초판발행 2026.10.30

서문

우리는 하루에도 수십 번씩 자신이 누구인지 증명하며 살아간다. 스마트폰의 잠금을 해제하고, 모바일 뱅킹에 로그인하고, 온라인에서 물건을 사고, 회사 시스템에 접속하는 매 순간마다 신원인증이 이루어진다. 신원인증은 디지털 경제를 지탱하는 보이지 않는 기반이지만, 역설적으로 그 기반이 얼마나 취약한 구조 위에 서 있는지는 대규모 데이터 유출 사고가 터진 뒤에야 비로소 실감하게 된다.

지난 수십 년간 우리의 디지털 신원은 개인이 아닌 기관과 플랫폼의 서버에 저장되고 관리되어 왔다. 중앙화된 시스템은 편리했지만, 단일 장애점과 대량 유출의 위험, 프라이버시 침해, 플랫폼 종속이라는 구조적 한계를 안고 있었다. 수억 건의 개인정보가 한 번의 침해 사고로 유출되는 일이 반복되면서, “내 신원정보를 왜 내가 통제할 수 없는가”라는 근본적인 질문이 제기되기 시작했다.

블록체인 기반 자기주권 신원(Self-Sovereign Identity, SSI)은 바로 이 질문에 대한 기술적 · 철학적 응답이다. 분산원장과 암호학이 중앙 기관의 신뢰를 대체하고, 분산식별자(DID)와 검증 가능한 자격증명(VC)이 개인에게 신원의 소유권과 통제권을 돌려준다. 이는 단순한 기술의 교체가 아니라, 신뢰가 만들어지는 방식 자체를 바꾸는 패러다임의 전환이다. W3C의 DID · VC 표준이 확정되고 EU의 eIDAS 2.0이 유럽 디지털 신원지갑을 의무화하는 등, 이 전환은 이미 표준과 제도의 영역에서 현실이 되고 있다.

그러나 기술의 가능성과 현실의 구현 사이에는 여전히 넓은 간극이 존재한다. SSI를 이해하려면 블록체인과 암호학이라는 기술적 토대, 표준과 규제라는 제도적 환경, 그리고 비즈니스 모델과 조직 변화라는 실행의 차원을 함께 보아야 한다. 이 책은 이 세 층위를 하나의 흐름으로 엮어, 개념에서 구현까지를 체계적으로 안내하고자 기획되었다.

책의 구성은 다음과 같다. 제1장에서는 디지털 신원의 개념과 전통적 신원인증 시스템의 근본적 문제점을 살펴보고, 신원인증 모델이 중앙화에서 자기주권으로 진화해 온 과정을 조망한다. 제2장은 블록체인 기술의 기본 원리를 다루며, 블록의 구조, 합의 알고리즘, 블록체인 유형을 비교하고 블록체인이 신원인증에 적합한 이유를 설명한다. 제3장에서는 SSI의 철학적 배경과 10가지 핵심 원칙, 그리고 DID와 VC라는 핵심 구성요소를 본격적으로 소개한다.

제4장은 SSI 시스템의 4계층 참조 아키텍처와 영지식증명(ZKP)을 비롯한 암호화 기술, 프라이버시 보호 메커니즘, 키 관리와 확장성 솔루션을 기술적으로 심화한다. 제5장에서는 W3C, ISO/IEC 등 국제 표준과 EU · 미국 · 중국 · 한국의 규제 환경을 비교하고, 법적 효력과 GDPR 준수 등 제도적 쟁점을 분석한다.

제6장부터는 실무의 영역으로 들어간다. 금융, 의료, 교육, 정부, 공급망 등 산업별 적용 사례와 수익 모델, ROI 분석을 다루고, 제7장에서는 Sovrin, Microsoft Entra, Hyperledger 등 주요 플랫폼을 비교하며 조직에 맞는 플랫폼 선택 프레임워크를 제시한다. 제8장은 탐색-시범-확장-통합의 4단계 도입 전략과 리스크 관리, 조직 준비도 평가를 안내한다. 제9장에서는 양자 내성 암호, AI 융합, Web3와 메타버스 등 신흥 트렌드와 함께 SSI가 가져올 사회적 영향과 윤리적 과제를 전망하고, 제10장에서 전체 논의를 종합한다.

각 장의 서두에는 학습 목표와 핵심 질문을 두어 독자가 무엇을 얻어 갈 수 있는지 명확히 했고, 장 말미에는 참고문헌을 정리하여 심화 학습의 길잡이가 되도록 했다. 이러한 구성 덕분에 이 책은 대학의 교재로는 물론, 블록체인 신원인증 도입을 검토하는 기업의 실무자와 정책 입안자, 그리고 디지털 신원의 미래에 관심 있는 일반 독자에게도 유용한 안내서가 될 것이다.

기술은 빠르게 변하지만, 이 책이 다루는 질문인 “디지털 세계에서 개인은 자신의 신원을 어떻게 소유하고 통제할 것인가?”는 오래도록 유효할 것이다. 이 책이 그 질문에 답을 찾아가는 독자들의 여정에 든든한 출발점이 되기를 바란다.

끝으로 이 책이 나오기까지 애써 주신 박영사 관계자 여러분께 두 저자가 함께 깊은 감사의 마음을 전하며, 각자의 고마운 분들께도 짧게나마 인사를 남긴다.

김형진은 학문의 길을 열어 주시고 늘 아낌없는 가르침을 주신 지도교수 김영걸 교수님, 언제나 누구보다 먼저 원고를 읽고 세심한 코멘트를 아끼지 않은 박예린 선생님, 집필 과정에서 함께 고민하고 격려해 준 동료들, 그리고 변함없는 믿음으로 곁을 지켜 주신 부모님과 동생 유진이에게 깊은 감사와 고마움을 전한다.

김진수는 이 책이 완성되기까지 다양한 시각과 통찰을 나누어 준 동료와 지인들에게 깊은 감사를 전한다. 무엇보다 이 책을 준비하는 긴 시간 동안 가장 가까운 곳에서 묵묵히 기다려 주고 응원해 준 아내에게 가장 깊은 감사와 사랑의 마음을 전한다. 이 책을 완성할 수 있었던 데에는 언제나 곁에서 힘이 되어 준 그 따뜻한 이해와 배려가 있었다. 또한 늘 든든한 힘이 되어 준 가족 모두에게도 진심으로 감사드린다.

2026년 10월

김형진 · 김진수

저자소개

김형진

KAIST 경영공학부(IT경영)에서 공학박사 학위를 받았으며, 고려대학교 경영학과에서 학 · 석사를 취득하였다. 현재 명지대학교 교수로 재직 중이며, AI 보안 기업 ㈜메타크라우드의 Founder/CEO를 겸하고 있다. 

Trust Technology(딥페이크 탐지 · 워터마킹), 정보보안, 데이터 애널리틱스와 AI 응용을 주요 연구 분야로 하고 있다. 블록체인/NFT 기반 프리랜서 이력정보 관리 플랫폼, AI 기반 음원 유사 판단 및 블록체인 기반 음원 인덱싱 정보 관리 등 블록체인 관련 특허기술을 개발하였으며, 딥페이크 검출 시스템, 다계층 그래프 기반 AI 생성 텍스트 판별, 생성형 AI 딥보이스 검출 솔루션 등 Trust Technology와 관련된 기술도 지속적으로 개발해 오고 있다. 금융위원회 금융 분야 MYDATA 정보보호 · 보안기술 구현 방안 연구, 한국데이터산업진흥원 MYDATA 생태계 중장기 전략 수립, 한국정보화진흥원 금융 빅데이터 플랫폼 구축 사업에 참여하였고, 한국핀테크지원센터 디지털 금융기술 내재화 사업과 FIN:NECT 이노베이션 스쿨(카카오뱅크 PoC)을 연구책임자로 수행하였다. 현재 한국신용정보원 금융권 AI 플랫폼 전문가, 기술보증기금 외부자문위원, IBK기업은행 미래성장성심의회 외부위원으로 활동하며 기업 밸류에이션 및 평가를 하고 있다. 이를 인정받아 매경 핀테크 어워드 2026 우수상, 한국핀테크지원센터 디지털금융 내재화 사업 최우수상을 수상하였다. Computers & Security, Security Journal, Journal of Intellectual Capital, Information Technology & People 등 국제학술지에 정보보안 정책 준수, 내부자 위협으로부터의 지식재산 보호 등에 관한 논문을 게재하였으며, 공저로 『AI 신뢰성의 진화와 과제』(청람), 역서로 『E-commerce 2023-2024』(공역, 2025)가 있다.

김진수

김진수는 KAIST 조천식녹색교통대학원에서 석사과정을 마치고 박사과정을 수료했으며, 데이터 기반 최적설계를 연구했다. 현재 메리츠화재 데이터사이언스파트에서 데이터 분석과 AI를 활용한 보험 인수심사 자동화 및 업무 프로세스 혁신을 담당하고 있다.

데이터와 기술을 실제 비즈니스 의사결정에 연결하는 데 관심을 두고 있으며, 최근에는 생성형 AI와 LLM을 활용한 업무 자동화 및 새로운 업무 방식의 가능성을 탐구하고 있다. 특히 새로운 기술이 기존 산업의 의사결정 구조와 서비스 방식을 어떻게 변화시키는지 주목하고 있다.

이러한 경험을 바탕으로 블록체인과 디지털 신원인증 기술 역시 기술 자체에 머무르지 않고 실제 산업과 일상에서 어떻게 활용되어 새로운 가치를 만들어 낼 수 있는지를 살펴보고 있다. 이 책에서는 데이터와 디지털 기술을 현업에 적용해 온 경험과 관점을 바탕으로 블록체인 기반 디지털 신원인증의 가능성과 향후 발전 방향을 살펴본다.

차례

제1장 서론: 디지털 신원인증의 진화 2

1.1 디지털 신원의 중요성··························································5

1.1.1 디지털 경제에서의 신원인증···············································5

1.1.2 전통적 신원인증 시스템의 근본적 문제·······························7

1.2 신원인증 모델의 역사적 발전·············································15

1.2.1 1세대: 중앙집중식 신원(Centralized Identity)···········17

1.2.2 2세대: 연합 신원(Federated Identity)·······················17

1.2.3 3세대: 사용자 중심 신원(User-Centric Identity)·······18

1.2.4 4세대: 자기주권 신원(Self-Sovereign Identity)········19

1.3 책의 목적 및 범위·····························································20

1.3.1 책의 목적·········································································20

1.3.2 주제 범위·········································································21

1.3.3 주요 독자·········································································21

1.4 분석 방법론·····································································22

1.5 책의 구성········································································23

제2장 블록체인 기술의 이해 30

2.1 블록체인의 기본 개념························································33

2.1.1 블록체인의 정의와 탄생 배경···········································33

2.1.2 블록의 구조·····································································35

2.1.3 블록체인의 핵심 특징······················································39

2.2 블록체인 유형··································································43

2.2.1 퍼블릭 블록체인(Public Blockchain)·························44

2.2.2 프라이빗 블록체인(Private Blockchain)····················46

2.2.3 컨소시엄 블록체인(Consortium Blockchain)···········48

2.3 합의 알고리즘··································································49

2.3.1 작업증명(Proof of Work, PoW)··································50

2.3.2 지분증명(Proof of Stake, PoS)····································51

2.3.3 위임지분증명(Delegated Proof of Stake, DPoS)····52

2.3.4 PBFT(Practical Byzantine Fault Tolerance)········52

2.4 신원인증에 블록체인이 적합한 이유····································53

제3장 자기주권 신원(SSI)의 개념과 원리 60

3.1 SSI의 정의와 배경····························································63

3.1.1 SSI의 개념적 정의···························································63

3.1.2 SSI의 역사적 배경···························································64

3.2 SSI의 10가지 핵심 원칙···················································65

3.2.1 원칙 1: 존재성(Existence)············································66

3.2.2 원칙 2: 통제권(Control)················································67

3.2.3 원칙 3: 접근성(Access)·················································67

3.2.4 원칙 4: 투명성(Transparency)·····································68

3.2.5 원칙 5: 지속성(Persistence)········································69

3.2.6 원칙 6: 이동성(Portability)···········································69

3.2.7 원칙 7: 상호운용성(Interoperability)··························70

3.2.8 원칙 8: 동의(Consent)··················································70

3.2.9 원칙 9: 최소화(Minimization)·····································71

3.2.10 원칙 10: 보호(Protection)········································72

3.3 SSI 생태계의 구성요소·····················································72

3.3.1 발급자(Issuer)································································74

3.3.2 보유자(Holder)······························································75

3.3.3 검증자(Verifier)·····························································75

3.4 DID(분산식별자)·····························································77

3.4.1 DID의 구조·····································································77

3.4.2 DID 문서········································································79

3.5 검증 가능한 자격증명(Verifiable Credentials)···············80

3.5.1 VC의 구조·······································································80

3.5.2 검증 가능한 프레젠테이션(VP)········································81

3.6 SSI와 기존 신원모델 비교·················································82

제4장 블록체인 신원인증 기술 아키텍처 88

4.1 4계층 참조 아키텍처························································91

4.1.1 계층 1: 블록체인 인프라 레이어·······································92

4.1.2 계층 2: 프로토콜 레이어··················································94

4.1.3 계층 3: 애플리케이션 레이어···········································95

4.1.4 계층 4: 사용자 인터페이스 레이어···································96

4.2 암호화 기술·····································································97

4.2.1 공개키 암호 기술과 타원곡선 암호···································97

4.2.2 영지식증명(Zero-Knowledge Proof)·······················99

4.2.3 해시 함수·······································································100

4.3 프라이버시 보호 메커니즘··············································101

4.3.1 선택적 공개(Selective Disclosure)···························102

4.3.2 술어 증명(Predicate Proof)······································103

4.3.3 익명 자격증명(Anonymous Credentials)···············103

4.4 키 관리와 복구······························································104

4.4.1 키 복구 메커니즘···························································104

4.5 확장성 솔루션·······························································106

4.5.1 오프체인 저장································································106

제5장 표준 및 규제 환경 112

5.1 국제 표준·····································································115

5.1.1 W3C DID(Decentralized Identifiers) v1.0·········116

5.1.2 W3C Verifiable Credentials Data Model v2.0·117

5.1.3 ISO/IEC 표준·······························································118

5.1.4 기타 표준화 기구····························································119

5.2 주요국 규제 정책···························································120

5.2.1 유럽연합(EU)································································121

5.2.2 미국···············································································122

5.2.3 중국···············································································123

5.2.4 대한민국········································································123

5.2.5 싱가포르········································································124

5.3 법적 쟁점·····································································124

5.3.1 법적 효력·······································································125

5.3.2 책임 소재·······································································126

5.3.3 GDPR과 블록체인·······················································126

제6장 비즈니스 모델과 산업 적용 132

6.1 산업별 적용 사례···························································135

6.1.1 금융 서비스···································································136

6.1.2 의료···············································································137

6.1.3 교육···············································································137

6.1.4 정부/공공·······································································138

6.1.5 공급망···········································································139

6.2 비즈니스 모델·······························································140

6.2.1 인프라/원장 수수료 모델(Ledger/Network Fee)·····141

6.2.2 구독 모델(SaaS)···························································141

6.2.3 부가 서비스 모델(Enablement)·································142

6.2.4 생태계/토큰 모델···························································142

6.3 경제성 분석(ROI)·························································143

6.3.1 금융기관 KYC 사례 ROI···············································143

6.3.2 비용 절감 요인·······························································144

6.3.3 수익 증대 요인·······························································145

6.4 사례 연구·····································································146

6.4.1 사례 1: NHS 디지털 직원 여권(영국)····························146

6.4.2 사례 2: IATA Travel Pass···········································148

제7장 주요 플랫폼 분석 154

7.1 주요 플랫폼 개요···························································157

7.2 플랫폼별 상세 분석························································159

7.2.1 Sovrin Network························································159

7.2.2 Microsoft Entra Verified ID···································160

7.2.3 오픈소스 디지털 신원생태계:

ACA-Py, Indy와 AnonCreds ········ 161

7.2.4 Veramo·······································································162

7.2.5 Trinsic··········································································162

7.2.6 기타 플랫폼····································································163

7.3 플랫폼 비교··································································164

7.4 플랫폼 선택 가이드························································165

7.4.1 선택 기준 체크리스트·····················································166

7.4.2 의사결정 플로우차트······················································166

7.4.3 마이그레이션 고려 사항·················································167

제8장 도입 전략 172

8.1 4단계 도입 프레임워크··················································175

8.1.1 1단계: 탐색(Exploration) - 2-3개월··························176

8.1.2 2단계: 시범(Pilot) - 3-6개월·······································177

8.1.3 3단계: 확장(Expansion) - 6-12개월·························177

8.1.4 4단계: 통합(Integration) - 지속적·····························178

8.2 변화관리······································································178

8.3 리스크 관리··································································180

8.3.1 리스크 대응 전략···························································181

8.4 조직 준비도 평가···························································182

8.5 도입 체크리스트····························································184

8.6 KPI 및 성과 측정··························································185

제9장 미래 전망과 신흥 트렌드 192

9.1 기술 발전 트렌드···························································195

9.1.1 영지식증명의 진화·························································196

9.1.2 양자 내성 암호(Post-Quantum Cryptography)···197

9.1.3 AI와 SSI의 융합····························································198

9.1.4 크로스체인 상호운용성··················································199

9.2 신흥 응용 분야······························································200

9.2.1 메타버스 신원································································200

9.2.2 Web3와 Soulbound Tokens(SBT)························201

9.2.3 IoT 신원········································································202

9.3 시장 전망·····································································203

9.4 사회적 영향··································································205

9.4.1 긍정적 영향···································································205

9.4.2 도전 과제·······································································206

9.4.3 윤리적 고려 사항···························································207

9.5 5-10년 전망································································208

제10장 결론 214

10.1 핵심 요약···································································217

10.1.1 각 장별 핵심 내용························································217

10.1.2 문제 인식: 현재 시스템의 한계·····································218

10.1.3 블록체인 기반 SSI의 해결책········································219

10.1.4 기술적 기반·································································220

10.1.5 시장 현황····································································220

10.2 경영자를 위한 권고사항···············································221

10.2.1 전략적 권고 상세·························································222

10.3 향후 연구 방향····························································224

10.4 SSI가 약속하는 미래···················································225

10.5 맺음말·······································································226

감사의 글_ 227