A true portable and reusable Digital Identity does not exist today. A federated identity is mostly used in low risk use cases and has yet to attain the adoption of a real passport or ID. In addition, federated identities are offered at the expense of privacy. Enterprise federation is mostly limited between businesses. A true digital identity is one that can find adoption and usage across consumer, business and enterprise use cases without sacrificing user privacy, scalability of infrastructure or the increase of liability due to a centralized user profile repository. We have the technology and building blocks today to build such a digital identity, and its availability would unleash a wide array of use cases.

1. The Super Broken Story of the
True Digital Identity
Manah Khalil
IT Director – Application Security
/SecurelyYours

2. Who I Am
IT Director – Application Security
• Responsible for IAM for the Digital Channel
• Digital Identity enthusiast
• New dad for the 3rd time 
• IT department for my family and our farm of
devices
• Maintaining a list of a 100+ passwords
• 3 iPhones, 3 iPads, 3 laptops, 1 Surface, 4 Xboxes, 2 desktops,
2 smart TVs, a garage door opener and a Ring® doorbell, ….
2
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

3. For a Digital Identity to Be a True Identity…
It needs to be
issued to an
individual by a
trusted entity
1
It needs to stay
with that
individual for life
2
It should not rely
for its lifetime on
a specific
identity provider
3
It needs to be
Universal, just
like a real ID card
4
3
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

4. It needs to be
Universal, just
like a real ID card
4
4
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

5. TRUST
a hit or miss
Let’s boogie!!!
5
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

6. CONSENT
hidden or absent
Consent can be:
• Completely absent
• Buried in fine prints
• Not possible to obtain
• Provided by the wrong party
I sure hope
you’re not
allergic.
6
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

7. PRIVACY
3rd Parties Involved
Bear with me. I’ll
need to make a
call to validate
your ID.
7
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

8. Digital ID Fails the Everyday Use Cases
TRUST PRIVACY CONSENT
8
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

9. So, What’s Broken?
• Technology &
Protocols?
• Standards &
Guidelines?
• Technology & Protocols
• OAuth 2.0
• SAML
• OpenID Connect
• Continuous Authentication
• Token Binding
• FIDO Alliance
• Standards & Regulations
• NIST SP 800-63
• eIDAS
• GDPR, CCPA
9
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

10. Federation!
10
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

11. RP as the IdP &
Authenticator
A hassle for Users & RPs
User
• Manage hundreds of passwords
Relying Party
• Deal with breaches
• Call volume associated with logins
• Cost of doing business to manage
profiles
11
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

12. In 3rd Party We Trust!
User:
• Privacy, consent, and trust
• Security concerns
• Portability of ID (e.g., Facebook)
Relying Party:
• Reliability & SLA
• Liability: implications of a breach
Identity Provider:
• Scalability: growing at the speed of Business
• Liability: biting more than can chew
3rd Party as IdP &
Authenticator
12
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

13. Authorization /
Session
Management
AuthenticationIdentification
Breaking Down the Functions
Claiming an identity based on a unique identifier
issued by an IdP
Validating you are who you claim to be, with
proofing attributes through the IdP
Establish a session with the RP and
provide access to resources
IAM
13
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.
Animated slide
Play in presentation mode

14. WHAT IF WE
CAN…
• Change Identification to:
• Be a one-time operation
• Perform identity proofing (at some
IAL Level)
• Issue a Digital Identity with built-in
assurances
• Store the Digital Identity in a secure
Digital Wallet
• Change Authentication to:
• Be done by Relying Party based on
said assurances
14
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

15. Identity that Carries its Own
Assurances
Identity Provider
• Provides One-Time Identity Proofing
• Issues Identity with signed attributes
User
• Secures in it the Digital Identity
• Maintains the ‘Digital Wallet’
(Mobile Device)
• Manages/maintains identity
attributes
Relying Party
• Authenticates identity by on its own
assurances and the trust in the issuer
Redefining the Roles
15
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

16. Checklist
• Privacy
• Scalability
• Liability
• Reliability & SLA
• PortabilityID Issuer
ID Owner
Authenticator
& ID Consumer





16
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.
Animated slide
Play in presentation mode

17. Blueprint to Solution: Putting it All Together
• Telecoms
• Financial Services
• Credit Bureaus
Authentication
& Session Mgmt
Identity Issuers
Wallet/Mobile Device
How it can be Achieved:
• Custom but simple authentication
protocol/flow
• Check Certificates and CRLs
17
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

18. Blueprint to Solution: Putting it All Together
• Telecoms
• Financial Services
• Credit Bureaus
Ethereum
Hyperledger
Corda
Quorum
OpenChain
Stellar
Authentication
Identity RepositoryIdentity Issuers
Wallet/Mobile Device
Session Mgmt
18
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

19. Universal Means
Universal
• Issued identities extend everywhere
and to everyone
• Not limited to direct customer base
(secondaries and devices)
• Uses the blockchain to allow primary
users to endorse identities of other
entities
• Household members
• IoTs
• …
19
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

20. Extending Identity to Digital
Entities
Entities with Identities
• People: adults and children
• Devices, IoT
• Applications
• Processing Units
• Bots, RPA
20
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

21. Endorsed Identities and IoT
21
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

22. We Have the
Building
Blocks
22
Identity Providers
A network of trusted issuers of
identities
Leverage a spectrum of identity
proofing attributes
Build enough assurances (as-
needed) in the Digital ID
Authentication Services
Handled by Relying Parties
Leverages trust the in the
Identity Issuers and the
assurances in the digital ID
Point-to-Point authentication
Session Management &
Authorization Services
Handled by Relying Parties
Identity Repository
A permissioned blockchain as a
repository for the network of
trusted identity providers
Manages identity aliases,
revocation list and secondary IDs
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

23. Digital Identity is One that is…
UNIVERSAL
• Issued to you
• Stays with you
• Grows with you
• Moves with you
23
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.

24. Thank You
24
Continue the discussion:
/SecurelyYours
© Verizon 2018, All Rights Reserved. Information contained herein is provided AS IS and subject to change without notice. All trademarks used herein are property of their respective owners.