Episode 041: 08‐22‐2024 National ID Challenges - GluuFederation/identerati-office-hours GitHub Wiki

Title: Nation ID Challenges

• Host: Mike Schwartz, Founder/CEO Gluu
• Guest: Hosni Dubu, Cybersecurity professional from DRC
• Co-Host: Joni Brennan, President at Digital ID & Authentication Council of Canada - DIACC

Youtube

Description

What are the priorities and tradeoffs of certain approaches to building a national identity infrastructure? How can you build a system that enables people to assert their identity and claims, and also protects their privacy ?

• What are the most pressing use cases? Voting? Healthcare? Opening bank account ? Other private sector RPs?

• How to balance the tradeoffs of privacy, fraud reduction, and poverty reduction presented by a system like Aadhaar.

• Do Verifiable Credentials offer a "leapfrog opportunity"?

• What to put on the blockchain (if anything) ?

• What did Singpass get right in Singapore ?

• Whether to engage with the 50-in-5 initiative, DPGA, or Govstack

• Sovereignty vs availability ?

• Accessibility v. progress ?

Homework

• No, the government isn't planning to introduce ID cards -

• Key Differences Between the U.S. Social Security System and India’s Aadhaar System

• DIACC Overview

• India Enterprise Architecture At-a-Glance 2024 Edition

• Singpass Home Page

Takeaways

• National identity is an evolving and additive landscape. New digital identity credentials and mechanims are evolving. Based on the demand by government and private sector to consume such credentials, the government can play a role building trust--or even building digital public infrastructure.

• While the goverment may want to operate an identity provider, it's not easy--for example, Canada's hosted credential service used for Covid benefits was attacked, and proved less resistent then bank identity providers. There could be a role for private sector identity providers, for example citizens in the US use ID.Me to login to pay taxes; citizens use Yoti in the UK for KYC to access financial services. If these private IDPs are assessed by a third party, that can increase the trust in their credential, encouraging both public and private websites to accept it. A private sector IDP approach could also increase accessibility due to language, location or culture.

• Digital identity can help fight misinformation on social media. But how to balance privacy? For example, while you don't want to disclosure a national id number to access a private website, the website might have a legitimate concern to verify that you are a citizen or some other information. Another example we didn't discuss is voting--governments need to verify that a ballot was cast by a citizen who only voted once, but they don't want a record of who voted for which candidate.

• Communication is important to build a cultural understanding of what you can do with digital identity and why organizations should trust it. Identerati need to help end users understand digital identity--not just citizens, but businesses who want to use digital identity to reduce fraud. By not using too much jargon or making too many assumptions about digital literacy, we can reduce fraud and make our societies safer.

Livestream Audio Archive

here