Service Provider Cloud

Blockchain: Can It Solve the Identity Crisis?

IBM and SecureKey Technologies are partnering to use blockchain to help consumers reduce the hassle and privacy threat of identifying themselves to banks, phone companies and other businesses and government agencies.

"The [blockchain] network will be designed to make it easier for consumers to verify they are who they say they are, in a privacy-enhanced, security-rich and efficient way," the two companies said in a statement. "When launched later this year, consumers can use the network to instantly verify their identity for services such as new bank accounts, driver's licenses or utilities."

An individual would run an app on a mobile device, and when applying to rent a house, or to get a bank loan, or do some other transaction, the person unlocks the app and presents it to the entity they're doing business with. The app vouches for the person's identity, credit worthiness, clean criminal record, and anything else the person needs to close the deal. The app uses blockchain to connect with the organizations that contain the individual's personal identifying information.

"What we do here at SecureKey is we're trying to solve the 'you are you' problem," SecureKey CEO Greg Wolfond tells Enterprise Cloud News. "You show up at the CRA [the Canadian Revenue Agency] or IRS [US Internal Revenue Service], or you show up at the bank, or try to open a new bank account online. You want to prove you are who you say you are. You don't have the right document. And so you can't do it."

Wolfond adds, "What if you could do it all with a couple of clicks on your cell phone, do it in a way that takes the friction out of the process, while preserving privacy?"

Image: By Davidstankiewicz (Own work) [CC BY-SA 4.0], via Wikimedia Commons
Image: By Davidstankiewicz (Own work) [CC BY-SA 4.0], via Wikimedia Commons

SecureKey, founded in 2008, runs a service called Concierge, which provides ID services for Canadians doing business with their government, with 7 million people signed up and 250,000 monthly transactions. Canadian banks including BMO, CIBC and Scotiabank invested CAN$27 million in SecureKey in October 2016, with funding also provided by the Canadian government.

SecureKey is partnering with IBM Corp. (NYSE: IBM) to broaden the service to a wide variety of businesses. Blockchain provides an underlying transaction technology, to make transactions immutable -- unable to be changed -- and provide protection against attack.

Blockchain is an open source technology that allows people and organizations to build "distributed ledgers" -- records of transactions that aren't stored in a central server or organization, but where all the participants are peers, with each having a completely copy of the transaction record. Individual transactions are stored as "blocks," and blocks can't be altered; when a transaction occurs, a new block gets appended to the chain and transmitted to all the peers.

Blockchain was developed as a means of keeping track of Bitcoin transactions, but it is seeing a variety of other applications, including supply chain and shipping.

The blockchain stores only the permissions, not the actual credit rating, financial information, criminal backgrounds, identification information, and so on. So the SecureKey application doesn't become a massive pile of personally identifying information (PII) that can attract criminal hackers, Wolfond says.

SecureKey envisions a variety of applications for its identification application. In addition to government business, financial applications and banking, a person could use the application to show proof of age at a bar, or when completing a sale on eBay, or even for ridesharing or homesharing businesses -- next-generation Uber and Airbnb.

Blockchain provides a means for the person to control their own information. Someone using a financial service to pay for mental health treatment doesn't have to let the financial service know what they're paying for. And a person using the SecureKey application to show proof of age at a bar doesn't have to show a driver's license that includes their name and address -- the app would just show a photo and attestation that the person is over drinking age.

"As the worrying dad of a 21-year-old daughter, I like that," says Jerry Cuomo, IBM fellow and vice president of blockchain technologies.

The benefit to business is significantly reduced cost and friction, Cuomo says. For example, a rental management company pays up to the equivalent of a full month's rent to check the background of each applicant; the blockchain application can significantly reduce that cost, Wolfond said.

The identity application is currently in the testing phase, and will go live later this year, IBM and SecureKey said. It's built using the Linux Foundation's open source Hyperledger Fabric v1.0.

IBM also added support for Hyperledger Fabric version 1.0 to its IBM Blockchain, a cloud service that allows organizations to run their own blockchain networks to keep track of transactions with partners. Hyperledger Fabric v1.0 will likely be released by the Linux Foundation within weeks, IBM says. It's designed for building enterprise-grade blockchain networks that can quickly scale and support more than 1,000 transactions per second.

"Blockchain is a team sport, and you have the most value when you have the most visibility among the widest number of networks," Marie Wieck, general manager, blockchain technologies, tells Enterprise Cloud News.

IBM introduced governance tools to make it easy to set up a blockchain network and assign roles to users. And the company released a development toolset called Fabric Composer, to build models of business networks, create APIs to integrate with the blockchain network and existing systems of record, and quickly build a user interface.

IBM says it's working with more than 400 customers on blockchain applications, including Maersk, Walmart and Bank of Tokyo-Mitsubishi. IBM announced a new customer on Monday: Beijing Energy-Blockchain Labs Limited, which is building a Chinese carbon credit exchange using blockchain.

— Mitch Wagner Follow me on Twitter Visit my LinkedIn profile Visit my blog Friend me on Facebook Editor, Enterprise Cloud News

Joe Stanganelli 3/31/2017 | 11:23:24 PM
Re: ID @kq4ym: Indeed, I think blockchain is going to be vital to saving enterprise cloud security -- if we let it get that far.

One of the problems with cloud CIA (confidentiality, integrity, and availability) is that it's centralized.  Blockchain, on the other hand, relies on decentralization.  It has the power to re-reinvent the way enterprise networking works.
ak22 3/31/2017 | 6:17:21 PM
Blockchain FTW Blockchain is an ideal means for keeping networks secure, particularly when IoT comes into play. It means peer-to-peer communication, the ability to authenticate, applying cryptographic standards and maintaining transparency across supply chains - just a few of the benefits.
ak22 3/31/2017 | 12:43:00 PM
Re: ID It does sound perfect on a smaller scale like that. Many blockchain doubters dismiss it as a security measure as they don't see it as feasible on a large scale, least of all because they don't see the majority of companies being willing to adopt the technology. But the fact that IBM has firmly taken up the blockchain mantle might change that!
kq4ym 3/24/2017 | 10:52:56 AM
Re: ID It does sound like a better way to slice bread, and considering all the new security measures being placed at goverment offices and in banking I'd like to see it happen sooner than later. Our Florida driver's license offices, for example now require so many forms of ID to renew it's a real challenge for lots of folks to get through it easily. This would be perfect and save countless hours of customer and office personnel time to speed up the process.
Ariella 3/21/2017 | 6:47:04 PM
Re: Personal privacy and security in a cloud @JohnMason true, though blockchain also offers a thorough record of data transfer. Though nothing is completely foolproof (or hackproof) that digital trail is a strong disincentive to hacking.
JohnMason 3/20/2017 | 11:34:43 PM
Personal privacy and security in a cloud This is effectively keeping one's most personal and private data in a cloud. It reinforces the idea that such data may be securely kept online, which allows tremendous convenience in accessing that information to facilitate transactions.
danielcawrey 3/20/2017 | 3:19:43 PM
ID This is a great way to tie in all data points to one reference. And the blockchain enables that data to be transparent, requiring changes on other data levels to create a gold record of sorts for things like identification. 
Sign In