世界经济论坛数字身份在数字身份革命的门槛上英文2018418页

WhitePaperDigitalIdentityOntheThresholdofaDigitalIdentityRevolutionJanuary2018Davos-Klosters,Switzerland23-26January2018WorldEconomicForum®©2018–Allrightsreserved.NopartofthispublicationmaybereproducedorTransmittedinanyformorbyanymeans,includingPhotocopyingandrecording,orbyanyinformationStorageandretrievalsystem.REF160118ThiswhitepaperhasbeenpublishedbytheWorldEconomicForumasacontributiontoaproject,insightareaorinteraction.Thefindings,interpretationsandconclusionsexpressedhereinarearesultofacollaborativeprocessfacilitatedandendorsedbytheWorldEconomicForum,butwhoseresultsdonotnecessarilyrepresenttheviewsoftheWorldEconomicForum,northeentiretyofitsMembers,Partnersorotherstakeholders.3OntheThresholdofaDigitalIdentityRevolutionContents5Onthethresholdofadigitalidentityrevolution5Identitytodayisfractious6Whatisdigitalidentity?8Whyisdigitalidentityimportant?9Digitalidentityrevolution,inthecontextof…9Thehumanitariansector9Financialservices10Travelandbordercontrol11Connecteddevices11Legalentities13Sustainablesupplyshain13Risksandkeypointsforconsideration14Values,principles,requirementsandkeyquestionsinconsolidatingafracturedidentitylandscape15AbouttheDigitalIdentityinitiative16Endnotes17Acknowledgments4DigitalIdentity5OntheThresholdofaDigitalIdentityRevolutionOnthethresholdofadigitalidentityrevolutionIdentitytodayisfractiousForindividuals,legalentitiesanddevicesalike,averifiableandtrustedidentityisnecessarytointeractandtransactwithothers.Theconceptofidentityisn’tnew–formuchofhumanhistory,wehaveusedevolvingcredentials,frombeadsandwaxsealstopassports,IDcardsandbirthcertificates,toprovewhoweare.Theissuesassociatedwithidentityproofing–fraud,stolencredentialsandsocialexclusion–havechallengedindividualsthroughouthistory.But,asthespheresinwhichweliveandtransacthavegrown,firstgeographicallyandnowintothedigitaleconomy,thewaysinwhichhumans,devicesandotherentitiesinteractarequicklyevolving–andhowwemanageidentitywillhavetochangeaccordingly.AswemoveintotheFourthIndustrialRevolutionandmoretransactionsareconducteddigitally,adigitalrepresentationofone’sidentityhasbecomeincreasinglyimportant;thisappliestohumans,devices,legalentitiesandbeyond.Forhumans,thisproofofidentityisafundamentalprerequisitetoaccesscriticalservicesandparticipateinmoderneconomic,socialandpoliticalsystems.Fordevices,theirdigitalidentityiscriticalinconductingtransactions,especiallyasthedeviceswillbeabletotransactrelativelyindependentofhumansinthenearfuture.Forlegalentities,thecurrentstateofidentitymanagementconsistsofinefficientmanualprocessesthatcouldbenefitfromnewtechnologiesandarchitecturetosupportdigitalgrowth.Asthenumberofdigitalservices,transactionsandentitiesgrows,itwillbeincreasinglyimportanttoensurethetransactionstakeplaceinasecureandtrustednetworkwhereeachentitycanbeidentifiedandauthenticated.Identityisthefirststepofeverytransactionbetweentwoormoreparties.Overtheages,themajorityoftransactionsbetweentwoidentitieshasbeenmostlyviewedinrelationtothevalidationofacredential(“Isthisgenuineinformation?”),verification(“Doestheinformationmatchtheidentity?”)andauthenticationofanidentity(“Doesthishuman/thingmatchtheidentity?Areyoureallywhoyouclaimtobe?”).Thesequestionshavenotchangedovertime,onlythemethodshavechange.Thispaperexploresthechallengeswithcurrentidentitysystemsandthetrendsthatwillhavesignificantimpactonidentityinthefuture.Theadventoftheinternetcatapultedusintothedigitalworldand,forthepastseveraldecades,ouridentitieshavebecomemoreandmorefracturedandredundantwitheachnewserviceproviderandauthority.Datarelatedtoouridentitiesandthenumberofinstancesofouridentitieshaveproliferatedtoanunmanageablestate.Thinkaboutyourlastmove.Howmanydifferentplacesdidyouneedtoupdateyouraddressinformation?Morefundamentally,thinkabouthowexcludedfrommodernsocietyyouwouldbeifyoudidnothaveanyformofidentity.Asdigitalformsofidentityarerequiredtoconductourlives,itisbecomingclearthatthecurrentapproachtoidentityandidentityproofingisincompatiblewiththewaywetransactandbehaveacrossdigitalandphysicalworlds.Themandatoryprocessesusedtoverify,authenticateandmanageanidentitythroughoutitslifecyclearecumbersomeandrepetitive,requiringmanualdatareconciliationandvalidationprocessesinthebackground.Forindividuals,thisfragmentedprocessleadstodailyfrustrationswithcountlessusernames,forgottenpasswords,IDdocumentsandtimewastedwaitingtobeverifiedandauthenticatedtocompleteatasksuchasgainingaccesstoabuilding,boardingaplane,gettingajob,etc.Challengescitedbyindividualsinbothdevelopedanddevelopingcountrycontextsinclude:–Limitstoportabilityandacceptability–“Recognized”identitydifferswidelyamongcountries,organizationsandcontexts.Broadly,theissuearisesasaresultofalackoftrustbetweenidentityregimesandsystems.Asaresult,individualsendupwiththousandsofdigitalandphysicalcredentialsforeachservice.–Socialandfinancialinclusion–Forthosewhohavenoformofofficiallyrecognizedidentity,accesstoessentialservicesaswellassocialandfinancialinclusionisextremelydifficultorimpossible.–Inabilitytomanagedata–Globally,individualshavenoabilitytoma