How Decentralised Digital Identity (DDID) will change our lives

It all began with the conventional siloed shared-secret model. That’s where we use our username/email and passwords to prove our identity. Service providers use a combination of online and offline processes to onboard users, then authenticate their identity for future interactions via secret information such as passwords, confirmation emails etc. In this centralised model, user information is fragmented across a pool of service providers.

The centralised model, however, is repetitive for users and poses security threats. If you want to buy something small and trivial online, it will ask you to create an account, set up a username and password, add your payment details, and perhaps verify your email etc. This means your information is likely stored in a database. The problem here is that, regardless of the strength of your username and password combination, it remains your weakest link.

A single breach of the database comprises your payment details, address, and other valuable information. In fact, it’s common for regular internet users who don’t often change passwords to have dozens of compromised accounts at any one time. The greater the number of accounts you hold, the greater the chances of compromise. Therefore, security is a legitimate risk.

What’s more, from a user perspective, it can be a real pain to keep track of countless login details for dozens of different websites. Every time you login you need to type in your details — if you can remember them. You might find yourself forever changing lost passwords. The future of digital identity, however, looks different.

This paved the way for the federated model, which allows you to sign in with some other trusted source — provided you are present on their database. If you have ever come across ‘login with Google’ or ‘login with Facebook’ you have encountered a federated identity solution before — and probably enjoyed its convenience. However, the problem becomes that we place too much trust in a single identity provider. For example, if we use ‘login with Facebook’ everywhere, a simple change in Facebook's terms and conditions could lock you out of your linked accounts.

That’s where decentralised digital identity (DDID) comes into play. With a DDID, we don’t rely on any single identity provider, we don’t have to maintain multiple login credentials, and we don’t have to type in username and password combinations everytime we login.

With DDID, the end user takes the power back as they have sole ownership of their data. Data that is no longer stored in a third-party service provider’s database. Never again do users have to worry about their passwords, hacks, or annoying advertising emails when their data gets sold in a greasy backhander.

DDID infrastructure lets you use, issue, store, and verify credentials without the physical meeting between two entities. You simply share your digital credentials with trusted parties to prove your identity, giving you freedom and security.

If you’re familiar with blockchain, as soon as you read the word ‘decentralised’, you knew what was coming. Blockchain facilitates the decentralisatist’s dream. In doing so, it helps us eradicate the following problems in the current system:

Inaccessibility
Approximately 1.1 billion people worldwide have no proof of indentity¹. 45% of those are among the poorest 20% in the world. Cumbersome identification paperwork processes, expenses, lack of access, and the simple lack of awareness keep people locked out of traditional identification systems. Nonetheless, 60% of the 2.7 billion unbanked already own mobile phones, which paves the way for blockchain-based mobile identity solutions which better suit the needs of vulnerable citizens².

Data Insecurity
At present, the government stores our most valuable information in centralised databases which have more single points of failure than an un-armoured tank. As these databases hold valuable personal information of millions of users, they may as well have bright shiny targets and welcome signs for hackers. As a matter of fact, a recent study has shown that personally identifiable information is the most targeted data for breaches comprising about 97% of the total in 2018³. Our personal data is not secure.

Fraudulent Identities
Due to the weak link between online and offline identities, it is easy to fake our identity online over different websites. Have you ever entered a false email, or even made a second email for online sign ups with a different name? It’s most common among trolls who juggle fake identities and peddle fake news and fraud. With a false identity and no way to prove who they are, we rarely get hold of the actual culprit. With a blockchain-based system of identity management we can reduce such activities where the user has to authenticate himself with his true identity online.