An LG Uplus employee introduces the Alpha Key service and CSAP certification. LG Uplus’s integrated account management service (IDaaS) “Alpha Key” has become the first domestic IDaaS service to obtain the CSAP SaaS standard grade. Photo courtesy of LG Uplus
LG Uplus’s integrated identity management service (IDaaS) Alphakey has become the first domestic IDaaS to pass the Cloud Security Assurance Program (CSAP). Building on this milestone, the company plans to expand into a full-stack security business encompassing network security and security operations monitoring, accelerating its push into the public sector market.
LG Uplus said on the 6th that its Alphakey had become the first domestic IDaaS service to obtain CSAP certification. The CSAP certification system is a program under which the Korea Internet & Security Agency (KISA) verifies compliance with information protection standards, in accordance with the Act on the Development of Cloud Computing and Protection of Its Users. It is regarded as a mandatory requirement for supplying cloud services to the public sector.
Alphakey, launched in 2025, is a cloud-based service that manages employee identity information, work systems, and access privileges for each SaaS in one place. It provides single sign-on (SSO), allowing multiple work tools to be used with a single account, and detects anomalous behavior such as irregular logins or improper use of privileges in real time, enabling proactive responses to security threats.
Alphakey applies homomorphic encryption technology to process data while it remains encrypted, preventing leaks of account information and enhancing security. It also uses authentication technology based on post-quantum cryptography (PQC), enabling robust protection of sensitive information even in future quantum computing environments.
Recently, as artificial intelligence, cloud, and SaaS-based work environments have rapidly become common in the public sector as well, demand has grown for security services that integrate the management of user identity information and access privileges. In particular, the National Cybersecurity Basic Guidelines revised this past May added provisions such as strengthening identity information and password management, mandating two-factor authentication, and building and operating integrated authentication systems, highlighting the importance of an integrated identity management framework.
LG Uplus aims to strengthen its push into the public sector market using the CSAP certification as an opportunity. The company is developing a version of Alphakey optimized for public cloud environments and is currently conducting free proof-of-concept (PoC) trials with some public institutions. Based on the results of these trials, it plans to officially launch a public-institution version of Alphakey in the first quarter of next year.
The company also plans to provide a full-stack security service including network security and security operations monitoring, based on the infrastructure operation capabilities and security technology it has accumulated as a domestic telecommunications operator. Park Sung-yul, executive vice president and head of LG Uplus’s Enterprise Business Innovation Group, said, “Alphakey is a security SaaS developed directly by a domestic telecommunications operator, and it is the culmination of the security technology and service internalization capabilities LG Uplus has built up. With this CSAP certification, the security and reliability of Alphakey have been officially recognized, so we will work to establish Alphakey as a service trusted in the public sector as well.”