Privacy and Identity Management

Recent resources tagged with Privacy and Identity Management.

Comments of the American Council on Education on the Family Educational Rights and Privacy Act

Added by the EDUCAUSE Librarian
Title:Comments of the American Council on Education on the Family Educational Rights and Privacy Act (ID: epo0806)
Origin:Contributed by the EDUCAUSE Policy Office (05/08/2008)
Type:Articles, Papers, and Reports
Abstract:

On behalf of several higher education associations, the American Council on Education submitted comments on the Family Educational Rights and Privacy Act

View this resource:

Comments of the EDUCAUSE/Internet2 Computer and Network Security Task Force on the Family Educational Rights and Privacy Act

Added by the EDUCAUSE Librarian
Title:Comments of the EDUCAUSE/Internet2 Computer and Network Security Task Force on the Family Educational Rights and Privacy Act (ID: epo0805)
Origin:Contributed by the EDUCAUSE Policy Office (05/08/2008)
Type:Articles, Papers, and Reports
Abstract:

Comments of the EDUCAUSE/Internet2 Computer and Network Security Task Force on the Family Educational Rights and Privacy Act; Proposed Rule, Federal Register, Vol. 73, No. 57, U.S. Department of Education, Office of Planning, Evaluation and Policy Development

View this resource:

Lightning Talks

Added by the EDUCAUSE Librarian
Title:Lightning Talks (ID: CAMP08107)
Origin:Contributed by EDUCAUSE Grant Programs (CAMP) (02/13/2008)
Type:Presentations/Speeches
Abstract:

Do you have a practice or interesting approach to share in the security and identity management space? Or would you like to connect up with someone with a similar challenge and collaborate on a solution? This session will provide a final chance for attendees to discuss a good idea or opportunity for peer networking.

View this resource:

Appropriate Access: Privacy Requirements, Regulation, and Working with Auditors

Added by the EDUCAUSE Librarian
Title:Appropriate Access: Privacy Requirements, Regulation, and Working with Auditors (ID: CAMP08114)
Author(s):Karl Heins (University of California Office of the President) and David H. Walker (University of California Office of the President)
Origin:Contributed by EDUCAUSE Grant Programs (CAMP) (02/13/2008)
Type:Presentations/Speeches
Abstract:

Personal privacy is about protecting individuals and them control over their personal information. Institutional privacy is about protecting proprietary information. In either case, privacy requirements must reflect campus values and also meet the institution's legal and regulatory obligations. The requirements must be reflected in the identity management system: its flexibility, how it is used to support access to resources, and who makes the decisions about that access. IAM can provide for the externalization and consolidation of roles that can be used to determine permissions and access without that function being built into each resource. This session will discuss these topics from the auditor, identity management architect, and security staff perspectives and offer a case study on how one campus has addressed these issues.

View this resource:

Registration Now Open for February CAMP: Bridging Security and Identity Management

Created by Colleen Luckett (EDUCAUSE) on December 13, 2007

CAMP logoDesigned for both management and technical staff, the Campus Architecture and Middleware Planning (CAMP) workshop, "Bridging Security and Identity Management," February 13-15 in Tempe, Arizona, will address practical approaches for addressing issues surrounding three themes:

Spock's Risky Take on Trust, Privacy, and Identity Management Online

Created by Catherine Howell (University of Cambridge) on December 04, 2007

This post sort of follows on from my musings on Pownce, and the relative (in)utility of the current glut of social networking "services".

Received any Spock trust invitations lately?

Spock, a self-described “people search application that allows you to see what your friends and colleagues are doing on the web”, could potentially tell us something about the future of metasearch engines—those clunky crawlers that tried, and mostly failed, to bridge the gap between structured web directories like Dmoz, and the chaotic openness of Google’s PageRank™ technology. Although its interface design, a web-2.0-ified “Google Classic Home”, is so trendy that I’m afraid it’s already terribly dated.

FTC Seeking Comments on SSN Use - Including Usage by Colleges and Universities

Created by Rodney J. Petersen (EDUCAUSE) on August 06, 2007

The Federal Trade Commission (FTC) has announced that it is seeking comments on the use of Social Security Numbers (SSNs) in the private sector. This inquiry is in response to a recommendation in the President’s Identity Theft Task Force Strategic Plan that called for the development of a comprehensive record on the uses of the SSN in the private sector and evaluate the necessity of those uses.

Podcast:: Security Breaches and Identity Theft

Created by Gerry Bayne (EDUCAUSE) on June 26, 2007

In this 55 minute podcast, we present a general session from the EDUCAUSE 2007 Policy Conference entitled, “Security Breaches and Identity Theft”. This is a panel discussion moderated by EDUCAUSE Government Relations Officer and Security Task Force Coordinator, Rodney Peterson. The discussion features: 

Michael Atleson, Attorney, Division of Privacy and Identity Protection, Federal Trade Commission

Liz Gasster, General Counsel and Acting Executive Director of the Cyber Security Industry Alliance

A Report on the Identity Management Summit

Added by the EDUCAUSE Librarian
Title:A Report on the Identity Management Summit (ID: CSD4751)
Author(s):Norma B. Holland (EDUCAUSE), Ann West (Michigan Technological University), and Steven L. Worona (EDUCAUSE)
Origin:Publications from the EDUCAUSE Office (2006)
Type:Articles, Papers, and Reports
Abstract:

As part of the EDUCAUSE 2006 Program Plan, EDUCAUSE is holding several summits on topics of importance to higher education designed to bring together thought leaders and experts in the community in order to capture the best strategies and behaviors. The Identity Management (IdM) Summit held in Washington, D.C., in November 2006 was attended by about 50 higher education administrators who hold either an IT or functional role. Sponsored by an NSF Middleware Initiative Award to EDUCAUSE and Internet2, the Summit resulted in a collection of information from a broad higher education constituency who are knowledgeable and experienced in the area of identity management. Using this information, EDUCAUSE and partners are creating a body of knowledge to assist campuses in developing and enhancing their home IdM environments.

View this resource:

Identity Management ...

Created by Theresa Rowe (Oakland University) on December 18, 2006
Identity Management assembles several streams of activity around identifying members of the university community and provisioning services for those community members. Universities need methods for discovering new members of the community and making sure those members have access to the services that the individual members need. Identity management can be used create a single-authentication environment, moving to a single sign-on environment, and then sharing that authentication among several universities in a federation. When used for service provisioning, access to private or limited resources can be controlled through identity management strategies.
 
A growing aspect of Identity Management is the creation of access and traffic logs. These logs allow us to differentiate the activities of those authorized community members from activities that are not authorized, particularly those originating from those outside the community. We can trace and answer “what happened.” Compliance requirements (e-evidence or HIPAA, for example) may require retention of logs for extended periods of time.
 
I like to think that university networks and systems operate within a set of ethical principles. Our networks are open highways where communities are free to travel. There may be limited entrance and exit ramps, particularly to special services (like interstate highways). Cars are licensed to travel wherever the driver chooses, but travel is not monitored or permanently recorded in a log. Some destinations are not easily accessible or have limited access; there are locked gates and perimeter walls.