Is Digital Identity only important to a small minority (such as these folks) who have drunk the Cool Aid, or is the Digital Identity cause inevitably going to take over the world at some time? I will try to summarize in this post why I think Digital Identity matters. It turns out there are many, many reasons.
But before I do that, we need to look at the surprisingly many and varied application areas for Digital Identity, and what this new technology can hope to accomplish there:
- Digital Identity as a security tool. There is no doubt that Digital Identity technology can make computing more secure. Among other things, it can reduce the number of passwords we need to remember (no more yellow stickies on computer monitors), it can handle multi-factor authentication, it can make it much harder for crooks to impersonate others etc.
- Digital Identity as a compliance enforcement tool. In the aftermath of Enron and with legislation such as Sarbox and HIPAA, many companies feel they need to attach specific policies to their software applications that enforce what specific employees are and aren’t allowed to do. Without Digital Identity technology, that would be next to impossible.
- Digital Identity as a big-government tool. This is the government equivalent of the corporate compliance enforcement tool. (I will not further talk about this as I’d like to keep politics out of this blog as far as possible).
- Digital Identity as a convenience or cost-saving tool. Single-sign-on for consumers falls into this category. If, as a consumer, I don’t have to remember dozens of usernames and passwords at various websites, and don’t have to keep track of who I need to send an updated address to, my life will be easier and my on-line experience will be more productive and enjoyable. Similarly, not counting the security benefits, if corporate applications were single-sign-on enabled, employees could be more productive and make better use of the available information technology.
- Digital Identity as a tool to empower the individual and/or groups of individuals. To me, this is the by far most interesting application of Digital Identity. If you and me could claim our place in cyberspace, just like corporations such as Amazon and eBay claim theirs, we could create a shift in the relative distribution of power from big companies to the individual, with potentially tremendous and tremendously valuable consequences all across society.
[Note: this is my own list, and there’s a good chance it’s incomplete. If you can think of some things I’ve missed, I’d appreciate it if you dropped me a note.]
For reasons that I cannot completely understand, the discussion of Digital Identity today largely focuses on the first four of these items. There are the "enterprise digital identity people" (example quotes courtesy of CNet’s Dan Farber) who talk about compliance, identity management, security, policies and so forth. There are the "Digital identity as a convenience" people (such as when A9 uses Amazon account names). And there are the privacy advocates who talk — or rather not talk — about the promise of Digital Identity, or its opposite. But is that all Digital Identity can do?
In my mind, if that is all it can do, it would indeed be boring. After all, most of us won’t get excited about locksmiths (security), a better door knob (convenience) or lawyers and accountants (compliance) either, and attempting to drum up excitement around those themes has always looked quite Quixotic to me …
So let me tell you what excites me about Digital Identity: it is the transformational power that Digital Identity can bring — assuming it is done right — to empower individuals and groups in ways that are highly desirable but impossible without. Or, in plain language: the new products and features that only can be built with Digital Identity and will be built as soon as we have it. And we will never look back.
There are lots of them. I will be talking about many of them on this blog going forward (responding, in part, to a challenge by Kim Cameron), and I hope we all can have a great and exciting discussion around them. To get this started, let me pick out just three of them:
- What Marc Canter calls "Digital Lifestyle Aggregation". In short, technology that brings together all of an individuals devices (from PC over stereo to cell phone and digital camera) and media centered around the individual (rather than … well, not centered around anything but fragmented and all over the place). Why is it that the owner of these devices is responsible for making them all together, instead of the devices coming together to optimally support the individual? That would mean no more "let me think, did I burn this file onto that CD" or "no sorry, I can’t play this song on the big stereo speakers.", it could make podcasting as easy as sending e-mail and have a myriad of interesting applications…
- What we at NetMesh call Situational Software: typically mobile software that is aware of the user’s immediate situation, and proactively supports them in that situation, instead of being just able to offer a bunch of remote websites that are very clueless about the user and thus not very helpful. Situational Software largely depends on having a good Digital Identity foundation, and has lots of applications in a business and private context.
- What Mark Pincus calls the PeopleWeb, which proposes a 180-degree shift in how, for example, we buy and sell items on the web. Instead of browsing stores like Amazon for what they offer to sell, we would instead post on our own sites what we’d like to buy. The idea of a Personal Health Record probably also falls into this category.
Need more convincing? I will keep posting … hope you comment or blog back!