Investec, BankservAfrica reveal blockchain-based ID system prototype

Financial services group Investec, working with automated payments clearing house BankservAfrica and decentralised identity platform provider uPort, has demonstrated a digital identity system anchored in the ethereum blockchain that it believes could enhance trust and security in South Africa’s financial system.

The initiative was born in the digital identity working group of the SA Financial Blockchain Consortium (SAFBC). The demonstration took place this week at the Blockchain Africa conference in Johannesburg.

The identity system allowed each conference attendee to create an individual identity by downloading a uPort application on their mobile device. The attendee could then move between vendor stands and “check in” by scanning a QR code.

Each vendor would confirm the attendee’s visit by automatically issuing them an attendance credential and associating it with the specific attendee’s identity profile. As an incentive, the attendee would unlock a reward after completing a certain number of check-ins at different vendors.

Graham Nelson, Investec’s blockchain engineer, said that through the ethereum blockchain, the prototype allows individuals to register a universal, reusable and encrypted identity. “This identity has no restrictions on who or what can integrate with it, so it has many other applications and can be enhanced by any other entities the user has a relationship with.”

This is comparable to a Facebook account, where a user can give other entities approval, with the click of a mouse, to integrate with their Facebook login and then access personal information, such as name, friend lists and contact information, Investec explained.

Full ownership

Gary de Beer, BankservAfrica’s blockchain engineer, said the big differentiator of the prototype is that the user has full ownership of their identity and can decide who can access this information. “As the data is encrypted, it prevents entities from selling a user’s personal data to other third parties without permission. It makes large-scale data hacks a thing of the past.”

As the ethereum blockchain anchors each individual identity, other individuals or entities can “attest” to specific information to enhance an identity. “For example, once John Doe has an identity, Investec can attest that he has a private bank account, pays his salary into this account, has a home loan, etc. Similarly, the department of home affairs could attest that John Doe has an official identity and passport number,” Nelson said. There are no limitations — any entity can attest any information, he added.

“The possibilities of the platform are endless,” said Investec blockchain specialist Chris Becker. “A single identity can be used globally, which means greater simplicity for the user. As the user is in full control of their encrypted profile and who can access this information, no one can share personal information without explicit consent.”

In future, Becker said, users might even be paid by entities for access to personal information. “Also, there will be no need to send copies of identity documents or other personal details over unsecured Internet connections. This improved security will minimise the risk of identity fraud significantly.”

For financial institutions, a blockchain-based identity system could improve efficiency and greatly reduce the friction (such as Fica regulatory requirements) and costs of client on-boarding, he said. “If this universal, reusable identity system went mainstream, it would minimise our clients’ and the South African public’s digital footprints. For us and our colleagues at the SAFBC, any innovation that improves trust and security in the financial system is worth exploring.”  — © 2019 NewsCentral Media