[{"data":1,"prerenderedAt":68},["ShallowReactive",2],{"news-self-sovereign-identity-and-government-data-exchange":3},{"articles":4},[5],{"documentId":6,"title":7,"slug":8,"createdAt":9,"publishingDate":10,"description":10,"content":11,"quote":10,"postAuthor":10,"thumbnail":12,"relatedProducts":10,"industry":10,"relatedPosts":64,"metaData":65},"am3nlgkxb0ktj09x5grunsff","Self-sovereign identity and government: Data exchange","self-sovereign-identity-and-government-data-exchange","2021-07-07T14:00:02.000Z",null,"Identity is often discussed as a single topic, but it's worth pulling it apart from the data exchange component, where the two have recently become muddled together.\n\nIn terms of identity itself, self-sovereign identity (SSI) and traditional public key infrastructure (PKI) based offerings are, for the most part, on the same page. Both put control in the hands of the user, differing mostly in how trust is established, its levels, and where it comes from. This post focuses on data exchange, where both SSI and PKI place much of the responsibility for privacy.\n\n## How is data stored in SSI model?\n\nThe data side of SSI mainly comes down to these three questions:\n1. Who stores it?\n2. How is it stored and shared?\n3. Who shares it?\n\nWith SSI, the underlying assumption is that end-users store their own data, either on their phone or in a cloud service. But issuers must also retain the data they created, so we immediately end up with data stored in two places, effectively doubling the attack surface.\n\nIf end-users are responsible for storing their own data, the only realistic approach is to consolidate it in a single location, which is exactly what makes it a goldmine for identity thieves. We're now forcing individual data to centralize on a single device, whereas it was previously fragmented across many issuer databases and far less useful to an attacker. Once we start sharing portions of that data with third parties, it exists in a third location, but the weakest link remains the end-user's device, where everything about them has been consolidated in one place.\n\nThe average end-user simply isn't equipped to defend their data against malicious actors who steal identities professionally. Privacy and control are worthwhile goals, but we can't pursue them at the expense of security, not when the data in question is what people rely on to function in society.\n\n## Data exchange in SSI\n\nIf we're to consider SSI in a society, we need to look at how data sharing works. The core idea is that end-users can share their data without relying on the issuer beyond the initial issuance.\n\nTake the example below, where an individual wants to share their clean bill of health status with an insurance provider. This need only be a \"yes\" or \"no\" response, but it must come from a trusted source, most likely a health registry or the specific doctor or hospital that carried out the assessment. Once the end-user receives the data from the issuer, they can share it whenever and with whomever they like, with no further interaction required from the issuer.\n\nFor the receiver to trust this data attribute, the issuer must \"sign\" it in a way that lets the receiver verify who issued it and confirm it hasn't been altered. This signature is then sent to a register of some kind, which the receiver can easily check.\n\n![](\u002Fuploads\u002Fssi-data-exchange.png)\n\nThis is relatively straightforward, though it doesn't address how each party knows who the other is in a trusted manner. The verification register is also a new piece of infrastructure that must be implemented, integrated, and managed by a trusted entity. If that entity chooses to use a blockchain, it would need a costly, managed one. Still, the core challenge remains data storage.\n\nThe verification register is effectively functioning as an OCSP (Online Certificate Status Protocol), letting parties confirm whether a digital signature was valid at the time of signing. Today, sharing verified documents is already done by digitally signing a container with the document inside. Any modification in transit is easily detected, since it would alter the hash of the signed data. All of this can be achieved with traditional PKI-based [digital identity](https:\u002F\u002Fcyber.ee\u002Fsolutions\u002Fdigital-identity), which has been running for decades using trust service providers (TSPs) and a secure data exchange layer, such as those in [Estonia](https:\u002F\u002Fcyber.ee\u002Fsolutions\u002Finteroperability), [Ukraine](https:\u002F\u002Fcyber.ee\u002Fresources\u002Fcase-studies\u002Fukraine-trembita), [Namibia](https:\u002F\u002Fcyber.ee\u002Fresources\u002Fcase-studies\u002Fnamibia), [Greenland](https:\u002F\u002Fcyber.ee\u002Fresources\u002Fcase-studies\u002Fgreenland), and [Benin](https:\u002F\u002Fcyber.ee\u002Fresources\u002Fcase-studies\u002Fbenin).\n\n## Data Exchange with PKI\n\nFrom a high level, trusted and secure data exchange can look like the flow chart below. Rather than the end-user storing all their data, they give consent to third parties to access that data from the source. Immediately, we remove a major weak point, while keeping the most sensitive data types split between issuers by using the once only rule among government agencies, where they cannot request data available via any other government agency.\n\n![](\u002Fuploads\u002Fpki-data-exchange.png)\n\nThe data issuers can be public or private organisations integrated with the data exchange platform. The key is that they are the sources of the data they hold, meaning what they share is both up-to-date and inherently verified simply by virtue of coming from the source. A breach at any single data source would only expose the specific type of data that source holds, which isn't enough to steal an entire identity, and offers little benefit to an attacker if PKI-based digital identity is in use.\n\nReceivers establish peer-to-peer agreements with the data sources they need to interact with, and with permission, can access relevant data on their citizens or customers in real time, efficiently and securely. This way, no data travels over the open internet, and all data access is tracked and made visible to the individual it concerns, creating transparency and trust.\n\n## Privacy vs security\n\nIt can't be denied that this model involves some trade-off in privacy and control, since we rely on the issuer each time we want to grant access to our data, and the issuer, in turn, knows who is accessing it.\n\nBut the model doesn't force this approach. When an end-user would prefer the issuer not know who the data is being shared with, they can simply retrieve the data themselves, receive a digitally signed attribute, and share it with whomever they please, privacy intact. In fact, this is where we align with SSI operating as intended, accepting some trade-off in convenience and security, both in requiring the end-user to store that data and in sharing it over the open web.\n\nWhat is worth noting about this model is that it is not new. It is how the X-Road in Estonia functions, and how it has been effectively functioning for about twenty years. It's also how the X-Road and Cybernetica’s [Unified Exchange Platform](https:\u002F\u002Fcyber.ee\u002Fproducts\u002Fsecure-data-exchange\u002F) (the product version of the X-Road) are functioning in many countries around the world today. It's trusted because issuers and receivers know who each other are and hold direct agreements with one another, because data access tracking provides transparency, and because consent management gives end-users control.\n\nThis model doesn't merely avoid harming equity and inclusion. It actively embodies it, while also offering proven interoperability, both locally and internationally. This is demonstrated by Estonia and Finland enabling cross-border data exchange and identity recognition.\n\nWe achieve decentralisation through peer-to-peer data exchange, with data attribute types split across issuers, so there's no need to centralise an individual's entire set of identity attributes in a single, insecure place like their smartphone. Instead, the model delivers control, usability, accessibility, genuine and realistic security, verifiability, authenticity, transparency, and convenience, all built on tried and tested technologies like secure data exchange and PKI-based digital identity.\n\n## Different problems need different identity solutions\n\n\nMuch of the point I'm looking to make here is that SSI isn't presenting us with something new, but rather something not particularly well-suited to government-run societies. It's pushing for new technologies and processes that are relatively untried and untested, aimed at replacing social media-based login services tied to unverified and untrusted internet identities.\n\nEstonia draws a lot of attention here, having run digital government services for 20 years without standing still in terms of innovation. The lessons Estonia has learned are there for the taking, with local companies offering to share the technologies and ways of working that make Estonia what it is, and to customise them to fit other governments\n\nIt's well understood that no two governments operate the same way, so what Estonia has built isn't shared as a fixed set of principles that may or may not align with a given country's culture and legal landscape. Instead, it's offered in a customisable form, backed by analysis, consultation, and advice on how best to integrate such services into a particular government's existing ways of working.\n\nAt its core, SSI pushes positive ideas and principles, like end-user control, interoperability, and data privacy. That's a good thing, but as a package, it simply isn't appropriate for governments. \n\nWhat it does seem well-suited for is interacting online with businesses and services that don't need to know who we are. It's valuable for reducing the risk of correlation, the risk of being tracked across the web so our data can be monetized and sold. It's valuable for the times we'd prefer to act privately. But when it comes to banking, an industry bound by AML and KYC regulations, or to limiting fraud in areas like welfare, insurance, tax, or healthcare, our true identity is something that must be beyond doubt.\n\nI'm not saying PKI is perfect, and I'm not saying what Estonia has built is flawless. But when it comes to fraud, identity theft, and ease of government interaction, I know of nothing better. We have an excellent foundation for governments, one that's well-regulated, tried, and tested. Let's build on it.\n\nWritten by Maximiliaan van de Poll ",{"featuredImage":13},{"documentId":14,"url":15,"alternativeText":16,"width":17,"height":18,"formats":19,"mime":24},"hpkfe4hb9zprfua50djkhx0t","\u002Fuploads\u002Fdan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11.jpg","A plant, earphones, phone, pencil & glasses on a table.",5184,2920,{"large":20,"small":29,"medium":36,"xlarge":43,"xsmall":50,"thumbnail":57},{"ext":21,"url":22,"hash":23,"mime":24,"name":25,"path":10,"size":26,"width":27,"height":28},".jpg","\u002Fuploads\u002Flarge_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11.jpg","large_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11","image\u002Fjpeg","large_dan-nelson-ah-HeguOe9k-unsplash.jpg",74.75,1000,563,{"ext":21,"url":30,"hash":31,"mime":24,"name":32,"path":10,"size":33,"width":34,"height":35},"\u002Fuploads\u002Fsmall_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11.jpg","small_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11","small_dan-nelson-ah-HeguOe9k-unsplash.jpg",24.46,500,282,{"ext":21,"url":37,"hash":38,"mime":24,"name":39,"path":10,"size":40,"width":41,"height":42},"\u002Fuploads\u002Fmedium_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11.jpg","medium_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11","medium_dan-nelson-ah-HeguOe9k-unsplash.jpg",46.92,750,422,{"ext":21,"url":44,"hash":45,"mime":24,"name":46,"path":10,"size":47,"width":48,"height":49},"\u002Fuploads\u002Fxlarge_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11.jpg","xlarge_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11","xlarge_dan-nelson-ah-HeguOe9k-unsplash.jpg",241.76,1920,1081,{"ext":21,"url":51,"hash":52,"mime":24,"name":53,"path":10,"size":54,"width":55,"height":56},"\u002Fuploads\u002Fxsmall_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11.jpg","xsmall_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11","xsmall_dan-nelson-ah-HeguOe9k-unsplash.jpg",1.45,64,36,{"ext":21,"url":58,"hash":59,"mime":24,"name":60,"path":10,"size":61,"width":62,"height":63},"\u002Fuploads\u002Fthumbnail_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11.jpg","thumbnail_dan_nelson_ah_Hegu_Oe9k_unsplash_f7d9d2ea11","thumbnail_dan-nelson-ah-HeguOe9k-unsplash.jpg",8.46,245,138,[],{"metaTitle":66,"metaDescription":67,"shareImage":10},"Self-Sovereign Identity and Government","Explore the paradigm of self-sovereign identity  and its implications for secure data exchange. Delve into innovative approaches reshaping identity management.",1788355415245]