“Digital identity” sounds like something you’d need clearance for, all biometric scanners and dramatic red lighting. In reality, you’ve probably already come across it a couple of times this week, whether that’s scanning a driving licence to open a bank account, using your passport at an automated border gate or using your face to unlock a phone. GOV.UK lists these among the technologies people may already be familiar with as part of digital identity services.
It’s a way of representing information about a person so they can prove who they are or prove something about themselves when using a service. That information can include details such as a name or age, and may also include an address or biometric information.
What Is Digital Identity?
GOV.UK describes a digital identity as a digital representation of identity information, such as someone’s name and age. It can also contain other information, including an address or biometric information such as a fingerprint or face scan which allows people to prove who they are without needing to present a physical document.
A digital identity can also be used to prove a specific detail without sharing everything else. If a service only needs to know whether someone is over 18, for example, the information provided could simply establish that they meet the age requirement. This means someone may be able to prove what they need to prove without sharing more personal information than necessary.
Being able to log into an account shows that you have access to it, but it doesn’t exactly establish who you are in the real world. Digital identity involves information or evidence that can be used to establish or verify something about you.
More from Guides
- Closed AI Vs Open AI: What’s Really Behind The Kitchen Door?
- What Is A Lock-Up Period?
- The New Generation of Founders Doesn’t Look Like the Old One
- How Is An IPO Valuation Determined?
- What Is A Neobank?
- What Is An Exchange-Traded Fund (ETF)?
- What Are Computer Chips And How Do They Work In Our Devices?
- What Synthetic Biology Actually Means for Everyday Life
How Does Digital Identity Work?
The exact process varies depending on the system being used, but it generally starts by establishing someone’s identity and then giving them a way to prove that identity when they use a service. NIST’s Digital Identity Guidelines cover identity proofing and authentication as separate parts of the process
1. Establishing Your Identity
First, the service needs to establish who you are – this is known as identity proofing. You provide evidence that can be used to identify you, such as a passport, driving licence or other information. NIST describes identity proofing as a process in which someone provides evidence that allows a credential service provider to establish their identity to a particular level of confidence.
Biometric information may also need to be used, such as a fingerprint or face scan. GOV.UK gives the example of taking a photo of a passport or driving licence, checking that the document is genuine, then taking a photo or video of yourself that can be matched with the photograph on the document.
2. Using Your Digital Identity
Once your identity has been established, that information can be used as part of a digital identity or associated with a credential. This gives you a way to prove who you are, or to prove a specific detail about yourself, when you use a service.
The information included depends on what needs to be verified; one service may need to establish your full identity, while another may only need to confirm a particular attribute, such as whether you are over 18. GOV.UK specifically notes that digital identities can be used to limit the information shared to what is necessary for a specific purpose.
3. Proving It’s You
When you return to use the service, you need a way to show that you’re the person associated with the account or credential. This is authentication, which is separate from the original identity proofing process. NIST describes authentication as establishing that a person making a claim is a subscriber who has previously been authenticated.
Authentication can involve a password or another type of authenticator, such as a registered device, security key or biometric method. The method used all depends on which service and the level of assurance it requires.
What Digital Identity Looks Like
Digital identity can sound way more complicated than the experience of actually using it. You might only see a quick document scan, a face check or a login screen, while the system behind it is establishing or verifying information about you and then checking that you are the person associated with it.
