KIPS Transactions on Computer and Communication Systems (정보처리학회논문지:컴퓨터 및 통신 시스템)

Korea Information Processing Society (한국정보처리학회)
권호 표지
DOI QR코드

DOI QR Code

A Study on the Next Generation Identification System of Mobile-Based using Anonymous Authentication Scheme

익명 인증기법을 이용한 모바일 기반 차세대 본인확인수단에 관한 연구

  • Received : 2013.09.30
  • Accepted : 2013.11.26
  • Published : 2013.12.31
Download PDF
⟨ Previous Next ⟩

Abstract

The cases of identification forgery and counterfeiting are increasing under the current identification system, which was established based on social conditions and administrative environments over 20 years ago. This leads to an increase of various criminal acts including illegal loan using fake ID and a number of damages caused out of good intentions that result in interference with the operations of public organizations. In addition, according to the advancement of information society, privacy protection has emerged as an important issue. However, ID card exposes individuals' personal information, such as names, resident registration numbers, photos, addresses and fingerprints, and thus the incidents associated with illegal use of personal information are increasing continuously. Accordingly, this study aimed at examining the issues of ID card forgery/counterfeiting and privacy protection and at proposing a next-generation identification system to supplement such weaknesses. The top priority has been set as prevention of forgery/counterfeiting and privacy protection in order to ensure the most important function of national identification system, which is user identification.

20여년 이전의 사회적 여건과 행정환경을 전제로 만들어진 현행 신분증은 매년 위 변조 사례가 증가하고 있다. 이에 따라, 신분증 위 변조로 인한 불법대출 등 각종 범죄행위가 증가하고, 공공기관의 업무지장이 초래되는 등 많은 선의의 피해가 발생하고 있다. 또한, 정보화 사회가 진전되면서 프라이버시 보호가 매우 중요해지고 있다. 하지만 주민등록증은 이름, 주민등록번호, 사진, 주소, 지문 등 사용자의 개인정보가 그대로 노출되어 개인정보 도용사고가 지속적으로 증가하고 있다. 이에 따라, 본 논문에서는 주민등록증의 위 변조 및 프라이버시 보호의 문제점을 살펴보고 이를 보완할 수 있는 차세대 본인확인수단을 제안한다. 이는 국가신분증의 가장 중요한 기능인 사용자 본인확인에 충실하기 위해 위 변조 방지 및 프라이버시 보호를 최우선 목표로 하였다.

Keywords

References

  1. YoungHo Park, ByungUn Kong, KyungHyune Rhee, "Design of an Authentication System Based on Personal Identity Verification Card", Journal of Korea Multimedia Society Vol.13, No.8, August, 2011. https://doi.org/10.9717/kmms.2011.14.8.1029
  2. Jongho Mun, changhwan Lee, Keyn Kwon, Kwangwoo Lee, Dongho Won, "Consideration to introducing Electronic-ID", Korea Computer Congress Vol.38, 2011.
  3. Jung Hyo Park. "The Design and Implementation of Anonymous Authentication Method based on Smart-Card", Master's thesis, Soongsil University, 2010.
  4. Ho Jung Lee. "A Study on Improved-electronic Identity Document Service Protocol", Master's thesis, Hanyang University, 2009.
  5. Kil Young Oh, "Battle Front : Issues and Implications of Electronic Resident Registration Card", Democratic Legal Studies Association, pp.305-332, 2011.
  6. HyungHyo Lee, Heeman Park, SangRae Cho, SeungHun Lee, "A Propose of New National Identification Number System Providing privacy Protection for online and offline environment", Journal of the Korea Information Security, Vol.20, 2010.
  7. BSI, "Common Criteria Protection Profile - Machine Readable Travel Document with ICAO Application, Basic Access Control", BSI-PP-0017, Version 1.0, 18th August, 2005.
  8. BSI, "Advanced Security Mechanisms Machine Readable Travel Documents- Extended Access Control(EAC)", Version 2.05, TR-03110, 2010.
  9. NIST, "Special Publication 800-78-1 : Cryptographic Algorithms and Key Sizes for Personal Identity Verification", August, 2007.
  10. NIST, "Special Publication 800-78-2 : Interfaces for Personal Identity Verification -Part2 : End Point PIV Card Application Card Command Interface", September, 2008.
  11. NIST, "Special Publication 800-78-2 : Interfaces for Personal Identity Verification -Part3 : End Point PIV Card Application Card Command Interface", September, 2008.
  12. NIST, "Special Publication 800-78-2 : Interfaces for Personal Identity Verification -Part4 : End Point PIV Card Application Card Command Interface", September, 2008.