1 / 12

JPNIC UPDATE ~ Personal Data Protection in JPNIC WHOIS ~

September 7 th , 2005 NIR SIG APNIC 20@Hanoi, Vietnam. JPNIC UPDATE ~ Personal Data Protection in JPNIC WHOIS ~. Toshiyuki Hosaka <hosaka@nic.ad.jp> Japan Network Information Center (JPNIC). Contents. Introduction Measures taken by JPNIC Future Considerations Possible Future models.

rodl
Download Presentation

JPNIC UPDATE ~ Personal Data Protection in JPNIC WHOIS ~

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. September 7th, 2005 NIR SIG APNIC 20@Hanoi, Vietnam JPNIC UPDATE~ Personal Data Protection in JPNIC WHOIS ~ Toshiyuki Hosaka <hosaka@nic.ad.jp> Japan Network Information Center (JPNIC)

  2. Contents • Introduction • Measures taken by JPNIC • Future Considerations • Possible Future models

  3. Introduction • The needs of Personal Data Protection is increasing as the Internet is considered as our social infrastructure today • JPNIC has been tackling with Personal Data Protection in WHOIS since around 2000 • “Personal information protection Law” has been effective since April, 2005 • This presentation introduces the current measures taken and the future considerations by JPNIC to protect personal data in our WHOIS

  4. Some issues in disclosing Information in WHOIS • Disclosed e-mails becomes the target of spam • Tech-c email may not work • Most home-users are not able to handle network trouble/abuse related queries • English e-mail may not be read • Some people feel uncomfortable about their personal information disclosed to the public • We (Japanese) have a choice whether our names and phone number listed on yellow pages • But not in WHOIS

  5. Measures Taken by JPNIC for Personal Data Protection • POCs can be substituted by an LIR (2004.11~) • Creation of “Group Contact Information” (2005.3~) • Similar to “role object” in APNIC • A person’s name not necessary • [Address] field hidden in public WHOIS • E-mail address in [Notify] and [Last Update] fields hidden in public WHOIS (2005.3~) • LIRs can confirm hidden fields of their users via portal We do not hide the whole inetnum object to allow public confirmation of the assignment status (while APNIC does)

  6. JPNIC WHOIS Network Information: a. [Network Number]202.12.30.0/23 b. [Network Name] JP-NET g. [Organization] Japan Network Information Center j. [Address] m. [Administrative Contact] XX1234JP n. [Technical Contact] JP99999999 p. [Name Server] xx.nic.ad.jp y. [Notify] [Assigned Date] 2005/1/1 [Return Date] 2005/4/1 [Last Update] 2005/1/24 12:01:33(JST) Less Specific Info ---------- Japan Network Information Center [Allocation] 202.12.30.0/20 More Specific Info ---------- No Match!! Hidden field Group Contact Information can be registered LIR can substitute POC E-mail hidden

  7. JPNIC WHOIS (2) Group Contact Information Group Contact Information: [Group Handle] JP00000029 [Group Name] IP Department [E-Mail] ip-service@nir.nic.ad.jp [Organization] Japan Network Information Center [Division] IP Department [TEL] [FAX] [Last Update] 2005/03/22 09:44:04(JST)

  8. Other Measures • Stronger authentication by PKI • Test started to receive request forms using digital certificates

  9. PKI and Digital Certificate User authentication by digital certificate JPNIC CA 3. Authenticate 1. Issue certificate 2. Log in Requester Digital certificate JPNIC Resource Management System

  10. Future Considerations • Some home-users still feel uncomfortable about their name being listed on the public WHOIS • LIR workload must be taken into consideration • LIRs have to handle all the queries/complaints concerning their IP address space, if the assignment records are hidden

  11. Possible Future Models • Create one more step to access to POC info? • Expand assignment size registered as the infrastructure (> /29)? • Hide the whole inetnum object for home-users? • Hide the whole inetnum object as a default like APNIC? JPNIC plans to set up a WG with JP community to discuss these models

  12. Questions?

More Related