A Blockchain-Based Platform for Consent Management of Personal Data Processing in the IoT Ecosystem

Data Structure 1

dstruct 1: Consent request schema.

1

2$schema: http//...,

3$id: http://...,

4title: ConsentRequest,

5description: Placing a request to a data subject for a consent,

6type: object,

7properties:

8Controller:

9description: Defines the controller's identity as this is displayed in Certificate's

common name,

10type: string

11,

12DataSubject:

13description: Defines the data subject's identity,

14type: object,

15properties:

16firstName:

17description: The person's first name.,

18type: string

19,

20lastName:

21description: The person's last name.,

22type: string

23,

24age:

25description: Age in years which must be equal to or greater than zero.,

26type: integer,

27minimum: 0

28

29

30

31,

32PersonalData:

33description: Defines the kind of personal data collected for processing,

34type: array,

35items:

36type: string

37,

38minItems: 1,

39uniqueItems: true

40,

41SensitiveData:

42description: Defines the data are sensitive,

43type: boolean

44,

45ChildData:

46description: Defines whether the data are related to a child,

47type: boolean

48,

49DataProcessing:

50description: Details about the type of processing,

51type: object,

52properties:

53Purposes:

54description: Lists the processing purposes,

55type: string

56,

57ProcessingActivity:

58description: The kind of activity related to personal data processing,

59type: string

60,

61ProcessingMode:

62description: Defines whether processing is automated,

63type: boolean,

64,

65Profiling:

66description: Defines whether automated processing includes profiling,

67type: boolean

68,

69Recipient:

70description: Defines whether data are sent to third parties,

71type: object,

72properties:

73EURecipient:

74description: Identifies the European third parties that receive the personal data,

75type: array,

76items:

77type: string

78,

79minItems: 0,

80uniqueItems: true

81,

82NonEURecipient:

83description: Identifies the non-European third parties that receive the personal data,

84type: array,

85items:

86type: string

87,

88minItems: 0,

89uniqueItems: true

90

91

92

93

94,

95Retention:

96description: Defines the retention period for these data,

97type: object,

98properties:

99startDate:

100description: The starting date.,

101type: string

102,

103endDate:

104description: The end date.,

105type: string

106

107

108,

109required: Controller,DataSubject,PersonalData,SensitiveData,ChildData,

DataProcessing

110