Open source security is cool for schools

Schools should implement an open source authentication system to give parents and pupils secure access to online content, says a government organisation.

Becta, the UK government's education IT strategy organisation, is recommending that schools use the Shibboleth authentication system, based on open source software developed by the Internet2 community.

Shibboleth acts as a transport mechanism built on top of schools' existing infrastructure to allow them to exchange information securely.

It is a federated identity management system, and provides each user with a single ID, making it easier to access content.

The government's National Education Network aims to provide every teacher and pupil with a consistent set of services and applications, and authentication, hosting and content delivery services are central to this, Becta said.

The group also said widespread use of the system will make it easier and cheaper for content providers because they won't have to worry about building their own authentication systems.

Shibboleth will meet public sector best-value requirements since it is open source, based on open standards and able to build upon an existing infrastructure, Becta said.

Paul Shoesmith, Becta's assistant director of technology policy and delivery, said in a statement: "Shibboleth should be adopted as an integral component in the strategic approach to the future development of ICT in education, skills and children's services. We are recommending that all Regional Broadband Consortium and Local Education Authorities use this system for school online resource authentication and authorisation."

Becta is now working on an implementation road map to manage the deployment of Shibboleth across the schools sector.