Digital Identity - Use cases & Web3 Solution / Rasim Muftiev

Transcript

everyone hi hello uh good late afternoon yeah hope you're enjoying the youth product the same as I do and today I want to like bring a bit of more excitement for you with the topic of digital identity use cases and web resolution so yeah um so what is it to be expected a bit of introduction about myself about gaming company where I'm working currently what is digital identity what kind of problem statement we're bringing there use cases then how we solve it at gaming with the digit product so what I've been oh I want to show a bit of demo there as well and we will have some time for Q a session I believe so let's move on yeah so my name is rasim I'm former

software developers well PhD in businesses for informatics currently working as a web3 product owner at gamium here like my contacts in case guys you will have some questions afterwards feel free to reach me out uh yeah or anything else so let me talk also about gaming so our company we position ourselves as that we are building digital identity layer of internet and currently we have two main products one is Genesis on the bottom you see it it's a metaverse I will not speak much about that today um yeah but you can check it out yourself and today I would like to focus more on the digit protocol it's identity and financial protocol which we are building which is pretty much the solution for digital identity cases to bring a bit of hype as well to the

company I wanna introduce our like GMM token as well where we are backed up with that it hyped a bit up after we announced our collaboration with meta we also have Partnerships with telefonica and then you have people get a bit of hype there yep so problem statement what is digital identity and actually I'll tell you my story when I was coming heading back to Prague recently I lost my passport with all my visas and stuff and I was stuck in Emirates for like I think three weeks which costed me around like four thousand dollars but that's a different story but just imagine so I lost my passport I went to the airport and I couldn't like verify my identity if everything would

be in digital wallet you know I just like come and show and say okay guys this is me this is rasim and they said okay you have all this stuff visa to check Republic just go on and fly right so this is one problem another problem imagine how many times per day you actually log into different applications like web applications mobile applications how many times you need to create an account like put the personal data there right and even if you're a business owner like imagine how many users do you lose there according to some statistics like if you are owner of eShop only five percent of the all the users are getting actually to the checkout point so imagine how many you'd lose on the way um fake accounts in social networks I

think you all have all your like as a followers you probably have a lot of balls and you're like Instagram or Twitter wherever and those all actually create a bit of mess there right and uh prevention of board generated activity is another case for the digital identities another one again fake identities right fraud prevention scamming all the stuff where are you sending money who you're operating with who are your users as if you are like application owner and this is just a few cases that are way way more of those and we will talk about it so what is digital identity digital identity at the end of the day it's kind of your digital twin and internet layer which uh yeah provides your personal data financial data assets which also proves that you're human and you can open it

provides the interoperability of your data all over the platforms right um it's like digital password at the end allowing uh yeah to maintain your single identity all over the internet and yeah this is just some cases you can check for more use cases on our like web pages you will see it later as well the links for example if you're owning if you're building a like I know gambling uh right and you want to say Okay I want my users be 18 years plus so and if you're a user like you want to like actually prove it by one click you don't want to go through the kyc processes maybe you want to do kyc process only once and just be you know go into all the platforms and just verify it with one click

uh oh I don't know like kyc ml fintech crypto everywhere you want to like see also the business owners like application owners want to verify that you are they are working with real humans so what how we understand at gaming we came up with our own formula for digital identity what is digital identity and we said okay you know uh it's pretty much about data and financial data so by data we understand documents like personal data driving license passport national ID this is going back to the case maybe when I lost my passport so yeah then we have also 3D your 3D avatar for the metaverses and that's why we're also

building uh we have our own metaverse so you can check it out and play with that and financial assets this is pretty much crypto assets tokens and nfts and also Fiat so here I show you a bit of demo uh so we came up with a product which is called did it it's financial and data protocol and here to bring a bit of excitement here I can show you how it works so just imagine you this is a profile did it me one of our profile Pages where you can generate the profile the digital identity you just go there and you come you log in with your wallet where you store your like private keys right with a digital wallet you sign the messages so it's running a bit too fast

but yeah you probably see the claims there I couldn't stop it but yeah you signed the policies sign the claims if you want to share if you're not you just reject then you enter to your digital identity management tool which is again profile they did me you populate your data this is by the way very it's pretty difficult to see it right sorry for that um yeah pretty much what you do here you put your profile picture you put your name your surname your email address maybe later we are putting also some addresses to do one click checkout yeah some yeah putting some address here CD whatever and again this is a very small subset of data currently on the

digit protocol we have way more data sets there so it's just V1 and then in V2 there is coming way way more so yeah uh what we are doing here we created a digital identity with the yo yo wallet um we sign it with with the private Keys like with your wallet and then yeah that's it now imagine the second case right this is already e-commerce web page and you are a business owner you implement a digit SDK with just one dependency and here you can see how you can manage already your users again your users can click get in with just one click again some claims to sign there and you already know that this is the user this is received with all this data which we have we know that it's human

you we already see the data you know like what address to shape what uh yeah what's the email and stuff and we can do one click checkout here you can see we are sending some girl leave yeah to the uh e-commerce online store it takes a while as usual and then boom it's done right and you did a checkout in just three clicks if you do if you yeah check it we just logged in once we signed the policy Okay the third click was just adding to the card and fourth just paying and then done so imagine how and and not only one application imagine it's interoperable over the applications also easy

um implementable for the business owners for the application owners just like implementing one dependency did it SDK and then everything is sold red and it's all over the platforms so let's maybe also go a bit into technicalities how it works so we have three actors here right the human then we have a which like us as a users then we have service provider which might be like web application mobile application uh yeah online store for example and then we have a digit protocol which is our SDK with the services with the uh with the protocol as well so user he or she connects with the wallet address uh to the application right

application calls the wallet authorization endpoint which is using the wallet address and to the digit protocol and we send a challenge which is also like policy with the claims to be signed by Human by the user if then the service provider sends it back to the human for example to metamask right or some other wallet address human science the challenge the policy again we are not storing the private Keys here this is also brings the extra layer of security we as did it with like you as a user is responsible for your private Keys we don't store that one so it's up to you and that means like you can operate that you you select if you want to sign this or not you select what kind of claims what kind of data you want to

share with right and then so you send it you sign it and then send it back to the application applications sees that send backs to the digit protocol with the signature with a valid signature if we see that the signature is valid we see we send back the valid access token as well so for that wallet address and boom you are done you're already in and uh yeah it's working again imagine it's just you know several clicks and for the business owners application owners is just a matter of installing one dependency one SDK at the end and you already have your login management user management and even like checkout management right so well

economic Services there and I think uh that was pretty much it um yeah I was pretty short we skipped one side unfortunately because of some technical reasons but in general it is uh yeah uh that's it if you are excited the same as we are about digital identity then yeah join the wait list try out these web pages if you want you can create your digital identity by the way we did a release on 23rd of May which is like couple weeks back only we have already now three three and a half thousand uh like accounts already in unique digital identities and it's only starting it's just coming it's expanding so we are way more to expect wonderful thank you very much for seeing

Round of Applause everyone any questions anyone would like to what what what's the role of the service provider in terms of like doing all of the challenges and requests is that uh off chain or is it on chain or is it just a smart contract no it's just a application pretty much imagine you are building an application it's not really a smart contract it can be a website right and you're implementing the dependency to manage uh your like users login experiences and yeah log in check out payments and you know is it human focused like for example

like my nft is my identity but it's got nothing to do with me can I build an identity around my nft well not really around they're not your nft but your nft is owned by some wallet address right so you can build your identity around wallet address perfect yeah yeah that's that's yeah that's interesting awesome cool any other questions yes thanks for the talk azim where do you actually store the the data of the user yeah first of all thank you York for a question yeah nice to see you here uh where do we store the data of the user okay

um again private keys this is maybe to mentioned we don't store that it's up absolutely like done by the users it's their responsibility we are not storing any private keys in our protocol uh in our protocol we store we have a databases where we store all that and everything is encrypted with the highest like security standards uh yeah just pretty much standard databases with enhanced security best practices any other questions you've got a little bit longer thank you so in terms of the gdpr will you be the data controller because you

know for example if you're an institution and you need to uh you need to actually keep the record of someone's kyc data for some years and in your case you basically will be storing this information or the individual will be storing the information him or herself so how will this work with the whole gdpr thing sure um good question by the way so regarding gdpr since we're storing the personal data we actually uh like we need to follow the ddpr right and it heavily also depends on where we store our databases our databases are stored in the Europe so yeah we are not for example sharing that with the us kyc if you want to do the kyc it's up to

your choice right so you can do that and it's stored in the database in secured way and nobody else except you will like be in control of if you want to share the data or not pretty much by sending by signing this by this process you yourself control if you want to share this data or not and the rest I mean according to the gdpr yes we are following that there is no other way plus there are like new to regulations upcoming right the one is Mika probably heard about that and second one is in aidas so Mika is uh yeah will be uh I think on from the next year and uh where the it all plays in our favor in our favor of our protocol so with Mika you

will need to whatever you use your like login where you do some transactions you will need to identify yourself who are you as a user right and then with AE does this is European regulation which starts in 2030 and it's also playing in favor of digital identity so saying that wherever you go whatever you do on mobile web uh like Dimension you need to be identified and then uh yeah you need to have your digital identity another question is more like um if you are integrating this into an app and how do people selectively disclose like in one of those examples is like you reveal you know my Instagram or my Twitter

handle and so if I I'm building an app and my app has like 3 000 users and we use did as your identities to when people are sharing their contact addresses and their Instagrams and their telegrams between each other the app provider is exposed to this knowledge correct oh well they like if I'm making an app and I'm using like I know when information is shared between my users I get to see all that right yeah yeah I know what I mean uh let me maybe a bit answer a bit uh from from far away um for imagine you're building your application right so you are the service provider so first of all you have this

we call it application like uh did it console where you configure which kind of data you want from your users but once you have all that users for example logged in you don't really see the the data unless you're like requesting that and for that we will review like what's your case we as a digital identity the ones who are storing all they did we need to make sure uh who we are letting that personal data to like to be seen you know so that's why we cannot like easily like give it even if you're like business owner like application owner we want to First make sure and maybe sign some gdprs with you like okay if you want to use that see that then this is another extra layer of security yeah but user a reveals their personal information to user B and because it's

my app I'm rendering that information on my app and I can keep track of all of my users data right well in that case when you actually concept that data to the application in most cases you already consented the data to application an application can do whatever they want so it's a matter of the third party application but I think it's a good question we are still like thinking about that how we can manage that but in general for now once you constant the data you cannot actually control it anymore I mean unless it's the curse of knowledge once it's out there exactly somewhere it's exactly from our side we are trying to make sure that everything is stored securely encrypted nobody like can get the control consent then like it's go away it's up to you you consented that

we are still thinking how we can improve that but yeah definitely this is yeah because what happened in the Facebook example was that people were making all these third-party Facebook apps and there's no more apps on Facebook anymore because people are taking advantage of that social graph and making apps and I'm a Victor I'm I I'm guilty as well I kept the database of everyone who used and all their likes and everything and so you can see that the the service providers uh in a very very rich position to take advantage of this sure your protocol is saying we did everything correct but you're not actually protecting the users in that particular example but that's why you can actually you are in full control of

your own data where you want to share where you want to share what you want to like put into your digital Identity or not I think we run out of time I don't know if we have unfortunately run out of time very very interesting talks I think this is clearly an interesting topic talk to him afterwards Round of Applause everyone [Applause] for the next one [Music]