Naver, Kakao, and Viva Republica (Toss) were rejected as a new identity verification agency submitted to the government. Although it went through additional screening due to lack of qualification requirements, it did not meet the criteria for designating an identity verification agency, which must meet strict standards.
The Korea Communications Commission held a plenary meeting on the 9th and concluded that it was difficult to designate it as a new identity verification agency requested by Toss, Naver, and Kakao.
The identity verification agency is a place that does not use a resident registration number and provides an alternative means of authentication, and must undergo an examination by the Korea Communications Commission. It is a system introduced to suppress the use of social security numbers on the Internet as much as possible due to frequent accidents in which a large number of resident numbers were leaked by some companies in the past.
If designated by an identity verification agency after examination by the Korea Communications Commission, a resident number can be collected and identity verification can be performed by providing an alternative authentication means to information and communication service providers.
The three corporations, whose designation was rejected on this day, began to be screened together with Korea Trade Information and Communication, but as they correspond to special permission to collect and use resident numbers that require a high level of management of personal information, they are different from their technical security level Additional screening was performed to examine service relevance.
■ It does not meet the basic standards of the identity verification agency
According to the results of the examination, Toss has not been equipped with facilities to generate and issue the issuing and alternative means of identification information. It is an explanation that it does not meet the basic requirements of an identity verification agency.
Naver and Kakao issue an alternative means of resident ID, but the fact that they cannot verify that they are the same as the actual users caught an ankle.
So-ra Lee, head of the Internet User Policy Division of the Korea Communications Commission, said, “Toss has built a separate identity verification system, but it plans to provide identity verification services using the means of other organizations instead of directly creating a means of substituting a resident number for identity verification. I didn’t” he explained.
In addition, he added, “Therefore, it is inappropriate in the items of facilities to manage and provide identification information issuance, identification information, duplicate subscription confirmation information, and connection information.”
“Kakao and Naver issue an alternative means of resident registration number to provide identity verification service to members who have signed up for an existing non-real name account, but they cannot identify whether the owner of the alternative means and the actual user are identical, so the alternative means is stolen or hacked. There is a possibility of illegal use of the back,” he said.
■ Safety is the priority for identification information… It cannot be used for any other purpose.
The secretariat’s conclusion is that it is difficult to designate an identity verification agency due to the fact that it has failed to meet the criteria for designating identity verification and adding the opinions of the external review committee.
To this conclusion, all the standing members of the Korea Communications Commission expressed the same meaning.
Standing Committee member Kim Hyo-jae said, “Toss requires conditional permission, but it is judged that it is basically inappropriate. It is different from this case because it is something.”
He continued, “Naver and Kakao are fundamentally a part to be resolved, but identity verification must prove the uniqueness of’I am me’, but it is difficult to designate an identity verification authority by a national agency unless there is a clear method to resolve the expert opinion that there is a risk of takeover. ”He added.
Standing Committee Member Ahn Hyung-Hwan said, “Applicants may prepare and release new and innovative identity verification services, and there is a need to consider them.” However, when considering the purpose of minimizing the collection of social security numbers on the Internet, security, and user protection, I agree with the results of the review.”
Related Articles
Naver, Kakao, Toss, additional examination for designation of identity verification agencies
Rep. Park Seong-joong “Requirements for designation of identity verification agencies should be strengthened”
Accredited certification industry tensions on the advancement of private certification’pass’
Telecom companies and credit card companies also propose a bill to provide’authorized electronic signatures’
Commissioner Ahn also said, “In the future, as the entry into the non-face-to-face digital society will become full-fledged, we will be interested in applying for identity verification agencies in addition to existing telecommunications companies and Internet providers.” “There is a need to consider how many organizations are appropriate considering service demand and stability. It is also necessary to discuss the improvement of effective screening procedures.”
Chairman Han Sang-hyuk said, “In the review process, we comprehensively reviewed the opinion that values should be placed on protection and safety as much as the request for minimum user convenience and the collection of private personal information. “There can be many problems in using the identification information in a way that an accident occurs and then responds to it.”