LinkedIn
Twitter
Healthcare:
The Consent Gateway solves the functional requirements for HIPAA’s patient consent disclosures.
The HIPAA Privacy Rule permits an entity to obtain patient “consent” for uses and disclosures of protected health information for treatment, payment, and health care operations.
Healthcare IT has complete discretion to design a process that best suits their needs. We think the Constratus Consent Gateway is well suited to provide those privacy protections in any API oriented healthcare organization.
Financial:
The European Commission is increasingly focused on consumer protection.
The Directive on Payment Services (PSD) created the legal foundation for the creation of an EU-wide single market for payments.
PSD maintains that third parties with a license to provide payment services shall receive access to customers account information provided the customer has given their "explicit consent" to that access.
The Constratus Consent Gateway fulfills the PSD requirement for services needing to obtain permission for Payment Program Opt-In and One-time Payments from account holders.
Flexibility in the Digital Enterprise:
In a broader sense the Consent Gateway also gives YOU the framework to define and manage which parts of your enterprise application data your users can attach personal preferences to.
A digital life service application is able to control and monetize access to different pieces of user information and enables multiple service providers to compete for the user preference.
In this case Constratus Consent Gateway lets your users choose which food service provider may access their meal and caloric preferences. At the same time, Consent Gateway also lets your users pick their own coach and enable access to just their fitness metrics.
Media and Entitlements:
The Consent Gateway is a flexible platform that not only allows you to manage user privacy but also allows YOU to manage the enterprise's authorizations towards consumer entitlements directly.
Using the Constratus Consent Gateway’s Trusted Service Provider API Extension the media service provider sets the users entitlement disposition at the time of purchase.
A media service provider monetizes streaming media by providing access only to the paying and entitled subscribers and their devices.
Authorization:
The Consent Gateway is ALSO used to get the users consent authorization before generating and renewing OAuth Access Tokens.
The Consent Gateway along with Apigee’s OAuth Token Generation and Validation policies let you build a complete OAuth 2.0 solution.
Salesforce:
The Constratus Consent Gateway is very easily added to your Salesforce Applications by providing strong privacy controls to the actual account holders.
Only your account holders preferred maintenance service provider should access their account facilities data for example.
By using the Consent Gateway, you have the means to manage competition between service providers for your clients.
