메뉴 건너뛰기
소속 기관 / 학교 인증
인증하면 논문, 학술자료 등을  무료로 열람할 수 있어요.
한국대학교, 누리자동차, 시립도서관 등 나의 기관을 확인해보세요
(국내 대학 90% 이상 구독 중)
고객센터 ENG
주제분류

논문 기본 정보

저자정보
(Sejong Cyber University)
저널정보
국제인공지능학회 The International Journal of Internet, Broadcasting and Communication The International Journal of Internet, Broadcasting and Communication Vol.18 No.5
오류 신고하기

피인용 0

검색

    초록·키워드

    The Korean identity verification framework regulates the provision and secure handling of Connecting Information (CI), but it does not differentiate the scope of disclosed identity information according to service- specific identification and linkage requirements. This study proposes a CI Disclosure Level (CIDL) framework and a phased transition approach based on service purpose, identification persistence, and the need for cross- organizational linkage. The study reviews a recent Korean data breach involving CI and Duplication Information (DI) and compares the domestic CI framework with the assurance structure of NIST SP 800-63-4 and the data-minimization principles of NIST SP 800-63C-4, including Derived Attributes and Pairwise Pseudonymous Identifiers (PPIs). Based on this analysis, the proposed CIDL framework comprises four levels: attribute verification (CIDL-0), one-time identification (CIDL-1), relying-party-specific persistent pseudonymous identification (CIDL-2), and controlled CI disclosure for necessary cross-organizational linkage (CIDL-3). CIDL is not a service risk level; it is a disclosure control for limiting identity verification results to the minimum information required for the service. The framework is intended to be applied first to new services, while existing CI-based services would be reassessed and migrated in stages. This approach preserves necessary linkage and account continuity while reducing unnecessary disclosure, retention, and cross-service linkability of persistent identifiers.

    최근 본 자료 전체보기