보안성 향상을 위한 IoT 서비스 시스템 구현 및 평가
Implementation and Evaluation of IoT Service System for Security Enhancement
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
사물인터넷은 다양한 사물들로부터 발생되는 정보를 수집·공유·분석하여 사람들에게 유용한 정보 서비스를 제공하는것을 의미한다. 본 논문은 사물인터넷 환경에서 발생하는 서비스 접근제어, 서비스 보안 기술 그리고 ID 관리 기술에대한 서비스 영역에서의 보안 안전성을 향상시키는 방안을 제시한다. 서비스 보안의 안전성 향상을 위해 공개키 기반의C&C(Certificate and Capability) 서비스 토큰 인증서를 설계하고 발급할 수 있는 서비스를 구현하였다. 또한 노드 디바이스로부터 수집된 데이터를 기반으로 리소스 서비스의 생성 시 이를 효율적으로 관리하고자 LCRS(Left Child-Right Sibling) 리소스 모델관리 방안과 서비스에 대한 접근제어를 위해 리소스 서비스 URI 보안 관리하는IoT 서비스 시스템을 구현하였다.
Abstract
Internet of Things includes the whole process of collected information generated from a variety of objects, as well as analyzing and sharing it, and providing useful information services to people. This study seeks ways to improve security and safety in the areas of service security technology, ID management technology and service access control, all of which take place in the IoT environment. We have implemented the services that can design and issue C&C (Certificate and Capability) service token authentication, which is based on a public key, to improve the service security. In addition, we suggest LCRS (Left Child-Right Sibling) resource model management for the efficient control of resources when generating the resource services from the data collected from node devices. We also implemented an IoT services platform to manage URL security of the resource services and perform access control for services.
참고문헌 (15)
- Ho-won Kim, "Issues of Security", privacy in IoT Enviroment, 2014, pp.153, 35~39
- Internet of Things for creating economies based on promising market prospects and challenges, "Yun-hee Lee", National Information Society Agency, ~ (2013)
- JoseL. Hernandez-Ramos, "SAFIR : Secure access framework for IoT-enabled services on smart buildings", Journal of Computerand System Sciences, 81, pp.1452~1463 (2015)
- Jayavardhana Gubbi, "Internet of Things(IoT) : A vision, architectural elements, and future directions", Future Generation Computer Systems, 29, pp.1645~1660 (2013)
- Jos´e L. Hern´andez-Ramos, "Distributed Capabilitybased Access Control for the Internet of Things", Journal of Internet Services and Information Security, 3(3, pp.4) (2013), 1~16
- S. Gusmeroli, "A capability-based security approach to manage access control in the Internet of Things", Mathematical and Computer Modelling, 58, pp.1189~1205 (2013)
- "Common Vulnerability Scoring System"[URL]
- "The Legion of the Bouncy Castle"[URL]
- "National Vulnerability Database"[URL]
- 김진보, "CapSG를 이용한 IoT 서비스 접근제어 플랫폼", 정보처리학회논문지. 소프트웨어 및 데이터 공학, 4(9), pp.337~346 (2015), 한국정보처리학회[DOI]
- Youn-sung Nam, "A Study of Capability Token Management for Authentication and Access control in the Internet of Things", Korea information processing society, 22(2), pp.756~758 (2015)
- Deresa Jang, "A Study of Resource Service Management Model for IoT Service Access Control", Korea information processing society, 22(2), pp.664~667 (2015)
- Jong-hyeon Park, "The Future of the Internet of Things", The Electronic Times, ~ (2014)
- Deresa Jang, "Privacy-preserving Access Control in the IoT Service Platform", MITA 2016, pp.52~54 (2016)
- Internet of Things standards and implementing technical trends CoAP, "Seok-kap Ko", IITP, ~ (2014)