#Goodstart

Blockchain and Digital Identity: Gravity

Barnaby Nelson and Johannes Ebert Season 1 Episode 2

Gravity are working to put individuals in control of their identities: using blockchain to create mobile, data wallets. By helping refugees and others to store and share data elements from their phones whenever they are applying for education or work, Gravity is helping those in need to integrate and to leave behind the constraints of camp-life.

Johannes Ebert (from Gravity) explains how

Speaker 1:

There are 1 billion people in the world today without an identity, many of whom are refugees.

:

Even if they have food and shelter. How on earth do these billion people get an education, a job or even access to finance? Equally, how can organizations and businesses look after them when they know nothing about them? Working with refugees in Kenya, the organization Gravity is helping individuals to take control of their identities, creating mobile data-wallets for people's phones where they can log, store and share personal data whenever they apply for education, for health care or even for a SIM card. Because it's on the blockchain, the data can't be tampered with, but Gravity has also gone to huge lengths to make sure that the people entering the data can be trusted as much as the technology itself. The result: refugees who can create and manage their own identities as a first step towards taking back their place in society. It's a real pleasure to have Johannes here from gravity. To explain how this works.

Speaker 3:

Johannes, maybe we can start by describing the problem as you as you saw it when you started Gravity?

:

First of all, thanks for having me. It's true that the digital identity problem has gained a lot of traction. There are figures out there estimating that there are 1.7 billion unbanked globally and 1 billion people without an identity: with budgets for refugees decreasing every year. But in Kenya for example, the number of refugees who depend 100% on aid is actually not decreasing. So self-reliance, and dignity of choice are super high on the agenda. There's also lots of confusion I think. On one hand, there is the legal identity part: lots of people don't have a legal identity and that is an issue that governments eventually have to resolve. The technology is not the limiting factor here.

Speaker 3:

But then there's the wider sense of identity: what can I prove about myself that goes beyond just my date of birth and my name? And that is where digital identity and systems that help to aggregate trusted credentials can have a big impact.

:

Take a refugee kid, for example. If a refugee arrives in a camp, obviously they are very much unknown, especially in East Africa. They don't even have an ID credential. So they will be registered by the UNHCR, who take a biometric and then add some attributes that the individual basically self-claims(like my name is this and this is my child and I am this age). And then it's basically the government's responsibility to issue legal identities for these people so that they can access services where official government issued identity are required- like financial and telecommunication services, etc. But many governments are quite slow with that, so refugees who are there for years still might not have a legal identity. So an economy develops informally- and that makes it very difficult because very little is known then about this huge population of more than a hundred thousand people. What is known is not very reliable(it's basically self claimed data from the beginning) and so it's hard for private businesses, aid organizations or even governments to provide their services. If people don't have identities from the government and are therefore able to access the traditional economy, they get stuck with the alternative- namely the grey economy within camps. And some of these seem to work quite well actually, these informal systems: Kakuma camp(in Kenya) is a whole micro-economy in itself. There has been a World Bank report that was released to draw attention to the topic, but of course it would be much better to integrate them into the formal economy: to take them from"I get my credit from my savings group" to"I get business credit from a bank- or a digital lender- to scale up my business". And that's what keeps 400 million people unbanked. Presumably that's what Gravity is for, right? Yes. That's what Gravity is for: What do these stakeholders(businesses, aid organizations, governments, etc.) need to know in order to serve their products or to employ these people? And what, on the other hand, do refugees need to prove to be economically included. Do they save? How much do they save? Do they own a business? What services do they use? Do they go to school? What are their skills? If I'm a private business, I want to know what skills there are in a refugee camp. And all these things are unknown. Gravity is about empowering individuals by providing them a means to aggregate credentials about their identity and their personal data. All the things that I mention(which stakeholders need to know) are often already somewhere: but either they are not yet digital(for example NGOs train lots of refugees and skills are created; but the skill-creation and the credentials are not digitized and they are not handed over to the refugee) or maybe they are in a UNHCR database somewhere. But our vision is to give each individual a digital wallet where they can pick from all these different sources- and even where their neighbors or their community-leaders can make statements and issue credentials to their wallet- and hence give these people a chance to build a rich economic profile that can then be accessed by all kinds of other servers. So essentially, if a refugee is relying on a number of providers(for example healthcare, education, banking services, etc.) Gravity exists to be able to strengthen the bridge between the refugee and those institutions. It's kind of like the inter-operable layer between all these services, but instead of building a centralized database, that point of aggregation is the individual's wallet. So effectively the individual takes control of their data: building it and getting it validated such that it becomes useful.

Speaker 1:

The major question then is how do you go about doing this? What does the actual platform looked like that facilitates that bridge?

:

There is the wallet platform: where individuals can create a wallet that can be securely stored in the cloud. They then access it with a basic phone and do basic operations; or as they access it as a smartphone app, in which case data can be stored exclusively on the smartphone. We've built an education product for example: where it is easy for an NGO or even a university set up defined credentials in minutes and then they are able to start issuing digital credentials. Education is an important important thing, especially for refugees, and so having trusted education credentials that are reconciled on their wallet with, perhaps, their UNHCR ID is important. If they want to apply for a scholarship(which is a'high-impact identity transaction') if you can't do that because there's a data mismatch then your life takes on a completely different trajectory. And then it's also a way to get standardized education data: because credentials and achievements can be stored on these wallets and then accessed from the outside. So you have your kind of central pool of data and then you have an education app(for example) or there might be a healthcare app- and there might be other ones that are all tailored to the specific ecosystem of that industry. Is that right? That's right. Savings groups can digitize their business, for example. The members of a savings group can look at their accounts on a simple interface and then have a better bookkeeping. That would be a product that we would sell and that then feeds into the wallet.

Speaker 3:

The fundamental question here then is trust. It's one thing to publish a lot of information on Linkedin or Facebook- and all those things have a lot of information- but the trust element is the make or break here I assume, right?

:

Yes. Trust in terms of the users. Trust in how the data is stored and that they actually have full agency over their data. And then trust in that the receiving parties trust these credentials, based on being able to prove that they come from a certain entity. And where does blockchain come into that? Blockchain itself serves as the registry. No data is stored on the blockchain. But if a transaction is made, such as you making a statement about me doing this podcast, then this would be issued to my wallet as a credential and then the hash of this transaction or of this statement would be stored on the blockchain. And then it's essentially a registry. Someone else can look up"hey, did this transaction actually happen?" and people could verify that you actually issued that credential. If I am an employer and someone applies for a job and they've sent their university certificate, there are very few where you can go today(like a verify.name.university.com) to check whether this person actually graduated from university. A centralized registry would be already quite useful- but the benefit that comes with blockchain is that it is also tamper proof. So I know that once I put something on the registry, your proof of transaction, it cannot be changed. And that is the big benefit. And the other benefit is that it is decentralised: so no one entity needs to host that registry and no one entity can have data agency over that registry. So it's essentially it's tamperproof but also there's no single institution that needs to vouch for the authenticity of the data. It's essentially self-evident because it's all the transactions are all recorded transparently on the blockchain. Yes, exactly. So basically if I write a statement on the blockchain now, then I won't be able to change it later. The thing is that I could still make up something and write it and it could be wrong: and that is something that blockchain cannot provide. In that case, it can only provide it if the check of the actual data is part of the protocol- and for that we have to add another layer. And our other layer is that those same attributes can be validated by different entities around you. These entities have different trust values(so it's not the same if your cousin says you're 19 years old versus if it's your community leader or if it's an entity that is an official trust entity listed by the UNHCR in their trust scheme. To every identity attribute, we can attach a level of trust.

Speaker 2:

Presumably then, pre-Gravity, you've got a refugee who wants to go into higher education and ultimately is scrambling around to be able to demonstrate their academic credentials. But with Gravity, they have an identity validated by trusted people(the UNHCR or a village elder) and they can share the right data attributes with the university for example, in order to be able to pass straight into the kind of traditional economy that we're talking about at the beginning.

:

Yes, in the very specific of applying for university education, with Gravity you have your diploma from Your Secondary School Institution and for simplicity, assume they've issued it digitally on your wallet. Then you can request the UNHCR to validate that credential- or another trusted entity that has been endorsed by UNHCR. So this gives a digital attestation for this document. And then using their own database, the UNHCR may submit a couple of basic identity attributes about you(your name, etc.). With this collection of credentials that is certified and attested by these trust entities, you can then share it with a higher education institution. And this is actually something that the UNHCR are looking into building. They are aware that also in order to leverage what they already collect in terms of identity data, digital wallets, it's sort of like the way to go because they can just go ahead and share it with everyone. They have to go throug h the individual, which is the polar opposite of what's being built out in certain countries where you are having in China or India for example, very centralized databases who extensively aim for the same objective but don't put the individual in control of the data, if I understand correct. Yeah, that's true. That's the opposite of the centralized a wallet architectures where of course it is very convenient to aggregate everything in one place because then every business every bank can have in for the credit scoring for the marketing, et Cetera, et cetera.

Speaker 3:

It's just that the security cannot be provided. And of course, if the entity that controls this huge database that records every aspect of your life can do very powerful and very frightening. Six presumably also the availability and the standardization of this date and muscles, so health aid organizations, governments and everything to provide services back into the refugee community by us through kind of more transparency and more intelligent and all structured information. Is that right? Yeah, of course. If you contribute and others contribute to persons, folate then you get the benefits as an organization as well. Out of it. If you a a an organization that works maybe in in house and she contribute to a person's, I don't know how its profile and Unh Shia ads like idea attributes and also id attribute side. It's for the community and now as this house optimization you want to do a cash transfer maybe for you know pregnant mothers or that's a dcs or something or then you can use these attributes that weren't necessarily provided by you, but you can request them from this wall. It's so this is really the interoperability parts, so you don't need to aggregate everything and decentralized database for millions of people. If you have a layer where it can be aggregated for each individual. Yeah. What's the journey been like so far? What are the kind of the unexpected space, particularly in terms of the technology and applying it to the real world? The journey for us it's been that we've looked a lot and KYC in the beginning. How can we provide alternative KYC based on identity data that this validated through community et cetera. But really there is a legal plonk them businesses simply are required or want to have this level of assurance that a legal identity brings. So we moved a bit away from that and widen the definition of identity to you know basically all kinds of attributes around what businesses people have and if they employ someone or what kind of skills they have. And then we spent some time in Kakuma and now we have a partner there who works in education, but we decided to go for more like a product driven approach, prove the concept. Then people can aggregate data, can store digital credentials from different sources and get for a restricted user base, a very wide economic profile. So we use education as an entry point, youth development NGO is et Cetera. And then prove that this is useful for organizations in particular, you know, cash transfer programs that always have some lists of attributes that have to be verified for an individual to be eligible. And that's what we're doing now. So in Kakuma we falling out that that education product where we also have a component that collects like standardized test data because there's a lack of globally standardized education outcome data. So start with the unregulated side of the world and make sure that people can get access to education and Lex slightly easier targets and then move up into the purely regulated space hasn't when legally you're allowed to go there I guess. Yes, exactly. And I think with this kind of data that's already lots to be done. If you think also about things like you know, if you can bring that money to verified wallets, maybe young university graduates just want to start a business, et cetera, et cetera. And the party providing this financing or funding doesn't need to know this person in person because they can see the verify credential. It's an interesting news case where you don't need to get into the space of like legal identities and all that. It's like an avalanche almost that you start with identity for education let's say. But as you build out the identity around that, presumably it accumulates it's own momentum where two thirds of the identity for education could easily flow into health care or flow into credit worthiness or, or other areas. And so, you know, ultimately it takes on a little bit of a life of its own event, at least. I hope so. But yeah, I think you have to make sure you find consumers for your data insurance, for example, there's lots and lots and lots of potential to customize insurance plans to, especially low income individuals, make it more affordable and make it sell for accessible to them. But there needs to be a little bit of verifiable data knowledge. So maybe think back then to the individual, I mean, you know, obviously there's benefits in the gathering and the validating this data or if I'm a refugee and I want to be able to get into university, but what reactions have you had from individuals? Because if somebody came to me and said, we're going to pick your dates here, I'm going to use the blockchain help store story, it's gotta be wonderful. Presumably it's not an easy sell as it, what doesn't work is to try to tell them the story of the digital identity wallet. It has to be the product as well. So in the education case it could be just a you as a CEO on SMS into action to see the credentials you have and to provide consent to sharing it. So that works quite well in that journey towards having a kind of complete rich dataset on as many people as possible. How do you see the, the question of interoperability between, for example, your data sets or data sets to be able to fast track the benefits of this? For example, if a hundred people are all going on the setting up, did you know some form of, of an identity, whether they use blockchain or not? Frankly, you still end up with a hundred different isolates datasets. That's like rotten protocols, the different blockchain protocols. Exactly. And so all you end up doing is moving all one problem from old technology to the same problem on new technology. So it sparkles with it more, but ultimately it's still the same problem. Every business, every service, every organization creates an identity for a person. The question is how do you reconcile all of these identities? Even if you only had a wallet where the identifiers of each of these systems would be sought, that would already be not bad for a start, you know, but don't think it's the main challenge in the beginning and the UN HCR case. Just having, uh, someone that takes a picture of your paper certificate and then issues a blockchain at gestation station for it. It's enough. And it doesn't need to be a standard. If you'd send to your bankers into company registration certificate from a different country, that's also no standardization. Yes, that's true. It's easy to over complicate this isn't it really? Looking ahead then, so scale is obviously one question, but how does the next 1224 months play out for you in terms of how gravity evolves and we are focused on this, a rollout for refugees in wanting to do way more in terms of a user research, how people feel about this concept, about state of sharing, etc. Etc. And we will try to test p two p cash transfers and health is a big point. So I think we focus on scaling the education bit a widening the scope in Kakuma and we want to look into health and Caltrans versus great. In summary, if I understand it right, identity is essentially the stumbling block between camp life and traditional life. Pre gravity. We had refugees ultimately struggling to make the jump into the traditional economy and being trapped in the kind of the camp economy. It's through building the bridges between the NGO and the individual. In the camp. Those rent, those same refugees can now get access to services and goods. They just couldn't get access to before and and hence participate more in their, in the, in the economies of the countries where they find themselves quite a journey. I really look forward to, to hearing about how, how the next 12 months do you play out. So really, thank you very much. Thank you. Thank you very much for having us.

Speaker 2:

I'm Bonnie Nelson and thanks for listening to this week's good start episode. Next week there'll be another amazing story about how blockchain is being used for good and so make sure to join us. Then in the meantime, if you'd like to get involved, look us up on the value exchange.co/goodstart or on Linkedin or Facebook. Thanks and see you next week.