Auth Autofill Edge extension security report

A browser extension that autofills identity verification services in South Korea Name, mobile phone number, presence or absence of foreigners, current carrier, date of birth, preferred authentication method (SMS authentication, carrier app authentication, etc.) A browser extension program that helps you use it conveniently by selecting one of the following or by entering the SMS verification code after entering only CAPTCHA as it is automatically completed as a basic profile. The user's personal information is not collected by the server, and is safely stored in the browser's storage space. ★List of Supported Identity Authentication Services★ ▶Ministry of Public Administration and Security ‘Private Simple Authentication Service’ government24 Family relationship registration system traffic complaints 24 Corporate Group Portal student loan repayment system Ministry of Justice Online Civil Service Korea Scholarship Foundation internet post office National Newspaper Complaints for military service Army reserve homepage home tax National Fisheries Products Quality Management Service National Tax Statistics Center System Ministry of Public Administration and Security ‘Any-ID’ simple login service (service mediation type) Petition 24 labor portal system Your own courtesy system Veteran's former service support system ▶Certification of the mobile operator's mobile phone Nice Credit Rating Information Seoul Credit Rating Information Korea Credit Bureau Dream Security Korea Mobile Certification Korea Cyber Payment Danal ▶Others Naver In 2014, Korea banned the collection of resident registration numbers without grounds by law as a result of the ban on the use of resident registration numbers. As a result, the existing method of self-authentication through resident registration number has disappeared and public certificates, i-pins, and credit card authentication methods have emerged, but the most convenient and universal SMS authentication has taken root. SMS authentication includes "number authentication" that simply authenticates that the number is being used, such as KakaoTalk, and "identity authentication" that authenticates that you are a user of the personal information by entering the mobile phone subscriber's personal information. Number authentication requires only entering the mobile phone number, whereas identity authentication requires the same personal information, such as name and date of birth, to be entered every time, as well as being divided into multiple page processes, leading to a carrier authentication app instead of SMS, and inducing a paid monthly fee (click to agree) It has a UI that harms the user experience, such as induction). To solve this problem, we developed a browser extension function that automatically inputs the information necessary for mobile phone authentication, such as ID and PW auto-completion, in the browser.