안전한 클라우드 서비스를 위한 상호의존적 다중세션 인증 기법 설계
A Design of Interdependent Multi Session Authentication Scheme for Secure Cloud Service
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Cloud computer technology currently provides diverse services based on a comprehensive environment ranging from hardware to solution, network and service. While the target of services has been extended from institutions and corporations to personal infrastructure and issues were made about security problems involved with protection of private information, measures on additional security demands for such service characteristics are insufficient. This paper proposes a multi-session authentication technique based on the characteristics of SaaS (Software as a Service) among cloud services. With no reliable authentication authority, the proposed technique reinforced communication sessions by performing key agreement protocol safe against key exposure and multi-channel session authentication, providing high efficiency of performance through key renewal using optimzied key table. Each formed sessions have resistance against deprivation of individual confirmation and service authority. Suggested confirmation technique that uses these features is expected to provide safe computing service in clouding environment.
Abstract
Cloud computer technology currently provides diverse services based on a comprehensive environment ranging from hardware to solution, network and service. While the target of services has been extended from institutions and corporations to personal infrastructure and issues were made about security problems involved with protection of private information, measures on additional security demands for such service characteristics are insufficient. This paper proposes a multi-session authentication technique based on the characteristics of SaaS (Software as a Service) among cloud services. With no reliable authentication authority, the proposed technique reinforced communication sessions by performing key agreement protocol safe against key exposure and multi-channel session authentication, providing high efficiency of performance through key renewal using optimzied key table. Each formed sessions have resistance against deprivation of individual confirmation and service authority. Suggested confirmation technique that uses these features is expected to provide safe computing service in clouding environment.
참고문헌 (16)
- Young-Won Kang, "Recent Trends of Cloud Computing Services", NET Term, ~ (2012)
- Cloud Computing: Defining and Describing an Emerging Phenomenon, "Daryl C. Plummer", Gartner Research, ~ (2008)
- IDC, "Worldwide and Regional Public IT Cloud Services 2013-2017 Forecast", ~ (2013)
- Gartner, "Forecast Overview: Public Cloud Services, Worldwide, 2011-2016", ~ (2013)
- Eui-Nam Heo, "Personal Cloud Security Technology and Privacy", Telecommunications Technology Association, TTA Journal, 139 (2012)
- 양환석, "공격정보 수집을 이용한 클라우드 서비스의 안전성 향상에 관한 연구", (사)디지털산업정보학회 논문지, 9(2), pp.73~79 (2013), (사)디지털산업정보학회
- 양정모, "클라우드 컴퓨팅의 신뢰성 향상 방안에 관한 연구", (사)디지털산업정보학회 논문지, 8(4), pp.107~113 (2012), (사)디지털산업정보학회
- Chul-Soo Im, "Cloud Computing Security Technology", Korea Institude of Information Security & Cryptology, 19(3), pp.12~15 (2009)
- Changes in the IT ecosystem and countermeasures according to the diffusion Cloud Services, "Ae-ra Kwon", Korea Information Technology Service Industry Association, ~
- Cloud Services Trends and Issues, "Hyun-Young Yoon", Korea Communication Agency, ~ (2011)
- Domestic and foreign market and policy trends in cloud computing, "Kwang-Seok Kim", National IT Industry Promotion Agency, ~ (2013)
- IBM, "IBM Global Technology Services, Thought Leadership White Paper" (2010)
- 김기철, "한국형 클라우드를 위한 정보보호 관리체계 평가 기준", 정보보호학회논문지, 23(2), pp.251~265 (2013), 한국정보보호학회
- CSA, "The Notorious Nine: Cloud Computing Top Threats in 2013", Cloud Security Alliance, ~ (2013)
- 고갑승, "보안성이 강화된 클라우드 서비스 평가·인증 체계에 관한 연구", 보안공학연구논문지, 9(6), pp.481~494 (2012), 보안공학연구지원센터
- Cloud Computing: Defining and Describing an Emerging Phenomenon, "Daryl C. Plummer", Gartner Research, ~ (2008)