美韓網路身分識別管制資安政策之研究－兼論對臺灣之啟示

The Study of Information Security Policy of US-South Korean Internet Identity Regulation-And Discussion on Implications for Taiwan

李創明(C. M. Lee)

《危機管理學刊》 10卷2期 (2013/09) Pp. 25-36

https://doi.org/10.6459/JCM.201309_10(2).0003

摘要

OECD在內的會員國已經著手制定網路身分識別管制的相關政策。美國亦正式發佈「網路可信任之身分國家戰略」，此意謂著美國政府已經將網路身分識別管制提升到國家安全戰略的高度。本文將藉由管制之相關論述，並從組織面、政策面及服務面，觀察美韓兩國在身分識別管制的作法，並採用深入訪談的方式，獲致相關建議與結論，供我國在未來制定網路身分識別管制資安政策之參考。

關鍵字

資訊安全 ； 身分識別管制 ； 網路實名制 ； 分散式 ； 集中式

並列摘要

Member States of the OECD have started the development of Internet identity regulatory policy. The United States officially released ”National Strategy for Trusted Identities in Cyberspace, NSTIC”, this means the U.S. government has the Internet identity regulation raised to the height of the national security strategy. This paper is discussed by the regulatory theory, from dimension of the organization, the policy and service of observing the US-South Korea bilateral in identity regulatory practices, and the use of in-depth interviews, to obtain recommendations and conclusions for Taiwan to develop reference of information security policy of Internet identity regulation in the future.

並列關鍵字

Information security ； Identity regulation ； Internet real-name system ； Decentralized ； Centralized

參考文獻

NPO. Retrieved Mar. 7, 2013, from http://www.nist.gov/nstic/npo.html

()。

HSPD-12. Retrieved Mar. 7, 2013, from http://www.idmanagement.gov/documents/HSPD-12.htm

(ASICO (2012). State Identity Credential and Access Management (SICAM) Guidance and Roadmap, 1.).

(ICAM (2012). Personal Identity Verification (PIV) in Enterprise Physical Access Control Systems(E-PACS) Draft, 1.).