Table of Contents

maxLevel	1
style	none

eduroam

...

core service (to-do)

logs of ETLR servers

Dataset description:	~~Data needed for eduroam authentication for end users.~~ Usage log messages for each international and national roaming authentication resultrequest.
Purpose of processing:	~~Enable eduroam users to use WiFi service when visit another organization or federation using their home identity.~~ Log data provides basic statistical information about service usage. It provides statistics about the number of logins for national and international roaming. The data is used for generation of usage statistics that are publicly available at https://monitor.eduroam.org and for reporting to EC and other stakeholders.
Data source:	NROs Federation top level Radius servers. ~~IdPs and SPs can optionally send F-ticks data as well.~~
Data storage and access:	~~Authentication data are not stored.~~ F-ticks data are stored in the SQL database that is operated in the infrastructure provided by CARNet. The raw data is accessible only by the personnel of eduroam operations team.
Data transfer:	~~Authentication data are forwarded to appropriate Federation level RADIUS server in encrypted form.~~ F-ticks data are not transferred to any other party or system.
Data retention:	F-ticks data are kept permanently.
Personal data processed:	NoYes

	Data item	Is personal data (DPO fills in)
1	REALM - As in users EPPN used for the authentication (for example “@education.lu”) - contains the user’s country of origin and the institution of origin	No
2	Calling-Station-Id - User’s device MAC address	No
3	Viscountry - ISO country code of the NRO that generated the log message	No
4	Visinst - Identifier of visited institution i.e. operator-name RADIUS attribute	No
5	Result - Authentication outcome: OK / FAIL	No

...