2 Understanding digital identity

Digital identity is presented as the way systems recognize, remember, and relate to people, organizations, devices, services, and agents. Rather than being just logins, passwords, or account records, identity supports the relationships that make digital interaction possible. The chapter opens with the idea that identity is fundamentally relational: the real purpose of identity systems is to enable recognition, continuity, and useful action across repeated interactions, especially when authorization decisions depend on who or what is involved.

The chapter then explains why digital identity is difficult at scale. Distance between people and systems creates the proximity problem, while the lack of a shared identity layer leads to interoperability issues, rigid schemas, privacy and consent concerns, and scalability limits. These problems directly affect authorization because policies depend on accurate, timely, and trustworthy identity data. The text also shows how naming, namespaces, and identity models shape these outcomes: centralized systems offer control, federated systems offer convenience and cross-organization reach, and decentralized systems aim to return more control to individuals, each with different tradeoffs in trust, discovery, privacy, and operational complexity.

Finally, the chapter emphasizes that identity exists to support different kinds of digital relationships, including transactional, interactional, and exploitative ones, and that the type of relationship should influence system design and policy. It distinguishes trust from confidence, arguing that technical mechanisms such as authentication, verification, auditing, and policy enforcement create confidence, while governance and social norms are still needed to establish trust and fairness. Privacy, confidentiality, and authenticity are treated as connected but distinct goals, and the chapter concludes by showing that strong authorization depends on all of these identity foundations before moving on to authentication.

Digital relationships occupy a space where transactional, interactional, and exploitative dynamics combine in varying degrees. Understanding which type of relationship your system supports is critical to designing effective identity and authorization policies.

• Digital identity powers digital relationships, allowing systems to recognize, remember, and relate to people and organizations, forming the foundation for personalization, security, privacy, and access control.
• Namespaces and discovery are critical to authorization. If a system can’t uniquely name and reliably find identities, policies fail. Structured namespaces help ensure clarity, uniqueness, and correct policy application.
• Identity system models shape control and trust. Centralized, federated, and decentralized systems distribute authority differently, affecting portability, governance, and attribute availability.
• Confidence comes from technology; trust comes from governance. Strong authentication builds confidence, but governance ensures fairness, compliance, and accountability.
• Privacy, confidentiality, and authenticity are tightly linked to digital identity. Good identity systems and well-crafted authorization policies minimize unnecessary data exposure, while ensuring only the appropriate parties gain access.

FAQ