SECURe Progress Report

1
SECURe Progress Report

• John PaschoudLondon School of Economics

2
Aims

• A whole-institution model for
• Stronger authentication
• Integrated resource access management

3
Who is involved

• Internal partnership of
• IT Service
• infrastructure directories
• Business Systems
• (most) internally-managed resources
• user registration processes
• Library
• externally-held resources

4
Work Plan (1)

• Evaluation of directories
• LDAP/eduPerson compliance
• Use as Shibboleth backend
• Audit of resources (Digital Assets)
• Descriptive metadata
• Technical access details
• Authorisation details (eduPerson groups)
• Shibbolized channels to key external resources
• OCLC, Jstor, EDINA

5
Work Plan (2)

• Standalone PKI
• Certificate-server
• Registration/revocation procedures
• Card-based certificates
• Pilot group only
• Explore common use of cards with others (e.g.
  TfL)
• Evaluation Documentation
• Institutional strategy recommendations
• Cookbooks for other institutions

6
Related Projects

• ANGEL Resource metadata Middleware to
  non-standards-compliant resources
• Shibboleth Cross-domain authorisation
• Other London-wide smartcard projects(?)
• LURCIS X.509 management
• LSE MIKE (Managed Information Knowledge
  Environment)
• CSRC Fiducia (PKI trust principles)

7
Objectives / Outcomes

• X.509 authentication for all users
• towards an HE/FE national PKI
• Reduced (no?) repeated authentication challenges
  for users
• Better strategic management of all information
  resources
• Processes, successes and problems documented for
  learning and re-use by the community

8
Progress July 2003

• Shibboleth / LDAP/ eduPerson strand
• Pilot working (after fighting M LDAP)
• Connection made to JSTOR target
• Collaboration with ColumbiaU to enable JISC/NSF
  Anthropology teaching project
• Institutional PKI strand
• Smartcard strand
• Discussions with TfL, London-Connects

9
Related AAA studies

• SURF-NL
• World-view of AAA activities options, for Dutch
  HE (completed Jan-03)
• JISC MLE-LLL
• Cross-domain AAA, for students affiliated to
  several institutions (completed Dec-02)

10
Revised resourcing

• Some 2002/3 funding can be carried forward
• Project Manager Programmer full-time (instead
  of 0.4) throughout 2003/4
• Synergies with LSE MIKE (Managed Information
  Knowledge Environment) Project
• Liaison with JISC IESR development of access
  matrix concept in Collection-Level Description

11
Revised Plan for 2003/4

• Aug 03 Shib v1.x integration with AD2K3
• Sep 03 Campus-wide authentication
• Oct-03 Full upgrade to AD2K3 Certificate-serve
  r PKI setup
• Nov-03 Key-carriers hardware (U.v.Amsterdam
  model?)
• Dec-03 Small-scale user testing
• Jan-04 Larger-scale rollout