This English version is only a translation of the Japanese version, and is provided forreference only. In case of discrepancy between the Japanese and English versions, theJapanese version shall prevail and be treated as the correct version.

Operating Policies for GakuNin Participants
Adopted by the Steering Committee for Academic Authentication on October 17, 2013

Article 1. Purpose
This guidance is written to assist members in deployment of the Academic Access Federation“GakuNin”. It has been drawn up by the Steering Committee for Academic Authentication(hereinafter called “Committee”).

Article 2. Description of GakuNin
GakuNin ensures interoperation among the authentication platforms of various universities andresearch organizations.

It also ensures that the authentication mechanisms operated by service

partners are compatible with these authentication platforms.

It is operated based on such

documents as technical specifications and system administration standards specified by theCommittee.

Article 3. Appellation“GakuNin” ("学認" in Japanese) is the formal name of this academic access federation.

Article 4. Definitions
The following terms are used in this document:(i)

Identity Provider: A service that authenticates users and collates attributes about them based
upon information maintained by the organization and provides these authentication results
and attributes to participating organizations (hereafter called the IdP).

(ii)

Service Provider: A service that processes identity information received from the IdP,
including authentication results and attributes(hereafter called the SP).

(iii)

Academic Service: A service that directly supports academic research and education.

(iv)

Metadata: Trust and addressing information for all IdPs and all SPs in GakuNin.

Thismetadata allows any GakuNin member to identify and communicate with any other GakuNinmember.
(v)

This metadata is signed by GakuNin operations.

Attribute: Individual atoms of data about users that may be released by an IdP to an SP.

Article 5. Qualifications of Participant Organizations
An eligible participant is an organization or a part of an organization that qualifies under any of thefollowing items.
(i)

A Japanese university, junior college, college of technology, or inter-university research
institute that intends to deploy an IdP or SP.

(ii)

A Japanese public or private research and development organization; or, an incorporated
administrative agency or government-affiliated corporation that is dedicated to research or
support of research that intends to deploy an IdP or SP.

(iii)

An organization deploying an SP for the purpose of providing academic services toorganizations defined in the preceding items (i) to (ii).

(iv)

An organization deploying an IdP for the purpose of using academic services provided by theorganizations defined in the preceding items (i) to (iii) and whose participation in GakuNin isdecided by the Committee to be beneficial to all GakuNin members.

Article 6. Application for Membership(1) An entity wishing to join GakuNin shall submit an application form.
(2) The application for participation shall also be approved by the leader of the organization.

Article 7. Approval of Participant
The Committee will review the submitted application and the entity will be admitted if it is found tobe eligible.

Article 8. Compliance by Participants
A member shall be compliant with the following:(i)

Do not use GakuNin for purposes other than those defined.

(ii)

Comply with the requirements of this policy and GakuNin system administration standards
specified separately.

(iii)

Do not use GakuNin in ways that result in damages for other GakuNin members.

(iv)

Comply with any other requirements specified separately by the Committee.

Article 9. Structures for Participation
A member shall assign individual(s) to the following roles for each IdP and SP.
(i)

An administrator responsible for policy adherence.

(ii)

Technical operator(s) of the system

Article 10. Administrator(1)

The leader of the organization shall appoint an administrator who ensures that any IdP or SP
registered with GakuNin is operated in accordance with GakuNin policy.

(2)

The individual appointed as administrator must be a section chief, an associate professor, orhigher.

Article 11. Technical Operator(1)

The technical operator is appointed by the administrator and is responsible for the technicaloperation and management of an IdP or SP.

(2)

Multiple technical operators for a single service may be appointed by the administrator.

Article 12. Protection of Information
A person as an administrator shall observe the following items in handling theinformation, attributes, metadata, and certificates used in GakuNin.
(i)Observe the matters provided by Acts and the matters specified by the Committee
for treatment of personal data provided by IdPs.

Article 13. Withdrawal from GakuNin
Any GakuNin member wishing to withdraw from GakuNin shall inform the Committee promptly.

Article 14 Temporary Halt of Participant or Disaffiliation fromGakuNin
The Committee may temporarily disbar or permanently dismiss any participant of GakuNin if
portions of the application are found to be falsified, if a participant interferes with the operation ofGakuNin, or if a participant damages the reputation or goodwill of GakuNin, or the entity is nolonger eligible under article 5, or the entity falls to comply with thesepolicies.

Article 15. GakuNin Outages
GakuNin may declare force majeure when events occur that prevent the operation of GakuNin. TheCommittee must notify members of GakuNin of the situation as soon as possible.

Some possible

outage causes are:(i)

Maintenance or construction work(ii)

Disasters.

Article 16 Investigation Compliance(1)

GakuNin may determine in the course of investigating an adverse event that information may
be required from GakuNin members.

The Committee may ask members to cooperate with

the investigation by supplying information such as usage information, operational
environment data, incident response information, and information about dishonest acts.
(2)

Members shall cooperate in good faith with investigations initiated by the Committee.

Article 17. Liability
The Committee assumes no responsibility in cases falling under any of the following
items.
(i)

The matters suchasdisputes with/damages to/accidents of, members,administrators, persons in charge or users using GakuNin.
(ii)

The matters such as disputes in Article 14-15.

Article 18. Consultation
In case matters arise that need to be dealt with but that are not stipulated inthesepolicies, the member organizations, the Committee and the Secretariat shallconsult with each other in good faith and shall decide on these matters.

Article 19. Miscellaneous Provisions
The Committee shall stipulate guidance on matters that are not stipulated in thisdocument but that are found to be necessary for administration of GakuNin.

Supplementary Provision
These guidelines take effect from January 14, 2014 in Japan time.