User attribute verification method using user mobile dynamic information
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Various supplementary authentication methods are used to supplement user authentication and authorization provided by existing password verification online1. In recent years, authentication and authorization methods using user attribute information have been studied and utilized in various services. User attribute information can be divided into static information and dynamic information. The existing methods focus on research to identify users using dynamic information or to generate challenge questions for user reauthentication. Static information such as a user's home address, school, company, etc. is associated with dynamic information such as location information. We propose a method to verify user attribute information by using the association between two attribute information. For this purpose, the static information of the user is verified by using the user 's location record which is dynamic information. The experiment of this paper collects the dynamic information of the actual user and extracts the static information to verify the user attributes. And we implemented the user attribute information authentication system using the proposal verification method and evaluated the utility based on applicability, convenience, and security.
Abstract
Various supplementary authentication methods are used to supplement user authentication and authorization provided by existing password verification online1. In recent years, authentication and authorization methods using user attribute information have been studied and utilized in various services. User attribute information can be divided into static information and dynamic information. The existing methods focus on research to identify users using dynamic information or to generate challenge questions for user reauthentication. Static information such as a user's home address, school, company, etc. is associated with dynamic information such as location information. We propose a method to verify user attribute information by using the association between two attribute information. For this purpose, the static information of the user is verified by using the user 's location record which is dynamic information. The experiment of this paper collects the dynamic information of the actual user and extracts the static information to verify the user attributes. And we implemented the user attribute information authentication system using the proposal verification method and evaluated the utility based on applicability, convenience, and security.
참고문헌 (10)
- H. Y. Youm, "Guideline on Identity Proofing Management", TTA Journal, 167, pp.78~82 (2016)
- K. H. Kim, "Gap Analysis of ISO", IEC 29115 and ISO, Review of Korean Society for Internet Information, pp.2015, 16[DOI]
- 신영진, "한국에서의 본인확인수단 개선방안에 관한 연구", 한국지역정보화학회지, 18(4), pp.59~88 (2015), 한국지역정보화학회[DOI]
- E. M. Underwood, "Social age verification engine", U.S. Patent 8 671 453, ~ (2014)
- L. Li, "Searching in the dark : A framework for authenticating unknown users in online social networks", Proc. Glob. Commun. Conf. (GLOBECOM), pp.714~719 (2012)
- James Clause, "Dytan:A Generic Dynamic Taint Analysis Framework", Proceedings of the 2007 International Symposium on Software Testing and Analysis, ISSTA '07, pp.196~206 (2007), ACM
- Manuel Egele, "PiOS: Detecting Privacy Leaks in iOS Applications", Proceedings of the Network and Distributed System Security Symposium, NDSS '11 (2011)
- Maxwell Krohn, "Information Flow Control for Standard OS Abstractions", Proceedings of 21st ACM SIGOPS Symposium on Operating Systems Principles, SOSP '07, pp.321~334 (2007)
- Lok Kwong Yan, "DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis", Proceedings of the 21st USENIX Conference on Security Symposium, Security '12, pp.29~29 (2012)
- Rolland, C, "Bridging the Gap Between Organisational Needs and ERP Functionality", RE Journal, 5(3), pp.180~193 (2000), Springer