Personally controlled

In PKC, data can be controlled by controlling access to a privately held secret, such as a password, or a personally controlled device that stores such secret. The ownership of data is said to be controlled by knowing and revealing the secret. This secret is often small enough, that can be remembered by a person, or be stored on a portable device physically carried around by a person, so that it is considered to be controllable by a person.