스마트폰 환경에서 응용 보안을 위한 플랫폼 독립적인 보안 프레임워크 = Platform-independent Security Framework for Application Security on Smartphone Environment

국문 초록 (Abstract)

본 연구에서는 스마트폰 환경을 위한 플랫폼 독립적인 보안 프레임워크를 제안한다. 제안 보안 프레임워크는 이전의 방법과는 달리 사용되는 플랫폼 및 사용 브라우저와 관계없이 인증서, 비밀키 관리, 서명 등의 보안 기능을 제공한다. 또한, PAKE(Password Authenticated Key Exchange)[1] 등을 통하여 외부와의 보안연결(Security Association) 설정이 가능하며, 이를 통하여 URL spoofing 등의 공격을 막을 수 있는 효과가 존재한다.

다국어 초록 (Multilingual Abstract)

This paper proposes a new platform-independent security framework for smartphone environment. The proposed framework can be used on any platform and web-browser in order to support certificate operations, secret key management, and cryptographic operations such as digital signing. Based on PAKE [1], it can prevent URL spoofing attacks by making security association between the proposed framework and the external web servers or applications.

목차 (Table of Contents)

• 요약
• Abstract
• 1. 서론
• 2. 관련 연구
• 3. SmartSign 보안 프레임워크
• 4. 구현 및 시연
• 6. 결론
• 참고문헌

참고문헌 (Reference)

1 "mailto:// Protocol Specification (RFC 2368)"

2 "http://www.mail-archive.com/dev-tech-crypto@ lists.mozilla.org/msg04093.html"

3 "http://www.electronista.com/articles/10/07/01 /korea.no.longer.requires.activex.for.online.sales/"

4 "http://www.comanswer.com/question/is-it-possible- to-run-java-applets-in-the-android-webkit-browser"

5 "htp://joongangdaily.joins.com/article/view.asp?aid= 2933205"

6 D. Chappell, "Understanding ActiveX and OLE" Microsoft Press 1997

7 Sang Ok Park, "The Framework for Providing Compatibility to various Web Browser Plug-ins" KAIST 2009

8 Lucas Adamski, "Securing Browser Interactions, In Security Issues of Online Banking & Payment in Korea" 2010

9 R. Petke, "Registration Procedures for URL Scheme Names, RFC 2717"

10 "PKCS: Public-Key Cryptograph Standards"

11 "PAKE (Password Authenticated Key Exchange), ISO-IEC 11770-4"

12 Hyongshick Kim, "On the Security of Internet Banking in South Korea" 2010

13 "Number of Smartphone Users in Korea Reaches 5 Million" The Chosunilbo 2010

14 Tomas Joelsson, "Mobile Web Browser Extensions" KTH Information and Communication Technology 2008

15 "Korea: 1995 -> 2010, IN SECURITY, Lucas Adamski’s weblog May 2010"

16 Kilmo Kang, "Korea's smartphone market is emerging, all thanks to Apple, but the e-book market is not"

17 "Java Applet"

18 Microsoft, "Internet Explorer"

19 Ian Hickson, "HTML5 Web Messaging"

20 S. Kim, "Gatekeeper: Providing Secure Interoperability between Mobile Web- browser and Local Resources" 56-59, 2010

21 Sing Li, "Beginning J2ME Platform, From Novice to Professional" Apress 2005

22 "Analysis on URL Spoofing Vulnerability in iOS"

23 Jesse James Garrett, "Ajax: A New Approach to Web Applications"

24 Yunho Chung, ""Korea's Smartphone Market: Late Start, Fast Growth," Korean Insight"