Intuition 백서 전문

nd us. 2.2 Identity Every entity and concept - be it a person, an organization, a word, a product, a restaurant, a mathematical concept, etc. - has an identity, which serves as a conceptual anchor to which we attach and correlate data, experiences, and perceptions. ‘Identities’ also serve as a conceptual anchor where intersubjective data, expe- riences, and perceptions can commingle and converge. With this, identities act as the organizing principle that brings structure and context to data, transforming it from an undiﬀerentiated sea of information into a comprehensible and actionable resource. This foundational concept is crucial for establishing trust. Trusting an entity requires clear diﬀerentiation from other entities and a suﬃciently-comprehensive dataset about it. As such, in pursuit of trust, a core focus must be on the identity of “things” and the development of systems that simplify how users intuit the nature and intentions of those things. 5 Figure 2: Dr. Will Abramson, ‘Experience’, https://iiexhibition.studio/exhibit/2 To conceptualize the concept of identity, the ‘true identity’ of an entity may be thought of as the ‘Form’ in Plato’s Theory of Forms, representing the universal qualities that deﬁne it. From this philosophical concept, we derive, create, nurture, and evolve practical, relative, and contextual ‘identities’ that serve as our avatars - to ourselves and to others - as we navigate an increasingly-interconnected world. For example, a person’s true nature may diﬀer signiﬁcantly from a digital ‘identity’ they curate for themselves, and to represent themselves, on platforms like Instagram, LinkedIn, or Twitter. Consequently, the identity models constructed by people and platforms observing and attempting to understand that person are not holistic, much like fragmented rays of light passing through a prism. These models, though simpliﬁed and reductive, are constructed from available data to help interpret an entity’s nature and role. The richness and eﬀectiveness of our interactions with any entity directly correlate with the depth and breadth of data we possess about it. For example, understanding a person’s historical reli- ability can enhance trust and facilitate smoother transactions, while familiarity with a device’s functionalities can lead to more intuitive usage. However, it is important to acknowledge that most identity models are imperfect representations of the true nature or identity of the entity, constrained by the available data. A few interactions with a person, for example, cannot fully encapsulate their true identity. Yet, often, such limited data is all we have to inform our judgments and assumptions. The digital revolution has signiﬁcantly expanded the scope of available identity data. Platforms such as social media have increased access to personal information, while IoT devices and online services provide detailed data about objects and their usage, weaving a more interconnected societal fabric. This enhanced data availability has enabled the construction of more detailed identity models, improving our ability to understand and engage within society. Despite these advances, digital identities remain fragmented and reliant on the platforms that create and store this data. Moreover, a signiﬁcant amount of identity-related data remains unexpressed, preventing a comprehensive portrayal of our true selves in the digital realm. This fragmentation limits our ability to form a holistic understanding of entities, and in turn, to interact with these entities successfully. The move towards a more uniﬁed and open approach to identity data could revolutionize how we interact with the world around us. By expanding and reﬁning the data we collect and improving how we model identity, Intuition aims to provide a more accurate, trustworthy, and intuitive experience in all of our interactions. 2.3 Trust & Identity in the Digital Realm The intersection of identity, data, and trust in the digital realm reveals a nuanced and evolving landscape. While core principles of trust remain consistent, the environment for establishing and maintaining trust has 6 Figure 3: Dr. Will Abramson, ‘Digital Mediation’, https://iiexhibition.studio/exhibit/10 transformed dramatically. Data has emerged as the primary currency of trust, fundamentally reshaping interactions, transactions, and relationships in unprecedented ways. The digital ecosystem is a vast network of interconnected platforms, services, and networks, each generating and processing immense volumes of data. This data, ranging from user-generated content and transactional records to behavioral analytics and algorithmic insights, forms the foundation of digital trust. Unlike tradi- tional settings where trust is built through direct, tangible interactions, the digital world relies heavily on digital signals and data ﬂows to mediate trust. Trust in the digital domain is multifaceted, incorporating both explicit and implicit elements. Explicit trust mechanisms, such as user reviews, ratings, certiﬁcations, and cryptographic proofs, provide clearly- interpretable indicators of reliability and quality, helping users navigate the expansive digital bazaar. Implicit trust, on the other hand, is built indirectly through experiences and interactions. It emerges subtly through social connections, network eﬀects, and algorithmic recommendations, developing gradually as users observe consistent and reliable behavior over time. Together, these explicit and implicit elements construct a com- prehensive framework of digital trust, enhancing conﬁdence and credibility in an intrinsically decentralized and distributed environment. However, this new terrain is not without its challenges. The anonymity and pseudonymity that digital plat- forms often oﬀer can sometimes shield malicious activities, creating opportunities for misuse and deception. Additionally, the rapid evolution of technology and data-driven algorithms can inadvertently introduce biases and distortions, which may erode trust and exacerbate inequalities across digital platforms. To counter these vulnerabilities, a range of initiatives aimed at bolstering digital trust has emerged. These include decentralized identity systems, cryptographic safeguards, and technologies that enhance transparency and data governance frameworks. Additionally, community-driven approaches like community notes and prediction markets have gained traction as methods to reinforce trust by leveraging collective intelligence and consensus. These eﬀorts are designed to give individuals greater control over their digital identities and data, enhance transparency and accountability in transactions, and address the asymmetries that can undermine trust and integrity in digital interactions. Navigating this complex digital landscape requires a concerted eﬀort to foster trust and ensure integrity in all interactions. By harnessing data-driven insights, embracing technological advancements, and advocating for collaborative governance, we can build a digital ecosystem that not only empowers individuals but also supports widespread innovation and serves the greater good. This vision guides Intuition as it strives to enable a more interconnected and trustworthy digital future. 7 2.4 The Contemporary Landscape of Digital Identity and T rust Mechanisms As the digital landscape continues to evolve, ‘identity’ persists as a preeminent connector, linking individuals, entities, concepts, and their myriad interactions within the digital sphere. Each interaction we engage in— be it through social media proﬁles, website domains, or cryptographic keys—is layered with identity-related data that molds and deﬁnes the dynamics of trust. This data acts as a gateway through which we access, analyze, and interpret information, making identity a crucial component in establishing and maintaining trust. As the nature of data and its applications continue to evolve, our identity systems must also adapt. The digital environment is becoming more intricate and interconnected, necessitating identity frameworks that can handle increased complexity and provide more nuanced representations of trust. This means developing systems that can integrate diverse data sources, manage dynamic identity attributes, and ensure privacy and security while facilitating seamless interactions for all. 2.4.1 Application-Speciﬁc Identity In the early days of the internet, digital identities were rudimentary, often represented merely by user/host- names or email addresses. These basic identiﬁers suﬃced for the limited interactions of the time, with trust built on direct knowledge of interacting parties and institutional validation. This simplistic model of trust was intuitive and easily comprehensible to early internet users. However, as the internet expanded in scale and complexity, the need for more sophisticated identity manage- ment and trust mechanisms became apparent. The growth of e-commerce, social networking, and a myriad of online services necessitated intricate systems for managing digital identities, especially for entities beyond people. Detailed proﬁles, reputation metrics, and trust scores emerged, allowing users to create multifaceted proﬁles for themselves, their enterprises, or their products. These proﬁles, intertwined with reputation met- rics, became central to the online experience, facilitating a wide range of activities from social engagement to commercial transactions. Trust in this advanced digital landscape evolved into a tapestry woven from user-generated content—spanning reviews, ratings, social media engagements, and more—combined with algorithmically-driven insights. Plat- forms aggregated vast amounts of data, analyzing user behavior to generate trust ratings and recommen- dations. This data-driven approach revolutionized trust establishment, leveraging vast datasets to provide users with invaluable insights and assurances for their online interactions. However, the proliferation of application-speciﬁc identity introduced several challenges. Firstly, this paradigm inherently leads to a fragmented user experience. The compartmentalization of identities and associated data hinders the seamless transfer of preferences, communities, connections, reputation, and more 8 across diﬀerent digital environments. Users are required to manage separate credentials and data proﬁles for each platform they interacted with, forcing them to recreate digital personas and rebuild data histories from scratch with each new platform they joined, resulting in a disjointed online experience. The application-speciﬁc identity model also imposes a heavy burden on developers, requiring them to not only build and maintain their own data and identity management systems but also to focus on accumulating vast amounts of user data. This approach signiﬁcantly complicates the development process, diverting valuable resources and attention away from the team’s core competencies and product innovation. Instead of concen- trating on what makes their product unique, developers are compelled to address the challenges of identity and data management. For example, ensuring the protection of user data demands robust encryption, secure storage solutions, and regular security audits—tasks that often require specialized cybersecurity expertise. However, with cybersecurity talent in short supply, many development teams struggle to implement these measures eﬀectively, leading to increased vulnerabilities and potential security breaches. Moreover, the fragmentation of identities and data across incompatible, isolated silos—reminiscent of the disconnected early tribes of humanity—complicates the establishment of trust and adds considerable friction to the processes of understanding and decision-making. This highlights the pressing need for more integrated and interoperable identity and data management solutions. A uniﬁed system would allow for the seamless transfer of credentials, preferences, reviews, reputations, recommendations, and data across diﬀerent digital platforms, resulting in a more cohesive, user-centric, and eﬃcient digital experience. 2.4.2 Federated Identity 9 Federated identity systems emerged as a response to the ineﬃciencies and fragmentation inherent in application-speciﬁc identities. These systems aim to create a more integrated and interoperable approach to identity management across the digital landscape. By enabling users to access multiple platforms and services with a single set of credentials, federated identity systems signiﬁcantly simplify the digital experi- ence. Prominent examples include ‘Sign in with Google’ or ‘Sign in with Facebook,’ which oﬀer streamlined authentication processes across various web environments. By adopting standardized protocols such as Security Assertion Markup Language (SAML) and OpenID Connect (OIDC), federated identity systems centralize identity management functions. This centralization bolsters security and enhances user convenience, signiﬁcantly improving the overall user experience by elim- inating the need for multiple logins. Such eﬃciency mitigates the risks associated with password reuse and potential credential theft, saving users from the cumbersome task of managing numerous passwords. Addi- tionally, for platform developers, federated identity systems abstract away the complexities of authentication and credential management. This means platforms do not need to become experts in security practices, as these functions are handled by the federated identity provider. This allows developers to focus on core features and innovations rather than investing signiﬁcant resources into maintaining secure authentication systems. An additional key beneﬁt of federated identity systems is their potential to enable the seamless transfer of personal preferences, community connections, and other elements of a user’s digital identity across various platforms, by providing cross-platform unique identiﬁer(s) representative of the user around which data can be aggregated. This interoperability has the potential to foster a more uniﬁed and cohesive online presence, allowing users to maintain relatively consistent identities and carry over their settings, networks, and preferences to any new platform they join. This continuity is crucial for enhancing user engagement and loyalty by providing more personalized and relevant digital interactions across a spectrum of services. However, as evidenced by the current web experience, this potential remains largely underexplored. At its core, federated identity demonstrates a better way to build trust within the digital ecosystem. It enables the possibility of more transparent and accountable representations of users’ identities across diﬀerent platforms. By oﬀering a consistent and reliable identity veriﬁcation method, these systems allow users to engage conﬁdently across diverse services, knowing that their digital persona is both recognized and trusted. This reinforced trust is crucial, not only enhancing security but also deepening the relationships between users, platforms, and service providers, thus paving the way for more secure, reliable, and meaningful interactions in the digital world. Yet, despite these advancements, signiﬁcant issues remain. Federated identity systems centralize control and trust into the hands of a few major tech companies like Google and Facebook, potentially compromising user privacy and autonomy. This centralization stands in stark contrast to the principles of decentralization, concentrating power and control for the sake of convenience. Such centralization risks include potential misuse of user data, single points of failure, and heightened vulnerability to large-scale breaches. Additionally, the internet remains fragmented, with many services operating in isolation and leading to data silos where user information is conﬁned within speciﬁc applications. While federated identity systems provide some infrastructure for data portability and interoperability, critical gaps persist, and the promise of a truly seamless digital experience remains largely aspirational. F ederated Identity T rust Assumptions Enhancing the discussion of federated identity, it’s critical to delve into the underlying trust assumptions that govern this system. As mentioned, while federated identity systems oﬀer signiﬁcant beneﬁts in terms of interoperability and ease of use, they oftentimes require users and platforms to place a considerable degree of trust in a central identity provider, such as Google or Facebook, when using Single Sign-On (SSO) services. This trust is multifaceted and built upon several layers: 1. T rust in the Provider’s Security Practices: Users must trust that the identity provider imple- ments robust security measures to protect their identity and credentials from breaches and unau- thorized access. The assumption here is that the provider is capable of safeguarding sensitive data better than the individual platforms could independently. 2. T rust in the Provider’s Integrity: There is an inherent trust that the identity provider will not misuse the identity data they manage. This includes trusting that the provider will not exploit the data for unintended purposes, such as surveillance, selling data to third parties, or manipulating services to the detriment of the user. 10 3. T rust in the Provider’s Continuity: Users and platforms depend on the continuous operation and reliability of the identity provider. This trust entails the expectation that the provider will main- tain their services without interruption and will not suddenly revoke access or shut down a service without adequate notice, which could leave users stranded without access to multiple accounts. 4. T rust in the Provider’s Compliance: There is also a trust that the provider complies with relevant laws and regulations, particularly concerning data protection and privacy. This compliance is crucial not only for protecting individual rights but also for ensuring that the services do not become liabilities due to legal shortcomings. 5. T rust in Platform Interoperability: Lastly, users trust that the identity provider will maintain compatibility and interoperability with various platforms. This includes updating and adapting their services in line with evolving technological standards and security practices, ensuring that the federated identity system remains practical and secure over time. These trust layers form a comprehensive ‘trust stack’ that users implicitly accept when they opt to use centralized federated identity systems. While these systems simplify and secure access to multiple services, they also centralize risk and control to a signiﬁcant extent. Recognizing these trust assumptions is essential for users and platforms alike to make informed decisions about their participation in federated identity systems and to understand the potential vulnerabilities and dependencies these systems introduce into the digital identity landscape. 2.5 The Current W eb2 T rust Stack Having explored the evolution from application-speciﬁc identities to federated identity systems, it’s crucial to understand how these paradigms shape the current Web2 trust stack more generally. This foundation allows us to appreciate the existing mechanisms and their inherent ﬂaws, setting the stage for why a transition to decentralized models is necessary. 2.5.1 A Typical W eb2 Interaction To understand the current Web2 trust stack, consider a common scenario: purchasing a product on Amazon. The process involves several steps and trust assumptions: 1. Account Creation and Login : • Users create an account on Amazon. • T rust Assumption: – Users trust Amazon to handle their personal information securely and provide accurate authentication. – Users trust that Amazon will allow the user to sign up for and authenticate to the platform. 2. Product Search and Sele