Swiss Re AG · SIX:SREN
Swiss Re — Investor Presentation (June 2023)
33 slides from Swiss Re's investor presentation, Jun 13, 2023
Slide 1: Who am I: Online identification and verification, Web3 and DLT
Who am I: Online identification and verification considering new developments such as Web3 and Distributed Ledger Technology Hochschule Luzern Informatik Ursula Sury Vizedirektorin T direkt +41 41 757 68 52 ursula.sury@hslu.ch 13.06.2023
Slide 2: Table of Content
TABLE OF CONTENT 1 . Self Sovereign Identity 2. Who Am I? 3. Digital Signature 4. Data protection - Overview 5. SSI and data protection 6. Digital for a better world
Slide 3: Self Sovereign Identity
Self Sovereign Identity 13.06.2023 Seite 3
Slide 4: Case 1: Applying for a job
CASE 1 You are applying for a job at Y. AG: You keep your diplomas and previous work experience in your e-wallet, as part of your Self-Sovereign Identity. • How does it work in today's world? • What would be possible with Self Sovereign Identity? 13.06.2023
Slide 5: Case 2: Buying wine with an E-ID
CASE 2 Your son has just turned 1 6 and wants to buy his first bottle of wine himself to celebrate the occasion. He orders it from the Haddock GmbH shop. The latter wants a valid proof of his age. He also has an e-ID and an e-wallet. • How are things today? • How is it different with the E-ID?
Slide 6: Self Sovereign Identity
SELF SOVEREIGN IDENTITY • The self-determined identity or Self-Sovereign Identity (SSI) brings the identity back to the user. • It works similarly to the physical identity. The user keeps the identity data with him (analogous to the ID in a wallet). • It works similarly to the physical identity. The
Slide 7: Holder, Issuer and Third parties
Information Holder Third parties Issuer (Verifier) Confederation, Universities, Banks, … Trust Trust anchor No direct link
Slide 8: E-ID – History
E-ID – HISTORY 1. June 2018 Adoption of the 17. December dispatch on the 2021: Federal First evaluations Federal Act on Council lays Electronic 02.12.2022: down the 13. May 2015 → "Concept for Swiss Identification principles for the majority is state-recognised E-ID systems". Services (E-ID Act) pos
Slide 9: Data protection
Public law REFERENCES REFERENCES PARTICIPANT PARTICIPANT PARTICIPANT 1 1 2 2 2 Verifiable Credential Data protection Issuer Credentials Holder Proof Verifier Civil law Private, bi-directional Private, bi-directional communication communication 3 WALLET & AGENTEN 3 WALLET & AGENTEN 3 4 Trust through
Slide 10: Silo-System vs Self Sovereign Identity
«Silo»-System Self Sovereign Identity physical proof of identity Intermediary
Slide 11: Role of Technology: Human Trust and Crypto Trust
ROLE OF ROLE OF THE TECHNOLOGY FEDERATION «HUMAN TRUST» «CRYPTO TRUST» Legitimised trust framework Cryptographic methods Decentralised, consensus-based Commonly defined and lived rules system technologies Accepted quality requirements Bidirectional, multi-device capable protocols Certified processes
Slide 12: Summary
SUMMARY • Self-Sovereign Identity (SSI) covers the various stakeholder and policy requirements for E-ID. • SSI enables the passport/ID to be brought into the digital world as one building block of a growing ecosystem. • SSI is independent of an issuing party and can be used for different identity pr
Slide 13: Who Am I?
Who Am I? An Important Comprehension of Self Sovereign Identity 13.06.2023 Seite 13
Slide 14: Delimitations
DELIMITATIONS Self Sovereign Identity is NOT: • Passport or Identity Card • Verification • Digital Signature • Fulfilment of a contractual formal requirement Seite 14
Slide 15: Identification vs Verification
Identification Verification Definition Detection features are Detection features are compared with several or all compared with only one references stored in the reference stored in the system system example The passport; identity card - Entering a PIN E-ID based on it Explication An identification
Slide 16: Digital signature and forms of contract
Digital signature and forms of contract 13.06.2023 Seite 16
Slide 17: Digital signature and forms of contract
DIGITAL SIGNATURE AND FORMS OF CONTRACT − Vertragliche Formvorschriften allgemein − Elektronische Signatur Forms of contract in general Digital signature Principle: Art. 14 Abs. 2bis Code of Obligations No formal requirement, Art. 11 CO 2bis An authenticated electronic signature combined with an aut
Slide 18: Data Protection
Data Protection 13.06.2023 Seite 18
Slide 19: What is data protection?
WHAT IS DATA PROTECTION? Data Protection = Protection of Personality Consent Legal Foundation Purpose Proportionality - Privacy by Accuracy Design Security - Privacy by Default Processing = any handling of data
Slide 20: What is meant by data processing?
WHAT IS MEANT BY DATA PROCESSING? receive Internal share processing store archive 20 delete
Slide 21: Overview of sanctions in data protection law
OVERVIEW OF SANCTIONS IN DATA PROTECTION LAW Who? Why? Sanction Sanctions EU • companies Sanctions pursuant to Art. 83 GDPR: • Fines of up to EUR For formal or material breaches of Art. 5-58 GDPR: 20,000,000 or 4% of the company's worldwide annual • Failure to comply with privacy by default (Art. 25
Slide 22: Data protection as a company asset
DATA PROTECTION AS A COMPANY ASSET data protection impact assessments Certifications: Art. 13 nDSG Processing directories: Art. 12 nDSG Overview and control of data processing within Codes of Conduct: the company; external Art. 11 nDSG and internal security Appointment of a data protection officer G
Slide 23: From Cost to Asset!
From Cost to Asset! 13.06.2023 Seite 23
Slide 24: SSI and Data Protection
SSI and Data Protection 13.06.2023 Seite 24
Slide 25: Principles of data protection
PRINCIPLES OF DATA PROTECTION • Privacy by Design Privacy Impact Assessment (PIA)Privacy by Technology: Data controllers are obliged to take appropriate technical measures. • Examples: • Adaptation of software • Adaptation of the organization • Privacy by Default Products must be set to be data prot
Slide 26: The role of data protection
THE ROLE OF DATA PROTECTION DSG • • Privacy by design User must have data sovereignty Personal data must be • Minimal data disclosure = Use of Zero-Knowledge-Proof protected (ZKP) "Nobody needs to know the date of birth for an age check". Maximum • No single point of failure possible data • Decentra
Slide 27: Governance
Governance Information Holder Third parties Issuer (Verifier) Confederation, Universities, Banks, … Trust Trust anchor No direct link
Slide 28: Key drivers in the shift to the next web
WHAT ARE THE KEY DRIVERS IN THE SHIFT TO THE NEXT WEB? • Trust/ Anchor of Trust -> Who? • Standardisation in CH and Europe • Privacy by Design/ Privacy by Default (Metadata) • Interdisciplinarity • Digital Ecosysteme → Physical World • User friendliness
Slide 29: Advantages and disadvantages
ADVANTAGES AND DISADVANTAGES • Everyone is master of their own data; Self Sovereign Identity • Sovereignty over the sharing and processing of one's own e-wallets • Clear overview of one's own data • Both private and corporate; SSI as an asset • Better implementation of Privacy by Design and Data Pro
Slide 30: Digital for a better World
Digital for a better World 13.06.2023 Seite 30
Slide 31: Secure forms of communications
SECURE FORMS OF COMMUNICATIONS Regular letter Registered Regular email Encrypted Signed Email Registered − Welche Chancen / Risiken bergen diese Kommunikationsmittel? Was können letter Email email sie nachweisen? Undeniability of receipt x x Undeniability of x x the sender Trustworthiness (x) x x x
Slide 32: Any questions?
Any questions? HSLU
Slide 33: Publikationen der Referentin
Publikationen der Referentin Digital in Law, Informatikrecht, Stämpfli Verlag 2021 Diverse Beiträge in IT-Business: Plattformen im Internet Heft 4/2022 Self-Sovereign-Identity: Eine Chance für die Schweizer E-ID? Heft 3/2022 Diverse Beiträge in IT Spektrum: EU – U.S. Data Privacy Framework Heft 1/20