- WG-UMA - mailman.kantarainitiative.org

Agenda for UMA telecom 2019-10-02
by Eve Maler 03 Oct '19

03 Oct '19

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-10-02 Date and Time - *Thursdays 6am PT* - Screenshare and dial-in: https://global.gotomeeting.com/join/857787301 - See UMA calendar for additional details: http://kantarainitiative.org/confluence/display/uma/Calendar Agenda - Roll call - Approve minutes of UMA telecon 2019-09-19 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-09-19> - XYZ use cases - Nominations for chair and vice-chair - AOB *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Notes from 2019-10-01 UMA business-legal framework telecon
by Eve Maler 01 Oct '19

01 Oct '19

https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not… 2019-10-01 Attending: Eve, Andi, Domenico, Nancy, Tim, Cigdem If we are addressing a business-legal audience, should we start with a relatively technical approach, or should we start with use cases? We do have a challenge with people not understanding UMA. We are finding confusion out there. We did say at the end of the last paper: "The next papers in this series will explore *the application of UMA licensing model to specific use cases* for various categories of owners and custodians of personal digital assets in the global digital information society." So we could start with a (full?) set of concrete use cases, and then work through them step-wise. So let's have an outline like this: - Part 1: Introduction - Explain UMA at a high level to a primarily business-technical audience - Explain technical terms in the context of State 1: RO = DS = singular RRA - Part 2: Delegation of Resource Rights Administration Use Cases - Use cases written in simple language (maybe one paragraph each), illustrating various of the DS/RO/RRA states and state changes - A state machine showing the states and changes - A section working through those use cases with the permission token flows and consequences - Part 3: Sharing relationship use cases (policies change based on changes in relationship with RqA?) - Subsections are like part 2's subsections... - Part 4: Delegation of Requesting Agent Role Use Cases - (e.g., Alice shares her connected car with Bob and he gives his keys to her car to the valet for parking) It's perfectly fine to blow up the text that's in the current document vs. trying to make the existing text work. Nothing in there is sacred. Andi's schedule has now cleared enough that he should be able to contribute significantly for the next couple of weeks. *Future meetings:* The call next week (*Oct 8*) is already cancelled. Eve can't make the call on *Oct 15* but Ruth P has kindly agreed to start the call! *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Action items for writing use cases (deadline next Thu, no mtg tomorrow)
by Eve Maler 25 Sep '19

25 Sep '19

We discussed a set of use cases in last Thursday’s call, and a number of people agreed to put their names next to them. Let’s please target next Thursday, Oct 3, to have them written up. They need be only a paragraph at a minimum. They might turn into XYZ fodder, or possibly a GitHub issue for ourselves. I’m going to cancel tomorrow’s call. The Oct 10 call is already off the books due to my London travel (reach out if you’re in the area!). https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-09-19 UMA-related use cases collected last time: AI: Eve: Alice-to-Alice sharing (RO-to-self) AI: Eve: Proactive Alice-to-org sharing (RO-to-client developer, so to speak) AI: Peter: Bob is assured to a certain level that Alice is who she says she is (strong Alice-to-AS binding or "CIBA-like") Transactional and long-term management of sharing of preferences with service providers [needs an owner, maybe Lisa?] AI: Cigdem: Disconnected RS when a "handle" for the RS can't be gotten right away Eve Maler (sent from my iPad) | cell +1 425 345 6756

1 0

Notes from 2019-09-24 UMA business-legal framework telecon
by Eve Maler 24 Sep '19

24 Sep '19

https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not… 2019-09-24 Attending: Eve, Cigdem, Domenico, Nancy, Tim, Vlad, Sal At the DS-RRA wrangling layer where UMA doesn't have any artifacts, there will typically be a lot of identity and access management taking place. What technical artifacts can we expect to be used there? Typically many proprietary ones, but also potentially some standardized ones, such as federation standards like SAML and OIDC, maybe provisioning standards like SCIM, maybe auditing-friendly standards like consent receipts, etc. We have already mentioned consent receipts in our "devices and artifacts" capture. The topic discussed last time was: Could/How could UMA be used to achieve user control of the initial user relationship with a service provider? The answer in today's world is that UMA was designed with today's imperfect situation in mind, which presumes opt-in cookie consent, opt-in terms and conditions, opt-in OAuth app connections, and opt-in AS-RS connections for UMA, which are all sub-optimal. However, the Lisa/Eve paper proposes an architectural way forward for fixing these broken patterns, which is to use the "Open Banking trick" for intent registration. The trick uses the nexus of the Open Banking APIs and OIDC request objects to allow transaction authorization of payment of a specific amount of money for a single payment, vs. authorization of an OAuth scope for an indefinite period. Theoretically, this "intent registration" ahead of time by a user at a client app (TPP) could be used to allow transactional (one-time) "intent registration" of user-centric terms and conditions, not just payment of money. Flows still to be worked out for each use case of user/service interaction, of course! Cigdem had commented about moving up the Legal Parties discussion in the document and we agree. She will do some "invasive" editing of the doc. Eve can't make Oct 8th or Oct 15th. It sounds like we have critical mass of people to join on the 15th so Eve will ensure someone can open the bridge on that day. In the meantime Cigdem will edit the doc. We haven't discussed Nancy's latest submitted set of use cases, including healthcare and banking. One of Eve's goals is to include as many submitted real-life use cases as possible. We've already got quite a few. She's started a couple of templates for some more in the "mapping" slide deck. *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Reminder: UMA business-legal telecon tomorrow
by Eve Maler 24 Sep '19

24 Sep '19

We meet *8am PT* on Tuesday at https://global.gotomeeting.com/join/857787301 -- see our calendar here <https://kantarainitiative.org/confluence/display/uma/Calendar>. Previous notes are here <https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not…>. Our spreadsheet is here <https://docs.google.com/spreadsheets/d/1QT5LR_ibpwYwpD_XLQ1tB7OLXbdaT6Oi9aj…>, our "business model: mapping graphics" deck is here <https://drive.google.com/open?id=1uigCMQI_TKuFyOstQTngYuZaqs36wwbE3BBjBB7xG…>, our full/older Legal Role Definitions deck is here <https://docs.google.com/presentation/d/1I12agEsfaJK3LEiJyROrJV3PCEmhlCzCxYS…>, and our fledgling draft doc is here <https://docs.google.com/document/d/1Accua4AWQrl6N0trjdj4NFA0fyDpOn2B1orupCu…>. Trying to access these links will send me a notification to share the docs with you with your preferred ID, if I haven't already given you access. Agenda item: - Document the full value and structure of a final WG draft report/spec deliverable. (I think Tim was going to share notes from last week's call that I couldn't join.) *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

2 1

Agenda for UMA telecon 2019-09-19
by Eve Maler 18 Sep '19

18 Sep '19

Here is an informal agenda for tomorrow’s telecon at 6am PT: https://kantarainitiative.org/confluence/display/uma/Calendar https://global.gotomeeting.com/join/857787301 We will work on documenting the UMA-related use cases enumerated in the last meeting. Eve Maler (sent from my iPad) | cell +1 425 345 6756

1 0

Our Legal Editor Tim Reiniger in the Information Law Journal
by Eve Maler 17 Sep '19

17 Sep '19

Check out the Autumn 2019 issue of the Information Law Journal: http://www.tshawlaw.com/images/INFORMATION_LAW_JOURNAL_-_volume_10_issue_4.… ...where Tim Reiniger writes, with Stephen Mason, on the important topic of "Human Rights, the United Nations, and Digital Technologies: Configuring Human Rights in Software Code" and makes a connection with several modern technologies you will be familiar with, including User-Managed Access. Please help get the word out! Look for a mention from the @UMAWG Twitter handle. *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

2 1

Re: [WG-UMA] Eve can't make tomorrow's biz-legal call
by Colin Wallis Kantara 16 Sep '19

16 Sep '19

Programs Manager Ruth will open the call for y'all. Thanks Colin On Mon, Sep 16, 2019 at 11:02 PM David J. Thelander < dthelander(a)gravelshea.com> wrote: > That makes good sense Colin. Cheers, D. > > > > > > <http://www.gravelshea.com> > *David J. Thelander* | *Special Counsel* > *Gravel and Shea* > > 76 St. Paul Street, 7th Floor | P. O. Box 369 | Burlington, VT 05401 > T: 802-658-0220 | F: 802-658-1456| M: 415-608-7418 > dthelander(a)gravelshea.com | www.gravelshea.com > Biography > <https://www.gravelshea.com/our-team/special-counsel/David-Thelander> | Download > vCard > <https://www.gravelshea.com/wp-content/uploads/David-Thelander-vCard.vcf> | > @davidthelander > > Click here to check out our “Blockchain Technology” blog > <http://vtblockchainlawblog.com> > The information contained in this transmission may contain privileged and > confidential information. It is intended only for the use of the person(s) > named above. If you are not the intended recipient, you are hereby notified > that any review, dissemination, distribution or duplication of this > communication is strictly prohibited. If you are not the intended > recipient, please contact the sender by reply e-mail and destroy all copies > of the original message. > > > On Sep 16, 2019, at 2:58 PM, Colin Wallis Kantara < > colin(a)kantarainitiative.org> wrote: > > Thanks Tim and David > > It would be preferable to keep the same cadence on the dial in details to > save potential confusion. > > I hope to be able confirm Staff to open the call by time you awaken in the > morning. > > Kind regards > Colin > > > On Mon, Sep 16, 2019 at 10:22 PM David J. Thelander < > dthelander(a)gravelshea.com> wrote: > >> I can make it and can ask my EA to circulate a dial in if that helps. >> >> Sent from my iPhone >> >> >> >> >> <https://www.gravelshea.com/wp-content/uploads/GS-Logo-for-Signature-Block.j…> >> <http://www.gravelshea.com> David J. Thelander | Special Counsel >> Gravel and Shea >> >> 76 St. Paul Street, 7th Floor | P. O. Box 369 | Burlington, VT 05401 >> T: 802-658-0220 | F: 802-658-1456| M: 415-608-7418 >> dthelander(a)gravelshea.com | www.gravelshea.com >> Biography >> <https://www.gravelshea.com/our-team/special-counsel/David-Thelander> | Download >> vCard >> <https://www.gravelshea.com/wp-content/uploads/David-Thelander-vCard.vcf> | >> @davidthelander >> Click here to check out our “Blockchain Technology” blog >> <http://vtblockchainlawblog.com> >> The information contained in this transmission may contain privileged and >> confidential information. It is intended only for the use of the person(s) >> named above. If you are not the intended recipient, you are hereby notified >> that any review, dissemination, distribution or duplication of this >> communication is strictly prohibited. If you are not the intended >> recipient, please contact the sender by reply e-mail and destroy all copies >> of the original message. >> >> >> On Sep 16, 2019, at 2:06 PM, Tim Reiniger <tsreiniger(a)gmail.com> wrote: >> >> I’ll be happy to help with the meeting if Colin finds someone to start >> it! Tim >> >> Sent from my iPhone >> >> On Sep 16, 2019, at 4:00 PM, Colin Wallis Kantara < >> colin(a)kantarainitiative.org> wrote: >> >> Thanks for the heads-up Eve. >> No chance for me to open it on this occasion. >> Sorry folks, but I have a Board Officers meeting right across that time. >> I can ask another Staff member to open it if folks want to proceed with >> the call. >> Cheers >> Colin >> >> >> On Mon, Sep 16, 2019 at 5:29 PM Eve Maler <eve(a)xmlgrrl.com> wrote: >> >>> Apologies. Would others want to carry on during the slot, or should I >>> cancel? Current status is here: >>> >>> >>> https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not… >>> >>> I had an action as follows: "Start a skeleton draft doc for next time." >>> (With detail: "Let's start drafting collaboratively. A GDoc is a great way >>> to start, following the (Kantara-inflected) RFC style.") Others offered to >>> help edit collaboratively. >>> >>> We already had a skeleton draft doc following more of a Report style >>> here >>> <https://docs.google.com/document/d/1Accua4AWQrl6N0trjdj4NFA0fyDpOn2B1orupCu…> and >>> it had some old title stuff in it ("business model" language), so I have >>> converted it over in minor fashion. Most of the (placeholder) content is >>> still there, but the skeleton is ready to receive text along the lines that >>> we've been documenting (voluminously) in our notes, slides, etc. Andi, Tim, >>> and Domenico were already added to this doc and I just added Nancy and >>> Cigdem. Others please let me know if you need access! >>> >>> >>> *Eve Maler *Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: >>> @xmlgrrl >>> >>> _______________________________________________ >>> WG-UMA mailing list >>> WG-UMA(a)kantarainitiative.org >>> https://kantarainitiative.org/mailman/listinfo/wg-uma >>> >> _______________________________________________ >> WG-UMA mailing list >> WG-UMA(a)kantarainitiative.org >> https://kantarainitiative.org/mailman/listinfo/wg-uma >> >> _______________________________________________ >> WG-UMA mailing list >> WG-UMA(a)kantarainitiative.org >> https://kantarainitiative.org/mailman/listinfo/wg-uma >> >> >

2 1

Re: [WG-UMA] Eve can't make tomorrow's biz-legal call
by Colin Wallis Kantara 16 Sep '19

16 Sep '19

Thanks Tim and David It would be preferable to keep the same cadence on the dial in details to save potential confusion. I hope to be able confirm Staff to open the call by time you awaken in the morning. Kind regards Colin On Mon, Sep 16, 2019 at 10:22 PM David J. Thelander < dthelander(a)gravelshea.com> wrote: > I can make it and can ask my EA to circulate a dial in if that helps. > > Sent from my iPhone > > > > > <https://www.gravelshea.com/wp-content/uploads/GS-Logo-for-Signature-Block.j…> > <http://www.gravelshea.com> David J. Thelander | Special Counsel > Gravel and Shea > > 76 St. Paul Street, 7th Floor | P. O. Box 369 | Burlington, VT 05401 > T: 802-658-0220 | F: 802-658-1456| M: 415-608-7418 > dthelander(a)gravelshea.com | www.gravelshea.com > Biography > <https://www.gravelshea.com/our-team/special-counsel/David-Thelander> | Download > vCard > <https://www.gravelshea.com/wp-content/uploads/David-Thelander-vCard.vcf> | > @davidthelander > Click here to check out our “Blockchain Technology” blog > <http://vtblockchainlawblog.com> > The information contained in this transmission may contain privileged and > confidential information. It is intended only for the use of the person(s) > named above. If you are not the intended recipient, you are hereby notified > that any review, dissemination, distribution or duplication of this > communication is strictly prohibited. If you are not the intended > recipient, please contact the sender by reply e-mail and destroy all copies > of the original message. > > > On Sep 16, 2019, at 2:06 PM, Tim Reiniger <tsreiniger(a)gmail.com> wrote: > > I’ll be happy to help with the meeting if Colin finds someone to start it! > Tim > > Sent from my iPhone > > On Sep 16, 2019, at 4:00 PM, Colin Wallis Kantara < > colin(a)kantarainitiative.org> wrote: > > Thanks for the heads-up Eve. > No chance for me to open it on this occasion. > Sorry folks, but I have a Board Officers meeting right across that time. > I can ask another Staff member to open it if folks want to proceed with > the call. > Cheers > Colin > > > On Mon, Sep 16, 2019 at 5:29 PM Eve Maler <eve(a)xmlgrrl.com> wrote: > >> Apologies. Would others want to carry on during the slot, or should I >> cancel? Current status is here: >> >> >> https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not… >> >> I had an action as follows: "Start a skeleton draft doc for next time." >> (With detail: "Let's start drafting collaboratively. A GDoc is a great way >> to start, following the (Kantara-inflected) RFC style.") Others offered to >> help edit collaboratively. >> >> We already had a skeleton draft doc following more of a Report style here >> <https://docs.google.com/document/d/1Accua4AWQrl6N0trjdj4NFA0fyDpOn2B1orupCu…> and >> it had some old title stuff in it ("business model" language), so I have >> converted it over in minor fashion. Most of the (placeholder) content is >> still there, but the skeleton is ready to receive text along the lines that >> we've been documenting (voluminously) in our notes, slides, etc. Andi, Tim, >> and Domenico were already added to this doc and I just added Nancy and >> Cigdem. Others please let me know if you need access! >> >> >> *Eve Maler *Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: >> @xmlgrrl >> >> _______________________________________________ >> WG-UMA mailing list >> WG-UMA(a)kantarainitiative.org >> https://kantarainitiative.org/mailman/listinfo/wg-uma >> > _______________________________________________ > WG-UMA mailing list > WG-UMA(a)kantarainitiative.org > https://kantarainitiative.org/mailman/listinfo/wg-uma > > _______________________________________________ > WG-UMA mailing list > WG-UMA(a)kantarainitiative.org > https://kantarainitiative.org/mailman/listinfo/wg-uma > >

1 0

Eve can't make tomorrow's biz-legal call
by Eve Maler 16 Sep '19

16 Sep '19

Apologies. Would others want to carry on during the slot, or should I cancel? Current status is here: https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not… I had an action as follows: "Start a skeleton draft doc for next time." (With detail: "Let's start drafting collaboratively. A GDoc is a great way to start, following the (Kantara-inflected) RFC style.") Others offered to help edit collaboratively. We already had a skeleton draft doc following more of a Report style here <https://docs.google.com/document/d/1Accua4AWQrl6N0trjdj4NFA0fyDpOn2B1orupCu…> and it had some old title stuff in it ("business model" language), so I have converted it over in minor fashion. Most of the (placeholder) content is still there, but the skeleton is ready to receive text along the lines that we've been documenting (voluminously) in our notes, slides, etc. Andi, Tim, and Domenico were already added to this doc and I just added Nancy and Cigdem. Others please let me know if you need access! *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

3 2