PASS, Payco … Even the private certificate is fine by this year’s agreement



[ad_1]

Q&A certification system that changes from 10

There are several ways to authenticate users online. The exclusive status of accredited certificates is abolished and the door is opened to the participation of various private companies. The current public certificate is renamed to a joint certificate and competes with private certificates.

Issued from a PC or telephone without going directly to the bank
Authentication with 6-digit pin number or fingerprint

It is not necessary to install the active X vaccine
1-minute subscription, valid for 2-3 years

The monopoly status of existing accredited certificates abolished
It can still be used with private certificates

The Ministry of Science and ICT has announced that the revised bill of the law enforcement decree on electronic signature will be implemented from 10 after the approval of the State Council.

In the year-end settlement of workers early next year, users can choose from a number of private certificates and joint certificates. I have summarized what and how accredited certificate revocation changes in a question and answer.

Revision of the law on electronic signature

Revision of the law on electronic signature

The public certificate currently in use will not be available from 10.
“no. Existing accredited certificates can be used until the expiration date. When the expiration date expires, it can be renewed and used. However, the legal effect of the” certified “certificate disappears. Currently, accredited certificates are only issued from six government-recognized institutions such as the Financial Clearinghouse. As such, the government has recognized its superior legal effect. However, after the 10th, it will become one of several certificates. Remove the word “authorized” and change the name to certificate ” joint “. Used with a variety of private digital signature certificates.”

What changes when introducing a private certificate?
“Consumers can choose from a variety of certificates and use them. It also simplifies the way to identify the subscriber. Previously, only face-to-face confirmation was allowed, but in the future, non-face-to-face confirmation will also be possible via PC or smartphone. Instead of a strong password with more than 10 digits, you can use biometric information such as fingerprints or simple passwords (PINs). “

Should I continue to download the security program?
“no. If you are using a private certificate, you do not need to install various security programs such as ActiveX or vaccine, which are required to follow the existing public certificate. The recently appeared private certificate can be downloaded and used directly from your mobile. Even if you don’t go in the bank, you can register in about a minute and the validity period of the certificate is 2-3 years. “

The most common use of private certificates.
“The three mobile telecommunications companies currently dominate the private certificate market. In April last year, it released PASS (pass), a self-authentication application (app). At the end of last month, the cumulative number of issues exceeded 20 million. The PASS certificate can be issued within one minute by authenticating biometric information such as a six-digit PIN or fingerprint in the app. The certificate can be used free of charge for 3 years. However, please note that there are additional services provided for a fee in the PASS app. The Korea Communications Commission explained that the number of additional paid services attracting users is increasing and urged users to subscribe to paid services without their knowledge so as not to increase the burden of communication costs “. Choi Kyung-jin of Gachon University’s Department of Law said, “If private certificates are paid, low-income people who are marginalized by the digital divide may feel another barrier to entry.” We need political wisdom.)

What about other private certificates?
“Kakao Pay authentication has prevented forgery and alteration by applying blockchain technology. There is no need to install a separate program when users log into the affiliate service. You can authenticate with a six-digit PIN or biometric information on KakaoTalk. Toss has introduced a authentication service via a mobile app in 2018. At the end of last October, the cumulative number of issues exceeded 17 million. With Naver Certificate, you can check electronic invoices on the mobile app and even pay with Naver Pay. NHN Payco launched its certification service in September. When a certificate is issued with the Payco app, a notification is sent to the smartphone when identification or electronic signature is required. At this point, if the user enters a template or a predetermined fingerprint, the user is authenticated. “

What type of certificate can I use for year-end settlement early next year?
“The government is planning to expand and introduce private certificates in the public sectors such as the year-end settlement of the National Tax Service. Recently, five candidates have been selected: Kakao, KB Kookmin Bank, NHN Payco, PASS and Korea Information Certificate. After selecting a pilot trader at the end of this month, it will apply to the year-end settlement early next year. The Korea Internet & Security Agency’s assessment team and the Ministry of Public Administration and Security are planning to inspect each company’s security level on-site and see if a regular service is available. The existing public certificate, which has been renamed as a joint certificate, can still be used for year-end settlement. “

Can you trust privately created certificates?
“The Ministry of Science and ICT has introduced the ‘System of evaluation and recognition of the electronic signature certification service’ to evaluate the reliability and security of private certificates. Only companies that have passed standards such as counterfeiting and alteration prevention measures can issue private certificates. Since the KS mark is awarded to industrial products that meet industry standards, a separate certification will be given to private certificates that meet the standards, explained the Ministry of Science and ICT. ”

Reporter Park Hyung-soo [email protected]




[ad_2]
Source link