Re: [Din] WSJ article on Identity and Blockchains

Hi,

I'd recommend the group to have a look around the digital identity concepts the academic networks shaped during the early 2000s, and that are formulated in a global scope by the REFEDS initiative: https://refeds.org/

Be goode,

--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
https://www.linkedin.com/in/dr2lopez/

e-mail: diego.r.lopez@telefonica.com
Tel:         +34 913 129 041
Mobile:  +34 682 051 091
----------------------------------
On 10/04/2018, 18:49, "Din on behalf of Thomas Hardjono" <din-bounces@irtf.org on behalf of hardjono@mit.edu> wrote:

    >>> From: Din [din-bounces@irtf.org] on behalf of Brian E Carpenter [brian.e.carpenter@gmail.com]
    >>> ...
    >>> That isn't a marginal case. Tens or hundreds of millions of people
    >>> would need cross-border digital ID these days. Sales argument: would
    >>> help to defeat money laundering.

    Lots of people seem to want to provide digital-identity on a global scale immediately. from day 1.

    Some folks even imagine there will be one huge global blockchain for the entire world :-)

    But there is a lot to be learned from the history how IP routing emerged (e.g. days when
    we only had IS-IS for local routing, not even OSPF).

    Just like there is "autonomous systems" (AS) concept in routing and connected via backbone routing,
    in the area of identity there needs to be the equivalent of an AS.

    I've been calling it "communities" (data communities) for humans and personal data.

    Its by interlinking ASes (communities) do we get scale and get identity services to be globally reachable.

    So anytime I hear about a global blockchain to rule them all, I cringe :-)

    -- thomas --

    ________________________________________
    From: Din [din-bounces@irtf.org] on behalf of Brian E Carpenter [brian.e.carpenter@gmail.com]
    Sent: Sunday, April 08, 2018 9:44 PM
    To: din@irtf.org
    Subject: Re: [Din] WSJ article on Identity and Blockchains

    On 09/04/2018 10:28, Arjuna Sathiaseelan wrote:
    >>
    >> 2/ I though many people in the security community were moving away from
    >> proving identity, towards systems that prove entitlement (i.e. credentials
    >> are on a need-to-know basis, so if you were say 19, you don't need to say
    >> yur age or show id,
    >> but you can't buy a drink in cambridge MA, but you can in cambridge, UK :)
    >>
    >
    > digital id plays a major role for all the KYC/AML - massive market.. + for
    > employment etc..

    Right, but *international* digital ID is a hopeless mess. Just try dealing
    with a USA bank's KYC department when living in New Zealand with a UK
    passport. Nothing works.

    That isn't a marginal case. Tens or hundreds of millions of people
    would need cross-border digital ID these days. Sales argument: would
    help to defeat money laundering.

       Brian

    > like the idea of proving entitlement - works nicely with crypto
    > charities/aid delivery..
    >
    > Regards
    >
    >
    >
    >
    >> bootstrapping something from a BC to provide the credentials is also
    >> problematic, in that
    >> BC needs a PKI to know whether nodes are not sybils, spoofs, etc, so we
    >> have a circular dependance, no?
    >>
    >> maybe i missed an important step, if so, sorry!
    >>
    >>
    >>> Folks,
    >>>
    >>> I thought to share this WSJ article with the DIN group. Relevant in the
    >>> light of recent interest in using BC for identity.
    >>>
    >>> Advance apologies if it offends some people :-)
    >>>
    >>> https://blogs.wsj.com/cio/2018/04/03/digital-identity-
    >> is-broken-heres-a-way-to-fix-it/
    >>>
    >>>
    >>> Below is a link to a PDF version.
    >>>
    >>> http://hardjono.mit.edu/sites/default/files/documents/WSJ_
    >> Digital_Identity_is_Broken.pdf
    >>>
    >>>
    >>> Best
    >>>
    >>> -- thomas --
    >>>
    >>> _______________________________________________
    >>> Din mailing list
    >>> Din@irtf.org
    >>> https://www.irtf.org/mailman/listinfo/din
    >>>
    >> _______________________________________________
    >> Din mailing list
    >> Din@irtf.org
    >> https://www.irtf.org/mailman/listinfo/din
    >>
    >
    >
    >
    >
    >
    > _______________________________________________
    > Din mailing list
    > Din@irtf.org
    > https://www.irtf.org/mailman/listinfo/din
    >

    _______________________________________________
    Din mailing list
    Din@irtf.org
    https://www.irtf.org/mailman/listinfo/din
    _______________________________________________
    Din mailing list
    Din@irtf.org
    https://www.irtf.org/mailman/listinfo/din

________________________________

Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.

The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição