Electronic Authentication for Flexible Learning Workshop Presentation (5 August 2003) Chris Connolly, CEO, Galexia Consulting

Overview Introduction to flexible learning VET and electronic authentication Case studies Legal and regulatory issues Strategic issues Strategy document

Flexible Learning Flexible learning expands choice on what, when, where and how people learn. It supports different styles of learning, including e- learning. Flexible learning is learner centred and client focused. The Flexible Learning Framework is built on five goals: »Creative, capable people; »Supportive technological infrastructure; »World-class online content; »Enabling policies; and »Problem-solving regulation

Authentication A technical definition of authentication is the process of establishing whether someone or something is who or what its identifier states it is. An authentication process may be enabled by: »Something you know, like a PIN or password; »Something you have, as with smartcards, challenge-response mechanisms, or public-key certificates; or »Something you are, as with positive photo identification, fingerprints, and biometrics. The key benefit of electronic authentication is that it enables electronic transactions to take place in an environment of trust and confidence. The Internet, for example, is an open network where the community has a low level of trust. However, authentication tools can provide greater confidence in the identity, validity and authenticity of participants, sites and objects.

Electronic Authentication and VET There are benefits for the VET sector in migrating to a strong, centrally managed, coordinated electronic authentication model. These include: »Reduction in cheating »Improved user convenience »Improved system integrity, operability and flexibility »Improved cross recognition of assessment and qualifications The Australian VET sector has not yet advanced beyond ad hoc arrangements in its approach to electronic authentication. Different forms of electronic authentication are used in individual applications. The choice of electronic authentication tool may be based on availability, the level of understanding of participants, or in some cases on a risk and cost/benefit analysis.

Electronic Authentication Opportunities Education materials »access to content and learning objects Education providers »institutions »RTOs »tutors »Assessors Participants »learners »assessment »skills passports Relying parties »employers »other education institutions (cross recognition) »licensing bodies »qualification authorities Transactions »enrolment »subscription »payment

A “Whole of Sector” Approach The “whole of sector” approach to authentication in the VET sector faces significant challenges: Diverse range of organisations, from large TAFE Colleges to small Registered Training Organisations State and federal complexities Diverse range of technology available (hardware, software, Internet access, security) Multiple stakeholders Plethora of existing identification, enrolment and authentication platforms currently in use Sensitivity re personal information

Case Studies University of Phoenix Online »50,000 students learning in an environment, relying on high levels of interaction to supplement simple authentication system. WestOne »State-wide ‘blended’ learning clearing house with single sign on password and login authentication. JISC (UK) »Joint Information Systems Committee of the UK Higher and Further Education Funding Councils ("the JISC"). »Athens is a single ID, single password service: the same ID and password are used irrespective of which Athens-controlled resource the user wishes to access. The service is location-independent, i.e. the user may authenticate via Athens from home as easily as from the campus. Career Management Account (USA) »Comprehensive skills passport – pilot used Public Key Infrastructure – allowing life long learning record and validation of results/qualifications for third parties.

Legal and Regulatory Issues Numerous legislation and codes considered: »Electronic Transaction Act »State and federal privacy legislation »Cybercrime legislation »VET legislation »Gatekeeper requirements Privacy emerged as the most significant legal issue: »Compliance with privacy legislation »Intruding into student’s personal affairs »Function creep »Potential for ongoing surveillance »Restrictions on user choice

Strategic Direction The primary conclusion of the Galexia Consulting paper was that electronic authentication (and hence flexible learning) is unlikely to advance further in the VET sector without implementation of a model that involves a central body making decisions about the adoption of electronic authentication across the whole VET sector, determining appropriate electronic authentication solutions, and liaising with other sectors. A strong national electronic authentication solution across the entire VET sector will not be achieved quickly. The recommendations contemplate a staged migration path.

Recommendations Recommendation 1 – Develop an electronic authentication strategy for the VET sector »It is recommended that FLAG advise ANTA CEOs that it is important to develop an electronic authentication strategy for the VET sector and take a high level policy decision to pursue that strategy. ANTA CEOs should determine how such a strategy will be developed. Recommendation 4 – Increase awareness of electronic authentication in the VET sector »It is recommended that a coordinated program of general awareness raising and detailed professional development for key participants in the VET sector is undertaken by ANTA.

Recommendations Recommendation 5 – Coordinate with other education sectors »We recommend the VET sector coordinate its electronic authentication activities with other education sectors, especially higher education considering their advanced state (through COLIS). Recommendation 8 – Further research »Further research may be required on a range of strategic issues in electronic authentication in the VET sector. Examples: –Cross recognition of qualifications –International developments –Jurisdiction issues Also: »Coordination and liaison with other ANTA projects, especially: –Unique Client Identifier –Skills passport

Strategy Document Development of a detailed strategy document - using today’s workshop as a first opportunity to start “filling in” the details Awareness raising Coordination with other sectors »Higher education »Schools Coordination with other projects »Skills passport »Unique Client Identifier Establish an electronic authentication coordinating committee Further research »International experience »Emerging technology »Needs of institutions and learners