notes: research/papers/kerione-state-endorsed-digital-identity-protecting-liberty
This data as json
| path | title | type | status | classification | words | body |
|---|---|---|---|---|---|---|
| research/papers/kerione-state-endorsed-digital-identity-protecting-liberty | State-Endorsed Digital Identity: Protecting Liberty in the Digital Age | summary | v0.1 — 2026-10-14: drafted by Claude from the PDF (all six pages); unread by Mark; marked partner on Mark's word 2026-10-21, paraphrase only | partner | 647 | # State-Endorsed Digital Identity: Protecting Liberty in the Digital Age **Abstract.** A six-page paper (version 1.0, 17 October 2025) from the Utah Department of Government Operations that sets out State-Endorsed Digital Identity (SEDI), a model in which the individual controls a cryptographic identifier and the state endorses, rather than creates, that identity. It lists the model's basic requirements (legal framework, individual control, privacy, parental rights and delegation, security, backward compatibility) and invites other states to join a SEDI Consortium. It is for policy makers and readers following state adoption of decentralized identity. ## Summary The paper opens with a summary that calls SEDI a constitutionally based, "rights-first" framework for digital identity, resting on the view that identity is innate to the individual and not created by governments or corporations. It says many digital identity systems in the United States lack a comprehensive governance framework, and that public distrust grows when systems allow tracking, surveillance, profiling and scoring. "The Challenge" section describes the loss of trust online: physical signals of identity disappear, identity is fragmented across accounts yet unified by trackable profiles, and generative AI (artificial intelligence) lowers the cost of deepfakes and impersonation. "Why SEDI Is Needed" names existing technologies, among them the mobile driver's license standard ISO/IEC 18013-5/-7, OpenID Connect, OAuth 2.0, KERI (Key Event Receipt Infrastructure), SAML and W3C Verifiable Credentials, and says adopters have not addressed individual rights, governance and constitutional safeguards. "A Constitutional Foundation" states the core principle: "SEDI begins with a foundational principle: identity belongs to the person, not the government." (page 3). The state acts as a trusted endorser that verifies an asserted identity and issues a credential bound to an identifier the individual alone controls. A hierarchy of values puts individual rights, including privacy, child safety and families above interoperability, efficiency, convenience and profit. "SEDI Basics" lists six elements: a comprehensive legal framework adopted before any system (governance, open standards and protocols, transparency, separation of duties, a right to paper, enforcement and independent audits); individual control, with the identifier described as a keyring to which credentials attach in a wallet of the person's choosing; privacy through peer-to-peer verification without "phone-home" checks and with selective disclosure; parental rights and delegation to guardians; security that expects compromise and provides detection, containment and recovery, with offline verification; and backward compatibility. "SEDI Opportunity" lists uses from proof of identity and password replacement to agentic AI, government records, age verification and change of address. The paper closes with a call for states to join the SEDI Consortium and a list of Department of Government Operations contacts. ## Key terms State-Endorsed Digital Identity (SEDI), endorse rather than create, rights-first, digital identifier, keyring, user-controlled wallet, phone-home checks, right to paper, delegation, SEDI Consortium ## Claims and their evidence - SEDI is the first rights-first framework for digital identity (summary, page 2). [unverified] - Under SEDI the state endorses, and does not create or own, an individual's identity; the credential is bound to an identifier the individual alone controls (pages 3 and 4). [normative] - States should establish a comprehensive legal and governance framework before implementing any digital identity system (SEDI Basics 1). [normative] - SEDI credentials can be verified without a call back to a central authority or issuer, and no tracking by other parties is permitted when one is used (SEDI Basics 3). [normative] - SEDI credentials are verifiable offline and keep working during outages, disasters or attacks (SEDI Basics 5). [unverified] - SEDI is backward compatible with existing digital identity technologies (SEDI Basics 6). [unverified] ## Related Utah Pro-Human AI Executive Order (2026-10-06), which directs use of the SEDI Framework; SEDI Identity Proofing; SEDI and Data Loyalty. The paper names KERI among existing technologies but does not say which protocols SEDI uses. ## Provenance Drafted by Claude on 2026-10-14 from the PDF on privacy.utah.gov, all six pages read in full. Not yet read by Mark. |
Links from other tables
- 1 row from summary in resources