Use Case "Applying for Study Grant" (SA UC2) - Revision history

Tomaz.klobujar: /* Legal status */

2023-01-19T08:35:52Z

Legal status

Tomaz.klobujar: /* UC2 - Slovenia */

2023-01-17T12:21:31Z

UC2 - Slovenia

Tomaz.klobujar: /* Data model */

2023-01-17T12:19:58Z

Data model

Tomaz.klobujar: /* Process */

2022-12-13T11:28:09Z

Process

Tomaz.klobujar: /* Measures taken */

2022-05-23T08:25:31Z

Measures taken

Tomaz.klobujar at 08:23, 23 May 2022

2022-05-23T08:23:45Z

Tomaz.klobujar: /* Legal status */

2022-05-04T12:08:56Z

Legal status

Tomaz.klobujar at 14:15, 7 April 2022

2022-04-07T14:15:40Z

Tomaz.klobujar at 14:15, 7 April 2022

2022-04-07T14:15:19Z

Tomaz.klobujar at 14:08, 7 April 2022

2022-04-07T14:08:39Z

@@ Line 62: / Line 62: @@
 |-
 |Spain
-|Issuing real data for the students with national eID and fake data for the students without national eID.
+|Issuing real (anonymized) academic and fake non-academic (large family, disability) data.
 |Slovenia
-|Receiving real data for the Spanish students with national eID and fake data for the Spanish students without national eID. Received data is used for piloting only.
+|Receiving real (anonymized) academic and fake non-academic (large family, disability) data. Received data is used for piloting only.
 |-
 | colspan="2" |'''Identified risks / problems / incidents'''

@@ Line 6: / Line 6: @@
 ==== UC2 - Slovenia ====
-Currently, no study grant application services exist in production in Slovenia that are suitable to Spanish users. Therefore, a service was set up at JSI for the project purposes where the students from Universitat Jaume I are able to submit applications for study grants. The applicants’ evidence is retrieved from a trusted data provider in Spain via the DE4A OOP TS. The Spanish students authenticate at the JSI system using their eIDAS eIDs, they explicitly request the use of the DE4A OOTS to retrieve the required evidence from their home countries, and are then redirected to the competent authority responsible for issuing the evidence, where they Preview the evidence before being redirected back to the requesting competent authority in Slovenia.
+Currently, no study grant application services exist in production in Slovenia that are suitable to Spanish users. Therefore, a service was set up at JSI for the project purposes where the students from Universitat Jaume I are able to submit applications for study grants. The applicants’ evidence (higher education diploma, large family evidence, and disability evidence) is retrieved from a trusted data provider in Spain via the DE4A OOP TS. The Spanish students authenticate at the JSI system using their eIDAS eIDs, they explicitly request the use of the DE4A OOTS to retrieve the required evidence from their home countries, and are then redirected to the competent authority responsible for issuing the evidence, where they Preview the evidence before being redirected back to the requesting competent authority in Slovenia.
 ==[[SA UC2 Implementation|Implementation]]==

@@ Line 21: / Line 21: @@
 * [[SA UC2 Components#Common OOP TS components|Common OOP TS components]]
-==[[Higher_Education_Diploma_Canonical_Evidence|Data model]]==
+==Data models==
-* [[Higher_Education_Diploma_Canonical_Evidence#Data Model|Data model diagram]]
+===Higher education diploma===
 * [[Higher_Education_Diploma_Canonical_Evidence#Attribute Specification|Attribute specification]]
 * [[Higher_Education_Diploma_Canonical_Evidence#XML Schema|XML schema definition]]
 == [[SA UC2 Process|Process]] ==

@@ Line 31: / Line 31: @@
 *The student is asked to authenticate at the DC using a legally recognized electronic identity (eIDAS identity).
 *After successful authentication the student is presented with a list of calls for grants. The student selects the desired call.
-*The student is asked to provide higher education diploma (evidence), which is mandatory for the application.
+*The student is asked to provide evidence, which is mandatory for the application.
-*The student explicitly requests that the DE4A Once-only Principle Technical System is used to retrieve the diploma from a Data Provider (DP) in his/her home country.
+*The student explicitly requests that the DE4A Once-only Principle Technical System is used to retrieve the evidence from a Data Provider (DP) in his/her home country.
-*DC sends through the DE4A Once-only Principle Technical Systema request to the DP that has the student's diploma and directs the student to DP's [https://wiki.de4a.eu/index.php/Evidence_Portal Evidence portal].
+*DC sends through the DE4A Once-only Principle Technical System a request to the DP that has the student's evidence and directs the student to DP's [https://wiki.de4a.eu/index.php/Evidence_Portal Evidence portal].
 *The student authenticates at the DP.
-*The DP [https://wiki.de4a.eu/index.php/Record_Matching matches the student's identity with his/her record], retrieves the students's diploma from a registry, transforms it into a canonical format according to the [https://wiki.de4a.eu/index.php/SA_UC2_Data_Model SA UC2 data model], and shows it to the student.
+*The DP [https://wiki.de4a.eu/index.php/Record_Matching matches the student's identity with his/her record], retrieves the students's evidence from a registry, transforms it into a canonical format according to the [https://wiki.de4a.eu/index.php/SA_UC2_Data_Model SA UC2 data model], and shows it to the student.
-* The student previews the diploma and gives consent for sending it to the DC.
+* The student previews the evidence and gives consent for sending it to the DC.
-*The DP transmits the diploma to the DC through the Once-only Principle Technical System and redirects the students back to the DC.
+*The DP transmits the evidence to the DC through the Once-only Principle Technical System and redirects the students back to the DC.
-*The DC transforms the diploma from canonical format to local format and pre-fills an application form with the diploma attributes.
+*The DC transforms the evidence from canonical format to local format and pre-fills an application form with the evidence attributes.
 *The student enters missing information that cannot be obtained from the DP, e.g. email address, contact phone number, in the form and submits the application.
 *DC validates the application and acknowledges receipt.

@@ Line 125: / Line 125: @@
 '''(mandatory for medium and high)'''
 |''x''
-|''Operators are informed and attend pilot run sessions. The UJI portal allows for submitting application to higher education, but without any legal or practical consequences for the students (call for studies are either test calls or the students do not finish completely their procedures).''
+|''Piloting is not done on a production environment. Applications for study grants do not have any legal or practical consequences for the students.''
 |-
 |All piloting activities should be '''monitored by pilot partners''' (each solely in relation to such components of the piloting activities which are under their responsibility)

← Older revision		Revision as of 08:23, 23 May 2022
Line 71:		Line 71:

	''[Provide any additional information that's required to describe the status of the use case, if applicable.]''		''[Provide any additional information that's required to describe the status of the use case, if applicable.]''
		+
		+	=== Pilot risk status ===
		+	{\| class="wikitable"
		+	\|+
		+	!Risk level
		+	!Tick if this level applies (tick only one)
		+	!Comments (if any)
		+	\|-
		+	\|Low
		+	\|
		+	\|
		+	\|-
		+	\|Medium
		+	\|X
		+	\|
		+	\|-
		+	\|High
		+	\|
		+	\|
		+	\|}
		+
		+	=== Measures taken ===
		+
		+	{\| class="wikitable"
		+	\|+
		+	!Measure description
		+	!Tick if this measure was taken
		+	!Description or comments (if any)
		+	\|-
		+	\|Piloting partners will '''communicate proactively towards each other on issues or incidents''' ('''always mandatory''')
		+	\|''x''
		+	\|''Will be done when issues arise, which is not yet the case.''
		+	\|-
		+	\|Any real-life '''pilot participants (if applicable) are informed''' of the fact that they are involved in piloting activities,
		+	including any risks and countermeasures taken, and the (lack of) legal effects and consequences of participation.
		+
		+	Appropriate documentation should be retained to demonstrate that this information has been provided.
		+
		+	'''(mandatory for medium and high)'''
		+	\|''x''
		+	\|''Students are informed about involvement in piloting activities at the Explicit request step, i.e. before requesting their data to be retireved from a competent authority in their home country.''
		+	\|-
		+	\|If the piloting involves '''real-life persons''', piloting should be organised under the '''supervision of a DPO'''.
		+	'''(mandatory for medium and high)'''
		+	\|''x''
		+	\|''Hans Graux''
		+	\|-
		+	\|If the piloting would be done on a '''production environment''', all pilot partners should '''notify''' any operators of such environments in advance.
		+	Appropriate measures should be taken that piloting activities d'''o not result in negative legal or practical consequences''' for any real-life persons, real life data, or production environments.
		+
		+	The production environments should be '''cleaned''' if the piloting activity was not intended to have long term legal or practical consequences.
		+
		+	'''(mandatory for medium and high)'''
		+	\|''x''
		+	\|''Operators are informed and attend pilot run sessions. The UJI portal allows for submitting application to higher education, but without any legal or practical consequences for the students (call for studies are either test calls or the students do not finish completely their procedures).''
		+	\|-
		+	\|All piloting activities should be '''monitored by pilot partners''' (each solely in relation to such components of the piloting activities which are under their responsibility)
		+	in a manner that allows any incidents to be detected and remedied (including by contacting any affected real-life persons where needed).
		+
		+	'''(mandatory for medium and high)'''
		+	\|''x''
		+	\|''Piloting activities are monitored by pilot partners.''
		+	\|-
		+	\|The '''DE4A project DPO''' (Hans Graux) should be informed prior to initiating piloting activity, and of any incidents that are reasonably likely to create legal effects or practical impacts on any real-life persons
		+
		+	'''(mandatory for high)'''
		+	\|''x''
		+	\|''This wiki informs the DPO.''
		+	\|-
		+	\|Implementation of a '''pilot monitoring and remediation strategy''' to assess whether exchanged evidences are reasonably capable of satisfying the requirements for high risk piloting documented in the deliverables,
		+	and to ensure that any errors in the piloting activity can be detected and remediated in a manner that eliminates any negative legal or practical consequences.
		+
		+	'''(mandatory for high)'''
		+	\|''x''
		+	\|''Piloting activities are monitored by pilot partners.''
		+	\|}

@@ Line 45: / Line 45: @@
 {| class="wikitable"
 |+
-! colspan="4" |Use case Application for study grant
+! colspan="4" |Use case Applying for study grant
 |-
 | colspan="2" |'''Data provider country'''

@@ Line 55: / Line 55: @@
 |'''Status in this use case'''
 |-
-|Portugal
+|Spain
 |Pick whichever one applies:
 ''[not active yet] [issuing fake data] [issuing real data]''
 |Slovenia
 |Pick whichever one applies:
 ''[not active yet] [receiving fake data] [receiving real data]''
 |-