IPTV 서비스를 위한 안전한 상호인증

유혜정(Hye-Joung Yoo) 한국정보기술학회 2012 한국정보기술학회논문지 Vol.10 No.11

IPTV is an emerging convergence technology of broadcasting and tele-communication, which provides various multi-media contents to the service subscribers through internet. In the IPTV environment, a user authentication is an important security primitive which allows an authenticated user to use the provided services by checking the validity of the membership. IPTV broadcasters transmit the scrambled signals to users and only the authenticated users can descramble the signals. In general, users are verified through the communication between STB(Set-Top Box) and smart cards. We proposed a secure mutual authentication and key exchange scheme between STB and smart cards for IPTV broadcasting. It provides the efficiency of computation and communication. Subscribers need to register at Subscribe Management Server only once, and then they can use the various permitted programs according to their attributes. Security and efficiency analyses prove that the proposed scheme is strong against the common threats in the IPTV environment such as impersonation attack, offline password guessing attack, and McCormac Hack attack.

안전한 클라우드 컴퓨팅을 위한 속성기반 인증

유혜정(Hye-Joung Yoo) 한국정보기술학회 2015 한국정보기술학회논문지 Vol.13 No.1

Cloud computing has recently emerged as a new paradigm for hosting and delivering services over the internet. Cloud computing is attractive to business owners as it eliminates the requirement for users to plan ahead for provisioning, and allows enterprises to start from the small and increase resources only when there is a rise in service demand. However, despite the fact that cloud computing offers huge opportunities to the IT industry, cloud computing technology has many issues still be addressed. This rapid transition towards the clouds has fuelled concerns on many critical issues such as performance, resiliency, interoperability, and security. One of main security-related issues is authentication. Since a cloud environment involves multiple resources belonging to multiple clients interacting in complex manners, proper access control with authentication to these resources is very important. In this paper, we propose a new authentication scheme for the cloud computing based on attribute-based access control. The proposed scheme is a novel user authentication scheme providing a secure access to the resources in the cloud.

SNS 뷰티 인플루언서의 평가속성과 화장품 추구혜택이 구전의도에 미치는 영향 - 자기효능감에 따른 조절효과를 중심으로 -

유혜정(Hye-Jeong Yoo),황선진(Sun-Jin Hwang) 한국복식학회 2020 服飾 Vol.70 No.3

스마트카드를 이용한 속성기반 사용자 인증 스킴

유혜정(Hye Joung Yoo),이현숙(Hyun Sook Rhee) 한국정보보호학회 2008 정보보호학회논문지 Vol.18 No.5

컴퓨터 네트워크 환경에서 사용자가 서버에서 제공되는 서비스를 요청할 때, 사용자는 인증 과정을 거쳐야만 한다. 이런 사용자 인증 과정을 통하여 서버는 사용자가 서버에서 제공하는 서비스를 이용할 수 있는지 그리고 이 서비스에 대한 정확한 접근 권한을 결정하게 된다. 이러한 사용자 인증 시스템에서 개인정보보호에 대한 중요성이 증대되고 있다. 이러한 프라이버시 보호 요구에 발맞추어 사용자 익명성을 제공하는 여러 인증기술이 제안되었으며, 최근에는 스마트카드를 이용한 사용자 익명성을 제공하는 인증 스킴이 제안되고 있다. 스마트카드를 이용한 사용자 인증 스킴은 사용자의 적격성을 입증하고 안전한 통신을 제공하는 매우 실용적인 기술이다. 그러나 아직까지 스마트카드를 이용한 사용자 익명성 제공속성기반 인증에 대한 연구는 존재하지 않는다. 본 논문에서는 사용자를 인증하는 기술 중에서 스마트카드를 이용한 속성기반 인증 스킴을 제안하고자 한다. 스마트카드를 이용하여 계산량 측면에서 효율성을 취하고, 사용자는 한 번의 등록으로 속성에 따라 다양한 서비스를 안전하게 제공받을 수 있도록 하였으며, 사용자의 프라이버시 보호를 위해 원격 서버에게도 안전한 익명성을 제공받으면서 서버와의 상호 인증을 수행하도록 하였다. In a network environment, when a user requests a server's service, he/she must pass an examination of user authentication. Through this process, the server can determine if the user can use the provided services and the exact access rights of this user in these services. In these authentication schemes, the security of private information became an important issue. For this reason, many suggestions have been made in order to protect the privacy of users and smart cards have been widely used for authentication systems providing anonymity of users recently. An remote user authentication system using smart cards is a very practical solution to validate the eligibility of a user and provide secure communication. However, there are no studies in attribute-based authentication schemes using smart cards so far. In this paper, we propose a novel user authentication scheme using smart cards based on attributes. The major merits include:(1) the proposed scheme achieves the low-computation requirement for smart cards; (2) user only needs to register once and can use permitted various services according to attributes; (3) the proposed scheme guarantees perfect anonymity to remote server.

一部 全南地域 女子中學生들의 營養實態 調査硏究 - 全羅南道 長興郡과 寶城郡을 中心으로 -

유혜정(Hye-Jung Yoo) 한국식품영양과학회 1984 한국식품영양과학회지 Vol.13 No.1

The purpose of this study was to get a data which can provide a basis for future direction in nutritional education and to build up right eating habit and to find the way how to improve food life and the nutritional supply by evaluating the current nutritional intake of average middle school girls through the survey study of their daily food intakes and physical status.<br/> The survey of nutritional intakes and physical status in two girls middle schools, namely Jang’hung girls middle school at Jang’hung Up and Bo’song girls middle school at Bo’song Up, were carried by teachers majoring in Home Economics and nurse-teachers from 5 July to 7 July 1983. From a total of 1080 subjects of two girls middle schools, 887 subjects were surveyed.<br/> The results obtained from survey are summarized as follow:<br/> 1) Physical Status<br/> Average height, weight and chest girth of subjects in both middle schools were much lower than the Korean average standard (p<0.005~p<0.001) and t-score of differences between two middle school girls were not significant.<br/> R?hrer index, nutrition rate and physique rate were also lower than Korean averag standard through all the ages in both girls middle schools.<br/> Menarche appeared mainly between the age of 13 to 15 (91.55 %), with a mean age of 14 (35.01 %) and which was experienced by the subjects of 51.52 percentage among total surveyed middle school girls.<br/> 2) Nutritional Intakes<br/> The average daily intakes of all nutrient except iron, vitamin A, thiamin, ascorbic acid and niacin was lower than Korean Recommanded Dietary Allowances (RDA). Especially average intake of calorie and calcium were much lower than Korean RDA(p<0.001) while average intake of thiamine and ascorbic acid were much higher than Korean RDA (p<0.001).<br/> T-score of differences of iron, thiamin, riboflavin between two middle school girls were very significant (p<0.001).<br/> Generally iron and riboflavin were the highest rate of intakes through three meals and breakfast took charge of considerable amount of all nutrient intake without omitting anything (about 30 % of daily nutrient intake).<br/> The nutrients of which ratio of nutrient intake by snack was more than 16.7 % were vitamin A, thiamin, riboflavin, ascorbic acid etc. and snack foods which were intaked frequently in both middle school girls commonly were fruits, milk and milk products, bread and biscuits in sequence.<br/> 3) Correlations and t-score between physical status, menarche and nutrient intakes.<br/> Average intake of calorie at Jang’hung area was positively correlated with height, weight, nutrition rate and physique rate and this correlation was very significant (p<0.005). Average intake of calorie was also correlated with chest girth and R?hrer index (p<0.05).<br/> At Bo’song area, averae intake of riboflavin was negatively correlated with all the items of physical status (p<0.05-p<0.005), vitamin A was negatively correlated with chestg irth and R?hrer index (p<0.05 respect ively) and thiamin was also negatively correlated with chest girth, R?hrer index and nutrition rate (p<0.05 respectively). Especially niacin showed a negative correlation with all the items of physical status very significantly (p<0.005).<br/> The time of menarche showed a positive correlation with iron in both middle school girls commonly p<0.05 at Jang’hung, p<0.10 at Bo’song).

다중서버 환경에서의 스마트카드를 이용한 상호 익명 인증

유혜정(Hye-joung Yoo) 한국통신학회 2008 韓國通信學會論文誌 Vol.33 No.12C

컴퓨터 네트워크 환경에서 사용자가 서버에서 제공되는 서비스를 요청할 때, 스마트카드를 이용한 사용자 인증스킴은 사용자의 적격성을 입증하고 안전한 통신을 제공하는 매우 실용적인 기술이다. 이러한 사용자 인증 환경에서 네트워크와 정보기술의 발전으로 인하여 대부분의 서비스는 다중서버 환경으로 변화되었으며, 이는 점점 더 가속화 될 것이다. 그러나 아직까지 스마트카드를 이용한 다중서버 환경을 지원하는 상호 익명성 제공 인증에 대한 연구는 존재하지 않는다. 본 논문에서는 사용자를 인증하는 기술 중에서 다중서버 환경을 지원하며, 동시에 서버와 사용자 간의 상호 인증 및 상호 익명성을 제공하는 스마트카드를 이용한 사용자 인증 스킴을 제안하고자 한다. 스마트카드를 이용하여 계산량 측면에서 효율성을 취하고, 사용자는 한 번의 등록으로 등록한 서버에 관계없이 서버 군에서 제공하는 다양한 서비스를 안전하게 제공받을 수 있도록 하였으며, 사용자의 프라이버시 보호를 위해 원격 서버에게도 안전한 익명성을 제공받으면서 서버와의 상호 인증을 수행하도록 하였다. In a network environment, when a user requests a server's service, a remote user authentication system using smart cards is a very practical solution to validate the eligibility of a user and provide secure communication. In these authentication schemes, due to fast progress of networks and information technology, most of provided services are in multi-server environments. However, there are no studies in multi-server authentication schemes using smart cards providing mutual anonymity so far. In this paper, we propose a novel user authentication scheme using smart cards providing mutual authentication and mutual anonymity for multi-server environments. Our proposed scheme achieves the low-computation requirement for smart cards and a user can use permitted various services in eligible servers by only one registration. Also, this scheme guarantees perfect mutual anonymity of participants.

출·폐점에 따른 편의점 간 거리 변화가 매출에 미치는 영향 : 서울시 8개 지역 편의점을 대상으로

유혜정(Yoo, Hyejeong),김대환(Kim, Daehwan),권수아(Kwon, Sooa),권영상(Kwon, Youngsang) 대한국토·도시계획학회 2020 國土計劃 Vol.55 No.3

동결건조표준액의 안정성에 관한 보고

박준모,유혜정,김한철,한걸순,Park, Jun Mo,Yoo, Hye Jung,Kim, Han Chul,Han, Geul Soon 대한핵의학기술학회 2012 핵의학 기술 Vol.16 No.2

이 실험은 검사를 매일 실행하고, 동결건조된 표준액을 매번 녹여서 사용하는 검사실은 그 안정성에 대하여 고민을 할 필요는 없지만, 검사를 일주일에 한번 또는 두 번 정도 실행하는 검사실에 대한 보고라고 할 수도 있다. 동결 건조한 표준물질은 용해한 후 다시 동결을 할 경우 보통 $-20^{\circ}C$이하에서 유효기간까지 보관하라는 식으로만 표현 되어져 있고, 이는 몇 번을 녹인 후 재사용해도 안정한가에 대해서는 표현된 바가 없기에 이번 실험은 동결건조한 표준용액을 녹임과 동결을 여러 번 번복하였을 때와 냉장보관을 하였을 시에 표준용액의 변화도와 이것이 결과에 미치는 영향을 비교 평가하였다. 시판되고 있는 방사면역측정법을 이용한 체외진단키트 중 동결건조표준용액으로 되어진 부갑상선호르몬(PTH), 부신피지자극호르몬(ACTH), 황체형성호르몬(LH) kit를 같은Lot.NO.로 구성하였다. 이를 D.W.로 각 용량에 맞게 용해한 후 3개의 대조군으로 분리하였다. 제1대조군은 녹임, 동결을 번복하는 방법으로 하였고 제2대조군은 용해한 후 Test tube에 1회 사용할 만큼 분주하여 동결을 하였고 제3대조군은 냉장보관으로 하였다. 표준액과 환자농도값 날짜 별로 비교하였고, pH Test를 하였으며 날짜 별 단순회귀분석 및 결정계수 산출을 하였으며 Excel Paired t-Test (p-value)를 하여서 유의수준관계를 분석하였다. 위에서 실험한 ACTH, PTH, LH의 동결건조 표준액은 반드시 냉동보관을 할 것을 권고한다. 이는 다른 동결건조표준액도 같은 방법으로 보관을 해야 할 것이다. Purpose : Since standard solution is the one that knows its exact concentration, the curve of the dissolution has been determined according to the amount of the solution, compared to the amount of the unknown sample. Therefore, the antigen that makes up standard materials should be made in a pure form. The configuration of the standard substance solution in the kit we use is a freeze-dried material, or made and comes as a liquid. Lyophilized reference material is used after dissolving in usually D.W. (Distilled Water), and if the antigen to use is too sensitive, reagents should be freeze-dried. Furthermore, when freeze-dried reference has to be frozen again after being dissolved, it should be kept under $-20^{\circ}C$ until the expiration date according to the reports. Since it is not expressed in the experiment if it is safe or stable to reuse the solution which was dissolved a few times, thus, this time it is tested and evaluated that the changes of the standard solution by freezing and melting several times, and its results and the effectiveness of it were compared to the solution which was kept in a fridge. Materials and Methods : Among Vitro diagnostic kits on the market made by radioimmunoassay, parathyroid hormone (PTH), adrenocorticotropic hormone (ACTH), luteinizing hormone (LH) are made of freeze-dried standard solution and all composed of the same Lot.NO. These hormones melted in D.W. and were separated into three groups. In the first group, melting and freezing were repeated, and in the second group, The solution only for one time use was put into a test tube after melting and freeze it. The third group was kept in the refrigerator. This experiment has been conducted from January to February in 2012. January to 2012. PH test was employed because ph is prone to changing depending on the change of protein. Each group of the standard solution, cpm (counter per minute), and the patient relative concentration values were compared by date, and Through the correlation coefficient and Paired t-test, the significant level of each group was analyzed. Results : ACTH, PTH, LH pH values were too subtle denaturation rather than numerical changes in the protein. In addition, when the standard solution of ACTH, PTH, LH was refrigerated, after 3 days and 7 days, there was a significant difference observed between the solution being kept in a refrigerator and a freezer within a significance level. Conclusion : Standard solution should be kept in a freezer, and being kept in a fridge, it is recommended to use the solution as soon as possible.

UBC 검사의 이상결과에 대한 연구

박준모,유혜정,김한철,한걸순,Park, Jun Mo,Yoo, Hye Jung,Kim, Han Chul,Han, Geul Soon 대한핵의학기술학회 2013 핵의학 기술 Vol.17 No.2

Purpose: As UBC IRMA is being tested, patients out of the reference value are reacting within the value again a few days later the urine collection tested, which causes the reliability of the test to decrease as a result. In this study, we can assume that the physiological changes in the factors would affect the results. The purpose of the study is to find out whether hematuria and proteinuria in the sample as well as the interval time (3 hours or more recommended) have affected the results. As a result, we could discover the changes in factors and increase the reliability of the test. Materials and Methods: 468 people (female: 249, male: 219) who came for the check-up were presented herein for medical examination from 2013.3.15 to 2013.1.2. Some people out of 468 who have reacted onto the reference value were divided into group low titer zone, ow-middle titer zone, and middle-high titer zone and tested for hematuria and proteinuria. During that period, 48 outpatients were asked to fill in a questionnaire regarding the urination interval time. The reagents used were (IDL Biotech AB, Sweden) and UBC IRMA. Results: Of the patients that are formed in the reference value of ($0.1-34.0{\mu}g/L$) turn out to be 52.7 years average age in their low concentration, ($mean{\pm}SD$) of the value of $0.10{\pm}0.02{\mu}g/L$. Among 80 people (50.8%, female: 49.2%), 16 patients (20%) have shown reaction to microscopic hematuria and 10 patients (12.5%) responded to proteinuria. In the average low concentration under 52.5 years of average age, 43 people (53%) have shown reaction to microscopic hematuria and 21 people (26.3%) are proteinuric patients out of 80 patients (male: 50.8%, female: 51.3%). In the middle high concentration of $11.8{\pm}4.82{\mu}g/L$ under the average age 51.7 years, 35 patients (53%) have responded to the microscopic hematuria and proteinuric patients are 26 people (39.3%) out of 66 people (men: 44%, women: 56%). In addition, in the concentration of $51.7{\pm}43.5{\mu}g/L$, some patients who get out of the reference value are observed as the average age of 52.0. 11 patients (78.6%) out of 14 (male: 35.7%, female: 64.3%) react to the microscopic hematuria. There show 6 people (42.8%) who turn out to be as proteinuric patients. As for the interval time, $1.67{\pm}3.71{\mu}g/L$ was the average value among 48 patients (female: 45.8%, male: 54.2%). Conclusion: We cannot see if proteinuria and hematuria directly affect abnormal results of inspection of 8,18 cytokeratin; however, we can find out that they statistically have an influence on highly generating UBC among several mechanisms. Also, although urination interval time was various every 15 minutes, we it does not affect these results.

전산자산의 효과적인 기술적 위험평가 기법

박관순(Kwan-Soon Park),유혜정(Hye-Jeong Yoo) 한국정보기술학회 2016 한국정보기술학회논문지 Vol.14 No.8

The technological advancement in computer and information communication gives us more convenience of living, and leads social economic development. But as they raise the reliance on computers and ICT, they bring the increment of threats using the vulnerabilities of IT assets. So, organizations try to define and measure the degree of risk using risk analysis and assessment methods to protect their assets from external threats and risk. In general, IT risk assessment perspective, two of most known methodologies have been used in the business, based on the vulnerability–threat scenario and the concern scenario. However, those methodologies are insufficient to perform IT risk assessment for identifying and grading the issues raised from hacking and other technical risk. Hence, in this paper, we propose an effective technical risk assessment methodology for the organizations. We consider three risk assessment techniques, CVE, CWE Vulnerability, and CCE Vulnerability overall.