HECC를 이용한 DNA 기반 인증 체계에 대한 취약점 분석 = Vulnerability Analysis for DNA-Based Authentication System Using HECC

다국어 초록 (Multilingual Abstract)

DNA encryption is an emerging field of research in computational DNA. DNA encryption extends to mobile user authentication, a more secure and efficient technology that provides secrets in mobility networks by converting plaintext into DNA sequences. Providing authentication and confidentiality services in a mobility network is very important. HECC for providing authentication and confidentiality is popular among other encryption technologies such as ECC, RSA, DES, etc. Recently, Madhusudhan R · Shashidhara R proposed a DNA-based authentication scheme using HECC, claiming that the proposed protocol is safe through informal security analysis. In this paper, through the vulnerability analysis of the protocol proposed by Madhusudhan R · Shashidhara R, it was revealed that this protocol is vulnerable to Offline ID, PW guessing attack, No Perfect Forward Secrecy, Design Flaws, Dos attack, and User Impersonation attack.

국문 초록 (Abstract)

DNA 암호화는 전산 DNA에서 새롭게 떠오르는 연구 분야이다. DNA 암호화는 일반 텍스트를 DNA 시퀀스로 변환하여 모빌리티 네트워크에서 비밀성을 제공하는 보다 안전하고 효율적인 기술인 모바일 사용자 인증으로 사용된다. 모빌리티 네트워크에서 인증 및 기밀 유지 서비스를 제공하는 것은 매우 중요하다. 인증과 기밀성을 제공하기 위한 HECC(Hyper Elliptic Curve Cryptography)는ECC, RSA, DES 등과 같은 다른 암호화 기술들 사이에서 인기가 있다. 최근 Madhusudhan R ·Shashidhara R은 HECC를 이용한 DNA 기반 인증 체계를 제안하면서, 비공식 보안 분석을 통해 제안된 프로토콜이 안전하다고 주장한다. 본 논문에서는 Madhusudhan R · Shashidhara R이 제안한 프로토콜에 대한 취약점 분석을 통하여, 이 프로토콜이 Offline ID, PW guessing attack, No Perfect Forward Secrecy, Design Flaws, Dos attack, User Impersonation attack에 취약하다는 것을 밝혔다.

참고문헌 (Reference)

1 김성민 ; 노병희, "콘텐츠 중심 네트워킹에서의 그룹 기반 협력 캐싱 방법" 한국엔터프라이즈아키텍처학회 14 (14): 357-366, 2017

2 안효춘 ; 고영배 ; 노병희, "전술 네트워크의 C2&SA 유통 능력기반평가 모델 연구" 한국엔터프라이즈아키텍처학회 14 (14): 129-137, 2017

3 박한솔 ; 조완섭, "대중교통 빅데이터의 다차원 네트워크 분석기법" 한국엔터프라이즈아키텍처학회 13 (13): 139-145, 2016

4 Rao IRSN, "Wireless secured data trans-mission using cryptographic techniques through fpga" 2016

5 Jemimah J, "Web based biometric validation using biological identities: an elaborate survey" IEEE 1-6, 2018

6 Mangard, S., "Power analysis attacks: Revealing the secrets of smart cards (Vol. 31)" Springer Science & Business Media 2008

7 길준호 ; 이규민 ; 이승운 ; 노병희, "Operation Scheme of Aerial Relay Networks for Improving Degree of Situation Awareness in Future Tactical Networks" 한국엔터프라이즈아키텍처학회 15 (15): 509-520, 2018

8 Diffie W, "New directions in cryptography" 22 (22): 644-654, 1976

9 Madhusudhan R, "Mobile user authentication protocol with privacy preserving forroaming service in glomonet" 1-22, 2019

10 Ahmed K, "Increasing robustness of data encryption standard by integrating dnacrypto-graphy" 39 (39): 91-105, 2017

11 VijayaKumar P, "Enhanced level of security using dna computing-technique with hyperelliptic curve cryptography" 4 (4): 1-, 2013

12 Raju P, "Dna encryption based dual server password authentication" Springer 29-37, 2015

13 Singh H, "Dna based cryptography : an approach to secure mobile-networks" 1 (1): 77-80, 2010

14 Pelzl J, "CHES" Springer 351-365, 2003

15 Jiang Q, "An enhanced authentication scheme with privacy preservation forroaming service in global mobility networks" 68 (68): 1477-1491, 2013

16 Ha J, "An efficient and robust anonymous authentication scheme in global mobility networks" 9 (9): 297-312, 2015

17 ElGamal T, "Advances in cryptology" Springer 10-18, 1984

18 Misbahuddin M, "A secure image-based authentication scheme employing dna cryptoand steganography" ACM 595-601, 2015

19 Karuppiah M, "A secure authentication scheme with user anonymity for roamingservice in global mobility networks" 84 (84): 2055-2078, 2015

20 Madhusudhan R, "A secure and lightweight authentication scheme for roaming service inglobal mobile networks" 38 : 96-110, 2018

21 Zhao D, "A secure and effective anonymous authentication scheme forroaming service in global mobility networks" 78 (78): 247-269, 2014

22 Xu G, "A novel efficient maka protocol with desynchronization for anonymous roaming service in global mobility networks" 107 : 83-92, 2018

23 Madhusudhan, R., "A novel DNA based password authentication system for global roaming in resource-limited mobile environ-ments" 79 (79): 2185-2212, 2020

24 Koblitz N, "A family of jacobians suitable for discrete log cryptosystems" Springer 94-99, 1990

25 Pheng Un Lim ; 최창열 ; 최황규, "A Scalable and Efficient Live Video Streaming Over DHT Overlay Network" 한국엔터프라이즈아키텍처학회 13 (13): 509-520, 2016