Aton unveiled an authentication solution that verifies the authority and limits delegated to an AI agent when it conducts transfers or payments on behalf of a customer.
On the 12th, Aton announced the official launch of its AI agent authentication and signature verification solution, 'AI AgentSign,' marking its entry into the financial sector's AI agent authentication market.
AI AgentSign issues certificates in the form of digital powers of attorney that authenticate the authority delegated by customers to AI agents. Much like a person gives a proxy a written authorization specifying monetary limits, AI agents are granted a 'digital power of attorney.'
When a customer sets per-transaction and daily transaction limits in an app and signs the delegation consent form with a PIN, a certificate dedicated to the AI agent is issued. The transaction limits are recorded on the certificate itself.
Each time an AI requests a transfer or payment, the system verifies whether that specific agent has been legitimately delegated authority by the customer and whether the transaction falls within the permitted scope. Transactions are blocked if an electronic signature is missing or if the request details have been altered.
For example, if a customer grants an AI agent the authority to make transfers of up to 100,000 won per transaction, the AI can directly process a transfer of 50,000 won. Transactions exceeding 100,000 won require a separate approval request sent to the customer's mobile phone and a PIN signature before execution. If the customer revokes the delegation in the app, the corresponding certificate is immediately discarded.
Aton explained that connecting AI with financial systems using only existing API keys or tokens makes it difficult to verify exactly what authority a customer has delegated. It also noted limitations in verifying cases where keys are stolen or request details are tampered with.
AI AgentSign applies certificate and electronic signature specifications based on the international standards X.509 and CMS. The AI agent's signing key is stored in Aton's 'Quantum SafeBOX,' a secure medium based on post-quantum cryptography (PQC) and white-box encryption.
Aton is currently in discussions with multiple financial institutions regarding the adoption of AI AgentSign. The company plans to expand its scope of application, starting with transfers and payments by AI agents within financial apps, to payment integration for external AI services and role-based authority delegation for enterprise business AI.
Woo Gil-soo, CEO of Aton, stated, "In an era where AI moves money on behalf of customers, trust mechanisms that prove who the AI is and what it has been authorized to do must be established first." He added, "We will provide an authentication system that grants authority to AI and control to customers."
in TECH
