Identity has been a contentious point for humanity ever since we evolved societies. How are we sure that someone is who they say they are? Before the modern age, there were several ways ancient civilizations did identity verification. Unfortunately, the scope and viability of those methods went out the window during the information age — and even more so during the dawn of the internet, as human interaction started to become replaced by digital connection. The internet’s identity and trust problems weren’t much of an issue when it first saw use. Most people would use phone lines to dial into bulletin board systems. Phone lines were linked to addresses, which were tied to people living in the house. If someone had enough patience, they could locate who was dialing into their BBS. However, the internet has evolved since then, to put it lightly, and its identity problems have kept pace with it.
As more casual users started to take advantage of the internet with Web1.0, individual data would have to be batched out. As the rise of personal experience websites came onto the scene, the back end needed to know which user data it should show to the person sitting at the screen. Developers solved this by constructing credential systems. Usernames and passwords would be stored on databases (sometimes encrypted) and were handy enough to be carried across ecosystems. Unfortunately, when you have a centralized database of usernames and passwords, the attack vectors for obtaining access to them are trivial. In the early days of login authentication, many young users tested their skills attempting to break into these Web1.0 databases, and many succeeded.
These early, clunky user-password authentication efforts evolved into ID management systems run by large corporations with the rise of Web2.0. Now, users can log in with a single click, using the API to share their login verification with whatever website requests it. This approach made it easier for developers to onboard users since it had much less friction than forcing them to sign up for a new account. Users today have several dozen accounts already on sites they might only use once. The obvious drawback of this system is that you can be banned or restricted if you go against the data holders. As an added bonus, these companies routinely sell the data they collect from users to third parties for all sorts of purposes, usually without the user being aware of it. While we’d like to think these massive corporations are secure, the sheer amount of data leaks coming from businesses like Facebook shows that this is a vain hope.
In 2008, Satoshi Nakamoto created Bitcoin intending to develop a trustless ecosystem for financial transactions. In essence, the Bitcoin blockchain is a conversation between two parties. The recipient asks, “Do you have the BTC I requested?” and the sender replies with a yes or a no, backed up by the blockchain’s record of their currently accessible funds. Bitcoin has its own problems, but the principle of a trustless network is sound, as has been evidenced by the widespread adoption of the world’s first cryptocurrency. Shyft Network seeks to take what Bitcoin developed and evolve it to the next level. But how do we intend to do that?
A blockchain can bring about tangible change in the world. Shyft Network is doing so by providing users and third parties with a single decentralized method of verifying credentials. The Shyft ecosystem involves several stakeholders, each with their part to play.
The Shyft Network aims to provide a method for users to share data with the companies they see fit. As an opt-in system, the data holder can deal with each request for their data individually. However, the Shyft Network offers more than just a method of verifying users. Some of the most current use cases have demonstrated the flexibility of the platform.
All of these use cases only scratch the surface of what Shyft is capable of, especially as we roll out open-sourcing of Veriscope, our latest and great DeFi compliance framework and smart-contract platform for VASPs to enable travel rule compliance. While we already have an idea of what can be done with our growing infrastructure, we’re excited to see how the evolution of the blockchain will bring about new and innovative approaches to personal verification within cyberspace. Stay tuned.