Six standards proposed by Korea provisionally adopted, two finally adopted
Establishment of Quantum Cryptography Communication Standards Group within ITU-T SG17


The National Radio Research Institute of the Ministry of Science and ICT announced on September 4 that eight international standards related to information and communications security, prepared under Korea's leadership, were adopted at the International Telecommunication Union Telecommunication Standardization Sector (ITU-T) Security Study Group 17 meeting held online from August 24 to September 3, and that a task group dedicated to developing quantum cryptography communication standards was newly established.

Specifically, six standards related to quantum cryptography, blockchain, and vehicle security were provisionally adopted, and two standards related to personal information protection and cyber security incident response were finally adopted. Preliminary adoption is a preliminary stage leading to final adoption, and if there are no objections through circulation to each government, it is finally adopted.

◇ 6 Preliminary Adoptions: Quantum Cryptography, Blockchain, and Vehicle Security

The standards 'Security Framework for Quantum Cryptographic Key Distribution Networks' and 'Quantum Cryptographic Key Combination and Security Key Supply' define the elements, communication environment, and security requirements for the network through which quantum keys are transmitted, as well as methods for combining cryptographic keys generated by the distribution technology with existing cryptographic keys to provide them.

This enables interoperability between existing networks and quantum cryptography networks, reducing construction costs and accelerating adoption.

The standards for 'Definitions of Blockchain Technology Terms' and 'Assurance of Corresponding Security' provide criteria for determining the security level of a blockchain. This is intended to be used as a guideline for blockchain providers to check the security level of their own systems.

The standards for 'security requirements for external vehicle access devices' and 'methods for in-vehicle network intrusion detection systems' are expected to strengthen the security of autonomous vehicles and contribute to the expansion of related services by ensuring interoperability among automotive manufacturers.

◇ 2 Final Adoptions: Personal Information De-identification and Cyber Information Collection

▲ The 'De-identification Processing Framework' standard provides procedures for de-identifying personal information and technologies for securely processing target data, and ▲ the 'Guidelines for the Collection and Preservation of Evidence in Cyber Security Incidents' standard provides guidelines that enable the assessment of the suitability and reliability of technologies used to collect and preserve evidence data in the event of a cyber breach.

In particular, the guidelines are expected to help spread related technologies as the concept of pseudonymized information is introduced as a key element of the recently revised three data laws.

Korea University, the Financial Security Institute, Soonchunhyang University, SK Telecom, Kakao Mobility, the Korea Internet & Security Agency, the Electronics and Telecommunications Research Institute, the Korea Information Technology Group, and Hyundai Motor Company participated in the development of this standard. The National Radio Research Institute stated, “Moving forward, we will strengthen international standardization activities in fields of the Fourth Industrial Revolution, such as AI, big data, and IoT, as well as information security, through cooperation with industry, academia, and research institutes.”