为什么说Web3.0时代数字身份很重要，它的价值究竟在哪？

图片丨来源于网络

编者按：本文来自区块链骑士，作者Maria Teresa Nieto Galan，创业邦经授权转载。

By: This paper is from the Knight of the Block Chain, by Maria Teresa Nieto Galan, authorized to be reproduced by the State of Enterprise.

我们开始意识到我们的数据是如何在网上流通的。事实上，我们每个人可能都有这样的经历，在网店看到一条裤子以后，其他的网站开始推送相应的广告，我们会感觉有人在监视我们。而这样的想法让我们开始思考自己的隐私权。

We're beginning to realize how our data is circulating online. In fact, each of us may have had an experience of seeing a pair of pants in an online shop, and other websites started to post the corresponding ads, and we felt that someone was watching us. And that idea led us to think about our right to privacy.

隐私权是指一个人对于个人生活相关的一切，都有保持个人隐私和秘密的权利。此外，《世界人权宣言》还规定了隐私权（第十二条）。基于这个原因，部分企业已经开始关注这个领域，比如苹果公司曾经提出口号，“iPhone上产生的数据都将留在iPhone上。”

The right to privacy means that a person has the right to privacy and confidentiality in all matters relating to his or her life. Moreover, the Universal Declaration of Human Rights provides for the right to privacy (art. 12). For this reason, some businesses have begun to focus on this area, such as Apple's slogan that “the data generated on iPhone will remain on iPhone.”

根据西班牙皇家学院(RAE)的说法，身份是“一个人或一个群体的一系列特征，这些特征代表着人与他人的关系”。如果我们在这个定义中加上“数字”属性，它将成为“在数字世界中识别我们的一组特征”。

According to the Royal Academy of Spain (RAE), identity is “a set of characteristics of a person or a group that represent the relationship between human beings and others”. If we add a “digital” attribute to this definition, it will become “an identification of our set of characteristics in the digital world”.

因此，数字身份可以是我们的名字和姓氏，也可以是我们的个人电子邮件地址、专业电子邮件地址，甚至可以是我们的银行账户。换句话说，数字身份是我们用来与网站、App等网络程序交互的所有数据或数字属性。

So digital identity can be our name and surname, our personal e-mail address, our professional e-mail address, or even our bank account. In other words, digital identity is all the data or digital attributes that we use to interact with web programs like websites, App, etc.

我们的特征、形象、爱好和习惯，也是识别我们并使我们与现实世界中的其他人区别开来的属性的一部分。人们会很自然地认定，在数字世界里，也有一个自己。

Our identities, images, hobbies and habits are also part of the attributes that recognize us and distinguish us from others in the real world. It is natural to assume that there is also one in the digital world.

在这样的情形下，当我们在网店购买裤子，甚至网上冲浪时的习惯和行为，都反映了我们对于时尚的审美品味。

In such cases, our taste for fashion is reflected in our habits and behaviour when we buy pants at the Internet store and even surf online.

然而，目前许多公司已经卷入了有关数据泄露和盗窃、数据贩运和政治推断的诉讼丑闻中。比如在Facebook和Cambridge Analytica这些备受关注的案件中，这两个实体被指控未经所有者同意使用了5000多万Facebook个人资料，以进行心理分析。这些资料是当时国外许多政治竞选策划的核心。

However, many companies are already involved in lawsuit scandals about data leaks and thefts, data trafficking and political inferences. In high-profile cases such as Facebook and Cambridge Analytica, these two entities were accused of using more than 50 million Facebook personal data for psychological analysis without the owner's consent.

作为结果，这两家公司被法院判处了数百万美元的罚款，并因违反《通用数据保护条例》而被处以创纪录的天价罚款。

As a result, the two companies were fined millions of dollars by the courts and a record daily price fine for violating the General Data Protection Ordinance.

最终作为用户，一旦我们在数字世界中提供我们的数据，我们实际上就失去了对它的控制。

Ultimately, as users, once we provide our data in the digital world, we actually lose control of it.

然而，实际情况并非如此堪忧。有一些法规保护我们个人数据的处理以及这些数据在欧洲共同参考框架内的自由移动，例如《通用数据保护法》。按照这项规定，作为公民，我们可以迫使公司将我们的个人数据从他们的系统中删除。

There are regulations that protect the processing of our personal data and their free movement within a common European reference framework, such as the General Data Protection Act. Under this provision, as citizens, we can force companies to remove our personal data from their systems.

然而，事情并不是如此的简单。为了行使这一权利，作为用户必须记住向哪家公司提供了你的个人数据，这是一个相当复杂的任务。这个世界上的所有东西，或者说几乎所有东西都是数字化的，我们每天都会无意识地与互联网公司进行多次互动。

In order to exercise this right, users must remember which companies have provided your personal data, which is a rather complex task. Everything in the world, or almost everything, is digital, and we interact with Internet companies several times a day, unconsciously.

事实上，技术的进步要比立法快得多，因此从技术的角度来看，我们还必须关注用户上网的道德问题。

In fact, technological advances are much faster than legislation, so from a technical point of view, we must also focus on the ethical issues of user access to the Internet.

在许多处理数字个人数据方面的情况中，《通用数据保护法》现在已经开始力不从心了。因此，有关主权数字身份的工作和立法已经开始了。

In many cases of processing digital personal data, the General Data Protection Act has now become ineffective. Work and legislation on sovereign digital identity has therefore begun.

这种新的数字身份概念的主要目标是人们可以再次成为自己数据的所有者。这种身份将由一组识别个人的特征组成，称为可验证凭证。

The main objective of this new digital identity concept is that people can once again become owners of their own data. This identity will consist of a set of identifiers, known as authenticated documents.

可验证的凭证，除了代表信息外，还使数据不可能被篡改，因为它们是由发行实体数字签名的。

Verifiable documents, in addition to representing information, make it impossible to tamper with data because they are digitally signed by the issuing entity.

此外，这些数据可以被不间断地追踪，因此很容易确定我们的数据是在什么时候以及什么情况下被使用的。“不变性”和“可追溯性”的概念无疑是区块链技术的同义词。

Moreover, these data can be tracked without interruption, so it is easy to determine when and under what circumstances our data is used. The concepts of “non-transformation” and “retroactivity” are undoubtedly synonymous with block chain technology.

通过安装一个简单的App到智能手机上，带有原始数据的凭证永远不会脱离所谓的钱包或者用户钱包。而这样回到了让人们重新控制其数据的目标，用户可能创建、拥有和控制对这类数据的访问。

By installing a simple App on a smart phone, a document with raw data will never be separated from the so-called wallet or user wallet. This returns to the goal of allowing people to regain control over their data, and users may create, own, and control access to such data.

最近，欧洲委员会宣布了创建一个欧洲数字身份的计划，允许任何欧洲公民在任何成员国使用其身份的任何属性。举一个简单的例子，该数字身份可能包含他们的财务资料，以便他们能够在其居住国以外的国家购买房子。

The European Commission recently announced a plan to create a European digital identity that allows any European citizen to use any attributes of his or her identity in any member country. To give a simple example, that digital identity may contain their financial information so that they can buy a house in a country other than their country of residence.

这一概念被认为是不同公共行政机构之间可互操作的兼容个人凭证的集合，这与上文讨论的主权数字身份概念非常接近。

This concept is considered to be an interoperable pool of compatible personal documents among different public administrations, which is very close to the concept of sovereign digital identity discussed above.

主权数字身份的好处包括：

The benefits of sovereign digital identity include:

1、每个持有欧盟成员国国家身份证的人都有权在欧盟任何地方拥有公认的数字身份。

1. Every person holding a national identity card of an EU member State has the right to a recognized digital identity anywhere in the EU.

2、这是一个简单而安全的方法来控制你想与需要信息共享的服务方分发多少信息。

2. This is a simple and secure way to control the amount of information that you want to distribute with the service provider that needs to share information.

3、它通过移动App和其他设备上的数字钱包工作，用于：在线和离线证明自己的身份；储存和交换各国政府提供的如姓名、姓氏、出生日期、国籍等信息；存储和交换由受信任的私人来源提供的信息；利用这些资料确认在某一成员国居住、工作或学习的权利。

3/ It works through mobile digital wallets on App and other devices for: online and offline identification; storage and exchange of information provided by Governments, such as names, surnames, dates of birth, nationality, etc.; storage and exchange of information provided by trusted private sources; and use of such information to confirm the right to reside, work or study in a Member State.

就西班牙而言，我们是在这一新的身份模式中建立机制和解决办法的先驱和领导者。

As far as Spain is concerned, we are pioneers and leaders in the establishment of mechanisms and solutions in this new identity model.

一个著名的用例是AlastriaID，AlastriaID是由西班牙Alastria商业财团开发，西班牙电信公司（Telefónica）作为成员参加。

A well-known example is the case of AlastriaID, which was developed by the Spanish company Alastria, with the participation of Telecom (Telefónica) as a member.

今年1月，受AlstriaID模式的启发，在西班牙国家官方公报（Boletín Oficial del Estado）上公布了西班牙标准PNE 71307-1后，区块链中第一个关于去中心化数字身份的全球标准在西班牙获得批准。

In January of this year, the first global standard of decentralized digital identity in the block chain was approved in Spain, following the publication of the Spanish standard PNE 71307-1, inspired by the AlstriaID model, in the Spanish National Official Gazette (Boletín Oficial del Estado).

区块链技术和《通用数据保护条例》是否兼容？乍一看，我们可能会认为一种技术，即每个参与者都有一份相同的信息副本，使其不可篡改且无法删除，这与《一般数据保护条例》规定的删除或修改的权利并不相容。

Is block chain technology and the General Data Protection Regulations compatible? At first glance, we may consider that a technique whereby each participant has a copy of the same information that it cannot be altered and deleted is incompatible with the right to delete or modify under the General Data Protection Regulations.

然而，对于建立在区块链技术之上的主权数字身份，用户数据从不以任何方式存储。在这种情况下，存储的数据是具有可追溯性的，它允许我们确定一个人的数据是否仍然有效，但始终保持他们的隐私。换句话说，多亏了区块链技术，我们可以验证一个凭证既没有被撤销，也没有被改变，因此仍然有效。

However, for sovereign digital identities based on block chain technology, user data are never stored in any way. In this case, the stored data is retroactive, allowing us to determine whether a person’s data is still valid, but always maintaining their privacy.

我们不能忘记主权数字身份商业前景。这种管理身份的新方法将给新的模式和用例提供机会。其中一些用例可能是以下情况，尽管其可能性的范围会很大。

We must not forget the prospect of a sovereign digital identity business. This new approach to identity management will provide an opportunity for new models and examples. Some of these examples may be the following, although the range of possibilities may be significant.

电子病历：目前在西班牙，所有病历的管理工作都是由病人居住地的公共卫生系统进行的。当我们离开社区，不得不使用其他医疗服务时，我们的记录不会随我们一起迁移。因此使用数字身份模型，以一种可互操作的方式携带我们的医疗信息，这可能是针对这种情况的一种可行性解决方案。

Electronic medical records: At present in Spain, all medical records are managed by the public health system of the patient’s place of residence. When we leave the community and have to use other medical services, our records do not move with us. So using digital identity models to carry our medical information in an interoperable way could be a viable solution to this situation.

简化注册程序(登船)：很多时候，我们会停止在某些网站上注册，因为在表格中要填写的数据量很大。因此，主权数字身份的另一个可能的用例是作为表单中的输入数据使用。此外，由于区块链可以追踪凭证，我们将可以解决目前存在的问题，即在不知道我们向哪些公司提供了我们的数据的情况下，行使删除或修改我们个人数据的权利。

Simplified registration process (boarding): In many cases, we will stop registering on certain websites because of the volume of data to be filled in the forms. Thus, another possible example of sovereign digital identity is used as input data in the form. Moreover, as the block chain allows for tracking of documentation, we will be able to solve the current problem of exercising the right to delete or modify our personal data without knowing which companies we provide our data to.

钱包：钱包作为“凭证容器”的App，我们仍然需要在钱包方面做很多工作。我们已经多次谈到管理区块链平台的公钥和私钥是多么复杂。

Wallet: As the App of the voucher container, we still need to do a lot of work on the wallet. We have spoken many times about the complexity of managing the public and private keys of the block chain platform.

区块链技术的局限性之一是不熟悉它的人或有特殊需要的人可以使用它。如果我们要请一位年长的用户下载比特币钱包，当他去超市的时候，用比特币作为一种支付方式，这是难以想象的。

One of the limitations of block chain technology is that people who are not familiar with it or who have special needs can use it. It is inconceivable that an older user should be asked to download a bitcoin wallet when he goes to the supermarket.

这就是为什么我们不应该把它与加密货币及其钱包的世界联系在一起。由于这些技术，我们的未来可能会有这样的移动App，例如，允许我们以一种非常简单的方式使用我们的身份与公共行政部门进行交互，而这一点目前要复杂一些。

That's why we shouldn't link it to the world of encrypted money and its wallets. Because of these technologies, our future may have such mobile Apps that, for example, allow us to interact with public administration in a very simple way.

简而言之，创建钱包或App来简化与此身份模型的交互，以便将其纳入日常生活，这是我们面临的挑战。这项技术是可行的和成熟的。它只需要对用户可用和透明。

In short, creating wallets or apps to simplify the interaction of this identity model in order to integrate it into everyday life is a challenge. This technology is feasible and mature. It only needs to be accessible and transparent to users.

主权数字身份的概念是解决我们今天所有限制的最佳选择，也是唯一能让我们重新拥有我们的个人数据的方式，从而恢复我们一直渴望的对个人隐私的需求。

The concept of sovereign digital identity is the best option to address all of our limitations today and the only way that we can regain our personal data and thus restore the need for personal privacy that we have longed for.

因此，在我们开始使用区块链技术来简化和促进我们在日常生活中使用数字身份之前，这只是一个时间问题。

That is why it is only a matter of time before we begin to use block chain technology to simplify and promote the use of digital identities in our daily lives.

本文为专栏作者授权创业邦发表，版权归原作者所有。文章系作者个人观点，不代表创业邦立场，转载请联系原作者。如有任何疑问，请联系editor@cyzone.cn。

Please contact the original author at editor@cyzone.cn>.