Demo: student verification with IRMA
This page contains an example of using IRMA for verifying whether someone is a student or not. Additionally, the page explains how this works and how this can be used for instance by webshops that wish to give special offers to students. The first button below can be used to check if a visitor actually is a student. The special point of IRMA is its privacy-friendliness: the visitor discloses no other information than the mere fact that (s)he is a student. This "student" property exists as a special IRMA attribute; only the yes/no information in this attribute is revealed to the requesting webpage.
Via the second button it is possible to request additional information, namely the role of the visitor (student or employee) and the name of the university (or educational institute) with which the student/employee is associated. In this way exclusive access can be organised for students and/or employees of a particular institute.
In order to be able to try out yourself the buttons below one needs to have the IRMA app installed with at least the student attribute loaded. This can be done via SURFconext issuance webpage of the Privacy by Design foundation. A succesful check that the visitor is a student gives access to special offers.
A few remarks:
- There are several websites (like Amazon) that offer discounts to students. How they actually check that someone is a student is not always clear. With IRMA this can now be done in an easy, reliable and privacy-friendly manner.
- Via SURFconext email addresses are available too as IRMA attributes. They are not used in this demo in order to avoid identifying data.
- At this stage this attribute issuance is available only for students and staff members of a limited number of institutions in higher eduction in the Netherlands. Are you studying or working at such an institution but does your institution not occur in the list at the SURFconext issuance page? This means that your institution has not "switched on" the connection to the foundation Privacy by Design. In that case you cannot receive attributes via SURFconext. The best thing that you can do is to contact locally at your institution the people responsible for computer support (in particular: identity management) and ask them to send an email to the address support'at'surfconext.nl, with the simple request: Please give the Privacy by Design foundation access as Service Provider to our institution (in Dutch: AUB de stichting Privacy by Design voor onze instelling toelaten als Service Provider).
Back to the IRMA demo overview.