280 likes | 419 Views
Technical Aspects of Authenticating Patrons. Jonathan Woltz Southwestern Oklahoma State University Thursday, March 9, 2000. or. Remote Patron Access: No-Tech Versus High-Tech. The problem:. It’s not who you are -- it’s where your are. How do you choose a remote authentication solution?.
E N D
Technical Aspects of Authenticating Patrons Jonathan WoltzSouthwestern OklahomaState University Thursday, March 9, 2000
or ... Remote Patron Access:No-Tech Versus High-Tech
The problem: It’s not who you are -- it’s where your are.
How do you choose a remote authentication solution? • Scalability • How well does it work as the number of patrons and/or resources grow?
How do you choose a remote authentication solution? • Cost • Some are free. Others require software and hardware that can cost a lot of money.
How do you choose a remote authentication solution? • Ease of use • Is it easy for patrons to use? • How much time will you spend helping remote patrons troubleshoot their access problems?
How do you choose a remote authentication solution? • Security • How well does the solution protect your database from unauthorized use?
How do you choose a remote authentication solution? • Library Technical Expertise • Does your solution require advanced computer skills to install and maintain?
How do you choose a remote authentication solution? • Scalability • Cost • Ease of use • Security • Library Technical Expertise
The No-Tech Solution • Give each patron the database password. • Scalability? • Cost? • Ease of use? • Security? • Library Technical Expertise?
High-Tech Solution I • Use a proxy server. • How does a proxy server work? • A proxy server is a server installed as part of the library network. Library patrons connect to remote databases through the proxy server. The remote database only sees the IP of the proxy server, so the patron is allowed access.
Proxy Servers • Scalability? • Cost? • Ease of use? • Security? • Library Technical Expertise?
High-Tech Solution II • Use Z39.50 • The Z39.50 standard provides a way for the library to transmit a username and password to a remote database.
Z39.50 • Scalability? • Cost? • Ease of use? • Security? • Library Technical Expertise?
High-Tech Solution III • Referrer URL • Each time you go to a new web page, the URL of the previous page is transmitted. So ... • Put a page on the library site with links to databases. Limit access to the page to library patrons. • The database allows access when the referring page is the page on the library’s web site.
Referrer URL • Scalability? • Cost? • Ease of use? • Security? • Library Technical Expertise?
High-Tech Solution IV • Obvia Remote Database Access (RDA) Service • Claims to be a “turnkey solution” running on a server at the library or at Obvia’s site. • Library is responsible for entering patron data. Obvia handles the connection to vendor databases. • More info: www.obvia.com
In conclusion ... • There is no single best solution. • If possible, make remote access to library resources part of your institution’s overall effort to make services available to remote users.
For more information ... • Articles on remote access • Bouchard, Kerry. Authorization/Authentication for Patron Remote Access to Electronic Resources.http://lib.tcu.edu/www/staff/bouchard/ugc2000/remoteaccess.htm • Graham, Krista. Proxy Servers and Library Instruction. LOEX News, v.26(4), p.4-5.
For more information ... • Articles on remote access • Kambitsch, Tim. Patron Authentication for Remote Access to Premium Data Services.http://www.dayton.lib.oh.us/~kambitsch/referral.html
For more information ... • Articles on remote access • Sheehan, Mark and Porter, Allen. Authenticated Off-Net Access to Commercial Library Resources.http://www.educause.edu/ir/library/html/cem9920.html
Product Information ... • Directory of proxy server products:http://serverwatch.internet.com/proxyservers.html • EZProxyhttp://www.usefulutilities.com • Obviahttp://www.obvia.com/ • Squid Proxy Serverhttp://www.squid-cache.org/
This presentation ... http://www.swosu.edu/~woltzj/workshop/rpa.htm