The JISC Authentication and Authorisation Programme

1
The JISC Authentication and Authorisation
Programme

• Alan Robiette, JISC Development Group
• lta.robiette_at_jisc.ac.ukgt

2
Principal Objectives

• To explore in depth authentication via digital
  certificates
• Certificates are coming whether we like it or not
  (Grid, NHS, e-Government)
• What are the issues involved in using them in a
  university/college context?
• To examine emerging solutions for authorisation
• Is a common solution achievable, e.g. for
  electronic information and Grid?

3
Basic Statistics

• 11 projects funded (out of 22 received)
• 4 mainly to do with authentication
• 4 mainly to do with authorisation
• 3 miscellaneous (see later)
• Project durations 6 to 24 months
• Committees considering commissioning some further
  studies to fill gaps

4
Authentication Projects

• Three looking at embedding certificate use in
  institutions
• London School of Economics
• University of Oxford ( partners)
• University of Edinburgh
• Edinburgh proposal also includes University of
  Paisley and two FE colleges
• One project to develop tools for certificate
  management
• University of Leeds

5
Authorisation Projects

• University of London
• PAPI (ULL, UL External Programme)
• Manchester Computing/ESNW
• Akenti (Zetoc)
• University of Salford
• Akenti and Permis (architectures)
• University of Warwick
• Roles and institutional memberships
• Includes North Warwickshire College and
  Warwick-Leicester Medical School

6
Other Projects

• University of Kent
• Policy-based administration in distributed
  environments (including accounting)
• University of Southampton (2)
• Access management for wireless networks
• Authentication and information integrity in
  e-print archives

7
Links to Related Work

• Internet2/Educause
• HEPKI (Higher Education PKI) working groups,
  especially TAG
• Shibboleth working group
• Terena
• TF-AACE (Task Force on Authentication and
  Authorisation Cooperation for Europe)
• Office of the e-Envoy

8
Questions?