Andrew Potter London Identity Tech Talks - March 2016

1. Andrew Potter
Autonomy - How individuals can achieve autonomy over their own
data in a world where that data is increasingly being shared widely
across many different organisations - with a standards based
approach to consent that is explicit, time-bound, scoped, and
revocable
SHARE ALL THE THINGS
WITH UMA!

2. Resource Server
Authorization Server
Client

3. +--------+ +---------------+
| |--(A)- Authorization Request ->| Resource |
| | | Owner |
| |<-(B)-- Authorization Grant ---| |
| | +---------------+
| |
| | +---------------+
| |--(C)-- Authorization Grant -->| Authorization |
| Client | | Server |
| |<-(D)----- Access Token -------| |
| | +---------------+
| |
| | +---------------+
| |--(E)----- Access Token ------>| Resource |
| | | Server |
| |<-(F)--- Protected Resource ---| |
+--------+ +---------------+

6. Resource Server
Authorization Server
Client

8. Resource Server
Policy
Authorization Server
➊ Upload
➋
Token+
Register
➌
ID+PolicyURI
➍
Link➎ Create Policy
➊ Sign up
➋
Request OAuth 2
Token
➌
Token
(PAT)

9. ➊ Sign up
Client
➌Token(AAT)
Authorization Server
➋
RequestOAuth2Token

10. ① Access
Client
⑩
RPTScopes
⑦Token(RPT)
Authorization Server
② Resource Request
③
PAT+Scopes
④
Ticket
⑤ 401 + ticket
⑥AAT+Ticket
⑧ Request + RPT
Resource Server
⑪ OK
⑨
IntrospectRPT
⑫

11. Demo...

12. The UMA Specification can be used to add sharing capabilities to existing web
applications.
More Information:
● https://docs.kantarainitiative.org/uma/draft-uma-core-v1_0_1.html
● https://kantarainitiative.org/confluence/display/uma/UMA+FAQ

13. Questions?

14. Thank you.