Kryptonite and IDX: Digital trust platform for confirming personal data

The main articles are:

• Cryptography
• Data management
• Processing of personal data in Russia

2023: Digital Trust Platform Layout Development

Russian companies Kryptonit and IDX, commissioned by the National Technological Center for Digital Cryptography (ANO NTC Central Committee), have developed a layout of a digital trust platform (PCD) for confirming personal data (PD). The introduction of this platform for the first time will give Russian citizens a real mechanism for managing their personal information, will prevent PD leaks and their illegal circulation in Russia. Kryptonite announced this on November 9, 2023.

The main principles of the PD PD are that personal data is not transferred to the Internet services that request them, and is not collected in a centralized storage. This is especially important against the background of increasing cases of mass "leaks" of databases with PD of hundreds of millions of users.

The PD PD is a user-oriented system processing of personal data that protects them at all stages of processing. PDs are created by official sources, such as the MFD of the Russian Federation, FTS the Russian Federation, RPF and large commercial organizations, in particular banks , and cellular operators ("inspectors" in terms of PD PCD). The inspector can certify those data created by him at the request of the Internet service, but does not disclose them. The PD PCC provides for such a data turnover in which data is stored only the inspectors and the PD subjects themselves have. Thus, the platform allows you to legalize the turnover of PD and reduce the risk of them, the number of leaks which is growing at an alarming pace. So, according to the report, InfoWatch in the first two quarters of 2023 alone, the volume of leaked data increased by more than 72% compared to the same period in 2022. The total number of compromised records containing PD exceeded 705 million.

This is a software package that demonstrates the basic processes of the digital trust platform. The layout shows how users are registered, the formation of "blobs" (blocks encrypted information signed by the digitally signed user), how their secure transfer from the user to the service is performed, the inspector checks the correctness of the formation of the "blob" and sends confirmation to the service.

The PD PCD concept was developed in the Kryptonite Advanced Research Department and was first presented in the fall of 2021. The digital trust platform uses the X-protocol developed by Kryptonit.

For two years, we have gone a difficult path from the formulation of the concept to the beginning of testing the X-protocol. For November 2023, functional and technical requirements for the elements of the PD PDC have been developed. Specific services are identified that are interested in using PD PD and are ready to take part in the experiment. Together with IDX, we developed technical specifications for the interaction protocols of PD PDC elements, substantiated their functional and operational characteristics, compliance with safety requirements. Negotiations are underway with federal authorities who can take part in the experiment as personal data inspectors, "commented Vartan Khachaturov, Director General of Kryptonit NPK.