...
In the next section we discuss how User-Managed Access can be used to support parents with restricting information publishing by their children. We present how younger users of social networking applications can benefit from our proposal. With our scenario we show how our approach allows a user to delegate access control related tasks to other entities that may have a better understanding of security requirements for their resources.
Use Case: Delegating Access Management to Content on Social Applications
Submitted by: Maciej Machulak
Alice, a 14 year old girl, wants to have an account on a popular social networking application. She wants to create a network of her friends with whom she wants to share pictures and discuss her hobbies. She wants to keep in touch with them and does not want to be left behind with new technologies that have been used by her peers for some time now.
...
Her father Bob is also happy as he knows that his daughter can communicate with her friends in a safe and secure way. He checks his Authorization Manager on a daily basis and composes access control policies if any requests are sent by his daughter's social networking application. Moreover, he audits all access requests and sees how Alice's friends access her pictures and video clips. He hasn't noticed any abuses and is confident in whatever her daughter does. After all, he's fully responsible for her privacy and security and he puts much effort into ensuring that his daughter stays safe and still enjoys the benefits of social networking on the Web.
Use Case: Separate Resource Host, Relationship Manager, and Recipient (Accepted)
...
Architecture
The architecture for a User-Managed Access for the provided scenario is depicted below.
...