I have control

Can we truly own our identity?

Digital identity is a complex subject; as with most digital transformations, taking a process that exists in an analogue world and digitising it for use online doesn’t create a great solution.  A number of models for digital identity exist, and are often spoken about in terms such as centralised, federated, distributed, user-centric, self-sovereign.  There are countless papers by the great and the good of the identity world that talk about the merits and flaws of the varying models.  There’s a school of thought that centralised is bad and self-sovereign is the panacea for digital identity – though often these ideas focus too much on the model and less about the use.  And the arguments are often mired in digitisation of analogue.

Self-sovereign digital identity is a model which:
  • Places the individual in absolute control of the digital representation of themselves 
  • Is based upon the kernel of self that exists in the real world
  • Assures the individual of access to all the data regarding them and provides transparency of how data flows
  • Persists for as long or as short as the individual decides
  • Assures portability and interoperability
  • Functions on explicit user consent
  • Operates sharing based on principles of data minimisation

These are all traits which it is hard to argue shouldn’t be the foundation of any digital identity model – never one to shy away from an argument, here goes:

Places the individual in absolute control of the digital representation of themselves 
Until such time as we plug in to the matrix, a digital identity and the flesh and bone which it represents cannot be linked with absolute certainty.   When the link between the two is, or is reasonably believed to be broken, control of the digital identity must be revoked (either permanently or temporarily).  This introduces a higher power of control over the individual’s identity.

Is based upon the kernel of self that exists in the real world
Identity in the real world is also complicated.  In the real world, our identities are often assigned by central authorities such as governments; or they’re guaranteed by 3rdparties such as our parents; or they’re accepted based upon assigned attributes such as name, address and date of birth; or they’re based upon our DNA.  And more often than not, they’re a combination of all of these.  If our digital identity is based upon our real-world identity it cannot be self-sovereign.

Assures the individual of access to all the data regarding them and provides transparency of how data flows
We should always strive towards openness and honesty.  Yet there are circumstances where we need to keep data hidden and circumstances where its beneficial for the user to do so.  As an example, the organisation who will rely on digital identity are often required to check for fraud and criminality against our identity.  This isn’t information that we should give to the user, yet it is often closely tied to their identity.  So commercially and practically it needs to flow with the identity assertion.  When we give information to an individual, we also have a duty of care not just when that data isn’t correct, yet also when that information risks disenfranchising the individual.  Credit scores used to be information passed from Agency to Supplier about the individual without their involvement.  This changed, and in the last 20 years, they have gone from information that we know, to information that we can actually manage.  Yet for many people, a poor credit score creates exclusion – which leads to disenfranchisement.  If digital identity is to be inclusive, the data that we give back to the individual needs to have the duty of care built in.  We should work towards openness, we shouldn’t dive straight into it without understanding the consequences.

Persists for as long or as short as the individual decides
For some nations, having a government issued identity card is mandatory, for others it is optional or simply doesn’t exist.  Rather than eulogising on which is right, digital identity needs to recognise all models do and will exist, and look to provide a digital identity model which supports mandatory and optional membership of government registers.  Similarly, fraud systems need to persist identity elements to protect from bad actors.  We can offer choice in how long our digital identity as a “thing” persists, on the data that makes it up we can’t.

Assures portability and interoperability
Data portability is a convenience factor that shouldn’t be wilfully restricted.  Identity portability is where the value and complexity lies.  In order to drive the market, the work done in proofing the identity and attribute claims can’t simply be ported from one party to another.  To do so risks separation of effort and reward, which disincentives the commercial efforts required to develop and maintain a functioning marketplace.

Interoperability can only be assured with mutual trust.  Mutual recognition is reliant on the creation and adoption of interoperable standards.  Interoperability of systems should only be required once interoperability of standards is achieved.  We shouldn’t expect that everything interoperates with everything else unless everything is equal.

Functions on explicit user consent
The notion that an individual can explicitly permission what data is shared by whom and with whom is reliant on goodwill that doesn’t exist.  If we are given the choice to share only positive information and withhold anything negative, this is going to be a common choice.  This will restrict the ability for the receiving organisation to rely on the data.  Hobson’s choice (take what’s on offer or nothing at all) isn’t explicit consent for data sharing either.  We should be far more honest with how we define consent, so that a user understands when we need broad consent to search for good and bad information about their identity and when we’re seeking explicit consent to only share attribute X from organisation Y with organisation Z.

Operates sharing based on principles of data minimisation
Users shouldn’t need to understand the principles of data minimisation.  In a self-sovereign model, where they’re free to share their own data as they choose with whomever they choose, they need to understand who they’re sharing their data with and whether they’re only asking for the data they actually need.  In other models, such decisions are made on behalf of the user based upon their own rules -  for example, the Passport Office can permission that “X holds a valid passport” and “X is a Citizen of country Y” to be shared with anyone that the individual wishes; and that “X has passport number 12345678” only with parties which it trusts – which takes away both the control and the responsibility from the individual. 


Self-sovereign identity is a utopia that may never exist based on principles that may be better achieved through other means.  We should focus more on the things that a user needs from a digital identity and worry less about the model that we use to achieve them.  In designing digital identity, if we do so based on principles the user will value, and deliver them in a way which they will engage, we have the opportunity to revolutionise identity for the digital age.  Can we truly own our identity?  Does it matter providing we can assert our identity when we need to, to get things done?

Read my other posts
Tipping the balance - Getting the right balance between security and user experience
You don't know what you're doing Poor security practices are putting users at risk 
I didn't say you could touch me - Biometric authentication and identity
You don't need to tell me - Impacts of the EU General Data Protection Regulations
Coming together on being alone - The need for a clear government digital strategy
I'm not the person I used to be - Authentication for real world identities
Distributed Identity has no clothes - Will distributed ledger technology solve identity
Bring Your Own Downfall - Why we should embrace federated identity
Unblocking Digital Identity - Identity on the Blockchain as the next big thing
Tick to Agree - Doing the right thing with customer's data
The Kids Are All Right - Convenient authentication: the minimum standard for the younger generation
The ridiculous mouse - Why identity assurance must be a rewarding experience for users
Big Brother's Protection - How Big Brother can protect our privacy
I don't know who I am anymore - How to prove your identity online
Three Little Words - What it means for your business to be agile
Defining the Business Analyst - Better job descriptions for Business Analysis
Unexpected Customer Behaviour -  The role of self-service in your customer service strategy
Rip it up and start again - The successful Business Transformation
Too Big To Fail - Keeping the heart of your business alive
The upstarts at the startups - How startups are changing big business 
One Small Step - The practice of greatness
In pursuit of mediocrity - Why performance management systems drive mediocrity

About me

Bryn Robinson-Morgan is an independent Business Consultant with interests in Identity Assurance, Agile Organisational Design and Customer Centric Architecture.  Bryn near 20 years experience working with some of the United Kingdom's leading brands and largest organisations.

Follow Bryn on Twitter: @No1_BA



Connect with Bryn on Linked In: Bryn Robinson-Morgan
Source: bryn blog

Foracort inhaler 200 price in india foracort during pregnancy

Other schools of thought are emerging to extend and "soften" the existing theory of probability and statistics? "Es fundamental estar relajado y evitar las prisas! Avoid rubbing your eyes even if your vision is blurred. I do not know if it’s just me or if perhaps everyone else experiencing problems with your website? If taken daily, foracort 400 dose abrupt withdrawal can cause very high blood pressure! DIOXYCHLOR: When we first saw these cases of Chronic Fatigue Syndrome, foracort inhaler 200 price in india we were beginning to work with dioxychlor. De terfenadina cuando se administran en forma concomitante. Pero las empresas que se ocupan de la fabricación de los medicamentos genéricos, foracort alternative no llevan las perdidas durante las elaboraciones, ya que ellas simplemente copian un producto ya elaborado. (By Retin-A, I mean any retinoid: Stieva-A, Tazorac, Differin, etc! A mean pain score during baseline of at least 4 was required for randomization! Je suis connu pour être quelqu’un a forte personnalité et sure de soi. However, difference between seroflo and foracort this classification scheme does not account for the diversity of complicated UTI syndromes? In addition, Congress long ago enacted the “federal in forma pauperis statute? Before undertaking any course of treatment, foracort and budecort difference the reader must seek the advice of their physician or other health care provider. People born with kidney dysplasia have both kidneys; however, foracort with spacer one kidney does not function? Auch buy claritin unevenly eine analytik, trial ed set extreme apothekenpreis! For several days after the medication has been stopped!

Foracort 200 rotacaps how to use


Lenny just-in-time aygestin usa Briscoe's daughter gets rubbed out by a dope ring? If benoquin cream buy online atweel you generally lighter skin, you can use very mild lasers such as IPL which will clear of the surface in one or two treatments. During long-term antibiotic administration, foracort inhaler 200 price in india the risk for drug interaction with OCs is less clear, but alternative or additional contraception may be advisable in selected circumstances! If you’re interested feel free to send me an e-mail!

Foracort inhaler with spacer


Efficacy of escitalopram in the treatment of major depressive disorder compared with conventional selective serotonin reuptake inhibitors and venlafaxine XR: a meta-analysis? However, foracort inhaler 200 price in india there are no adequate and well-controlled studies evaluating Valtrex in pregnant women! Antibodies inductively sporanox price are good - they usually prevent the virus from attacking your baby. Significantly pleasantly lamisil price more common in adolescent and young adult women, but can occur in children? The first sign was that I was feeling, well, friskier than usual. In general, avoid combined use of these drugs together. And as you’ll learn, oregano oil benefits extend beyond just controlling infections! My skin is very smooth (almost too smooth, neb foracort composition like glass) and red in hue? This provides a major advantage over other products available in the market? Do you have any recommendations for aspiring writers. Ed Graf was released on parole eight days after his guilty plea? Sometimes the size or shape of the pessary will have to be changed? Rebecca filed for divorce from former " Grey's Anatomy" star Eric just 2 days after Valentine's, and after 14 years of marriage! Iar apoi sunt cazuri particulare, uneori neexplicate pe înț.

Foracort rotacaps 400 price


When access to beta-receptor sites is blocked by propranolol, difference between foracort and duolin the chronotropic, inotropic, and vasodilator responses to beta-adrenergic stimulation are decreased proportionately? Yuliya Efimova (back) of Russia and Ruta Meilutyte of Lithuania in Kazan last summer - Efimova is laughing no more - by Patrick B? In the seronegative group, the 12-month survival rate was 95 percent among valacyclovir recipients and 96 percent among placebo recipients?
foracort 400 how to use
Herpes simplex’in nüks enfeksiyonlarında tedaviye ideal olarak prodromal sürede veya ilk belirti veya semptomlar görülür görülmez başlanmalıdır? Difficile every 2 months post antibiotic use, most especially the Fluoroquinolone family? A total of 15 studies were included in the review, of which 4 RCTs were for meta-analysis? A fluorescent antinuclear antibody test is also not indicated, as the oral lesions of lupus erythematosus are typically irregular, erosive, and necrotic! Pas presto zofran uk dans un défaut ou un déséquilibre chez elles! I'm eating roughly 1900 calories a day and working my ass off at the y five days a week. The drug can be taken on an as-needed basis, similar to Viagra, or it can be taken every day! I am extremely angry that I cannot get back those years that I was taking various anti-depressants that turned me into a zombie who did not care about anything or anyone? Nonetheless, in the interests of adherence to the NOS criteria, studies that used hospital control groups ( Hollinrake et al, 2007; Adali et al, 2008; Barry et al, 2011) lost an NOS quality assessment star! « Ce médicament est essentiellement vendu en Europe de l’Est, foracort rotacaps 400 in hindi a expliqué Craig Reedie, patron de l’AMA,? Around 10 pm, I felt a hard knot in my left jaw area? Was rosuvastatin price walmart successlessly natürlich nicht gut kommt bei so einem Drehtag? Systemic and inhaled corticosteroids are known to increase blood glucose and worsen glycemic control in patients taking antidiabetic agents! The main risk factors for impaired glucose tolerance due to corticosteroids are the dose of steroid and duration of treatment? Unlike other ACE inhibitors, foracort inhaler 200 price in india it is not a prodrug and is excreted unchanged in the urine. Researchers recruited people between the ages of 18 and 75 years from one tertiary center to participate in the study. Symptoms of overdose may include: irregular heartbeat, modalert uk shortly fainting, severe dizziness or lightheadedness! Ethinyl Estradiol; Norethindrone; Ferrous fumarate: (Minor) Patients receiving antidiabetic agents like metformin should be closely monitored for signs indicating changes in diabetic control when therapy with progestins is instituted or discontinued. 455, foracort 400 benefits 30 LEd2d 468 (1971), that a defendant's Sixth Amendment right to a speedy trial applies only to prosecutions formally begun, not to pre-accusation delays. The methods of the invention also allow for the regulation of expression of an endogenous gene which has been operatively linked to one or more tet operator sequence(s) that binds the revTet of the invention! However, in light of the protection afforded by the applicable statute of limitations, diminished recollection alone does not constitute substan! Certains facteurs comme le stress, foracort inhaler 200 price in india la fatigue, l’anxiété, les tensions quotidiennes ou le manque d’expérience sexuelle sont présents dans notre vie de manière permanente et l’homme ne peut pas les éviter à longueur de journée! We do not endorse non-Cleveland Clinic products or services! It is also effective for reversing cases of idiopathic urinary retention (failure to empty the bladder)! Achetez vos packs de Sono en ligne au meilleur prix! Patients with chronic hepatitis B infection who have negative hepatitis B e antigen are not always by definition “healthy carriers” These individuals can go on to have active HBV viral replication, foracort forte inhaler liver enzyme elevation and liver disease! At your age and for the next 5-10 years, unhesitatingly synthroid canada these prodcuts will offer gentle anti-aging benefits without the drawbacks of Retin A. When Januvia was added to Metformin or Avandia, the studies found Januvia got only about half of patients taking the combined drugs to an A1c near 7%--which as you have seen elsewhere in this site, is a blood sugar level high enough to produce significant diabetic complications? Ha trabajado en varios casos importantes relativos a los derechos LGBT en África meridional. So smooth duolin respules price werden dem Medikament eine Reihe von Wirkungen zugesprochen, die wissenschaftlich nicht begründet sind, wie Steigerung der Libido, erhöhte Erektionsqualität oder Vergrößerung der Penislänge. When I initially commented I clicked the “Notify me when new comments are added” checkbox and now each time a comment is added I get three e-mails with the same comment.

You don’t need to tell me

You don’t need to tell me

In May 2018 the European Union’s General Data Protection Regulations (GDPR) will come into force, replacing the existing Directive 95/46/EC, which will be repealed.  The new regulations are seen as an enabling requirement of the European Digital Single Market – removing the current fragmentation of how the existing directive is implemented by member states, and Continue reading You don’t need to tell me

I didn’t say you could touch me

I didn’t say you could touch me

The use of biometrics in user authentication is thriving with fingerprint sensors becoming more common and technology evolving for reliable facial and voice recognition being used within apps.  Next generation smartphones may also contain iris scanning capability thanks to micro form factor components that can be included in the existing footprint.   This convenience is driving Continue reading I didn’t say you could touch me

You don’t know what you’re doing

You don’t know what you’re doing

Once again Yahoo has reported a mammoth customer data breach, bringing the total of customers that they’ve put at risk of cybercrime to a mere 1 billion.  This news was quickly followed up by much smaller, yet similarly worrying, report of a “potential” data breaches from KFC UK and Domino’s Pizza.  KFC were keen to Continue reading You don’t know what you’re doing

Practical Change

Why is it that so many change and transformation projects fail? Organisations that start them often have plenty of people, funds, planning time and of course consultancy resource working on them and yet they still fail. Personally I have been involved in multiple change initiatives and have recently decided to review all the different aspects Continue reading Practical Change