• 정보보호뉴스
• /
• no.9 s.132
• /
• pp.14-18
• /
• 2008

개인정보보호 유출사고가 줄지어 법정으로 향하고 있다. 내외부자에 의한 고객정보의 불법 유출이 그 원인으로, 굵직굵직한 소송사건들이 과연 어떤 판례를 남기게 될 지가 많은 기업들에게 초미의 관심사가 되고 있다. 개인정보를 대량으로 수집하는 기업들이라면 이런 법정 공방은 '내' 문제가 될 수 있기 때문이다. 이와 같은 기업의 관심은 자연스럽게 데이터베이스 즉, DB 보안에 대한 관심으로 이어지고 있다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2018.10a
• /
• pp.300-303
• /
• 2018

유럽연합(EU)의 GPDR(개인정보보호일반규정)시행에 따라 개인정보를 활용하는 사업자 입장에서는 개인정보 보호도 중요하지만 활용측면에 더 많은 관심을 보이고 있다. 개인정보 보호와 활용에 따른 균형점을 찾는 제도적 정착을 위해 개인정보 이동권에 대한 요구가 생겼다. 국내 개인정보 관련 법률에는 아직 근거가 없으며 개인정보처리자의 독립적 데이터 보유에 따른 책임 강화와 정보주체가 자신의 데이터를 관리하는 권리를 가지고 데이터 활용을 할 수 있는 개인정보 자기결정권이 더 요구된다. 이에 따라 본 논문에서는 GDPR의 개인정보 이동권에 대한 현황 및 준수사항을 알아보고 각 나라별 개인정보 이동(data portability)에 따른 개인정보 활용방안과 고려사항을 제시하고자 한다. 개인정보이동에 한 형태로 국내 마이데이터 시범 사업이 정착하기 위한 법칙, 기술적 대응사항을 제시하고자 한다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.26 no.1
• /
• pp.275-283
• /
• 2016

Currently Internet and IT infrastructure of Korea has maintained the world's highest levels. But in another aspect, security incident, especially personal information breaches occur frequently. As personal information leakage happened, the companies will be negatively affected. And to prevent this, they have implemented to use a variety of security solutions from information security vendors. Therefore we set up hypotheses that the companies experienced personal information leakage as well as information security companies providing security solutions will be affected by the leakages. So this paper verify hypotheses about the impact of the value of information security companies, through analysing stock price fluctuation of the companies. We found that the stock price of information security companies has increased as personal information leakage happened. And differences according to leakage volumes and types of business are not statistically significant. But there are significant differences according to business classification of information security companies.

• Journal of KIISE:Information Networking
• /
• v.36 no.4
• /
• pp.297-308
• /
• 2009

In 2008, ETRI developed a new mobile digital ID wallet, in which anyone can store personal information and PKI credential. When the wallet is used, privacy protection is one of the most important problems and personal information should be protected under various usage scenarios such as exchanging sensitive information in on/off-line environments, joining as a new member in the web site, etc. In this paper, we propose a triangular trust management scheme that can effectively manage trustness and also protect sensitive personal information. This scheme relies on three techniques: PKI, reputation and condition (situation context). We implemented prototype of our scheme, and tested it under various scenarios, which showed that the proposed scheme can effectively be used for diverse cases.

• Journal of Korea Entertainment Industry Association
• /
• v.13 no.6
• /
• pp.53-67
• /
• 2019

This study is expected to be of significance in that it attempted to examine the personal information protection awareness of college students and the state of their personal information protection as prospective information processors and private information owners to boost their will to put private information protection in practice. As a result of making an analysis, the most common average time that the students spent in doing every online activity on weekdays was fewer than two or three hours, and the most dominant activities that they did over the Internet were for entertainment or hobbies. As for awareness of the nature of the Internet, they looked upon it as a quite open public space. Regarding the state of private information protection, they thought that changing passwords on a regular basis would be beneficial to personal information protection, and many thought that it's needed to withdraw from or shut down web sites that weren't used for a long time. In terms of actual practice, however, they didn't change their e-mail passwords regularly on the grounds that it's a hassle, and even the students who had experience of personal information leakage didn't report it or didn't ask for counsel on the grounds that they didn't want to be bothered as well. The majority of the students weren't cognizant of how to report or seek counsel. In the future, personal information protection should be educated on a continual basis as part of curriculum to raise awareness of it among students and boost their will to practice it with a sense of responsibility in an effort to prevent the occurrence of collateral damages triggered by personal information leakage.

• Review of KIISC
• /
• v.19 no.1
• /
• pp.115-124
• /
• 2009

오늘날 의료는 정보통신 기술의 발달과 소비자의 건강에 대한 관심 고조 등을 동인으로 하여 기존의 환자가 치료 목적으로 병원을 찾아가던 환경에서 개인의 질병 예방과 건강 증진을 위해 언제 어디서나 의료서비스가 찾아가는 소위 u-Health 환경으로 패러다임이 전환되고 있다. 본 논문은 이러한 환경에 대처하는 보건의료 관련 법제에 대한 연구로 현행법률과 현재 계류 중인 법안을 고찰하여 가장 민감한 개인정보인 건강정보의 보호와 활용의 균형을 위한 입법 방향을 제시하였다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.26 no.4
• /
• pp.995-1012
• /
• 2016

In Internet of Things (IoT) environments, devices or sensors everywhere can automatically collect data without the individual awareness, further combine and share data using ubiquitous network, and thus the development of IoT raises new challenges in respect of personal data protection and privacy. This study aims to identify main issues related to data protection in the IoT and propose adequate measures. We analyzed the types of personal data controllers and processors in IoT and figured out the issues regarding the processing of personal data and the rights to privacy of data subject. Accordingly, we suggested the institutional ways (e.g., establishment of user-friendly notice and flexible consent system, re-identification risk monitoring system, data protection in cross-border transfer, and user education) to improve the situation of personal data protection in IoT and finally proposed the improvement tasks to carry out first based on the degree of urgency and importance.

• The Journal of the Convergence on Culture Technology
• /
• v.5 no.1
• /
• pp.219-225
• /
• 2019

Today, in the era of the 4th Industrial Revolution, the cloud computing sector has advantages for cost reduction and efficiency of work, but problems related to privacy may arise. Therefore, the law on the development of cloud computing and user protection should be improved to enable providers of cloud computing services to proactively identify whether or not they contain their personal information, or to take steps to protect their privacy. And this same law is desirable to improve the implementation of a national mandatory certification system for privacy protection systems for cloud computing businesses. This same law is also desirable that cloud computing service providers create direct accountability for privacy breaches and appropriate scope for those responsibilities.

• Journal of Advanced Navigation Technology
• /
• v.26 no.4
• /
• pp.244-248
• /
• 2022

The various digital services that people are experiencing recently are bringing about changes in the daily lives, and these changes are due to the spread of the Fourth Industrial Revolution. The 4th Industrial Revolution is based on the development of ICT technology, and ICT technology inevitably generates issues such as the use and protection of personal information as well as the use of public data. Accordingly, countries around the world are making efforts to revitalize new industries by wisely solving conflicting issues between the use and protection of personal information through legislation. There are some differences in the protection and use of personal information in Korea, the United States, and the EU. Korea trys to make the legislation that prioritizes the use of data, and the United States establishes individual laws governing the protection of personal information by sector, while the EU has clarified the strengthening personal information protection. This paper aims to find out how personal information protection is defined in Korea, the United States, and the EU through enacted laws and organize the direction of the future policies.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.10c
• /
• pp.451-453
• /
• 2002

정보화 시대를 맞이하여 정보 인프라의 확충과 이를 기반으로 한 다양한 비즈니스 모델이 출현하면서, 인터넷 비지니스는 우리 산업의 중심으로 확산되고 있다. 이에 따라 개인과 개인, 기업과 기업, 기업과 개인간에 새로운 커뮤니케이션 수단으로 부상한 전자메일은 이제 우리 사회를 윤택하게 만드는 필수도구로 자리잡았다. 더군다나 전자메일은 그 파급효과나 비용절감의 측면에서 수많은 인터넷기업의 마케팅 수단으로써 범용적으로 활용되고 있다. 그러나 최근들어 불법 스팸메일과 유해성 메일이 급증하면서 전자메일 환경이 급속도로 악화되고 있어 그 위험수위가 극에 달해 있다. 이러한 불법 스팸메일은 전자메일 마케팅에 대한 신뢰도를 하락시켜 기업 활동을 위축시키고 있으며 유해성 메일에 무방비로 노출되어 있는 청소년 보호와 인터넷상의 개인정보보호 차원에서도 반드시 척결되어야할 “공공의 적”이라는 인식이 확산되고 있다. 하지만 최근 인터넷상의 공개된 전자메일 주소를 수집, 가공하여 스팸메일을 대량으로 발송할 수 있는 자동화된 프로그램의 개발로 인하여 스팸메일을 더욱 증가하고 있는 추세이다. 이 논문에서는 이러한 문제정점을 인식하고 자동화되어있는 전자메일 추출 프로그램으로부터 전자메일 주소를 보호할 수 있는 방안을 제시한다.