Aug. 4, 2021
IAM WG Meeting @ APAN52, Virtual / Indonesia

Off‐campus eduroam deployment
and WBA OpenRoaming Update 2021
Hideaki Goto Tohoku University / NII, Japan1

Secure Wi‐Fi?
(Media has been removed.)

https://twitter.com/Devin_Heroux/status/1419092561570893825

https://twitter.com/PabloRochat/s
tatus/1400475642211180547

2

Off‐campus eduroam as digital infrastructureSouth Africa:
eduroam at most universities, addressing digital
divides and COVID-19 (July, 2020)“Extended virtual campuses”
in Ireland (Jan. 2021)

RENU in Uganda:
Town-wide eduroamto help students
learning under COVID-19 (Oct. 2020)

http://www.universitytimes.ie/20
21/01/heanet‐to‐extend‐wifi‐
initiative‐for‐students‐to‐90‐new‐locations/3

Off‐campus eduroam as digital infrastructure

Newer!

HEAnet, Ireland: 160 locations + “eduroam on Dublin Buses” (Mar. 2021)

4

Off‐campus eduroam as digital infrastructure

Jisc, UK (May, 2021)

Newer!

TENET, South Africa (July, 2021)

5

Cityroam, the secure roaming system for Public Wi‐Fi Affordable roaming platform for various Roaming

Consortia and operators (SMB, cities, etc.)
 IdP: eduroam, ANYROAM, Cityroam Cloud IdP, etc.

(planned: telcos/ISPs and cities via OpenRoaming) Our strategies:No roaming fee.
(We make the most of the localecosystem each Free Wi-Fi has.)Utilize existing accounts
as much as possible.
(roaming with telcos/ISPs)
6

New sites of Cityroam eduroam/Cityroam/OpenRoaming service at a wide variety ofvenues.

Conference Center in Nagano(May 2021)
Co-working space in Morioka(OpenRoaming was addedin 2020)

More hotels, co‐working spaces,
conference sites, and others will come.

Hot Spring facility in Nagano(May 2021)

7

New sites of Cityroam
 Nishi-Shinjuku Smart Pole project by Tokyo Met. Govt.
 PoC and pilot service in a Smart City project.
 eduroam, Cityroam, and OpenRoaming will be available.

(already in-service on two poles)

Shinjuku
StationGovt.
Building

8

New sites (?) of Cityroam Mobile eduroam/Cityroam/OpenRoaming Routers Temporary services anywhere.  Fully-managed, easy operation.
 Fast VPN (WireGuard) to protect user/RADIUS traffic.

https://hgot07.hatenablog.com/entry/2021/07/31/232441

9

WBA OpenRoaming Inter-connect telcos, ISPs, City Wi-Fi, etc.
 Based on the Passpoint and the Wireless Roaming

Intermediary eXchange (WRIX) framework.
 PKI and RadSec + Dynamic Peer Discovery
 Similar to eduroam, but in larger scale.
 Two policies using different RCOIs
 Settled: Accounting and intermediary are required.
 Settlement-free:

No roaming fee. Easier onboarding.

eduroam is a Contribution Member of WBA 
and also an OpenRoaming member.
RCOI: Roaming Consortium Organization Identifier10

eduroam–OpenRoaming interconnection
eduroam via OpenRoaming ANPs

Universities providing OpenRoamingservice for visitors and residents.)

IdPs
eduroam ROs

eduroam.org
Default
eduroam-OR
gateway.us.us.jp.jp
via local hubs
or vendors(not necessarilyeduroam’s)

RadSec via hubs
or direct
IdPs

ANP: Access Network Provider

11

How to get on OpenRoaming?
eduroam members (ROs, universities, etc.)
 By simply adding DNS NAPTR records, institutions will beable to accept AuthN requests from OpenRoaming.
 Connection via your national RO, or AP vendor’s solution.
Non-eduroam operators
 Become a WBA member to get the digital certificates foronboarding.
 Membership fee applies. WBAID is assigned.
 Implementer Member is a new and affordable category.

 Get the digital certificates from a WBA agent.
 WBAID with SubID is assigned.
 Subscription fee applies.

12Tokyo 2021 OpenRoaming/Passpoint trial
 OpenRoaming service incubation and deploymentacceleration.
 Some telcos/ISPs are providing a trial service.
 Not only in Tokyo but also across Japan.

13

Please call us if you want todevelop a federation like
Cityroam in your region.
https://cityroam.jp/en/

If you are interested in trying
OpenRoaming, please askHideaki (me) or Paul@SURFnet

Join https://eduroam.slack.com/
14