인문학
사회과학
자연과학
공학
의약학
농수해양학
예술체육학
복합학
지원사업
학술연구/단체지원/교육 등 연구자 활동을 지속하도록 DBpia가 지원하고 있어요.
커뮤니티
연구자들이 자신의 연구와 전문성을 널리 알리고, 새로운 협력의 기회를 만들 수 있는 네트워킹 공간이에요.
논문 기본 정보
- 저자정보
초록·키워드
The Korean identity verification framework regulates the provision and secure handling of Connecting Information (CI), but it does not differentiate the scope of disclosed identity information according to service- specific identification and linkage requirements. This study proposes a CI Disclosure Level (CIDL) framework and a phased transition approach based on service purpose, identification persistence, and the need for cross- organizational linkage. The study reviews a recent Korean data breach involving CI and Duplication Information (DI) and compares the domestic CI framework with the assurance structure of NIST SP 800-63-4 and the data-minimization principles of NIST SP 800-63C-4, including Derived Attributes and Pairwise Pseudonymous Identifiers (PPIs). Based on this analysis, the proposed CIDL framework comprises four levels: attribute verification (CIDL-0), one-time identification (CIDL-1), relying-party-specific persistent pseudonymous identification (CIDL-2), and controlled CI disclosure for necessary cross-organizational linkage (CIDL-3). CIDL is not a service risk level; it is a disclosure control for limiting identity verification results to the minimum information required for the service. The framework is intended to be applied first to new services, while existing CI-based services would be reassessed and migrated in stages. This approach preserves necessary linkage and account continuity while reducing unnecessary disclosure, retention, and cross-service linkability of persistent identifiers.
본문·목차
인공지능 문자 인식 모델을 통해 추출된 텍스트로, 일부 오타나 오류가 포함될 수 있으나 지속적으로 개선 중입니다.
오류를 발견하셨다면 해당 부분을 드래그한 후 ' 를 통해 신고해주세요.
오류를 발견하셨다면 해당 부분을 드래그한 후 ' 를 통해 신고해주세요.