Digital Identity – What‘s Your Trust Score?

Digital Identity – What ‘s Your Trust Score?

“Trust Scores” or reputational scores are aspects of having a digital identity that haven’t been discussed much. By default, everyone who accepts a digital identity, whether decentralised or not, will receive a Trust Score.

With the introduction of trusted digital identities, social credit systems are reaching the west.

The tagline of many digital identity advertisements is “At the heart of all digital identity is trust.” But what does that even mean?

One current definition of trust is that it is “a confident relationship with the unknown.”

According to Mastercard: “Digital identity is a collage of up-to-date digital data that defines an individual, dynamic, multipurpose, and reusable, a system for verifying information to establish eligibility to access a service, perform a task, or receive a benefit, resulting from a dynamic network of distributed, data sources (such as financial institutions, mobile network providers, governments) that verifies identity in real time.”

Digital identity solutions are being rolled out under the title “Trusted Digital Identity”, which enables people, businesses, and governments to have confidence in digital interactions.

At both ends of the interaction, digital identity is about establishing confidence and trust. Both parties must be confident that the other party is who they claim to be. Both require trust in the system that mediates the interaction.

YouTube player

 

What is a Trust Score?

When a new customer registers for a digital identity (officially called onboarding) such as the one above with mobile identity provider Prove, they enter their mobile number.

Using mobile networks, Prove’s mobile authentication checks if the activity is coming from the expected device using the mobile number.

By checking the following: Mobile Network, Device Status, Prepaid Sim, Sim Velocity, Device and Sim Tenure and finally Port Date, Prove’s Trust Score determines the dynamic contextual and behavioural risk level of the mobile number.

Trust Scores range from 0-1000, with a higher number indicating a higher Trust Score. Scores over 630 are considered ‘high’, and scores below 300 are considered ‘low’.

A Trust Score risk model examines phone intelligence signals such as phone tenure (SIM tenure, device tenure), line attributes (active number, number porting, mobile status, available network status, and line type), account activity (change event occurrence velocity), and device activity (device ownership tenure) to determine risk level.

A new customer’s identity is also verified by verifying their mobile number with parameters such as their name, address, date of birth, and email address.

At the end, the process compares against data sources such as phone intelligence signals and Consumer Reporting Agencies like Credit Reporting Agencies, Banks, Utilities, Telcos, and Mobile Network Operators.

In summary, there are three steps: Mobile Auth, Trust Score, and Identity Verification.

Identity validation has traditionally been a yes or no decision, whereas new digital identity systems use Trust Scores, which act as identity quotients.

Judy is the example given in this next video.

YouTube player

 

When Judy needs to fly across the globe during her trip, she most likely shares her identity with several organizations. Leaving her vulnerable to identity theft.

Furthermore, not all organizations have systems to validate the authenticity of the documents provided, so Earth ID allows her to share specific information securely.

The level of her Trust Score allows organisations to make better decisions whether at the airport check-in, security, car rental, or even at the hotel.

The score goes up if other people have had a positive experience with a given user. The opposite is true if prior partners have not enjoyed their interactions.

Fujitsu is also developing a blockchain-based Decentralized Identity (DID) platform to boost trust in digital transactions.

Fujitsu say they will convert those Trust scores into a simple graph, making it easy for people to assess the trustworthiness of another party before performing an exchange.

In the Introducing the IBM Trustee Digital Identity Trust Score Webinar the components of the trust scores are displayed: Which includes:

  • Device & User Similarity Assessment: Assessment of the current session’s device and user attributes compared to past activities in the account.
  • Risk Assessment of the current’s session risk parameters.
  • User Routine Assessment of the currents session timeline parameters based on the user’s activity patterns.
  • Behavioural Biometrics Assessment of the current’s session Behavioural biometrics attributes compared to past activity in the account.

Each digital identity and transaction comes with a Trust Score by default.

As part of these digital identity systems, citizens are given an individual score based on their behaviours and actions, with non-state approved behaviour potentially preventing citizens from doing basic tasks like buying a ticket if their trust score is too low.

Digital Identity and Attributes Trust Framework is what it is called. Framework for trust. The framework paves the way for a digital identity trust framework.

Matt Warman MP, Minister for Digital Infrastructure said: It has become increasingly important in this digital age to be able to establish trust, particularly online. This is the foundation thriving markets are built on. Having an agreed digital identity that you can use easily and universally will be the cornerstone of future economies.”

“I want the trust framework to help facilitate a clear understanding between people using identity products, the organisations relying on the service and the service providers, letting each party know data is being used appropriately and kept safe.” – he added.

According to Mastercard its about: “A world where trust can be easily established, and people can be easily recognized in order to gain access to the services or experiences they desire.”

YouTube player

 

With Onfido, another digital identity provider, again they run identity record checks, watch list checks, and automated ongoing monitoring using a library of trusted sources of data.

Watchlist Checks? Yes Onfido’s solution is “constantly drawing from multiple sanctions, politically exposed persons (PEPs), and other data sources.”

The trust scores will be checked and recorded using AI and machine learning and permanently recorded on the blockchain. No recourse or complaint procedure is available.

We have heard the word Trust associated with digital identity and vaccine passports, but where else?

Remember the Trust Stamp program which was launched in late 2018? As part of the GAVI-Mastercard initiative “Wellness Pass”, Trust Stamp’s advanced digital identification technology was integrated.

The Trust Stamp was funded by Bill Gates and implemented by Mastercard and GAVI to link your biometric digital identity to your vaccination records. People who do not wish to be vaccinated may be locked out of the system based on their trust score.

Moving Forward:

The Government of India’s DigiYatra programme will facilitate paperless travel and eliminate multiple identity checks at the airport, enabling seamless and hassle-free travel. It is a Biometric Enabled Seamless Travel Experience (BEST) based on Facial Recognition Technology.

Since the DigiYatra Biometric Boarding System is integrated with the identity document, passengers will no longer need to show their tickets / boarding passes and their physical Identity cards at the checkpoints of the Airport.

Each passenger will need less than three seconds at each touchpoint, which will make the boarding process significantly faster and more seamless.

“Their face would act as their documents, like ID proof, Vaccine proof and act as boarding pass. At each checkpoint your trust score is examined by biometric face scans.”

There is a lot of talk about reducing identity fraud, but what happens if you have a low trust score, what happens when you are refused services based on your trusted digital identity score? What happens if you become the victim of identity fraud and are no longer able to access so-called vital trusted services?

The default configuration of digital identity networks creates a threat like Matrix ID that brings together data such as risk associated with the identity, what is normal behaviour and what is unusual behaviour, and aims to create a trust score.

One Step Towards Your Social Credit Score:

Trust ratings will most likely be a reincarnation or a revamped version of the Chinese Social Credit System. There will be a merger between digital identity and new social credit systems. You won’t be able to buy groceries with a low trust score, and you won’t be able to get funds to pay for anything either.

We are on the road to Beijing, and we should all be apprehensive.

2

Related Posts

Comments (2)

Leave a comment