아이핀 대량 부정발급 사고에 대한 개선방법 연구
A Study of the Improvement Method of I-pin Mass Illegal Issue Accident
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
The almost of Web page has been gathered the personal information(Korean resident registration number, name, cell-phone number, home telephone number, E-mail address, home address, etc.) using the membership and log-in. The all most user of Web page are concerned for gathering of the personal information. I-pin is the alternative means of resident registration number and has been used during the last ten-year period in the internet. The accident of I-pin mass illegal issue was happened by hacker at February, 2015. In this paper, we analysis the problems of I-pin system about I-pin mass illegal issue accident and propose a improvement method of it. First, I-pin issue must be processed by the off-line of face certification in spite of user’s inconvenience. Second, I-pin use must be made up through second certification of password or OTP. The third, the notification of I-pin use must be sent to the user by the text messaging service of cell-phone or the E-mail. The forth, I-pin must be used an alternative means of Korean resident registration number in Internet. The methods can reduce the problems of I-pin system.
Abstract
The almost of Web page has been gathered the personal information(Korean resident registration number, name, cell-phone number, home telephone number, E-mail address, home address, etc.) using the membership and log-in. The all most user of Web page are concerned for gathering of the personal information. I-pin is the alternative means of resident registration number and has been used during the last ten-year period in the internet. The accident of I-pin mass illegal issue was happened by hacker at February, 2015. In this paper, we analysis the problems of I-pin system about I-pin mass illegal issue accident and propose a improvement method of it. First, I-pin issue must be processed by the off-line of face certification in spite of user’s inconvenience. Second, I-pin use must be made up through second certification of password or OTP. The third, the notification of I-pin use must be sent to the user by the text messaging service of cell-phone or the E-mail. The forth, I-pin must be used an alternative means of Korean resident registration number in Internet. The methods can reduce the problems of I-pin system.
참고문헌 (14)
- "한국인터넷진흥원"[URL]
- "'아이핀' 불법 발급받아 거래한 일당 검거"[URL]
- "'주민등록번호 대체하는 ‘아이핀’도 뚫렸다"[URL]
- "아이핀, 대량해킹 유출사고 발생해... ”아이핀, 너마저도"[URL]
- "56시간30분 이상유무 감지 못한 '공공 아이핀'"[URL]
- "주민번호 대체 '아이핀' 해킹사고, 보완책 시급"[URL]
- 이형효, "주민등록번호 대체수단 요구사항 연구", 한국정보기술학회, 한국정보기술학회하계학술대회논문집, pp.398~401 (2010)
- 이형효, "개인정보보호를 위한 주민등록번호 대체수단 및 관리체계", 한국정보기술학회논문지, 8(6), pp.49~58 (2010), 한국정보기술학회
- 안정희, "인터넷상의 주민등록번호 대체수단의 문제점과 해결방법", 디지털산업정보학회논문지, 4(3), pp.78~89 (2008), 디지털산업정보학회
- 최윤성, "주민등록번호 대체수단에 대한 구현 취약점 분석", 정보보호학회논문지, 17(2), pp.145~186 (2007), 한국정보보호학회
- 이영교, "공인인증서를 이용한 주민등록번호 대체수단에 관한 연구", (사)디지털산업정보학회 논문지, 10(3), pp.107~117 (2014), (사)디지털산업정보학회
- "공공아이핀 전면 재발급…주민번호 대체 근본책은"[URL]
- "아이핀 관리체계 民ㆍ公 '따로' …보안ㆍ개인정보 정책도 '따로'"[URL]
- "5월부터 전면 재발급 ‘공공아이핀’, 본인 확인 후 재사용…부정사용방지시스템 도입'"[URL]
