Bot or not..

As of recent cybersecurity reports (like from Imperva, Cloudflare, and others), bad bots make up 30–40% of all internet traffic. That’s out of the ~50% of total web traffic that bots represent (the other half being human users – including a seemingly large number working on behalf of Russia’s war in Ukraine). 

The millions of malicious bots active at any time range from simple scrapers and credential stuffers to sophisticated AI-driven bots that mimic human behavior.

Some major botnets (networks of infected devices) can consist of hundreds of thousands or even millions of individual bots.

The more than obvious counteraction is to use interoperable identity wallets so that it always will be possible to check if the counterpart is who he, the organisation - or it - is who he/it claims to be - and also has the qualifications, legal age and power to act on behalf of somebody, an organisation or with something. 

It can in many cases – at least initially – be sufficient to be able to prove that you and your organisation exist and have the right to operate a robot, an AI-agent or a legal bot.

Consider the life event “looking for a job”:  

• You have used your identity building wallet to empower your AI-agent to go out locating for the verifiable data needed. Less strong data may also be useful to gather.
• Then you send your identification credential  to the various issuers’ organisation wallets and they send you the verifiable credentials to your wallet. 
• You then empower your AI-agent to go out looking for a suitable job equipped with the credential collection you consider necessary. You can choose to have a protective - but verifiable - alias at this stage.
• Your personal AI-agent then meets an organisational AI-agent sent out by your coming employer. His HR-organisation is keen to be able to avoid any malicious bots and can with their ID-wallet check that your AI-agent is employed by you and has the right to act on your behalf and that - at some point - the credentials are true and in force. 
• The AI-agents compare notes and your own come back to you with a verifiable proposal (like the e-order tested by FIndynet, TietoEvry, FInnish State Treasury and OP-bank) that you can check and sign the contract with your wallet. At this stage - at the latest - your identification credential is needed all the way to your name and your IBAN-account number credential (tested by Nordea) for salary payments.. 

I did not perhaps get every detail right. But I think that something like this will soon be normal practise in all sorts of life and business events.