This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Identity Custodian
Identity Custodian

Version management

Difference between version and

At line 1 added 357 lines
!!! Overview
[{$pagename}] is an [entity] which is trusted to be your [Custodian] of your [Digital Identity].
Because it’s painful to create new identities from scratch, [Identity Providers|Identity Provider (IDP)] like [Facebook], [Google], and [Amazon] have created systems that let you use them as a trusted [{$pagename}] so you can establish a login at other sites based on your identity on their site. However, the more you take advantage of these systems for providing what are called [Federated Identities|Federated Identity] ,the more of your online identity is owned by a company, and not by you. For [example], if [Facebook] decides to terminate your account, you lose your access to and your [Digital Identity] at sites that you have asked to rely on your [Facebook] login. It also means that these [{$pagename}]s knows just that much more about you and the sites you visit.
These [Identity Providers|Identity Provider (IDP)] do this as they use the [data] they collect about you and your actions to provide [Advertising] which is how they make [Money] off by providing you this service.
!! [Self-Sovereign Identity]
[Self-Sovereign Identity] only changes this slightly.
[{$pagename}] are __still required in all [Self-Sovereign Identity]__ systems [{$applicationname}] has encountered.
Most [Self-Sovereign Identity] are based a [Distributed Ledger Technology] (like [Blockchain]) but which is a [Permissioned System] that only allows certain [Agents] access to the actual [Blockchain]. Additionally, due to the complexity of securely managing and storing your [Digital Identity], most people will not host a "[Digital Wallet]" themselves which implies a [{$pagename}] will be used by most [Natural Persons].
[{$pagename}]s is able to give a [key] back when it’s lost. Ideally, we [SHOULD] be able to choose which [{$pagename}] to use and switch as often as wanted. Most if not all of the [Self-Sovereign Identity] systems do not currently allow.
We also need different [{$pagename}] for holding identity [data] and holding a [key] in escrow, to ensure segregation of responsibilities, and to reduce [risk] of exposure.
[{$pagename}]s are not going to be a [Provider of services] for your [Digital Identity] and not harvesting the [data], they will need to be compensated for this effort, or like the [National Identification Number] ([National ID]) by [government], have it be a role assigned to them and [funded|Money] some other way.
There are several other fundamental challenges with using [{$pagename}]s:
* First is access to a user’s [Private Key], which must be high-[friction]. It [SHOULD NOT] be possible for a rogue employee of an [{$pagename}] to get access to your [Private Key]. But it must be possible, with your involvement, to recover the [Private Key]. High [friction] and convenience do not go hand-in-hand.
* How do you prove who you are… when you cannot prove who you are? The [Key Recovery] must handle the situation that you have forgotten the key entirely and have no possessions that can help.
The third challenge is building a key recovery system in such a way that it is secure, cost-efficient and usable. No system will be 100% secure, but due to the importance of keeping [Private Keys] private, a high level of [security] is a must.
* Will [personal data] become more [private|Privacy] under [SSI] or more [government] [observable|Observer] if one person’s data is all in one place?
* [Self-Sovereign Identity] has a high degree of [Complexity]
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [The problem with self-sovereign identity: We can’t trust people|https://www.paymentscardsandmobile.com/the-problem-with-self-sovereign-identity/|target='_blank'] - based on information obtained 2019-08-08
* [#2] - [Will we still need countries in the future?|https://metro.co.uk/2019/08/07/will-we-still-need-countries-in-the-future-10529492/|target='_blank']
* [#2] - [How to Own Your Identity on the Internet in 2019|https://www.extremetech.com/internet/280808-go-self-sovereign-how-to-own-your-identity-on-the-internet|target='_blank'] - based on information obtained 2019-08-08
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop