eduroam

eduroam. It is a global roaming service that provides secure, federated network access for students, researchers, and staff from participating institutions. The service allows users to authenticate at any participating location using their home institution's credentials, facilitating international academic collaboration. It is coordinated internationally by the GÉANT association and operates in over 100 territories worldwide.

Overview

The primary purpose of the service is to enable seamless internet connectivity for the international research and education community. It functions as a federation of identity providers and service providers, built upon a hierarchical system of national and regional roaming consortiums. This structure allows a visiting user from a university in Japan to easily connect at a library in Germany without needing local credentials. The underlying technology relies heavily on the IEEE 802.1X standard and the RADIUS protocol to manage authentication requests across different administrative domains.

Technical operation

The technical architecture is based on a distributed system of proxy servers that route authentication requests. When a user attempts to connect, the request is forwarded from the local access point through a chain of RADIUS servers, eventually reaching the user's home institution. This process utilizes a standardized namespace structure, where a user's network access identifier includes their home domain. Core components include the eduroam Configuration Assistant Tool (CAT) for simplifying setup and the Monitoring (EDM3) system for ensuring service reliability. The infrastructure supports both Wi-Fi and, in some deployments, wired network connections.

Security and authentication

Security is paramount, employing strong encryption and authentication mechanisms. User credentials are never passed to the visited institution; instead, the home institution cryptographically verifies the user's identity. The service mandates the use of WPA2-Enterprise or WPA3-Enterprise for wireless security, with Transport Layer Security (TLS) protecting the authentication conversation. Certificates from trusted authorities are used to validate servers, preventing man-in-the-middle attacks. Policies are enforced by each participating university or research institute according to their own security policy.

Deployment and management

Deployment is managed at national levels by respective National Research and Education Network (NREN) organizations, such as Internet2 in the United States or JISC in the United Kingdom. These entities operate the national RADIUS infrastructure and enforce compliance with common technical and policy frameworks. Local institutions, like the Massachusetts Institute of Technology or the University of Oxford, then integrate their own identity management systems. The global coordination by GÉANT ensures interoperability through the eduroam Policy Service Definition and compliance testing.

Participating institutions and coverage

Participation includes thousands of institutions across the globe, encompassing major universities, colleges, and research centers. Notable participants include Stanford University, ETH Zurich, the Max Planck Society, and the University of Tokyo. The service is available at countless campuses, but also in associated locations like public libraries, train stations, and museums in some cities. Dense coverage exists across Europe and North America, with rapidly expanding participation in regions like Asia-Pacific and Latin America.

History and development

The concept originated in 2002 within the TERENA task force, formerly known as the Trans-European Research and Education Networking Association. A pilot project involving several European NRENs proved successful, leading to a full production service launch in 2003. Key early adopters included SURFnet in the Netherlands and DFN in Germany. The governance was later transferred to the GÉANT project, which oversaw its expansion beyond Europe. Major milestones include its adoption across the National Science Foundation network in the United States and formal recognition by bodies like the European Commission.