Use Case for OASIS Trust- Elevation TC

["Abdul Jabbar, Shaheen N" <shaheen.n.abduljabbar@jpmchase.com>]

Hello Everyone,

 

Here is a use case for our discussion -

 

1.       User wishes to subscribe online services of Bank-A

2.       Bank-A requests the user to obtain a credential that satisfies its level of assurance for the service it offers. The user could obtain the credential from any commercial Identity Provider (IdP) permitted by Bank-A.

3.       User chooses IdP-X as his/her Identity Provider and obtains a credential (IDFIN) for online financial transaction from IdP-X.

4.       Bank-A confirms acceptability of IDFIN and User registers his/her IDFIN with Bank-A

5.       User then wishes to subscribe a different type of service from Bank-B

6.       Bank-B requests the user to obtain a credential that satisfies its level of assurance for the service it offers. The user could obtain the credential from any commercial Identity Provider (IdP) permitted by Bank-B.

7.       User already has IDFIN from IdP-X that would satisfy Bank-B level of assurance requirement.

8.       Bank-B confirms acceptability of IDFIN and User registers his/her IDFIN with Bank-B

 

Hope this helps

 

Shaheen

 

 

Shaheen N Abdul Jabbar | Security Architect |  JPMorganChase 

 

 

This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase & Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase & Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to European legal entities.