Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

For the sake of documenting complete data flows and producint the advisory for the NROs, IdPs and SPs, this data inventory contains the data that is processed by the eduroam core operations, but also NROs, SPs and IdPs. 

List of datasets

Table of Contents
maxLevel1
stylenone

...

Dataset description:
Purpose of processing:
Data source:
Data storage and access:
Data transfer:
Data retention:
Personal data processed:

eduroam NRO

eduroam F-ticks


Dataset description:

Usage log messages for each international and national roaming authentication request.

Purpose of processing:

Log data provides basic statistical information about the service usage. It provides statistics about the number of logins for national and international roaming. The data is sent to the GEANT central operations as requested by the eduroam service definition. Depending on the NRO practices, the data can processed by the NRO for creating usage statistics.

Data source:

F-ticks data are generated by the data from RADIUS authentication requests or responses sent by the SP or IdP, and that transverses the NROs Federation top level Radius servers.

IdPs and SPs can optionally send F-ticks data as well

This happens in the event when a user access eduroam at a visited SP location and authenticates.

Data storage and access:

Authentication data are not stored.

F-ticks data are stored in the SQL database that is operated in the infrastructure provided by CARNet. The raw data is accessible only by the personnel of eduroam operations team.

Data transfer:Authentication data are forwarded to appropriate Federation level RADIUS server in encrypted form.

Depending on the NRO practices, data can be kept and stored by NRO as well.

transfer:

F-ticks data are

not transferred to any other party or system

sent to the eduroam core operations.

Data retention:
F-ticks data are kept permanently. (question)
Depends on the NRO practices
Personal data processed:Yes


Dataset content 

Provided in the eduroam core operations section. 



Dataset content


Data itemIs personal data (DPO fills in)
1

2

3

...