Beyond Attributes – Challenges and Opportunities Across the Identity Lifecycle
Stages of the Identity Lifecycle
Unlike the government-issued ID cards that we often associate with the concept, identity is a process, not a thing. To inform our analysis of if, when, and how blockchain can provide value in the identity space, we must first consider the stages of the identity lifecycle and the problems experienced within each stage.
Click a cube to learn about each stage
Provisioning
Assigning a trusted identifier to a person, tangible object, or intangible object.
Administration
Managing identifiers – both by the provider and the user – including standards setting, attribute collection and storage, access, and service provision.
Authentication
The process of linking a person or object to attributes collected. Authentication approaches generally rely on one of three factors: 1) something you know, like a password; 2) something you have, like an identity card or QR code; or 3) something you “are,” most often in the form of biometric information, like a fingerprint.
Authorization
Confirming what actions the confirmed identity can take – in many cases, providing access to goods and services based on attributes.
Auditing
Monitoring user access to resources. Also entails creating governance mechanisms that address ownership, privacy, security, transparency and accountability issues, and establishes auditing policies and rules.