Innovation through participation Data Protection Code of Conduct (DP CoC) REFEDS Helsinki 2.10.2013 Mikael Linden, CSC – IT Center for Science

Slides:

Advertisements

Similar presentations

Federation management A mess? Nordunet Conference Mikael Linden CSC, the Finnish IT Center for Science.

Advertisements

1 Enforcement Powers of National Data Protection Authorities and Experience gained of the Data Protection Directive Safe Harbour Conference Washington.

Innovation through participation eduGAIN federation operator training eduGAIN interfederation service /18 Valter Nordh, NORDUnet / GU 1.

Innovation through participation eduGAIN federation operator training Operations Team, OT, how to join eduGAIN /18 Valter Nordh, NORDUnet / GU.

Federated Identity Management for Researchers – A quick overview from GÉANT BoF TNC May 2014 Dublin.

Innovation through participation GÉANT Data Protection Code of Conduct (DP CoC) FIM for research collaboration workshop Mikael Linden,

Innovation through participation Attributes Release Working Group European data protection directive REFEDS meeting 22th Apr, 2012

EduGAIN – Are we there yet? Lukas Hämmerle (ghost writer, Brook Schofield) FIM4R, Helsinki – 2 October 2013.

Federated Identity Management for Research Communities (FIM4R) David Kelsey (STFC-RAL) EGI TF, AAI workshop 19 Sep 2012.

Innovation through participation eduGAIN federation operator training eduGAIN policy eduGAIN training in Vienna Oct 2011

REFEDS RESEARCH AND EDUCATION (R&S) ENTITY CATEGORY NICOLE HARRIS.

SWITCHaai Team Federated Identity Management.

EduGAIN Code of Conduct Workshop, , Brussels GEANT eduGAIN Data Protection "Code of Conduct" Workshop Dieter Van Uytvanck

Trust and Security for FIM (Sirtfi/SCI) David Kelsey (STFC-RAL) FIM4R at CERN 4 Feb 2015.

BoF: Federated Identity Management for Researchers David Kelsey (STFC-RAL) TNC2014, Dublin 20 May 2014.

Innovation through participation Interfederation through eduGAIN - steps and challenges eduGAIN interfederation service Federated Identity Systems.

AARC Overview Licia Florio, David Groep 21 Jan 2015 presented by David Groep, Nikhef.

The ReFEDS/GÉANT Code of Conduct (CoC) An Approach to Compliance with the EU Data Protection Directive Steve Carmody April 23, 2012.

Sirtfi David Kelsey (STFC-RAL) REFEDS at TNC15 14 June 2015.

SAML Right Here, Right Now Hal Lockhart September 25, 2012.

Federated Identity Management for HEP David Kelsey WLCG GDB 9 May 2012.

Kalmar Union, a Conferedation of Nordic Identity Federations TNC2009 Mikael Linden, CSC Andreas Solberg, UNINETT.

European Life Sciences Infrastructure for Biological Information Life science community update for the 7 th Federated Identity Management.

Towards Interconnecting the Nordic Identity Federations TNC2007 Walter M Tveter, UiO Mikael Linden, CSC/HAKA Ingrid Melve, Uninett/Feide.

Schac attributes and common vocabularies TF-EMC Mikael Linden CSC, the Finnish IT Center for Science.

7 th FIM 4 R meeting April 2014 ESRIN Frascati.

Kalmar Union lessons: Findings in federation harmonisation REFEDS Mikael Linden, CSC.

INTRODUCTION: THE FIRST TRY InCommon eduGAIN Policy and Community Working Group.

Innovation through participation eduGAIN interfederation service for research and education Cern FedID workshop in RAL, UK 2-3 Nov 2011 Mikael Linden,

Authentication and Authorisation for Research and Collaboration Licia Florio REFEDS Meeting The AARC Project I2 Technology Exchange.

Authentication and Authorisation for Research and Collaboration Licia Florio AARC Workshop The AARC Project Brussels, 26 October.

Authentication and Authorisation for Research and Collaboration David Kelsey AARC AHM Milan And mechanisms NA3 Task 4 – Scalable.

Innovation through participation eduGAIN policy: A worm report TF-EMC2 Vienna Mikael Linden, CSC The worm farmer.

Federations, the Data Protection Directive and WP29 TF-EMC2 Mikael Linden, CSC, the Finnish IT Center for Science.

The UK Access Management Federation John Chapman Project Adviser – Becta.

Federated Identity Management for HEP David Kelsey HEPiX, IHEP Beijing 18 Oct 2012.

Connect. Communicate. Collaborate Deploying Authorization Mechanisms for Federated Services in the eduroam architecture (DAMe)* Antonio F. Gómez-Skarmeta.

Authentication and Authorisation for Research and Collaboration David Groep AARC All Hands meeting Milano Policy and Best Practice.

Authentication and Authorisation for Research and Collaboration Christos Kanellopoulos Open Day Event: Towards the European Open.

Innovation through participation EduGAIN policy (working draft) Status update REFEDs 30th May 2010

Federated Identity Management for Scientific Collaborations The Common Vision David Kelsey (STFC) 3 Nov 2011.

INTRODUCTION: THE FIRST TRY InCommon eduGAIN Policy and Community Working Group.

Understanding deployment issues on the Supply Chain Ann Harding, SWITCH, Nicole Harris, TERENA Cambridge July 2014.

Networks ∙ Services ∙ People Thomas Bärecke Journée Fédération, Paris Collaboration européenne GÉANT SA5 03/07/2015 SA5 T5 team

Connect communicate collaborate Trust & Identity EC meets GÉANT 19 June 2014 Brussels Valter Nordh, NORDUnet Federation as a Service Task Leader Trust.

Networks ∙ Services ∙ People Nicole Harris UK federation meeting eduGAIN, REFEDS and the UK 23 June 2015 Project Development Officer GÉANT.

Research Community Requirements Ann Harding, SWITCH Cambridge July 2014.

Case Studies in Federated Identity Management for Research Communities Ann Harding, SWITCH/GN3plus Peter Gietz, DAASI International GmbH/DARIAH Tommi Nyro.

Connect communicate collaborate Case Studies in Federated Identity Management for Research Communities Ann Harding, SWITCH/GN3plus Peter Gietz, DAASI International.

Progress Report on the U.S. NSTIC Efforts Jack Suess – Delegate for Research, Development, Education & Innovation

David Groep Nikhef Amsterdam PDP & Grid AARC Authentication and Authorisation for Research and Collaboration an impression of the road ahead.

Federated Identity Management for Research Communities: FIM4R PSI workshop objectives Bob Jones, CERN.

Designing Identity Federation Policy, the right way Marina Vermezović, Academic Network of Serbia TNC2013 conference 4 May 2013.

Networks ∙ Services ∙ People TNC 2016, Prague Alice Through the Looking Glass Science DMZ goes above the network 13 June

Authentication and Authorisation for Research and Collaboration David Kelsey AARC AHM Utrecht NA3 Task 4 – Scalable Policy Negotiation.

Networks ∙ Services ∙ People Ann Harding Networkshop 44, Manchester Thinking globally, acting locally Trust and Identity in the GÉANT project.

Authentication and Authorisation for Research and Collaboration Taipei - Taiwan Mechanisms of Interfederation 13th March 2016 Alessandra.

Innovation through participation Data Protection Code of Conduct (DP CoC) TNC2013 conference, 4 June 2013 Mikael Linden, CSC – IT Center for Science

The Policy Puzzle Many groups and (proposed) policies, but leaving many open issues AARC “NA3” is tackling a sub-set of these “Levels of Assurance” –

GÉANT Data Protection Code of Conduct (CoCo)

Case Studies in Federated Identity Management for Research Communities

AAI Alignment Nicolas Liampotis (based on the work of Mikael Linden)

Federated Identity Management for Researchers (FIM4R)

GÉANT 4-2 JRA3 T1 Something with Federations and Campus VC

Federated Identity Management for Scientific Collaborations

GEANT Code of Conduct and REFEDS Research and Scholarship compared

Policy in harmony: our best practice

Policy and Best Practice … in practice

AARC Blueprint Architecture and Pilots

GEANT Data protection Code of Conduct 2.0 REFEDS meeting 16 June 2019

Presentation transcript:

Innovation through participation Data Protection Code of Conduct (DP CoC) REFEDS Helsinki Mikael Linden, CSC – IT Center for Science

Innovation through participation Federated Identity Management for Research Collaborations Date of this version: 23rd April 2012 Flexible and scalable IdP attribute release policy. Different communities and indeed SPs within a community are likely to require a different set of attributes from the IdPs. The IdP policy related to the release of user attributes and the negotiation mechanism needs to be able to provide this flexibility. Bilateral negotiations between all SPs and all IdPs is not a scalable solution. Attributes must be able to cross national borders. Data protection considerations must allow this to happen. Federated Identity Management for Research Collaborations Date of this version: 23rd April 2012 Flexible and scalable IdP attribute release policy. Different communities and indeed SPs within a community are likely to require a different set of attributes from the IdPs. The IdP policy related to the release of user attributes and the negotiation mechanism needs to be able to provide this flexibility. Bilateral negotiations between all SPs and all IdPs is not a scalable solution. Attributes must be able to cross national borders. Data protection considerations must allow this to happen. The Issue

Innovation through participation Data Protection Code of Conduct approach Goal is to increase trust between Home Organisations and Service Providers and thus faciliate attribute release For more information on the DP Code of Conduct: TNC speak: TNC fullpaper: SP Commit to SP Commit to SP Commit to HO Learn SPs commitment GEANT Data protection Code of Conduct

Innovation through participation Federations & GÉANT Data protection Code of Conduct 25 EEA Data Protection 5 EEA Compatible DP 1 Safe Harbor (USA) 13 Federation outside GÉANT CoC (4 in or joining) European Union European Economic Area countries with adequate data protection pursuant to Article 25.6 of the directive 95/46/EC e.g. Switzerland e.g. the US safe harbour European Union European Economic Area countries with adequate data protection pursuant to Article 25.6 of the directive 95/46/EC e.g. Switzerland e.g. the US safe harbour

Innovation through participation Data Protection Code of Conduct is approved and ready for deployment Normative documents: Data Protection Code of Conduct for SPs in EU/EEA SAML2 profile for the DP CoC Entity category attribute definition for the DP CoC Non-normative, informational documents: Introduction Introduction to the DP directive Risk management Privacy policy guidelines What attributes SP can request Good practice for Home Organisations Federation operator guideines Handling non-compliance IdP GUI guidelines

Innovation through participation New: Data protection Code of Conduct cookbook Recipe for Service Providers Recipe for Home Organisations Recipe for Federation Operators

Innovation through participation eduGAIN recommended attributes to be populated by the IdPs displayName cn mail eduPersonAffiliation, eduPersonScopedAffiliation, eduPersonPrincipalName, SAML2 Persistent NameID (eduPersonTargetedID), schacHomeOrganization schacHomeOrganizationType

Innovation through participation Next steps Deployment Together with research communities? WP29 consultation To get an endorsement from the EU data protection authorities Another CoC for non-EU /EEA attribute release To support attribute release from a Home Organisation in EU/EEA to a Service Provider outside EU/EEA

Innovation through participation International Code of Conduct For attribute release out of EU/EEA SP Commit to SP Commit to SP Commit to HO GEANT Data protection Code of Conduct EC Contractual Clauses [1] Commit to + In EU/EEAOutside EU/EEA [1]

Innovation through participation Questions?