Difference between revisions of "Wallet Notices"

Revision as of 12:17, 31 January 2024

The contents and availability of notification to the user of a digital Wallet needs to satisfy both privacy concerns and user preferences.

The term user here applies to wallets holders and Subjects when they are different from the holder.
Typically only the holder (owner) of the wallet receives and stores notices.
This page considers only the role of the Verifier as it is assumed that any other party first needs to verify the wallet and holder.
Government legislation that mandates the release of information on different terms than these is not in the scope of this page.
The Privacy Transparency Statement is to be included in (or prior to) any request for Subject information.

The following are the required success criteria for both the user and the Verifier.

The identification of the Verifier must be established prior to the release of any information that can be used to identify or track the user.
Once an enduring relationship has been established with a user as evidenced by the acquisition of user information, the Verifier is obligated to notify the user by some channel when that information is released under any condition not approved by the user.

User fatigue sets in on excessive notice displays. This fatigue is different for different user and so display thresholds need to be under user control.
Smartphones typically have one overall notification setting per app. The wallet setting should be on, but that is not very likely.
- The wallet may require notifications before they start operations, but marketing staff are likely to object to that requirement.
- There are detailed settings under notifications (Banners, Sounds, Badges, etc.), but they are very seldom part of the user's attention.
Some wallet devices can be tracked by the radio signals that are released as a part of establish a connecting to the wallet.
At the time that the Verifier creates the request and provides their own Identifier and privacy transparency statement, the Identifier of the Holder is not known. The Verifier probably records the endpoint network address of the Entity that contacted them, but that could just be the address of a VPN endpoint.

An identification of the Verifier that can be presented to the user in terms that they can understand.
A Privacy Transparency Statement that can be presented to the user as a part of a request to which the user must positively indicate acceptance.

The only way to verify that privacy-preserving mandates are satisfied is for some level of auditing as to what a Verifier actually does.
Audits are likely to have some information that should not be released to the public.
A list of notifications from Verifiers should be maintained by user wallets for the user's sole benefit. This can be considered to be an audit trail.
Audit trails in the Verifier containing user private information must be protected by encryption or similar levels of disclosure protection.

@@ Line 23: / Line 23: @@
 ==Solutions==
-* The initial message from the [[Verifier]] to the user will contain:
+* The initial message from the [[Verifier]] to the user must contain:
 # An identification of the [[Verifier]] that can be presented to the user in terms that they can understand.
 # A Privacy Transparency Statement that can be presented to the user as a part of a request to which the user must positively indicate acceptance.