A study on Data Context-Based Risk Measurement Method for Pseudonymized Information Processing (가명정보 처리를 위한 데이터 상황 기반의 위험도 측정방법에 관한 연구)

Kim Donghyun (김동현)

doi:10.9708/jksci.2022.27.06.053

A study on Data Context-Based Risk Measurement Method for Pseudonymized Information Processing

Journal of The Korea Society of Computer and Information
Abbr : JKSCI
2022, 27(6), pp.53-63
DOI : 10.9708/jksci.2022.27.06.053
Publisher : The Korean Society Of Computer And Information
Research Area : Engineering > Computer Science
Received : May 10, 2022
Accepted : June 13, 2022
Published : June 30, 2022

Kim Donghyun ¹

¹한국인터넷진흥원

Accredited

ABSTRACT

Recently, as digital transformation due to the COVID-19 pandemic accelerates, data to improve individual quality of life is being used in large quantities, and more reinforced non-identification processing procedures are required to utilize the most valuable personal information among data. In Korea, procedures for de-identification measures are presented through amendments to laws and guidelines, but there is no methodology to measure the level of de-identification in the field due to ambiguous processing standards and subjective risk measurement methods. This paper compares and analyzes the current status of policy and guidelines related to de-identification measures proposed at home and abroad to derive complementary points, suggests a data context-based risk measurement method centered on pseudonymized information processing, and verifies its validity. As a result of verification through Delphi survey and focus group interview (FGI), it was confirmed that the need for the proposed methodology and the validity of the indicators were high.

KEYWORDS

BigData, Personal Information, De-Identification, Pseudonymized information, Pseudonym Risk Assesment

Citation status

* References for papers published after 2023 are currently being built.

[other] Economist / 2017 / The worlds most valuable resource is no longer oil, but data

[journal] N. David / 2011 / How to Plan, Participate and Prosper in the Data Economy / Gartner Research

[report] Joint Government Departments in Korea / 2019 / Plans to revitalize the data and AI economy

[report] IMD / 2021 / World Digital Competitiveness Ranking 2021 Report

[other] Joint Government Departments in Korea / 2016 / Guidelines for De-Identification of Personal Information

[other] Personal Information Protection Commission / 20 / Guidelines for processing pseudonym information

[other] / 2018 / EU General Data Protection Regulation Recital(26)

[journal] Sweeney L / 2002 / k-anonymity: A model for protecting privacy / International Journal of Uncertainty 10(3) : 557~570

[other] / 2018 / ISO/IEC 20889, Privacy enhancing data deident ification terminology and classification of techniques, Annex A

[other] Financial Services Commission / 2020 / Guidelines for processing anonymisation and Pseudonymization Information in the financial sector

[other] Ministry of Health and welfare / 2020 / Guidelines for Health and Medical Data Utilization

[other] Ministry of the Interior and Safety / 2021 / Guidelines for processing Pseudonymization Information in the public sector

[other] Information and Privacy Commissioner of Ontario / 2016 / De-Identification Guidelines for Structured Data

[other] HITRUST / 2015 / De-Identification Framework

[book] K. Emam / 2013 / Anonymizing health data / O`Reilly book : 29~33

[book] M. Elliot / 2016 / The Anonymisation Decision making Framework / UK Anonymisation Network

[journal] F. Prasser / 2016 / The Importance of Context:Risk-Based De-Identification of Biomedical Data / Methods of Information in Medicine 55(4) : 347~355

[other] / 2016 / NIST 800-188(2nd Draft), De-Identifying Government Datasets

[book] D. Tanvi / 2016 / Five Safes: Designing data access for research / University of Bristol

[journal] 김동현 / 2020 / A New Scheme for Risk Assessment Based on Data Context for De-Identification of Personal Information / 정보보호학회논문지 / 한국정보보호학회 30(4) : 719~734

[other] / 2021 / Personal Information Protection Act, Article 28-2

[book] G. Duncan / 2011 / Statistical Confidentiality / Springer

KJCKorea
Journal Central

Journal of The Korea Society of Computer and Information 2023 KCI Impact Factor : 0.65

A study on Data Context-Based Risk Measurement Method for Pseudonymized Information Processing

ABSTRACT

KEYWORDS

Citation status

* References for papers published after 2023 are currently being built.

Journal of The Korea Society of Computer and Information 2023 KCI Impact Factor : 0.65

A study on Data Context-Based Risk Measurement Method for Pseudonymized Information Processing

ABSTRACT

KEYWORDS

Statistics

Tools

Issue List

Citation status

KCI Citation Counts (0)

REFERENCES (22) * References for papers published after 2023 are currently being built.

Search PDF

Citation

* References for papers published after 2023 are currently being built.