Personal Data Store – joeandrieu.com
type: channel
description: My personal space
date: 2017-06-14T22:38:45Z
update period: hourly
update frequency: 1
update base: 2000-01-01T12:00+00:00
generator agent: https://wordpress.org/
items: Ten Years Later
items: Facebook as Personal Data Store
items: Personal Data Stores, Exchanges, and Applications
items: Beyond Data Ownership to Information Sharing
items: Kynetx takes on Structured Browsing
items: VRM: The user as point of integration

Ten Years Later
type: item
creator: Joe Andrieu
date: 2017-06-14T22:38:45Z
subject: Identity
subject: ProjectVRM
subject: Vendor Relationship Management
subject: GDPR
subject: IIW
subject: Personal Data Store
subject: User Driven
subject: User Driven Services
subject: VRM
description: Ten years ago I wrote a blog post that captured a key architectural insight at the core of VRM: putting the user at the center of integration not only improves the quality of services, it simplifies our systems. The article captured the gestalt of VRM and helped catalyze a range of conversations that still shape the VRM approach. Since then, we have seen a lot of progress. Here are a few standout examples. Continue reading →
encoded: Ten years ago I wrote a blog post that captured a key architectural insight at the core of VRM: putting the user at the center of integration not only improves the quality of services, it simplifies our systems. When we put the user at the center, and make them the point of integration, the entire system becomes simpler, more robust, more scalable, and more useful. The article captured the gestalt of VRM and helped catalyze a range of conversations that still shape the VRM approach. Since then, we have seen a lot of progress. Sometimes we proceeded in fits and starts and there were certainly failures along the way, including my own venture, SwitchBook. When I started pulling together my notes for this anniversary post, I was mildly surprised and delighted at how much real work got done and the real-world impact we’ve had. Here are a few VRMy developments in the last decade worth noting. Please chime in with a comment if you know of a good one to add to the list. Coming in December of that same year, OAuth kicked off a series of standard protocols for identity, attribute sharing, and permissions, including OAuth 2.0, OpenID Connect, and User Managed Access (now at 2.0). These efforts brought together the leading technology companies to collaboratively develop new standards that give individuals greater flexibility and control over data exchange between online services. Companies like Personal.com. (now TeamData), Digi.me, and Cozy Cloud shipped user-driven personal data stores. Software project HIE of One offers a personal data store that lets individuals manage our own healthcare data. In Europe, GDPR has ushered in a new wave of regulatory requirements and penalties driving companies and organizations to give individuals easier access to, greater control of, and more security in our personal data. JLINC Labs offers a provenance service layer that allows companies to quickly attain GDPR compliance for the right to erasure and data provenance by giving individuals di…

Facebook as Personal Data Store
type: item
creator: Joe Andrieu
date: 2010-12-20T11:24:30Z
subject: Information Sharing
subject: Personal Data Store
subject: ProjectVRM
subject: Facebook
subject: Facebook Connect
subject: I Shared What?!?
subject: PDS
subject: Vendor Relationship Management
subject: VRM
description: With over 150 million people using Facebook Connect every month at over 1 million websites, Facebook has ushered in a new era, as the world’s largest personal data store. Personal Data Stores Personal data stores allow individuals to share online … Continue reading →
encoded: With over 150 million people using Facebook Connect every month at over 1 million websites, Facebook has ushered in a new era, as the world’s largest personal data store. Personal Data Stores Personal data stores allow individuals to share online data with service providers. Facebook Connect users can give third-party web sites like Digg, Amazon, and YouTube access to information stored at Facebook, turning Facebook into a personal data store for over 500 million people. What makes personal data stores special is the seamless sharing with websites for real-time personalization of the web. It’s more than just file back-up or synchronization. It’s not just publishing “content” to our friends or the public. Personal data stores allow us to bring our information to websites when we want to. It’s a way to treat the user as the point of integration. Personal data stores can be anywhere, shared with websites whenever we want. Consider giving FedexKinko‘s a link to a Flickr account so they can download photos to print a new calendar. Or giving a new doctor permission to access our personal health history rather than filling out a paper form while we sit in the waiting room. Or giving a website access to our Outlook contact list on our desktop computer so they can give us birthday reminders and gift suggestions. The key is user-managed access, wherever the data lives. Facebook Connect gives this kind of access control over all the data we store at Facebook, enabling web-wide personalization built around the individual. Mash-ups In recent years, mash-ups and real-time APIs have made it easier and easier for companies to combine information from different services into a single user experience. Instead of building bigger and more complicated proprietary data silos, companies take advantage of services like Google Maps and IP-address geolocation, using real-time information to enhance their websites. Some service are even built around other companies’ data: Twitter clients like…

Personal Data Stores, Exchanges, and Applications
type: item
creator: Joe Andrieu
date: 2010-09-18T03:20:41Z
subject: Uncategorized
subject: PDS
subject: PDX
subject: personal data application
subject: personal data architecture
subject: personal data exchange
subject: Personal Data Store
description: Words matter. In the last few years, we in the VRM community have been using term “personal data store” as cornerstone concept. We all understood we were talking about the same thing: a VRM approach for allowing people to use … Continue reading →
encoded: Words matter. In the last few years, we in the VRM community have been using term “personal data store” as cornerstone concept. We all understood we were talking about the same thing: a VRM approach for allowing people to use share personal information with third- (and fourth-) party service providers on their own terms. Yet as our community grows, it has become clear that the Personal Data Store is but one aspect of a complete system, one we might as well call the Personal Data Architecture. As developers get more traction with their technology and the marketplace, it gets more and more useful to delineate the elements of the architecture more rigorously. To do that, Doc Searls, Craig Burton, Iain Henderson, Kaliya Hamlin, and I set some time aside after the VRM+CRM 2010 Workshop. Like the ongoing VRM conversation, it was a rolling evolution of a dialog. It started with just Craig & Iain with the rest of us showing up and participating throughout the afternoon. The core agreement is the terms I present here. I’ll post a following up with some new ideas in a few days. These are the key definitions underlying the Personal Data Architecture at the core of VRM and all of our work: Personal data store – a service where data is actually stored, with the ability to provision access to that data by permissioned applications; may be distributed and/or replicated across multiple physical stores. Personal data exchange – a service where an individual manages personal data store permissions. Personal data API – the interface a permissioned application uses for accessing personal data stores and personal data exchanges. Personal data application – a service permissioned by an individual to access their personal data store for particular use of specific information. Also an “app”. Service – an instance of software running on a machine. Individual – a living human being. Bonus Term: (which wasn’t the topic of this particular meeting, but syncs up with the work Iain and I are doin…

Beyond Data Ownership to Information Sharing
type: item
creator: Joe Andrieu
date: 2010-01-21T22:32:19Z
subject: Information Sharing
subject: Intention Economy
subject: Personal Data Store
subject: ProjectVRM
subject: Shared Information
subject: User Driven Services
subject: Vendor Relationship Management
subject: CRM
subject: data ownership
subject: Doc Searls
subject: privacy
subject: project VRM
subject: User Driven
subject: VRM
description: The question of who owns our data on the Internet is a challenging problem. It can also be a red herring, distracting us from building the next generation of online services. The term “ownership” simply brings too much baggage from … Continue reading →
encoded: The question of who owns our data on the Internet is a challenging problem. It can also be a red herring, distracting us from building the next generation of online services. The term “ownership” simply brings too much baggage from the physical world, suggesting a win-lose, us-verses-them mentality that retards the development of rich, powerful services based on shared information. Anyone up for sacred cow cheeseburgers? I’m a member–and a big fan–of Steve Holcombe‘s “Data Ownership in the Cloud” LinkedIn group and I love the efforts of the Dataportability guys and am a big supporter of the Privacy and Public Policy work group at Kantara. There is a lot of good work being done by folks trying to figure out how to give people greater control over the use of data about them (privacy) and gain access to data they use or created (dataportability). Unfortunately, sometimes the arguments behind these efforts are based on who owns–or who should own–the data. This is not just an intellectual debate or political rallying call, it often undermines our common efforts to build a better system. Consider this: Privacy as secrecy is dead Data sharing is data copying Transaction data has dual ownership Yours, mine, & ours: Reality is complicated Taking back ownership is confrontational Privacy as secrecy is dead First, the data is pretty much already out there. The issue isn’t “How do we keep data from bad people,” it’s “How do we keep people from doing bad things with data?” DRM and crypto and related technology as the sole means to prevent data leakage and data abuse are failures. Sooner or later, the bad guys break the system and get the data. Sure, there are smart things we can do to protect ourselves. Just like we wear seatbelts and lock our front doors, we should also use SSL and multi-factor authentication, but we can’t count on technology to keep our secrets. We need solutions that work even when the secret is out. In fact, privacy isn’t about information we keep secret. It…

Kynetx takes on Structured Browsing
type: item
creator: Joe Andrieu
date: 2009-02-08T07:47:48Z
subject: Identity
subject: Intention Economy
subject: Personal Data Store
subject: ProjectVRM
subject: User Driven Search
subject: Vendor Relationship Management
subject: ad blockers
subject: Adaptive Blue
subject: data rights management
subject: Doc Searls
subject: Glue
subject: information cards
subject: kynetx
subject: MyDex
subject: open source
subject: open standards
subject: OpenID
subject: Phil Windley
subject: privacy
subject: r-button
subject: rbutton
subject: relationship services
subject: search map
subject: Skype
subject: structured browsing
subject: SwitchBook
subject: User Driven Services
subject: VRM
subject: web augmentation
subject: Yahoo Toolbar
description: Doc Searls recently brought my attention to a White Paper by Phil Windley, about his company, Kynetx. It does a good job explaining the thinking behind their architecture, and raises some questions that, for me, challenge some underlying assumptions and … Continue reading →
encoded: Doc Searls recently brought my attention to a White Paper by Phil Windley, about his company, Kynetx. It does a good job explaining the thinking behind their architecture, and raises some questions that, for me, challenge some underlying assumptions and business choices. Problem Domain The distributed nature of the web is a big part of its power–nobody needs to ask permission from a central authority to use it or create with it. However, that disaggregation limits the cohesion for sophisticated uses, leaving users to hobble together ad-hoc mash-ups of value from multiple, diverse service providers. For example, the average travel planner spends 29 days from their first query to their first purchase. No tool I know of facilitates that entire process effectively. Solving this problem in a general way—while retaining the authority of the individual and the flexibility of open systems—is perhaps the greatest opportunity for VRM. The personal data store and VRM relationship services are two prongs of an architectural shift for enabling this kind of aggregation while remaining open. Once you put the user in the driver’s seat, with coherent controls over the flow and the data, the experience can integrate around the user, even as they drive anywhere on the Internet. Solution Kynetx’s solution is built on one primary capability: A rules engine (and language) for contextual customization based on strong identity-based claims, using the user-centric Identity of Information Cards. This puts Kynetx squarely in the web augmentation service business. Adaptive Blue (and their Glue product) is perhaps the most sophisticated approach to this space, but Yahoo’s Toolbar also augments web pages, as does Skype (putting its SkypOut button on any phone # it recognizes), and the granddaddies of all web-augmentation services are the ad blocker plug-ins that remove banner ads on websites. I distinguish web augmentation from web media enhancements, like PDF and Flash and Java, in that the lat…

VRM: The user as point of integration
type: item
creator: Joe Andrieu
date: 2007-06-14T10:13:55Z
subject: Personal Data Store
subject: ProjectVRM
subject: Vendor Relationship Management
subject: point of integration
subject: User Driven
subject: User Driven Services
subject: Vendor Relationship Managment
subject: VRM
description: On yesterday’s Project VRM conference call, a piece of the Vendor Relationship Management puzzle snapped into alignment in a flash of insight. It wasn’t something new to the movement, rather it was a realization about the primacy and criticality of … Continue reading →
encoded: On yesterday’s Project VRM conference call, a piece of the Vendor Relationship Management puzzle snapped into alignment in a flash of insight. It wasn’t something new to the movement, rather it was a realization about the primacy and criticality of what we are doing and how to communicate it. It has always been a part of the conversation, just one that we often took a bit of time to get around to. And yet, it is perhaps the most important piece of all: When we put the user at the center, and make them the point of integration, the entire system becomes simpler, more robust, more scalable, and more useful. This is a profound shift that has some interesting parallels with a concept in AI called “stigmergy” and with a bit of classic Einstein becomes a totally new way to think about next generation systems design. In other words VRM changes the landscape in a way that not only makes life better for individuals, it profoundly improves the information architecture that modern society depends on. If you’ll indulge me, I’ll try to explain. User Centrism VRM has its roots in the user-centric Identity movement and has user-centrism at the core of its DNA. The first, and perhaps most obvious, interpretation of user-centrism is user control. That, unfortunately, is part of the problem. User Control User control is critically important. It resonates with the core of the modern social contract. Freedom. Liberty. Capitalism. The Age of Reason. Liberalism. These systems and ideologies all assume that the individual, and only the individual, has legitimate moral authority over his or her life, assets and the disposition of both. These are powerful concepts. So powerful, that when you build systems that provide individual control, you energize vast personal resources that in turn become real economic power, measured in trillions of dollars, just to consider US GDP. Contrast this with fascism, communism, and socialism, which place the state above the individual and in varying forms ta…