단거리 무선 통신을 이용한 개인 간 분산 신원증명 시스템 제안
Proposal for a Peer Decentralized Identity System Using Short-Range Wireless Communications
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
분산 신원증명은 정보주체가 자신의 신원정보를 직접 관리하고, 필요시 제공한다는 자기주권 신원증명의 개념을 기반으로 하고 있다. 하지만, 발급기관으로부터 신원정보를 발급받아 온다는 절차가 필요하고, 발급기관의 관리 소홀로 인한 대량의 정보 유출 우려가 존재한다. 본 논문에서는 정보주체와 발급기관을 일치시켜 1:1 또는 1:N 소규모 그룹에서 참여자들만 신원증명이 가능한 Peer DID 기술을 기반으로 개인 간 분산 신원증명 시스템을 제안한다. 블루투스와 같은 단거리 무선 통신을 이용하여 모바일 디바이스로 직접 연결하고, 정보주체가 직접 자신의 정보를 생성하여 상대방에게 제공하므로 정보의 자기주권을 실현한다. 제안 시스템을 통하여 신원증명 절차를 간소화하고, 보안 및 프라이버시를 개선할 수 있으며, 비용도 절감할 수 있다. 나아가 제안 시스템과 분산 원장을 연결하여 다른 도메인의 이용자와 상호 신원증명 할 수 있도록 확장된 구성도 가능하다. 향후에는 다양한 기술을 기반으로 사람과 사물, 사물과 사물 인증에도 활용할 수 있는 신원증명 시스템에 대한 확장 연구가 필요하다.
Abstract
Decentralized Identity is based on the concept of self-sovereign identity, in which holders manage and provide their own credentials. However, a procedure is required to obtain credentials from issuers, and there is a risk of mess personal information leaking due to negligence of the issuers. In this paper, we propose a peer decentralized identity system based on Peer DID technology that allows only participants to verify their identity in 1:1 or 1:N small groups by matching the holder with the issuer. It is directly connected to a mobile device using short-range wireless communications such as bluetooth, and the holders create and provide their own credentials in person to the other party, thus fully realizing the self-sovereignty identity. The proposed system can simplify the identification process, improve security and privacy, and reduce costs. Furthermore, an extended architecture is possible to connect the proposed system and the distributed ledger to identify users in other domains. In the future, based on various technologies, it is also necessary to expand research on identity systems that can be utilized for human-to-thing and things-to-things authentication.
참고문헌 (27)
- Personal Information Protection Commission, "Enforcement Decree of the Personal Information Protection Act, Article 19", National Law Information Center, Ministry of Legislation, Presidential Decree No. 31429, ~ (2021)
- "Abolition of monopoly status of accredited certificates, Private authentication market opens" (2021)[URL]
- MSIT release, "December 10, Abolition of the Accredited Electronic Signature system" (2020), Ministry of Science and ICT
- Korea Disease Control and Prevention Agency, "Act on the Prevention and Management of Infectious Diseases, Article 49", National Law Information Center, Law no. 17920, ~ (2021)
- The need for DID-based mobile ID for the post-corona era, "Kanghyo Lee", Korean Internet &Security Agency, ~, pp.KISA Report, vol.10 (2020)
- Joint of Relevant Ministries, "Blockchain technology diffusion strategy" (2020), Ministry of Science and ICT
- Security Technology Research Team, "The concept and overseas technology trend of decentralized ID", e-Finance and Financial Security, 16, pp.15~39 (2019), Financial Security Institute
- Hee-won Shim, "Domestic and overseas trends and implications of decentralized ID technology" (2019), Korea Financial Telecommunications &Clearings Institute
- Manu Sporny, "Verifiable credentials data model 1.0", W3C Recommendation, ~ (2019)
- DaeGeun Yoon, "Self-sovereign identity verification structure analysis" (2020), Jpub
- Drummond Reed, "Decentralized Identifiers (DIDs)v1.0", W3C Recommedation Draft, ~ (2021)
- HyoKwan Kang, "Status of domestic authentication technology and service", Korea Institute of Information Security and Cryptology, 30(3), pp.31~36 (2020)
- "Inoculation certificate, mutual recognition between countries is urgently needed"[URL]
- "Pilot implementation of mobile driver's license from year-end ...Nationwide expansion next year"[URL]
- Oskar Deventer, "Peer DID Method Specification", W3C, ~ (2021)
- "Peer DIDs: a secure and scalable method for DIDs that’s entirely off-ledger"[URL]
- "Aries RFC 0023: DID Exchange Protocol 1.0"[URL]
- Core Specification Working Group, "Bluetooth Core Specification", Bluetooth Special Interest Group, ~ (2019)
- "Bluetooth Pairing Part 4:Bluetooth Low Energy Secure Connections –Numeric Comparison"[URL]
- 5th generation Bluetooth technology for wearable devices, "Y. H. Kwon", Institute of Information &communications Technology Planning & Evaluation, ~, pp.Weekly ICT Trend, vol. 1961 (2020)
- "Korea Certification Authority Central"[URL]
- Assessing Threats to Mobile Devices & Infrastructure, "Joshua M Franklin", National Institute of Standards and Technology, ~, pp.Interagency Report 8144 (2016)
- John Padgette, "Guide to Bluetooth Security", National Institute of Standards and Technology, ~ (2017)
- 김선주, "스마트폰 고유정보를 이용한 안전한 개인키 관리 방안", 한국콘텐츠학회 논문지, 16(8), pp.90~96 (2016), 한국콘텐츠학회[DOI]
- Trusted Computing Group, "TPM 2.0Mobile Reference Architecture", TCG specification, ~ (2014)
- "TPM & TEE –working together in harmony"[URL]
- S. H. Kim, "Analysis on Trends for White-Box Cryptography and Its Application Technology", Electronics and Telecommunications Research Institute, Electronics and Telecommunications Trends Analisys, 25(5) (2010)