Table of Contents

maxLevel	1
style	none

eduroam user authentication and F-ticks

Dataset description:	Data needed for eduroam authentication for end users. Usage log messages for each international and national authentication result.
Purpose of processing:	Enable eduroam users to use WiFi service when visit another organization or federation using their home identity. Log data Data provides basic statistical information about service usage. It provides statistics about the number of logins for national and international roaming. The data is used for generation of usage statistics that are publicly available at https://monitor.eduroam.org and for reporting to EC and other stakeholders.
Data source:	NROs Federation top level Radius servers. IdPs and SPs can optionally send the F-ticks data as well.
Data storage and access:	Authentication data are not stored. F-ticks data are Data is stored in the SQL database that is operated in the infrastructure provided by CARNet. The raw data is accessible only by the personnel of eduroam operations team.
Data transfer:	Authentication data are forwarded to appropriate Federation level RADIUS server in encrypted form. F-ticks data are Data is not transferred to any other party or system.
Data retention:	Data is F-ticks data are kept permanently.

Dataset content

	Data item	Is personal data (DPO fills in)
1	REALM - As in users EPPN used for the authentication (for example “@education.lu”) - contains the user’s country of origin and the institution of origin
2	Calling-Station-Id - User’s device MAC address
3	Viscountry - ISO country code of the NRO that generated the log message
4	Visinst - Identifier of visited institution i.e. operator-name RADIUS attribute
5	Result - Authentication outcome: OK / FAIL

...