Italy signs its citizens in through CIE and SPID — the electronic identity card and the public digital-identity system. Aruba and Politecnico di Torino ran a challenge around a blunt question: how solid is that infrastructure, and where are its gaps?
What we did
- Took apart the CIE and SPID authentication flows and mapped where the security risks and privacy exposures live
- Weighed the business side too — where the Italian and European digital-identity landscape is heading, and what openings it leaves
- Delivered a structured report: findings first, then strategic recommendations
The work earned a verified badge issued by the challenge — and it is where my interest in digital identity stopped being academic. The thread leads straight to the Solid work: identity and personal data, owned by the person.