FHO Fachhochschule Ostschweiz
Bridging XAPI into Higher Education
Learning Analytics
Ownership and
Privacy
Prof. Dr. Christian Glahn
Blended Learning Center
(@phish108)
@phish108
Privacy for
identifiable actors
Not privacy through
aggregation or encryption
@phish108
XAPI
@phish108
XAPI aims to be the
successor of SCORM
(it is already part of CMI5)
@phish108
Learning Analytics
Ecosystem (LMS Functions)

LRS
" #
$%
& '
Collaboration Communication
Course
Management
Assessment &
Grading
Identity
Management Resource
Provider
+
Analytics
@phish108
(
)
Activity
Consumer

LRS
*
+
☼
-
.
/
Sensors
Activity
Provider
0
1 2
3
Actuators
Experience API
Interoperable Data Tracking and Reporting
@phish108
(
)Activity
Consumer

LRS
Activity
Provider
UUID
time
actor
object
verb result
context
4 Activity
Statement
Experience API
Interoperable Data Tracking and Reporting
@phish108
(
)Activity
Consumer

LRS
Activity
Provider
44444444444
4444444
Activity
Stream
+
Filters
Experience API
Interoperable Data Tracking and Reporting
@phish108
( )
Experience API
Cascaded Processing
Activity
Consumer

LRS
Activity
Provider

LRS

LRS
@phish108
XAPI Characteristics
§ XAPI allows LRS-level statement completion
only for the initial LRS
§ XAPI declares activity statements as immutable
§ XAPI leaves privacy to the educational
designer/publisher
§ XAPI allows very detailed statements
§ XAPI allows linked data
@phish108
(
)
Who controls XAPI Processes?
Activity
Consumer

LRS
Activity
Provider
@phish108
Students
Peers
Lecturers
5
Stakeholder and Ownership
Program director
Study administration
Quality control
Department
6 Educational designer
Publisher
Tool provider
Service provider
6
Internal External
DirectIndirect
@phish108
(
)
XAPI Privacy by Design?
Activity
Consumer

LRS
Activity
Provider
@phish108
Focus on XAPI Privacy
UUID
time
actor
object
verb result
context
4XAPI
@phish108
Remember
An XAPI LRS is always part of
an educational system!
@phish108
Privacy Framework for XAPI Applications

LRS
$% &
Course &
Context
Management
Identity
Management
(App
)Activity
Consumer
Contextualized
Unique References
'Assessment &
Grading
Linked data
@phish108
Privacy Framework for XAPI Applications

LRS
$% &
Course &
Context
Management
Identity
Management
(App
)Activity
Consumer
Authorized Access
to the Details
'Assessment &
Grading
Linked data
@phish108
Contextualised Anonymisation
Example
Course 101 participant ID
https://uni.ac/id/ax03cB
Course 102 participant ID
https://uni.ac/id/7G0qVp
Peter Peter
existsexists
https://uni.ac/id/ax03cB https://uni.ac/id/7G0qVp
https://uni.ac/id/ax03cBhttps://uni.ac/id/7G0qVp
@phish108
Conclusions
§ XAPI does not come with a privacy model
§ XAPI requires externally reinforced privacy
§ Reduce exposed and inferable information
§ Contextualized anonymization does not
make up for a missing privacy policy
Christian Glahn
Blended Learning Center
http://slidesha.re/phish108
@phish108 @htwblc
icons by fontawesome http://fontawesome.io

Bridging XAPI into Higher Education: Learning Analytics, Ownership, and Privacy