# The Campus as a Smart City: University of Malaga Environmental, Learning, and Research Approaches
## 3 UMA IoT and Telecommunication Infrastructure
### Supported Learning  
One key element in the activity of the University of Malaga is the teaching of cellular telecommunications. The presence of main companies of this sector in the Malaga area makes associated learning activities a key task of the Telecommunication School.  
The teaching of cellular communications and especially cellular network management have been classically focused on theory classes describing the main elements, protocols, and technologies associated with the technology and its deployment. Although this provides a firm basis for their application in real work, practice lessons are also considered very relevant for the proper training of the students. To support these, different subjects of the telecommunications master studies have recently incorporated the use of UMAHetNet into their planning. In this way, the possibilities of experiencing the management of a real cellular network are available to the students, including the access to the diverse sources of information collected by the network (events, alarms, counters, traces [29]). They can also present the available configuration actions. Moreover, the network can be used to support drive test measurements [30] without data limits or restrictions.  
However, providing access for the students includes some challenges. Firstly, the number of computers with access to the Virtual Private Network (VPN) that all UMAHetNet elements are connected to is very limited. Secondly, any possible interference with the research work or damage to the infrastructure has to be avoided. To do so, a multi-layer security scheme is put in place, establishing access restrictions at device, location, user, application, and action levels. Also, accountability of the students' executed actions is supported.  
This security scheme is presented in Figure 8, which also shows its correspondence to the layers of the proposed Smart-Campus framework in Figure 5. Here, the distinct phases of access control that the user must cross to make use of the network management system can be observed:  
1. The lessons are performed in a specific room with desktop computers connected to the department network. The computers, equipped with a Windows-based operative system (O.S.), are accessible using a student account with limited user rights.
2. Once logged into their local O.S., the students must connect to a remote server. This is equipped with two network cards, one connected to the general UMA network and the other to the UMAHetNet VPN.
3. The access to this server is performed through Remote Desktop. The account provided to the students is application (APP)-restricted: when opening the session, it automatically executes the MGMT platform without allowing the student to open any other application. A different remote O.S. account is also made available to the students but is limited to accessing the platform documentation.
4. Accessing the MGMT platform also implies its own user login. This provides access control, the definition of the different level of permissions (the specific monitoring and configuration actions allowed to the user), as well as the storage of the log of past user actions. In this way, the students are also provided with specific credentials, and its actions over the MGMT platform are fully controlled and traced.
5. Moreover, all the provided credentials are valid only temporarily and only in time periods associated with lessons in order to avoid activity outside those hours.