62
Empower citizens to control their own data/identity with the European Self-Sovereign Identity Framework Daniel Du Seuil ESSIF Convenor - EBSI https://www.linkedin.com/in/danielduseuil/

Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

  • Upload
    others

  • View
    3

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Empower citizens to

control their own

data/identity with the

European Self-Sovereign

Identity Framework

Daniel Du Seuil ESSIF Convenor - EBSI

https://www.linkedin.com/in/danielduseuil/

Page 2: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of
Page 3: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

A little (digital story)(contains product placement :-)

Page 4: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Meet my e-bike

Page 5: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

In 2020 getting a e-bike loan is digital, not?

Page 6: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

I was welcome during

the office hours

between 9-12 and 13-

16

Page 7: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Copy of my ID, copy of

last three months pay

check, consent to

check the debt registry,

etc

Page 8: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

New appointment

during office hours to

hand over the

documents

Page 9: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Sign the contract and get my copy

Page 10: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Archive my

contract and

consent

Page 11: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Challenges

● Digital flow?

● Validation of documents?

● Multiple copies of documents?

● Archive of documents?

● Linking different sources?

● Consent registration?

● Re-use of information

● ...

Page 12: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Other cases/challenges

Page 13: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Authenticity diploma?

Page 14: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Identity refugees?

Page 15: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Know your customer?

Page 16: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Checking your age?

Page 17: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Customer experience?

Page 18: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Local identity?

Page 19: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Moving to a new house?

Page 20: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

When we think of digital identity we

therefore need to see it not as a single

thing. It is rather the sum total of all the

attributes that exist about us in the digital

realm, a constantly growing and evolving

collection of data points.

Definition digital identity

EU blockchain observatory report on digital identity and blockchain

https://www.eublockchainforum.eu/sites/default/files/report_identity_v0.9.4.pdf

Page 21: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Current (centralized) approach

and solutions

Page 22: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Control of citizen data

Page 23: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

mygov,

mybank,

mycity, etc

Page 24: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Our current EU ‘once only’ approach (Government-Government)

Page 25: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Estonian

example

Page 26: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Linking authentic

(public/private) sources?

Page 27: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Sharing to much information/details?

Page 28: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Discreetly share information?

Page 29: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of
Page 30: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Trust?

Page 31: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Control of your own identity data?

Page 32: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Control of your own identity data?

Page 33: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

The user/citizen in control?

Page 34: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Self sovereign identity?

Page 35: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

‘Self-Sovereign Identity is

the next step beyond user-

centric identity and that

means it begins at the same

place: the user must be

central to the administration

of identity.’

— Christopher Allen

Page 36: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of
Page 37: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

disclaimer: example with jolocom SSI solution

wallet, other solutions available/possible

Page 38: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

https://www.devteam.space/blog/how-to-build-a-self-sovereign-identity-wallet/

Page 39: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of
Page 40: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of
Page 41: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

https://www.youtube.com/watch?v=UqydT3EujQk

Page 42: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

How does these new identity models really work?

Page 43: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Identity is not only public government related. Many private

partners are actively involved (bank accounts, insurance

documents, social media, health records, etc)

Page 44: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

and it does not end at the national borders ...

Page 45: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

ESSIF

Page 46: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

European Blockchain Partnership (EBP)Collaborate to let EU take the lead in blockchain

Page 47: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

EBP background

Page 48: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

ESSIF (European Self

Sovereign Identity

Framework)

● How to collaborate in on the many

cross border challenges of Self

Sovereign identity in Europe?

● Initiative launched in EBP by

Germany/ Nordrhein-Westfalen with

help of Netherlands and Belgium.

● Use case and project in the

European Blockchain Service

Infrastructure (28 member states

involved)

● Belgium and Spain project-

convenors

Page 49: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Scope of ESSIF

• Empower citizen in the management of their data via SSI

• Stimulate the SSI-transformation of public services

• Facilitate cross-border interaction with SSI

• Make/keep national SSI projects interoperable

• Integrate/align existing building blocks such as eIDAS, e-delivery, once-only with SSI

• Conceptualize and build an identity layer in the new European Blockchain Services Infrastructure supporting the current use cases

• Preserve European/democratic values in the implementation of Self Sovereign identity

• Stimulate SSI development and standardization on global level (W3C, DIF, ISO, CEN-CENELEC, etc.)

49

Page 50: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

https://www.youtube.com/watch?v=OmOCNt8aXy8https://www.youtube.com/watch?v=ATXCzY-GM_U&t

Page 51: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

SSI ecosystem without ESSIF

51

Page 52: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

SSI ecosystem with ESSIF specification and public

services involvement

52

Page 53: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

ESSIF specifications (example: Relying party

environment)

53

Page 54: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

ESSIF - eIDAS

• SSI eIDAS legal report, see https://joinup.ec.europa.eu/collection/ssi-eidas-bridge/legal-deliverables

• https://youtu.be/ATXCzY-GM_U

54

Page 55: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

ESSIF - GDPR

55

Page 56: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

SSI ecosystem with ESSIF components

56

Page 57: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Example ESSIF implementation:

Diplomas features in EBSI

Diplomas

ISSUE A DIPLOMA

VERIFY A DIPLOMA

REVOKE DIPLOMA

SUSPEND DIPLOMA

Student

REQUEST THE ISSUANCE OF THE DIPLOMA

ACCEPT DIPLOMA

SHARE DIPLOMA

Institution

ISSUE EDUCATIONAL ADSCRIPTION ATTRIBUTES

(membership)

ISSUE LETTER OF RECOMMENDATION

VERIFY EDUCATIONAL ADSCRIPTION ATTRIBUTES

(membership)

Governance

ADD EDUCATIONAL INSTITUTION

GRANT ACCESS TO AN EDUCATIONAL INSTITUTION

REVOKE ACCESS TO AN EDUCATIONAL INSTITUTION

REMOVE EDUCATIONAL INSTITUTION

Related projects

ISSUE EUROPEAN STUDENT CARD

VERIFY EUROPEAN STUDENT CARD

Page 58: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Out of Scope of ESSIF

• The interpretations of the data (semantics) and the necessary standardizations and business logic is however outside the scope of ESSIF.

• ESSIF will provide in its first instance support for other EBSI use cases (like diploma and notarization)

• ESSIF will not build and maintain an SSI wallet for all European citizens and interfere in this way with the emerging market of SSI solutions and personal data storage.

• Academic research on SSI is out of scope of the EBSI use case ESSIF.

58

Page 59: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

ESSIF v2 timeline

59

Page 60: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Get involved

• Full documentation and source code of v1 will be soon published on https://ec.europa.eu/cefdigital/wiki/display/CEFDIGITAL/EBSI

• Join the ESSIF stakeholder meeting (2-3 meetings per year)

60

Page 61: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

1876: "This 'telephone' has

too many shortcomings to be

seriously considered as a

means of communication." —

William Orton, President of

Western Union.

Page 62: Empower citizens to control their own data/identity with ... · When we think of digital identity we therefore need to see it not as a single thing. It is rather the sum total of

Thank you for your attention(and thanks to Rene Margritte)