Phil Windley

JULY 5, 2021

But what if, in some future world, the root certificate authority of the identity documents I use for banking, shopping, travel, and a host of other things decides to revoke my identity for some reason? Interoperability takes "intervening" out of "administrative authority.". Tags: identity ssi didcomm ssiot.

Architecture 98

Architecture Internet Programming Travel 98

Phil Windley

MARCH 1, 2023

Still we can look at the direction in which digital identity is evolving to get an idea what's coming—even if we can't predict the timing. The last chapter of my new book, Learning Digital Identity , makes a case that there is an existing identity metasystem that I label the Social Login (SL) metasystem. And became Sybill.

Social 53

Social Operating Systems Authentication Banking 53

Phil Windley

JANUARY 25, 2022

Summary: The IRS will use ID.me's authentication and identity proofing service exclusively starting sometime this summer. The identity proofing portion employs facial scanning by a third party, causing some concern. is an identity proofing and authentication company that seems to be getting a lot of government contracts.

Authentication 59

Authentication Licensing Windows Company 59

Phil Windley

NOVEMBER 9, 2020

Recently, I've been making the case for self-sovereign identity and why it is the correct architecture for online identity systems. In Relationships and Identity , I discuss why identity systems are really built to manage relationships rather than identities.

Authentication 59

Authentication Architecture System Network 59

Phil Windley

JULY 16, 2019

The real value proposition of decentralization is autonomy—not being inside someone else’s administrative system where they make the rules in a one sided way 2. This is just as true about identity as it is about the Internet of Things. That's why we call it self-sovereign identity. Systems decay.

Internet 79

Internet System Government Policies 79

Phil Windley

FEBRUARY 7, 2022

Summary: When we dine at a restaurant in the physical world, we do not do so within some administrative system. Sovereign is the right word for describing the essential distinction between our inalienable self and the administrative identifiers and accounts endemic in Web2. I stumbled across Web3 is Self-Certifying from Jay Graber.

Authentication 52

Authentication Examples Data System 52

Phil Windley

APRIL 12, 2021

A similar, and perhaps just as impactful, discussion is happening now around technologies like artificial intelligence, surveillance, and digital identity. I’d like to focus on just one small facet of the digital identity debate: vaccination passports. Tags: verifiable+credentials identity covid.

Travel 90

Travel Artificial Intelligence Social System 90

Phil Windley

AUGUST 17, 2017

Summary: We cannot decentralize many interesting systems without also decentralizing the identity systems upon which they rely. We're finally in a position to create truly decentralized systems for digital identity. Most interesting systems have an identity component. The problem with decentralized identity is even more acute.

System 92

System Examples Internet Security 92

Phil Windley

MAY 11, 2021

Serendipitously, Manny came across self-sovereign identity (SSI) at the same time and, as I said, spoke at the launch of Sovrin Foundation. There were three primary problems that this solves: Patient Safety - Verifying the identity and skills of temporary and permanent clinical staff. Time and cost to onboard healthcare staff.

Healthcare 80

Healthcare Programming Video Training 80

Phil Windley

NOVEMBER 21, 2023

As I wrote in The CompuServe of Things , the web and mobile apps are almost exclusively built on a model of intervening administrative authorities. Tags: dapps picos blockchain pcaa Worse, most use your data for their own purposes, often in ways that are not in your best interest. We can build the world we want to live in.

Engineering 52

Engineering Internet Applications Architecture 52

Phil Windley

DECEMBER 2, 2020

Summary: Self-sovereign identity offers much more than just better ways to log in. The identity metasystem is really a sophisticated messaging system that is trustworthy, secure, and extensible. Figure 1: Administrative relationships in today's CompuServe of Things (click to enlarge).

Internet 87

Internet Security Examples Authentication 87

Linux Academy

FEBRUARY 1, 2019

Managing AD Identity Protection and objects. Get access to and practice in a live Azure console with these hands-on labs: Applying Tags to VMs in Azure Using PowerShell. Identity and security. They partner with cloud solution architects, cloud DBAs, cloud administrators, and clients to implement the solution.

Course 80

Course Training Storage Microsoft 80

Phil Windley

AUGUST 30, 2021

Tags: legibility decentralization security flying identity university. The author builds a persuasive case against "development theory" and imperialistic state planning that disregards the values, desires, and objections of its subjects. Photo Credit: Security from Anelise Bergin (none).

System 90

System Social Authentication Software 90

Phil Windley

SEPTEMBER 28, 2020

Summary: The architecture of an identity system has a profound impact on the nature of the relationships it supports. Introductory note: I recently read a paper from Sam Smith, Key Event Receipt Infrastructure , that provided inspiration for a way to think about and classify identity systems. More succinctly we ask: who controls what?

Architecture 138

Architecture System Authentication Security 138

Phil Windley

APRIL 4, 2023

Photo Credit: Information Desk Charleston Airport from AutoRentals.com ( CC BY 2.0 , photo is cropped from original) Tags: identity abac access+management pbac pip Notes The information in this article was inspired by Should the Policy Enforcement Point Send All Attributes Needed to Evaluate a Request?

Policies 52

Policies Examples System Resources 52

Phil Windley

OCTOBER 25, 2021

Summary: Token-based identity systems move us from talking about who, to thinking about what, so that people can operationalize their digital lives. Token-based identity systems support complex online interactions that are flexible, ad hoc, and cross-domain. Account- and token-based identity are not mutually exclusive.

Insurance 137

Insurance System Authentication Banking 137

ForAllSecure

MARCH 1, 2022

Ross William Ulbricht was arrested for, among other things, being the administrator of Silk Road. The administrator for the site would always be Dread Pirate Roberts, but different people could assume that identity over time. You almost have to put on your new identity the minute you walk out of your home or office.

Mobile 52

Mobile Internet Exercises Security 52

Phil Windley

SEPTEMBER 7, 2021

Summary: Fluid multi-pseudonymity perfectly describes the way we live our lives and the reality that identity systems must realize if we are to live authentically in the digital sphere. I've never been a fan of philosophical introspections in digital identity discussions. These calls don't often come from within the identity community.

Network 107

Network Government Authentication Examples 107

Phil Windley

JULY 16, 2020

Summary: We build digital identity systems to create and manage relationships—not identities. Identity systems should provide relationship integrity and utility to participants for the appropriate length of time. The reason we build identity systems isn't to manage identities, it's to support digital relationships.

Authentication 95

Authentication System Data Architecture 95

Phil Windley

MARCH 21, 2022

We don't build identity systems to manage identities. Rather we build identity systems to manage relationships. Given this, we might rightly ask what kind of relationships are supported by the identity systems that we use. Tags: identity relationships metaverse. But I also classify them as transactional.

Authentication 124

Authentication System Open Source Internet 124

CIO Business Intelligence

DECEMBER 21, 2023

When the customers reach the stage of making the online transaction, they can either be redirected to the payment gateway’s website or simply complete the transaction through embedded iframe tags within the airline’s payment page.

Airlines 52

Airlines Travel Security Firewall 52

Phil Windley

MAY 25, 2021

Summary: Natural anonymity comes from our ability to recognize others without the aid of an external identity system. Online interactions will only be able to mirror life-like anonymity when we can use decentralized identity systems that don't force all interactions to be under the purview of centralized, administrative identity systems.

System 76

System Authentication Internet Government 76

Phil Windley

AUGUST 12, 2020

Summary: Self-sovereign identity, supported by a heterarchical identity metasystem, creates a firm foundation for rich digital relationships that allow people to digitally embodied so they can act online as autonomous agents. Administrative Identity Systems Create Anemic Relationships.

Authentication 112

Authentication Architecture System Examples 112

CIO Business Intelligence

APRIL 6, 2022

In the case of cloud infrastructure, users are responsible for application security, identity and access management, client and endpoint protection, data classification and user behavior. The same holds true in a SaaS environment, although software and service providers assume a somewhat greater role in application and access controls.

Security 98

Security Cloud Data Firewall 98

Phil Windley

JUNE 24, 2020

Summary: If your identity system doesn't use DIDs and verifiable credentials in a way that gives participants autonomy and freedom from intervening administrative authorities, then it's not SSI. A few days ago I was in a conversation with a couple of identity expert friends. And there's no artifact called an "identity."

System 52

System Tools Software Software 52

Phil Windley

AUGUST 10, 2020

Summary: Sovereign is the right word for describing the essential distinction between our inalienable self and the administrative identifiers and attributes others assign to us online. We do not spring into existence because some administrative system provisions an identifer for us. Each of us has an inner essence that is who we are.

Exercises 65

Exercises Licensing Authentication System 65

Phil Windley

FEBRUARY 25, 2019

Summary: Decentralized identifiers are one of the foundational ideas for supporting self-sovereign identity. Decentralized identifiers are one of several foundational technologies for building a metasystem for self-sovereign identity. Web-based identity systems have largely defaulted to using email addresses as identifiers.

Authentication 102

Authentication Examples System Security 102

Phil Windley

NOVEMBER 29, 2021

In a recent thread on the VRM mailing list, StJohn Deakins of Citizen Me shared a formulation of interactions that I thought was helpful in unpacking the discussions about data, identity, and ownership. For example, if I go the store and use cash to buy a coke there is no exchange of identity information. Why don’t they exist?

Applications 104

Applications System Authentication Tools 104

Phil Windley

JANUARY 7, 2019

Summary: In this post, I make a case that Sovrin not only conforms to Kim Cameron's Seven Laws of Identity, but constitutes the identity metasystem he envisioned in 2004. In 2005, Microsoft's Chief Identity Architect, Kim Cameron wrote an influential paper called The Laws of Identity (PDF). An Identity Metasystem.

Banking 88

Banking Internet System Software 88

Phil Windley

MARCH 30, 2020

Summary: Avoiding future identity catastrophes requires that we put technical and legal structures in place now to protect privacy and autonomy and provide censorship resistance. If you haven't yet seen Christopher Allen's excellent presentation on How to avoid another identity tragedy with SSI? , This is the world of LESS Identity.

System 55

System Examples Network Architecture 55

Phil Windley

JANUARY 8, 2022

If that database is controlled by a single entity (think company, think big tech), then enormous market power accrues to the owner/administrator of that database. This is why I think identity is the most fundamental building block for Web3 and one that's not being talked about enough yet. We're all a part of that effort.

Applications 52

Applications System Software Software 52

Phil Windley

AUGUST 20, 2019

Summary: Sovrin is an identity metasystem that provides the Internet's missing identity layer. By creating a general-purpose system for constructing context-specific identity systems, the metasystem represents a universal trust framework. And this happened without anyone being aware that there was an identity system in play.

Internet 102

Internet Banking System Architecture 102

CTOvision

DECEMBER 15, 2014

One of the federal government’s key procurement arms, the General Services Administration (GSA), has released a survey to the tech community in the form of a request for information asking a few simple questions regarding the experience of their vendor base. By Bob Gourley. Predictive Analytics.

Government 301

Government Artificial Intelligence Virtualization Big Data 301

Phil Windley

JANUARY 26, 2021

Summary: Generative identity allows us to live digital lives with dignity and effectiveness, contemplates and addresses the problems of social inclusion, and supports economic equality to everyone around the globe. In this article, I explore the generativity of self-sovereign identity—specifically the exchange of verifiable credentials.

Internet 72

Internet Authentication Architecture Examples 72

Galido

APRIL 11, 2019

Despite constant upgrading, the market is looming with identity thefts, scams, and harmful viruses. Conduct identity theft. Identify Administrator Mode Risks. However, it is important to keep in mind that there are a few threats that tag along. Cybercriminals are innovating methods of entering into your system.

Security 81

Security How To System Software 81

Phil Windley

MARCH 13, 2020

Summary: The Sovrin Identity Metasystem is based on a sophisticated stack of protocols, implemented in open-source code, backed and supported by hundreds of organizations, large and small, around the world. The Sovrin Network is a metasystem for building identity systems. The Sovrin SSI Stack (click to enlarge).

Government 59

Government Network Open Source Policies 59

Phil Windley

DECEMBER 3, 2020

In The Self-Sovereign Internet of Things , I introduced the role that Self-Sovereign Identity (SSI) can play in the internet of things (IoT). Tags: ssiot iot vrm me2b ssi identity decentralized+identifiers relationships. Everything I've discussed here and in the previous post are doable now. The technology works.

Internet 52

Internet Insurance Course Open Source 52