Event Recording

Eve Maler - The Evolution of Identity and its Importance for our Digital Lives


Identity is as old as mankind and adapted very well to its changing environments. From a simple look that determines who you are to a high frequency of multi-factor vehicle-to-vehicle authentication in autonomous driving - with Digital Transformation, Identity in digital form has become the enabler of complex horizontal value chains and ecosystems. Without authentication, authorization, and consent, those digital ecosystems of our every-day journeys will be less secure, less convenient, and less beneficial. The “consent" part most especially needs new thinking - from pure protectionism to enabling benefits for both individuals and service providers.

So you're talking about the evolution of identity and its importance for our digital life.
Indeed. Thank you so much return. So my topic, my topic tonight, my actual topic, maybe it's surprise because you can't tell from the, from the title I'm actually gonna be talking about. I'm gonna be giving you a journey through digital identity, sort of a past and future history of digital identity. And I'll give you that journey by car. There will be no blockchain in my talk. So that'll be perhaps a respite from the earlier section, but I was glad to see that Jackson was talking about IOT as he does. So we'll have a little bit of a keynote module here. So I wanna talk for a moment about what customers want. What do customers want? Anybody here watch Eurovision couple nights ago, anybody a fan, all right, all there's one person. You should check out the winner. She was awesome. She had this song. I'm not your toy and customers. They do not wanna be your toy. They want what they want. They want transcendent experiences. They actually want privacy in the manner of choice and control. They want trust. And I will bring some proof points to bear to convince you of this.
So how do you know if you're trusted as a business? Well, they'll tell you, so the mobile ecosystem forum did a wonderful survey about consumer trust, and it turns out that over half of consumers consider bad experience, bad user experience to be an important contributing factor to having trust concerns. And 88% of consumers will take action in ways that will really disturb you when they have trust concerns. So for example, they will warn family and friends and they will warn their social media contacts. They will switch to other services. Okay. They will leave bad reviews. We all know the stories about that. Maybe some of us have done that and they will delete applications. So now in the world of automotive, we know that car manufacturers are racing to keep up. So what does that mean? It's a, it's a challenging and exciting time for cars and other vehicles when you mix them with data integration and the world of identity has actually been doing a lot to, you know, it's got a lot going on, but I submit to you that identity.
And in particular, the consent part of privacy has a lot to do to become more sophisticated, still in order to do a really good job. So borrowing from a nearby attraction and choosing a lens of digital identity. What I'd like to do is actually propose to you that there's really three eras of interest when we look at automotive plus data together. So the first era is the offline era. Anybody remember those days, anybody know when easy writer actually came out late sixties, 6 69, 69. Of course, this was a very, very long era composed of decades, but I'm gonna define this era as being when cars didn't even have smartphone jacks. Okay. So, so we were digital at home for part of this period, but we'd climb into our cars that were fully analog.
Now that means that we were buying cars as basically singular packaged goods. Like we bought so many other things, including by the way, GPS devices for the latter part of that era, you could just walk in and anonymously, plunk down, you know, cash and buy a GPS device if you used it. But even prior to that, you'd use a map or you'd go to map quest or something and print directions, and then pull that into your car and use it. So the use cases you had were wander around in your vehicle and have a good time, or you could go from point a to point B using your very analog experience. Now, what did identity do during this era? Well, frankly it was of low maturity. We didn't even really call it identity for a really long time. As Kim pointed out internet was born without an identity layer.
Okay. I was there for the birth of SAML. Did you ever really notice the name SAML doesn't have an eye in it? It's about security and directory. At least it was when it was born. So we had login accounts. It took a little while for us to understand what our business was here. So that was era number one, era. Number two. Is there anybody here who doesn't actually have a connected car for, for their daily driver? Okay, good for you. All right. So you're one of those who would be driven around in an autonomous car when they pry your steering wheel from your cold dead hands. I'm guessing. Awesome.
So this era is defined by four things, the appearance of connectivity services, sharing and autonomy. So get a load of this quote from KPMG 85% of auto execs agree that the digital ecosystem will generate higher revenues than the hardware of the car itself. So we're talking about subscriptions, right? I mean, I bought a car in 2016 and it came with a SIM card. So yeah, I've got one of those. So yes, we call this connected car, but there's actually a bundle of new names that this sector is going by now, new mobility, smart mobility, urban mobility, or just auto mobility, all one word.
So what we're talking about here is it's integration of maps for one music, parking with garages, all these things that we sort of, you know, saw, saw imagined by manufacturers a decade plus ago is, is really happening. So what's essential to do this APIs. It took the API economy to do this identity. What fuels all those subscriptions, internet of things, and frankly, customer consumer identity is really a part of this. So the maturing of the identity world partly led to the possibilities here. Now I wanna deep dive for a second into the experiences that I was talking about transcendent experiences. So I recently saw a talk by this fellow. He's got this book coming out, the blue dot consumer. What does he mean by the blue dot? Well, in the offline world, if you were navigating by map, you traced maybe with the finger pencil on a map, or if you use printed directions, you'd go, you know, sort of turn by, turn down the paper.
Well, now the way we navigate is the blue.is where we are. We are the center of the universe. Literally, he's talking about the experiences that we all demand. That's. This is us, he's talking about, we feel it, right. We demand that kind of service. And so what this means is we demand the most amazing experiences in a context of GDPR. I'm gonna say it. He described this one experience. I don't know where it was. It was maybe somewhere in Europe where you could, no, it was actually, it must have been somewhere in the UK, cuz I think it was for five pounds you could get, it was a simple grilled cheese sandwich. And if you stood on an X marks, the spot somewhere, they would like text the place to you. You would get your customized grilled cheese sandwich and they would put a little parachute on the sandwich and it would WAF down to you.
So it was the perfect combination of digital to physical. Okay. This is the world we live in now. I was like, okay really? But these are the awesome experiences that this fellow talks about. So in this context, we have to figure out how to do this in the automotive world. Well, it's different from just using an app because your phone is a very one-to-one experience. It's intimate and personal to you. It's not precisely single user, but it acts that way. But cars, not so much one owner, perhaps many drivers, especially with car sharing. So you have to figure out how to have whatever the personalized experience is. Follow you. So kind of like cloud sync, you know, like iCloud or something, but physical. So that's an implication of what identity means when mapped to this connected era, but then what about privacy?
So can't go in backseat. Can it, so I, I found this really interesting study by an organization called FIA region one. So the name of it is in French. I won't attempt it, but it's basically the international association of automobiles for the EMEA region. And so they have a, an effort called my car, my data to promote the knowledge. That pretty much almost every piece of data associated with a connected car is personal. They did a legal study and found out that indeed that's true. So oil gauge says your oil is low. It's considered personal data because the car is registered to you. What about that? Huh? So whether you really like driving or whether you like being driven around in an autonomous car or whether you like a chauffeur. I think Ralph was talking earlier about a hundred years ago. There was a short of, of chauffeurs and we'd all be in trouble.
Customers want data control put in their hands. So this was a study by the economist intelligence unit that for rock actually commissioned and there's fascinating stuff, more fascinating stuff in there. You can go to our website to find it. So what's the next era. What's the third era gonna be the seamless era. We're almost there. I can just taste it. So this is a lifestyle lifestyle. And the funny thing is it's starting to mean that automotive becomes not so much a vertical sector as horizontal across sectors. It's gonna require. We can see where it's going, integration across payments, retail, health, government insurance. We were learning about insurance earlier today.
So, you know, when I was talking about APIs and IOT and talking about identity, that's just the tip of it. So here's just a glimmer of some of the disruption and some of the opportunity that is possible. You allow access to your trunk, to the dry cleaning people for pickup or drop off of a suit, confident in the knowledge that your car is not gonna be stolen or you earn quite a lot of money on the side from sharing of your car, through your Airbnb rental, as part of the package, confident in the knowledge that your glove box won't be gotten into or payment for tolls and goods can come out of the right account because it goes by driver, not by owner or your car negotiates with all of the smart city interfaces regarding road use and parking dwell time. And the purpose might be for safety metrics, or it might be for health of the particular driver, but the data might be de-identified appropriately. So all these things could be possible, but wait, how, how, how can this all be done? Sounds an awful lot. Like I don't know, star Trek or something where suddenly they're interfacing with the ship of a previously unknown alien species. Like really? So among all the challenges a and there's a lot of challenges. Like for example, urban mobility I mentioned is one of the names.
Well, urban mobility is not yet rural mobility, frankly. So that's one, but there's two challenges here that we can take action on. Now that they are eminently solvable. The first one is we actually need to start managing identity relationships properly. This is not your grandfather's identity and access management anymore. The more identities you need to manage, the more significant the relationships among them become. And so this is nodes and arcs we're talking about here. And so we're talking about a lot of nodes and a lot of node types. So let me give you some examples here. Well, you got people and these people include owners, maintainers, drivers, renters. And by the way, the subscriptions that they have the entitlements, they have the consents they have. We're also talking about actual cars or other vehicles.
And these are ecosystems. Of course, they have lots of parts. We're talking about cloud services, not just one service, multiple services, we're talking about sensors. So that's what makes up an ecosystem of a car. And those have identities and versions for each of those pieces. We're talking about software, those have identities and versions, and we're talking about infrastructure and all these things connect. And so infrastructure to give you some idea of what those might be. Traffic lights, garages, signal towers, billboards. That makes me think minority report. Okay, what's the second challenge we need to take up. We need to really refactor consent for the seamless era. This is really, really important. Okay. Look at these use cases, they involve vehicle to vehicle communications. They involve vehicle to infrastructure communications. They involve vehicle to cloud communications about some user in real time, often regarding physical safety and security. So you can't go wrong with that. But what about GDPR requirements? I hear you say, cuz it's come up in the last few talks and people are starting to anticipate and that's near and dear to my heart. And it isn't just about lawyers. It's also about trust.
And what about user control? What about people's express desire to have control? Well, here's where I say you gotta do a few things. You need to empower people to express their wishes, asynchronously to when the communications have to happen and you need to enable those wishes. Let's call them policies to be handled by a specialty engine that knows how to scale. And this actually allows for automation that is so, so important in this environment. So I'm gonna say this is not implied consent. This is actually abstracted consent. And by the way, a much better experience than pressing like a rat at a feeder bar. Yes, I agree all the time. So what I'm describing here is actually a perfect fit for you may not be surprised if it's me here talking the architecture of user managed access, which has a killer combination with identity relationship management and the way that for example, graph databases, work, and most excitingly, this can enable a big data and AI approach there.
I said it too. That's three in a row. I don't know if our arrangers here at the, at the event knew this was coming a big data and AI approach so that you can start to have consent intelligence work on behalf of the actual individual. That is to say, you start to have big enough datasets that you can take consent actions with the prearranged okay. On the individual's behalf. So I have very little time left and I'm just gonna wrap up here, but I hope I've given you some new thoughts towards this exciting area and how identity is so critical to it. And I will let Martin take over. Thank you.
So thank you for your talk. Being from Stuttgart automotive is always interesting
To me. I thought it might
Be so thank you for that. So when I looked, we didn't have questions, so we, oh, there's one. Do you see that the whole world are connected in the future and people so will this really happen?
So I found some statistics talking about, you know, it's kind of a sliding scale where these eras really start and end. Okay. Because for example, in the us, I found some evidence that there's 200 million cars with an average age of 11 years of age. So, you know, you've got some cars that are gonna remain non-connected for a long time there. Yeah. Now I'm speaking as somebody whose husband has a car hand built in Erol. So not very long ago.
And maybe if you don't want to get connected at the end of the day, you have to buy an old Porsche or roll because they have the longest lifetime of all the vehicles. Yeah.
So, I mean, I think, you know, in a long enough lifespan, yes, connected becomes the default. You know, I found other evidence that, you know, within just a few years, 75% of all new cars will be connected. So again, sliding scale of these eras, but you know, in a long enough timeframe. Yes.
Okay. Thank you E my.

Video Links

Stay Connected

KuppingerCole on social media

Related Videos

Webinar Recording

A Comprehensive Approach to Solving SaaS Complexity

As businesses adopt cloud-based services as part of digital transformation programs to enable flexible working, boost productivity, and increase business agility to remain competitive, many IT and security teams are finding it challenging to gain oversight and control over the multitude of…

Analyst Chat

Analyst Chat #135: Can DREAM Help Me Manage My Multi-Hybrid Infrastructure?

The IT environments have become complex, and this will not stop as more technologies such as Edge Computing start to take hold. Paul Fisher looks at the full scope of entitlements across today's multi-hybrid environments. He explains how this new market segment between the cloud,…

Webinar Recording

Multi-Cloud Permissions Management

Most businesses are adopting cloud services from multiple providers to remain flexible, agile, efficient, and competitive, but many do not have enterprise-wide control over and visibility of tens of thousands of cloud access permissions, exposing the enterprise to risk of security breaches.

Webinar Recording

Erfolgreiche IAM-Projekte: Von Best Practices Lernen

Häufig beginnt die Suche nach einer Identity-Lösung mit einem ganz konkreten Schmerzpunkt im Unternehmen. Ein nicht bestandener Compliance-Audit wegen überhöhter Zugriffsberechtigungen, technische Probleme, wegen komplexer Systeme frustrierte User und eine…

Event Recording

The Role of Managed Security Service Providers (MSSPs) In Your Future IAM Application Landscape

Trying to “do identity” as a conventional IAM or Security workload with in-house resources and vendor platform deployments may not satisfy identity and access today’s requirements for IaaS, PaaS, databases and other cloud infrastructures. There are now a growing number of…

How can we help you

Send an inquiry

Call Us +49 211 2370770

Mo – Fr 8:00 – 17:00