身份的未来身份的未来

THEFUTUREOFIDENTITY23456889deepdiveintothefutureofidentityitwouldbeprudenttounderstandwhatconstitutesanindividual’sidentity.Themostvisibleaspectofaperson’sidentityishis/herphotographorfacialrecognition.Afterall‘puttingafacetoaname’doeshelpputthingsinperspectiveformost,oftensettingtherighttoneandexpectationsofyourinteractionsvidualHoweveridentityismadeupofmanyotheraspectsapartfromaphotograph.Itincludes:•Fingerprints•Irisrecognition•Earprintsender•Teeth•VoiceAndthesearejustthephysicalformfactors.Ifyouaddcontext,location,styleofdress,signature,identitybecomesacomplexsumofattributesofthemostfundamentalbuildingblocksforanylevelofcommunication,collaborationorcommercewithinandacrossanorganisationbutthatitalsobringswithitafairshareoffundamentalchallengesincludingprotectingindividuals’privacyandthetheftofidentitydata.Overthelastfewyearsmanyorganisationshaveseenfirsthandhowthesetwochallengescansteamrollthem,resultinginidentitydatabecomingmoreofaliabilitythananasset.THEFUTUREOFIDENTITY3identitytheftOutofallthekindsofbreachesthatoccur–identityinformationloss,financialaccountloss,accountaccesslossandexistentialdataloss-identityinformationlosstopsthelist.IdentityinformationlossFinancialaccountlossAccountaccesslossExistentialdataloss21520132014201520162017Identityinformationincludesbutisnotlimitedtonames,datesofbirth,addressesandaccountpasswordsofconsumers.Inthelastfiveyearsbigheftylossesasaresultofidentitytheft.Accordingtoconsumercreditreportingcompany,Experian,identitydatarangingfromsubscriptionservices,creditcarddataandpassportscanchanywherebetweenatowhenresoldormisappropriatedclearlyexplainingtheincreasingtrendofidentitytheft–astaggering10billionidentitiessince2013.Thehealthcareindustrythatbyfarhasthemostnumberofbreachescomparedtoanyotherindustryalsohasanalarmingstorytotell.PrescriptionfraudinEnglandwhenpeoplewhoarenotentitledtofreeprescriptionsassumefakeidentitiesandabusethehealthcaresystem–ServicesNHSmayearTHEFUTUREOFIDENTITY4aWhenitcomestomanagingidentitydata,organisationsneedtodetermineandenforceappropriateaccesstoenterprisesystemsandapplicationsandthiscomprisestwoprimarycomponents:authenticationandauthorisation.WhileauthenticationlooksatidentifyingwhoyouareviaahostofenablersNSdigitalcertificatesonetimepasswordtokensetc,authorisationlooksatprovidingaccesstoyoubasisyourentitlementand/oraffiliationoncetheidentityhasbeendetermined.aoftheseenablerstheyareimperativeintoday’sworldbecauseself-assertionofidentitysimplywon’tsuffice,butatthesametimemostoftheseenablerscaneasilybecompromised.fingthepracticeoflookingovertheshoulderofauseratanATMorasecuredaccessfacilityinordertoobtaintheirpersonalidentifica-tionnumber,password,etcisquitecommon.Similarlytrojansoftwarethatpromptsuserstodownloadfakeapplicationscancreatehavocbyrele-gatingcontrolofyourdevicetothehackerwhothenproceedstointerceptgescontainingOTPsetcTHEFUTUREOFIDENTITY5DInaworldthatisrapidlychangingthankstothesweepingwavesofadigitaltransformation,asingleIDsolutionisjustnotrobustenoughtohandletherigoursofafoolproofidentityandaccessmanagement(IAM)system.Combiningsecuritylayersorcomponentstocreatea‘trueidentity’isthewayforward.Someoftheoptionsthathavegainedpopularityincludetheusageofbiometrics–fingerprintsandretinascans,usingamobilephoneorntificationandevensmallRFIDimplantsundertheskinthatgrantimmediateaccesstofacilities.Ifthelatteroptionseemsoutofasciencefictionthriller,thiscouldn’tbefartherthetruthThousandsofpeopleinSwedenhavemorethanjustdabbledwiththisideaandinjectedmicrochipsintheirhandsasfarbackicrochipreplacesmembershipcardstogymsprovidesahasslefreeoptionofButperhapsoneofthemostpopularandconvenientmeansofidentificationisfingerprintbiometricauthentication.Itisusedwidelyacrossorganisationsasameansforemployeestologinandlogoutfortheday,gainaccesstocertainfacilitiesetc.FingerprintsareasurefirethodofauthenticatinganindividualsidentifybecauseunlikePINSandstolenlostorforgottenInanemergencysituationsuchasinahealthcaresetup,fingerprintbiometricauthenticationcanbethedifferencebetweenlifeanddeath.WhentheprintsarestoredonasmartIDcard,itcanlimittreatmentareasinthehospitalstoonlylegitimatestaff,therebyprotectingpatients.Patientbiometriccardsthatarelinkedtocrucialmedicalrecordssuchasbloodtype,drugsensitivitiesesespeciallywhenpatientsarriveunconsciousandaccurateauthenticationiscrucial./news/world/europe/article/2145896/thousands-people-sweden-get-microchip-implants-new-way-lifeTHEFUTUREOFIDENTITY6GovernmentsworldoverarethecustodiansoftheircitizensdataandtheyareinfacttheabreachesWhileIndiasuniqueidentitycarddatabaseaadharhasreceiveditsfairshareofcriticismfornotbeingsecureenough,theUKtrustedloginacrossallUKgovernmentdigitalservicesisfacinganumberofteethingissues.AreportfromtheNationalAuditOfficeclaimsthattheUKgovernment’sflagshipidentificationschemehasfallenwayshortofitstargetofregistering25millionusersby2020andhasonlyotchupmillionuserssofarAtechnologythatisrapidlygaininggroundasapotentialoptiontosafeguardpersonaldatarecordsisblockchain.OftenmisunderstoodandrelatedsimplytowhatithasachievedinthespaceofBitcoinandothercryptocurrencies,blockchainisanextgenerationdatabasethatdecentralisesinformationratherthanmaintainingitinonecentrallocation.Thisfeatureofblockchainiswhatmakesitsoattractivetocollect,moveandsecuredata.Acommonanalogyistocomparetheeaseofrobbingahouseversusrobbinganentirecity.Blockchainwillallowinformationtobestoredacrosstheentirecitywithcontrolfirmlyinthehandsoftheindividualwhohasthecryptographicprivatekeysneededtoaccessthedispersedinformation.Ofcourseitisstillearlydaysforutilisingblockchainasanefficientmeansofmanagingdsbuttheideaofencryptingdataholdsimmensevalueandcanbeimplementedswiftly.Unfortunatelyenough,companiestillnowhavebeenfoundwantinginthisarea.DigitalsecuritycompanyGemaltosaysthatofthewhopping9.2billionstolenagremwereconcealedfrompotentialhackersthroughtheuseofdata-encodingtechnology./news/technology-47444308Verify:InquirycriticisesgovernmentIDschemeTHEFUTUREOFIDENTITY7outintherecentpastistheEUsGeneralDataceconsumersprivacyprotectionholdingthecompanieswhostorethepersonaldatarecordsaccountableandpunishablebylawforfraudscommittedifany.AccordingtoaawfirmPaulHastingsLLPthecostsforaFortunecompanytocomplywiththestrictguidelinesofGDPRcouldruninto$1millionjustfortechnologyalone.Ofcoursethecostsofnon-esofmorofafirmsglobalannualsalesfigurewhicheverisgreater.alscapealsorecentlyconductedTheTrueCostofCompliancewithDataProtectionRegulationstodeterminethefulleconomicimpactofcomplianceactivitiesforarepresentativesampleof53multinationalorganisations.ThestudyshowedthatwhiletheaveragecostofcompliancefororganisationswascurrentlyUS$5.47milliondollars,a43percentincreasefrom2011whenthestudywasfirstdone,thecostofnon-compliancewasUS$millions$16.00$14.82$14.00$12.00$9.37$1$9.37$8.00$5.47$6.0$5.47$3.53$4.0$3.53$2.00$0.00Non-complianceNon-complianceCostFY2017sFY2011THEFUTUREOFIDENTITY8Whicheverwayyoulookatit,companiescanillaffordtodonothingwhenitcomestosecuringidentitydata.Infactit