Electronic Authentication for Flexible Learning

Workshop Presentation (5 August 2003)

Chris Connolly, CEO, Galexia Consulting

Overview

Introduction to flexible learning

VET and electronic authentication

Case studies

Legal and regulatory issues

Strategic issues

Strategy document

Flexible Learning

Flexible learning expands choice on what, when, where and how people learn. It supports different styles of learning, including e-learning.

Flexible learning is learner centred and client focused.

The Flexible Learning Framework is built on five goals:» Creative, capable people;

» Supportive technological infrastructure;

» World-class online content;

» Enabling policies; and

» Problem-solving regulation

Authentication

A technical definition of authentication is the process of establishing whether someone or something is who or what its identifier states it is. An authentication process may be enabled by:

» Something you know, like a PIN or password;

» Something you have, as with smartcards, challenge-response mechanisms, or public-key certificates; or

» Something you are, as with positive photo identification, fingerprints, and biometrics.

The key benefit of electronic authentication is that it enables electronic transactions to take place in an environment of trust and confidence. The Internet, for example, is an open network where the community has a low level of trust. However, authentication tools can provide greater confidence in the identity, validity and authenticity of participants, sites and objects.

Electronic Authentication and VET

There are benefits for the VET sector in migrating to a strong, centrally managed, coordinated electronic authentication model. These include:

» Reduction in cheating

» Improved user convenience

» Improved system integrity, operability and flexibility

» Improved cross recognition of assessment and qualifications

The Australian VET sector has not yet advanced beyond ad hoc arrangements in its approach to electronic authentication.

Different forms of electronic authentication are used in individual applications. The choice of electronic authentication tool may be based on availability, the level of understanding of participants, or in some cases on a risk and cost/benefit analysis.

Electronic Authentication Opportunities

Education materials» access to content and

learning objects

Education providers» institutions

» RTOs

» tutors

» Assessors

Participants» learners

» assessment

» skills passports

Relying parties» employers » other education institutions

(cross recognition) » licensing bodies » qualification authorities

Transactions» enrolment » subscription » payment

A “Whole of Sector” Approach

The “whole of sector” approach to authentication in the VET sector faces significant challenges:

Diverse range of organisations, from large TAFE Colleges to small Registered Training Organisations

State and federal complexities

Diverse range of technology available (hardware, software, Internet access, security)

Multiple stakeholders

Plethora of existing identification, enrolment and authentication platforms currently in use

Sensitivity re personal information

Case Studies

University of Phoenix Online» 50,000 students learning in an email environment, relying on high levels of

interaction to supplement simple authentication system.

WestOne» State-wide ‘blended’ learning clearing house with single sign on password and

login authentication.

JISC (UK)» Joint Information Systems Committee of the UK Higher and Further Education

Funding Councils ("the JISC").» Athens is a single ID, single password service: the same ID and password are

used irrespective of which Athens-controlled resource the user wishes to access. The service is location-independent, i.e. the user may authenticate via Athens from home as easily as from the campus.

Career Management Account (USA)» Comprehensive skills passport – pilot used Public Key Infrastructure –

allowing life long learning record and validation of results/qualifications for third parties.

Legal and Regulatory Issues

Numerous legislation and codes considered:» Electronic Transaction Act

» State and federal privacy legislation

» Cybercrime legislation

» VET legislation

» Gatekeeper requirements

Privacy emerged as the most significant legal issue:» Compliance with privacy legislation

» Intruding into student’s personal affairs

» Function creep

» Potential for ongoing surveillance

» Restrictions on user choice

Strategic Direction

The primary conclusion of the Galexia Consulting paper was that electronic authentication (and hence flexible learning) is unlikely to advance further in the VET sector without implementation of a model that involves a central body making decisions about the adoption of electronic authentication across the whole VET sector, determining appropriate electronic authentication solutions, and liaising with other sectors.

A strong national electronic authentication solution across the entire VET sector will not be achieved quickly. The recommendations contemplate a staged migration path.

Recommendations

Recommendation 1 – Develop an electronic authentication strategy for the VET sector

» It is recommended that FLAG advise ANTA CEOs that it is important to develop an electronic authentication strategy for the VET sector and take a high level policy decision to pursue that strategy. ANTA CEOs should determine how such a strategy will be developed.

Recommendation 4 – Increase awareness of electronic authentication in the VET sector

» It is recommended that a coordinated program of general awareness raising and detailed professional development for key participants in the VET sector is undertaken by ANTA.

Recommendations

Recommendation 5 – Coordinate with other education sectors» We recommend the VET sector coordinate its electronic

authentication activities with other education sectors, especially higher education considering their advanced state (through COLIS).

Recommendation 8 – Further research » Further research may be required on a range of strategic issues in

electronic authentication in the VET sector. Examples:– Cross recognition of qualifications– International developments– Jurisdiction issues

Also:» Coordination and liaison with other ANTA projects, especially:

– Unique Client Identifier– Skills passport

Strategy Document

Development of a detailed strategy document - using today’s workshop as a first opportunity to start “filling in” the details

Awareness raising

Coordination with other sectors» Higher education» Schools

Coordination with other projects» Skills passport» Unique Client Identifier

Establish an electronic authentication coordinating committee

Further research» International experience» Emerging technology» Needs of institutions and learners