컴플라이언스 기반의 발전된 모바일 기기 생체 인증 모델
Advanced Mobile Devices Biometric Authentication Model Based on Compliance
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 국내외 핀테크의 발전과 더불어 모바일 결제 시장에서 생체 인식 기술을 이용한 FIDO(Fast IDentityOnline)가 기존의 패스워드 방식을 대체하며 빠르게 성장하고 있다. 이러한 FIDO 인증은 민감한 생체정보를 처리해야 하므로 반드시 높은 보안성이 요구되는 신뢰할 수 있는 환경에서 처리가 이루어져야 한다. 그러나 이러한 신뢰할 수 있는 환경은 스마트폰의 특정 하드웨어에서 지원하므로 제조사에 의존적일 수밖에 없다. 이에 본 논문에서는모바일 환경에서 특정 하드웨어가 탑재되지 않아도 보편적으로 안전하게 사용할 수 있는 컴플라이언스 기반의 생체정보의 분산 관리를 이용한 서버 기반의 인증 모델을 제안하고자 한다.
Abstract
Along with the recent worldwide development of fintech, FIDO (Fast IDentity Online) using biometric technology israpidly growing in the mobile payment market, replacing the existing password system. This FIDO authentication must beprocessed in a reliable environment that requires high level of security, as sensitive biometrics is being processed. However,this environment is currently dependent on the manufacturer as it is supported by certain hardware on the smartphone. Therefore, this thesis proposes a server-based authentication model using distributed management of compliance basedbiometric information that can be used universally safely without the need for specific hardware in mobile environments.
참고문헌 (30)
- Bouazzouni Mohamed Amine, "Trusted mobile computing: An overview of existing solutions", FUTURE GENERATION COMPUTER SYSTEMS THE INTERNATIONAL JOURNAL OF ESCIENCE, 80, pp.596~612 (2018)[DOI]
- Prathamesh Raut, "Device Fingerprinting for Secure User Enrollment using TEE", International Journal of Science and Research, 6(3), pp.1410~1412 (2017)
- Hang Jiang1, "An Effective Authentication for Client Application Using ARM TrustZone", Information Security Practice and Experience - 13th International Conference, pp.802~813 (2017)
- Cui Jinhua, "Securing Display Path for Security-Sensitive Applications on Mobile Devices", Computers, Materials & Conua, 55(1), pp.17~35 (2018)
- 조화건, "FIDO 생체기술과 안전영역을 연계한공인인증서 효율화 방법", 디지털융복합연구, 15(8), pp.183~193 (2017), 한국디지털정책학회[DOI]
- Sanggi Jeon, "A Survey of Components and Application Technologies of the Trusted Execution Environment", Proceedings of Symposium of the Korean Institute of communications and Information Sciences, pp.65~66 (2017)
- Kim GeonLyang, "Secure user authentication based on the trusted platform for mobile devices", EURASIP JOURNAL ON WIRELESS COMMUNICATIONS AND NETWORKING, pp.15~ (2016)
- Jong-Moon Yoon, "A Status and prospect of mobile payment technology", KISDI Research Report, 27(22), pp.24~40 (2015)
- Su-Hyeong Kim, "FIDO standard technology trend", TTA Journal, pp.70~75 (2016)
- Lee Donghun, "A first course in Modern Cryptography", pp.283~ (2012)
- "FIDO UAF Authenticator Commands v1.0"[URL]
- Jong-Seon Park, "Next Generation Certified FIDO and Biometrics", Eugemef Journal (2016)
- FIDO alliance, "A Guideline for Telebiometric Protection" (2005)
- Telecommunications Technology Association, "A Guideline for Telebiometric Protection" (2005)
- Korea Communications commission, "A Guideline for the protection of Biometric", ~ (2017)
- Saurabh Kulkarni, "Analyzing Trusted Elements in Mobile Devices" (2015)
- Security Research Department Security Technology Team, "Detailed analysis of the latest Android TrustZone vulnerability" (2015)
- Jason Kim, "K-NBTC International Standard Activities & Test Services", Korea Internet & Security Agency, ~ (2015)
- ARM, "Securing the Future of Authentication with ARM Trust Zone-based Trusted Execution Environment and Fast Identity Online (FIDO)" (2015)
- 전정훈, "바이오 인증 기술의 활성화에 따른 보안 위험성에 관한 연구", 융합보안 논문지, 16(5), pp.57~63 (2016), 한국융합보안학회
- 이병천, "복수 K-FIDO 기기 환경에서의 인증키 관리", 정보보호학회논문지, 27(2), pp.293~303 (2017), 한국정보보호학회[DOI]
- Hyeonjong Ki, "ISO", IEC JTC1, The monthly technology & standards, pp.2007, 46~50
- Dr Stephen Elliott, "JTC 1 SC 37 - 'Biometrics' International Standards", Purdue University, ~ (2007)
- 2017 State of authentication report, "FIDO alliance", ~ (2010)
- Kai Fan, "U2F based Secure Mutual Authentication Protocol for Mobile Payment", IACM International Conference Proceeding Series (2017)
- Jang J, "URetrofitting the Partially Privileged Mode for TEE Communication Channel Protection", IEEE Transactions on Dependable and Secure Computing (2018)
- Aravind Machiry, "BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments", Network and Distributed System Security Symposium (2017)
- Togan M, "A smart-phone based privacy-preserving security framework for IOT devices" (2017)
- Biometrics Global Certification FIDO, Domestic Business Activity Report, "Boannews", ~ (2018)
- H.Nishimura, "Secure authentication key sharing between mobile devices based on owner identity", 2018 Fourth International Conference on Mobile and Secure Services (2018)