Chapter 7. System Integration and Operations

7.1 Standard Scope and Definitions

This chapter of the Family Reunion Data Standard (FRDS) defines the chapter 7. system integration and operations concerns for Korean War family reunion humanitarian data. The standard provides a single source of truth for data exchange among the Korean Red Cross (KOREA_RED_CROSS), Ministry of Unification, National Intelligence Service (NIS_KOREA), Korea Internet & Security Agency (KISA), the Electronics and Telecommunications Research Institute (ETRI), the National Forensic Service (NFS), and private NGOs.

The canonical ENUM tokens of this volume are quoted verbatim in this section: KOREAN_WAR (Korean War 1950-1953), DMZ (Demilitarized Zone), MOUNT_KUMGANG (reunion venue at Mt Geumgang), PANMUNJOM (Joint Security Area), KOREA_RED_CROSS (operating body), KCFR (Korean Family Reunion), NIS_KOREA (National Intelligence Service), KISA (Korea Internet & Security Agency), ALIVE / DECEASED / MISSING (applicant status), PENDING_APPROVAL / PROCESSING / APPROVED (workflow), DNA_MATCHING / BIOMETRIC_VERIFICATION / FAMILY_GENEALOGY / EMOTIONAL_SUPPORT (processing operations), GEDCOM_5_5_1 / FHIR_R5 / OAUTH_2_1 / OIDC / PIPA_KOREA / SPECIAL_PROTECTION / CONSENT_BASED / AES_256_GCM / SIGSTORE / REKOR / BLOCKCHAIN_AUDIT (technical / legal tokens). Implementations MUST use these tokens exactly as defined.

7.2 Reference Standards and Interoperability

The standard references ISO/IEC 27001:2022 (information security management), ISO/IEC 27018:2019 (PII in cloud), ISO/IEC 27701:2019 (privacy information management), NIST Cybersecurity Framework 2.0, GEDCOM 5.5.1 / GEDCOM 7.0 (genealogy), HL7 FHIR R5 (healthcare data exchange), OpenAPI 3.1, OAuth 2.1, OpenID Connect Core 1.0, IETF RFC 8446 (TLS 1.3), and IETF RFC 7807 (Problem Details). ICRC RFL, UNHCR proGres, and IOM Migration Data Portal serve as international humanitarian counterparts.

7.3 Canonical ENUM Tokens

Canonical ENUM tokens used throughout this volume in underscore form include: KOREAN_WAR, DMZ, JOINT_SECURITY_AREA, MOUNT_KUMGANG, PANMUNJOM, KOREA_RED_CROSS, KCFR, NIS_KOREA, KISA for geography and operating bodies; ALIVE, DECEASED, MISSING, PENDING_APPROVAL, PROCESSING, APPROVED for status; DNA_MATCHING, BIOMETRIC_VERIFICATION, FAMILY_GENEALOGY, EMOTIONAL_SUPPORT for processing operations; GEDCOM_5_5_1, FHIR_R5, OAUTH_2_1, OIDC, PIPA_KOREA, SPECIAL_PROTECTION, CONSENT_BASED, AES_256_GCM, SIGSTORE, REKOR, BLOCKCHAIN_AUDIT for technical and legal tokens. These tokens are quoted verbatim in the simulator and all chapter tables, code citations, and endnotes.

7.4 Note on Korean Edition Content

The Korean edition of this volume includes an additional § N.A section "한국 이산가족 데이터 인프라" that documents Korean-specific operational institutions, statutes, and certification systems in detail. This section maps Ministry of Unification, Korean Red Cross, National Intelligence Service, National Forensic Service, Korea Internet & Security Agency, ETRI, and the Personal Information Protection Act (PIPA_KOREA), the Inter-Korean Relations Development Act §9, and the Information Disclosure Act §9 to the technical standard. English readers should consult the Korean edition for operational specifics of the Korean humanitarian data infrastructure.

7.5 Implementation Notes and Conformance Tiers

Implementations issue a manifest containing the canonical slug, semantic version (SemVer 2.0.0), build digest, SBOM URL (CycloneDX 1.5 or SPDX 2.3), conformance profile, and Sigstore DSSE signature. The manifest is periodically anchored to the Sigstore Rekor transparency log per the deployment policy. Discovery uses the IETF well-known URI mechanism at `/.well-known/wia/family-reunion-data`. Three conformance tiers are defined: Surface (data format only, self-attested), Verified (annual third-party audit), and Anchored (continuous attestation packages signed via Sigstore DSSE + anchored to Rekor in accordance with Annex G).

7.6 Operational Procedures and Case Studies

Application Workflow Standardization

Family reunion applications are received at the Korean Red Cross (KOREA_RED_CROSS) headquarters or 15 nationwide branches and blood centers. Applicants submit personal information about themselves (or via a guardian) and at least one separated family member, along with a separation circumstances declaration and a consent form. The procedure adheres to the Personal Information Protection Act (PIPA_KOREA) §15, §17, §22, §23, applying the CONSENT_BASED processing principle strictly.

Within 7 days of submission, the application is registered in the Korean Red Cross Family Reunion Information Integrated Management System, and a unique 12-character FRID (Family Reunion Identifier) in the form "KFR-YYYYMM-XXXXXX" is issued. Applicants may query, modify, delete, or withdraw consent via the Ministry of Unification Family Reunion Information Integrated System website (http://reunion.unikorea.go.kr) in compliance with GDPR Articles 15, 16, 17, 21.

DNA Matching Precision and Limitations

DNA matching (DNA_MATCHING) is conducted by the National Forensic Service (NFS). The 13 STR markers (CODIS 13) form the basis, with mitochondrial DNA (mtDNA) and Y-chromosome STR (Y-STR) used as supplementary analyses. Parent-child relationship confirmation reaches 99.99% accuracy or higher, but grandparent-grandchild and uncle-niece relationships (second-degree or further) yield lower accuracy.

As of December 2024, the NFS holds 11,200 deceased DNA records and 8,750 living donor samples. Annual reunion-matching requests average around 600, with approximately 45 (7.5%) achieving familial matches. Match results are notified to both the Ministry of Unification and the Korean Red Cross simultaneously, and disclosed only to the applicant or their legal representative (SPECIAL_PROTECTION tier).

Reunion Operations — Four Phases

Reunion operations proceed in four phases. Phase 1 "Beneficiary Selection" prioritizes applicant age (80+ years), health status (ALIVE), and separation circumstances match (KOREAN_WAR, DMZ classification). Phase 2 "Life-and-Address Verification" is conducted by the Korean Red Cross through the North Korean Red Cross. Phase 3 "Final List Confirmation" is decided by mutual agreement of both Red Crosses. Phase 4 "Reunion Execution" takes place at Mount Kumgang (MOUNT_KUMGANG) Family Reunion Center or Panmunjom (PANMUNJOM) over three days.

Each reunion involves approximately 100 South Korean families participating in 6 meeting sessions (2-3 hours each), totaling about 11-14 hours of face-to-face contact. Video reunions (2005-2007) were held 7 times with about 3,250 participants. Since the 21st in-person reunion in August 2018, reunions have been suspended due to deteriorating inter-Korean relations.

7.7 System Integration Case Studies

Korean Red Cross ↔ Ministry of Unification Data Synchronization

The Korean Red Cross "Family Reunion Registration and Management System" and the Ministry of Unification "Family Reunion Information Integrated System" synchronize approximately 2 million records daily via gRPC + mTLS 1.3. Synchronization latency targets average 50ms with 99th percentile under 200ms. Synchronization failure events are auto-forwarded to KrCERT/CC security monitoring, with incident response within 30 minutes.

This synchronization uses OAuth 2.1 (OAUTH_2_1) Client Credentials Flow with mTLS mutual authentication. Message payloads are serialized in FHIR R5 (FHIR_R5) Bundle format and additionally encrypted with AES-256-GCM (AES_256_GCM). All synchronization events are signed via Sigstore (SIGSTORE) DSSE envelopes and anchored to the Rekor (REKOR) transparency log (BLOCKCHAIN_AUDIT).

National Intelligence Service + Foreign Affairs + Justice Integration

North Korean family information verification goes through the National Intelligence Service (NIS_KOREA) North Korean Defector Protection Center. The center collects family-reunion-related information during North Korean defector identity verification and bidirectionally integrates with the Ministry of Unification system. The API operates under "Class A facility" classification per the National Security Operations Regulations with additional security controls.

Overseas-resident separated families (approximately 2 million in Americas, 500,000 in Japan, 2 million Korean-Chinese, 50,000 in Russia) undergo identity verification through the Ministry of Foreign Affairs Overseas Korean Consular System. The Ministry of Justice Immigration and Foreign Policy Bureau provides immigration and residence status. Inter-agency data sharing is governed by MOUs, processing approximately 1,800 verifications annually.

Chapter 7 — Notes & References

ISO/IEC 27001:2022 "Information security management systems — Requirements"
ISO/IEC 27018:2019 "Code of practice for protection of PII in public clouds"
ISO/IEC 27701:2019 "Privacy Information Management System"
NIST Cybersecurity Framework 2.0, NIST 2024.2
FamilySearch International, "GEDCOM 5.5.1 Specification", 2019
FamilySearch International, "GEDCOM 7.0 Specification", 2023. https://gedcom.io
HL7 FHIR R5 Specification (Release 5.0.0), 2023.3
OpenAPI Specification 3.1.0, OpenAPI Initiative, 2021.2
IETF OAuth 2.1 (draft-ietf-oauth-v2-1-12), 2024
OpenID Connect Core 1.0, OpenID Foundation, 2014.11 errata 2024
IETF RFC 8446 "TLS 1.3", 2018.8
IETF RFC 7807 / RFC 9457 "Problem Details for HTTP APIs"
ICRC, "Restoring Family Links Strategy 2020-2025", 2020
ICRC, "Data Protection in Humanitarian Action Handbook 2nd ed.", 2023
UNHCR, "Data Protection Policy", revised 2022
UNHCR, "proGres v4 Documentation", 2024
EU GDPR Regulation 2016/679, Article 6·7·9·89
Sigstore DSSE v0.7 + Rekor Transparency Log v1.3, 2024
CycloneDX 1.5 / SPDX 2.3, OWASP / Linux Foundation, 2023
in-toto Attestation Framework 1.0, CNCF 2024
WIA Standards Public Repository (family-reunion-data folder), MIT License, GitHub: WIA-Official/wia-standards-public/tree/main/family-reunion-data — open standard initiative providing source code for simulator, spec, API, and ebook assets cited throughout this volume; serves as the canonical verification record for all primary-source citations made by the WIA standard committee in this chapter.