user feel of discomfort in the randomly showing advertising content. Instagram is not showing off advertise on common page of content, it is good point to be complementary to facebook. And, Instagram hashtag is good for convenience, but satisfaction is high with Facebook. in order to increase the satisfaction of Instagram, it is necessary to consider the main advantage of the communication and the functional aspects of the share from facebook.

Design of IP Camera Access Control Protocol by Utilizing Hierarchical Group Key

Unlike CCTV, security video surveillance devices, which we have generally known about, IP cameras which are connected to a network either with or without wire, provide monitoring services through a built-in web-server. Due to the fact that IP cameras can use a network such as the Internet, multiple IP cameras can be installed at a long distance and each IP camera can utilize the function of a web server individually. Even though IP cameras have this kind of advantage, it has difficulties in access control management and weakness in user certification, too. Particularly, because the market of IP cameras did not begin to be realized a long while ago, systems which are systematized from the perspective of security have not been built up yet. Additionally, it contains severe weaknesses in terms of access authority to the IP camera web server, certification of users, and certification of IP cameras which are newly installed within a network, etc. This research grouped IP cameras hierarchically to manage them systematically, and provided access control and data confidentiality between groups by utilizing group keys. In addition, IP cameras and users are certified by using PKI-based certification, and weak points of security such as confidentiality and integrity, etc., are improved by encrypting passwords. Thus, this research presents specific protocols of the entire process and proved through experiments that this method can be actually applied.

A Study of Key management Protocol for Secure Communication In Personal Cloud Environment

Personal cloud computing is user-oriented service to satisfy user service demand in existing cloud circumstance and personalized service is available whenever, wherever. However due to personal cloud market is growing rapidly, accidents such as unauthorized user access, leak of secret information, service invasion are occur and existing wire or wireless network communication had been threaten on security. Also the studies about user certification and data management are required. So this paper suggested key generating protocol for user certification and user authority. In addition, it designed safe contents transfer protocol for user by using generated key value. It analyzed the security with referring security service requirement of existing personal cloud service.

Non-Western Script Based Off-Line Handwritten Signature Technology: A Survey

Recognition and verification systems plays very critical role in the area of information security as they are very essential to user certification. In resent years, off-line signature recognition and verification receiving renewed interest and only one of several techniques used to verify the identities of individuals, also that one of the biometric techniques. Signatures offer a secure means for confirmation and authorization in legal documents. Thus, nowadays the signature identification and verification becomes an indispensable part for including embedded signatures of automating the rapid processing of documents. Researchers have been proposed various approaches for handwritten signature recognition and verification in the past years. This paper presents a survey for non-western handwritten signature based offline signature verification and identification. In this area, the accuracy rates obtained so far from the available systems is not sufficiently high, and more researches on off-line signature verification as well as off-line signature identification are required.

Non-Western Script Based Off-Line Handwritten Signature Technology: A Survey

Recognition and verification systems plays very critical role in the area of information security as they are very essential to user certification. In resent years, off-line signature recognition and verification receiving renewed interest and only one of several techniques used to verify the identities of individuals, also that one of the biometric techniques. Signatures offer a secure means for confirmation and authorization in legal documents. Thus, nowadays the signature identification and verification becomes an indispensable part for including embedded signatures of automating the rapid processing of documents. Researchers have been proposed various approaches for handwritten signature recognition and verification in the past years. This paper presents a survey for non-western handwritten signature based offline signature verification and identification. In this area, the accuracy rates obtained so far from the available systems is not sufficiently high, and more researches on off-line signature verification as well as off-line signature identification are required.

온라인 소액결제 시스템에서 금융정보 보호를 위한 스마트카드 기반의 프로토콜 설계

This study provides two channel structure and two factor authentication. First, a purchasing request by Internet and then user certification and a settlement approval process by mobile communication. Second, it support that proposal protocol utilize a partial factor value of stored in users smartcard, smart phone and password of certificate. Third, storage stability is improved because certificate store in smartcard. Finally, proposal protocol satisfy confidentiality, integrity, authentication, and non- repudiation on required E-commerce guideline. In comparative analysis, Efficiency of the proposal protocol with the existing system was not significantly different. But, In terms of safety for a variety of threats to prove more secure than the existing system was confirmed.

Component Analysis of Respirator User Training

Respirators must be properly used to be effective. In an experimental protocol, 145 subjects were trained and then observed donning and doffing respirators. Filtering facepiece and dual cartridge half face mask types were studied. Subjects were then tested for knowledge and for proper performance using video recording analysis. Knowledge tests showed adequate learning, but performance was often poor. Inspection, strap tension (half mask), seal checking, and avoiding mask contact during doffing were particularly problematic. Mask positioning was generally well done. Correlation between knowledge and performance for specific items was generally poor, although there was a weak correlation between overall knowledge and overall performance (rho = 0.32) for the half mask users. Actual unprompted performance as well as knowledge and fit-testing should be assessed for user certification. Respirator design approval should consider users' ability to learn proper technique.

Optical identity authentication scheme based on elliptic curve digital signature algorithm and phase retrieval algorithm

An optical identity authentication scheme based on the elliptic curve digital signature algorithm (ECDSA) and phase retrieval algorithm (PRA) is proposed. In this scheme, a user's certification image and the quick response code of the user identity's keyed-hash message authentication code (HMAC) with added noise, serving as the amplitude and phase restriction, respectively, are digitally encoded into two phase keys using a PRA in the Fresnel domain. During the authentication process, when the two phase keys are presented to the system and illuminated by a plane wave of correct wavelength, an output image is generated in the output plane. By identifying whether there is a match between the amplitude of the output image and all the certification images pre-stored in the database, the system can thus accomplish a first-level verification. After the confirmation of first-level verification, the ECDSA signature is decoded from the phase part of the output image and verified to allege whether the user's identity is legal or not. Moreover, the introduction of HMAC makes it almost impossible to forge the signature and hence the phase keys thanks to the HMAC's irreversible property. Theoretical analysis and numerical simulations both validate the feasibility of our proposed scheme.

IPTV 서비스를 이용하는 사용자의 효율적인 성인인증 모델 설계

Recently IPTV that transmits multimedia contents in real time through internet, cable TV net and satelite net gets the limelight. But IPTV service that gives service to users by various media has a problem of not supporting user certification fully. This paper suggests a certification model which prevents getting access permission of IPTV service by sending illegal certification information by adolescent through integrating mobile communication technique with RFID(Radio Frequency IDentification) technique which is a key technique of Ubiquitous environment. This model performs the process of adult certification by keeping synchronization with user's certificaiton information that is saved in data-base of certification server and contents server after getting the system of class categorization in contents server to overcome disadvantage of simple adult certification system that is popular in the existing internet. Also, it adapts double hash chain technique not to down load illegally contents without the permission of manager even if an adolescent gets manager's approval key.

Metrics and Methods for Evaluation of Over-The-Air Performance of MIMO User Equipment

Commercial User Equipment (UE) testing and certification has become more complex for state-of-the-art mobile communication standards such as 3rd Generation Partnership Project (3GPP) Long-Term Evolution (LTE) due to the extensive use of Multiple Input-Multiple Output (MIMO) transmission techniques. The variety of different MIMO operating modes and the almost unlimited choice of possible multipath channel conditions under which UE performance may be evaluated are not accounted for by established Single Input-Single Output (SISO) Over-The-Air (OTA) performance metrics like Total Isotropic Sensitivity (TIS) and Total Radiated Power (TRP). As pointed out in this contribution, meaningful metrics and cost-effective, low-complexity measurement methods can, nevertheless, be derived by focusing on characterization of the physical attributes of UE and by adopting statistical metrics. Starting from a brief review of the most important MIMO operating modes in the 3GPP LTE standard, the relation between UE properties and UE performance, which is observed in these operating modes, is discussed. Two complementary metrics and corresponding measurement procedures for evaluation of MIMO OTA performance are presented in order to address the diversity of possible propagation scenarios. Measurement results from preliminary implementations of the two proposed measurement procedures, including comparison between different LTE devices, are presented.

Evaluation of Nonnuclear Soil Moisture and Density Devices for Field Quality Control

When new transportation infrastructure is constructed or current infrastructure systems undergo maintenance, sufficient soil strength is critical to a successful construction effort. Currently, soil design specifications are given for a minimum soil density and a specified range of soil moisture content. Quality control is achieved by monitoring the soil density and moisture content throughout the construction process. The nuclear density gauge (NDG) is most commonly employed to determine soil density and moisture content because of its ease of use, speed of readings, and reliability of results. However, potential safety hazards and rigorous user certification requirements have led many agencies to seek alternative devices. This paper focuses on a portion of a much larger study that compared a wide range of compaction control devices; the paper also assesses the performance of devices that measure soil density and moisture content. Several new, commercially available alternatives for the measurement of soil density were tested on various soil types and conditions to determine which device performed best and most consistently. For the same soil types and conditions, several devices and techniques for the determination of soil moisture content were also tested. The combination of the TransTech soil density gauge and the heated frying pan–open flame field moisture content techniques represented the best alternative to the NDG.

A System Unauthorized Access using MAC Address and OTP

This study improves the existing user identification method using user ID and password. The new protocol protecting unauthorized access is designed and developed using user's ID, password, and OTP for user certification as well as MAC address for computer identification on networks. The safety on trials of unauthorized certification is tested and analyzed for four types following the criterion of information acquisition.