'The Internet was built without a way to know who and what you are connecting to.' - The laws of identity.

Kim Cameron, digital identity 'guru', this week published a simplified version of his 'laws of identity'. The original is somewhat of a milestone in online identity thinking, setting out in detail the key challenge of incorporating what it calls an 'identity layer' - basically a system that solves the problem of there being many different, competing ways that companies and websites get around the problem of finding out who they are interacting with.

I'd recommend giving the original a read. But the need to outline this area in a way that anyone - not just those with an interest in or innate understanding of the area - can read has only grown over recent years. I still feel that not many people have really succeeded in making the case in plain enough terms why people should care about particular kinds of identity systems. And how they can use them.

In FYI: the new politics of personal information, whilst it wasn't our main focus, we argued that focusing on identity in the debate about personal information is difficult but a key challenge. Still, the issue is too often seen as a data protection problem. Which is important, but partly (not only) because it fits into this broader problem of how important personal information is in shaping how institutions and organisations judge the kind of people we are.

So this is really great to see. Here are Kim Cameron's simplified laws:

• People using computers should be in control of giving out information about themselves, just as they are in the physical world.
• The minimum information needed for the purpose at hand should be released, and only to those who need it. Details should be retained no longer than necesary.
• It should NOT be possible to automatically link up everything we do in all aspects of how we use the Internet. A single identifier that stitches everything up would have many unintended consequences.
• We need choice in terms of who provides our identity information in different contexts.
• The system must be built so we can understand how it works, make rational decisions and protect ourselves.
• Devices through which we employ identity should offer people the same kinds of identity controls - just as car makers offer similar controls so we can all drive safely.

New Comment

Your Name

Your Email

Comment

Please type the word 'human'