Network of Excellence in Future of Identity

认同既有静态的、生物学的，也有动态的、社会的和心理的。在基本和生物层面上，我们的身份对我们来说是独一无二的，它通过大量的生物识别指标来揭示，如指纹和虹膜图案。这个身份是固定的。所有这些指标都可以追溯到一个人身上，我们面临的挑战之一是开发能够将这些多个指标联系在一起的系统和基础设施，以便合适的人在合适的时间获得合适的服务、系统或信息。身份管理是这方面的关键，它依赖于强大的控制，旨在跨真实和在线环境验证用户是否如他们所说的那样。改进将使能够验证身份，向需要访问的人提供访问权限，同时通过尽量减少欺诈者的误报访问来确保经常是敏感信息的安全。此类验证系统需要能够跨单个用户可能使用的各种系统或应用程序运行。在另一个层面，即社会和心理层面，我们的身份是动态的和相对的。它是由我们所在的社会群体和/或我们承担的任务来定义的，因此我们相应地发展和展示我们的自我形象。我们的身份赋予我们某些权利和特权，这些权利和特权可能会随着时间和地点的变化而变化。这使得身份成为一个更具挑战性的概念，并提出了一系列全新的问题，需要一套全新的方法论。在这方面，根据我们的社会群体对我们的身份进行定义变得重要，因为它为一个人提供了在他们可能拥有的许多身份中完全不同的权利和特权。本质上，身份的挑战则更加复杂，因为现在每个人都可以被理解为担任多个角色，并在每个角色中显示许多身份指标。例如，如果我们仅仅将名字作为身份的指示器，我可能有一个我在工作场所使用的名字，一个我在朋友中使用的名字，另一个在在线社交网络中使用的名字，以及另一个作为唯一电子邮件ID的名字。所有这些都是我在不同角色中的“我”，所有这些都需要追溯到我身上，以便从心理层面和身份管理层面全面了解我是谁。现在需要跨学科的视角来解决上述用户和系统需求的多样性。考虑到大量电子服务提供商带来的复杂性，以及遵守《数据保护法》条款的要求，这些远不是微不足道的问题。需要心理学和人为因素方面的专业知识来了解强大的身份验证系统的障碍，并探索如何最好地对抗网络钓鱼和其他人类工程攻击。鉴于联合身份管理(FIM)系统的使用引入了服务提供商之间的信任概念，法律专业知识也是必要的，但也必须引入针对违规的责任和保证。这一身份网络将把这些专门知识纳入一个论坛，讨论未来在建立身份方面的一些挑战。除此之外，它还将作为一站式服务，在这里，行业、政府机构和学术界可以互动并寻求必要的专业知识来解决围绕建立身份的问题。

Identity has both static, biological as well dynamic, social and psychological components. At a basic and biological level, our identity is unique to us and it is revealed by numerous biometric indicators such as fingerprint and iris patterns. This identity is fixed. All of these indicators track back to a single person, and one of our challenges is to develop systems and infrastructures capable of linking those multiple indicators so that the right people have access to the right services, systems, or information at the right times. Identity management is key in this regard, and it is dependent on robust controls designed to verify that users are who they say they are, across both real and online contexts. Improvements will enable the capability to verify identity, providing access to those who require it whilst ensuring the safety and security of often sensitive information by minimising false positive access of fraudsters. Such verification systems need to be able to operate across the various systems or applications that a single user might use. At another level, i.e., the social and psychological level, our identity is dynamic and relative. It is defined by the social group we are in and/or the task that we are undertaking, and so we develop and reveal our self-image accordingly. Our identify affords us certain rights and privileges, which may change over time and place. This makes identity a much more challenging concept, and raises an entirely new set of questions which require an entirely new set of methodologies. In this regard, the definition of our identity according to our social group becomes important because it affords a single individual quite different rights and privileges across the many identities that they may hold. In essence, the challenge of identity is then even more complex because each individual can now be understood to hold many roles, and to display many indicators of identity within each of these roles. For instance, if we merely take the name as an indicator of identity, I may have a name that I use in the workplace, a name that I use amongst friends, another within an online social network, and another as a unique email ID. All of these are 'me' across the different roles that I occupy, and all would need to be tracked back to me for a complete understanding of who I am both at psychological level and at an identity management level.An interdisciplinary perspective is now needed to address the diversity of user and system needs suggested above. Given the complexities introduced by the volume of e-providers, and the demands to comply with the provisions of the Data Protection Act, these are far from trivial problems. Expertise in psychology and human factors is needed to understand the barriers to robust authentication systems, and to explore how best to counteract phishing and other human engineering attacks. Legal expertise is also necessary given that the use of federated identity management (FIM) systems introduces the notion of trust between service providers but also necessitates the introduction of liabilities and warranties against breaches. This network in identity will bring these expertise under one forum to discuss some of the future challenges in the area of establishing identity. In addition to this it will act as a 'one-stop-shop' where industries, government agencies and the academic community can interact and seek the necessary expertise to resolve issues around establishing the identity.