RE: Journal of Immunology

[Edward Barrow <edward@copyweb.co.uk>]

Although I cannot vouch for the Journal of Immunology, this definition of
Secure Network looks extremely familiar - it occurs in the model licences
used in UK higher education and in an earlier role I had some input into
its drafting.

The purpose is that there should be good network-level authentication
rather than resource-level authentication. It does place a requirement for
"best practice" in the network administration, but as John Webb points out
your university network should meet those for whole host of other security
reasons besides the concerns of the publisher.

As for walk-ins, the model licences which include this Secure Network
definition make provision for them. There should again be best practice in
the administration of walk-in authentication - which will evolve with
experience.

Edward Barrow
New media copyright consultant
edward@copyweb.co.uk
Important: see http://www.copyweb.co.uk/email/ for the legal status of this
email

On 05 May 2002 19:31, John Webb [SMTP:jwebb@wsu.edu] wrote:
> I think you may asume your university network is secure within this
> definition.  Surely your university network administrator thinks so.
> When you first sit down and turn on or log into your computer at work, you
> are being authenticated in some fashion "consistent with then-current best
> practice and security procedures."  So about the only questions are how
> does the license define "authorized users" and how does the license cover
> the public computers in your library.  It should allow access using the
> Library's public computers by non-affiliated walk-in users of your
> Library. Those computers are also recognized and authenticated by your
> network, even though they don't "belong" to an individual, otherwise they
> wouldn't work. If you don't allow use by walk-in users who aren't
> affiliated, then you have no problem.  The only other issue I can think of
> is wireless.  If you have wireless, I assume your wireless network
> requires authentication.  If it doesn't (which I can't imagine), then
> don't register its IP's, in which case it will be treated as a remote
> site, for which you already require authentication.  I'm at home and don't
> have immediate access to our Journal of Immunonolgy license, but I think
> it fits under all of the above.
>
> John Webb
> jwebb@wsu.edu