PennNet IDs to move aside for secure new PennKey

Students and employees attempting to use their current PennNet IDs after Oct. 13 may be in for a rude surprise -- they will no longer work.

As part of a large overhaul to tighten Internet security throughout the University community, administrators are overhauling the current PennNet ID authentication system and replacing it with the new PennKey System.

"PennKey is the fundamental next step in our ever-evolving enhancement of access security," Vice President of Information Systems and Computing Robin Beck said. "It is an authentication system as opposed to an authorization system."

Similar to the PennNet ID, students and employees will have a username known as their PennKey along with a password to access many of the Universities networked systems and services, including Blackboard, Penn InTouch and campus computer laboratories.

PennKey deals specifically with advanced password encryption designed to keep sensitive information confidential.

The system will be kerberized -- a method of electronic authentication that does not transmit passwords over the network -- and will use mathematical cryptography to ensure maximum security.

"As the software to crack passwords gets stronger, we have corresponded by tightening our security," University Information Security Officer and PennKey Project Leader Dave Millar said.

"We are using the same software to check and screen student passwords that could eventually be used against us by people trying to break into the system," he explained.

Currently, the University is in a PennKey prep period where only students or employees with jobs providing computer support and system administration are encouraged to register PennKey IDs.

The PennKey priority period begins Monday, Sept. 30 and runs through midnight on Sunday, Oct. 13. During this period, all students will be encouraged to register their PennKey IDs. Publicity is also planned for this time period to promote awareness.

As of now, the majority of the student body is unaware of upcoming changes in the PennNet system.

"I didn't know that a PennKey system was going to be put in place," College senior Matthew Swartz said. "I'm not sure what that is."

However, a select number of students involved in computer support, such as Information Technology Advisers, have been updated on the changes.

Engineering junior James Hammond is an ITA in the college house system who has already switched to a PennKey ID.

"We were encouraged to change to PennKey because of a lecture in ITA training," he said. "They wanted us to do it now so we were familiar with the process and could help students when they have to register."

In order to register, current students and employees must know their PennNet ID and password.

Students are encouraged to visit www.upenn.edu/computing/email/pswd_guide.html for information regarding the rules in creating their passwords, as well as www.upenn.edu/computing/pennkey/index.html for general information concerning PennKey.

Please note All comments are eligible for publication in The Daily Pennsylvanian.