...
The rental car company “Green&blue car” is allowed to check the status, location and certain statistics at any time. “Berlin Green Energy” is allowed to check the location of Bobs car in order to direct him to the nearest Energy station. There has to be a policy management deciding who is allowed for what?
Gaps, open issues
I have the feeling we need an authorization framework here. (kind of UMA/OAuth thing?)