The Domains of Identity covers a lot of ground. The first domain pertains to the individual and their data and the second domain covers the cases where an individual acts on behalf of another. These two domains are the source of data for the next twelve where individuals register, transact are surveilled by governments, civil society organizations, commercial entities and operate within the context of their employment.

In all of the above domains, there is a relationship between the individual and the entity but in some domains the individual may not be aware of the relationship. In the case of registration and transactions the relationship is explicit and understood by both parties. In the case of surveillance the individual is being passively watched/tracked by the institution but there is a one way relationship wherein data about an individual is flowing into the data systems of an institution with or without the individual's knowledge.

With the final two domains there is no connection between the individuals involved and their data. The data broker industry collects and links together data about millions of people in massive databases and then re-sells this data. The illicit market is where the information about individuals ends up after it is stolen or hacked by criminals from databases in any of the above domains.

I wrote this book to support a whole range of stakeholders being able to understand the domains and then use it to locate different identity management problems in a landscape. I also hope that it spurs others to do research that can address the challenges within and amongst different domains with new collaborations between industry and academia.

There are several significant research directions that arise from this book including:

• (1)Looking at complex use cases through the lens of the domains.

• (2) Considering how these 16 domains interact with one another. What different types of transactions and business/society activity happen within each intersection of these domains? This matrix of domains could then be used to understand various use cases and allow for the consideration where the key-stone systems and infrastructure is missing.