National Student Clearinghouse Clearinghouse Authentication Challenges 8/20/04 Mark Jones VP – Marketing & Business Development

Clearinghouse History Formed as non-profit in 1993 to automate enrollment verification process for financial aid recipients ( 91% of enrollment ) Added related services over the years including: - Expanded Enrollment Verifications - Degree Verifications - Enrollment Search - IT/Occupation Verifications - Transcript Ordering - Successful Outcomes - Diploma Verifications

Challenges Large number of potential trading partners –6,000 institutions in higher ed –35,000 high schools –6 million employers –10,000 background screening firms –All living college graduates Valuable Data –Name, SSN and DOB for 50 million students Regulations –FERPA –FCRA –Various federal/state regulations

HR-XML SPEEDE /PESC Local State/Fed Government Apartment Managers Legal Medical Professional Student Lending Clearinghouse Ecosystem High Schools IT/Occupational Certifications Clearinghouse -Registry -Security -Billing -Provisioning -Cust. Support -Translation Tennant Screening Staffing Firms Executive Search Firms Employers HRIS Colleges & Universities Background Screening Firms Internet Job Boards Alumni Student Programs Credit Grantors Auto Insurers Health Insurance HIS

Authentication/Security Needs FTP with 2800 institutions every 3 weeks Web Services with 25 large screening firms Single sign-on for students wanting access to enrollment data or requesting transcripts Ability to identify and authenticate alumni based on shared-secrets Participant in Meteor

FTP with 2800 institutions FTPing enrollment data and transcript requests as flat files, EDI and XML Using combination of: –FTPS/SFTP –PGP Growing interest in real-time exchanges using web services

Web Services with 25 large screening firms Using web services network for: –Management/monitoring –PKI support –Provisioning HR-XML support leading to integration directly within common HRIS packages for employers

Single Sign-on Key to providing convenient, secure, integrated "best of breed" applications Looking at SAML/Shibboleth and hoping new FERPA guidelines support implementation

Ability to identify and authenticate alumni Many alums either don't have or don't remember userid/pin from college days Would really like to be able to create definitive identity via Clearinghouse: –Would enable web-based transcript ordering without paper release form –Could be used with SAML/Shibboleth to enable access to any college attended

PKI Exploration Clearinghouse became custodian of CREN PKI/CA work 18 months ago Explored technical feasibility of providing "outsourced" PKI services to higher ed –Server certificates –Client certificates for students –Sector CA for education Determined it was technically feasible but couldn't find any demand

Contact Information Mark Jones VP – Marketing & Business Development National Student Clearinghouse Sunrise Valley Drive, Suite 300 Herndon, Virginia