• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.20 no.2
• /
• pp.289-298
• /
• 2016

Though, thanks to NPKI(National Public Key Infrastructure), the Korean secure Internet transaction environment has been rapidly grown in the last decade, it also faces with several problems, which need to be solved in near future, mainly resulted from the lack of openness and compatability of the NPKI-based environment which is operating in a closed way. It is believed that those problems of the NPKI can be solved when it is implemented to be based on the SSL/TLS, an international standard for web-based secure Internet transactions. The transition to the SSL/TLS-based NPKI needs to be performed so that the advantages of current NPKI are well maintained. The purpose of this paper is to comparatively analyze the NPKI and the SSL/TLS so as to give basic idea of implementing the current NPKI to be based on the SSL/TLS. The analysis will show not only how the SSL/TLS-based NPKI can improve current NPKI but also how the advantages of current NPKI can be maintained by the SSL/TLS-based NPKI.

• Journal of Digital Convergence
• /
• v.17 no.9
• /
• pp.161-171
• /
• 2019

Government transactions over wireless electronic devices are not safe and hence the messages are prone to attack. Thereby, devices supporting wireless Internet must assure the same level of security and privacy as the wired network. National public key infrastructure (NPKI) for electronic government used in the wired environment is not suitable for wireless environment for mobile government (mGovernment) because of the limitations of computing power, memory capacity and restricted battery power. This requires the development of a new NPKI for mGovernment, denoted as mNPKI, to developing countries, which provides the same security level as the wired NPKI. For the wireless environment requirements, mNPKI is based on short lived certificates. Analysis shows that mNPKI is well suited to wireless Internet and provides the same security requirement from the wired NPKI.

• Journal of Digital Convergence
• /
• v.8 no.4
• /
• pp.59-71
• /
• 2010

The purpose of this paper is the improvement of NPKI management policy in Korea. In order to reach the issue of EC certification problems, we examined first the institutions and system accredited NPKI for checking on the status and problems. We studied the alternatives for the improvement of NPKI system through brainstorming with experts, they had drawn possible scenarios and chosen optimal policy measures of the public key infrastructure.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.14 no.2
• /
• pp.85-100
• /
• 2004

Study and analysis on the digital certification of the world today, and census on how digital signature is being used or considered for the government will be used to sum of what can be the difficulties and Problems in operating digital signature certifications for the government administrations at this research, and of course the answers to these problems will be provided too. This research suggests practical ideas on how to interoperate between Government PKI (GPKI: Administrational Digital Certification for the Government) and National PKI (NPKI: Digital Certification for General Public ＆Business), how to make use of Standard Security APIs, how to manage (e.g. issue, reissue, update, revoke) digital certificate, how to improve technical side of security and reliability, and how to improve political issues on public education for information security. Digital certification will become more popular and widely used in government administrations in the future. Therefore, census and research on demands md satisfactions of digital certification for public and government will be regularly performed. Of course, continuous maintenances and improvement in this field will be necessary to obtain firmer way of information security.

• 한국IT서비스학회:학술대회논문집
• /
• 2008.05a
• /
• pp.18-23
• /
• 2008

본 연구는 2008년 하반기 전면 시행예정인 전자여권의 기반을 구성하고 있는 전자여권 PKI의 개념과, 국내외 적용되어 있는 현황을 소개한다. 국제민간항공기구(ICAO)와 유럽연합을 중심으로 추진되고 있는 전자여권 PKI에 대한 표준화 동향을 소개하고, 전자여권 PKI체계와, GPKI, NPKI 등 타 PKI체계와의 차이를 분석한다. 현재 논의되고 있는 전자여권 PKI에 대한 기술적인 이슈를 살펴보고 이에 대한 방안을 논의한다. 끝으로 기 논의된 기술적인 이슈 등의 분석을 통한 향후 발전방안을 제시한다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.04a
• /
• pp.907-909
• /
• 2002

전자 신뢰 매커니즘 기반의 정보사회에서는 기밀성과 인증의 확보가 필수적이며 이를 위해서는 전자서명 기술을 포함하고 있는 공개키 기반의 인증서관리 체계의 확립이 선결되어야 한다. [3] 인증서의 정당성을 검증하기 위해 검증자는 소유자의 인증서와 그 인증서를 인증한 공인인증기관의 인증서를 검증해야 하고, 이전에 인증서 폐지를 확인해야 하며, 실제 공개키 기반구조 환경에서 인증서의 유효성을 검증하기 위해서는 인증서 자체 검사와 함께 최상위 인증기관(루트CA)으로부터 사용자에게 인증서를 발행한 단말CA까지의 인증트리를 검증해야 한다[3]. 본 연구에서는 효율적인 인증서 폐지정보의 검증을 위해 다중 CA환경에 적합한 NPKI상에 B-Tree데이터구조를 적용하는 인증서 폐지 검증 방안을 제안하고자 한다.

• Journal of Internet Computing and Services
• /
• v.18 no.4
• /
• pp.69-78
• /
• 2017

We expect that the accredited certificate-based open banking, which is actively deployed in recent times, will solve the Galapagosization problem of the existing accredited certificate-based closed banking by supporting standard communication protocol and web compatibility. However, it is questionable how much the open banking will answer the security and usability problems of the existing closed banking. This paper is focused on analyzing the differences between the existing closed banking and the open banking, and then evaluates how much the security and usability problems of the existing closed banking are resolved by the open banking. The study firstly analyzes the security vulnerabilities raised in the process of providing closed banking services for the past 15 years or more, the countermeasures applied to enhance security, and the convenience impact of countermeasures. And then, the security and convenience of the open banking is inferred by analyzing the implementation difference between the closed banking and the open banking. The paper also briefly discusses how to improve the open banking to resolve the remaining problems of the open banking.