Private Preference & Permission System

The Personal Private Preference and Permission Profile

The CORE of the GPII is the Personal Preference and Permission Profile and the servers that store and securely (and, when appropriately, anonymously) serve the preferences.

The Preference and Permission Profile will be based on an extension of the Access for All standard (ISO/IEC JTC1 24751) with an added dimension to include permission or authorization data.

The Profile will include:

  1. The user's generic information on preferences or needs with regard to content or user interfaces
  2. Specific settings for devices, configurations, environments and/or tasks
  3. Data on accessibility services or content that the person is authorized to use or view. This includes commercial assistive technologies that the person is authorized to use on different computers.

The preference servers will:

  1. Allow users to call up and apply their preferences from different computers
  2. Allow users with disability to call up and apply their preferences anonymously where other users without disabilities can operate a device or service anonymously
  3. Allow users to access disability services (e.g., talking books or translation services) or use commercial AT by proving their eligibility via the permissions feature in the server.
  4. Allow users to call up and apply their preferences using a wide variety of methods to match user needs including
    • by just typing in a short URL
    • by using a small device the user would just plug into a USB port
    • by using a generic url followed by voice or face or other recognition technology

As noted above, this component is the heart of the GPII.  It is what allows users to be able to invoke and set up their access features in a simple and straightforward manner.  Without this mechanism, a large number of users would find setting up and using the GPII (or any access technologies) impossible on any but a single home system.  With this service (and the auto-personalization services), personalization of user interfaces and adaptation of content can be automatic and almost magic: when a person comes up to a computer or other device it automatically adjusts to a form they can use.

Importance of Security,  and Operation of this Service as a Public Service

It is essential that this preference server be operated as a public service and in both a secure and private manner.  Using usage data from this server or any profile information could lead to people using the information to identify vulnerable users or to target them with advertising (for example - targeting people who are easily confused with complicated services or offers).

This is not envisioned as a single server - and it does not need to be. It is expected that countries will want to maintain their own preference servers for their citizens. People should be able to select the server they are interested in having store their preferences, and it could be anywhere - since the address of the server can be included in the request for preferences.  Requests for preferences stored outside of a country will be common (necessary for travelers).

Standards are also critical to the functionality of this component - and the ability to use the personalization profiles to drive all of the other components. International standardization activities will be a key activity here.