Let's Talk About Digital Identity

Let's talk about digital identity with Simon Moffatt, CEO and Analyst at The Cyber Hut.

In episode 72, Simon Moffatt from The Cyber Hut discusses what is next for identity and access management – what his recent research has regarding passwordless authentication and next generation authorisation, alongside what trends are emerging in IAM and how he sees the IAM landscape evolving in the future.

" I think the technology is there today, I think there are numerous different solutions, whether it's based on sort of biometrics, or perhaps standards, like FIDO and WebAuthn that provide us with the tools and techniques to rid ourselves of passwords."

Simon is Founder and Analyst at The Cyber Hut - a leading boutique industry research, analysis and advisory firm focused on identity, access and cyber security technology. He has a 20+ year career within the identity and access management space having worked for consultancies, startups and global software vendors. He is a published author and contributor to identity standards at the likes of NIST and the IETF. He is also a Fellow of the Chartered Institute of Information Security.

His long running research is focused upon next generation authorisation and emerging authentication technologies as well as having an interest in the history of code breaking, signals intelligence and cyber warfare operations.

Find Simon on LinkedIn.

Find out more about The Cyber Hut.

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

Join Oscar and John Wunderlich in this week’s podcast episode 71, as they discuss mobile credentials – what are the challenges and solutions surrounding mobile credentials, what is IAMs role in this and how systems need to be developed around trust.

"So, you have different levels of assurance in the physical world, just as you do in the digital world. So, anybody can issue a credential, the question is what level of authority you give to the credential."

John Wunderlich is an information privacy & security expert with extensive experience in information privacy, identity management, and data security. He has designed, built, operated and assessed systems for operations and compliance in the private and public sectors for over 25 years. This includes working or consulting for Fortune 500 corporations, government ministries, small companies, volunteer organizations, regulators, and health systems organizations of all sizes.

Connect with John on LinkedIn and Twitter or email him at [email protected].

This is the Report on mobile Driving License Privacy:

https://kantarainitiative.org/download/pimdl-v1-final/

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

In episode 70, Nicky Hickman and Dr. Rachel O’Connell of TrustElevate discuss children’s digital identity – why this is so important, what challenges are currently being faced and what solutions need to be put into place to help protect children with the digital landscape.

"There is a clear and present need for regulatory drivers to enhance children's safety online to ensure the companies are held accountable and are transparent in terms of the measures that they take to keep kids safe online. And critical and central to that is digital identity."

Nicky Hickman is a freelance product & innovation manager based in the UK with international experience in APAC, Europe and Africa. With a background in telecoms she has worked with digital identity and personal data markets for ~20 years researching, designing and delivering multi-channel large scale CIAM services and strategies for clients including Vodafone, O2, GSMA, Barclays, Sky and Verizon. In the last 5 years she has been a contributor to open-source communities at the Sovrin Foundation, where she served as a Trustee and Chair of the Identity for All Council, and at Trust over IP Foundation where she is a co-chair of the Human Experience Working Group. Nicky is also an active researcher and is an industry contributor and guest lecturer at the University of Jyväskylä’s Blockchain & Digital Identity Start-Up Lab in Finland.

Find Nicky on LinkedIn.

Dr Rachel O’Connell is a leading expert on online child safety. Her PhD examined paedophile activity online and the implications for investigative strategies. Rachel set up the first UK Internet safety centre in 2000; she was Chief Security office for Bebo a social networking platform 2006-2010. Rachel is the founder of TrustElevate, author of a technical standard published by the British Standards Institution that describes how to verify the age band a person belongs in a privacy-preserving, secure manner.

Find Rachel on LinkedIn.

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

In episode 69, Oscar and Aaron discuss identity in the metaverse – including Aaron’s vision for how both people and organisations can prove their identity in the metaverse, and what virtual platforms can do to make their communities safer/more trustworthy.

“I’m deeply optimistic that we can create this metaverse environment, or the next generation of the internet or Web 3.0, with a greater sense of authenticity behind people to create safer and more trusted spaces.”

Aaron Painter is the CEO of Nametag Inc, the company who invented “Sign in with ID” as a more secure alternative to passwords. He is the former Vice President and General Manager of Microsoft China, Hong Kong, and Brazil as well as best-selling author of LOYAL, where he describes his key to leadership: fostering a culture of listening.

Find Aaron on LinkedIn.

Nametag is the fast, safe, everywhere ID with a mission to bring authenticity to the internet and enable people to build more trusted relationships. Through sophisticated, proprietary AI-technology, Nametag verifies people, not passwords, creating the next generation of digital security. The app uses multi-factor authentication, government ID verification, and biometric recognition to ensure only users have access to their own data. Nametag never stores, sells, or mines a user’s data. By putting privacy first, Nametag gives the consumer control over sharing your personal information, and the power to choose when it’s shared, where it’s shared, and for how long.

Find out more about Nametag at www.getnametag.com.

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

In episode 68, Bo discusses all things eIDAS 2.0 – what eIDAS 2.0 is and how it differs from eIDAS 1.0; the opportunities with Self-Sovereign Identity (SSI) and eReceipts; public and private sector involvement; what the world can learn from the Nordics for projects like eIDAS and GAIN; and how smaller players can influence the Commission’s decisions.

"Some people say that this is more important than the Internet, I agree… During 40 years of digital work, I've seen a lot of important things, but this is the biggest by far."

Bo Harald has been named as one of the most influential technologists of the 20th century by Institutional Investor, and has been awarded for advancing the Information Society by the Finnish Ministry of Transport and Communications. He currently works as an independent advisor at Findy.fi, a Senior Advisor at the Finnish Council of Regulatory Impact Analysis, a Founder and Steering Committee member at MyData.org, and with the publicly funded Real Time Economy programme. He also has an active role in the Finnish eIDAS 2.0 workgroups.

Connect with Bo on LinkedIn.

Find Bo's open letter to the EU Commission posted in Finextra -https://www.finextra.com/blogposting/22017/open-letter-to-the-eu-commission

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

Episode 67 explores inclusive identity. Making identity solutions inclusive for everyone wanting (or needing) to use them is a topic that's coming more and more to the forefront of the identity industry. From logging into apps, to accessing essential services; to how barriers to organisation identity is impacting individuals - in this episode, we speak to three guests from the identity industry on what they're doing to help solve these issues.

Schehrezade Davidson is the CEO of Tricerion Limited, a company that owns novel patented mutual authentication software using image passwords. Find Schehrezade on LinkedIn. Find out more about Tricerion at tricerion.com. Schehrezade has appeared on the podcast twice before, talking about: neurographic passwords (episode 26) and immunity passports (episode 41).

"If the onus is on the individual to authenticate themselves, those in the industry need to make it truly inclusive with alternative ways, depending on a customer’s needs."

Dr Sarah Walton is a digital consultant, author, coach and public speaker. She founded Counterpoint in 2003 to support organisations become digital, innovate and grow. Most recently she led the UK Open Finance programme and is Women in Identity’s ID Code of Conduct Programme Manager, as well as being commissioned by the Open Identity Exchange to author ID Inclusion reports. Find Sarah on Twitter @sarahlwalton and on LinkedIn. Find out more about Women in Identity at www.womeninidentity.org.

"This is very much something that is very commercially important but it’s also extremely important to people’s lives and livelihoods on an individual basis."

Amit Sharma has engaged in a myriad of roles that intersect financial markets, risk management, regulatory compliance, and international development. He is the Founder and CEO of FinClusive, a hybrid FinTech and RegTech company dedicated to financial inclusion. Connect with Amit on Twitter @ASharma_VT and on LinkedIn. Find out more about FinClusive at finclusive.com. Amit has featured on the podcast before, discussing the role of identity in financial inclusion (episode 51).

"From a macroeconomic perspective, it’s important to note that identity challenges are often seen as just at the individual level, but these at the institutional or entity level are equally important."

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

In episode 66, Keiron talks to Oscar about mobile/phone-centric identity, and what it offers to users and organisations that other types of identity/security measures can't. They also explore the key challenges when it comes to mobile identity and how to mitigate against those, particularly when it comes vulnerable people.

"Mobile is obviously the most relevant future-proofed method of verification."

Keiron Dalton is currently UK Country Manager and VP for International market development at Prove. Prior to Prove, Keiron has had roles within the GSMA’s mobile connect programme, BT’s mobile identity division and successfully helped to establish the UK mobile identity eco system as it stands today.

Connect with Keiron on LinkedIn.

Find out more about Prove at prove.com.

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

In this shorter bonus episode, Oscar discusses IAM Academy – Ubisecure's free training on Identity and Access Management (IAM) and our Identity Platform for our partners and customers. Listen to the episode to find out why we launched the courses, how they've evolved over the years, a clip from the training, and why it's so important to keep up to date on IAM.

We'll be back to the usual schedule next week! In the meantime, catch up on episodes with guests featured in this episode:

• Creating an open-source IAM wiki with Open-Measure Founder, David Doret – Podcast Episode 45

• Digital transformation and identity compliance in India with Vinay Sawarkar, Claidroid – Podcast Episode 47

• Identity management in Mergers & Acquisitions with Keith Uber, Ubisecure – Podcast Episode 53

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

In episode 64, Oscar and Jessica explore the ethical issues surrounding digital identity, and what's happening to ensure ethical use of identity in the UK and globally. Plus, how organisations can continue to protect themselves while staying on the right side of this ethical minefield.

"These issues are just too important to leave to business as usual. These issues are everyone's responsibility to fix."

Jessica is a strategist specialising in trust and security, governance, and the role of tech in civil society. She works with start-ups and scale-ups on commercial strategy, and advises UK Government on technology and policy issues relating to cyber crime and online harms. Previously Jessica led multi-million pound research and data programmes for companies including Dods, GlobalData and Ovum, and has advised senior executives in large established tech companies as well as many VC-backed scaleups.

She is currently Vice Chair of the UK Cyber Security Council, and was previously Chair of the Board at NCT, the UK's largest charity for parents. She is a sought-after speaker and commentator, and has published extensive research on the application of emerging technologies across government, telecoms and other regulated industries.

Find Jessica online at jessicafigueras.com, on Twitter @JessicaFigueras and on LinkedIn.

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!

In episode 63, Richard fills us in on the latest developments in the UK Government’s Identity strategy; how the public sector should be approaching IAM in 2022; how organisations can ensure IAM implementations are successful/top mistakes to avoid; and creating a successful identity user experience (UX).

"There is absolutely no reason in 2022 to be looking at on-prem environments for hosting IAM."

Richard Slater started writing code on a second hand ZX Spectrum before he was 10. Today, Richard works as Head of Managed Services at Amido, a London-based start-up working on identity and microservices projects for some of the largest companies in the UK. He lives and breathes DevOps which means he is a vocal proponent of best practices for their software development teams, focusing on continuous-deployment, systems thinking, reducing feedback cycles, configuration-management, infrastructure-as-a-code and cybersecurity.

Find Richard on Twitter @richardslater and LinkedIn.

We’ll be continuing this conversation on Twitter using #LTADI – join us @ubisecure!