Page Comparison

...

• To maintain the UMA specifications and consider developing enhancements to and any future versions of them

  • For example, to consider whether extension and profile proposals contributed to the Work Group should result in Work Group deliverables

• To develop Business Model reports and/or specifications that support the enablement of a license-based model for controlling access rights to personal digital assets, in liaison with other relevant bodies

  • For example, working with Kantara and external consent-oriented work groups. Such as the Kantara Advanced Notice & Consent Receipt work group

• To promote UMA adoption

  • For example, by offering support for profiling and extension creation and creating educational materials

  • For example, by maintaining the UMA Implementer's Guide

  • For example, by producing UMA feature and value documents

• To promote interoperability of independent implementations of UMA

...

• Support the notion of a distinct online service for managing data-sharing and service- and device-access relationships ("access relationships" for short) between an individual and other parties that request such access

• Allow a person (individual or legal person) to select policies and enforceable contract terms that govern access, as well as data storage, further usage, and further sharing on the part of requesting services

• Allow a person to conduct short-term and long-term management of access relationships, including modifying the conditions of access or terminating the relationship entirely

• Allow a person to audit and monitor various aspects of access relationships

• Allow requesting services to interact directly with responding services in a fashion guided by policy while an individual is offline, reserving real-time user approval for extraordinary circumstances

• Allow requesting services to interact with multiple responding services associated with the same individual

(4) DRAFT TECHNICAL SPECIFICATIONS: List Working Titles of draft Technical Specifications to be produced (if any), projected completion dates, and the Standards Setting Organization(s) to which they will be submitted upon approval by the Membership.

The following technical specifications may be developed in 2021under this charter:

• One or more extension and/or profile specifications

  • A Relationship and Policy Management Extension, defining the “out of scope” interfaces of the UMA Federated Authorization specification

  • A Resource Definitions Extension, enabling resource discovery through AS-first client interactions

  • Connection to OAuth fine-grained specs: PAR, RAR

• Updates to the UMA 2.0 specifications as warranted

(5) OTHER DRAFT RECOMMENDATIONS: Other Draft Recommendations and projected completion dates for submission for All Member Ballot.

The following reports are anticipated to be developed in 2021 developed under this charter (final titles and document boundaries to be determined):

• Business model-related reports

  • UMA in Open Banking
• A horizontal UMA security profile, considering other profiles including HEART, FAPI, and OAuth 2.1
• Analysis of new authorization profiles, such as GNAP and/or PAR/RAR

• Analysis of UMA deployments or deployment profiles
  

• UMA Market positioning and use-case promotion

(6) LEADERSHIP: Proposed WG Chair and Editor(s) (if any) subject to confirmation by a vote of the WG Participants.

...

Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version)

10) RELATED WORK AND LIAISONS: Related work being done in other WGs or other organizations and any proposed liaison with those other WGs or organizations.

...

• Kantara Advanced Notice & Consent Receipt

• OpenID Foundation HEART Work Group

• OpenID Foundation FAPI Work Group
• Financial Data Exchange

• Open Identity Exchange

• IETF OAuth Working Group

• IETF GNAP Working Group
• Decentralized Identity Foundation
• Trust over IP Foundation
• Internet Safety Labs (formerly Me2B Alliance)
• Shift (formerly PP2PI)

(11) CONTRIBUTIONS (optional): A list of contributions that the proposers anticipate will be made to the WG.

...

• J. Trent Adams, ISOC
• Hasan Akram, Fraunhofer Institute of Secured Information Technology
• Joe Andrieu (individual participant affiliated with SwitchBook)
• Gerald Beuchelt (individual participant affiliated with MITRE)
• Paul Bryan, Sun Microsystems
• Andy Dale (individual participant affiliated with OCLC)
• Iain Henderson (individual affiliated with Mydex CIC)
• Hubert Le Van Gong, Sun Microsystems
• Mark Lizar (individual affiliated with Identity Trust CIC)
• Eve Maler, Sun Microsystems
• Andrew Nash, PayPal
• Drummond Reed, Information Card Foundation
• Christian Scholz, DataPortability.org
• Paul Trevithick (individual participant affiliated with Azigo)
• Robin Wilton (individual participant affiliated with Future Identity)

...