WEBVTT 99:59:59.999 --> 99:59:59.999 So I want to talk about identity. 99:59:59.999 --> 99:59:59.999 That's sort of an interesting enough topic to me. 99:59:59.999 --> 99:59:59.999 And the reason was, because when I was asked to do this, 99:59:59.999 --> 99:59:59.999 I'd just read, in one of the papers, I can't remember, 99:59:59.999 --> 99:59:59.999 something from someone at Facebook saying, well, 99:59:59.999 --> 99:59:59.999 we need to make everybody use their real names 99:59:59.999 --> 99:59:59.999 and then that's basically all the problems solved. 99:59:59.999 --> 99:59:59.999 And that's so wrong, 99:59:59.999 --> 99:59:59.999 that's such a fundamentally, reactionary view of identity, 99:59:59.999 --> 99:59:59.999 and it's going to get us into all sorts of trouble. 99:59:59.999 --> 99:59:59.999 And so what I thought I'd do 99:59:59.999 --> 99:59:59.999 is I'd explain four sort of problems about it, 99:59:59.999 --> 99:59:59.999 and then I'll suggest a solution, 99:59:59.999 --> 99:59:59.999 which hopefully you might find interesting. 99:59:59.999 --> 99:59:59.999 So just to frame the problem, 99:59:59.999 --> 99:59:59.999 what does authenticity mean? 99:59:59.999 --> 99:59:59.999 That's me, that's a camera phone picture of me 99:59:59.999 --> 99:59:59.999 looking at a painting. 99:59:59.999 --> 99:59:59.999 [What's the Problem? Just use "real names"] 99:59:59.999 --> 99:59:59.999 [for an "authentic" web] 99:59:59.999 --> 99:59:59.999 That's a painting that was painted by a very famous forger, 99:59:59.999 --> 99:59:59.999 and because I'm not very good at presentations, 99:59:59.999 --> 99:59:59.999 I already can't remember the name that I wrote on my card. 99:59:59.999 --> 99:59:59.999 And he was incarcerated in, I think, Wakefield Prison 99:59:59.999 --> 99:59:59.999 for forging masterpieces by, I think, French Impressionists. 99:59:59.999 --> 99:59:59.999 And he's so good at it, that when he was in prison, 99:59:59.999 --> 99:59:59.999 everybody in prison, the governor and whatever, 99:59:59.999 --> 99:59:59.999 wants him to paint masterpieces to put on the walls, 99:59:59.999 --> 99:59:59.999 because they were so good. 99:59:59.999 --> 99:59:59.999 And so that's a masterpiece, 99:59:59.999 --> 99:59:59.999 which is a fake of a masterpiece, 99:59:59.999 --> 99:59:59.999 and bonded into the canvas is a chip which identifies that as a real fake, 99:59:59.999 --> 99:59:59.999 if you see what I mean. [Laughter] 99:59:59.999 --> 99:59:59.999 So when we're talking about authenticity, 99:59:59.999 --> 99:59:59.999 it's a little more fractal than it appears and that's a good example to show it. 99:59:59.999 --> 99:59:59.999 I tried to pick four problems that will frame the issue properly. 99:59:59.999 --> 99:59:59.999 So the first problem, I thought, 99:59:59.999 --> 99:59:59.999 [Chip and PIN] Chip and PIN, right? 99:59:59.999 --> 99:59:59.999 [Banking legacies Bringing down the system from within] 99:59:59.999 --> 99:59:59.999 [Offline solutions do not work online] 99:59:59.999 --> 99:59:59.999 Everyone's got a chip and PIN card, 99:59:59.999 --> 99:59:59.999 I'm guessing everyone's got a chip and PIN card, right? 99:59:59.999 --> 99:59:59.999 So why is that a good example? 99:59:59.999 --> 99:59:59.999 That's the example of how legacy thinking about identity 99:59:59.999 --> 99:59:59.999 subverts the security of a well-constructed system. 99:59:59.999 --> 99:59:59.999 That chip and PIN card that's in your pocket 99:59:59.999 --> 99:59:59.999 has a little chip on it that cost millions of pounds to develop, 99:59:59.999 --> 99:59:59.999 is extremely secure, 99:59:59.999 --> 99:59:59.999 you can put scanning electron microscopes on it, 99:59:59.999 --> 99:59:59.999 you can try and grind it down, blah blah blah. 99:59:59.999 --> 99:59:59.999 Those chips have never been broken, whatever you read in the paper. 99:59:59.999 --> 99:59:59.999 And for a joke, we take that super-secure chip 99:59:59.999 --> 99:59:59.999 and we bond it to a trivially counterfeitable magnetic stripe 99:59:59.999 --> 99:59:59.999 and for very lazy criminals, we still emboss the card. 99:59:59.999 --> 99:59:59.999 So if you're a criminal in a hurry, and you need to copy someone's card, 99:59:59.999 --> 99:59:59.999 you can just stick a piece of paper on it and rub a pencil over it 99:59:59.999 --> 99:59:59.999 just to sort of speed things up. 99:59:59.999 --> 99:59:59.999 And even more amusingly, and on my debit card too, 99:59:59.999 --> 99:59:59.999 we print the name and the SALT code and everything else on the front too. 99:59:59.999 --> 99:59:59.999 Why? 99:59:59.999 --> 99:59:59.999 There is no earthly reason why your name is printed on a chip and PIN card. 99:59:59.999 --> 99:59:59.999 And if you think about it, 99:59:59.999 --> 99:59:59.999 it's even more insidious and perverse that it seems at first. 99:59:59.999 --> 99:59:59.999 Because the only people that benefit 99:59:59.999 --> 99:59:59.999 from having the name on the card are criminals. 99:59:59.999 --> 99:59:59.999 You know what your name is, right? 99:59:59.999 --> 99:59:59.999 [Laughter] 99:59:59.999 --> 99:59:59.999 And when you go into a shop and buy something, 99:59:59.999 --> 99:59:59.999 they don't care. 99:59:59.999 --> 99:59:59.999 It's a PIN, he doesn't care what the name is. 99:59:59.999 --> 99:59:59.999 The only place where you ever have to write your name on the back 99:59:59.999 --> 99:59:59.999 is in America at the moment. 99:59:59.999 --> 99:59:59.999 Whenever I go to America, 99:59:59.999 --> 99:59:59.999 and I have to pay with a mag stripe on the back of the card, 99:59:59.999 --> 99:59:59.999 I always sign it Carlos Tethers anyway, 99:59:59.999 --> 99:59:59.999 just as a security mechanism, 99:59:59.999 --> 99:59:59.999 because I just figure if a transaction ever gets disputed, 99:59:59.999 --> 99:59:59.999 and it comes back and it says Dave Birch, 99:59:59.999 --> 99:59:59.999 I know it must have been a criminal, 99:59:59.999 --> 99:59:59.999 because I would never sign it Dave Birch. 99:59:59.999 --> 99:59:59.999 So if you drop your card in the street, 99:59:59.999 --> 99:59:59.999 it means a criminal can pick it up and read it. 99:59:59.999 --> 99:59:59.999 They know the name, from the name they can find the address 99:59:59.999 --> 99:59:59.999 and then they can go off and buy stuff online. 99:59:59.999 --> 99:59:59.999 Why do we put the name on the card? 99:59:59.999 --> 99:59:59.999 Because we think identity is something to do with names, 99:59:59.999 --> 99:59:59.999 and because we're rooted in the idea of the identity card, 99:59:59.999 --> 99:59:59.999 which obsesses us. 99:59:59.999 --> 99:59:59.999 And I know it crashed and burned a couple of years ago, 99:59:59.999 --> 99:59:59.999 but if you're someone in politics or the home office or whatever, 99:59:59.999 --> 99:59:59.999 and you think about identity, 99:59:59.999 --> 99:59:59.999 you can only think of identity in terms of cards with names on them. 99:59:59.999 --> 99:59:59.999 And that's very subversive in a modern world. 99:59:59.999 --> 99:59:59.999 So the second example I thought I'd use 99:59:59.999 --> 99:59:59.999 is chatrooms. 99:59:59.999 --> 99:59:59.999 [Chatrooms and Children Don't do as I do, do as I say] 99:59:59.999 --> 99:59:59.999 [Online privacy and offline privacy are different] 99:59:59.999 --> 99:59:59.999 I'm very proud of that picture, that's my son 99:59:59.999 --> 99:59:59.999 playing in his band with his friends for the first-ever gig, 99:59:59.999 --> 99:59:59.999 I believe you call it, where he got paid. 99:59:59.999 --> 99:59:59.999 [Laughter] 99:59:59.999 --> 99:59:59.999 And I love that picture. 99:59:59.999 --> 99:59:59.999 I like the picture of him getting into medical school a lot better, 99:59:59.999 --> 99:59:59.999 [Laughter] 99:59:59.999 --> 99:59:59.999 but I like that picture for the moment. 99:59:59.999 --> 99:59:59.999 Why do I use that picture? 99:59:59.999 --> 99:59:59.999 Because that was very interesting, watching that experience, 99:59:59.999 --> 99:59:59.999 as an old person, 99:59:59.999 --> 99:59:59.999 was a very interesting experience to me. 99:59:59.999 --> 99:59:59.999 So him and his friends, 99:59:59.999 --> 99:59:59.999 they get together, they booked a room, like a church hall, 99:59:59.999 --> 99:59:59.999 and they got all their friends who had bands, 99:59:59.999 --> 99:59:59.999 and they got them together, 99:59:59.999 --> 99:59:59.999 and they do it all on Facebook, 99:59:59.999 --> 99:59:59.999 and then they sell tickets, and the first band on the - 99:59:59.999 --> 99:59:59.999 I was going to say "menu," that's probably the wrong word for it, 99:59:59.999 --> 99:59:59.999 isn't it? 99:59:59.999 --> 99:59:59.999 The first band on the list of bands 99:59:59.999 --> 99:59:59.999 that appears at some public music performance of some kind 99:59:59.999 --> 99:59:59.999 gets the sales of the first 20 tickets, 99:59:59.999 --> 99:59:59.999 and the next band gets the next 20, 99:59:59.999 --> 99:59:59.999 and so on. 99:59:59.999 --> 99:59:59.999 They were at the bottom of the menu, 99:59:59.999 --> 99:59:59.999 they were like fifth, I thought they had no chance. 99:59:59.999 --> 99:59:59.999 He actually got 20 quid. Fantastic, right? 99:59:59.999 --> 99:59:59.999 But my point is, that all worked perfectly 99:59:59.999 --> 99:59:59.999 except on the web. 99:59:59.999 --> 99:59:59.999 So they're sitting on Facebook, 99:59:59.999 --> 99:59:59.999 and they're sending these messages and arranging things 99:59:59.999 --> 99:59:59.999 and they don't know who anybody is. 99:59:59.999 --> 99:59:59.999 That's the big problem we're trying to solve. 99:59:59.999 --> 99:59:59.999 If only they were using the real names, 99:59:59.999 --> 99:59:59.999 Then you wouldn't be worried about them on the internet. 99:59:59.999 --> 99:59:59.999 And so when he says to me, 99:59:59.999 --> 99:59:59.999 oh, I want to go to a chatroom to talk about guitars or something, 99:59:59.999 --> 99:59:59.999 I'm like, oh, well, I don't want you to go into a chatroom 99:59:59.999 --> 99:59:59.999 to talk about guitars, because they might not all be your friends, 99:59:59.999 --> 99:59:59.999 and some of the people that are in the chatroom 99:59:59.999 --> 99:59:59.999 might be perverts and teachers and vicars. 99:59:59.999 --> 99:59:59.999 [Laughter] 99:59:59.999 --> 99:59:59.999 I mean, they generally are, when you look in the paper, right? 99:59:59.999 --> 99:59:59.999 So I want to know who the people in the chatroom are. 99:59:59.999 --> 99:59:59.999 So okay, you can go in the chatroom, 99:59:59.999 --> 99:59:59.999 but only if everybody in the chatroom is using their real names, 99:59:59.999 --> 99:59:59.999 and they submit full copies of their police report. 99:59:59.999 --> 99:59:59.999 But of course, if anybody in the chatroom asked for his real name, 99:59:59.999 --> 99:59:59.999 I'd say no. You can't give them your real name. 99:59:59.999 --> 99:59:59.999 Because what happens if they turn out to be perverts, 99:59:59.999 --> 99:59:59.999 and teachers and whatever, 99:59:59.999 --> 99:59:59.999 So you have this odd sort of paradox, 99:59:59.999 --> 99:59:59.999 where I'm happy for him to go into this space 99:59:59.999 --> 99:59:59.999 if I know who everybody else is, 99:59:59.999 --> 99:59:59.999 but I don't want anybody else to know who he is. 99:59:59.999 --> 99:59:59.999 And so you get this sort of logjam around identity 99:59:59.999 --> 99:59:59.999 where you want full disclosure from everybody else, 99:59:59.999 --> 99:59:59.999 but not from yourself. 99:59:59.999 --> 99:59:59.999 And there's no progress, we get stuck. 99:59:59.999 --> 99:59:59.999 And so the chatroom thing doesn't work properly, 99:59:59.999 --> 99:59:59.999 and it's a very bad way of thinking about identity. 99:59:59.999 --> 99:59:59.999 So on my RSS feed, I saw this thing about - 99:59:59.999 --> 99:59:59.999 I just said something bad about my RSS feed, didn't I? 99:59:59.999 --> 99:59:59.999 I should stop saying it like that. 99:59:59.999 --> 99:59:59.999 [Cheerleaders and Clubs Age and attitude] 99:59:59.999 --> 99:59:59.999 [Let's not panic The power of subgroups] 99:59:59.999 --> 99:59:59.999 For some random reason I can't imagine, 99:59:59.999 --> 99:59:59.999 something about cheerleaders turned up in my inbox. 99:59:59.999 --> 99:59:59.999 And I read this story about cheerleaders, 99:59:59.999 --> 99:59:59.999 and it's a fascinating story. 99:59:59.999 --> 99:59:59.999 This happened a couple of years ago in the U.S. 99:59:59.999 --> 99:59:59.999 There were some cheerleaders in a team in a high school 99:59:59.999 --> 99:59:59.999 in the U.S., and they said mean things 99:59:59.999 --> 99:59:59.999 about their cheerleading coach, 99:59:59.999 --> 99:59:59.999 as I'm sure kids do about all of their teachers 99:59:59.999 --> 99:59:59.999 all of the time, 99:59:59.999 --> 99:59:59.999 and somehow the cheerleading coach found out about this. 99:59:59.999 --> 99:59:59.999 She was very upset. 99:59:59.999 --> 99:59:59.999 And so she went to one of the girls, and said, 99:59:59.999 --> 99:59:59.999 you have to give me your Facebook password. 99:59:59.999 --> 99:59:59.999 I read this all the time, even at some universities, 99:59:59.999 --> 99:59:59.999 and places of education, 99:59:59.999 --> 99:59:59.999 kids are forced to hand over their Facebook passwords. 99:59:59.999 --> 99:59:59.999 So you've got o give them your Facebook password. 99:59:59.999 --> 99:59:59.999 And so the kids - she was a kid. 99:59:59.999 --> 99:59:59.999 What she should have said 99:59:59.999 --> 99:59:59.999 is my lawyer will be calling you first thing in the morning. 99:59:59.999 --> 99:59:59.999 It's an outrageous imposition 99:59:59.999 --> 99:59:59.999 on my 4th Amendment right to privacy, 99:59:59.999 --> 99:59:59.999 and you're going to be sued for all the money you've got. 99:59:59.999 --> 99:59:59.999 That's what she should have said. 99:59:59.999 --> 99:59:59.999 But she's a kid, so she hands over the password. 99:59:59.999 --> 99:59:59.999 The teacher can't log into Facebook, 99:59:59.999 --> 99:59:59.999 because the school has blocked access to Facebook. 99:59:59.999 --> 99:59:59.999 So the teacher can't log into Facebook until she gets home. 99:59:59.999 --> 99:59:59.999 So the girl tells her friends, 99:59:59.999 --> 99:59:59.999 guess what happened. 99:59:59.999 --> 99:59:59.999 So the girls just all logged into Facebook on their phones, 99:59:59.999 --> 99:59:59.999 and deleted their profiles. 99:59:59.999 --> 99:59:59.999 And so when the teacher logged in, there was nothing there. 99:59:59.999 --> 99:59:59.999 My point is, those identities, they don't think about them the same way. 99:59:59.999 --> 99:59:59.999 Identity is, especially when you're a teenager, a fluid thing. 99:59:59.999 --> 99:59:59.999 You have lots of identities. 99:59:59.999 --> 99:59:59.999 And you can have an identity, you don't like it, 99:59:59.999 --> 99:59:59.999 because it's subverted in some way, or it's insecure, or it's inappropriate, 99:59:59.999 --> 99:59:59.999 you just delete it and get another one. 99:59:59.999 --> 99:59:59.999 The idea that you have an identity that's given to you by someone, 99:59:59.999 --> 99:59:59.999 the government or whatever, 99:59:59.999 --> 99:59:59.999 and you have to stick with that identity and use it in all places, 99:59:59.999 --> 99:59:59.999 that's absolutely wrong. 99:59:59.999 --> 99:59:59.999 Why would you want to really know who someone was on Facebook, 99:59:59.999 --> 99:59:59.999 unless you wanted to abuse them and harass them in some way? 99:59:59.999 --> 99:59:59.999 And it just doesn't work properly. 99:59:59.999 --> 99:59:59.999 And my fourth example is there are some cases 99:59:59.999 --> 99:59:59.999 where you really want to be - 99:59:59.999 --> 99:59:59.999 In case you're wondering, that's me at the G20 protest. 99:59:59.999 --> 99:59:59.999 I wasn't actually at the G20 protest, but I had a meeting at a bank, 99:59:59.999 --> 99:59:59.999 on the day of the G20 protest, and I got an email from the bank 99:59:59.999 --> 99:59:59.999 saying please don't wear a suit, because it'll inflame the protestors. 99:59:59.999 --> 99:59:59.999 I look pretty good in a suit, frankly, 99:59:59.999 --> 99:59:59.999 so you can see why it would drive them 99:59:59.999 --> 99:59:59.999 into an anti-capitalist frenzy. 99:59:59.999 --> 99:59:59.999 [Laughter] 99:59:59.999 --> 99:59:59.999 So I thought, well, look. 99:59:59.999 --> 99:59:59.999 If I don't want to inflame the protestors, 99:59:59.999 --> 99:59:59.999 the obvious thing to do is go dressed as a protestor. 99:59:59.999 --> 99:59:59.999 So I went dressed completely in black, 99:59:59.999 --> 99:59:59.999 You know, with a black [inaudible], I had black gloves on, 99:59:59.999 --> 99:59:59.999 but I've taken them off to sign the visitor's book. 99:59:59.999 --> 99:59:59.999 [What, Who, and Whistleblowers Whistleblowers and credentials] 99:59:59.999 --> 99:59:59.999 [I must know what you are, not who you are] 99:59:59.999 --> 99:59:59.999 (Laughter) 99:59:59.999 --> 99:59:59.999 I'm wearing black trousers, black boots, 99:59:59.999 --> 99:59:59.999 I'm dressed completely in black. 99:59:59.999 --> 99:59:59.999 I go into the bank at 10 o'clock, 99:59:59.999 --> 99:59:59.999 go, oh hi, I'm Dave Birch, 99:59:59.999 --> 99:59:59.999 I've got a 3 o'clock with [inaudible]. 99:59:59.999 --> 99:59:59.999 Sure. And they signed me in. 99:59:59.999 --> 99:59:59.999 (Laughter) 99:59:59.999 --> 99:59:59.999 So this nonsense 99:59:59.999 --> 99:59:59.999 about you've got to have real names on Facebook or whatever, 99:59:59.999 --> 99:59:59.999 that gets you that kind of security. 99:59:59.999 --> 99:59:59.999 That gets you security theater, where there's no actual security, 99:59:59.999 --> 99:59:59.999 but people are sort of playing parts in a play about security. 99:59:59.999 --> 99:59:59.999 And as long as everybody learns their lines, 99:59:59.999 --> 99:59:59.999 everyone's happy. 99:59:59.999 --> 99:59:59.999 But it's not real security. 99:59:59.999 --> 99:59:59.999 Especially because I hate banks more than the G20 protestors do, 99:59:59.999 --> 99:59:59.999 because I work for them. 99:59:59.999 --> 99:59:59.999 I know that things are actually worse than these guys think. 99:59:59.999 --> 99:59:59.999 (Laughter) 99:59:59.999 --> 99:59:59.999 But suppose I worked next to sombody in a bank 99:59:59.999 --> 99:59:59.999 who was doing something. 99:59:59.999 --> 99:59:59.999 Suppose I was sitting next to a rogue trader, 99:59:59.999 --> 99:59:59.999 and I want to report it to the boss of the bank. 99:59:59.999 --> 99:59:59.999 So I log on to do a little bit of whistleblowing. 99:59:59.999 --> 99:59:59.999 I send a message, this guy's a rogue trader. 99:59:59.999 --> 99:59:59.999 That message is meaningless 99:59:59.999 --> 99:59:59.999 if you don't know that I'm a trader at the bank. 99:59:59.999 --> 99:59:59.999 If that message just comes from anybody, 99:59:59.999 --> 99:59:59.999 it has zero information value. 99:59:59.999 --> 99:59:59.999 There's no point in sending that message. 99:59:59.999 --> 99:59:59.999 You have to know. 99:59:59.999 --> 99:59:59.999 But if I have to prove who I am, 99:59:59.999 --> 99:59:59.999 I'll never send that message. 99:59:59.999 --> 99:59:59.999 It's just like the nurse in the hospital reporting the drunk surgeon. 99:59:59.999 --> 99:59:59.999 That message will only happen if I'm anonymous. 99:59:59.999 --> 99:59:59.999 So the system has to have ways of providing anonymity there, 99:59:59.999 --> 99:59:59.999 otherwise we don't get where we want to get to. 99:59:59.999 --> 99:59:59.999 So four issues. So what are we going to do about it? 99:59:59.999 --> 99:59:59.999 Well, what we tend to do about it 99:59:59.999 --> 99:59:59.999 is we think about Orwell space. 99:59:59.999 --> 99:59:59.999 We try to make electronic versions 99:59:59.999 --> 99:59:59.999 of the identity card that we got rid of in 1953. 99:59:59.999 --> 99:59:59.999 [The Old Paradigm Can't resolve in Orwell space]\ 99:59:59.999 --> 99:59:59.999 [But Orwell is a paradigm for government and its critics] 99:59:59.999 --> 99:59:59.999 So we think if we had a card, 99:59:59.999 --> 99:59:59.999 call it a Facebook login, 99:59:59.999 --> 99:59:59.999 which proves who you are, 99:59:59.999 --> 99:59:59.999 and I make you carry it all the time, 99:59:59.999 --> 99:59:59.999 that solves the problem. 99:59:59.999 --> 99:59:59.999 And of course, for all those reasons I just outlined, 99:59:59.999 --> 99:59:59.999 it doesn't, and it might actually make some problems worse. 99:59:59.999 --> 99:59:59.999 The more times you're forced to use your real identity, 99:59:59.999 --> 99:59:59.999 in transactional terms, 99:59:59.999 --> 99:59:59.999 the more likely that identity is to get stolen and subverted. 99:59:59.999 --> 99:59:59.999 The goal is to stop people from using identity 99:59:59.999 --> 99:59:59.999 in transactions which don't need identity, 99:59:59.999 --> 99:59:59.999 which is actually almost all transactions. 99:59:59.999 --> 99:59:59.999 Almost all of the transactions you do 99:59:59.999 --> 99:59:59.999 are not, who are you? 99:59:59.999 --> 99:59:59.999 They're, are you allowed to drive the car, 99:59:59.999 --> 99:59:59.999 are you allowed in the building, 99:59:59.999 --> 99:59:59.999 are you over 18, 99:59:59.999 --> 99:59:59.999 etcetera, etcetera. 99:59:59.999 --> 99:59:59.999 So my suggestion- I, like James, 99:59:59.999 --> 99:59:59.999 think that there should be a resurgence of interest in R & D. 99:59:59.999 --> 99:59:59.999 I think this is a solvable problem. 99:59:59.999 --> 99:59:59.999 It's something we can do about. 99:59:59.999 --> 99:59:59.999 Naturally, in these circumstances, 99:59:59.999 --> 99:59:59.999 I turn to Doctor Who. 99:59:59.999 --> 99:59:59.999 Because in this, 99:59:59.999 --> 99:59:59.999 as in so many other walks of life, 99:59:59.999 --> 99:59:59.999 Doctor Who has already shown us the answer. 99:59:59.999 --> 99:59:59.999 So I should say, 99:59:59.999 --> 99:59:59.999 for some of our foreign visitors, 99:59:59.999 --> 99:59:59.999 Doctor Who is the greatest living scientist in England, 99:59:59.999 --> 99:59:59.999 (Laughter) 99:59:59.999 --> 99:59:59.999 and a beacon of truth and enlightenment to all of us. 99:59:59.999 --> 99:59:59.999 [The New Paradigm Doctor Who and the "psychic paper"] 99:59:59.999 --> 99:59:59.999 And this is Doctor Who with his psychic paper. 99:59:59.999 --> 99:59:59.999 You're not nerds if you say yes. 99:59:59.999 --> 99:59:59.999 Who's seen Doctor Who's psychic paper? 99:59:59.999 --> 99:59:59.999 Oh right, you were in the library the whole time studying I guess. 99:59:59.999 --> 99:59:59.999 Is that what you're going to tell us? 99:59:59.999 --> 99:59:59.999 Doctor Who's psychic paper 99:59:59.999 --> 99:59:59.999 is when you hold up the psychic paper, 99:59:59.999 --> 99:59:59.999 the person, in their brain, 99:59:59.999 --> 99:59:59.999 sees the thing that they need to see. 99:59:59.999 --> 99:59:59.999 So I want to show you a British passport, 99:59:59.999 --> 99:59:59.999 I hold up the psychic paper, 99:59:59.999 --> 99:59:59.999 you see a British passport. 99:59:59.999 --> 99:59:59.999 I want to get into a party, 99:59:59.999 --> 99:59:59.999 I hold up the psychic paper, 99:59:59.999 --> 99:59:59.999 I show you a party invitation. 99:59:59.999 --> 99:59:59.999 You see what you want to see. 99:59:59.999 --> 99:59:59.999 So what I'm saying is we need to make an electronic version of that, 99:59:59.999 --> 99:59:59.999 but with one tiny, tiny change, 99:59:59.999 --> 99:59:59.999 which is that it'll only show you the British passport 99:59:59.999 --> 99:59:59.999 if I've actually got one. 99:59:59.999 --> 99:59:59.999 It'll only show you the party invitation 99:59:59.999 --> 99:59:59.999 if I actually have one. 99:59:59.999 --> 99:59:59.999 It will only show you that I'm over 18 if I actually am over 18. 99:59:59.999 --> 99:59:59.999 But nothing else. 99:59:59.999 --> 99:59:59.999 So you're the bouncer at the pub, you need to know that I'm over 18, 99:59:59.999 --> 99:59:59.999 instead of showing you my driving license, 99:59:59.999 --> 99:59:59.999 which shows you that I know haw to drive, 99:59:59.999 --> 99:59:59.999 what my name is, my address, all these kind of things, 99:59:59.999 --> 99:59:59.999 I show you my psychic paper, 99:59:59.999 --> 99:59:59.999 and all it tells you is am I over 18 or not. 99:59:59.999 --> 99:59:59.999 Right. 99:59:59.999 --> 99:59:59.999 Is that just a pipe dream? 99:59:59.999 --> 99:59:59.999 Of course not, or else I wouldn't be here talking to you. 99:59:59.999 --> 99:59:59.999 So in order to build that and make it work, 99:59:59.999 --> 99:59:59.999 I'm only going to name these things, I'll not go into them, 99:59:59.999 --> 99:59:59.999 we need a plan, 99:59:59.999 --> 99:59:59.999 [A Plan Let's build a Psychic ID infrastructure] 99:59:59.999 --> 99:59:59.999 which is we're going to build this 99:59:59.999 --> 99:59:59.999 as an infrastructure for everybody to use, 99:59:59.999 --> 99:59:59.999 to solve all of these problems. 99:59:59.999 --> 99:59:59.999 We're going to make a utility, 99:59:59.999 --> 99:59:59.999 the utility has to be universal, 99:59:59.999 --> 99:59:59.999 you can use it everywhere, 99:59:59.999 --> 99:59:59.999 I'm just giving you little flashes of the technology 99:59:59.999 --> 99:59:59.999 as we go along. 99:59:59.999 --> 99:59:59.999 [Utility: Universal] 99:59:59.999 --> 99:59:59.999 [What if identity isn't a particular product or service] 99:59:59.999 --> 99:59:59.999 [but a (regulated) utility that works in both "first life"] 99:59:59.999 --> 99:59:59.999 [and in "second life"] 99:59:59.999 --> 99:59:59.999 That's a Japanese ATM, 99:59:59.999 --> 99:59:59.999 the fingerprint template is stored inside the mobile phone. 99:59:59.999 --> 99:59:59.999 So when you want to draw money out, 99:59:59.999 --> 99:59:59.999 you put the mobile phone on the ATM, 99:59:59.999 --> 99:59:59.999 and touch your finger, 99:59:59.999 --> 99:59:59.999 your fingerprint goes through to the phone, 99:59:59.999 --> 99:59:59.999 the phone says yes, that's whoever, 99:59:59.999 --> 99:59:59.999 and the ATM then gives you some money. 99:59:59.999 --> 99:59:59.999 So it has to be a utility that can use it, 99:59:59.999 --> 99:59:59.999 that you can use everywhere. 99:59:59.999 --> 99:59:59.999 [Utility: Convenience] 99:59:59.999 --> 99:59:59.999 [Speed is of the essence, and now we have contactless and NFC] 99:59:59.999 --> 99:59:59.999 [we can deliver it to make identity work properly] 99:59:59.999 --> 99:59:59.999 [without getting in the way] 99:59:59.999 --> 99:59:59.999 It has to be absolutely convenient, 99:59:59.999 --> 99:59:59.999 that's me going into the pub. 99:59:59.999 --> 99:59:59.999 All the device on the door of the pub is, 99:59:59.999 --> 99:59:59.999 is this person over 18 and not barred from the pub? 99:59:59.999 --> 99:59:59.999 And so the idea is, you touch your ID card to the door, 99:59:59.999 --> 99:59:59.999 and if I am allowed in, it shows my picture, 99:59:59.999 --> 99:59:59.999 if I'm not allowwed in, it shows a red cross. 99:59:59.999 --> 99:59:59.999 It doesn't disclose any other information. 99:59:59.999 --> 99:59:59.999 It has to have no special gadgets. 99:59:59.999 --> 99:59:59.999 [Utility: No Special Gadgets!] 99:59:59.999 --> 99:59:59.999 That can only mean one thing, 99:59:59.999 --> 99:59:59.999 following on from Ross's statement, 99:59:59.999 --> 99:59:59.999 which I agree with completely. 99:59:59.999 --> 99:59:59.999 If it means no special gadgets, 99:59:59.999 --> 99:59:59.999 it has to run on a mobile phone. 99:59:59.999 --> 99:59:59.999 That's the only choice we have, 99:59:59.999 --> 99:59:59.999 we have to make it work on mobile phones. 99:59:59.999 --> 99:59:59.999 There are 6.6 billion mobile phone subscriptions. 99:59:59.999 --> 99:59:59.999 My favorite statistic of all time, 99:59:59.999 --> 99:59:59.999 only 4 billion toothbrushes in the world. 99:59:59.999 --> 99:59:59.999 That means something, I don't know what. 99:59:59.999 --> 99:59:59.999 (Laughter) 99:59:59.999 --> 99:59:59.999 I rely on our futurologists to tell me. 99:59:59.999 --> 99:59:59.999 It has to be a utility which is extensible. 99:59:59.999 --> 99:59:59.999 [Utility: Extensibility] 99:59:59.999 --> 99:59:59.999 [People should be able to build new businesses] 99:59:59.999 --> 99:59:59.999 [using the identity utility without special permissions or licenses,] 99:59:59.999 --> 99:59:59.999 [it should be like broadband or electricity] 99:59:59.999 --> 99:59:59.999 So it has to be something 99:59:59.999 --> 99:59:59.999 that anybody could build on. 99:59:59.999 --> 99:59:59.999 Anybody should be able to use this infrastructure, 99:59:59.999 --> 99:59:59.999 you don't need permissions, licenses, whatever, 99:59:59.999 --> 99:59:59.999 anybody should be able to write some code to do this. 99:59:59.999 --> 99:59:59.999 You know what symmetry is, 99:59:59.999 --> 99:59:59.999 so you don't need a picture of it. 99:59:59.999 --> 99:59:59.999 This is how we're going to do it. 99:59:59.999 --> 99:59:59.999 We're going to do it using phones, 99:59:59.999 --> 99:59:59.999 and we're going to do it using mobile proximity. 99:59:59.999 --> 99:59:59.999 I'm going to suggest to you 99:59:59.999 --> 99:59:59.999 the technology to implement Doctor Who's psychic paper 99:59:59.999 --> 99:59:59.999 is already here, and if any of you 99:59:59.999 --> 99:59:59.999 have got one of the new Barclay's debit cards 99:59:59.999 --> 99:59:59.999 with the contactless interface on it, 99:59:59.999 --> 99:59:59.999 you've already got that technology. 99:59:59.999 --> 99:59:59.999 If you've ever been up to the big city, 99:59:59.999 --> 99:59:59.999 and used an Oyster card at all, 99:59:59.999 --> 99:59:59.999 does that ring any bells to anybody? 99:59:59.999 --> 99:59:59.999 The technology already exists. 99:59:59.999 --> 99:59:59.999 The first phones that have the technology built in, 99:59:59.999 --> 99:59:59.999 the Google Nexus, the X2, the Samsung Wifi 7.9, 99:59:59.999 --> 99:59:59.999 the first phones that have got this technology built into them 99:59:59.999 --> 99:59:59.999 are already in the shops. 99:59:59.999 --> 99:59:59.999 So the idea that the gas man can turn up at my mom's door 99:59:59.999 --> 99:59:59.999 and he can show my mom his phone, 99:59:59.999 --> 99:59:59.999 and she can tap it with her phone, 99:59:59.999 --> 99:59:59.999 and it will come up with green if he really is from British Gas 99:59:59.999 --> 99:59:59.999 and allowed in, 99:59:59.999 --> 99:59:59.999 and it'll come up with red if he isn't, end of story. 99:59:59.999 --> 99:59:59.999 We have the technology to do that. 99:59:59.999 --> 99:59:59.999 And what's more, 99:59:59.999 --> 99:59:59.999 although some of those things sounded a bit counter-intuitive, 99:59:59.999 --> 99:59:59.999 like proving I'm over 18 without proving who I am, 99:59:59.999 --> 99:59:59.999 the cryptography to do that not only exists, 99:59:59.999 --> 99:59:59.999 it's extremely well-known and well-understood. 99:59:59.999 --> 99:59:59.999 Digital signatures, the blinding of public key certificates, 99:59:59.999 --> 99:59:59.999 these technologies have been around for a while, 99:59:59.999 --> 99:59:59.999 we've just had no way of packaging them up. 99:59:59.999 --> 99:59:59.999 So the technology already exists. 99:59:59.999 --> 99:59:59.999 We know it works, 99:59:59.999 --> 99:59:59.999 There are a few examples of the technology being used 99:59:59.999 --> 99:59:59.999 in experimental places. 99:59:59.999 --> 99:59:59.999 That's London Fashion Week, 99:59:59.999 --> 99:59:59.999 where we built a system with O2, 99:59:59.999 --> 99:59:59.999 that's for the Wireless Festival in Hyde Park, 99:59:59.999 --> 99:59:59.999 you can see the persons 99:59:59.999 --> 99:59:59.999 walking in with their VIP band, 99:59:59.999 --> 99:59:59.999 it's just being checked 99:59:59.999 --> 99:59:59.999 by the Nokia phone that's reading the band. 99:59:59.999 --> 99:59:59.999 I'm only putting those up to show you 99:59:59.999 --> 99:59:59.999 these things are prosaic, this stuff works in these environments. 99:59:59.999 --> 99:59:59.999 They don't need to be special. 99:59:59.999 --> 99:59:59.999 So finally, I know that you can do this, 99:59:59.999 --> 99:59:59.999 Because if you saw the episode of Doctor Who, 99:59:59.999 --> 99:59:59.999 the Easter special of Doctor Who, 99:59:59.999 --> 99:59:59.999 [Life on Mars Dr. Who and the "psychic paper"] 99:59:59.999 --> 99:59:59.999 where he went to Mars in a bus, 99:59:59.999 --> 99:59:59.999 I should say again for our foreign students, 99:59:59.999 --> 99:59:59.999 that doesn't happen every episode. 99:59:59.999 --> 99:59:59.999 This was a very special case. 99:59:59.999 --> 99:59:59.999 So in the episode where he goes to Mars in a London bus, 99:59:59.999 --> 99:59:59.999 I can't show you the clip, 99:59:59.999 --> 99:59:59.999 due to the outrageous restrictions of Queen Anne-style copyright 99:59:59.999 --> 99:59:59.999 by the BBC, 99:59:59.999 --> 99:59:59.999 but in the episode where he goes to Mars in a London bus, 99:59:59.999 --> 99:59:59.999 Doctor Who is clearly shown getting on to the bus 99:59:59.999 --> 99:59:59.999 with the Oyster card reader 99:59:59.999 --> 99:59:59.999 using his psychic paper. 99:59:59.999 --> 99:59:59.999 Which proves that psychic paper 99:59:59.999 --> 99:59:59.999 has an MSE interface. 99:59:59.999 --> 99:59:59.999 Thank you very much.