1 / 23

Legal Nature of Digital Identity

This presentation explores the basics and legal perspective of digital identity, including current legal challenges and solutions.

sross
Télécharger la présentation

Legal Nature of Digital Identity

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Reiniger LLC

  2. Legal Nature of Digital Identity (Conference 7) Timothy S. ReinigerNovember 13, 2018 Presentation for Advanced Training in Digital Legal Documents at the University of Houston Houston, TX Reiniger LLC

  3. Discussion Topics 1.Basics 2. Legal Perspective 3. Legal Challenges 4. Current Legal Solutions Reiniger LLC

  4. Drivers of Digital Identity • Globalization and connected society • Global mobile phone availability and network coverage • Increased concerns about use of personal data • Growing market of identity service brokers • Increased cybersecurity/identity fraud risks • Increased dependency between public and private sectors Reiniger LLC

  5. Digital Documents: Proof Requirements 1. Identity 2. Integrity 3. Intent All require capability of proof over time Reiniger LLC

  6. Digital Identity: How Experienced in Law • Information Exchange/Sharing • Information Privacy • Information Security Reiniger LLC

  7. Digital Identity: How Conceptualized in Law • Identity in Law • Identifiers • Legal Identity Reiniger LLC

  8. Identity in Law Reiniger LLC

  9. Sources of Laws/Rules • Statutes/Regulations • International Codes • Lex Informatica Reiniger LLC

  10. Digital Identity Categories • Persons • Legal Persons • Non-Person (Digital) Entities Reiniger LLC

  11. Identity Credential Defined "Identity credential" means the data, or the physical object upon which the data may reside, that an identity credential holder may present to verify or authenticate his identity in a digital or online transaction. Reiniger LLC

  12. Sources of Identity Credentials Public Sector (eID) Private Sector Self-Issued/Certified Reiniger LLC

  13. Digital Identity: How Perceived in Law • Context/Relationships • Consent • Control Reiniger LLC

  14. Consent Reiniger LLC

  15. Legal Challenges • Jurisdiction • Assigning Responsibility • Cross-Border Recognition • Third Party Liability • Identity Service Providers Reiniger LLC

  16. SP/IdP SP IdP Users Users Users Third Party Liability Federation and third party bridges don’t solve all trust issues… Federating Entity A contract may not exist between all parties or may not address identity federation issues + + + User Credentials User Credential Accredited Issuer (Outsourced) Accredited Issuer (Insourced) Bridge CA Reiniger LLC

  17. Legal Solutions: The Maritime Law Model Reiniger LLC

  18. European Union Law - eIDAS • eID and Trust Services • Cross-Border Recognition/Interoperability • Liability Allocation Reiniger LLC

  19. Virginia Digital Identity Law Overview SB 814: http://leg1.state.va.us/cgi-bin/legp504.exe?151+ful+SB814S1 Provides Common Legal Framework for Identity System Participants Creates the Commonwealth Identity Management Standards Advisory Council Provides Limitation of Liability for Identity Providers and Identity Trust Framework Operators Creates Additional Relying Party Incentives Reiniger LLC

  20. Virginia Digital Identity Law: Liability Limitation Identity Service Provider Liable for Issuance of Credentials not in Compliance with State Minimum Standards, Existing Contracts, or Trust Framework Rules. Identity Service Provider not Liable for Improper Use of Credential by Holder or Any Other Person. Reiniger LLC

  21. United Nations (UNCITRAL) • Study Effort for Model Law - Principles • Functional Equivalence • Technology Neutrality • Cross-Border Recognition • Party Autonomy • Liability Allocation Reiniger LLC

  22. Digital Identity Trends • Use of mobile phones for citizen authentication • Use of biometrics for authentication • Availability of analytics for real-time and continuous authentication • Internet of things – identification of devices • Citizen/user capability for control of personal data Reiniger LLC

  23. Contact Information Timothy S. Reiniger, Director Reiniger, LLC 40 Belfield Road Cape Elizabeth, Maine 04107 tim@reinigerllc.com 804-997-9213 Reiniger LLC

More Related