You are here: Resources > FIDIS Deliverables > Privacy and legal-social content > D14.3: Study on the Suitability of Trusted Computing to support Privacy in Business Processes > 
erifiable Processing of Personal Data  Title:
INFORMATION FLOW MODEL OF BUSINESS PROCESSES FOR PERSONALISED SERVICES
 Use Case: Information Filtering

 

Information Flow Model of Business Processes for Personalised Services

Business processes realising personal services are characterized by a collection, usage, storing and delegation of personal data. Storing and using personal data, e.g. for marketing purposes, are thereby implied. The actors are data consumers and data providers. A data provider stores personal data in a trustworthy place and decides on access on this data, whereas a data consumer requests personal data. An actor sometimes changes his role depending on the service from a data consumer to a data provider. Beside the access on personal data, its usage has also to be considered, e.g. its  exchange between service providers. If services of a personalised service form a chain of services, users need also to control the delegation of personal data, if informational self-determination should be preserved by technical means. Business processes with such a chain are called multi-stage business processes. shows the information flow model of multi-stage business processes. A data provider delegates personal data d to a data consumer, who further delegates this data together with additional data d’ in his role as a data consumer to another service provider, here as a data consumer (Pretschner, Hilty and Basin, 2006).


Figure Information flow model of multi-stage business processes (Pretschner, Hilty and Basin, 2006).

This information flow model and the dynamic roll change are explained by the use case “Loyalty Programme” as described in (Müller and Wohlgemuth, 2007). Concerning a collection of personal data, a service provider acts as a data consumer towards his users and as a data provider towards the loyalty programme provider. In this case, the loyalty programme provider takes the role of a data consumer. In case of delegation of personal data, the loyalty provider takes the roles of a data provider and the corresponding service provider takes the role of a data consumer (cf. ).


Figure Actors and their roles in a loyalty programme, if personal data is being delegated (Müller and Wohlgemuth, 2007).

 

erifiable Processing of Personal Data  fidis_wp14_d14.3_v1.0.sxw  Use Case: Information Filtering
9 / 39