HECC를 이용한 DNA 기반 인증 체계에 대한 취약점 분석
Vulnerability Analysis for DNA-Based Authentication System Using HECC
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
DNA 암호화는 전산 DNA에서 새롭게 떠오르는 연구 분야이다. DNA 암호화는 일반 텍스트를 DNA 시퀀스로 변환하여 모빌리티 네트워크에서 비밀성을 제공하는 보다 안전하고 효율적인 기술인 모바일 사용자 인증으로 사용된다. 모빌리티 네트워크에서 인증 및 기밀 유지 서비스를 제공하는 것은 매우 중요하다. 인증과 기밀성을 제공하기 위한 HECC(Hyper Elliptic Curve Cryptography)는ECC, RSA, DES 등과 같은 다른 암호화 기술들 사이에서 인기가 있다. 최근 Madhusudhan R ·Shashidhara R은 HECC를 이용한 DNA 기반 인증 체계를 제안하면서, 비공식 보안 분석을 통해 제안된 프로토콜이 안전하다고 주장한다. 본 논문에서는 Madhusudhan R · Shashidhara R이 제안한 프로토콜에 대한 취약점 분석을 통하여, 이 프로토콜이 Offline ID, PW guessing attack, No Perfect Forward Secrecy, Design Flaws, Dos attack, User Impersonation attack에 취약하다는 것을 밝혔다.
Abstract
DNA encryption is an emerging field of research in computational DNA. DNA encryption extends to mobile user authentication, a more secure and efficient technology that provides secrets in mobility networks by converting plaintext into DNA sequences. Providing authentication and confidentiality services in a mobility network is very important. HECC for providing authentication and confidentiality is popular among other encryption technologies such as ECC, RSA, DES, etc. Recently, Madhusudhan R · Shashidhara R proposed a DNA-based authentication scheme using HECC, claiming that the proposed protocol is safe through informal security analysis. In this paper, through the vulnerability analysis of the protocol proposed by Madhusudhan R · Shashidhara R, it was revealed that this protocol is vulnerable to Offline ID, PW guessing attack, No Perfect Forward Secrecy, Design Flaws, Dos attack, and User Impersonation attack.
참고문헌 (25)
- Ahmed K, "Increasing robustness of data encryption standard by integrating dnacrypto-graphy", Int J Comput Appl, 39(2), pp.91~105 (2017)
- Rao IRSN, "Wireless secured data trans-mission using cryptographic techniques through fpga", International Journal of Engineering and Technology(IJET) (2016)
- VijayaKumar P, "Enhanced level of security using dna computing-technique with hyperelliptic curve cryptography", Int J Netw Secur, 4(1), pp.1~ (2013)
- Singh H, "Dna based cryptography : an approach to secure mobile-networks", DNA, 1(19), pp.77~80 (2010)
- Jiang Q, "An enhanced authentication scheme with privacy preservation forroaming service in global mobility networks", Wirel Pers Commun, 68(4), pp.1477~1491 (2013)
- Joon-ho Ghil, "Operation Scheme of Aerial Relay Networks for Improving Degree of Situation Awareness in Future Tactical Networks", 정보화연구, 15(4), pp.509~520 (2018), 한국엔터프라이즈아키텍처학회[DOI]
- 김성민, "콘텐츠 중심 네트워킹에서의 그룹 기반 협력 캐싱 방법", 정보화연구, 14(4), pp.357~366 (2017), 한국엔터프라이즈아키텍처학회
- 안효춘, "전술 네트워크의 C2&SA 유통 능력기반평가 모델 연구", 정보화연구, 14(2), pp.129~137 (2017), 한국엔터프라이즈아키텍처학회
- Pheng Un Lim, "A Scalable and Efficient Live Video Streaming Over DHT Overlay Network", 정보화연구, 13(4), pp.509~520 (2016), 한국엔터프라이즈아키텍처학회
- 박한솔, "대중교통 빅데이터의 다차원 네트워크 분석기법", 정보화연구, 13(1), pp.139~145 (2016), 한국엔터프라이즈아키텍처학회
- Madhusudhan R, "Mobile user authentication protocol with privacy preserving forroaming service in glomonet", Peer-to-Peer Net-working and Applications, pp.1~22 (2019)
- Pelzl J, "CHES", pp.351~365 (2003), Springer
- Jemimah J, "Web based biometric validation using biological identities: an elaborate survey", 2018 fourth international conference on advances in electrical, electronics,information, communication and bio-informatics (AEEICB), pp.1~6 (2018), IEEE
- Misbahuddin M, "A secure image-based authentication scheme employing dna cryptoand steganography", Proceedings of the third inter-national symposium on women in computing andin-formatics, pp.595~601 (2015), ACM
- Raju P, "Dna encryption based dual server password authentication", Proceedings ofthe 3rd international conference on frontiers of intelligent computing: theory and applications (FICTA)2014, pp.29~37 (2015), Springer
- Ha J, "An efficient and robust anonymous authentication scheme in global mobility networks", IntJ Secur Appl, 9(10), pp.297~312 (2015)
- Karuppiah M, "A secure authentication scheme with user anonymity for roamingservice in global mobility networks", Wirel Pers Commun, 84(3), pp.2055~2078 (2015)
- Madhusudhan R, "A secure and lightweight authentication scheme for roaming service inglobal mobile networks", J Inf Secur Appl, 38, pp.96~110 (2018)
- Xu G, "A novel efficient maka protocol with desynchronization for anonymous roaming service in global mobility networks", J Netw Comput Appl, 107, pp.83~92 (2018)
- Zhao D, "A secure and effective anonymous authentication scheme forroaming service in global mobility networks", Wirel Pers Commun, 78(1), pp.247~269 (2014)
- Madhusudhan, R., "A novel DNA based password authentication system for global roaming in resource-limited mobile environ-ments", Multimedia Tools and Applications, 79(3), pp.2185~2212 (2020)
- ElGamal T, "Advances in cryptology", pp.10~18 (1984), Springer
- Diffie W, "New directions in cryptography", IEEE Transactions on Information Theory, 22(6), pp.644~654 (1976)
- Koblitz N, "A family of jacobians suitable for discrete log cryptosystems", Proceedings onadvances in cryptology, pp.94~99 (1990), Springer
- Mangard, S., "Power analysis attacks: Revealing the secrets of smart cards (Vol. 31)" (2008), Springer Science & Business Media