Our Digital Identities

Industry Professional

Our Digital Identities

Blockchain may be the right answer for security

Blockchain, the backbone technology behind Bitcoin, has grown exponentially since its inception in 2008. Since 2013, Google searches of “blockchain” have risen by 1,900 percent and according to Accenture, 90 percent of banks worldwide are now exploring blockchain technology. Among them is India’s Yes Bank, who recently announced a number of blockchain implementations that support vendor financing for their clients.

The potential for blockchain technology in India is vast. Speaking at the BlockZero conference in Mumbai last December, Neha Punater, head of digital strategy, innovation and fintech at KPMG India, highlighted the technologies’ potential to “crash cycle time” and reduce costs across the board. With many now arguing blockchain technology may provide better security, transparency and efficiency, it’s easy to see why blockchain technology is being used in an increasing number of industries beyond financial services, including telecommunications, media and the public sector. In fact, it’s not only India’s businesses that are set to benefit, but millions of people too, thanks to the unique set of attributes that make it a useful tool to help secure our digital identities.

The process of identifying a person has been hugely disrupted by the digital world. Historically, identity has been fairly straightforward. For example, a government institution could verify the name and address of a citizen by conducting identity checks with banks or telecommunication providers. As these organizations are regulated to “know their customers,” they are able to corroborate the information held by the government institution and therefore verify the identity. Digital identities need to function in a similar way, but it’s much harder.

Without tangible, in-person interactions, it can be difficult to establish trust and ownership in a digital world. This is where the blockchain comes into play. Blockchain technology allows people, independent of each other, to rely on the same shared, secure and auditable source of information for managing identity. When used in conjunction with a mobile authentication service, blockchain could be the key to securing our digital identities.

Blockchain Basics

When a user’s information is added to the blockchain, it is inserted as a single block containing the user’s identity attributes and the user’s public key, all signed with the user’s private key. At this stage, the level of confidence in the user’s identity is at base level. Other entities, such as a bank or electricity provider also represented within the blockchain can establish relationships with the user by signing the particular attributes of the user that are relevant to that relationship.

As more relationships are established for each person within the blockchain, confidence in the accuracy of the attributes, hence the identity of one’s self grows. As more transactions take place involving that individual, the “reputation capital” of the identity also grows. In other words, confidence in the identity’s accuracy increases as does confidence in the trustworthiness of the person behind it. And, if any of the relationships change, this will be recorded in a separate block with a cryptographically signed timestamp that is visible to the entire blockchain.

The Combined Power of Blockchain and Mobile Authentication

One critical aspect of any modern, digital service is finding the right balance between convenience and security. Security in the blockchain is upheld with public and private keys. The public key is used to identify the user and the corresponding private key is the credential that the user needs to keep protected. The public key is almost equivalent to a user ID, and the private key equivalent to a password or biometric.

However, a public key is not a convenient “user ID” and the private key is not something that can be easily remembered, such as a password, or unique to that person, such as a biometric. Securely storing the private key to ensure that it can’t be used by others, while being able to easily use it to verify the associated identity, is a real challenge.

One solution is to introduce the concept of a wallet through which each person can confirm their attributes and manage their public and private keys. This wallet could be identified through a more convenient user ID, such as the user’s mobile phone number and be unlocked using conventional multi-factor authentication. The individual can then prove that they own their private key and verify their identity.

Mobile authentication services are an ideal framework for supporting such wallets. Put simply, mobile authentication ensures the person accessing an account is really who they say they are and by adding two factor authentication the user is asked to verify their identity via their mobile phone via a pop-up challenge to enter their PIN or biometric password. This happens whenever the user logs into their accounts, providing a very simple, convenient, and secure way of authenticating themselves and asserting their identity. The combination of a platform for administering the wallets and blockchain for administering the identity is a perfect solution to providing digital identity and in a way that is “conveniently secure.”

This article originally appeared in the March 2018 issue of Security Today.

Featured

  • Maximizing Your Security Budget This Year

    7 Ways You Can Secure a High-Traffic Commercial Security Gate  

    Your commercial security gate is one of your most powerful tools to keep thieves off your property. Without a security gate, your commercial perimeter security plan is all for nothing. Read Now

  • Making Safety and Security Intrinsic to School Design

    Public anxieties about school safety are escalating across the country. According to a 2023 Gallup report, 44% of parents fear for their child’s physical safety at school, a 10 percentage-point increase since 2019. Unfortunately, these fears are likely to increase if the incidence of school tragedies continues to mount. As a result, school leaders are now charged with two non-negotiable responsibilities. The first, as always, is to ensure kids have what they need to learn, grow, and thrive. Sadly, their second responsibility is to keep the children in their care safe from threats and physical danger. Read Now

  • The Power of a Layered Approach to Safety

    In a perfect world, every school would have an unlimited budget to help secure their schools. In reality, schools must prioritize what budget they have while navigating the complexities surrounding school security and lockdown. Read Now

  • How a Security System Can Enhance Arena Safety and the Fan Experience

    Ensuring guests have both a memorable experience and a safe one is no small feat for your physical security team. Stadiums, ballparks, arenas, and other large event venues are increasingly leveraging new technologies to transform the fan experience and maintain a high level of security. The goal is to preserve the integrity and excitement of the event while enhancing security and remaining “behind the scenes.” Read Now

Featured Cybersecurity

Webinars

New Products

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame. 3

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge. 3