Please Copy and Distribute 1 Privacy and Inclusion: Can you have both in digital identity? 18 April 2016

Please Copy and Distribute Who cares about privacy? “If You Have Something You Don't Want Anyone To Know, Maybe You Shouldn't Be Doing It”, Eric Schmidt (2010) Google makes secure boot, full-disk encryption mandatory for some Android 6.0 devices (2015) “Privacy is a fundamental human right”, Tim Cook (2015) 2

Please Copy and Distribute Why is privacy important to digital identity? 3 Consult Hyperion, 2013 IoT

Please Copy and Distribute The project Digital identity is a key enabler for inclusive services in emerging markets Can we get privacy by design? Existing foundational digital identity systems tend to be expensive state led eID smart cards What other digital identity models are there and how well do they address both privacy and inclusion? 4

Please Copy and Distribute How to assess? Need to think about: Regulatory Technical Commercial 5 What is digital identity: Identification Authentication Authorisation Centralised Decentralised Key issues: Surveillance Data breach Identity theft Inappropriate use of data

Please Copy and Distribute Federated RegulatoryTechnicalCommercial UnregulatedFB FederationConflicts privacy RegulatedOpen FederationCould allow privacy 6 Identification Establish identity Authentication Assert identity Authorisation Use identity Identity Provider Service Provider Collect Data Share Data Key issues: Surveillance Data breach? Identity theft Inappropriate use of data

Please Copy and Distribute Brokered Identity RegulatoryTechnicalCommercial GPGsHubGovernment Pays 7 Identification Establish identity Authentication Assert identity Authorisation Use identity Identity Provider Service Provider Collect Data HUB Share Data Key issues: Surveillance? Data breach? Inclusive?

Please Copy and Distribute Brokered Authentication RegulatoryTechnicalCommercial GoCAuthentication HubGovernment Pays 8 Identification Establish identity Authentication Assert identity Authorisation Use identity Credential Provider Service Provider Collect Data HUB No Data Key issues: Not really an identity system...but authentication could be a foundation to grow identity?

Please Copy and Distribute Personal IDP RegulatoryTechnicalCommercial Market definedUser is control pointMarket defined 9 Identification Establish identity Authentication Assert identity Authorisation Use identity Attribute Provider Service Provider Collect Data Share Data User Agent Key issues: Critical mass Greater reliance on individual

Please Copy and Distribute In summary 10 Inclusion Privacy Centralised Decentralised Direction of the market

Please Copy and Distribute Contact 11 Browse Mail Comment Listen Consult Hyperion UK Tweed House, 12 The Mount Guildford, Surrey GU24HN, UK Consult Hyperion USA 535 Madison Avenue, 19 th Floor New York, NY 10022, USA