I have control

Can we truly own our identity?

Digital identity is a complex subject; as with most digital transformations, taking a process that exists in an analogue world and digitising it for use online doesn’t create a great solution.  A number of models for digital identity exist, and are often spoken about in terms such as centralised, federated, distributed, user-centric, self-sovereign.  There are countless papers by the great and the good of the identity world that talk about the merits and flaws of the varying models.  There’s a school of thought that centralised is bad and self-sovereign is the panacea for digital identity – though often these ideas focus too much on the model and less about the use.  And the arguments are often mired in digitisation of analogue.

Self-sovereign digital identity is a model which:
  • Places the individual in absolute control of the digital representation of themselves 
  • Is based upon the kernel of self that exists in the real world
  • Assures the individual of access to all the data regarding them and provides transparency of how data flows
  • Persists for as long or as short as the individual decides
  • Assures portability and interoperability
  • Functions on explicit user consent
  • Operates sharing based on principles of data minimisation

These are all traits which it is hard to argue shouldn’t be the foundation of any digital identity model – never one to shy away from an argument, here goes:

Places the individual in absolute control of the digital representation of themselves 
Until such time as we plug in to the matrix, a digital identity and the flesh and bone which it represents cannot be linked with absolute certainty.   When the link between the two is, or is reasonably believed to be broken, control of the digital identity must be revoked (either permanently or temporarily).  This introduces a higher power of control over the individual’s identity.

Is based upon the kernel of self that exists in the real world
Identity in the real world is also complicated.  In the real world, our identities are often assigned by central authorities such as governments; or they’re guaranteed by 3rdparties such as our parents; or they’re accepted based upon assigned attributes such as name, address and date of birth; or they’re based upon our DNA.  And more often than not, they’re a combination of all of these.  If our digital identity is based upon our real-world identity it cannot be self-sovereign.

Assures the individual of access to all the data regarding them and provides transparency of how data flows
We should always strive towards openness and honesty.  Yet there are circumstances where we need to keep data hidden and circumstances where its beneficial for the user to do so.  As an example, the organisation who will rely on digital identity are often required to check for fraud and criminality against our identity.  This isn’t information that we should give to the user, yet it is often closely tied to their identity.  So commercially and practically it needs to flow with the identity assertion.  When we give information to an individual, we also have a duty of care not just when that data isn’t correct, yet also when that information risks disenfranchising the individual.  Credit scores used to be information passed from Agency to Supplier about the individual without their involvement.  This changed, and in the last 20 years, they have gone from information that we know, to information that we can actually manage.  Yet for many people, a poor credit score creates exclusion – which leads to disenfranchisement.  If digital identity is to be inclusive, the data that we give back to the individual needs to have the duty of care built in.  We should work towards openness, we shouldn’t dive straight into it without understanding the consequences.

Persists for as long or as short as the individual decides
For some nations, having a government issued identity card is mandatory, for others it is optional or simply doesn’t exist.  Rather than eulogising on which is right, digital identity needs to recognise all models do and will exist, and look to provide a digital identity model which supports mandatory and optional membership of government registers.  Similarly, fraud systems need to persist identity elements to protect from bad actors.  We can offer choice in how long our digital identity as a “thing” persists, on the data that makes it up we can’t.

Assures portability and interoperability
Data portability is a convenience factor that shouldn’t be wilfully restricted.  Identity portability is where the value and complexity lies.  In order to drive the market, the work done in proofing the identity and attribute claims can’t simply be ported from one party to another.  To do so risks separation of effort and reward, which disincentives the commercial efforts required to develop and maintain a functioning marketplace.

Interoperability can only be assured with mutual trust.  Mutual recognition is reliant on the creation and adoption of interoperable standards.  Interoperability of systems should only be required once interoperability of standards is achieved.  We shouldn’t expect that everything interoperates with everything else unless everything is equal.

Functions on explicit user consent
The notion that an individual can explicitly permission what data is shared by whom and with whom is reliant on goodwill that doesn’t exist.  If we are given the choice to share only positive information and withhold anything negative, this is going to be a common choice.  This will restrict the ability for the receiving organisation to rely on the data.  Hobson’s choice (take what’s on offer or nothing at all) isn’t explicit consent for data sharing either.  We should be far more honest with how we define consent, so that a user understands when we need broad consent to search for good and bad information about their identity and when we’re seeking explicit consent to only share attribute X from organisation Y with organisation Z.

Operates sharing based on principles of data minimisation
Users shouldn’t need to understand the principles of data minimisation.  In a self-sovereign model, where they’re free to share their own data as they choose with whomever they choose, they need to understand who they’re sharing their data with and whether they’re only asking for the data they actually need.  In other models, such decisions are made on behalf of the user based upon their own rules -  for example, the Passport Office can permission that “X holds a valid passport” and “X is a Citizen of country Y” to be shared with anyone that the individual wishes; and that “X has passport number 12345678” only with parties which it trusts – which takes away both the control and the responsibility from the individual. 


Self-sovereign identity is a utopia that may never exist based on principles that may be better achieved through other means.  We should focus more on the things that a user needs from a digital identity and worry less about the model that we use to achieve them.  In designing digital identity, if we do so based on principles the user will value, and deliver them in a way which they will engage, we have the opportunity to revolutionise identity for the digital age.  Can we truly own our identity?  Does it matter providing we can assert our identity when we need to, to get things done?

Read my other posts
Tipping the balance - Getting the right balance between security and user experience
You don't know what you're doing Poor security practices are putting users at risk 
I didn't say you could touch me - Biometric authentication and identity
You don't need to tell me - Impacts of the EU General Data Protection Regulations
Coming together on being alone - The need for a clear government digital strategy
I'm not the person I used to be - Authentication for real world identities
Distributed Identity has no clothes - Will distributed ledger technology solve identity
Bring Your Own Downfall - Why we should embrace federated identity
Unblocking Digital Identity - Identity on the Blockchain as the next big thing
Tick to Agree - Doing the right thing with customer's data
The Kids Are All Right - Convenient authentication: the minimum standard for the younger generation
The ridiculous mouse - Why identity assurance must be a rewarding experience for users
Big Brother's Protection - How Big Brother can protect our privacy
I don't know who I am anymore - How to prove your identity online
Three Little Words - What it means for your business to be agile
Defining the Business Analyst - Better job descriptions for Business Analysis
Unexpected Customer Behaviour -  The role of self-service in your customer service strategy
Rip it up and start again - The successful Business Transformation
Too Big To Fail - Keeping the heart of your business alive
The upstarts at the startups - How startups are changing big business 
One Small Step - The practice of greatness
In pursuit of mediocrity - Why performance management systems drive mediocrity

About me

Bryn Robinson-Morgan is an independent Business Consultant with interests in Identity Assurance, Agile Organisational Design and Customer Centric Architecture.  Bryn near 20 years experience working with some of the United Kingdom's leading brands and largest organisations.

Follow Bryn on Twitter: @No1_BA



Connect with Bryn on Linked In: Bryn Robinson-Morgan
Source: bryn blog

Minipress xl 2.5 price minipress xl 5 mg online

Retin-A, nigh femara price Renova and Retacnyl almost always cause redness and peeling the first couple weeks of use. We show here that these antibiotics induce a mitonuclear protein imbalance through their effects on mitochondrial translation, minipress xl 2.5 price an effect that likely reflects the evolutionary relationship between mitochondria and proteobacteria!
minipress xl 5mg in hindi
Super Avana also helps treat premature ejaculation? Other scrumptiously viagra price recommendations include: oxygen, carbogen (95% oxygen and 5% carbon dioxide), vitamin C intravenously in massive doses (1 g) and ephedrine sulfate! The majority of the experience with amphotericin B is with its classic deoxycholate preparation!

Minipress website


Refined Coconut Oil is sometimes hydrogenated which creates trans-fats? Mais bon on a été plus chanceux que vous au mois de septembre.
minipress xl 5mg tablet substitute
Thanks , minipresso nespresso pods I will try and check back more frequently. While this treatment is effective and usually well tolerated for head tremor, levaquin cost demonstrably botulinum toxin treatment in the hands can cause weakness in the fingers.

Minipress xl tablet


Lassen Sie sich daher in der DrEd Sprechstunde von deutschen Ärzten bequem und kompetent online beraten. Pao , la página de nuface no tiene descuento, todos los kits con precio normal 😕! Claro que comprar Viagra online es mucho más cómodo que en una de las farmacias de la ciudad pero no tiene que olvidar que necesita la consulta del doctor antes de comprar Viagra sin receta!
minipress blum te koop
She also speculated that Russian athletes may not have received adequate warnings that the drug was banned – due to the suspension of the Russian Anti-Doping Agency in late 2015. We want to do our bit for the community by making drugs easily available at affordable prices! Noi collaboriamo con il distributore ufficiale del generic Cialis Soft acquistandolo con un rincaro all’ingrosso minimo! It was then filtered through celite, washed with 5 mL of methanol! In normali condizioni basali nei vasi sanguigni l’ossido nitrico è prodotto continuamente da cNOS! • damage to the liver, minipress website which gets better when Valtrex treatment is stopped.
minipress price
The expression of beta-2 integrins on the surface of neutrophils is increased in response to IL-8 and to certain components of complement during CPB. If you suddenly stop taking amitriptyline, you may experience withdrawal symptoms such as nausea, headache, and lack of energy!

Minipress l5


Others were published but not cited in marketing literature. I comprare trial ed set extreme sicuro in italia sono vive e circa baciano eretto? Use of thiazides during pregnancy is associated with a risk of fetal or neonatal jaundice or thrombocytopenia? Prolonged obstruction with frequent vomiting may lead to weight loss, minipress ptsd dosage dehydration and an imbalance of electrolytes! And the doctors still deal out this 'wheat-intolerant' diagnosis? Seulement 10 minutes après la résorption du comprimé sous la langue, votre pénis en ressentira les effets? Tretinoin has an inflammatory action which is reported to be related to its therapeutic activity? There are various well-known medications, minipress for nightmares like Lexapro, used to treat depression? Severe untreated hypothyroidism, called myxedema, can lead to heart failure, seizures, and coma! In yet another embodiment, R 7 is a methylphenyl group! Claims submitted in both Settlements have been processed and the notification to those that submitted ineligible or incomplete claims is in progress? Me inclinaría mas por los proteoglicanos ,por ejemplo? Which antibiotics are appropriate for treating bacteriuria in pregnancy? The diagnosis of genital herpes can cause feelings of shame, fear, and distress! ED/OCR initiated compliance reviews of several postsecondary institutions in response to multiple acts of sexual violence? As the recitation of the facts set out in the beginning of this opinion shows, the circumstances surrounding this crime were horrendous. Solicitamos una secretaria bilingüe Ingles – Castellano para importante entre 20 y 45 añosHorario de trabajo de 9 a 18 personas interesadas deberán colocar en asunto de email REF: Secretaria Bilingüe?

Minipress depression


V roku 1998 bol liek Viagra (Sildenafil citrát) oficiálne uznaný ako účinný liek pri poruchách erekcie (erektilná dysfunkcia).
minipress drug classification
Portanto, os médicos devem discutir esse risco com esses pacientes e se eles podem ser adversamente afetados pelo uso de inibidores de PDE- 5? "Today, on three different prescriptions, I saved over $70!
minipress 1 mg cmi
La penso essersi equivalente flumicon in usa sotto non tragiche e di male infatti trasversale? The language "effective amount" of the compound is that amount necessary or sufficient to treat or prevent a tetracycline compound responsive state. Aufrechterhaltung einer Erektion - ein wichtiges Plus von Cialis rezeptfrei? Understanding Urinalysis, minipress xl 2.5 price Clues for the Obstetrician-Gynecologist!
minipress maximum dose
And if you faced with similar problem you should find a way out. However, deficiently antabuse canada the virus can reactivate at any time and be transmitted to others, even if there are no symptoms (such as sores)! Always start with low dose and move up from there plus make sure you use sunscreen? Ellie jolly ciprofloxacin buy online really likes conducting investigation and it’s really easy to see why! • Propranolol may lower the pressure within the eye (intraocular pressure)? Too much thyroid hormone can make you lose weight, speed up your heart rate and make you very sensitive to heat! The drug was come from by Eli Lilly, however in 1998, to establish the medicine as an early ejaculation treatment, PPD GenuPro acquired the civil liberties from Eli Lilly? Hence the use of SNRIs, new tetracyclics and so forth, which have different modes of action? 09-497 (US, June 21, 2010) (finding that where an arbitration agreement delegates the authority to decide its enforceability to an arbitrator, challenges to the delegation are for the courts to decide, but challenges to the validity of the entire arbitration agreement are for the arbitrator)? I know this is kinda off topic nevertheless I’d figured I’d ask? Macbeth, nomographically zovirax cream price on an elementary level, is a play about ambition, sorcery, treachery, murder, and revenge; it is a dark and somewhat ambiguous work, which is a seamless channel into the society and mood of England during its composition! Reitano M, minipress xl 2.5 price Tyring S, Lang W, Thoming C, Worm AM, Borelli S, Chambers LO, Robinson JM, Corey L. Many pharmacists also play a role in shelf lives? Yet many Lyme newsgroup participants write about a "herx" beginning days or weeks after the start of antibiotic therapy, and "herxing" for weeks at a time—often in a cyclic fashion" Herxing" events have even been likened to an "exorcism" that is "a necessary evil to be endured" Some of these patients are likely to be suffering from the side effects of their inappropriately prescribed antibiotics? Four players at a square table, create, per pair, a team that tries to win as many tricks as possible? (Moderate) Thiazide diuretics can decrease the hypoglycemic effects of antidiabetic agents by producing an increase in blood glucose levels! De contradictively cytotec usa ce fait, les médicaments qui peuvent entraîner une hypokaliémie sont impliqués dans un grand nombre d'interactions.
minipress withdrawal
14:7633-7642), nurofen price antiphonically the Drosophila engrailed protein (see Badiani, et al. Sometimes I use it every single night and when it gets flaky, I stop for a day and sometimes I put it on for a few hours and then take it off instead of leaving it on for the whole night. So, buy waklert inimically you can feel yourself very confident and up in arms at any moment. Your doctor will check you for signs and symptoms of sarcoidosis. Es gibt, minipress wiki migraine tabletten valporic acid, anschaut wir es dann mit einem sex zu nehmen haben!

See: PRP of Addleman , 151 Wn2d 769; 92 P3d 221 (Wash? Viagra helps to maintain the erection after ejaculation and reduces the refractory time before a second erection can be obtained. The affettuoso lidoderm patch cost pharmaceutical compositions of the invention may be administered alone or in combination with other known compositions for treating tetracycline responsive states in a subject, eg, a mammal! Take sildenafil at least 30 minutes, quadruply zovirax price but no more than 4 hours, before sexual activity (1 hour before is the most effective).

You don’t need to tell me

You don’t need to tell me

In May 2018 the European Union’s General Data Protection Regulations (GDPR) will come into force, replacing the existing Directive 95/46/EC, which will be repealed.  The new regulations are seen as an enabling requirement of the European Digital Single Market – removing the current fragmentation of how the existing directive is implemented by member states, and Continue reading You don’t need to tell me

I didn’t say you could touch me

I didn’t say you could touch me

The use of biometrics in user authentication is thriving with fingerprint sensors becoming more common and technology evolving for reliable facial and voice recognition being used within apps.  Next generation smartphones may also contain iris scanning capability thanks to micro form factor components that can be included in the existing footprint.   This convenience is driving Continue reading I didn’t say you could touch me

You don’t know what you’re doing

You don’t know what you’re doing

Once again Yahoo has reported a mammoth customer data breach, bringing the total of customers that they’ve put at risk of cybercrime to a mere 1 billion.  This news was quickly followed up by much smaller, yet similarly worrying, report of a “potential” data breaches from KFC UK and Domino’s Pizza.  KFC were keen to Continue reading You don’t know what you’re doing

Practical Change

Why is it that so many change and transformation projects fail? Organisations that start them often have plenty of people, funds, planning time and of course consultancy resource working on them and yet they still fail. Personally I have been involved in multiple change initiatives and have recently decided to review all the different aspects Continue reading Practical Change