user-access manager: key to life management platform
DESCRIPTION
User-Access Manager: Key to Life Management Platform presentation at European Identity Conference (EIC) 2014. http://www.id-conf.com/sessions/1268TRANSCRIPT
![Page 1: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/1.jpg)
User-Managed Access: key to Life Management Platform
Domenico Catalano, Oracle Italy Maciej Machulak, Cloud Identity Limited
European Identity Conference 2014
1
![Page 2: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/2.jpg)
Agenda
Personal Data and Emerging Trends
Life Management Platforms
UMA Concepts
Use Cases
Demo
Q&A
2
![Page 3: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/3.jpg)
3
What is Personal Data…
![Page 4: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/4.jpg)
Personal Data is the Life Blood of the Information Age
3
What is Personal Data…
![Page 5: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/5.jpg)
Personal Data is the Life Blood of the Information Age
3
Personal Data is the New “Oil of the Internet”
What is Personal Data…
![Page 6: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/6.jpg)
Personal Data is the Life Blood of the Information Age
3
Personal Data is the New “Oil of the Internet”
Personal Data is the new currency
What is Personal Data…
![Page 7: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/7.jpg)
Personal Data and new forms of economic and social value
4
Big Data
Explosive growthof Personal
Data
New forms of economic and social value
Quantity and quality
Mobile ComputingSocial NetworkingInternet ofTHINGS
![Page 8: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/8.jpg)
How to measure the value of Personal Data
• Market capitalization
• Revenue per record/user
• Market Price
• Cost of data breach
• Pay to protect
5
Streat address
Data of Birth
Social Number
Military record
0 10 20 30 40
Source: OECD (2013), “Exploring the Economics of Personal Data: A Survey of Methodologies for Measuring Monetary Value”
$112 per user record
USD 1.7 per recordData breach cost $171M
USD
![Page 9: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/9.jpg)
Externalities: Socio-economic impact
• Personal data to avoid duplicative testing/misdiagnosis, etc., in healthcare.
6
Electronic Health Record
Financial BenefitsPatient Value Social Value
Improved treatment Reduced Cost research into new drugs,improved medical protocols
Source: OECD (2013), “Exploring the Economics of Personal Data: A Survey of Methodologies for Measuring Monetary Value”
![Page 10: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/10.jpg)
Risks about Personal Data
7
Individual Organization
“72% of European citizens are concerned that their personal data may be misused…”
Individuals have little visibility into the practices of the organizations they are putting their trust in – until their data is breached or misused.
EU commission survey 2012
Risks: Loss of Trust
Personal Data
…t e n s i o n…
![Page 11: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/11.jpg)
Challenges to mitigate Risks
• Protection and Security
‣ New approaches for decentralized and distributed network environment.
• Accountability
‣ Who has data about you? Where is the data about you located?
• Right and Responsibility for using personal data
‣ New approaches that help individuals understand how and when data is collected.
‣ How the data is being used and the implications of these actions.
‣ Empower individual more effectively and efficiently.
‣ Context aware.
8
Source: World Economic Forum 2013 Report: Unlocking the Value of Personal Data: From Collection to Usage
![Page 12: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/12.jpg)
Personal Data Ecosystem Emerging Trends: Data Lockers
9
PersonalData Store
Personal Clouds
Life Management Platforms
Native Data Store
App App
InformedPull
ControlledPush
![Page 13: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/13.jpg)
Life Management Platforms
10
![Page 14: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/14.jpg)
Life Management Platforms
• The concept of Life Management Platforms (LMPs) was introduced in 2012 by Kuppinger-Cole.
10
![Page 15: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/15.jpg)
Life Management Platforms
• The concept of Life Management Platforms (LMPs) was introduced in 2012 by Kuppinger-Cole.
• LMP allows individual to consolidate all relevant data from life, e.g. bank account information, insurance information, health information, etc.
10
![Page 16: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/16.jpg)
Life Management Platforms
• The concept of Life Management Platforms (LMPs) was introduced in 2012 by Kuppinger-Cole.
• LMP allows individual to consolidate all relevant data from life, e.g. bank account information, insurance information, health information, etc.
• The platform concept provides the tools to manage the essential information of every person’s life and making it usable for other parties.
10
![Page 17: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/17.jpg)
Life Management Platform: Key features
11
AccessLMPRequesting
PartyData
StoresData
Control
Informed Pull
Controlled Push
Data Sharing Policy
Individual ControlBank
healthcare
Home
Car
![Page 18: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/18.jpg)
Life Management Platform: Key features
11
AccessLMPRequesting
PartyData
StoresData
Control
Informed Pull
Controlled Push
Data Sharing Policy
Individual ControlBank
healthcare
Home
Car
Secure Store of Information
![Page 19: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/19.jpg)
Life Management Platform: Key features
11
AccessLMPRequesting
PartyData
StoresData
Control
Informed Pull
Controlled Push
Data Sharing Policy
Individual ControlBank
healthcare
Home
Car
Secure Store of Information
Information control remains with
Individual
![Page 20: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/20.jpg)
Life Management Platform: Key features
11
AccessLMPRequesting
PartyData
StoresData
Control
Informed Pull
Controlled Push
Data Sharing Policy
Individual ControlBank
healthcare
Home
Car
Secure Store of Information
Information control remains with
Individual
Granular Access Control for Data
![Page 21: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/21.jpg)
Life Management Platform: Key features
11
AccessLMPRequesting
PartyData
StoresData
Control
Informed Pull
Controlled Push
Data Sharing Policy
Individual ControlBank
healthcare
Home
Car
Secure Store of Information
Advanced Data Sharing
Models
Information control remains with
Individual
Granular Access Control for Data
![Page 22: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/22.jpg)
User-Managed Access (UMA)
UMA defines how an individual can control protected-resource access by clients operated by arbitrary requesting parties, where the resources reside on any number of resource servers, and
where a centralized authorization server governs access based on individual policy.
12
![Page 23: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/23.jpg)
tinyurl.com/umawg
UMA is...• A web protocol that lets you control access by anyone to
all your online stuff from one place
• A set of draft specifications, free for anyone to implement
• Undergoing multiple implementation efforts
• A Work Group of the Kantara Initiative, free for anyone to join and contribute to
• Simple, OAuth-based, identifier-agnostic, RESTful, modular, generative, and developed rapidly
• Contributed to the IETF for consideration:draft-hardjono-oauth-umacore
• Currently undergoing interop testing and increased OpenID Connect integration
13
![Page 24: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/24.jpg)
UMA Architecture
14
![Page 25: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/25.jpg)
User-Managed Access for LMP
15
AccessLMPRequesting
PartyData
StoresData
Control
Informed Pull
Controlled Push
Data Sharing Policy
Individual ControlBank
healthcare
Home
Car
![Page 26: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/26.jpg)
User-Managed Access for LMP
15
LMP Requesting Party
Data Stores
Bank
healthcare
Home
Car
![Page 27: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/27.jpg)
User-Managed Access for LMP
15
LMP Requesting Party
Data Stores
Bank
healthcare
Home
Car
Resource Owner
Client
UMA AS
![Page 28: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/28.jpg)
User-Managed Access for LMP
15
LMP Requesting Party
Data Stores
Bank
healthcare
Home
Car
Resource Owner
Client
manage
control
protect UMA AS
![Page 29: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/29.jpg)
User-Managed Access for LMP
15
LMP Requesting Party
Data Stores
Bank
healthcare
Home
Car
Resource Owner
Client
manage
consentcontrol
protect negotiate
manage
UMA AS
![Page 30: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/30.jpg)
User-Managed Access for LMP
15
LMP Requesting Party
Data Stores
Bank
healthcare
Home
Car
Resource Owner
Client
manage
consentcontrol
protect
authorize
negotiate
manage
access
UMA AS
![Page 31: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/31.jpg)
UMA for LMP Use Cases
• Personal Loan (Informed Pull)
• CV Sharing (Controlled Push)
16
![Page 32: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/32.jpg)
UMA for LMP Use Case: Informed Pull
• An Individual issues a request for information (RFI) to a group of financial services to obtain the best offer for a personal loan.
• Life Connections represent the Individual’s Personal Information requested (i.e Bank Account and Credit Score), for issuing the RFI, protected by UMA AS.
• LMP provides the Apps for typical Life events (i.e. Personal Loan Request).
17
![Page 33: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/33.jpg)
Informed Pull Model
18
LMP Financial Service
Bank
Credit Score
!Request for Information
!Authorize/Access
!Offer
!UMA-Enabled
Loan App
![Page 34: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/34.jpg)
Life Connections Request
www.uma4lmp.com/am/informed_pull
Life Management Platform
Life ApplicationsRequest for Information
UMA4LMP: Informed Pull
19
Home
Bank
Healthcare
Car
Credit Score
LoanApplication
healthcareInsurance
Drag request template here
![Page 35: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/35.jpg)
Life Connections Request
www.uma4lmp.com/am/informed_pull
Life Management Platform
Life ApplicationsRequest for Information
UMA4LMP: Informed Pull
19
Home
Bank
Healthcare
Car
Credit Score
LoanApplication
healthcareInsurance
![Page 36: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/36.jpg)
Life Connections Request
www.uma4lmp.com/am/informed_pull
Life Management Platform
Life ApplicationsRequest for Information
UMA4LMP: Informed Pull
19
Home
Bank
Healthcare
Car
Credit Score
healthcareInsurance+ +
Bank Account Credit Score
Personal Information
Request Info
Loan amount: Period:
Data sharing Policy
Claim-based authorizationValidity:
Cancel Run NowSave as Template
Data Purpose:
/ /
Requesting Party Marketing related useOnly for this request
![Page 37: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/37.jpg)
Life Connections Request
www.uma4lmp.com/am/informed_pull
Life Management Platform
Life ApplicationsRequest for Information
UMA4LMP: Informed Pull
19
Home
Bank
Healthcare
Car
Credit Score
healthcareInsurance+ +
Bank Account Credit Score
Personal Information
Request Info
Loan amount: Period:
Data sharing Policy
Claim-based authorizationValidity:
OnlineBank.com
Shareable Bank AccountPrivacy impact: MediumData Access: Read
View Data
Cancel Run NowSave as Template
Data Purpose:
/ /
Requesting Party Marketing related useOnly for this request
![Page 38: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/38.jpg)
Life Connections Request
www.uma4lmp.com/am/informed_pull
Life Management Platform
Life ApplicationsRequest for Information
UMA4LMP: Informed Pull
19
Home
Bank
Healthcare
Car
Credit Score
healthcareInsurance+ +
Bank Account Credit Score
Personal Information
Request Info
Loan amount: Period:
Data sharing Policy
Claim-based authorizationValidity:
Cancel Run NowSave as Template
Data Purpose:
/ /
Requesting Party Marketing related useOnly for this request
![Page 39: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/39.jpg)
Life Connections Request
www.uma4lmp.com/am/informed_pull
Life Management Platform
Life ApplicationsRequest for Information
UMA4LMP: Informed Pull
19
Home
Bank
Healthcare
Car
Credit Score
healthcareInsurance+ +
Bank Account Credit Score
Personal Information
Request Info
Loan amount: Period:
Data sharing Policy
Claim-based authorizationValidity:
Cancel Run NowSave as Template
Data Purpose:
/ /
Requesting Party Marketing related useOnly for this request
![Page 40: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/40.jpg)
Life Connections Request
www.uma4lmp.com/am/informed_pull
Life Management Platform
Life ApplicationsRequest for Information
UMA4LMP: Informed Pull
19
Home
Bank
Healthcare
Car
Credit Score
healthcareInsurance+ +
Bank Account Credit Score
Personal Information
Request Info
Loan amount: Period:
Data sharing Policy
Claim-based authorizationValidity:
10000
24
Cancel Run NowSave as Template
Data Purpose:
/ /
Requesting Party Marketing related useOnly for this request
![Page 41: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/41.jpg)
UMA4LMP: Informed Pull
20
Personal Loan App Results
www.uma4lmp.com/am/informed_pull
Life Management Platform
Vendor
10.000
10.000
Interest Rates
View details
View details
View details6.00%
5.30%
10.000
5.25%
OnlineLoan.com 5.1%
View details
Bestloan.com
FinancialOne.com 10.000
10.000
Amount
ConsumerBank.com
6.70%
Details
View detailsCreditMarket.com
![Page 42: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/42.jpg)
UMA4LMP: Informed Pull
20
Personal Loan App Results
www.uma4lmp.com/am/informed_pull
Life Management Platform
Vendor
10.000
10.000
Interest Rates
View details
View details
View details6.00%
5.30%
10.000
5.25%
OnlineLoan.com 5.1%
View details
Bestloan.com
FinancialOne.com 10.000
10.000
Amount
ConsumerBank.com
6.70%
Details
View detailsCreditMarket.com
![Page 43: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/43.jpg)
UMA for LMP Use Case: Controlled Push
• A student interacts with online job application system.
• Student shares their exam marks, certificates references, etc.
• Data is stored at their various Higher Education institution.
• Employers can ask for additional information to be provided during the application process.
21
![Page 44: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/44.jpg)
UMA4LMP: Controlled Push
22
![Page 45: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/45.jpg)
UMA4LMP: Controlled Push
23
![Page 46: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/46.jpg)
UMA4LMP: Controlled Push
24
Student, Job Seeker
![Page 47: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/47.jpg)
UMA4LMP: Controlled Push
25
Student, Job Seeker
Employer
![Page 48: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/48.jpg)
26
DEMO
![Page 49: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/49.jpg)
Why UMA
• UMA provides a new approach to protect personal information in a decentralized and distributed network.
• UMA provides a new way to create a trust relationship in a distributed environment.
• UMA provides a new way to control of what is happening to personal data.
• UMA provides a new way to help individuals understand how personal data is used.
27
![Page 50: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/50.jpg)
Benefits of UMA applied to LMP
28
Authorize
Client ResourceServer
AuthorizationServer
Protect
Access(on behalf of
Requesting Party)
ResourceOwner
Protection and Security AccountabilityRight and Responsibility for using personal data
![Page 51: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/51.jpg)
Benefits of UMA applied to LMP
28
Authorize
Client ResourceServer
AuthorizationServer
Protect
Access(on behalf of
Requesting Party)
ResourceOwner
Individual protects the distributed resource which is collecting the personal data with a centralized Authorization Server.
Protection and Security AccountabilityRight and Responsibility for using personal data
![Page 52: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/52.jpg)
Benefits of UMA applied to LMP
28
Authorize
Client ResourceServer
AuthorizationServer
Protect
Access(on behalf of
Requesting Party)
ResourceOwner
Individual is active part of defining the how the personal information will be handled in the data sharing process (Controlled Push or Informed Pull).
Individual protects the distributed resource which is collecting the personal data with a centralized Authorization Server.
Protection and Security AccountabilityRight and Responsibility for using personal data
![Page 53: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/53.jpg)
Benefits of UMA applied to LMP
28
Authorize
Client ResourceServer
AuthorizationServer
Protect
Access(on behalf of
Requesting Party)
ResourceOwner
Individual is active part of defining the how the personal information will be handled in the data sharing process (Controlled Push or Informed Pull).
Individual is able to define sharing policy for what purposes the personal data is shared (or collected)
Individual protects the distributed resource which is collecting the personal data with a centralized Authorization Server.
Protection and Security AccountabilityRight and Responsibility for using personal data
![Page 54: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/54.jpg)
Benefits of UMA applied to LMP
28
Authorize
Client ResourceServer
AuthorizationServer
Protect
Access(on behalf of
Requesting Party)
ResourceOwner
Individual is active part of defining the how the personal information will be handled in the data sharing process (Controlled Push or Informed Pull).
Individual is able to define sharing policy for what purposes the personal data is shared (or collected)
Individual protects the distributed resource which is collecting the personal data with a centralized Authorization Server.
Protection and Security AccountabilityRight and Responsibility for using personal data
Individual can selectively share personal data with Requesting Party through a Claim-based authorization system
![Page 55: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/55.jpg)
Benefits of UMA applied to LMP
28
Authorize
Client ResourceServer
AuthorizationServer
Protect
Access(on behalf of
Requesting Party)
ResourceOwner
Individual is active part of defining the how the personal information will be handled in the data sharing process (Controlled Push or Informed Pull).
Individual is able to define sharing policy for what purposes the personal data is shared (or collected)
Policy Enforcement Point at Resource Server allows to intercept any request to access to personal data
Individual protects the distributed resource which is collecting the personal data with a centralized Authorization Server.
Protection and Security AccountabilityRight and Responsibility for using personal data
Individual can selectively share personal data with Requesting Party through a Claim-based authorization system
![Page 56: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/56.jpg)
Questions?
29
![Page 57: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/57.jpg)
30
Eve L. Maler UMA WG Chair
Thomas Hardjono UMA WG Specification Editor
Members of the UMA WG
Thank You /Acknowledgement
![Page 58: User-Access Manager: Key to Life Management Platform](https://reader033.vdocuments.net/reader033/viewer/2022051207/53f8ee1d8d7f72b82e8b48e3/html5/thumbnails/58.jpg)
Thanks!
31
@UMAWG tinyurl.com/umawg |tinyurl.com/umafaq