As the internet evolves into a Web3 version, government agencies are slow to change in the digital environment. Credit: Tarrazzia Martin, ChatGPT
I’ve had the privilege of serving in assignments that allowed me to see firsthand how government technology has transformed over the last 20 years. What is evident from early IT modernization initiatives to zero-trust adoption plans is that the world does not pause for the government to catch up. Besides, Web3, the next version of the internet — and the wave of the future — has already started breaking, introducing us to a new realm of digital ownership, trust and engagement. But what, then, is Web3 in reality? Why would federal, state and local leaders be concerned about digital currency, blockchain or decentralized identity? And how do they connect with the requirements for citizen service delivery, zero-trust architecture (ZTA) and cybersecurity? Let’s take a look step by step, practically and personally.
If we are to grasp Web3, let us first find out about our own past. There was a “read-only” web, or Web1, extending from the 1990s to the early 2000s and consisting mainly of static websites, electronic brochures and simple sharing of information. It was uninteractive and provided virtually no security or control over user identity. It was used mainly by government agencies to provide basic public information. Web2 (2000s to 2020s) is the period when the “social web” made its entry. Here, the citizens were able to use cloud-hosted applications to govern services, create content and engage with other people on social networking platforms like Facebook, YouTube and Twitter. It brought in vulnerability, where identification of users and privacy were omitted, and data centralization, where several big corporations had huge personal data. Virtual private networks, firewalls and endpoint detection are security options by default now.
Once again, Web3 (2020s and onwards) shifts the paradigm. We are now talking about a decentralized web where users control their data and identities. Transactions, identity proofing and governance are all enabled by blockchain technology. Data is spread and verified using consensus models instead of being stored in one place. The ZTA concepts that most agencies are looking to implement are actually in line with this by design.
This new foundation of cybersecurity is based on the assumption that no user or system should ever be trusted by default. Authentication never stops. Access is restricted. Monitoring is constant. Now observe how these principles are inherently enabled by Web3 and by blockchain, an immutable ledger. Transactions and modifications are stored permanently. Individuals are accountable for their own digital identity credentials, which can be verified without a central issuer, thanks to decentralized identity.
While others still see Web3 as a theory, we are seeing real-world applications in the government, with organizations from all over the United States implementing digital advancements. The Department of Homeland Security is investing in decentralized identity to speed up security and immigration screenings. Blockchain voting for overseas troops was piloted in West Virginia. The General Services Administration and NASA are studying the use of smart contracts in procurement and grant management. California and Illinois, among other state motor vehicle departments, are trialing blockchain-based digital driver’s licenses.
Read more on AFCEA International
