Evoluzione dell'Identità Digitale: eiDAS2 l'Ascesa della Self Sovereign Identity-Filippo Chiricozzi

on the other hand, it was born as a bank mainly oriented towards the digital world, especially online transactions. It is a group that has more than 6,000 employees. It has just over 6,300 employees, 3 million customers, more than, let's say, a billion, let's say, of interest margin on net margin and with, let's say, closing the year with good numbers. So, about a little over 100 million in net profit. It is a company, it is a bank with over 150 years of history.

Sella. Why? Because it is clearly a family bank, therefore owned by the Sella family. Today, it is one of the most important private banks at a European level. I am here, as the introduction precisely told us about the web Tree Digital asset.

Why? Because about 2 years ago, we decided to create a competent Center within the Bancasella ecosystem, that is, a group that works specifically on issues that are not exactly typical of the banking world, namely DLT, distributed ledger technologies, and digital assets. Therefore, we are the first bank to have a dedicated team that deals specifically with blockchain and digital assets. The objectives of the Corporate Center of the competent Center. Sorry, there are five that you can see presented here that range from the training activity to today we have trained more than 3000 internal employees on what are the topics of, let's say, DLT and Digital assets to then clearly focus on specific topics so go and understand how and be able to continue to be the first bank let's say in terms of Innovation and innovation on the topic but above all to introduce an element that is particular today No peculiar for what is the world of banking such as Digital assets in what is the offer eh obviously eh la la history has allowed us to work a lot on innovation precisely because it is a private bank so the last point which is a bit the topic of today is the one I have been dealing with for a little over a year is the active look at what is the topic of Digital identity or digital identification topic What identification topic we know you know so let's say the card card ID card passport whatever you have in your pocket that can actively recognize you but also let's say talking more about blockchain no when we talk about a Wallet today but what happens that we often talk about thinking about the content So I gave the example of vanek vanek decides to invest in pag Penguin therefore buy a series of nft assets precisely to identify himself in this way or rather this is the official page it is nothing nothing nothing photoshopped of one of the most important asset managers in the world one of the first asset managers who issued ETFs on Bitcoin so one of the first let's say passed to today so he identifies himself no on Twitter with a pagp Penguin obviously Custom with vanek's hat The point is that we often think of identification as content but in reality identification is the container So if we talk about blockchain we are used No to probably having all of us in here we have a Wallet here I put metamask and Phantom as an example But you can have 100 other different ones Or dozens of other different ones depending on the Chain on which you operate the most and that is the real truth the truth lies in the fact that today we are ITI on Chain from what our Wallet contains So from the digital assets nft token if you are a fan of the MIM Coin probably mcoin which are represented within the asset within the Wallet itself it is precisely in this sense that therefore the our reasoning therefore knowing well what the world of identification is and the impacts it has on a traditional level.

If you want, you can see on the right something that is familiar to you, so the classic Social login at the top. Excuse me, the classic. Continue with Facebook, Google, Apple, and so on, or at the bottom the more classic login such as the one you do with the various providers, the various identity providers of Speed. The reality of the facts is that this type of evolution arises from a 2014 European regulation known as EIDAS, a regulation aimed at identifying the citizen, so your cards, because we have moved from a paper identity card to a plastic one, because inside Yes, it was thought that we would clearly want to arrive at a point of identification, a single and unified identification model at a European level, clearly using the same standards. This was exactly what the EIDAS regulation professed in 2014, a couple of years later, around 2016-2017, the WTC, therefore the World Wide Web Consortium, introduced a concept, namely the concept of self- identity, so imagine that identification could be done through something called DIID.

scheme decentralized identifier scheme and allowed the individual to decide what to communicate with a third party so I want to go and do it is technically called Selective Disclosure so decide only a series of information that I want to share can be my name surname date of birth it can be where I was born it can be but maybe in the future What is my creditworthiness so why can a bank give me a mortgage or not because yes we are talking about blockchain in this sense Because even if the w3c in some very technical way not taken Let's say today in tukur from what is the European Regulation for the first time introduces a concept of verifiable credentials therefore verifiable credential which is exactly what I was telling you Now to be able to verify that Filippo is called Filippo Chiricozzi was born on December 29, 1988 in Viterbo so verify every single piece of information and do a little more I not only verify that information but also verifiable credentials therefore credentials issued by private individuals on my individual being in this sense the eidas regulation becomes eidas 2 approved on February 29 of this year and will bring into force starting from 2027 the container not the content or rather the birth of what will be called the European Digital Identity Wallet that we will all have and which will finally be the only identification method at a European level therefore used on a European scale this is what I was telling you so the concept of W brought forward by the w3c is exactly this so a decentralized identifier now I won't go into detail but it allows me to solve by calling the information of an underlying Trust registry so something that goes to verify that I am actually Filippo Chiricozzi and says Ok very well I call the information is he Exactly or I call a piece of information is it true that Filippo asked for a €10,000 loan at Bancasella and they approved it so it is true that he has this credit rating because he is paying the interest well overtime Probably yes starting So from this concept yes we imagine an evolution of identification So this is a small technicality on what is called this locus of control What is the locus of control we therefore the evolution of digital identification goes from a centralized model which is what you have today so if you have a Speed ​​​​made with Aruba is Aruba that today confirms that you are you Ok if you have access made via Social login via Facebook it is because you have authorized certain information to a new decentralized model based on the concept of Sales of identity where the locus of control is us so we are the ones who can say the information that has been issued therefore issued by someone can actually be verified by a third party because because there is an underlying register that confirms it for example the blockchain not necessarily but for example the blockchain therefore introduces the concept and the return to what I mentioned before to specify it a little more verifiable credential what is the innovation is the fact that starting from 2027 but in reality as I will tell you Soon there are many many let's say European projects that are already working on the concept of verifiable credential will be anyone private or public will be able to issue credentials that can be associated with a single individual So I bank can decide whether to say this individual is a good payer or a bad payer I can say if he has requested credit I can say what his creditworthiness is Or I university can give all the certifications issued to a single individual, have them inside the Wallet and ensure that they are all verified through a unified registry at European level and this is a bit of How it works in a few words So there will be an issuer so by issuer someone who issues a verifiable credential this credential is issued therefore issued to a holder of a possessor as we call them at blockchain level So we too are holders and then it is verified by a third party what this third party does does nothing else it requires requesting proof of the correct issuance of the verifiable credential to what is called a verifiable data registry or a registry that actually says it is true This person has these characteristics so having said this going back to the previous slide We are no longer in a context where the Wallets or rather could continue to be metamask and Phantom So we could continue to have Probably if we go with a view to Greater use of the salelles of identity of Wallets such as metamask and Phantom however it introduces a new layer of Wallets are compliant with the EIDAS 2 regulation compliant with the RF so a technical framework on which they are developed here I have given as an example Lissi and Gataka obviously they are not like saying metamask becomes Lissi Phantom becomes Gata which to give you an example so tell you a little bit how Wallets are evolving which could potentially use the blockchain Of course not so they could have a registry an underlying verifiable registry which could could use the technology that we know better or not because it could or not because clearly at a European level they are deciding whether that is the right technology or not this however is a bit to tell you what we have to expect So we are in 2024 more or less in this phase We are in a moment of legislative process So from now until the end of the year what we will see are all the evolutions that are taking place on the concept of Wallet and above all on the underlying technology but the evolution on the udi Wallet therefore European Digital Identity Wallet It will last quite a long time So it will last until almost the end of 2026 to basically do three things understand the technology put in place what is the legislation and above all ensure that the LSPs therefore large large scale Pilots currently in existence therefore pilots made by consortia, therefore institutional banking groups, organizations and so on can decide exactly what we do with this blessed Wallet. The truth of the matter is that starting from 2027, so from the end of 2027, we will all be able to download our Wallet. Furthermore, the Wallet will be free, so it will have no costs, and we can probably imagine that there will be many different Wallets. To date, what will be the it Wallet is already being worked on by InfoCert, mainly from 2027, we will have a Wallet that is an Italian Bench, although clearly looking at the Italian market. It will be that point.

The point of contact where we will have all our information that can be shared at a European level. Now, what are we doing? We are therefore going into a little more detail. We have taken the initiative a year ago and have been studying internal training and the creation of dedicated Teams. We are looking at the seven Case Studies that are currently being mainly worked on, which are Education, Retail, Finance, Health care, professional credentials, Legal identity, and clearly devices, because in all of this, the Wallet will be nothing more than something installed on our phone.

We are focusing on two fundamental points: Education, as you know, all companies have internal Education activities. clearly what we do so the Finance part how we are doing it looking at the LSPs so large scale Pilot that I was talking to you about before so becoming an active part of today we are part of two large scale Pilots So nobit as a partner and ewc as observers to actively see things that we also introduced a little talked about this morning so the Sky the kyc so actually understand how to manage the onboarding of a new user and how to ensure that the payment activities are carried out correctly Why Because the Wallet will not only be identification but also payment so it will actually allow that too we have built a team obviously cross here Sorry if I check the time I see if I am On Time I should be there However a cross team today made up of three people two from Bancasella Myself and my colleague Jacopo Sesana and Davide Giordano Gaiotto from the Centrico team which is the IT company of the Sella group and involving three of the companies of the group but then trying to expand the activities let's say even further to be able to ensure that in the future all three are clearly adequately impacted by the same here I stop Thank you I hope it hasn't been too boring Thank you for the