Our Digital Identities

Industry Professional

Our Digital Identities

Blockchain may be the right answer for security

Blockchain, the backbone technology behind Bitcoin, has grown exponentially since its inception in 2008. Since 2013, Google searches of “blockchain” have risen by 1,900 percent and according to Accenture, 90 percent of banks worldwide are now exploring blockchain technology. Among them is India’s Yes Bank, who recently announced a number of blockchain implementations that support vendor financing for their clients.

The potential for blockchain technology in India is vast. Speaking at the BlockZero conference in Mumbai last December, Neha Punater, head of digital strategy, innovation and fintech at KPMG India, highlighted the technologies’ potential to “crash cycle time” and reduce costs across the board. With many now arguing blockchain technology may provide better security, transparency and efficiency, it’s easy to see why blockchain technology is being used in an increasing number of industries beyond financial services, including telecommunications, media and the public sector. In fact, it’s not only India’s businesses that are set to benefit, but millions of people too, thanks to the unique set of attributes that make it a useful tool to help secure our digital identities.

The process of identifying a person has been hugely disrupted by the digital world. Historically, identity has been fairly straightforward. For example, a government institution could verify the name and address of a citizen by conducting identity checks with banks or telecommunication providers. As these organizations are regulated to “know their customers,” they are able to corroborate the information held by the government institution and therefore verify the identity. Digital identities need to function in a similar way, but it’s much harder.

Without tangible, in-person interactions, it can be difficult to establish trust and ownership in a digital world. This is where the blockchain comes into play. Blockchain technology allows people, independent of each other, to rely on the same shared, secure and auditable source of information for managing identity. When used in conjunction with a mobile authentication service, blockchain could be the key to securing our digital identities.

Blockchain Basics

When a user’s information is added to the blockchain, it is inserted as a single block containing the user’s identity attributes and the user’s public key, all signed with the user’s private key. At this stage, the level of confidence in the user’s identity is at base level. Other entities, such as a bank or electricity provider also represented within the blockchain can establish relationships with the user by signing the particular attributes of the user that are relevant to that relationship.

As more relationships are established for each person within the blockchain, confidence in the accuracy of the attributes, hence the identity of one’s self grows. As more transactions take place involving that individual, the “reputation capital” of the identity also grows. In other words, confidence in the identity’s accuracy increases as does confidence in the trustworthiness of the person behind it. And, if any of the relationships change, this will be recorded in a separate block with a cryptographically signed timestamp that is visible to the entire blockchain.

The Combined Power of Blockchain and Mobile Authentication

One critical aspect of any modern, digital service is finding the right balance between convenience and security. Security in the blockchain is upheld with public and private keys. The public key is used to identify the user and the corresponding private key is the credential that the user needs to keep protected. The public key is almost equivalent to a user ID, and the private key equivalent to a password or biometric.

However, a public key is not a convenient “user ID” and the private key is not something that can be easily remembered, such as a password, or unique to that person, such as a biometric. Securely storing the private key to ensure that it can’t be used by others, while being able to easily use it to verify the associated identity, is a real challenge.

One solution is to introduce the concept of a wallet through which each person can confirm their attributes and manage their public and private keys. This wallet could be identified through a more convenient user ID, such as the user’s mobile phone number and be unlocked using conventional multi-factor authentication. The individual can then prove that they own their private key and verify their identity.

Mobile authentication services are an ideal framework for supporting such wallets. Put simply, mobile authentication ensures the person accessing an account is really who they say they are and by adding two factor authentication the user is asked to verify their identity via their mobile phone via a pop-up challenge to enter their PIN or biometric password. This happens whenever the user logs into their accounts, providing a very simple, convenient, and secure way of authenticating themselves and asserting their identity. The combination of a platform for administering the wallets and blockchain for administering the identity is a perfect solution to providing digital identity and in a way that is “conveniently secure.”

This article originally appeared in the March 2018 issue of Security Today.

Featured

  • Allegion, Comfort Technologies Implement Mobile Credentials at the Artisan Apartment Homes in Florida

    Artisan Apartment Homes, a luxury apartment complex in Dunedin, Florida, recently transitioned from mechanical keys to electronic locks and centralized system software with support from Allegion US, a leading provider of security solutions, technology and services, and Florida-based Comfort Technologies, which specializes in deploying multifamily access control, IoT devices and software management solutions. Read Now

  • Mall of America Deploys AI-Powered Analytics to Enhance Parking Intelligence

    Mall of America®, the largest shopping and entertainment complex in North America, announced an expansion of its ongoing partnership with Axis Communications to deploy cutting-edge car-counting video analytics across more than a dozen locations. With this expansion, Mall of America (MOA) has boosted operational efficiency, improved safety and security, and enabled more informed decision-making around employee scheduling and streamlining transportation for large events. Read Now

  • Security Industry Association Launches New “askSIA” AI Tool

    The Security Industry Association (SIA) has unveiled a brand-new SIA member benefit – askSIA, a conversational AI agent designed to help users get the most out of their SIA membership, easily access SIA resources and find the latest information on SIA’s training and courses, reports and publications, events, certification offerings and more. SIA members can easily find askSIA by visiting the SIA homepage or looking for the askSIA icon in the top left of webpages. Read Now

    • Industry Events
  • Industry Embraces Mobile Access, Biometrics and AI

    A combination of evolving workplace dynamics, technology innovation and new user expectations is changing how people enter and interact with physical spaces. Access control is at the heart of these changes. Combined with biometrics and AI, mobile access control has become increasingly crucial for deploying entry solutions that are seamless, secure and adaptive to user needs. Read Now

  • Sustainable Video Solution Delivered for Landmark City of London Office Development

    An advanced, end-to-end video solution from IDIS, with a focus on reducing waste and costs, has helped a major office development in the City of London align its security with sustainability objectives. Read Now

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.