Skip to main content
UploadLanguage (EN)Support
BusinessMobileSocial MediaMarketingTechnologyArt & PhotosCareerDesignEducationPresentations & Public SpeakingGovernment & NonprofitHealthcareInternetLawLeadership & ManagementAutomotiveEngineeringSoftwareRecruiting & HRRetailSalesServicesScienceSmall Business & EntrepreneurshipFoodEnvironmentEconomy & FinanceData & AnalyticsInvestor RelationsSportsSpiritualNews & PoliticsTravelSelf ImprovementReal EstateEntertainment & HumorHealth & MedicineDevices & HardwareLifestyle
OpenID Foundation Japan, profile picture
Uploaded byOpenID Foundation Japan
PDF, PPTX2,083 views

韓国における FIDO/ eKYC /DID の現状と今後の取り組み - OpenID Summit 2020

韓国におけるFIDO/ eKYC /DID の現状と今後の取り組み Bradly Kim - RaonSecure Co., Ltd.R&D Center/CTO

Technology◦
Download as PDF, PPTX
韓国におけるFIDO/eKYC/DIDの現状と今後の取り組み “ Own Your Identity in the Digital World ”
SP Authentication/ Transaction Off-line KYC eKYC Private CA VerifyCERT Public CA VerifyCERT VerifyFIDO DIDDocument Authentication/ Transaction Authentication/ Transaction Authentication/ Transaction VerifyCERT VerifyFIDO-key
電子署名法 - 他の法令で文書への署名が必要な場合公認電子署名。。。 ActiveX - 民間大手ウェブサイト 2014年(1644個)  2016年(358個) : 78.2% 減少
Auth-Key Transaction Key BIO-PKI APP Protect Trasaction key 3Access transaction Key 2 ACL on Hardware level 1 * Transactionkey is privatekey for public-CERT
Certification is proected on Application level Certifiction is protected on TEE (Trusted Execution Environment) Certification is directly issued on TEE(ex.USIM) 1 year 3 years 5 years Public-CERT BIO based Public-CERT BIO based public-CERT
Government Portal site Authentication process
SP Authentication/ Transaction Off-line KYC eKYC Authentication/ Transaction Authentication/ Transaction 多様な技術の根幹容易できた （pki-CERT, FIDO ....)宿題
分類 必須有無 説明 身分証コピー本 Mandatory (択2) 身分証スキャン後OCR判読及び偽造確認 ビデオ通話 顧客とのビデオ通話で身分証写真との比較 宅急便での確認 OTP、キャシューカード運送時本人確認 既存口座利用 少額の口座振り込みで本人確認 その他 FIDOなどの生体認証での本人確認 個人情報検証 Optional 顧客提供の個人情報とクレジット情報会社が保有した情報を比較 他の本人確認利用 公認証明書、SMS、ARSなどでの本人確認
名前、住民番号、 電話番号 通信社本人確認 認証手段登録 PIN/Pattern 必須、指紋はOption 身分所スキャン 及び登録 他口座振込 送金口座での入金確認 完了 名前、住民番号、 電話番号 PIN設定 (LogIn用) 加入完了 口座パスワード 設定 デバイス認証 (SMS認証) 身分所スキャン 及び登録 本人確認 完了 また、簡素化したい
did = "did:" method-name ":" method-specific-id method-name = 1*method-char method-char = %x61-7A / DIGIT method-specific-id = *idchar *( ":" *idchar ) idchar = ALPHA / DIGIT / "." / "-" / "_“ { "@context": "https://www.w3.org/2019/did/v1”, "id": "did:omn:123456789abcdefghi“, "publicKey": [{ "id": "did:omn:123456789abcdefghi#keys-1", "type": "RsaVerificationKey2018", "publicKeyPem": "-----BEGIN PUBLIC KEY...END PUBLIC KEY-----rn" }] } 参考. https://w3c-ccg.github.io/did-spec/#decentralized-identifiers-dids
参考. https://www.w3.org/TR/vc-data-model/#what-is-a-verifiable-credential Verifiable Presentation Presentation Metadata Verifiable Credential(s) Proof(s) Verifiable Credential Credential Metadata Claim(s) Proof(s)
1) request VC (Reg DID,FIDO) Bank Stock BlockChain Platform KFTC App
Centralized Authentication Federation Authentication Biometrics Decentralized Authentication • Authentication with Password - Each Authentication Server -Password based Authentication • IdP type Authentication Service - Oauth2.0, SAML2.0 - International Standard - IAM based Account Integration management • Passwordless Authentication - Mobile centric FIDO1.0 Spec compliant - Web browser, W3C WebAuthn compliant • Self-Sovereign - Deletion of Central Server Account Management - BlockChain based DID-Auth + VC 簡単認証 (DID-Auth) 諸証明書 (VC) 本人認証 (DID/VC) Data Hub 1 2 3 4
www.didalliance.org www.didalliance.or.kr www.omnione.net