ARCHITECTING USER-CENTRIC PRIVACY-AS-A-SET-OF-SERVICES: DIGITAL IDENTITY RELATED PRIVACY FRAMEWORK

AbstractDigitalization gives to the Internet the power by allowing several virtual representations of reality, including that of identity. We leave an increasingly digital footprint in cyberspace and this situation puts our identity at high risks. Privacy is a right and fundamental social value that could play a key role as a medium to secure digital identities. Identity functionality is increasingly delivered as sets of services, rather than monolithic applications. So, an identity layer in which identity and privacy management services are loosely coupled, publicly hosted and available to on-demand calls could be more realistic and an acceptable situation. Identity and privacy should be interoperable and distributed through the adoption of service-orientation and implementation based on open standards (technical interoperability). Ihe objective of this project is to provide a way to implement interoperable user-centric digital identity-related privacy to respond to the need of distributed nature of federated identity systems. It is recognized that technical initiatives, emerging standards and protocols are not enough to guarantee resolution for the concerns surrounding a multi-facets and complex issue of identity and privacy. For this reason they should be apprehended within a global perspective through an integrated and a multidisciplinary approach. The approach dictates that privacy law, policies, regulations and technologies are to be crafted together from the start, rather than attaching it to digital identity after the fact. Thus, we draw Digital Identity-Related Privacy (DigldeRP) requirements from global, domestic and business-specific privacy policies. The requirements take shape of business interoperability. We suggest a layered implementation framework (DigldeRP framework) in accordance to model-driven architecture (MDA) approach that would help organizations' security team to turn business interoperability into technical interoperability in the form of a set of services that could accommodate Service-Oriented Architecture (SOA): Privacy-as-a-set-of- services (PaaSS) system. DigldeRP Framework will serve as a basis for vital understanding between business management and technical managers on digital identity related privacy initiatives. The layered DigldeRP framework presents five practical layers as an ordered sequence as a basis of DigldeRP project roadmap, however, in practice, there is an iterative process to assure that each layer supports effectively and enforces requirements of the adjacent ones. Each layer is composed by a set of blocks, which determine a roadmap that security team could follow to successfully implement PaaSS. Several blocks' descriptions are based on OMG SoaML modeling language and BPMN processes description. We identified, designed and implemented seven services that form PaaSS and described their consumption. PaaSS Java QEE project), WSDL, and XSD codes are given and explained.

Introduction : la normalisation des services dans la mondialisation

This book examines the role of technical standards in the regulation of services at the international level. It brings together scholarship in international political economy, French regulation theory, and economic sociology in order to discuss the following questions: Which services are most likely to be internationalised and what actors are the most concerned by the phenomenon? What is the relationship between the internationalisation of services and their institutional environment? What is more particularly the role of technical standards in delivering and using services? The introductory chapter presents a comprehensive analysis of cutting edge research on these questions. It argues that technical standards shape new forms of collective action and transnational authority. The chapter suggests some hypotheses for a new research agenda.

Services standardization in the United-States and in Europe: an institutional analysis of private authority

This contribution explores the role of international standards in the rules governing the internationalisation of the service economy. It analyses on a cross-institutional basis patterns of authority in the institutional setting of service standards in the European and Amercian context. The entry into force of the World Trade Organisation (WTO) in 1995 gave international standards a major role in harmonising the technical specifications of goods and services traded on the global market Despite the careful wording of the WTO, a whole range of international bodies still have the capacity to define generic as well as detailed technical specifications affecting how swelling offshore services are expected to be traded on worldwide basis. The analysis relies on global political economy approaches to identify constitutive patterns of authority mediating between the political and the economic spheres on a transnational space. It extends to the area of service standards the assumption that the process of globalisation is not opposing states and markets, but a joint expression of both of them including new patterns and agents of structural change through formal and informal power and regulatory practices. The paper argues that service standards reflect the significant development of a form of transnational hybrid authority, that blurs the distinction between private and public actors, whose scope spread all along from physical measures to societal values, and which reinforces the deterritorialisation of regulatory practices in contemporary capitalism. It provides evidence of this argument by analysing the current European strategy regarding service standardization in response to several programming mandate of the European Commission and the American views on the future development of service standards.

Global regulation of the knowledge-based economy: The rise of standards in educational services

This article examines the extent and limits of non-state forms of authority in international relations. It analyses how the information and communication technology (ICT) infrastructure for the tradability of services in a global knowledge-based economy relies on informal regulatory practices for adjustment of ICT-related skills. Companies and associations provide training and certification programmes as part of a growing market for educational services setting their own standards. The existing literature on non-conventional forms of authority in the global political economy has emphasised that the consent of actors subject to informal rules and explicit or implicit state recognition remains crucial for the effectiveness of those new forms of power. However, analyses based on a limited sample of actors tend toward a narrow understanding of the issues and fail to fully explore the differentiated space in which non-state authority is emerging. This paper examines the form of authority underpinning the global knowledge-based economy within the broader perspective of the issues likely to be standardised by technical ICT specification, the wide range of actors involved, and the highly differentiated space where standards become authoritative. The empirical findings highlight the role of different private actors in establishing international educational norms in this field. They also pinpoint the limits of profit-oriented standard-settings, notably with regard to generic norms.

Beyond the Transatlantic Divide: The Multiple Authorities of Standards in the Global Political Economy of Services

This paper explores the plurality of institutional environments in which standards for the service sector are expected to support the rise of a global knowledge-based economy. Despite the careful wording of the World Trade Organization (WTO), a whole range of international bodies still have the capacity to define technical specifications affecting how services are expected to be traded on worldwide basis. The analysis relies on global political economy approaches to extend to the area of service standards the assumption that the process of globalization is not opposing states and markets, but a joint expression of both of them including new patterns and agents of structural change through formal and informal power and regulatory practices. It analyses on a cross-institutional basis patterns of authority in the institutional setting of service standards in the context of the International Organisation for Standardisation (ISO), the European Union, and the United States. In contrast to conventional views opposing the American system to the ISO/European framework, the paper questions the robustness of this opposition by showing that institutional developments of service standards are likely to face trade-offs and compromises across those systems and between two opposing models of standardisation.

Conclusion : les usages possibles et contestables des normes et des institutions dans l'internationalisation des services

The conclusion of this volume on technical standards in the regulation of services reviews the authors' contributions to understanding the relation between tertiarisation, internationalisation and standardisation from three distinct perspectives : theoretical, institutional, and sectorial. It argues that conventional views on conditions for standardisation and internationalisation of service activities are overly restrictive, making them dependent on sectorial and institutional specificity. In emphasizing the possible and contestable uses of service standards, the volume opens a critical debate on service offshoring, underlining the social and historical constructions of its transnational logic.

Normalisation informatique et marchés de services : le cas du XML

Extensible Markup Language (XML) is a generic computing language that provides an outstanding case study of commodification of service standards. The development of this language in the late 1990s marked a shift in computer science as its extensibility let store and share any kind of data. Many office suites software rely on it. The chapter highlights how the largest multinational firms pay special attention to gain a recognised international standard for such a major technological innovation. It argues that standardisation processes affects market structures and can lead to market capture. By examining how a strategic use of standardisation arenas can generate profits, it shows that Microsoft succeeded in making its own technical solution a recognised ISO standard in 2008, while the same arena already adopted two years earlier the open source standard set by IBM and Sun Microsystems. Yet XML standardisation also helped to establish a distinct model of information technology services at the expense of Microsoft monopoly on proprietary software

Normalisation et dimension culturelle des délocalisations de services : les cas du Maroc et de l'Inde

Cette thèse explore le rôle de la normalisation technique dans les délocalisations de services en Inde et au Maroc. La recherche appréhende le phénomène en opposant explicitement ou implicitement deux modèles. Un modèle serviciel dans lequel les activités de services sont difficilement délocalisables parce que non-mesurables ; un modèle industriel qui articule des activités de services mesurables par les normes techniques et susceptibles d'être délocalisés dans les pays du Sud à bas salaires. Notre thèse s'interroge sur la manière dont les relations Nord-Sud peuvent s'appréhender au sein de cette dichotomie et propose une réflexion épistémologique sur les représentations culturelles induites au sein de ce cadrage. A partir d'une perspective qui combine les apports de l'économie politique culturelle, la sociologie économique et les études postcoloniales au sein de l'économie politique internationale, elle mobilise trois catégories (la normalisation technique, l'imaginaire économique, la qualité). Ces catégories nous permettent de suggérer la centralité des enjeux de pouvoirs dans la définition de ce que sont les activités de services. L'analyse empirique suggère que les délocalisations de services au Maroc et en Inde expriment des réalités plus poreuses et plus dynamiques que la dichotomie entre modèle serviciel et modèle industriel laisse entendre. Elle met en évidence la capacité d'agir des acteurs des pays du Sud et suggère que les normes techniques ont une fonction politique à travers leurs fonctions de mesure. Abstract This thesis explores the role of technical standards in offshore outsourcing in India and Morocco. Current research captures the phenomenon while opposing explicitly or implicitly two models of production. A service-based model in which service activities are difficult to relocate because they are non-measurable; an industrial model that articulates service activities measured with technical standards and that may be outsourced to developing countries with low wages. Our thesis questions how North-South relations can be grasped within this dichotomy and offers an epistemologica! reflection on cultural representations induced within this framework. From a perspective that combines the contributions of cultural political economy, economic sociology and postcolonial studies in international political economy, it mobilizes three categories (technical standardization, the economic imaginary and quality). These categories allow us to suggest the centrality of power issues in the definition of service activities. The empirical analysis suggests that offshoring of services in Morocco and India express more porous and dynamic realities than the dichotomy suggested between a service model and an industrial model. It highlights the ability of the actors to act in the South and suggests that technical standards have a political function through their measurement functions.

Using life strategies to explore the vulnerability of ecosystem services to invasion by alien plants

Invasive plants can have different effects of ecosystem functioning and on the provision of ecosystem services, from strongly deleterious impacts to positive effects. The nature and intensity of such effects will depend on the service and ecosystem being considered, but also on features of life strategies of invaders that influence their invasiveness as well as their influence of key processes of receiving ecosystems. To address the combined effect of these various factors we developed a robust and efficient methodological framework that allows to identify areas of possible conflict between ecosystem services and alien invasive plants, considering interactions between landscape invasibility and species invasiveness. Our framework combines the statistical robustness of multi-model inference, efficient techniques to map ecosystem services, and life strategies as a functional link between invasion, functional changes and potential provision of services by invaded ecosystems. The framework was applied to a test region in Portugal, for which we could successfully predict the current patterns of plant invasion, of ecosystem service provision, and finally of probable conflict (expressing concern for negative impacts, and value for positive impacts on services) between alien species richness (total and per plant life strategy) and the potential provision of selected services. Potential conflicts were identified for all combinations of plant strategy and ecosystem service, with an emphasis for those concerning conflicts with carbon sequestration, water regulation and wood production. Lower levels of conflict were obtained between invasive plant strategies and the habitat for biodiversity supporting service. The added value of the proposed framework in the context of landscape management and planning is discussed in perspective of anticipation of conflicts, mitigation of negative impacts, and potentiation of positive effects of plant invasions on ecosystems and their services.

Minimal invasive surgery for coronoid fracture: technical note.

Operative treatment of coronoid fracture often requires a large dissection of soft tissue, resulting in elbow stiffness and functional limitation. The authors present a minimal invasive, safe technique, useful in the case of isolated coronoid fracture associated with elbow dislocation. This technique does not require soft tissue dissection and allows an early unlimited resumption of sports activities.

Promoting hospital-based smoking cessation services at major Swiss hospitals: a before and after study.

Whether a 1-year nationwide, government supported programme is effective in significantly increasing the number of smoking cessation clinics at major Swiss hospitals as well as providing basic training for the staff running them. We conducted a baseline evaluation of hospital services for smoking cessation, hypertension, and obesity by web search and telephone contact followed by personal visits between October 2005 and January 2006 of 44 major public hospitals in the 26 cantons of Switzerland; we compared the number of active smoking cessation services and trained personnel between baseline to 1 year after starting the programme including a training workshop for doctors and nurses from all hospitals as well as two further follow-up visits. At base line 9 (21%) hospitals had active smoking cessation services, whereas 43 (98%) and 42 (96%) offered medical services for hypertension and obesity respectively. Hospital directors and heads of Internal Medicine of 43 hospitals were interested in offering some form of help to smokers provided they received outside support, primarily funding to get started or to continue. At two identical workshops, 100 health professionals (27 in Lausanne, 73 in Zurich) were trained for one day. After the programme, 22 (50%) hospitals had an active smoking cessation service staffed with at least 1 trained doctor and 1 nurse. A one-year, government-supported national intervention resulted in a substantial increase in the number of hospitals allocating trained staff and offering smoking cessation services to smokers. Compared to the offer for hypertension and obesity this offer is still insufficient.

Structure du temps de travail des infirmières de santé publique: effets de l'âge des patients, de la nature des prestations fournies et du lieu du contact. [Structure of work times of public health nurses: effect of the age of patients, nature of care given and location of contact].

In the framework of health services research sponsored by the Swiss National Science Foundation, a research was undertaken of the activity of the large majority of the public health nurses working in the Swiss cantons of Vaud and Fribourg (total population 700,000). During one week, 130 nurses gathered, with a specially devised instrument, data on 4165 patient visits. Studying the duration of the contacts, one has distinguished contact duration per se (DC), duration of the travel time preceding the contact (DD), and total duration in relation with the contact (DTC-addition of the first two). It was noted that the three durations increased significantly with patient age (as regard travel time, this is explained by the higher proportion of home visits in higher age groups, as compared with visits at a health center). Examined according to location of the visit, contact duration per se (without travel) is higher for visits at home and in nursing homes than for those taking place at a health center. Looked at in respect to the care given (technical care, or basic nursing care, or both simultaneously), our data show that the provision of basic nursing care (alone or with technical care) doubles contact duration (from 20 to 42-45'). The analyses according to patient age shows that, at an advanced age (beyond 80 years particularly), there is an important increase of the visits where both types of care are given. However, contact duration per se shows a significant raise with age only for the group "technical care only"; it can be demonstrated that this is due to the fact that older patients require more complex technical acts (e.g., bladder care, as compared with simpler acts such as injection). A model of the relationships between patient age and contact duration is proposed: it is because of the increase in the proportions of home visits, of visits including basic nursing care, and of more complex technical acts that older persons require more of the working time of public health nurses.