• 한국정보처리학회:학술대회논문집
• /
• 한국정보처리학회 2015년도 추계학술발표대회
• /
• pp.832-834
• /
• 2015

최근 CCRA(Common Criteria Recognition Arrangement) 협정서 개정에 따라 공통평가기준인 CC(Common Criteria) 평가제도에 변화가 생기고 있다. 현재의 CC 평가제도가 가지는 한계를 보완하고자 PP(protection profile)를 대신하는 cPP(collaborative protection profile)가 개발되었는데, 기존의 폐쇄적으로 운영되던 PP 개발 프로세스와 달리 cPP 개발에는 CCRA 회원국의 여러 기관 및 기업이 적극적으로 개발에 참여할 수 있다. 따라서 현재 세계 각국에서 cPP 개발에 관한 논의가 활발히 진행되고 있으며 세분화된 연구도 요구되고 있다. 본 논문에서는 기존의 CC 평가제도가 가지는 한계를 살펴보고 이러한 한계를 극복하기 위한 cPP의 등장 및 개정되는 새로운 CC 평가제도의 운영을 분석한다.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제17권8호
• /
• pp.2083-2100
• /
• 2023

The rise of Industry 5.0 has led to a smarter and more digital way of doing business, but with it comes the issue of user privacy and security. Only when privacy and security issues are addressed, will users be able to transact online with greater peace of mind. Thus, to address the security and privacy problems associated with industry blockchain technology, we propose a privacy protection scheme for online financial transactions based on verifiable ring signatures and blockchain by comparing and combining the unconditional anonymity provided by ring signatures with the high integrity provided by blockchain technology. Firstly, we present an algorithm for verifying ring signature based on distributed key generation, which can ensure the integrity of transaction data. Secondly, by using the block chain technique, we choose the proxy node to send the plaintext message into the block chain, and guarantee the security of the asset transaction. On this basis, the designed scheme is subjected to a security analysis to verify that it is completely anonymous, verifiable and unerasable. The protection of user privacy can be achieved while enabling online transactions. Finally, it is shown that the proposed method is more effective and practical than other similar solutions in performance assessment and simulation. It is proved that the scheme is a safe and efficient online financial transaction ring signature scheme.

• 지식경영연구
• /
• 제16권4호
• /
• pp.35-45
• /
• 2015

Fintech, which means the convergence of finance and information technology, becomes a hot topic in the financial sector. Through innovative activities on financial services, ICT(Information and Communication Technology) is integrated into the overall financial industry, and a new form of financial services could be expected to improve the existing financial system. On the other hand, fintech services are relatively vulnerable to security issues. Due to the process simplication and the channel fusion, the leakage of personal and financial informations, authentication bypass, phishing, and pharming are getting more concerned. In this study we investigated the security risk of fintech services in the viewpoints of service provider, technology adoption, and security policy. The possible countermeasures to reduce those risks are suggested because security is an important criterion for selecting financial services. This study basically offers quantification of the potential security risks and step-by-step control measures about business processes in the fintech services. The suggested security model includes user authentication, terminal security, payment information protection, API(Application Programming Interface) security, and abnormal transaction monitoring. This study might contribute to an understanding of the security risks and some possible measures for mitigating those risks on the practical perspective.

• 한국중재학회지:중재연구
• /
• 제20권3호
• /
• pp.121-145
• /
• 2010

In the past, ADR has not been used as frequently in Japan as it has in other parts of the industrialized world. However, though litigation is still the most utilized vehicle of dispute resolution by Japanese financial institutions, this will be changing. The New Financial ADR system, which was created by a June 2009 amendment to the Financial Instruments and Exchange Act, is meant to deal with every stage of financial-related disputes and, as such, strives to resolve disputes before they become significant and acts to ameliorate any post-ADR issues that may remain, thereby completing the FIEA's purpose to protect investors. Since the foundation of the New Financial ADR system applies to all related industries, new provisions were set out in 16 business related acts, such as the Banking Act, the Insurance Business Act, and FIEA itself. October 2010 will mark the formal introduction of a new system of financial ADR in Japan. New Financial ADR in Japan will be modeled on the Financial Ombudsman Service in the United Kingdom, but will not feature one comprehensive dispute resolution system in which one dispute resolution institution covers all disputes in the financial field. The New Financial ADR system is merely one step towards a foundation of comprehensive financial ADR such as FOS. It must be noted, however, that this all important first step was over seven years in the making, involving a great deal of discussion, debate, and compromise amongst many parts of Japanese government, business, and society. The New Financial ADR system grants participating parties the ability to stop the clock on any statute of limitations which may correspond to any future possible court cases related to the dispute,13 and further grants the ability to suspend related court proceedings while the parties are utilizing the New Financial ADR system. In addition, where financial institutions have not accepted dispute resolution proceedings or have not accepted a special conciliation proposal, the Ministry of Finance may issue an order compelling compliance if it is found that certain actions are necessary to ensure the appropriate operations of a financial institution's business. In Japan, as best practices have not yet been created.

• Journal of Preventive Medicine and Public Health
• /
• 제50권6호
• /
• pp.393-400
• /
• 2017

Objectives: To relieve the financial burden faced by households, the Korean National Health Insurance (NHI) system introduced a "copayment ceiling," which evolved into a differential ceiling in 2009, with the copayment ceiling depending on patients' income. This study aimed to examine the effect of the differential copayment ceiling on financial protection and healthcare utilization, particularly focusing on whether its effects varied across different income groups. Methods: This study obtained data from the Korea Health Panel. The number of households included in the analysis was 6555 in 2008, 5859 in 2009, 5539 in 2010, and 5372 in 2011. To assess the effects of the differential copayment ceiling on utilization, out-of-pocket (OOP) payments, and catastrophic payments, various random-effects models were applied. Utilization was measured as treatment days, while catastrophic payments were defined as OOP payments exceeding 10% of household income. Among the right-hand side variables were the interaction terms of the new policy with income levels, as well as a set of household characteristics. Results: The differential copayment ceiling contributed to increased utilization regardless of income levels both in all patients and in cancer patients. However, the new policy did not seem to reduce significantly the incidence of catastrophic payments among cancer patients, and even increased the incidence among all patients. Conclusions: The limited effect of the differential ceiling can be attributed to a high proportion of direct payments for services not covered by the NHI, as well as the relatively small number of households benefiting from the differential ceilings; these considerations warrant a better policy design.

• 경영과학
• /
• 제29권3호
• /
• pp.23-43
• /
• 2012

Enacted for enhancing the competitiveness of the Korean capital market and financial industry, Capital Market Consolidation Act (CMCA) was intended to induce considerable changes such as adopting the concept of financial investment products, regulating financial investment functionally, extending financial investors' business areas and intensifying protection for investors. Employing DEA (Data Envelopment Analysis), this study measures and compares the efficiencies of domestic financial companies between the before and after the enactment of the Consolidation Act. We categorize the financial companies into 4 groups (banks, life insurance companies, property and casualty insurance companies and securities companies) depending on their business types, and evaluate how much and in which direction the Consolidation Act affects the efficiency of each group respectively. The study shows that there is no significant difference between the average efficiency of banks and that of property and casualty insurance companies due to the trade-off between opportunities and threats of the Act. To the contrary, it shows that the respective average efficiencies of life insurance companies and securities companies moved in the opposite directions to a considerable extent. Through empirical tests, we demonstrate the effect of the Act on the efficiency of Korean financial companies, and suggest the countermeasures for each financial group against the Act.

• The Journal of Asian Finance, Economics and Business
• /
• 제9권3호
• /
• pp.365-375
• /
• 2022

This study examines the relationship between board gender diversity and financial performance. The annual data of Palestinian nonfinancial listed enterprises from 2015 to 2019 was analyzed using a longitudinal panel analysis for the study's purposes. When conditional mean regression methodologies were used in the study, the results indicate that there is an insignificant relation between board gender diversity and firm financial performance. However, when analyzing women directors' effect on a firm's financial performance, endogeneity is always a concern, therefore, we test for endogeneity by employing the Darbin-Wu Housman test and then by using 2SLS. Nevertheless, when looking at the dispersion of a firm's performance using quantile regression, the results show that having women on the board improves financial performance slightly, especially for high-financial-performing firms. The findings indicate that there is a legal significant gap hindering the protection of gender diversity in boardrooms, and limiting the existence and representation of women in leadership positions, specifically, board of directors. The results of this study contribute to corporate governance and business culture literature by shedding the light on the importance of board gender diversity, to improve the firm financial performance, and hence, protect the interests of all shareholders' categories.

• 융합보안논문지
• /
• 제20권2호
• /
• pp.37-52
• /
• 2020

최근 우리나라를 비롯한 EU, 영국 등은 금융구조 개혁 및 금융소비자의 편의성 제고를 위하여 금융회사가 보유하고 있는 금융정보를 핀테크기업에게 개방하는 오픈뱅킹을 적극 추진하고 있다. 향후 오픈뱅킹이 점차 활성화될수록 오픈뱅킹 제공기관의 안정성 확보 및 이용자 보호의 중요성은 더욱 커질 것이다. 특히 우리나라는 전자금융거래의 안정성과 신뢰성 확보를 위하여 2007년부터 시행해 온 전자금융거래법이 있지만, 오픈뱅킹 제공기관에게 적용하기 어려운 한계가 있어 오픈뱅킹에 대한 보안사고 예방 및 이용자 보호가 취약해질 위험성이 있다. 따라서 본 논문에서는 오픈뱅킹에 관한 외국의 규제를 살펴보고, 국내 오픈뱅킹의 안정성 강화 및 이용자 보호를 위한 규제 개선 방안을 제시해 본다.

• Asia pacific journal of information systems
• /
• 제18권3호
• /
• pp.45-65
• /
• 2008

The rapid growth of the Internet has increased the amount of transmission of personally identifiable information. At the same time, with new Internet related technologies, organizations are trying to collect and access more personal information than before, which in turn makes individuals concern more about their information privacy. For their successful businesses, organizations have tried to alleviate these concerns in two ways: (1) by offering privacy policies that promise certain level of privacy protection; (2) by offering benefits such as financial gains or convenience. In this paper, we interpret these actions in the context of the information processing theory of motivation. This paper follows Hann et al.(2007)'s methods to analyze Internet users privacy concerns in Korea and tries to compare the findings. Our research objectives are as follows: First, we analyze privacy concern mitigation strategies in the framework of the expectancy theory of motivation. Subsequently, we show how the expectancy theory based framework is linked o the conjoint analysis. We empirically validate the predictions that the means to mitigate privacy concerns are associated with positive valences resulting in an increase in motivational score. In order to accommodate real-life contexts, we investigate these means in trade-off situation, where an organization may only be able to offer partially complete privacy protection and/or promotions and/or convenience, While privacy protection (secondary use, improper access) are associated with positive valences, we also find that financial gains can significantly increase the individuals' motivational score of a website in Korea. One important implication of this empirical analysis is that organizations may possess means to actively manage the privacy concerns of Internet users. Our findings show that privacy policies are valued by users in Korea just as in the US or Singapore. Hence, organizations can capitalize on this, by stating their privacy policy more prominently. Also organizations would better think of strategies or means that may increase online users' willingness to provide personal information. Since financial incentives also significantly increase the individuals' motivational score of website participation, we can quantify the value of website privacy protection in terms of monetary gains. We find that Korean Internet users value the total privacy protection (protection against errors, improper access, and secondary use of personal information) as worthy as KW 25,550, which is about US 28. Having done this conjoint analysis, we next adopt cluster analysis methodology. We identify two distinct segments of Korea's internet users-privacy guardians and information sellers, and convenience seekers. The immediate implication of our study is that firms with online presence must differentiate their services to serve these distinct segments to best meet the needs of segments with differing trade-offs between money and privacy concerns. Information sellers are distinguished from privacy guardians by prior experience of information provision, To the extent that businesses cannot observe an individual's prior experience, they must use indirect methods to induce segmentation by self-selection as suggested in classic economics literature of price discrimination, Businesses could use monetary rewards to attract information sellers to provide personal information. One step forward from the societal trends that emphasize the need of legal protection of information privacy, our study wants to encourage organizations and related authorities to have the viewpoints to consider both importance of privacy protection and the necessity of information trade for the growth of e-commerce.

• 한국항공운항학회지
• /
• 제28권4호
• /
• pp.176-181
• /
• 2020

In the face of the unprecedented crisis of coronavirus disease (COVID-19), the aviation and tourism industry fell without help. The bigger problem is that a crisis like COVID-19 can always come back. A new variant of the virus that is more powerful than COVID-19 may emerge, and another crisis such as a massive war may come. In addition, there may be an unexpected large-scale crisis that could shake the survival of the aviation and tourism industry in place. At that time, the aviation and tourism industry should not be pushed into a survival crisis defenselessly. Taking the experience of the crisis caused by COVID-19 as a crucial lesson, sufficient protection measures should be prepared in advance, and within the protection measures, the overall capabilities of the aviation and tourism industry should be preserved, and preparation should be made for the aftermath of the crisis. There is a need to establish a support system in which financial resources that can be used in crisis situation can be secured in advance, and various support measures can be implemented as effectively as possible by using the secured financial resources. Regarding the preparation for financial resources, various fundraising, insurance, and compensation for losses by the state or local government may be considered as a priority, and in addition, there is a need to continuously consider ways to prepare additional financial resources. On the other hand, in terms of system construction, establishment of the system inside the aviation and tourism industry may need to be considered first, but the improvement of related laws and systems needs to be more actively discussed and related legislation needs to be actively promoted.