...
Table of Contents maxLevel 1 style none
eduroam user authentication and F-ticks
Dataset description: | Data needed for eduroam authentication for end users. Usage log messages for each international and national authentication result. |
Purpose of processing: | Enable eduroam users to use WiFi service when visit another organization or federation using their home identity. Log data Dataprovides basic statistical information about service usage. It provides statistics about the number of logins for national and international roaming. The data is used for generation of usage statistics that are publicly available at https://monitor.eduroam.org and for reporting to EC and other stakeholders. |
Data source: | NROs Federation top level Radius servers. IdPs and SPs can optionally send theF-ticks data as well. |
Data storage and access: | Authentication data are not stored. F-ticks data are Data isstored in the SQL database that is operated in the infrastructure provided by CARNet. The raw data is accessible only by the personnel of eduroam operations team. |
Data transfer: | Authentication data are forwarded to appropriate Federation level RADIUS server in encrypted form. F-ticks data are Data isnot transferred to any other party or system. |
Data retention: | Data is F-ticks data are kept permanently. |
Dataset content
Data item | Is personal data (DPO fills in) | |
---|---|---|
1 | REALM - As in users EPPN used for the authentication (for example “@education.lu”) - contains the user’s country of origin and the institution of origin | |
2 | Calling-Station-Id - User’s device MAC address | |
3 | Viscountry - ISO country code of the NRO that generated the log message | |
4 | Visinst - Identifier of visited institution i.e. operator-name RADIUS attribute | |
5 | Result - Authentication outcome: OK / FAIL |
Dataflow overview
eduroam Database - NRO information
...