Sequence Diagrams for Consent Receipt Interop demo
High-level sequence diagram v1
Please use Comments to add clarifying notes and details. (you must be logged into Confluence to add a comment - see Create an account and get full access to the Kantara Wiki if you need to create an account)
Notes:
- Diagram shows that Data Controller A integrates with Consent Platform 1 for consent management functions
- Diagram shows that Data Controller B integrates with Consent Platform 2 for consent management functions
- Controllers are not required to use Platforms (we should show both variants)
- The 'Business Function' that Data Subject and Controller A perform is decided and designed by the demo participant (Controller A in this case) - so this could be any interaction that will result in generation of a Consent Receipt
- Scenario 1 shows the case where Platform 1 handles all CR activities including display to Data Subject
- Scenario 2 shows the case where the Data Subject uses the 'dashboard' / 'viewer' / 'reader' of their own choosing to interact with previously-generated CRs
- The demo might show different CR transport mechanisms - anything from 'give it to the Data Subject to store somewhere', to 'Platform-to-Platform CR transmission'
- The critical piece that probably requires developer effort is 'Export Consent Receipt' and 'Import Consent Receipt' - those steps externalize CRs and might need some work to transform internal representations into conformant CR representations
Sequence diagram was discussed:Â 2018-07-05 Meeting notes (CR). General consensus that, at a high level, this is a reasonable, simple, demonstration. Much detail lies beneath each interaction line.