I think it's, it's the first time in my speaking career that I actually get extra time. This is good. So we are gonna switch topics. I think it may be a little bit.
My, my talk today is about designing for industry 4.0, and there's a reason why I'm giving this particular talk at this particular forum. It's where I'm at. Now. I spent the past 20 years in consulting. I recently as the chief security officer global chief security officer at Deloitte and I retired and went into full-time academia. I'm now a Dean at a university in South Korea, which just had its election. So I'm watching that closely and imagine, be very fun when I return.
But my job now is to teach the next generation, the next generation of students who will enter industry who need jobs to not just think about identity management in particular, but also the things around it in particular industry 4.0, which really has a huge impact on where things are going in terms of not just manufacturing, which often it's associated with, but lots of other things, smart cities and, and, and things that involve the industry.
The, the internet of things, industry 4.0 is Des is really intended to change a lot of things.
If we think about China, for example, which is oftentimes cited as the factory of the world has actually put out an industry 4.0 strategy, which says it will change dramatically. All of its factories to include automation, to upskill its workers, to include new technologies, such as robotics, blockchain, and all of those things. Industry 4.0 is a term was invented right here in Germany, as they've seen it, impacting their GDP in a tremendous amount, in a tremendous way.
So for me, I was moving beyond my consulting career of just focusing on personal identity management to this new space, which also includes the things that we own, the things that we are associated with. I often talk to my students and ask them, you know, how many things do you own that have something associated with you?
And it's quite a few, it's quite a lot. Actually some industry Analyst suggest that by the end of this year, it'll be more than a hundred. Your smartphone, your car, your TV, your refrigerator, all those things at work, etcetera.
And those are the things that we tend to then bring together in industry 4.0, and it has a huge impact. What it also says to industry practitioners like yourselves, who are experts in this field of identity management that we may need to think beyond just the person that we now need to think about the person and the person and those things that they're associated with.
The things that do things on behalf of them, that you're delegating things to technology last year, it seemed impossible that a refrigerator could actually hack someone actually occurred last year, that on behalf of an owner, a refrigerator was compromised.
It was actually doing things by itself. We are now seeing this sort of indu interesting translation of what delegation used to be.
I thought this was an interesting chart, cuz it frames kind of what we're talking about that every 10 year cycle brings 10 times the amount of connected devices it's really underscores what we just, what we were just talking about that is beyond the person. And if you imagine what this, this chart would look like in another 10 years, it's really exponential. So in some ways it says the conversation that we're having needs to extend beyond the person and to the point of the presentation. I'm also a real huge advocate of design.
I was really intrigued by this quote by Herbert Simon, that everyone designs who devises course of action aims at changing existing situations into preferred ones. It really says that if you're not mother nature, you're designing something on this planet.
The things that we put into place, it says that we get to change our existing situation into preferred ones. And that includes identity management. How we look at the world, not just the identity of the person, but the things that it's associated with.
So I wanna take a on a, on a little journey through 10 areas that are really intriguing to me. Not that I have all the answers.
In fact, I think the answers will come out of the smart people in this room, but I think it does change the conversation just a little bit. And that's worthwhile. First of these is thinking about swarms. It's a term that used to apply to other things, you know, mother nature and bees and those sorts of things. Drones now are really picking this up in a big way.
China, a, another example are, are really perfecting this technology, not just for warfare, but actually things like agriculture.
And now we're seeing that we can apply it from beyond drones to actually harnessing the collective intelligence of individuals to make, to make large decisions we couldn't do before this year for the academy awards they took out of the 15 categories. They took experts and asked them to predict the, the winners, the experts predicted eight of the winners through swarm technology, asking non-experts those non-experts predicted 11 of the winners.
We're able to harness collective intelligence. We're able to bring together those, those thoughts and individuals that we couldn't before on that flat planet, on that flat world. That's interconnecting with devices and, and technology through the internet.
The second of these is APIs.
Again, in the past, maybe this was exclusively a programmer's domain, maybe a program is problem and API. At least that's how I thought of it. An application programming interface. Now we're seeing this even as the new middleman and why this matters.
We're now seeing that the experts one global bank in New York is actually using APIs as a way to not just have rooms of people sitting there waiting for the phone to ring, to answer questions, but having that collective knowledge distilled into an application programming interface, an API that then not can be, can be used, not just for one application, but many applications, not just for one company, but many companies. Now we are starting to distill this technology into, into technology and, and knowledge that everyone can use.
Now it has become the new middleman, whereas before it was a person, a person was the, was the middleman.
Number three is AI as the new UI artificial intelligence as the next user interface for, for me, I thought this was a little bit startling in some ways that we have moved so fast in the artificial intelligence world that we're now even beginning to say, we have to use it as the design pole in the tent with a, the centerpiece of how we design our programs, that it can't be just designing for a person on the other end of this, or a person originating this or person in the middle of this, that now we're seeing the artificial intelligence just as we've seen from swarm technology or, or the distributed thought process we saw before.
But now we've seen artificial intelligence being at the distributor of that knowledge and the collective gathering of that knowledge. We're now even seeing that UX user experience that goes with UI as a necessity for how are we going to design for artificial intelligence when it's giving us the answers?
A great example of this is all the bots we see now, the chat bots and those sorts of things. It's now replacing those experts that we had before answering those questions, but we now need to design for how do we interface with them and what is the identity of them?
How do we know that they are trustworthy? These are really other interesting questions that we have not figured out yet, but AI becomes something that now factors into the UI that the user interface that we did not know about that we not, not experienced that we not factor into our equation before. The fourth of these is informatics is the new Latin, Latin Greek Gothic being the three languages that actually underpin all of the world's languages. So what underpins the language of business?
Now, we're now seeing in many ways it's described as data and data in a smart way being informatics.
And now that we view information and informatic as so critical, so fundamental to business. Now we see this as the new Latin of business, and it matters again to identity management professionals because we have to see, do we give identity to discrete data elements? How do we protect data as it flies around the internet?
Can we go on the old assumptions that and information is generated by one person and we can control that identity of a person and the data that belongs to them, or is it much broader than that? Informatics now plays a, a brand new role. Informatics also plays a brand new role in how we approach identity management. What are the acceptable levels of biometrics, for example, and the trustworthiness of, of, of that. Are there other new technologies that we can use that maybe we didn't think before was a, was a, an important factor in, in, in identity management?
The fifth of these is what I call H to H we know about B2B. We know about B to C. We know about M to M machine to machine. Now we're getting to human, to human H to H and personal area networks. The fact that we now have clothing with sensors in it, we have the first designs and prototypes of contact lenses that can interfaces with our bodies. We have pills that we can swallow to actually monitor our, our health and on and on and on. We have these things which are creating our own personal area networks around us.
And so now we have a new factor in identity management, which is human to human. When I have that health information inside of me that a doctor needs to know, how does that, how does that connect? How does that work? What does the trustworthiness of that?
When I have the contact lens that can actually tell me things and sense things that now are, are in and around me, how does that interface with the, with the things around me and what is the trustworthiness trustworthiness of that? But beyond that, I think it is a good question for identity management to say, what is the big enabler here?
You know, I think I've been guilty in the past as being, you know, a security professional of being doctor. No, right. We need to be, how do we get to, yes. How do we say we can do this? And for H to eight, it's really important that we are able to connect. We're able to share this information because H to H personal area networks are going to be so critical to the future of, of many industries. Voice is the new platform.
It's interesting what we've seen out of Amazon, for example, and Google and, and many others that now we're seeing that the ambient nature of our lives and what we do and say in particular now becomes a platform that can be used for lots of other things.
It's interesting, the Alexa device, just the basis of that, that it sits in a home it's listening. There's lots of pros and cons to this. I get that, but the fact that we can have an ambient listening element to our lives, and it becomes a platform to do things on our behalf.
The fact that we don't have to always ask for a movie ticket or a dinner reservation, or that we might want to order something that somebody already heard the conversations in our lives and could put that together is something that we will probably expect as just the basics of, of what we'll see in the future. But what that means is voice. Isn't just an add on, like, it used to be voice used to be very difficult. Now it's becoming a platform for other things to be layered onto. And now we see that as a real interesting identity management challenge as well.
How do we extend that even farther and back to the trustworthiness and the usefulness, how do we make identity management work? When voice is the new platform hyper local, it really says that as we extend all this across this flat world, as we get all these devices, internet of things, these things will be proliferate everywhere that they will also have a, almost a self described identity. They will know themselves, they will know where they are, what they're doing their health, and they'll be able to talk to other devices in around them and even far away to say, here's what's happening.
And it's really an interesting conversation then to say, where does that go? In terms of the, the, the collective intelligence, where does it go in terms of identity management at a very, very discreet level? Where does it go in terms of the data produced by those, and how do we associate those with a particular device? Do we protect that data differently than generated by a person?
But it it's, it's really important to think about the hyper localness of this, as we think about the scale of this as well, that everything will be small, but everything will be collectively large as it gets exponentially put together for various uses.
We also think about just in time innovation, it's a, I'm a big innovation advocate. It's what my doctorate was in. And really, as we look in the past, it was about long cycles of innovation, how one company beat another, and we've gotten better at it.
We've gotten technology rapidly, innovates, et cetera, but we're now starting to see an element that we didn't see before. And a lot of it's enabled by identity management, that it has a specific scope to it. But now we can see things like the self-driving car, that self learns that knows where things are that knows how to turn left.
And right, that sees a paper bag in the road and knows that's not a rock that's okay to drive over that. It's, it's innovating all the time as it drives, as it goes, we're seeing artificial intelligence do the same thing.
It learns all the time. And so we also then think about for this just in time innovation, how does identity management scale with that?
So we don't have to stop and reauthenticate each and every time that it actually has a measure of trustworthiness to it as the iden, as the artificial intelligence and collective intelligence comes together with that just in time, innovation is going to impact a lot of companies. If you think about GE for example, describing itself as a data company, we'll see more companies describing itself that way, informatics being the new Latin and having a just in time innovation element to it, which says all those things underneath it need to just work.
I had an Analyst tell me probably about 10 or 15 years ago, security ought to be just plumbing. And when he said that my heart dropped, I thought, my gosh, he's right.
And I don't have a career any longer. I'll be out soon. It turns out that he was right directly, but it takes much longer. It takes a lot longer for us to get this plumbing in place. So it just works. So we can have the just in time innovation that we need, the ninth of these that we're really thinking about and what we're researching and talking to my students about is the new organization.
There's a great Ted talk, does work have to occur at work? You know, there's some truthfulness to this, right? That why do you have to be at a certain place at a certain time at a certain location to actually come up with thoughts, right. To do work for a company. There is research that says there are the connectedness that water cooler moment, that sharing information is useful.
So I get that, but we started to think about this at my last employer that maybe the new office is right in the Palm of our hand, that as we're walking around that mobile phone is what we interface with and do things with to actually create that new organization of the future.
That starts to incorporate all those things I talked about before the swarming intelligence, the collective UI that we need to interface with.
But, you know, some would call this the gig economy. Some would say, this is the free, free condemnation, those sorts of things. But it does say it'll be a lot more connectedness than we saw in the past. It'll be expected. And as we go even farther and we solve this, bring your own device problem. And the enterprise, we will see that new organizations will pop up, come together and disband even more frequently than we ever imagined. And it does stretch the boundaries of what we know as identity management.
And last of these for me is the four PS, not the marketing four PS, but we really are moving away from being reactive problem solvers across all industries, moving from reactive to proactive, to preemptive, to predictive, to prescriptive that we can actually move along this chain from reacting to things, to getting in front of this, to actually inter predicting to preempting problems before cuz we've seen this to predicting it because all the elements exist that says this condition is going to actually produce that outcome and prescriptive that we have all the elements with us to then come up with a answer before we need it.
Those elements, those four PS of moving from reactive to proactive, preemptive, predictive, prescriptive are the elements that will enable us to solve problems in a different way. And I would suggest that this will also impact our field in identity management in a new way as well. So hopefully that gave you just a few more things to chew on. That gives you a little bit of insight because I know that in the future, the one thing that we collectively we have to solve is ID management for this, the scale of things that I just talked about.
And I think when we do that, we will have a really bright future. So thank you very much.
Thank you, Jr. Was a great overview. So what would be your, you mentioned this though, there, there will be changes for the identity management space. Yes. What do you see? What needs to change to support these changes?
Well, I
Think the first thing, you know, this, this, we probably have all grown up with this notion of CRM. You know, it's a, it is probably a good moniker to, to frame the problem around that. We have a person and you as a person are known to an organization through a series of numbers and things in a database, and we know you, right. We don't know you and all your stuff and all the things you're associated with.
And that's the thing we haven't figured out, but we have to move away from, I think the notion of CRM or a personal identity as that's where it stops, cuz that's all we've known for a very long time to there's a whole world behind you. And that's where we have to get to identity management as well.
But isn't, isn't it my choice, whether I want to, to open up all the, my different other identities.
So to say,
Well, that's part of the problem is, and solution is what, you know, we're very good at this as human beings. If I asked you for your ID card, now you'd say, who are you?
Why, why do you want this? You know, tomorrow when you're buying a new card, you'll give it to me freely. This context changes, right? We're not good at that.
And the, and online space that that context is, is known to the situation, whatever that is. So yes, you'll be able to, you need to control that information, but how it occurs is a very difficult problem space. It's contextual.
Okay. Interesting. Thank you very much. Thank
You.