스마트폰 상의 안전한 바이오인식 시스템 설계를 위한 프레임워크
Framework for Secure Biometric System Design on Smartphones
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 스마트폰 기술의 빠른 발전과 핀테크의 등장으로 스마트폰은 더욱 많은 민감한 정보를 다루게 되었다. 이 같은 민감한 정보를 안전하게 보호하는 수단으로 바이오인식 기술이 적용된 다양한 기기들이 출시되고 있으나, 바이오인식 시스템 설계 시 보안을 고려하지 않을경우 잠재적인 취약점이 존재할 수 있다. 이에 본 논문에서는 잠재적인 취약점의 분석을 통해 스마트폰 상의 바이오인식 시스템 설계 과정에서 주의할 점을 분류하고, 이를 해결하기 위한 설계 요구사항을 제시한다. 또한, 설계 요구사항을 종합하여 안전한 스마트폰 바이오인식시스템 설계를 위한 프레임워크를 제시한다.
Abstract
Fast growth of smartphone technology and advent of Fintech enabled smartphones to deal with more sensitive information. Although many devices applying biometric technology are released as a step for protecting sensitive information securely, there can be potential vulnerabilities if security is not considered at the design stage of a biometric system. By analyzing the potential vulnerabilities, we classify threats in biometric system design process on smartphones and we propose the design requirements for solving these problems. In addition, we propose a framework for secure biometric system design on smartphone by synthesizing the design requirements.
참고문헌 (28)
- J. -H. Im., "Requirement for Secure Biometric System Design on Smartphones", Proceedings of Korea Information Processing Society Fall Conference, 22(2), pp.870~871 (2015)
- Ten industrial issue in internet and information security 2015, "Korea Internet & Security Agency(KISA)", INTERNT & SECURITY FOCUS, 25~16 (2015)
- U. Uludag., "Biometric Cryptosystems : Issues and Challenges", Proc. IEEE, 92, pp.948~960 (2004)
- N. K. Ratha., "Enhancing security and privacy in biometrics-based authentication systems", IBM Systems Journal, 40(3), pp.614~634 (2001)
- "HTC stored user fingerprints as image file in unencrypted folder"[URL]
- Y. -H. Jo., "Vulnerability Analysis on Smartphone Fingerprint Templates", pp.9~ (2015), Futuretech
- "Show of hands: Who hasn't hacked Apples's Touch ID?"[URL]
- A. K. Jain., "Pores and Ridges : High-Resolution Fingerprint Matching Using Level 3Features", IEEE Tranactions on Pattern Analysis and Machine Intelligence, 21(1), pp.15~27 (2007)
- "FIDO UAF Authenticator Commands v1.0"[URL]
- N. K. Ratha., "Generating Cancelable Fingerprint Templates", IEEE Tranactions on Pattern Analysis and Machine Intelligence, 29(4), pp.561~572 (2007)
- "DoD 5220.22-M, Operating Manual"[URL]
- R. Pappu., "Physical one-way functions", Science, 297, pp.2026~2030 (2002)
- G. E. Suh., "Physical Unclonable Functions for Device Authentication and Secret Key Generation", Design Automation Conference 2007. 44th ACM, 2007, 9~14
- "ARM Cortex-A8 Technical Reference Manual"[URL]
- "A8: Apple’s First 20nm SoC"[URL]
- "Snapdragon 810 Processor Specification"[URL]
- "Solution Overview"[URL]
- Yuxue Piao, "프로가드 난독화 도구 구조 및 기능 분석", 한국통신학회논문지B, 38(8), pp.654~662 (2013), 한국통신학회
- "Guardsquare"[URL]
- "DexGuard"[URL]
- "Themida"[URL]
- S. -Y. Jeon., "Potential Vulnerabilities and Solutions of Biometric Authentication on Smartphones", The 25th Joint Conference on Communications and Information (2015)
- "KNOX Apps"[URL]
- "About rooting Samsung KNOX-enabled devices and the KNOX warranty void bit"[URL]
- "ISO", IEC 9797-1 Std., Information technology - Security techniques - Message Authentication Codes (MACs) - Part 1: Mechanisms using a block cipher, 2011
- D. F. Smith., "Face Recognition on Consumer Devices : Reflections on Replay Attacks", IEEE Transaction on Information Forensics and Security, 10(4), pp.736~745 (2015)
- M. Vatsa., "Robust biometric image watermarking for fingerprint and face template protection", IEICE Electonic Express, 3(2), pp.23~28 (2006)
- M. Krieg., "Liveness Detection in Biometrics", Biometrics Special Interest Group (BIOSIG), 2015International Conference of the, pp.1~14 (2015)