Expertise

Digital public infrastructure & identity

Assurance for citizen-scale identity systems — from registration and authentication to national threat governance.

The problem

Where the risk really sits

National identity and digital public infrastructure serve entire populations, so the pre-registration, registration and authentication phases have to withstand real attacker models. Getting the threat and risk analysis wrong at that scale is costly and hard to reverse.

What DeTrust does

DeTrust delivers threat and risk analysis, standard operating procedures and mitigation taxonomies for DPI and national identity programmes — the same work delivered at The Alan Turing Institute under a Gates Foundation programme.

The differentiator

Advice built by someone who engineered the methods

The Threat, Risk and Mitigation Taxonomy for Digital Identity Systems — a public map of what attackers target and which mitigations pay off.
50+ open standard operating procedures for national identity systems, under consideration by MOSIP for global adoption.
Threat and risk analysis (TARA) of the pre-registration, registration and authentication phases in MOSIP-class systems; contribution to the analysis presented to Aadhaar/UIDAI architects that supported £5M Gates Foundation Phase 2 funding.

Research behind this domain

Published, peer-reviewed evidence

The identity threat taxonomies and adoption research underpinning DeTrust's digital public infrastructure work.

A Comparative Study of Cyber Threats on Evolving Digital Identity Systems · IET CADE, 2021Why authentication weaknesses matter across evolving digital-identity models.
Onboarding Citizens to Digital Identity Systems · The Alan Turing Institute (arXiv), 2023Physical Experience Centres for equitable, wide adoption of national digital identity.
Threat, Risk and Mitigation Taxonomy for Digital Identity Systems · The Alan Turing Institute, 2024A public catalogue of what attackers target across identity systems and which mitigations pay off.