Privacy Server Protocol Project
|
|
|
PUIDs: Privacy Universal Identifiers are 64 bit Integers that are managed by the Server Agent. The Server Agent is free to manage these in any way it see's fit except that it must insure that the same PUID does not exist for two different agreements that are fully signed and executed agreements. Provision is made in the negotiation process for the Server Agent to change the PUID suggested as the Server Agent needs to change this PUID. In this fashion it is anticipated that Server Agents can control the number and form of Privacy Agreements that they are willing to sign. The User Agent may use the PUID on the Signed Agreements to reference future interactions with the Server and may be assured that the Server Agent recognizes only one form of this Agreement. Since the PUID is part of the signed hash of the Signing Certificate, it cannot be falsified. The current P3P specification makes no provision for UIDs of any kind. This extension for the purpose of bilateral negotiated agreements is specific to PSP |
|
Questions or problems regarding this web site should be directed to rht@cs.cmu.edu
.
|