Design and Implementation of an Automated Privacy Protection System over TPM and File Virtualization
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
In this paper, we propose the TPS (TPM-enhanced Privacy Protection System) which is an automated privacy protection system enhanced with a TPM (Trusted Platform Module). The TPS detects documents including personal information by periodic scanning the disk of clients at regular intervals and encrypts them. Hence, system manages the encrypted documents in the server. In particular, the security of TPS was greatly enhanced by limiting the access of documents including the personal information with regard to the client in an abnormal state through the TPM-based platform verification mechanism of the client system. In addition, we proposed and implemented a VTF (Virtual Trusted File) interface to provide users with the almost identical user interface as general document access even though documents containing personal information are encrypted and stored on the remote server. Consequently, the TPS automates the compliance of the personal information protection acts without additional users’ interventions.
Abstract
In this paper, we propose the TPS (TPM-enhanced Privacy Protection System) which is an automated privacy protection system enhanced with a TPM (Trusted Platform Module). The TPS detects documents including personal information by periodic scanning the disk of clients at regular intervals and encrypts them. Hence, system manages the encrypted documents in the server. In particular, the security of TPS was greatly enhanced by limiting the access of documents including the personal information with regard to the client in an abnormal state through the TPM-based platform verification mechanism of the client system. In addition, we proposed and implemented a VTF (Virtual Trusted File) interface to provide users with the almost identical user interface as general document access even though documents containing personal information are encrypted and stored on the remote server. Consequently, the TPS automates the compliance of the personal information protection acts without additional users’ interventions.
참고문헌 (22)
- Sophia Yan, "Massive data theft hits 40% of South Koreans", CNN Money, January 21, 2014, ~ (2014)
- 김민정, "개인정보 유출 사고 시 정보보호 기업의 주가 변동에 관한 연구", 정보보호학회논문지, 26(1), pp.275~283 (2016), 한국정보보호학회[DOI]
- Y.C-W, "Risk of Information Leak Growing in Korea", KOREA IT TIMES, July 10th, (2015), ~ (2015)
- "Korea Personal Information Protection Act. Article 24, paragraph 3", ~
- "Korea Personal Information Protection Act. Article 21, paragraph 2", ~
- "Korea Personal Information Protection Act. Article 21, paragraph 3", ~
- Hye-Lim Jeong, "TEAM :Virtual Synchronized File-based Transparent and Privacy-Enhanced Storage System", IJSIA, pp.285~294 (2016)
- 박기웅, "Design and Implementation of TPM-based Vehicle Data Logging System for Tamper-Resistant Data Collection", 한국차세대컴퓨팅학회 논문지, 9(4), pp.6~13 (2013), 한국차세대컴퓨팅학회
- 서병문, "랜덤 넌스와 타임스탬프 기반의 개선된 사용자 인증 스킴", 한국차세대컴퓨팅학회 논문지, 8(6), pp.69~76 (2012), 한국차세대컴퓨팅학회
- Mowbray, Miranda, "A client-based privacy manager for cloud computing", Proceedings of the fourth international ICST conference on COMmunication system softWAre and middlewaRE. ACM, pp.5~ (2009)
- Ji, Yi-mu, "A privacy protection method based on CP-ABE and KP-ABE for cloud computing", Journal of Software, 9(6), pp.1367~1375 (2014)
- Rahumed, Arthur, "A secure cloud backup system with assured dletion and version control", 2011 40th International Conference on Parallel Processing Workshops. IEEE, pp.160~167 (2011)
- Park, Ki-Woong, "THEMIS: A Mutually verifiable billing system for the cloud computing environment", IEEE Transactions on Services Computing, 6(3), pp.300~313 (2013)
- Joukov, Nikolai, "Adding secure deletion to your favorite file system", Security in Storage Workshop, 2005. SISW'05. Third IEEE International. IEEE, pp.2005~ (2005)
- GUTMANN, Peter, "Secure deletion of data from magnetic and solid-state memory", In:Proceedings of the Sixth USENIX Security Symposium, pp.77~89 (1996)
- Eastlake 3rd, D., "US secure hash algorithm 1 (SHA1)", No. RFC 3174, ~ (2001)
- MUTHITACHAROEN, Athicha, "A low-bandwidth network file system", ACM SIGOPS Operating Systems Review, pp.174~187 (2001)
- Daemen, Joan, "AES proposal: Rijndael", ~ (1999)
- 최동훈, "이질적 고성능 클라우드 컴퓨팅을 위한 확장형 OpenStack의 개발 및 평가", 한국차세대컴퓨팅학회 논문지, 12(3), pp.41~49 (2016), 한국차세대컴퓨팅학회
- 두 콩 튜안, "A New Thread Block Scheduling Technique for Improving the Performance of GPGPU Architecture", 한국차세대컴퓨팅학회 논문지, 11(4), pp.7~14 (2015), 한국차세대컴퓨팅학회
- 박달용, "워크플로우 모델링을 통한 IaaS 클라우드 플랫폼 구축 최적화", 한국차세대컴퓨팅학회 논문지, 10(6), pp.36~45 (2014), 한국차세대컴퓨팅학회
- 김진택, "클라우드컴퓨팅 기술 스택 분석", 한국차세대컴퓨팅학회 논문지, 11(6), pp.79~89 (2015), 한국차세대컴퓨팅학회