본문 바로가기
KERD
논문KCI 등재

OTP를 이용한 인터넷뱅킹 시스템의 다중 채널 인증 기법

A Multichannel Authentication Technique In The Internet Banking System Using OTP

0

조회

0

다운로드

3

인용

0

참고문헌

키워드

초록

Due to the development of the Internet, Internet banking that we are liberated from time and space has evolved into banking system. So modern life became comfortable. However, Dysfunction (malicious Information leakage and hacking etc.) of the Internet development has become a serious social problem. According to this, The need for security is rapidly growing. In this paper, we proposed the Internet Banking Authentication System using a dual-channel in OTP(One Time Password) authentication. This technology is that A user transfer transaction information to Bank through one Internet channel then bank transfer transaction information to user using the registered mobile phone or smart phone. If user confirm transaction information then bank request user's OTP value. User create OTP value and transfer to bank and bank authenticate them throgth the ARS. If authentication is pass then transaction permitted. Security assessment that the proposed system, the security requirement that the confidentiality and integrity, authentication, repudiation of all of the features provide a key length is longer than the current Internet banking systems, such as using encryption, the security provided by the Financial Supervisory Service Level 1 rating can be applied to more than confirmed.

Abstract

Due to the development of the Internet, Internet banking that we are liberated from time and space has evolved into banking system. So modern life became comfortable. However, Dysfunction (malicious Information leakage and hacking etc.) of the Internet development has become a serious social problem. According to this, The need for security is rapidly growing. In this paper, we proposed the Internet Banking Authentication System using a dual-channel in OTP(One Time Password) authentication. This technology is that A user transfer transaction information to Bank through one Internet channel then bank transfer transaction information to user using the registered mobile phone or smart phone. If user confirm transaction information then bank request user's OTP value. User create OTP value and transfer to bank and bank authenticate them throgth the ARS. If authentication is pass then transaction permitted. Security assessment that the proposed system, the security requirement that the confidentiality and integrity, authentication, repudiation of all of the features provide a key length is longer than the current Internet banking systems, such as using encryption, the security provided by the Financial Supervisory Service Level 1 rating can be applied to more than confirmed.

참고문헌 (9)

  1. 박도권, "사이버침해 위협에 관한 연구", 박사, pp.2007
  2. 이창보, "Key 교환 기반의 RFID 상호 인증 프로토콜의 설계", 디지털산업정보학회논문지, 31~41 (2000)
  3. 이영교, "공인인증서를 이용한 익명인증 방법", (사)디지털산업정보학회 논문지, 6(1), pp.115~129 (2010), (사)디지털산업정보학회
  4. 김소정, "사이버범죄의 암호화된 증거 수집에 관한 연구", 한국정보보호학회논문지, 113~122 (2003)
  5. 금융감독원, "금융부문 암호 기술 관리 가이드", ~ (2010)
  6. 서승형, "OTP 기술현황 및 국내 금융권 OTP 도입사례", 한국정보보호학회논문지, 18~25 (2007)
  7. 국가정보원, "2008 국가정보보호백서", ~ (2008)
  8. N. Haller, "A One-Time Password Standard", IETF RFC 1938, ~ (1996)
  9. A. J. Menezes, "Handbook of Applied Cryptography", pp.395~397 (1997), CRC Press

관련 논문AI추천

이 간행물의 다른 논문 (27건)