After revoking the accredited certification… The government recommends public certification to take a copy

Lee, 50, an office worker with three children, had an absurd experience last week while trying to book a restaurant for a family dinner. The restaurant said, “If you want a family of 5 to eat together, please send us a copy of resident registration that proves that the address is the same.”

Lee tried to access the Government 24 to obtain a copy of resident registration, but the period of the existing public certificate had expired. He said, “When I access the bank’s homepage to get a new public certificate, I can get a’financial certificate’ instead of a public certificate. So, I was issued a financial certificate as recommended, but after that I was embarrassed.” Mr. Lee said, “Because Government 24 wants to issue a certified copy, they are asked to sign up for the’Digital One Pass,’ an ID that can be used by government agencies. The login screen popped up.” In the end, the Lee family gave up eating out on this day.

When the government completely abolished the public certificate on December 10th, the public certificate was renamed to a’joint certificate’, one of various certifications, but there are still many places that require public certificates in government and public sites. The same is true of the government site’M-Safer’, which informs whether there are any smartphones opened in my name without my knowledge. When you log in to MSafer, you can view the details of the smartphone that has been opened under your name, and you can set the desired communication company to disable additional activation.

Kim Mo, who lives in Daegu, recently saw the news that a mobile phone dealership employee opened a smartphone for a customer in his 70s, secretly opening two smartphones with a copy of resident registration and a copy of a bankbook, and received a loan of up to 15 million won. Kim, who opened his smartphone in December, was worried about whether another mobile phone was opened in his name.

He said, “After asking my daughter somehow and after somehow searching, I got to know M-Safe. When I tried to check the site, they said that I could only log in with a joint certificate. This is the change of the public certificate, but I’m nervous, so I don’t even do internet banking. “I’m a person who only deals with the counter. Is there any way for someone like me to know if the name of a smartphone is stolen?”

Regarding this, an official from the Ministry of Public Administration and Security said, “Government 24 service also has a security level. You can simply view information in Government 24 in four ways: ID password, digital one pass, public certificate, fingerprint and security, but the resident registration copy is security level. Because of this high data, the existing public certificate is still required,” he said. “From mid-January, the private digital signature service will be available.”

Currently, 7 companies including Kakao’s Kakao Pay, Bank Association’s Bank Sign, Viva Republica’s Toss, 3 telecom companies’ Pass (PASS), Naver’s Naver Certification, KB Kookmin Bank’s KB Star Banking, and NHN Payco’s Payco. Launched a private digital signature service. It is welcome to see various private certificates coming out and the opening of related markets, but there are still many places that are reluctant to introduce them.

There are also concerns that the passage of personal information leakage may increase if the government does not improve the security system. An official in the security industry said, “The digital signature is a means of proving that’I am’ on the Internet. With a public certificate, all financial transactions are possible and sensitive information such as a resident registration copy can also be issued.” Because of that, the passage to be leaked was limited, but the more a certificate is issued here and there, the greater the risk of leakage, so it needs to be supplemented.”

An official from the Ministry of Public Administration and Security said, “We plan to expand other public websites after the evaluation of private electronic signature companies by the Ministry of Science and ICT is completed in April-May this year. Regarding security concerns, security standards are established through evaluation and certification with the Ministry of Science and ICT “I will make sure it meets.”

[신찬옥 기자]
[ⓒ 매일경제 & mk.co.kr, 무단전재 및 재배포 금지]