한국인터넷진흥원

요약

요 약

요 약 문
1. 제목
정보통신서비스 분야에서 블록체인 활용에 따른 개인정보보호 이슈 연구
2. 연구의 목적 및 중요성
o 본 연구는 정보통신서비스 분야에서 블록체인을 활용한 서비스 개발이 다양하게 진행되고 있는 상황에서 개인정보보호 문제와 충돌하는 이슈가 발생하여 블록체인 서비스 개발이 활성화되지 못하는 점을 해결하기 위해 블록체인 서비스에서 발생하는 개인정보보호 이슈를 분석하여 대응방안을 제시하여 블록체인 서비스 활성화와 동시에 적절한 개인정보보호를 이루고자 함
3. 연구의 내용 및 범위
가. 연구내용
o 블록체인 활용 사례 및 현황 파악
o 블록체인 관련 개인정보보호 이슈 분석
o 블록체인 활성화와 개인정보보호의 균형을 위한 방안 제시
나. 연구범위
o 정보통신서비스 분야 중심으로 국내‧외 블록체인 활용 사례 조사 및 법제도 현황 분석
- 정보통신서비스 분야에서 국내‧외 블록체인 활용 사례 조사
- 블록에 기록되는 정보의 항목, 유형 등에 대한 조사‧분석
- 블록체인과 개인정보보호 관련 법제도 현황 조사·분석
o 블록체인 관련 개인정보보호 이슈 도출
- 퍼블릭, 컨소시엄, 프라이빗 등 블록체인 유형별 개인정보보호 이슈 도출

o 블록체인을 활용한 서비스에서 Privacy by Design 적용 방안 제시
- 블록체인을 활용한 서비스 개발 단계에서부터 고려해야 할 개인정보보호 이슈 도출
- 해당 서비스 관련 사업자의 역할과 책임을 제시
o 블록체인 활성화와 개인정보보호의 균형을 위한 제도개선 방향 제시
- 블록체인 활성화 및 안전한 데이터 활용과 개인정보보호의 균형을 위한 개인정보보호 제도 발전 방향 제시
- 가이드라인 마련 또는 법령 개정 등 제도개선 필요성 여부 검토
4. 연구결과
o 블록체인 관련 개인정보보호 제도 개선 방안 제시
- 개인정보성, 개인정보 제3자 제공, 정보통신서비스제공자(개인정보처리자)로서의 지위, 개인정보 파기와 같은 블록체인 상에서 발생하는 개인정보보호 이슈를 분석하여 대응방안을 마련함
- GDPR과 충돌하는 개인정보보호 이슈를 분석하여 대응방안을 마련함
o 블록체인 내 프라이버시 보호를 위한 기술적 방안 제시
- 블록체인에서 발생하는 주요 개인정보보호 이슈 중 하나인 익명성(기밀성)을 해결하기 위한 기술적 방안을 제시함
- 기술적 방안으로 믹싱, 영지식 증명, 블록체인에 개인정보를 비식별하여 저장, 동형암호, 다자간 계산, 링서명 등이 있으며 그 중 영지식 증명, 동형암호, 링서명에 대하여 자세히 분석함
o 블록체인 서비스에서 개인정보보호 방안 제시
- 프라이버시의 보호 및 강화를 위한 조치를 마련하는 광범위한 과정을 의미하는 Privacy by Design을 블록체인 서비스에 적용하여 개인정보보호 이슈에 해결을 방안을 제시함
- 블록체인 서비스에서 시스템과 개인정보 라이프 사이클 별 개인정보보호 대책방안을 제시함
5. 기대효과 및 활용에 대한 건의
o 본 연구는 정보통신서비스 분야에서 블록체인을 활용한 서비스 개발에서 발생하는 개인정보보호 이슈를 해결하여 블록체인 활성화를 목적으로 추진한 연구로서 블록체인 서비스를 구현하려는 기관에게 개인정보보호 대응방안을 고려하여 개인정보보호 이슈를 해결할 수 있도록 도움이 되고자 함
- 블록체인 서비스에서 발생할 수 있는 법적, 기술적 개인정보보호 이슈를 파악한 뒤 이에 관한 대응방안을 제시하였으며 서비스 개발 시 서비스 라이프 사이클 별로 시스템 개발자가 고려해야 할 사항과 개인정보 라이프 사이클 별로 서비스 제공자, 이용자, 정보활용자, 협력사가 고려해야 할 개인정보보호 사항을 나열하여 블록체
인 서비스 개발자 뿐만 아니라 관계된 사업자 모두 고려함
o 본 연구를 토대로 블록체인 서비스 구현시 지켜야할 개인정보보호 수칙 등의 개발에 참고가 되길 기대함

목차

목 차
제1장 서 론··········································································································1
제1절. 연구 목적···········································································································1
제2절. 연구 범위···········································································································1
제2장 국내‧외 블록체인 활용 사례 및 법제도 현황 조사·································2
제1절. 블록체인의 개념과 특성····················································································2
1. 4차 산업혁명과 블록체인······································································································2
2. 블록체인의 개념과 핵심 기술······························································································3
3. 블록체인의 유형과 특징······································································································12
제2절. 정보통신서비스 분야에서 국내‧외 블록체인 활용 사례·································19
1. 블록체인 산업 현황·············································································································19
2. 블록체인 기술 적용 분야 및 활용 사례···········································································20
3. 해외 블록체인 기술 활용 현황··························································································33
4. 국내 블록체인 기술 활용 현황··························································································47
제3절. 블록체인과 관련 법제도 현황·········································································56
1. 블록체인 관련 해외 법제 현황··························································································56
2. 블록체인 관련 국내 법제 현황··························································································65
제3장 블록체인 관련 개인정보보호 이슈·························································70
제1절. 블록체인에 기록되는 정보의 항목··································································70
1. 블록에 기록되는 정보의 항목, 유형 등에 대한 분석······················································70
제2절. 블록체인 유형별 개인정보보호 이슈·······························································79
1. 블록에 기록되는 정보에서 발생하는 개인정보보호 이슈···············································79
2. 블록체인 유형별 개인정보보호 이슈·················································································80
3. 블록체인 기술과 GDPR 적용 가능성·················································································86
제4장 블록체인을 활용한 정보통신 서비스 사례·············································91
제1절. 블록체인을 활용한 서비스 사례······································································91
1. 블록체인을 활용한 서비스 사례 제시(Qfora) ·····························································91

제5장 블록체인 활성화와 개인정보보호의 균형을 위한 방안·······················107
제1절. 블록체인 관련 개인정보보호 제도 개선 방안··············································107
1. 블록체인 활성화와 개인정보보호의 균형을 위한 정책 방향········································107
2. 블록체인 상에서 개인정보보호 이슈 대응 방안····························································110
3. GDPR 대응 방안·················································································································116
제2절. 블록체인 내 프라이버시 보호에 대한 기술적 방안·····································119
1. 개요·························································································································119
2. 믹싱 기술과 개인정보 비식별화···············································································119
3. 영지식 알고리즘 적용······························································································120
4. 동형암호(Homomorphic Encryption) ··········································································125
5. 링 서명(Ring Signature) ····························································································129
제3절. 블록체인에 Privacy by Design 적용 방안·····················································131
1. 프라이버시 대책의 프레임워크················································································131
2. Privacy by Design의 개념과 기본원칙·····································································132
3. 블록체인 서비스와 Privacy by Design ·····································································136
4. 블록체인에서의 Privacy by Design 적용··································································139
제4절. Privacy by Design에 대한 향후 연구과제·····················································145
제6장 결론········································································································147
참고문헌············································································································150