世界经济论坛-重塑数字身份（英）-2023-WN6.pdf

Reimagining Digital IDI N S I G H T R E P O R TJ U N E 2 0 2 3群内每日免费分享5份+最新资料 群内每日免费分享5份+最新资料 300T网盘资源+4040万份行业报告为您的创业、职场、商业、投资、亲子、网赚、艺术、健身、心理、个人成长 全面赋能！添加微信，备注“入群”立刻免费领取 立刻免费领取 200套知识地图+最新研报收钱文案、增长黑客、产品运营、品牌企划、营销战略、办公软件、会计财务、广告设计、摄影修图、视频剪辑、直播带货、电商运营、投资理财、汽车房产、餐饮烹饪、职场经验、演讲口才、风水命理、心理思维、恋爱情趣、美妆护肤、健身瘦身、格斗搏击、漫画手绘、声乐训练、自媒体打造、效率软件工具、游戏影音扫码先加好友，以备不时之需扫码先加好友，以备不时之需行业报告/思维导图/电子书/资讯情报行业报告/思维导图/电子书/资讯情报致终身学习者社群致终身学习者社群关注公众号获取更多资料关注公众号获取更多资料Images:Getty Images,Midjourney 2023 World Economic Forum.All rights reserved.No part of this publication may be reproduced or transmitted in any form or by any means,including photocopying and recording,or by any information storage and retrieval system.Disclaimer This document is published by the World Economic Forum as a contribution to a project,insight area or interaction.The findings,interpretations and conclusions expressed herein are a result of a collaborative process facilitated and endorsed by the World Economic Forum but whose results do not necessarily represent the views of the World Economic Forum,nor the entirety of its Members,Partners or other stakeholders.ContentsExecutive summary 3Introduction 41 ID Overview 51.1 A brief history of ID 61.2 Digital ID 61.3 Fulfilling the identity life cycle 82 Decentralized ID 92.1 Why is decentralized ID important?102.2 Principles 132.3 Underlying standards and proposals 142.4 The Digital ID risks this approach seeks to avoid 173 Barriers to implementation 193.1 Technical 203.2 Policy 223.3 Governance and implementation 234 Recommendations 254.1 Technical 264.2 Policy 274.3 Governance and implementation 30Conclusion 32Contributors 33Endnotes 36Reimagining Digital ID2Executive summary There are roughly 850 million people who lack legal identification(ID),which makes it difficult or impossible for them to fully engage with society.At the same time,many of those with ID do not have privacy and control over how their data is shared.Several approaches to digital ID could help broaden access to goods and services and offer individuals greater privacy and control.This report explores one such approach:decentralized ID,which enables users to control their personal data while allowing issuers to contribute attestations,or credentials,about them.If implemented in a trusted,privacy-preserving manner,decentralized ID can increase access and control while enhancing efficiency and effectiveness.Yet decentralized ID also poses risks and faces challenges.To help realize the benefits and mitigate the risks of decentralized ID,this report provides analysis,tools and frameworks,summarizing the barriers to implementation facing decentralized ID and offering a set of recommendations for stakeholders seeking to adopt this approach.1 ID overviewFor centuries,ID a means by which people prove attributes about themselves has played a pivotal role in society.Recognizing this,the United Nations Sustainable Development Goals identify legal identity as a development priority.As peoples lives become increasingly mediated by digital technologies,there is a related need to develop digital ID,or a way to make claims about personal data through digital channels.Centralized,federated and decentralized ID systems,as well as hybrid approaches,each with unique advantages and disadvantages,can help fulfil this need.2 Decentralized IDDecentralized ID systems use cryptography,digital wallets and related technologies to enable multiple entities to contribute credentials and empower individuals to manage their data.Properly implemented,decentralized ID could enhance privacy,control,efficiency and effectiveness.A wide variety of technologies,standards and proposals including verifiable credentials and decentralized identifiers,as well as principles and governance frameworks exist to realize decentralized ID.However,this approach also poses risks.3 Barriers to implementationEfforts are already under way to scale decentralized ID.Yet there are a host of barriers to implementation.A lack of widely agreed-upon technologies,standards and proposals limits the reach of these systems.The absence of enabling policy and regulation may curtail their efficacy.Decentralized ID also faces challenges of governance,communications and utility.4 RecommendationsFor stakeholders who decide that decentralized ID is the right approach for their goals,this report offers technical,policy,governance and implementation recommendations.It advises industry that further technological innovation,standards alignment and talent development are necessary to achieve decentralized ID.Public-sector participants can contribute by exploring the development of enabling regulation,setting requirements for interoperability and portability,and fostering collaboration among key stakeholders.Reimagining Digital IDJune 2023Reimagining Digital ID3IntroductionRoughly 850 million people worldwide lack an official ID,making it difficult for them to get a job,access medical care,enrol in a school,open a bank account or cast a vote.1 At the same time,many of those with ID lack privacy and control over how their data is shared.Today,innovative approaches to digital ID have been developed that could help expand access to goods and services while offering individuals privacy and control.This report focuses on one approach:decentralized ID,which seeks to enable users to control the sharing of their personal data while allowing multiple entities to contribute attestations,or credentials,about them.These credentials may be as simple as a date of birth or as complex as a citizenship.If implemented in a trusted,privacy-preserving manner,decentralized models of digital ID can offer individuals a secure way of managing their personal data without depending on intermediaries.While decentralized ID presents opportunities,and has already begun to be adopted,it also poses risks and faces challenges.Many of its underlying technologies,governance frameworks,trust ecosystems and standards are still emerging and remain relatively untested at scale.As with many digital technologies,a misalignment between existing policies and regulatory frameworks and these models of ID could curtail their efficacy and create risks.Without public education,clear utility and incentives,decentralized approaches to ID may be unable to garner the broad stakeholder buy-in and user demand required for mass adoption.Though decentralized ID offers an opportunity to advance inclusion,effectiveness and privacy,without fit-for-purpose policy,regulation and technology,the potential for these systems to address the limitations of current global ID paradigm while having a socially useful impact will be severely limited.The aim of this report is to provide an analysis of decentralized ID from a technical and policy standpoint.The product of an international collaboration among experts drawn from industry,government,civil society and academia,the report seeks to offer useful tools,frameworks and recommendations for government officials,regulators and executives seeking to engage with this dynamic area of emerging technology.Recognizing that the objectives of governments,organizations,communities and individuals differ across jurisdictions,use cases,cultures and more,this report does not provide a one-size-fits-all set of recommendations.Nor does it advocate using decentralized ID over other forms of digital ID or the use of any form of ID.There are instances in which any form of ID is deemed unnecessary,inappropriate or undesirable.Rather,this resource notes the advantages and disadvantages of decentralized ID compared to other approaches to ID and flags important considerations for stakeholders in the hope that this approach can aid their development of an effective ID strategy.Should a stakeholder choose to take this approach,the report provides tools to help realize its benefits and mitigate its risks.For people without official,or legal,identification,it can be difficult or impossible to fully participate in society.Reimagining Digital ID4ID Overview1For centuries,ID,a way for people to prove attributes about themselves,has played a central role in society.Reimagining Digital ID5This section provides an overview of important concepts pertaining to ID and digital ID.It offers a brief history of ID,an outline of different approaches to digital ID,and summarizes concepts including foundational and functional ID,the identity life cycle and levels of assurance.1.1 A brief history of ID ID is a means by which people prove that they are who they say they are and various attributes about themselves.For centuries,ID has played a pivotal role in the development of economies and societies around the world,2 with ID in many cases being required to cross borders,gain labour opportunities,access credit and more.In 1948,with the proclamation of the International Declaration of Human Rights,nations enshrined the right to recognition before the law and the right to have a nationality.3 Both rights can be facilitated by the possession of proof of legal identity.4 The UnitedNations defines legal identity as“.the basic characteristics of an individuals identity,e.g.name,sex,place and date of birth conferred through registration and the issuance of a certificate by an authorized civil registration authority following the occurrence of birth”.5In 2015,with the adoption of the Sustainable Development Goals(SDGs),the international community recognized legal identity as a development priority.SDG 16.9 aims to“.by 2030,provide legal identity for all,including birth registration”.6 Indeed,as the World Bank posits,ID can be a direct or indirect enabler of many sustainable development goals(SDGs),including access to finance,gender equality and empowerment,and migration and labour market opportunities.7 While there has been significant progress,SDG 16.9 remains aspirational,with the World Bank estimating that roughly 850 million people lack an official ID.Providing proof of legal identity to those without it will depend on a concerted,multistakeholder effort led by governments as well as the development of robust systems to ensure that credentials provide real-world value to holders.As stakeholders determine how best to achieve SDG 16.9,some are considering developing decentralized ID systems in addition to efforts to provide proof of legal identity.Decentralized ID is a form of digital ID that enables individuals to control the sharing of their data,while allowing multiple entities to issue credentials to them.1.2 Digital ID Digital ID provides a means of making claims about personal data through digital channels.Many things can have a digital ID,from hardware such as internet of things(IoT)devices to organizations,including corporate entities.This report focuses on ID for individuals.The increasing use of digital technology and the development of AI make the creation of digital ID important.According to estimates by the global financial crime watchdog,the Financial Action Task Force(FATF),the number of digital transactions is growing at roughly 12.7%annually.8 Whether purchasing an item or accessing an in-person service,transactions are increasingly mediated by digital technologies,necessitating the development of effective forms of digital ID.Developments in artificial intelligence(AI)have also increased the need for digital ID.AI poses a threat to privacy because it can analyse seemingly unrelated data to reveal attributes about an individual.9 AI also has the potential to break mechanisms for authentication.These capacities necessitate the development of models of digital ID capable of preserving privacy while providing reliable authentication.10 AI systems are also now generating content,making it imperative to develop models of ID that can determine what was produced by an AI system.Despite a sustained focus on ID,the increasingly widespread use of digital technologies,and the rapid development of AI,the internet lacks an ID layer.11 To fill this gap,stakeholders offer centralized,federated and decentralized forms of ID to help facilitate transactions.12 Centralized providers establish and manage data on behalf of individuals.Federated solutions allow a single organization or closed network to verify facts on behalf of an individual.Decentralized ID systems,by contrast,allow an individual to control their data,which is verified by other stakeholders.13 Decentralized ID has elsewhere been referred to as self-sovereign ID,user-managed ID,secure ID and more.The aim of this resource is not to add confusion to these terms,but to encourage standardization around a neutral term.The table below summarizes these system archetypes and some of their strengths and weaknesses.It should be noted that the The World Bank estimates that roughly 850 million people lack an official ID.Reimagining Digital ID6opportunities and challenges presented by each archetype are dependent on context and use case.Likewise,these archetypes are not necessarily mutually exclusive.Hybrid approaches making use of centralized and decentralized elements,for example,can offer a pathway for stakeholders to take advantage of some of the benefits of decentralized ID systems without fully adopting them.ID system archetypes strengths and weaknessesTABLE 1Source:World Economic Forum,Identity in a Digital World:A New Chapter in the Social Contract,September 2018:https:/www3.weforum.org/docs/WEFINSIGHT_REPORT_Digital%20Identity.pdfEach system archetype summarized in Table 1 can support forms of ID that are foundational or functional.The United States Agency for International Development(USAID)defines foundational ID as a national-scale official ID typically issued and managed by a government.15 For example,leveraging an enrolment process to develop a registry of citizens,governments can create foundational IDs.Issuers,including governments,non-governmental organizations and private-sector enterprises,can also issue functional IDs,which are defined by their capacity to enable individuals to access a discrete good or service or perform a specific action.Drivers licences,health insurance documentation,credit and payment histories and passports are all instances of functional IDs.16While a useful distinction,the boundary between foundational and functional IDs can be blurry.Over time,certain functional IDs,such as the US drivers licence,may accrue such a high level of trust and utility that they become de facto foundational.Both foundational and functional IDs can be used in a decentralized ID system.For instance,systems can enable individuals to control their foundational ID credentials,facilitating access to services in a decentralized fashion.17 Likewise,decentralized ID systems can make use of government registries to provide individuals with official credentials while also allowing non-governmental stakeholders to issue other credentials to them.18System archetypesCentralizedFederatedDecentralizedDefinition A single organization establishes and