Skip to content

Commit

Permalink
Updates according to comments.
Browse files Browse the repository at this point in the history
Signed-off-by: Ulf Bjorkengren <ulfbjorkengren@geotab.com>
  • Loading branch information
Ulf Bjorkengren committed Jul 19, 2023
1 parent 43aea80 commit ab8ba69
Showing 1 changed file with 6 additions and 3 deletions.
9 changes: 6 additions & 3 deletions spec/VISSv2_Core.html
Original file line number Diff line number Diff line change
Expand Up @@ -1023,7 +1023,9 @@ <h2>Access Grant Request</h2>
In scenarios where both the client and the <a href="#access-grant-server-def">access grant token server</a>
are deployed in-vehicle the VIN parameter may be omitted, in all other deployment scenarios it shall be present.<br>
The purpose of the Client Id is to provide additional information to the consent end point that takes the decision on
granting consent or not. A too uninformative description may lead to consents being denied.
granting consent or not. A too uninformative description may lead to consents being denied,
see the <a href="#client-def">Client</a> chapter for more information about the description.
The client Id must be unique within the Ecosystem.
</p>
</section>

Expand Down Expand Up @@ -1127,7 +1129,7 @@ <h2>Client</h2>
<li>The <a href="#application-roles-def">app. </a>It runs requests on behalf of the user.</li>
<li>The <a href="#user-roles-def">user</a>. It delegates access rights to the app.</li>
</ul>
Besides the three sub-acor roles the client is also characterized by a
Besides the three sub-actor roles the client is also characterized by a
<ul>
<li>client identity.</li>
</ul>
Expand Down Expand Up @@ -1736,12 +1738,13 @@ <h2>Access Control Selection</h2>

<section id="consent-support">
<h2>Consent support</h2>
<em>This section is non-normative.</em><br>
<p>
Handling of consent involves vehicle and cloud architectural subsystems that is out of scope in VISSv2.
However, a VISSv2 vehicle server has a capability to enforce consent results, i. e. to allow or block access to requested data.
This can be leveraged in a model where the server receives consent results from an “External Consent Framework” (ECF) and uses that information to either grant client requests,
or not, for data that is consent protected. How the ECF obtains the consent status is out-of-scope in this specification.
A secure, local communication channel exits between the in-vehicle ECF and the server as shown in the figure below,
A secure, local communication channel exists between the in-vehicle ECF and the server as shown in the figure below,
over which the server can inquire about the consent status for data requested by a client.
<figure id="fig-consent-architecture">
<img src="images/consent-architecture.jpg" alt="Consent architecture.">
Expand Down

0 comments on commit ab8ba69

Please sign in to comment.