UXC Dictionary: Difference between revisions

From IDESG Wiki
Jump to navigation Jump to search
m (formatting fix)
(updated to reflect UXC meeting 7/30/15)
Line 34: Line 34:
| '''Verified identity''' || Example || Example || Example
| '''Verified identity''' || Example || Example || Example
|-
|-
| Example || Example || Example || Example
| Action || Might include providing information or a digital signature. || Example || Example
|-
|-
| Example || Example || Example || Example
| Pathway || Example || Example || Example
|-
|-
| Example || Example || Example || Example
| Reasonable Accommodation || Example || Example || Example
|-
|-
| Example || Example || Example || Example
| Feasible (per Req 5) || Example || Example || Example
|-
|-
| Example || Example || Example || Example
| Example || Example || Example || Example

Revision as of 16:36, 30 July 2015

Term Definition Notes Citations
User Human. This does not include machines, algorithms, or other non-human agents or actors. Our perspective is that this definition applies this way in any context in the IDESG framework. We suggest changing the use of USER for other meanings to another word. Note that the NSTIC document (see citation) names "user" as separate from devices and processes here on page 8: "Technology and processes for identification (establishing unique digital identities) and authentication (verifying the identity of a

user, process, or device) are at the forefront of this Strategy " NSTIC Document: https://www.idecosystem.org/idesgwiki/images/b/bc/Full_NSTIC_Strategy_Document_-_04152012_ARR_Annotated_for_user_centric.pdf

User-centric Example Sample usage from NSTIC:
  • "The realization of this vision is the user-centric “Identity Ecosystem” described in this Strategy."P8
  • "Furthermore, the online environment today is not user-centric. Individuals tend to have little ability to manage their own personal information once it is released to service providers, and they often must calculate the tradeoffs among security, privacy, and gaining access to a service they desire." Page 12
  • "It also reflects the user-centric nature of the Identity Ecosystem, which provides greater transparency, privacy protection, flexibility,and choice to the individual." Page 21
  • "New privacy protections will shift the current model of application-specific collection of identity information to a distributed, user-centric model that supports an individual’s capability to manage an array of cyber identities and to manage and assert personal attributes without having to provide identifying data." Page 29
  • "Lack of secure, convenient, user-friendly options for authentication and identification;" Page15
  • "New privacy protections will shift the current model of application-specific collection of identity information to a distributed, user-centric model that supports an individual’s capability to manage an array of cyber identities and to manage and assert personal attributes without having to provide identifying data." Page 35
  • Limit the retention of data to the time necessary for providing and administering the services to the individual end-user for which the data was collected, except as otherwise required by law; • Provide concise, meaningful, timely, and easy-to-understand notice to end-users on how providers collect, use, disseminate, and maintain personal information;" Page 36
The common semantic domain is roughly referred to hereas:https://en.wikipedia.org/wiki/User-centered_design
Entity / Entities Any organization providing identity services. Example Example
System An entity's system a user is interacting with at a particular time. Example Example
Anonymous An interaction designed such that the data collected is not sufficient to infer the identity of the user involved nor is such data sufficient to permit an entity to associate multiple interactions with a user or to determine patterns of behavior with a user. Example Example
Third Parties Example re: supplemental on Usable 3: research systems that display entities on a page or system. consider burden on user vs. accessibility of entities list) Example
Pseudonymous An interaction designed such that the data collected is not sufficient to allow the entity to infer the user involved but which does permit an entity to associate multiple interactions with the user’s claimed identity. Example Example
Verified identity Example Example Example
Action Might include providing information or a digital signature. Example Example
Pathway Example Example Example
Reasonable Accommodation Example Example Example
Feasible (per Req 5) Example Example Example
Example Example Example Example
Example Example Example Example
Example Example Example Example