Guidance for Decentralized Identity and Verifiable Claims
Published: 24 January 2020 ID: G00392042 Analyst(s): Homan Farahmand
Decentralized identity will disrupt identity management by enabling privacy enhanced verifiable identity data exchange over the internet. Security and risk management technical professionals should identify relevant use cases and prepare for applicable adoption scenarios.
Key Findings
Decentralized identity is the foundation of the future decentralized web that puts users in control of their data and prevents excessive data proliferation by enabling verifiable claims/credentials. This is achieved by implementing reusable identities and secure relationships.
Decentralized identity and privacy-enhanced verifiable claims/credentials will disrupt identity management and profile attributes exchange. They open opportunities to reinvent business processes to enable new business models, reduced friction in interaction/transactions and the creation of new data marketplaces.
Decentralized identity requires careful business and technical planning. However, many security and risk management technical professionals are not fully familiar with the concept. This may leave organizations unprepared to adapt quickly when these technologies are more commonly deployed over the next two to three years.
The current pace of innovation and standardization indicates reasonable progress to address issues such as governance, scalability, user experience, interoperability, decentralized key management, privacy and security. We expect this trend to continue in the coming years to reasonably address core outstanding issues, even though early offerings may not be ideal.
Decentralized Identity Sample Vendors
Below is a sample list of organizations directly or indirectly contributing to the development of decentralized identity — it is not an exhaustive list representing the entire decentralized identity market.
It is important to note that this is not a formal assessment of these offerings. Almost all of these offerings are still in the development stage and are not fully mature.
• Finema
• IBM
• Evernym
• Microsoft
New : 2020 Guidance for Decentralized Identity and Verifiable Claims