Youngseob Cho

Smartphone remote lock and wipe system with integrity checking of SMS notification

In this paper, we propose a MAC-based remote lock and wipe system through the SMS push notification to protect against the private data disclosure when smartphone is lost or stolen. The proposed system provides the integrity checking mechanism so that the malicious users are unable to launch denial-of-service attacks which send the lock or wipe commands to the normal users on purpose. Also, it satisfies the SMS length limitation of 80 bytes long without downgrading the security level.

Identity Roaming Mechanism for Multiple Trust Domains using SAML v2.0 and Single Federation Bridge

SSO Service within a CoT provides a user with simple and convenient authentication service. However, as a number of CoT increases, the user faces the same problem in that the user has to join a website and login to that website in another CoT every time he visits. In this paper, we have proposed noble method of the identity roaming to enable a user to sign up for one web site and extend the connectivity service in a location that is different from the home location where the user was registered and authenticated. We have applied Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0 to provide the identity roaming service. We have also devised the concept of Federation Bridge that interconnects distributed CoTs to minimize the trust relationship. We only need to deploy one federation bridge to connect all CoTs in the Web.

A Unified User Consent Acquisition and Delivery Mechanism for Multi-Source User Data Integrated Service

Internet service providers have usually collected and maintained user data necessary for their services. Recently, many SP (service provider)s supply users with integrated services which combine existent user data of other service providers. When UdP(User Data Provider) provides SP with user data, it should acquire user consent to preserve user privacy and to avoid future responsibility. However, UdP has not direct session with user, so it is very difficult that the UdP acquires user consent directly from the user. In addition, if user may give its consent base on individual UdP, this may be inconvenient for user. In this paper, we propose a unified user consent acquisition and delivery mechanism for multi-source user data integrated service. We introduce DA(delegation authority) for user consent acquisition and delivery. DA acquires user consent to UdPs data providing from user and generates an ELA(electronic letter of authorization) from user consent information, and sends it to SP. SP sends the ELA with user data request to UdPs, which use the ELA for deciding whether to provide user data. We design ELA scheme, message protocols and other components such as bindings, metadata and identifier. The proposed mechanism enables user to control explicitly its own data flow and to give its consent to all SP service-related UdPs only for one interaction.