(Back) -- (Next)
-
Above illustrates the entire system NMDA developed.
Firstly, NMDA developed a tool which can easily create the P3P's CGI script. Secondly, NMDA developed the P3P Authoring Tool which enables to create the disclosure uri defined by P3P specification.
On the web site side, an web site builder will create CGI scripts and a privacy statement using the P3P Authoring Tool, and put them on the web server. On the client or browser side, a user who wants to let P3P program run on his client machine should install the programs using his web browser. For the client's use, NMDA developed the following 3 components; User Agent which is a P3P's client engine, Preference Bureau which stores user's personal data and preference, and its Configuration tool.
NMDA developed User Agent so as to be seen as "proxy server" from web browser. NMDA put an optional function called "Redirector" which redirects an http request to User Agent forcibly even when an web browser has set up a particular proxy. NMDA also developed a Monitor which can check the operation status of Redirector, User Agent, and Preference Bureau.
NMDA also built a server called "Site Bureau". It is supposed to be operated by such third parties as TRUSTe or JIPDEC(Japan Information Processing Development Center) which runs Privacy mark, and checks that the contents of web site's privacy statements have not been altered dishonestly. For example, once an web site builder registers a privacy statement created by P3P Authoring Tool at Site Bureau, an web browser user will be able to see the disclosure url included in the proposal received from P3P-compliant-web server and check if the contents have been altered by making an inquiry to Site Bureau.
It is desirable that the third party organizations managing Site Bureau verifies whether the web site builder runs his web site being compliant with the privacy statement he registered.
(Back) -- (Next)
Cancel This Information