The Macrosite for News, Analysis and Opinion about the Future of the Internet
Mark Bregman

What’s Possible in an Identity-Enabled Internet?

Written by Mark Bregman
4/7/2008 4 comments
no ratings
DISCUSS   Digg   Del.icio.us   Reddit   Email This   TWEET THIS

What did we fail to account for in the design of the Internet?  As the CTO of Symantec Corp. (Nasdaq: SYMC), I would be expected to say security.  It’s not. Frankly, if security had been built into the fabric of the Internet it would have curtailed its rapid growth and many of the conveniences we enjoy today.  Instead, I would have factored in identity.

Since its beginnings in the early 90s, the Internet has introduced a whole new set of words to our lexicon, like blogging, phishing, and spam; changed the way we interact, allowing people to share ideas across international boundaries in a matter of seconds; and altered the very way we purchase goods, pay bills, and even listen to music.  In short, it has permeated almost every aspect of our daily lives.

Today, we have business models ranging from online banking to e-commerce that are dependent on the Internet, an infrastructure built on a platform of anonymity.  With nearly $200 billion in U.S. e-commerce transactions taking place on this infrastructure, it’s no wonder dishonest behavior has emerged. Cybercriminals are taking advantage of the lack of an identity layer for serious financial gain, and the result is declining trust and confidence online.

This is not an easy problem to tackle.

In fact, it is hard to create the kind of trust you have in the physical world in the online world. For example, in the real world we have visual and auditory clues to identify who we are interacting with; in the cyber world the old New Yorker cartoon is true: On the Internet, no one knows you’re a dog.

So assuming we do create an identity layer for the Internet, what value does that provide?  How, exactly, would identity allow for greater collaboration, or the ability to offer differentiated, premium online services?

Since identification is at the start of every relationship -- between individuals, among businesses and people -- identity and reputation are key to the continuation of every relationship.  When businesses have a richer understanding of what their customers like, what they want, and when they want it, only then are truly personalized experiences and premium services possible.

With an identity-enabled Internet, exciting new areas for innovation emerge. For example, in the healthcare industry, privacy is critical and confidential medical information is on a need-to-know basis. And yet, imagine how identity services can assist the aging in a digital home environment.  Being able to share sensitive, up-to-the-minute medical data with certain family members, doctors, and specialists can drastically improve home-based healthcare.

Similarly, how about ensuring the protection and validity of data collected in online drug trials?  During these trials it is important that doctors remain anonymous in order not to bias the data. However, the data should still be traceable back to credentialed doctors approved to participate in a particular drug trial program.

Social networking sites are already under scrutiny to offer more protection to children from online predators.  When individuals can assert claims about their age without any verification, it becomes difficult to determine who is really on the other end of the line.  Networking sites like Facebook and MySpace could utilize an identity service to create a differentiated "space" where real identities are validated to ensure there are no imposters.  This would be a valuable, premium service that many parents would eagerly pay for to ensure their 14-year-old daughter isn’t unknowingly interacting with a 40-year-old man.

Even identity-validated email services would be attractive.  Imagine ensuring that only email from individuals with “real,” validated identities could be delivered. No spammer or cybercriminal would wittingly hand over any information that could incriminate them or their fraudulent behavior.  This would result in a substantial reduction in spam and threats propagated by email.

In the end, demand will shape and drive the market value for premium services, but only if we can infuse an identity solution into the Internet.  Solving this will not only root out bad behavior and make people more accountable for their actions -- it will help to reaffirm the trust and confidence needed to continue fueling our digital economy.

Mark Bregman, CTO, Symantec Corp.

DISCUSS   Digg   Del.icio.us   Reddit   Email This
Current display:       newest comments first       display in chronological order
FredMars
Rank: Cave Painter
Tuesday April 8, 2008 7:50:02 PM
no ratings

Back when DARPA and universities were the only hosts, it didn't matter. As the internet grew into a public medium, and as WWW and HTML came into the act, it became more difficult to handle such issues as security. In the corporate world, there were proprietary devices that prevented unauthorized access without proper credentials. And as formidable as the task may seem today, I feel that it is not insurmountable nor as costly in time or financial investment.

 The proliferation of cybercrimes stems from security issues in the code of th eindividual servers and clients. That is why companies like Symantec exist. Prior to Web and html browser, most viruses were passed on floppies.

 Today we have broadband access at speeds that can handle streaming video, so the barriers to strong encryption and authorization identity is a matter of software and not infrastructure. And using an older concept, tunneling protocols that imbed sensitive data within an innocuous stream of not so sensitive traffic. Extremely strong encryption algorithms and fingerprint identification can make authorization validation simple and while anonymity is still maintained.

 

Raza
Rank: Cave Painter
Tuesday April 8, 2008 7:02:39 AM
no ratings

Indeed security was not given a high priority in the design of DARPA Internet protocol (The design philosophy of the DARPA internet protocols ). 

This has resulted in some sort of "patching" to secure the internet. With the businesses of  virtual worlds like second life and social networks like facebook on the rise there is indeed a need for Identity enabled Internet. But the million dollars question is how to create it.

 

Many of the online businesses want as many subscribers as possible with little identification mechanisms and many of the users would not like to upload some thing like copies of their id cards etc whenever they are registering on the Internet. Phishing  attacks would make things more complex. Some articles posted in response to this article have identified to tackle this problem but I would like to see  what the world leaders in Internet and Computer Security like Symantec have got to say on it.

 

Although identity enabled Internet may be the need of the hour but I do not see it there in immediate future
Paul Whyte
Researcher
Monday April 7, 2008 4:13:03 PM
no ratings

Hi Mark,

It's great reading your take on the issue of ceating an identuty layer for the internet. Others like secondLife are also calling for the same and it's makes it very interesting to know that a company like SeconLife which thrives on anonymity is calling for this:

Second Life screams for an Internet Identity Layer

 

But my concern though is how effective will such an Identity Layer be? Will this identity layer not be vulnerable to breaches of security? With the rampant breaches of security on the internet, what guaranatee do we have of how secured this identity layer will be?

 

Creating an identity layer with directory virtualization

 

 

RPR
IQ Crew
Monday April 7, 2008 1:36:30 PM
no ratings
Given Mark's post, and increasing openness (e.g.), perhaps it is possible in a progressively evolving identity-enabled Internet that increasingly, positive forces will join together. Perhaps it is possible this will include Symantec being listed as a Corporate Board Member here
The ThinkerNet does not reflect the views of TechWeb. The ThinkerNet is an informal means of communication to members and visitors of the Internet Evolution site. Individual authors are chosen by Internet Evolution to blog. Neither Internet Evolution nor TechWeb assume responsibility for comments, claims, or opinions made by authors and ThinkerNet bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.
a moderated blogosphere of internet experts
Dan Cypra
Dan Cypra   11/20/2009   3 comments
A picture is worth a thousand words, or so the old saying goes. So understanding how to use images in e-newsletters effectively is quite important. Here are a few tips to ensure that your images in email newsletters work to your advantage.
Gordon Haff
Gordon Haff   11/20/2009   1 comment
Arms merchant or army? That's a fundamental question for vendors in the cloud computing space. Do they just sell their tooling to any and all comers, who then become the actual purveyors of hosted infrastructure, developer platforms, and software? Or do they offer their own cloud-based services, perhaps even keeping much of their technology in-house for competitive advantage?
Mary E. Shacklett
With the value of toxic assets on the rise, large U.S. and European banks face many challenges on the road to recovery. Sharing key information may help these firms effectively track the way forward.
Matthew Fraser
Matthew Fraser   11/19/2009   5 comments
Most of us go through life knowing that we’re expected to learn from our mistakes and improve. Those who are more conscientious about learning and personal improvement usually reap greater rewards.
Mike Moran
Mike Moran   11/19/2009   12 comments
Marketers are known for exaggerated claims and stretching the truth just a wee bit. But most marketers I know truly believe in what they sell. Their aggressiveness is based on a confidence that what they are promoting truly benefits the customer.
IETV: the thinkerNet on film
5
of
2pm EST
Tue
Dec 1st
an IBM information resource
sponsored content
big blue blog
Todd Watson
Todd Watson   11/20/2009   Post a comment
While Google introduces its new Chrome OS (which I'm hearing will be widely available in one year?  Did I mishear that?), IBM announced 10 new products today to help companies using IBM System z mainframe technology.
white papers & case studies
an IBM information resource
sponsored content
Smarter Collaboration: How to Thrive in a Challenging Business Environment
Market conditions are changing faster than ever, and organizations need to improve their agility and adaptability in order to provide better service and improve processes. The ability to work with customers, business partners, and employees as effectively as possible - while at the same time holding down costs - is a key to success.

READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE!

REGISTER HERE
Wanted! Site Moderators
Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?

Please email: moderators@internetevolution.com
Copyright © 2009 United Business Media Limited - All rights reserved.      About Us  |  Privacy Policy and Terms of Use  |  Contact Us
CMP Media LLC
Internet Evolution – not for thickies
what.the.ferraro
Facebook Lacks Social Skills

11|20|09   |   1:53   |   1 comment


Facebook's 'Suggestions' for users demonstrate how little social networking sites understand about true social relationships.
Singer at C-Level
Smart Grid Opportunities

11|20|09   |   2:49   |   No comments


Industry initiatives and government stimulus funds are giving enterprise software vendors a great opportunity to help build out and manage smart grid technologies.
Tom Nolle
Total Telephony Transcends Telepresence

11|20|09   |   2:11   |   2 comments


The problem with telepresence is that it's not universally accepted, because video calling isn't. While we can all do video calling, we also apparently worry too much about how we look. If we want HD telepresence in our future, we have to dress down, mess up our hair, and dive into our online life.
what.the.ferraro
ThinkerNet Wins Min's Award for Best Blogs!

11|19|09   |   1:13   |   4 comments


ThinkerNet wins the Min's award for 'Best Blogs' – Internet Evolution's fifth award this year!
Full Nelson
SanFran.gov

11|19|09   |   8:51   |   No comments


Fritz has an exclusive talk with the mayor and CTO of San Francisco about that city's latest e-government efforts.
Robert D. Atkinson
America Has Much to Learn About Digital Piracy

11|18|09   |   2:09   |   No comments


The US loses about $20 billion a year on pirated software, movies, and music. But public policy can help stem the tide of digital theft. For example, France has recently passed a 'three strikes and you’re out' law, whereby if after two warning letters an individual continues to download pirated software then his Internet access will be cut off. US policy makers should consider adopting similar policies.
Singer at C-Level
Connecting Stakeholders: Part 3

Part 3 of 3   |  
See complete series
11|18|09   |   2:09   |   No comments


Financial management planning does not need to include Voodoo economics, but it does help to tap into the knowledge base of your team through some sort of real-time system. We explore your options.
Reiter's Block
Tweeting for Customer Support

11|18|09   |   2:20   |   No comments


When Reiter gets incensed over incompetent Verizon FiOS order-taking and support, he broadcasts it via Twitter. Did it do any good? How should your company offer Twitter support? Watch this for all the answers.
what.the.ferraro
Dogster.com More Popular Than Gov 2.0

11|17|09   |   2:05   |   1 comment


A lot of attention is being paid to launching Gov 2.0 Websites, but these sites aren't attracting a lot of visitors.
Reiter's Block
Is the BlackBerry 9700 'Bold' Enough?

11|17|09   |   3:07   |   4 comments


The successor to the BlackBerry Bold 9000 – the Bold 9700 – will be available soon in the US. Is it worth upgrading? Reiter's got one, and offers advice.
TechWeb The Global Leader In Technology Media