Leveraging a Microservice Architecture, Access Control and Interoperability Patterns to Manage Privacy-related User Consents
Résumé
Consent management is of paramount importance when processing personal data. It is now prescribed as mandatory by regulations such as the GDPR. This article presents a micro-service architecture providing a protocol for access control including authentication, authorization management, and externalized consent management based on the ABAC (Attribute-Based Access Control) and the side-car architecture patterns. The experimentation on a case example validates that its integration is light and non intrusive for existing applications.