As presented for ISSE 2010, on 7 October 2010 in Berlin.

1. User consent for consumer identity 7 October 2010, ISSE 2010, Berlin Maarten Wegdam Principal Research @ Novay

5. State-of-the-art for consent InfoCard (active client)

6. State-of-the-art for consent OpenID (web-redirect)

8. A step back A complicated trade-off for consent

9. Privacy attitude [Privacy indexes: a survey of Westin’s studies. Kumaraguru, Faith Cranor. ISRI technical report, december 2005.]

11. We decided in our case not to provide per-attribute choice, too difficult to understand. Always ask user before exchanging data 0 Consent

12. We show actual value of information, explain the federation and role of SURFnet, and link to privacy statement Make the information flow clear 1 Informed

13. We decided to only have ‘timed’ automation, people forget… Enable providing consent for future log-ins 2 Automate

14. We decided to only have ‘timed’ automation, people forget… Enable providing consent for future log-ins 2 Automate will be longer

16. Including what attributes are included in consent, but no log. Provide overview and allow revocation of provided consents 4 Revocation

17. Including what attributes are included in consent, but no log. Provide overview and allow revocation of provided consents 4 Revocation