Match Protocol / Consent Management need - Analysis

[JeromeCapgemini]

Concerns were raised that the current Protocol proposed under 1a "Create a PII principal – PII Controller Secure channel" to be used to implement the exchange of consent between PII principal and PII controller actors is not a good match. Proposed so far :

• Did com controller used in OCM/ CloudPCM (used to share invitation link)
• then OID Protocol used
• OID for VCI and VP
• Possible to extend with custom protocol

Maybe better match : OID for VC ?

Pros, Cons and match with business needs to be documented to reach a decision.

[detlefhuehnlein]

See the figures in OID4VP and look for the word "Consent":

• https://openid.net/specs/openid-4-verifiable-presentations-1_0.html#name-same-device-flow-2
• https://openid.net/specs/openid-4-verifiable-presentations-1_0.html#name-cross-device-flow-2
• https://openid.net/specs/openid-4-verifiable-presentations-1_0.html#name-reference-design-for-respon