What benefits would accrue to users? 78 WORLD ECONOMIC FORUM | 2016 USERS Privacy and control 1. Privacy and control •Users would have full control over which IdPs hold their attributes •Users consent would be required before IdPs could expose attributes to RPs •User data would not be sold by third parties •The minimum amount of user information required would be transferred during transactions Security 2. Security •User attributes would only be held by entities meeting system standards and requirements for information handling and storage •Digital attribute storage would make identity information resistant to damage, destruction or loss •Users would have the ability to disperse their identity information, creating contingency if an IdP suffered a data breach or data were erased or stolen, and reducing the impact of a data breach on the user Convenience 3. Convenience •Digital identity and digital attribute transfer would simplify and improve the user experience in transactions, eliminating the need for users to track multiple authentication methods (e.g., usernames and passwords) and manually submit personal information during transactions •Attributes would be transferred digitally, removing the potential for human error and subsequent information remediation •Users would be able to easily update information held with their IdPs and would not have to deal with transactions being executed based on inaccurate or out‐of‐date information Transparency 4. Transparency •Users would have visibility into which attributes would be exposed and to what entity during identity transactions
