• Proceedings of the Korea Information Processing Society Conference
• /
• 2015.10a
• /
• pp.832-834
• /
• 2015

최근 CCRA(Common Criteria Recognition Arrangement) 협정서 개정에 따라 공통평가기준인 CC(Common Criteria) 평가제도에 변화가 생기고 있다. 현재의 CC 평가제도가 가지는 한계를 보완하고자 PP(protection profile)를 대신하는 cPP(collaborative protection profile)가 개발되었는데, 기존의 폐쇄적으로 운영되던 PP 개발 프로세스와 달리 cPP 개발에는 CCRA 회원국의 여러 기관 및 기업이 적극적으로 개발에 참여할 수 있다. 따라서 현재 세계 각국에서 cPP 개발에 관한 논의가 활발히 진행되고 있으며 세분화된 연구도 요구되고 있다. 본 논문에서는 기존의 CC 평가제도가 가지는 한계를 살펴보고 이러한 한계를 극복하기 위한 cPP의 등장 및 개정되는 새로운 CC 평가제도의 운영을 분석한다.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.17 no.8
• /
• pp.2083-2100
• /
• 2023

The rise of Industry 5.0 has led to a smarter and more digital way of doing business, but with it comes the issue of user privacy and security. Only when privacy and security issues are addressed, will users be able to transact online with greater peace of mind. Thus, to address the security and privacy problems associated with industry blockchain technology, we propose a privacy protection scheme for online financial transactions based on verifiable ring signatures and blockchain by comparing and combining the unconditional anonymity provided by ring signatures with the high integrity provided by blockchain technology. Firstly, we present an algorithm for verifying ring signature based on distributed key generation, which can ensure the integrity of transaction data. Secondly, by using the block chain technique, we choose the proxy node to send the plaintext message into the block chain, and guarantee the security of the asset transaction. On this basis, the designed scheme is subjected to a security analysis to verify that it is completely anonymous, verifiable and unerasable. The protection of user privacy can be achieved while enabling online transactions. Finally, it is shown that the proposed method is more effective and practical than other similar solutions in performance assessment and simulation. It is proved that the scheme is a safe and efficient online financial transaction ring signature scheme.

• Knowledge Management Research
• /
• v.16 no.4
• /
• pp.35-45
• /
• 2015

Fintech, which means the convergence of finance and information technology, becomes a hot topic in the financial sector. Through innovative activities on financial services, ICT(Information and Communication Technology) is integrated into the overall financial industry, and a new form of financial services could be expected to improve the existing financial system. On the other hand, fintech services are relatively vulnerable to security issues. Due to the process simplication and the channel fusion, the leakage of personal and financial informations, authentication bypass, phishing, and pharming are getting more concerned. In this study we investigated the security risk of fintech services in the viewpoints of service provider, technology adoption, and security policy. The possible countermeasures to reduce those risks are suggested because security is an important criterion for selecting financial services. This study basically offers quantification of the potential security risks and step-by-step control measures about business processes in the fintech services. The suggested security model includes user authentication, terminal security, payment information protection, API(Application Programming Interface) security, and abnormal transaction monitoring. This study might contribute to an understanding of the security risks and some possible measures for mitigating those risks on the practical perspective.

• Journal of Arbitration Studies
• /
• v.20 no.3
• /
• pp.121-145
• /
• 2010

In the past, ADR has not been used as frequently in Japan as it has in other parts of the industrialized world. However, though litigation is still the most utilized vehicle of dispute resolution by Japanese financial institutions, this will be changing. The New Financial ADR system, which was created by a June 2009 amendment to the Financial Instruments and Exchange Act, is meant to deal with every stage of financial-related disputes and, as such, strives to resolve disputes before they become significant and acts to ameliorate any post-ADR issues that may remain, thereby completing the FIEA's purpose to protect investors. Since the foundation of the New Financial ADR system applies to all related industries, new provisions were set out in 16 business related acts, such as the Banking Act, the Insurance Business Act, and FIEA itself. October 2010 will mark the formal introduction of a new system of financial ADR in Japan. New Financial ADR in Japan will be modeled on the Financial Ombudsman Service in the United Kingdom, but will not feature one comprehensive dispute resolution system in which one dispute resolution institution covers all disputes in the financial field. The New Financial ADR system is merely one step towards a foundation of comprehensive financial ADR such as FOS. It must be noted, however, that this all important first step was over seven years in the making, involving a great deal of discussion, debate, and compromise amongst many parts of Japanese government, business, and society. The New Financial ADR system grants participating parties the ability to stop the clock on any statute of limitations which may correspond to any future possible court cases related to the dispute,13 and further grants the ability to suspend related court proceedings while the parties are utilizing the New Financial ADR system. In addition, where financial institutions have not accepted dispute resolution proceedings or have not accepted a special conciliation proposal, the Ministry of Finance may issue an order compelling compliance if it is found that certain actions are necessary to ensure the appropriate operations of a financial institution's business. In Japan, as best practices have not yet been created.

• Journal of Preventive Medicine and Public Health
• /
• v.50 no.6
• /
• pp.393-400
• /
• 2017

Objectives: To relieve the financial burden faced by households, the Korean National Health Insurance (NHI) system introduced a "copayment ceiling," which evolved into a differential ceiling in 2009, with the copayment ceiling depending on patients' income. This study aimed to examine the effect of the differential copayment ceiling on financial protection and healthcare utilization, particularly focusing on whether its effects varied across different income groups. Methods: This study obtained data from the Korea Health Panel. The number of households included in the analysis was 6555 in 2008, 5859 in 2009, 5539 in 2010, and 5372 in 2011. To assess the effects of the differential copayment ceiling on utilization, out-of-pocket (OOP) payments, and catastrophic payments, various random-effects models were applied. Utilization was measured as treatment days, while catastrophic payments were defined as OOP payments exceeding 10% of household income. Among the right-hand side variables were the interaction terms of the new policy with income levels, as well as a set of household characteristics. Results: The differential copayment ceiling contributed to increased utilization regardless of income levels both in all patients and in cancer patients. However, the new policy did not seem to reduce significantly the incidence of catastrophic payments among cancer patients, and even increased the incidence among all patients. Conclusions: The limited effect of the differential ceiling can be attributed to a high proportion of direct payments for services not covered by the NHI, as well as the relatively small number of households benefiting from the differential ceilings; these considerations warrant a better policy design.

• Korean Management Science Review
• /
• v.29 no.3
• /
• pp.23-43
• /
• 2012

Enacted for enhancing the competitiveness of the Korean capital market and financial industry, Capital Market Consolidation Act (CMCA) was intended to induce considerable changes such as adopting the concept of financial investment products, regulating financial investment functionally, extending financial investors' business areas and intensifying protection for investors. Employing DEA (Data Envelopment Analysis), this study measures and compares the efficiencies of domestic financial companies between the before and after the enactment of the Consolidation Act. We categorize the financial companies into 4 groups (banks, life insurance companies, property and casualty insurance companies and securities companies) depending on their business types, and evaluate how much and in which direction the Consolidation Act affects the efficiency of each group respectively. The study shows that there is no significant difference between the average efficiency of banks and that of property and casualty insurance companies due to the trade-off between opportunities and threats of the Act. To the contrary, it shows that the respective average efficiencies of life insurance companies and securities companies moved in the opposite directions to a considerable extent. Through empirical tests, we demonstrate the effect of the Act on the efficiency of Korean financial companies, and suggest the countermeasures for each financial group against the Act.

• The Journal of Asian Finance, Economics and Business
• /
• v.9 no.3
• /
• pp.365-375
• /
• 2022

This study examines the relationship between board gender diversity and financial performance. The annual data of Palestinian nonfinancial listed enterprises from 2015 to 2019 was analyzed using a longitudinal panel analysis for the study's purposes. When conditional mean regression methodologies were used in the study, the results indicate that there is an insignificant relation between board gender diversity and firm financial performance. However, when analyzing women directors' effect on a firm's financial performance, endogeneity is always a concern, therefore, we test for endogeneity by employing the Darbin-Wu Housman test and then by using 2SLS. Nevertheless, when looking at the dispersion of a firm's performance using quantile regression, the results show that having women on the board improves financial performance slightly, especially for high-financial-performing firms. The findings indicate that there is a legal significant gap hindering the protection of gender diversity in boardrooms, and limiting the existence and representation of women in leadership positions, specifically, board of directors. The results of this study contribute to corporate governance and business culture literature by shedding the light on the importance of board gender diversity, to improve the firm financial performance, and hence, protect the interests of all shareholders' categories.

• Convergence Security Journal
• /
• v.20 no.2
• /
• pp.37-52
• /
• 2020

The EU, the United Kingdom and South Korea are actively pursuing open banking to open financial information to fintech companies for financial structure reform and convenience of financial consumers. As open banking is gradually activated, the importance of stability and protecting users of open banking will increase. In particular, Korea has an electronic financial transaction law that has been in effect since 2007 to secure the stability and reliability of electronic financial transactions, but it is difficult to apply to participating organizations in open banking, so there is a risk of preventing security accidents and weakening user protection in open banking. Therefore, this paper examines the foreign legal system of open banking and analyzes the structure and characteristics of domestic open banking and suggests the ways to improve regulations necessary to strengthen open banking stability and user protection.

• Journal of Information Processing Systems
• /
• v.20 no.3
• /
• pp.391-398
• /
• 2024

Given the further promotion of economic globalization, China's financial market has also expanded. However, at present, this market faces substantial risks. The main financial and economic risks in China are in the areas of policy, credit, exchange rates, accounting, and interest rates. The current status of China's financial market is as follows: insufficient attention from upper management; insufficient innovation in the development of the financial economy; and lack of a sound financial and economic risk protection system. To further understand the current situation of China's financial market, we conducted a questionnaire survey on the financial market and reached the following conclusions. A comprehensive enterprise questionnaire from the government's perspective, the enterprise's perspective and the individual's perspective showed that the following problems exist in the financial and economic risk prevention aspects of big data and Internet of Things in China. The political system at the country's grassroots level is not comprehensive enough. The legal regulatory system is not comprehensive enough, leading to serious incidents of loan fraud. The top management of enterprises does not pay enough attention to financial risk prevention. Therefore, we constructed a financial and economic risk prevention model based on big data and Internet of Things that has effective preventive capabilities for both enterprises and individuals. The concept reflected in the model is to obtain data through Internet of Things, use big data for screening, and then pass these data to the big data analysis system at the grassroots level for analysis. The data initially screened as big data are analyzed in depth, and we obtain the original data that can be used to make decisions. Finally, we put forward the corresponding opinions, and their main contents represent the following points: the key is to build a sound national financial and economic risk prevention and assessment system, the guarantee is to strengthen the supervision of national financial risks, and the purpose is to promote the marketization of financial interest rates.

• Asia pacific journal of information systems
• /
• v.18 no.3
• /
• pp.45-65
• /
• 2008

The rapid growth of the Internet has increased the amount of transmission of personally identifiable information. At the same time, with new Internet related technologies, organizations are trying to collect and access more personal information than before, which in turn makes individuals concern more about their information privacy. For their successful businesses, organizations have tried to alleviate these concerns in two ways: (1) by offering privacy policies that promise certain level of privacy protection; (2) by offering benefits such as financial gains or convenience. In this paper, we interpret these actions in the context of the information processing theory of motivation. This paper follows Hann et al.(2007)'s methods to analyze Internet users privacy concerns in Korea and tries to compare the findings. Our research objectives are as follows: First, we analyze privacy concern mitigation strategies in the framework of the expectancy theory of motivation. Subsequently, we show how the expectancy theory based framework is linked o the conjoint analysis. We empirically validate the predictions that the means to mitigate privacy concerns are associated with positive valences resulting in an increase in motivational score. In order to accommodate real-life contexts, we investigate these means in trade-off situation, where an organization may only be able to offer partially complete privacy protection and/or promotions and/or convenience, While privacy protection (secondary use, improper access) are associated with positive valences, we also find that financial gains can significantly increase the individuals' motivational score of a website in Korea. One important implication of this empirical analysis is that organizations may possess means to actively manage the privacy concerns of Internet users. Our findings show that privacy policies are valued by users in Korea just as in the US or Singapore. Hence, organizations can capitalize on this, by stating their privacy policy more prominently. Also organizations would better think of strategies or means that may increase online users' willingness to provide personal information. Since financial incentives also significantly increase the individuals' motivational score of website participation, we can quantify the value of website privacy protection in terms of monetary gains. We find that Korean Internet users value the total privacy protection (protection against errors, improper access, and secondary use of personal information) as worthy as KW 25,550, which is about US 28. Having done this conjoint analysis, we next adopt cluster analysis methodology. We identify two distinct segments of Korea's internet users-privacy guardians and information sellers, and convenience seekers. The immediate implication of our study is that firms with online presence must differentiate their services to serve these distinct segments to best meet the needs of segments with differing trade-offs between money and privacy concerns. Information sellers are distinguished from privacy guardians by prior experience of information provision, To the extent that businesses cannot observe an individual's prior experience, they must use indirect methods to induce segmentation by self-selection as suggested in classic economics literature of price discrimination, Businesses could use monetary rewards to attract information sellers to provide personal information. One step forward from the societal trends that emphasize the need of legal protection of information privacy, our study wants to encourage organizations and related authorities to have the viewpoints to consider both importance of privacy protection and the necessity of information trade for the growth of e-commerce.