Evolution of Access Management in the 21st Century: RA21 Initiative

Slide Note
Embed
Share

RA21, a joint initiative of STM Publishers and NISO, addresses the challenges of IP-based access management in the digital age. It aims to enhance user experience by optimizing access protocols across different stakeholder groups. The evolution from print to digital formats has led to the need for new solutions beyond IP recognition, embracing SAML-based authentication to ensure seamless access from any device or location. The focus is on developing best practices through pilots to create recommendations for improved access strategies, while prioritizing user privacy and security.


Uploaded on Nov 27, 2024 | 0 Views


Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

E N D

Presentation Transcript


  1. Resource Access for the 21th Century a NISO-STM Initiative UKSG Forum London 16 November 2017 Julia Wallace RA21 Project Director

  2. What is RA21? RA21: Resource Access for the 21stCentury Joint initiative of the International Association of STM Publishers (STM) and the National Information Standards Organization (NISO) Aimed at optimizing access protocols across key stakeholder groups Corporate and university subscribers, libraries, software vendors, publishers, identity federation operators, etc. Purpose: To a facilitate seamless user experience beyond IP address recognition, supporting network security and user privacy 2

  3. Late 20th Century: from print to digital Imitate print experience for libraries and users Optimized for ease of use and removal of barriers to encourage migration from print to digital IP address recognition became the de facto industry standard for site access 3

  4. Early 21st Century: digital and remote Technology evolved Growing diversified scholarly eco-system Multiple entry points, e.g. mobile and remote access Changing user expectations and behavior Significant growth of usage outside of corporate/campus networks 4

  5. RA21 Problem Statement IP-based access management increasingly problematic No seamless access from any device, location, or search engine Inconsistent and confusing patchwork of access solutions while off of the corporate/campus network (e.g. VPN servers, Proxy servers, Shibboleth) Increasing volume of illegal downloads and piracy Lack of user data to develop user-focused, personalized services 5

  6. RA21 Best Practices Recommend new solutions for access strategies beyond IP recognition Embracing SAML-based federated authentication as an alternative to IP address recognition SAML is a privacy-preserving security protocol SAML-based identity systems are already widely deployed throughout corporate and academic sites User experience is critically important Nothing will be as seamless as IP address recognition, but needs to be as seamless as possible In particular, must solve the Where Are You From (WAYF) problem Test and improve solutions by organizing pilots in a variety of environments for the creation of best practice recommendations RA21 will not develop a specific technical solution or one industry-wide authentication platform 6

  7. RA21 Principles: Improve User Experience From any location on any device Beginning from any entrance point Ending with the desired content With a consistent user interface With greater privacy, security and personalization 7

  8. RA21 Principles: It must be open The solution can not be proprietary The solution should be (reasonably) easy to implement The solution must be vendor neutral Should not create tremendous amounts of new work, implementation cost, or ongoing maintenance. Should allow for gradual implementation 8

  9. Three Pilots Privacy Preserving Persistent WAYF (P3W) A shared discovery service based on storing information in the browser. Recommendations to incorporate WAYF hints into federation metadata. A proposal on how the pilot can turned into a sustainable service. A report on experience learned and pros/cons of taking it into production. WAYF Cloud Corporate A shared discovery service based on centralized information sharing. Public Github repository with WAYF Cloud source code with open source license. Report with the results from user testing. Set of recommendations for the operational aspects of the WAYF Cloud. Validate use of SAML-based federated authentication technologies to provide seamless access to resources for authorized users Improve user experience publisher sites. Explore ways to capture granular usage statistics. Consider options for easy flow between publishers. Pilots working together on: User experience and a reference UI Privacy and security issues 9

  10. RA21 Timeline Q3 16 approval STM Board, taskforce, use cases, guiding principles Q4 16 first public presentations on RA21, first workshop Q1 17 staff hiring, project adoption by NISO Q2-Q4 17 workshops and outreach Q1 18 round-up pilots Q2 18 1st draft best practices Q3 18 publication of project results 10

  11. Whos Involved Steering committee RA21 Staff Julia Wallace Project Director Chris Shillum, Elsevier (Co-chair) Meltem Dincer, Wiley (Co-chair) Gerry Grenier, IEEE Laird Barrett, Springer Nature Ralph Youngen, ACS Dan Ayala, Proquest Don Hamparian, OCLC Leif Johansson, SUNet Ann West, InCommon Andy Sanford, Ebsco Josh Howlett, Jisc Rich Wenger, MIT Peter Brantley, UC Davis Todd Carpenter, NISO Eefke Smit, STM Ann Gabriel, Elsevier (RA21 Outreach Committee) Heather Flanagan Coordinator Academic Pilots Jenny Walker Coordinator Corporate Pilot Participating: 100+ individuals; 50+ organisations 11

  12. Learn more about RA21 Visit: https://www.RA21.org Contact: Julia@RA21.org or Heather@RA21.org Attend: RA21 Seminar - 8 December, London - Free Register at - http://bit.ly/2mmpXy4 (remote access possible) For links to other forthcoming RA21 related events including: UKSG authentication webinar -28 November STM Innovations 6 December visit: https://www.RA21.org/events 12

Related


More Related Content