A View from the Intersection Mike Roch Director of IT Services 21 May, 2009 Conducting at the Piazza Venezia

Extension college of Christ Church 1892 Royal Charter awarded 1926 13,000 undergrads; 5,000 postgrads 3,000 staff (700 researchers) 87 % of research is of International Standing Turnover £200M; Research income £30M

Extension college of Christ Church 1892

Royal Charter awarded 1926

13,000 undergrads; 5,000 postgrads

3,000 staff (700 researchers)

87 % of research is of International Standing

Turnover £200M; Research income £30M

IT Services - Responsibilities

IT Services – Partnerships Communications – PTS Consulting Networks – Data Integration Windows – Microsoft Educational Support Centre Virtualisation – VMware Disaster Recovery – Sungard Offsite backup - Recall Student Email – T.B.A. Identity Management – Oxford Computing Group Access Management – Eduserv

Communications – PTS Consulting

Networks – Data Integration

Windows – Microsoft Educational Support Centre

Virtualisation – VMware

Disaster Recovery – Sungard

Offsite backup - Recall

Student Email – T.B.A.

Identity Management – Oxford Computing Group

Access Management – Eduserv

IT Services - Culture Services more important than IT We work for them - ‘ Can-do ’, ‘ Here to Help ’ Good value for money - £270/fte user/yr Standards and working practices Service desk & workflow - ITIL Change management - ITIL Project management - PRINCE-lite Information security management - BS7799/ISO27002 Pragmatism – ‘Utility not ideology ’ Risk management – proportionality

Services more important than IT

We work for them - ‘ Can-do ’, ‘ Here to Help ’

Good value for money - £270/fte user/yr

Standards and working practices

Service desk & workflow - ITIL

Change management - ITIL

Project management - PRINCE-lite

Information security management - BS7799/ISO27002

Pragmatism – ‘Utility not ideology ’

Risk management – proportionality

Risk Management IMPACT of nasty thing PROBABILITY of nasty thing Low High Low High Prevent Reduce Impact Plan Accept

Research Support Computational resources Thames Blue IBM BladeCenter 600 node Campus Grid & NGS Affilliate Storage resources Mirrored NetApp Filers & Enterprise Vault Institutional Repository - ePrints Software ArcGIS, Matlab, SAS, SPSS, ATLAS-ti, NVivo, … Support Advice, documentation, certification, AccessGRID, Globus g/w Partnerships – Oxford eResearch Centre, eResearch South , NGS

Computational resources

Thames Blue IBM BladeCenter

600 node Campus Grid & NGS Affilliate

Storage resources

Mirrored NetApp Filers & Enterprise Vault

Institutional Repository - ePrints

Software

ArcGIS, Matlab, SAS, SPSS, ATLAS-ti, NVivo, …

Support

Advice, documentation, certification, AccessGRID, Globus g/w

Partnerships – Oxford eResearch Centre, eResearch South , NGS

Identity Management - background Mainframe s and UNIX minis from 1970s Distributed UNIX workstations + NFS filestore - 1988 TCP/IP, PC-NFS for PCs, CAP etc for Macs Yellow Pages/NIS directory services Common University Username (= email LHS for students) Active Directory synched with NIS from 2001 s p u 0 3 c h 3 Science Faculty Physics Dept Undergraduate Registration Year Initials + serial

Mainframe s and UNIX minis from 1970s

Distributed UNIX workstations + NFS filestore - 1988

TCP/IP, PC-NFS for PCs, CAP etc for Macs

Yellow Pages/NIS directory services

Common University Username (= email LHS for students)

Active Directory synched with NIS from 2001

Identity Management - update New format usernames for accounts from Oct 2008 2 random letters followed by 6 digits New format email addresses for students [email_address] Microsoft Identity Lifecycle Manager service summer 2009 ADAM (Active Directory Application Mode) to replace NIS Parallel running from launch Remote authentication and authorisation OpenAthens subscription for 3 years from 1/8/08 Eduroam for visitors and working away Digital Certificates for accessing research computing resources

New format usernames for accounts from Oct 2008

2 random letters followed by 6 digits

New format email addresses for students [email_address]

Microsoft Identity Lifecycle Manager service summer 2009

ADAM (Active Directory Application Mode) to replace NIS

Parallel running from launch

Remote authentication and authorisation

OpenAthens subscription for 3 years from 1/8/08

Eduroam for visitors and working away

Digital Certificates for accessing research computing resources

So, is IdM Utopia Builded Here?

UCISA Top Concerns 2008

Transatlantic Top Concerns http://www.ucisa.ac.uk/members/surveys/tc

Challenges to IdAM in HEIs Porous boundaries and fluid structures Open campuses, open libraries, open access Open resources – research & T&L outputs Re-organisations, mergers, spin-offs, closures Nomadic academic careers Individual behaviours - PBSK Serendipitous discovery ignores boundaries Research collaborators identified and trusted by personal estimation not external validation Web2.0 take-up - *FREE* of cost/authority/bureaucracy Sharing and trading identities

Porous boundaries and fluid structures

Open campuses, open libraries, open access

Open resources – research & T&L outputs

Re-organisations, mergers, spin-offs, closures

Nomadic academic careers

Individual behaviours - PBSK

Serendipitous discovery ignores boundaries

Research collaborators identified and trusted by personal estimation not external validation

Web2.0 take-up - *FREE* of cost/authority/bureaucracy

Sharing and trading identities

Project FLAME – London School of Economics Technical Strand – investigated systems supporting: Delegated Authority Management (DAM) Attribute Release Policy (ARP) Virtual Organisation Management (VOM) Social study - large scale studies of typical user attitudes, exploring: the extent to which users (students and staff) value and manage their personal data their understanding of what data is held by service providers the extent to which this data is exchanged

Technical Strand – investigated systems supporting:

Delegated Authority Management (DAM)

Attribute Release Policy (ARP)

Virtual Organisation Management (VOM)

Social study - large scale studies of typical user attitudes, exploring:

the extent to which users (students and staff) value and manage their personal data

their understanding of what data is held by service providers

the extent to which this data is exchanged

Project FLAME – Social Study Experiment

Project FLAME – Social Study Experiment What is your LSE username? What is your LSE library number? What is your Facebook password? What is your LSE logon password? What is your term-time address? What is your date of birth? What is your mobile number? What is your credit card number?

What is your LSE username?

What is your LSE library number?

What is your Facebook password?

What is your LSE logon password?

What is your term-time address?

What is your date of birth?

What is your mobile number?

What is your credit card number?

Project FLAME – Social Study Experiment What is your LSE username? What is your LSE library number? What is your Facebook password? What is your LSE logon password? What is your term-time address? What is your date of birth? What is your mobile number? What is your credit card number? 91 % 63 % 40 % 14 % 90 % 73 % 67 % ?

What is your LSE username?

What is your LSE library number?

What is your Facebook password?

What is your LSE logon password?

What is your term-time address?

What is your date of birth?

What is your mobile number?

What is your credit card number?

Project FLAME – Social Study Experiment What is your LSE username? What is your LSE library number? What is your Facebook password? What is your LSE logon password? What is your term-time address? What is your date of birth? What is your mobile number? What is your credit card number? 91 % 63 % 40 % 14 % 90 % 73 % 67 % 30 %

What is your LSE username?

What is your LSE library number?

What is your Facebook password?

What is your LSE logon password?

What is your term-time address?

What is your date of birth?

What is your mobile number?

What is your credit card number?

Risk, Identity and Access Management Vital to mitigate risks: Resource misallocation Breaches of contractual obligations Breaches of confidentiality, integrity and availability Quality assurance failures … Mitigation must always be proportional to risk: Big risks need strong controls Small risks less so … Else Excessive costs Inflexible processes Missed opportunities …

Vital to mitigate risks:

Resource misallocation

Breaches of contractual obligations

Breaches of confidentiality, integrity and availability

Quality assurance failures …

Mitigation must always be proportional to risk:

Big risks need strong controls

Small risks less so …

Else

Excessive costs

Inflexible processes

Missed opportunities …

Links JISC Project FLAME https:// gabriel.lse.ac.uk/twiki/bin/view/Projects/Flame/WebHome UCISA Top Concerns http:// www.ucisa.ac.uk/members/surveys/tc Reading eResearch pages http:// www.reading.ac.uk/e -research Piazza Venetzia Traffic Cop http:// www.youtube.com/watch?v =wBJa0W49ayI

JISC Project FLAME

https:// gabriel.lse.ac.uk/twiki/bin/view/Projects/Flame/WebHome

UCISA Top Concerns

http:// www.ucisa.ac.uk/members/surveys/tc

Reading eResearch pages

http:// www.reading.ac.uk/e -research

Piazza Venetzia Traffic Cop

http:// www.youtube.com/watch?v =wBJa0W49ayI