• The Journal of the Korea Contents Association
• /
• v.11 no.2
• /
• pp.40-53
• /
• 2011

This paper proposes methods of evaluating and measuring accessibility of accredited certificate subscriber software which is one of crucial applications to submit personal certifications while web surfing. The presented methodology is to evaluate accessibility by using a certain assessment tool and is to normalize accessibility level into points, so that the software developers who are unfamiliar to screen readers can easily perform accessibility evaluation. The software from the major 78 organizations has went through the assessment. Those of 48 organizations, 62% out of the total, have acquired less than 70 points, implying the software of them is not accessible by the blind. The remaining 18 software got the highest point(88), are partly inaccessible by the blind that uses screen readers. This implies that the proposed methods are applicable to evaluate the accessibility of the software.

• Journal of Digital Convergence
• /
• v.15 no.8
• /
• pp.183-193
• /
• 2017

Digital accredited certificates issued under the Digital Signature Act provide essential functionalities for online service, so certificates are used for various services such as online banking, e-government. However, certificates can be stolen by hackers and users need to install separate software to use certificates. Recently FIDO, which aims to solve the problems of password-based authentication and the lack of interoperability between authentication methods, is used for biometric authentication and TrustZone, hardware-based secure environment, is used for safe smartphone usage. In this paper, the new service method is suggested which uses FIDO-based biometric authentication and stores certificates in TrustZone. This method can not only improve security and convenience but also be easily applied to the service because it uses built-in functionalities of new smartphones such as biometric sensors and TrustZone. It is expected that people can use certificates in a safe and convenient way with this method.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.29 no.5
• /
• pp.1049-1062
• /
• 2019

The national accredited certificate is a user certificate issued based on the user's personal information, which has been identified in advance, and has become a universal authentication method used for most electronic financial transactions and user authentication. And it contributed a lot to the use of e-government and domestic service. However, due to the lack of web standards on how to use, it was inconvenient to install a separate plug-in, and efforts to improve it have been continued. In this paper, we attempt to solve the problem of certificate usage environment by presenting the certificate digital signature method using the extension of the FIDO2 (Fast Identity Online v2) client to authentication protocol (CTAP) specification.

• Electronics and Telecommunications Trends
• /
• v.36 no.4
• /
• pp.135-144
• /
• 2021

The field of user authentication in Korea has experienced new dimensions since December 2020. Accredited certificate, which had been in use for 21 years since 1999, has been abolished. Accredited certificates have provided a trust foundation for various ICT-based industrial developments; however, new changes in the authentication sector are also required due to changes in the service and policy environment. Changes in the service environment occur rapidly because of the emergence of new technologies such as AI, IoT, Bio, Blockchain, and the daily use of non-face-to-face environments caused by COVID-19. Even with changes in the service environment, user authentication remains an essential foundation for providing services. This paper summarizes the current status of user authentication techniques, analyzes major changes in the service environment (such as Metaverse) associated with user authentication, and presents the direction of authentication techniques (Decentralized, Invisible, Privacy-preserving) through the derived implications.

• Journal of Internet Computing and Services
• /
• v.18 no.4
• /
• pp.69-78
• /
• 2017

We expect that the accredited certificate-based open banking, which is actively deployed in recent times, will solve the Galapagosization problem of the existing accredited certificate-based closed banking by supporting standard communication protocol and web compatibility. However, it is questionable how much the open banking will answer the security and usability problems of the existing closed banking. This paper is focused on analyzing the differences between the existing closed banking and the open banking, and then evaluates how much the security and usability problems of the existing closed banking are resolved by the open banking. The study firstly analyzes the security vulnerabilities raised in the process of providing closed banking services for the past 15 years or more, the countermeasures applied to enhance security, and the convenience impact of countermeasures. And then, the security and convenience of the open banking is inferred by analyzing the implementation difference between the closed banking and the open banking. The paper also briefly discusses how to improve the open banking to resolve the remaining problems of the open banking.

• The Journal of Society for e-Business Studies
• /
• v.16 no.4
• /
• pp.1-16
• /
• 2011

A digital certificate mandated by the Electronic Signature Act has become familiar in our daily lives as 95% of the economically active population hold certificates. Due to upgrades to 256 bit level security that have become effective recently, the security and reliability of digital certificates are expected to increase. Digital certificates based on Public Key Infrastructure (PKI) have been known as "no big problem," but the possibility of password exposure in cases of leaked digital certificates still exists. To minimize this vulnerability, various existing studies have introduced alternative password methods, expansion of certificate storage media, and multiple certification methods. These methods perform enhanced functions but also have limitations including the fact that the secureness of passwords is not guaranteed. This study suggests an alternative method for enhancing the level of password secureness as a way to improve password security. This new method improves security management and enhances the convenience of using digital technologies. The results may be used for developing digital certificate related security technologies and research in the future.

• Korean Journal of Clinical Pharmacy
• /
• v.25 no.4
• /
• pp.209-215
• /
• 2015

The aim of the research was to explore post-registration training opportunities for NHS hospital pharmacists which contributes to promote structural reform of the professional development and lifelong learning for Korean hospital pharmacists. In UK, all pharmacists are required to complete at least 9 Continuing Professional Development (CPD) entries per each year to maintain their professional registration. Types of accredited postgraduate qualification (part-time) in Pharmacy Practice available for hospital pharmacists are Postgraduate Certificate (PgCert, year 1), Postgraduate Diploma (PgDip, year 2), Master of Science (MSc year 3), and Professional Doctorate in Pharmacy programme (DPharm, 4-5 years or more). Clinical pharmacy diploma is more likely to become a minimum qualification in order to progress whilst working for the NHS. Pharmacy independent prescribers are allowed to prescribe all medications except cocaine, dipipanone, and diamorphine for the purpose of treating addiction within their competencies. NHS pharmacists are also classified by band point system depending on their practical/clinical knowledge and skills which starting from band 5 (Pre-registration pharmacist) up to band 9. Various learning and development options are also offered including teaching sessions, conferences and local forums.

• KIPS Transactions on Computer and Communication Systems
• /
• v.7 no.2
• /
• pp.49-58
• /
• 2018

A certificate is a means to certify users by conducting the identification of the users, the prevention of forgery and alteration, and non-repudiation. Most people use an accredited certificate when they perform a task using online banking, and it is often used for the purpose of proving one's identity in issuing various certificates and making electronic payments in addition to online banking. At this time, the issued certificate exists in a file form on the disk, and it is possible to use the certificate issued in an existing device in a new device only if one copies it from the existing device. However, most certificate duplication methods are a method of duplication, entering an 8-16 digit verification code. This is inconvenient because one should enter the verification code and has a weakness that it is vulnerable to security issues. To solve this weakness, this study proposes a method for enhancing security certificate duplication in a multi-channel using TCP and BLE. The proposed method: 1) shares data can be mutually authenticated, using BLE Advertising data; and 2) encrypts the certificate with a symmetric key algorithm and delivers it after the certification of the device through an ECC-based electronic signature algorithm. As a result of the implementation of the proposed method in a mobile environment, it could defend against sniffing attacks, the area of security vulnerabilities in the existing methods and it was proven that it could increase security strength about $10^{41}$ times in an attempt of decoding through the method of substitution of brute force attack existing method.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2005.11a
• /
• pp.961-964
• /
• 2005

디지털홈 서비스는 기존 PC에서 제공하던 서비스와 차별화된 서비스를 실용화 하지 못하고 있는 이유 중에 하나는 오프라인에서 제공하던 의료, 법률, 교육 등의 서비스를 가정에 맞게 직접 제공하고 있지 못하기 때문이다. 이를 위하여 본 논문에서는 온라인에서 의사, 변호사와 안전하게 거래할 수 있도록 국가자격 인증기반을 구축하고자 이에 필수적인 검증 가능한 온라인 자격증 발급을 위하여 기존 공인인증서에 자격필드를 추가하거나, 기존 공인인증서를 그대로 사용하거나, 별도의 자격인증서를 발급하는 등 세 가지 발급모델을 제시한다. 또한 이러한 세 가지 발급모델의 장단점을 비교 분석하여 향후 자격인증기반 구축할 때 선택할 수 있는 기준을 제시한다. 마지막으로 기 제시된 세 가지 발급 모델 중에 자격필드가 추가된 공인인증서를 이용하여 의료서비스(E-Health)를 받는 서비스 모델 시나리오를 제안하고자 한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2017.11a
• /
• pp.357-359
• /
• 2017

기존의 공인인증서는 한번 은행에서 발급 후 다른 은행에서 사용하려면 다시 등록해야 하는 번거로움이 존재한다. 또한 중앙 기관에서 공인인증서를 관리하기에 공격을 당했을 경우 개인정보 유출의 위험이 있다. 이에 대한 해결방안으로 은행 간에 블록체인을 사용하여 공인인증서를 발급 및 관리할 것을 제안한다. 블록체인은 다른 누구나 네트워크에 참여할 수 있고, 참여자 모두가 블록에 대한 검증을 하는 분산원장(Distribute Ledger) 기술을 사용하고 있다. 분산원장 기술로 공인인증서를 관리하면 사용자의 편의성 증대 및 보안 위협으로부터 안전할 것이다.