I send you a bunch of bytes signed with my private key (which somehow you have to verify in a trusted way) and you can be sure that I am the person who signed those bytes (unless I was compromised).