Self-sovereign identity

Although technology has been an essential tool for connecting and monitoring the ever-changing pandemic, a larger variety of apps and services means that more people are aware of the risks they are taking with their data. From concerns over Covid ‘track-and-trace’ apps to huge data farming companies like Facebook and Google, to the more recent questions raised over the true intentions behind TikTok, consumers are becoming increasingly aware of, and concerned about, where their data is going.

The rise of surveillance capitalism has been a growing concern in recent years, as personal data becomes more and more commoditized. In response, people are demanding more control over their data, who has it and how it gets used. As a result, we are seeing the ‘self-sovereign identity’ movement gain increasing traction. Self-sovereign means that people control their own data and are able to create and control their own credentials and digital identities without third-party technology providers or governments. The movement seeks to end the corporate harvesting of data, and wants to instead create a new consumer-led ‘data marketplace’ that empowers people to selectively trade personal data for financial rewards. The large-scale harvesting and trading of data isn’t going to lose its value anytime soon, but it can be placed back in the hands of the people.

While data privacy has long been a concern, we haven’t had the technology in place to tackle it until now. As blockchain technology has matured, solving this issue is finally becoming a real possibility. Blockchain protocols securely store data, putting people back in control of their information. Not only this, but third-generation blockchain protocols can allow people to create digital identities. For instance, imagine being in a bar. When you show your ID to the bartender, you’re showing them more than just your age; they also see your date of birth, full name, and potentially even your home address. Self-sovereign identity means giving people control over their data, so they can only show the data they need to.

This is done through cryptographic techniques, such as zero-knowledge proofs (ZKPs), which make blockchains ultra-private, allowing information to be verified without revealing it to anyone but the recipient and allowing users to prove the information without giving away more than necessary. Such techniques can give people access services that require validation through data, but without sharing an excess of personal information, including age-restricted services or insurance.

Tracking your data

Concerns over personal data exploitation have been thrown into sharp relief during Covid-19. Technology is one of the best tools that we have to help combat the spread of the pandemic. Track-and-trace apps have the potential to help prevent further outbreaks, but questions continue to arise about the data that these apps require. These apps require a fair amount of personal information, particularly your address or geographical location. Although the severity of the tracing varies from country to country, it is often unclear what happens to user data after it has been surrendered, so there’s no way of knowing who has seen it or has possession of it.

By employing blockchain technology in these track-and-trace apps, governments can address these data security concerns. Blockchain-enabled apps allow users to store personal data on their devices and only share the information that they want to share. Not only that, but this data is restricted to the owner and the person it is being shared with, preventing third parties from accessing it. This

could make track-and-trace apps more secure, ensuring that we don’t miss out on technology that can combat the pandemic without compromising our private data.

Securing your information Smart identities also hold great potential for students and graduates. Following recent hacks on a number of universities, data security is front of mind for students and their universities. Using blockchain, students will be able to verify their qualifications instantly. Degree certificates as well as medical records other forms of ID can be kept in a smart wallet on the student’s device, and specific information can be shared on request, such as when applying for a job. IOHK is already piloting a project in Georgia to provide a way for students to access their qualifications securely. We’ve found from this pilot, Atala, that students not only want their qualifications to be secure, but also to be to be sufficiently portable so that HR workers and recruiters can seamlessly recognise and work with these blockchain-enabled records.

These solutions are not only for universities. In the same way that students can keep their qualifications in their own smart wallet, on their mobile device, service-providers, such as insurance companies, can also reduce corporate data privacy risks by transitioning to serverless apps where personal data is stored on consumer devices - rather than one centralised location removing third-parties from the equation.

Surveillance capitalism and data commoditization are fast becoming commonplace, but with self-sovereign identity solutions, consumers and businesses alike are finally able to take back control of their data. The foundations of blockchain have always been in privacy and giving people control, and now the technology has evolved it can put these principles into practice, allowing users to control their own data, only sharing what they want to with a select number of second-parties, in projects like Atala. At a time when personal data is more valuable than ever, blockchain is allowing users to keep their details safe.