The Macrosite for News, Analysis and Opinion about the Future of the Internet
Mark Bregman

What’s Possible in an Identity-Enabled Internet?

Written by Mark Bregman
4/7/2008 4 comments
no ratings
DISCUSS     Email This

What did we fail to account for in the design of the Internet?  As the CTO of Symantec Corp. (Nasdaq: SYMC), I would be expected to say security.  It’s not. Frankly, if security had been built into the fabric of the Internet it would have curtailed its rapid growth and many of the conveniences we enjoy today.  Instead, I would have factored in identity.

Since its beginnings in the early 90s, the Internet has introduced a whole new set of words to our lexicon, like blogging, phishing, and spam; changed the way we interact, allowing people to share ideas across international boundaries in a matter of seconds; and altered the very way we purchase goods, pay bills, and even listen to music.  In short, it has permeated almost every aspect of our daily lives.

Today, we have business models ranging from online banking to e-commerce that are dependent on the Internet, an infrastructure built on a platform of anonymity.  With nearly $200 billion in U.S. e-commerce transactions taking place on this infrastructure, it’s no wonder dishonest behavior has emerged. Cybercriminals are taking advantage of the lack of an identity layer for serious financial gain, and the result is declining trust and confidence online.

This is not an easy problem to tackle.

In fact, it is hard to create the kind of trust you have in the physical world in the online world. For example, in the real world we have visual and auditory clues to identify who we are interacting with; in the cyber world the old New Yorker cartoon is true: On the Internet, no one knows you’re a dog.

So assuming we do create an identity layer for the Internet, what value does that provide?  How, exactly, would identity allow for greater collaboration, or the ability to offer differentiated, premium online services?

Since identification is at the start of every relationship -- between individuals, among businesses and people -- identity and reputation are key to the continuation of every relationship.  When businesses have a richer understanding of what their customers like, what they want, and when they want it, only then are truly personalized experiences and premium services possible.

With an identity-enabled Internet, exciting new areas for innovation emerge. For example, in the healthcare industry, privacy is critical and confidential medical information is on a need-to-know basis. And yet, imagine how identity services can assist the aging in a digital home environment.  Being able to share sensitive, up-to-the-minute medical data with certain family members, doctors, and specialists can drastically improve home-based healthcare.

Similarly, how about ensuring the protection and validity of data collected in online drug trials?  During these trials it is important that doctors remain anonymous in order not to bias the data. However, the data should still be traceable back to credentialed doctors approved to participate in a particular drug trial program.

Social networking sites are already under scrutiny to offer more protection to children from online predators.  When individuals can assert claims about their age without any verification, it becomes difficult to determine who is really on the other end of the line.  Networking sites like Facebook (Nasdaq: FB) and MySpace could utilize an identity service to create a differentiated "space" where real identities are validated to ensure there are no imposters.  This would be a valuable, premium service that many parents would eagerly pay for to ensure their 14-year-old daughter isn’t unknowingly interacting with a 40-year-old man.

Even identity-validated email services would be attractive.  Imagine ensuring that only email from individuals with “real,” validated identities could be delivered. No spammer or cybercriminal would wittingly hand over any information that could incriminate them or their fraudulent behavior.  This would result in a substantial reduction in spam and threats propagated by email.

In the end, demand will shape and drive the market value for premium services, but only if we can infuse an identity solution into the Internet.  Solving this will not only root out bad behavior and make people more accountable for their actions -- it will help to reaffirm the trust and confidence needed to continue fueling our digital economy.

Mark Bregman, CTO, Symantec Corp.

DISCUSS     Email This
Current display:       newest comments first       display in chronological order
FredMars
Rank: Cave Painter
Tuesday April 8, 2008 7:50:02 PM
no ratings

Back when DARPA and universities were the only hosts, it didn't matter. As the internet grew into a public medium, and as WWW and HTML came into the act, it became more difficult to handle such issues as security. In the corporate world, there were proprietary devices that prevented unauthorized access without proper credentials. And as formidable as the task may seem today, I feel that it is not insurmountable nor as costly in time or financial investment.

 The proliferation of cybercrimes stems from security issues in the code of th eindividual servers and clients. That is why companies like Symantec exist. Prior to Web and html browser, most viruses were passed on floppies.

 Today we have broadband access at speeds that can handle streaming video, so the barriers to strong encryption and authorization identity is a matter of software and not infrastructure. And using an older concept, tunneling protocols that imbed sensitive data within an innocuous stream of not so sensitive traffic. Extremely strong encryption algorithms and fingerprint identification can make authorization validation simple and while anonymity is still maintained.

 

Raza
Rank: Cave Painter
Tuesday April 8, 2008 7:02:39 AM
no ratings

Indeed security was not given a high priority in the design of DARPA Internet protocol (The design philosophy of the DARPA internet protocols ). 

This has resulted in some sort of "patching" to secure the internet. With the businesses of  virtual worlds like second life and social networks like facebook on the rise there is indeed a need for Identity enabled Internet. But the million dollars question is how to create it.

 

Many of the online businesses want as many subscribers as possible with little identification mechanisms and many of the users would not like to upload some thing like copies of their id cards etc whenever they are registering on the Internet. Phishing  attacks would make things more complex. Some articles posted in response to this article have identified to tackle this problem but I would like to see  what the world leaders in Internet and Computer Security like Symantec have got to say on it.

 

Although identity enabled Internet may be the need of the hour but I do not see it there in immediate future
Paul Whyte
Researcher
Monday April 7, 2008 4:13:03 PM
no ratings

Hi Mark,

It's great reading your take on the issue of ceating an identuty layer for the internet. Others like secondLife are also calling for the same and it's makes it very interesting to know that a company like SeconLife which thrives on anonymity is calling for this:

Second Life screams for an Internet Identity Layer

 

But my concern though is how effective will such an Identity Layer be? Will this identity layer not be vulnerable to breaches of security? With the rampant breaches of security on the internet, what guaranatee do we have of how secured this identity layer will be?

 

Creating an identity layer with directory virtualization

 

 

RPR
IQ Crew
Monday April 7, 2008 1:36:30 PM
no ratings
Given Mark's post, and increasing openness (e.g.), perhaps it is possible in a progressively evolving identity-enabled Internet that increasingly, positive forces will join together. Perhaps it is possible this will include Symantec being listed as a Corporate Board Member here
The ThinkerNet does not reflect the views of TechWeb. The ThinkerNet is an informal means of communication to members and visitors of the Internet Evolution site. Individual authors are chosen by Internet Evolution to blog. Neither Internet Evolution nor TechWeb assume responsibility for comments, claims, or opinions made by authors and ThinkerNet bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.
a moderated blogosphere of internet experts
Paul Korzeniowski
The smartphone market reached a significant milestone, a breakthrough that may cause vendors to celebrate but could strain the capabilities of IT service desks.
Maria Korolov
Maria Korolov   5/21/2013   8 comments
In the fall of 2011, around 160,000 students in 190 countries enrolled in a Stanford-sponsored online course about artificial intelligence. About 23,000 completed the course and got certificates, including 248 who got a perfect score. The university offered the same course the old-fashioned way to students sitting in Stanford classrooms. None of the those students got a perfect score.
Joe Stanganelli
As Mitch Wagner discussed today, Yahoo is acquiring Tumblr. The big Internet debate at the moment is whether Tumblr will be good or bad for Yahoo. Regardless of their stances on the future of Yahoo itself, many claim that Yahoo will somehow ruin Tumblr.
George Taylor
George Taylor   5/20/2013   10 comments
Has China stolen a march on the West, developing an Internet architecture that is not only based on IPv6, but is also inherently secure from both internal and external attack?
IETV: the thinkerNet on film
5
of
Kim Davis
Big-Data Can’t Always Sell Wine

5|21|13   |   2:23   |   3 comments


Whole Foods Global Wine Purchaser Doug Bell told me about some of the constraints on using analytics in the US wine market.
Paul J. Fleuranges
Digital Signage Keeps NYC Subway Straphangers on Track

5|6|13   |   3:51   |   No comments


New York's Metropolitan Transit Authority is conducting a pilot test of digital kiosks to guide subway users to where they want to go more efficiently and at lower cost.
Kim Davis
Fast Forward to the Future

4|23|13   |   2:29   |   20 comments


A look back at tech writing in the 90s makes us wonder where enterprise IT will be 20 years from now.
Mitch Wagner
Google Launches Its Most Depressing Service Yet

4|15|13   |   2:59   |   10 comments


Google's new Inactive Account Manager lets you control how Google disposes of your accounts when you die.
Second Shooter
Argument Over Top-Level Domains Is 'Stupid'

4|11|13   |   2:07   |   3 comments


The whole Amazon.reader debate is a double-stupid. It's stupid to think that there's any e-book buyer who doesn't know Amazon's URL, and it was stupider to let ICANN launch the whole free-form TLD initiative to start with.
Kim Davis
Ladies, Your Tablet Awaits

3|21|13   |   2:22   |   37 comments


ePad Femme is the world’s first tablet “made exclusively for women.”
Wisdom of the Big Chair
NFC Moves Into the Mainstream

3|20|13   |   2:16   |   No comments


While NFC's original goal was to enhance mobile commerce applications, it is finding its way into a number of other uses, which is creating both opportunity as well as challenges for IT departments.
Wisdom of the Big Chair
Integrating Security Into Your Cloud Contract

3|19|13   |   3:35   |   No comments


Enterprises would like to move to cloud computing but are hesitant because they are concerned about providers’ ability to secure company data. Here are some tips that help to ensure that if breaches occur, the business is not left holding the bag.
Brian Baron
How Edmunds.com Collects Customer Information

3|18|13   |   1:15   |   No comments


Edmunds separates customers into segments based on the info it collects on its site and from partners, and uses that to push out custom content, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
Brian Baron
How Edmunds.com Uses Analytics to Customize Site

3|14|13   |   0:47   |   No comments


The automotive website uses propensity modeling to target ads and customer registration forms, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
an IBM information resource
sponsored content
big blue blog
Alison Diana
Ushering in a new era of cognitive computing systems, IBM announced today the IBM Watson Engagement Advisor, a technology breakthrough that allows brands to crunch big data in record time to transform the way they engage clients in key functions such as customer service, marketing, and sales.
an IBM information resource
sponsored content
Expert Integrated Systems: Changing the Experience & Economics of IT
In this e-book, we take an in-depth look at these expert integrated systems -- what they are, how they work, and how they have the potential to help CIOs achieve dramatic savings while restoring IT's role as business innovator.

READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE!

REGISTER HERE
Wanted! Site Moderators
Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?

Please email: moderators@internetevolution.com
Internet Evolution – not for thickies
Keep Critical Data With a Knowledge Management System
Taimoor Zubair
Fortune 500 companies lose at least
$31.5 billion a year by failing to share knowledge. A Knowledge Management System (KMS) can help companies significantly reduce these costs.

CLICK FOR MORE
Yahoo Needs to Break Tumblr in Order to Fix It
Joe Stanganelli
As
Mitch Wagner discussed today, Yahoo is acquiring Tumblr. The big Internet debate at the moment is whether Tumblr will be good or bad for Yahoo. Regardless of their stances on the future of Yahoo itself, many claim that Yahoo will somehow ruin Tumblr.

CLICK FOR MORE