← Back to Concept Index

user-managed-access

A standard protocol based on OAuth 2.0 that provides individuals a unified control point to authorize access to their distributed resources with embedded consent management.

1 chapter across 1 book

Trust::Data: A New Framework for Identity and Data SharingThomas Hardjono, David Shrier, Alex Pentland

3: Core Identities for Future Transaction Systems (pages 39–52)

The chapter outlines the critical need for scalable, privacy-preserving digital identities through the concept of core identities, personas, and transaction identifiers to address challenges in current identity ecosystems. It presents the OPAL principles and paradigm, emphasizing moving algorithms to data repositories and requiring user-managed consent for algorithm execution rather than data access, supported by standards like UMA. Additionally, it highlights mechanisms such as chain of verifiability and privacy-preserving identifiers like Intel's EPID to ensure trust, accountability, and unlinkable yet verifiable digital identities in future transaction systems.