LNETM - Atsign - Privacy with Personal Data Services

London Enterprise Technology Meetup (LNETM) presentation on Atsign's atPlatform, which uses personal data services (PDS) and end-end encryption to build privacy preserving applications for everybody, every organisation and everyTHING.

1. April 2024
Chris Swan
Engineer
[email protected]
Privacy with
Personal Data
Services

2. Consumers Want Privacy & Superior Experiences
2
2
Facebook
Friends
Pictures
Videos
Email
Password
Phone number
Personal posts

Google
Search history
Shopping History
Pictures
Videos
Phone number
Email
Password
LinkedIn
Business contacts
Resume
Work history
References
Email
Password
Phone number
Business Posts

Citibank
Checking balance
Savings balance
Investments
Email
Password
Phone number
Verification
questions

Mint
Assets
Checking data
Investments
Savings
Transactions
Email
Password

Amazon
Shopping history
Friends wish
lists
Email
Password

United
Flights
Email
Password
Phone number

Hilton
Hotel history
Email
Password
Phone number

eBay
Purchases
Items sold
Credit card
Phone number
Password

Best Buy
Credit card
Type of computer
Computer
accessories
Appliances
Email
Password

Why does
everyone have my
data?

How do I control
this?
Why do I have to
keep entering the
same data again
and again?

Where’s my
password?
Why am I being
followed?

How did they
know I went
there?

3. 3
Framework for E2E encrypted Apps
Apps/Data
Surveillance
Apps/Data/
Surveillance
Centralized/Siloed
Architecture
Apps/Data/
Surveillance
Their data
atProtocol: decentralized &
E2E encrypted

Data
Apps

●True end-to-end encryption
●Personas & Polymorphism
●Shared libraries & data

Update
my data
Data
Apps
Oh look,
Alice
moved!

4. Alice
app
Bob’s
app
Data about stuff

5. Alice and Bob each have public and private keys
Alice
app
Bob’s
app
Data about stuff

6. Public keys need to be exchanged
Alice
app
Bob’s
app
Data about stuff

7. Introduce personal data stores
Alice
app
Bob’s
app
Data about stuff
Alice
PDS
Bob
PDS

8. This helps us manage key exchange
Alice
app
Bob’s
app
Data about stuff
Alice
PDS
Bob
PDS

9. Share different data with different people
Alice
app
Bob’s
app
Data about stuff
Alice
PDS
Bob
PDS
Charlie’s
app
Charlie
PDS
Different data about stuff

10. Safer & Simpler

•End-to-end encryption
(keys at the edge)
•Fully decentralized
•Devices can cut their own keys

@alice
Mobile Servers
@corporation
IoT Device
@sensor_1
atDirectory
Atsigns

11. Atsign confidential
@sam1994
@myinstapot02
@samswasher88
@robseclass
@jimmysjeep
@weld192
@weld193
@samsapp1
@samsapp3
@hampton_pad
@glucose_mon5
@sj1_hq
@moo_cow12
2033 - 100 Billion Atsigns

12. noports.com
atDirectory
Linux machineClient
No Ports Open
linux_mc
SSH SSH
TCP Rendezvous Server
(RS)
Atsign provides several
regional rendezvous points
rendezvous
outbound
client
outbound
outbound
outbound
Atsign
Control Plane
Transport
Plane
The client which
initiates SSH
outbound

13. NoPorts is based on Atsign’s
Networking 2.0 Technology
●More secure
●Easy to implement
●Lower overall cost
Services
atProtocol SDKs
Directory Optional Hosting
Technology

14. Use Cases
Safe access into a company
Safe device connection
Safe data exchange with partners

15. Networking 1.0
Networking 2.0
Comparison
Pro Con
Much more secure
Well Understood
Much easier to
administer
Much less cost
Insecure
Expensive
New Approach
Hard to Administer

16. IoT Global
Awards
WINNER
2023
IoT Security
Champion
AWARD
WINNER
2022
Future
Digital Awards
FIRST
PLACE
2022
Company Highlights
TMCnet
Cybersecurity
Excellence
WINNER
2023
World
Future Awards
TOP 100
2023
Cloud
Computing
Product of
the Year
2024
1 patent - 5 claims accepted
33 more patent claims pending
Successfully pen tested
Open source
Next generation security
Award Winning Technology

17. Article
Written By Xose Perez, Rakwireless
“ After all this complexity, there's good news: there is indeed a secure, remote,
and straightforward way to achieve this!

Atsign is a globally distributed company offering networking tools. One of its
projects is SSH No Ports, a connectivity solution with some unique features:


●A directory server (atDirectory) replaces ever-changing IPs with simple,
unique device names known as atSigns.
●The tunnels are only active as needed, with the device primarily waiting for
a request that the directory server has previously validated.
●A rendezvous point (Socket Rendezvous or SR) opens two single-use
sockets, creating isolated secure tunnels from the client to the device.
●Two initial tunnels connect both machines to the rendezvous server upon
request. The keys used for these tunnels are single-use and generated
on-the-fly.

This entire process adheres to a Zero Trust Policy, securing your data
end-to-end with keys stored only on your device and your client.”