Lifecycle Management
Our online identity can be a collection of many varied attributes (PPID) which is determined by the context of the individual person – relevant attributes and attestations. A person’s affiliation such as employment, for example, also changes over time, for which any associated electronic signature would require revocation at the end of an employment period. A new employment context or promotion to a new role can determine another collection of attributes and attestations which are not always the same attributes, as a person moves from one context to another. In other words the nature of online identity is much more dynamic than it is static. Identity Processors need to consider this dynamic in terms of reliable, timely lifecycle management. Identity Controllers are also keen to manage risk and limit periods of liability by keeping the active lifetime of our PPID and / or electronic signature (digital certificate) to the minimum necessary.
Further and as previously referred to in the Identity Owner section, we have for example, individual rights to rectification (GDPR) if our PPID is inaccurate or incomplete and indeed if there is no compelling reason to store or continue processing our PPID, then we have a right to erasure (the PPID is no longer necessary for the original purpose it was collected). Whilst these rights are not absolute, they do nonetheless, also present requirements for timely lifecycle management of our PPID. The EU’s GDPR has imposed lifecycle management of PPID.
e-ntitle.® provides PPID lifecycle management for Identity Processors and this functionality engages the individual Identity Owner in those critical lifecycle events – it’s the effective management of PPID and electronic signatures (digital certificates) ‘cradle-to-grave’. In simplest terms e-ntitle.® provides for the creation of and timely revocation of those digital certificates if required before natural expiry. The timely revocation of entitlement to assert an identity is arguably far more important than its creation.
This is a process issue and an important one that is too often overlooked – liability periods.
