SK Telecom said on May 12 that its next-generation authentication solution, SKT Passkey, received GS (Good Software) certification grade 1, the top level of software quality certification, from the Telecommunications Technology Association (TTA).

The GS certification is a nationally accredited certification system that strictly evaluates software for functional suitability, security and reliability based on ISO/IEC international standards.

SKT Passkey is a FIDO (Fast Identity Online)-based next-generation authentication solution that applies unlocking methods such as fingerprint and face-based biometrics, PINs and patterns to make logins easier and safer.

Passkeys use the principles of public-key cryptography. When a user first registers for a service, a pair of private and public keys is created on the device. The private key is stored only in the security area of the user's device and is not transmitted externally. The public key is registered on the service server and used for authentication.

When the server requests identity verification at login, the device responds by signing with the private key stored on the device. Instead of passwords being exchanged, only the signature value is transmitted, leaving no key-related information on the network.

SKT Passkey is provided in the form of a software development kit (SDK) that supports various device environments. Companies can use it to apply the solution quickly and easily.

SK Telecom will use the certification as a springboard to apply passkeys to its internal systems in phases. It plans to further verify technical stability internally and then push to expand adoption to external services.

Jong-hyun Lee (이종현), head of SKT's Integrated Security Center, said, "This GS certification grade 1 acquisition proves that the technological capabilities SKT has accumulated based on the FIDO standard are at the highest level even under nationally accredited criteria." He added, "We will further strengthen our internal security system and continue to build a safe authentication environment."