안전한 인터넷 뱅킹을 위한 트랜잭션 서명기법에 관한 연구 = Enhanced Transaction Signing-based Authentication Scheme for Secure Internet Banking

다국어 초록 (Multilingual Abstract)

Nowadays, all over the world`s banks use internet banking through various authentication methods. Although there are strong authentication methods using OTP (One Time Password), there still has vulnerability from sophisticated attacks such as MITM (Man In The Middle). This letter proposes signing-based authentication protocol that copes with attacks, such as MITB (Man In The Browser), and provides non-repudiation function. The protocol shows generic method to prevent the sophisticated attacks through connecting advantages from OTP and PKI (Public Key Infrastructure) certificate, and that can be deployed to various extended form in internet banking.

참고문헌 (Reference)

1 G. Tubin, "The Sky is Falling: The Need for Stronger Consumer Online Banking Authentication"

2 A. Hiltgen, "Secure Internet Banking Authentication" IEEE Security and Privacy 2006

3 FDIC, "Putting and End to Account-Hijacking Identity Theft-Study Supplement"

4 NetworkWorld, "New Trojan intercepts online banking information"

5 E. Gallery, "Identity Verification"

6 J. Brainard, "Fourth-Factor Authentication: Somebody You Know" 2006

7 G. Tubin, "Emergence of Risk-Based Authentication in Online Financial Services; You Can't Hide Your Lyin' IPs"

8 B. Pinheiro, "Comments on FDIC Report" 2005

9 Federal Financial Institutions Examinati, "Authentication in an Internet Banking Environment"

10 M. Burrows, "A logic of authentication" 8 (8): 18-36, 1990