거래연동 인증기술 기반의 웨어러블 디바이스를 활용한 안전한 모바일 뱅킹 어플리케이션 설계 및 구현

다국어 초록 (Multilingual Abstract)

Recently, mobile banking services have suffered from various security threats. In
particular, critical damages can be caused by advanced attacks based on memory hacking
such as man-in-the-browser (MITB) attack. To address such attacks, transaction signing
has been rigorously researched, dominant approach, for which is based on one time
password(OTP). But, the existing OTP approaches are limited to satisfy both security and
convenience. Motivated by this, we proposes a novel transaction signing security scheme
based on wearable OTP device, whose security is then formally verified through the
AVISPA tool.