Click here to receive your FREE subscription to Campus Technology
Focus
Security: Trend Report: Identity Management
10/20/2005
In this latest update on “Everything You Need to Know About IdM,” columnist Doug Gale lays out the old, the new, and the soon to be must-haves.
INCREASINGLY, A HIGHER EDUCATION institution’s ability to provide services over the network depends on its ability to authenticate, authorize, and provision user access rights in a unified, consistent, straightforward, and effective way. That’s easy to say but devilishly hard to do, and far too complex to cover in a single column!
Still, as we wade into this Byzantine morass of identity management (IdM), it helps to remember that there are four underlying components:
- Identification (your name or network/system identifier)
- Authentication (proof you’re you)
- Authorization (what resources you have permission to access)
- Directory (information about you and what you are allowed to do)
For now, let’s look at the first two: identification and authentication. Future columns will consider authorization and directory services.
Identification
At the heart of these schemes is how individuals are identified. Over time, single names evolved into first and last names, and more recently, into unique identifiers such as the Social Security Number (SSN). Unhappily, the use of SSNs as identifiers in higher ed creates identity theft and privacy problems, and d'es not easily adjust to our international community. We’re left with the need for a unique identifer or name.
A unique identifier is more than just a long string of numbers (see box, page 18). For example, at Indiana and George Mason (VA) universities, each student is assigned a unique and persistent multidigit identifier (used by the student information system), as well as a unique but easier to remember eight-character network ID and password that can be mapped back to the longer multidigit identifier. Defining a unique identifier is often a politically contentious process.
Authentication
Authentication (AuthN) is used to prove in some fashion that an individual is who he says he is. We can categorize that proof in three ways: something you have (e.g., a key or a birth certificate), something you know (a password), or something you are (e.g., your fingerprints). (See “Security: It’s Not All About Hackers,” Campus Technology, September 2005.)
The higher education environment involves multiple authentications: A student must prove her identity when she first enrolls. This is usually done by the admissions or registrar’s office, and is normally based upon a series of documents (such as high school transcripts) that the student sends the institution. Some institutions are beginning to require arriving students to show a picture ID, although that creates problems in enrolling distance ed students, and may not be any more secure than the traditional process. Jack Suess, vice president for Information Technology at the University of Maryland-Baltimore and co-chair of the Educause/Internet2 Security Task Force, recommends the identity proofing standards developed by the federal government as being both quantitative and flexible. The government’s E-Authentication Web site can be found at www.cio.gov/eauthentication.
Recommended Reading
- Sun, Stanford Working To Archive History
In May in San Francisco, experts from leading universities, libraries, and research institutions around the world met as part of an ongoing effort to address a pressing issue: archiving the world's history, right up to today.
- The Quilt Coalition Rolls Out XO Communications for High-Capacity Network Services
The Quilt, a coalition of 28 regional network organizations, has added XO Communications Services to its authorized vendor list. The Quilt represents 200 universities and thousands of other educational institutions across the United States. With this new relationship, Quilt members can purchase XO's high-speed IP transit and network transport services at competitive rates.
- Wimba Classroom 5.2 Expands Classroom Capture Support, Adds MP3 Downloads
At the NECC 2008 conference in Texas this week, Wimba launched a new version of Wimba Classroom, the virtual classroom component of the company's Collaboration Suite. The new 5.2 release expands options for classroom capture and adds a variety of other functional and ease of use features.
- Automation Chimera: Education Is Not Management
The lure of automating workflow online so human intervention is minimized is continually reinforced in the minds of higher education administrators by examples of automated campus systems such as financials, student information systems, and other enterprise systems. But what's good for management is not always good for learning.
- Cognos Releases BI Software for Linux-based IBM System z Mainframe
Cognos, which IBM acquired in January, has released an update to its business intelligence software that will run on the Linux operating system on IBM System z mainframes. IBM Cognos 8 BI was being developed by the two companies prior to the acquisition, but assimilation of Cognos into IBM accelerated development.
- Facebook and Collegiality: A Serendipitous Social Niche
Facebook is a way to greet a colleague as if she or he is on your own campus: a wave at a distance, a hello at the corner burrito place, a honk as you both leave the campus parking lot. Informal collegiality has been extended over the miles.
