[go: up one dir, main page]

What is the problem?

Managing IP ranges with your content providers is a time-consuming, inefficient and costly process.

Time – each time your IT department or proxy server provider needs to register an IP address change you need to notify each of your content providers; this can be hundreds of individual publishers and require multiple emails to each. Some, or all, of your users may be denied access to content for as long as this process takes.

Accuracy – manually communicating long strings of numbers is fraught with danger as typos can often limit your ability to access or open up access to others. An error in one digit can have disastrous consequences.

Cost – inaccurate, duplicated and over-lapping IP ranges in publisher access management systems can result in inflated usage statistics which affect your organisation’s understanding of the value of a product and/or your ability to negotiate appropriate pricing.

How it works

For many years PSI has been cleaning up the IP data held by publishers. Our database currently holds over 1.5 billion validated IP addresses from over 70,000 organisations worldwide.

Once you have created your user account you’ll be able to check the data we hold for your organisation and make any necessary amendments. Click on the big blue button in the top right-hand corner of this page to register and access the registry.

In future, you will only need to update your IP details in one place and all publishers will then receive your new, accurate IP data – saving you time and limiting the opportunity for error.

What you need to do

Simply register yourself as a user, check your IPs and start using The IP Registry. Please send any queries to [email protected]

The PSI Block Lists

PSI has developed two block lists designed to help organisations protect themselves from various forms of cyber-crime.

Both block lists are updated regularly and should be downloaded on a regular basis.

The Incoming Block List is a list of IP addresses that have been identified as the source of phishing, spamming, hacking and other forms of cyber-crime.

The Outgoing Block List is a list of domain names and IP addresses of sites that have been identified as malicious and/or illegal. For example, the list includes the domain names of illegal sites like Sci-Hub and LibGen along with other sites from which malware can be inadvertently downloaded to your secure IT systems.

See here for more information about the PSI Block Lists.

FAQs on theIPregistry.org

Q1) How can I access theIPregistry.org?

A1) You need to create a user account to access the data in theIPregistry.org. Click here for instructions to walk you step-by-step through the process.

Q2) How do I update the IP addresses for my organisation?

A2) Click here for step-by-step instructions on how to add or delete an IP address or range.

Q3) A publisher has asked for my Organisation’s PSI Org ID in order to process my renewal or new subscription. Where can I find this information?

A3) Your PSI Org ID is listed with your Organisation details within theIPregistry.org. The publisher will require the 6 figure digit at the end of the ID, which is a persistent identifier (PID). Simply log in to your theIPregistry.org user account to view this information.

Q4) I am not permitted to sign as an authorized representative of the University/Library. Is it possible for theIPregistry to pre-sign the Terms and Conditions and then I can get the document signed and returned to you?

A4) We are always happy to review our T&Cs with individual organisations, please contact us at [email protected] to request a Word version of them. The appropriate organisational representative can sign the document and return it to us. We will then arrange for this to be countersigned and a copy returned to you. This document will supersede any online T&Cs.

Q5) I didn’t add the IP addresses shown on my organisation profile. Where did they come from?

A5) PSI undertook a clean-up of publisher held IP addresses which involved cross matching the data held by over 150 publishers, verifying the data against IANA data and corresponding with individual libraries. The project took 4 years to complete and highlighted the fact that 58% of the IP address data held by publishers was wrong. Many of the IPs listed in theIPregistry.org are the result of this project although we have received many updates to the original data, from both publishers and libraries, since theIPregistry.org went live.

Q6) What does the colour coding in theIPregistry mean?

A6) The green colour code in theIPregistry.org means the IP is verified and correct. Purple coloured IPs are also verified and correct, but the purple colour indicates that the IP is a proxy/remote IP for that organisation. The purple status is used to provide an extra piece of information on theIPregistry.org. Some organisations will also see amber coloured IPs, these IPs are awaiting verification. We don’t want you to have any ambers, if you see any they should be turned green if correct or deleted if incorrect.

Q7) What process is used to verify that IP addresses are correct (i.e. colour coded as green)?

A7) If an IP address has a green status – we believe it is correct because:

  1. a) several publishers provided us with the same IP address – theIPregistry.org was originally created from IP data provided to us by many different publishers if, for example, 10 publishers provided the same IP address for an organisation, this was one of the indicators.
  2. b) we use the online IANA/WHOIS data to double-check if the IP address is listed here for your institution. This information is not always accurate, so only used as a secondary check.
  3. c) the IP address is registered for the same country as the institution.
  4. d) the IP address does not overlap or clash with any other institution we have in theIPregistry.org.

We then ask institutions themselves to register and verify that the IP data we already hold is correct. This is where you can delete old/incorrect IP addresses, if there are any, and add any missing correct IPs. All publishers using our data have written to subscribers to ask that they register with us and confirm the data is correct.

Q8) TheIPregistry.org is free for libraries, but will theIPregistry.org start to charge libraries in future?

A8) No. The publishers must pay to receive updates from theIPregistry.org. The publishers who support us are essentially providing this FREE service for libraries.

Q9) Why do I have to use theIPregistry.org to update my IPs with some publishers?

A9) The publishers that have signed up to receive updates from theIPregistry.org are providing this FREE to use service for their customers because they believe that it will facilitate the process of IP updates. Libraries can use the registry to broadcast IP changes to multiple publishers at the click of a button. For libraries that must currently communicate changes to many different vendors (sometimes over 800 vendors!) theIPregistry.org will greatly reduce the burden. Publishers also hope to reduce the burden on their own staff. Publisher staff must process hundreds of IP address updates every month, they do not have the necessary resources to be able to check and verify these updates so, without theIPregistry.org, errors and inconsistencies become the norm rather than the exception.

Q10) I’d like to be able to allocate different IP addresses to different parts of my organisation so that we can have separate agreements with publishers and different parts of the organisation can subscribe to different content. Is this possible?

A10) Yes, we can build a hierarchy and allocate different IPs to different parts of the hierarchy. Organisations can tell us how the hierarchy should be built to reflect the subscriptions they have.

Q11) My organisation has been split into a hierarchy in theIPregistry.org but we only ever subscribe to content as a single entity. Can my IPs be amalgamated to just one organisation?

A11) Yes, we do not require a hierarchy to be created in any particular way. We prefer for the institutions themselves to tell us how they should be displayed and how their subscriptions should be reflected in theIPregistry.org.

Q12) How do I know which publishers are receiving my updates?

A12) When you log in to your organisation profile, you’ll see a list of all the publishers who are currently receiving your updates via theIPregistry.org. The list is growing, there are now over 100 publishers receiving updates via theIPregistry.org, and each time you sign-in you will see the latest list. The list of participating publishers can be found here. Please note that publishers that are still in the process of integrating with theIPregistry.org do not appear on this list. Publishers will only be listed here when the integration process is complete, and updates are being successfully communicated to the publisher.

Q13) How do I add a publisher to my list?

A13) Each time a new publisher signs up to receive updates via theIPregistry.org they provide us with their list of customers, if you are on the list, we add them to your list of publishers and they automatically start to receive your updates along with all of the other publishers on your list. This process has been designed to keep the workload for librarians down to an absolute minimum.

Q14) I’ve submitted changes to theIPregistry.org. Why don’t these changes show on the organisation profile?

A14) Updates are vetted and verified by theIPregistry team. You’ll receive an email to alert you whether the changes have been approved or rejected. Approved changes submitted from within theIPregistry.org should be live on theIPregistry.org within 48 hours of submission. Rejected updates will be followed up by the team also within this timeframe.

If a request for an IP address update is received from an external source such as a publisher or subscription agent, or an unregistered representative for the organisation, we will always contact the registered user(s) for the organisation to request confirmation before approving the update. This ensures that the designated organisational representative(s) maintain full control of the IP address data for the organisation. It also means that the quickest and most efficient way to submit IP updates is from within theIPregistry.org.

Q15) Do I have to provide IP details in a specific format?

A15) TheIPregistry.org can accept CIDR or whichever format is easiest for our users to supply. We can also accept IPv6 as well as IPv4.

Q16) There are IPs in use at the library that we don’t want to send to publishers, for example those used for walk-in users. Can these be managed from within theIPregistry?

A16) You can add details of these IPs in the notes field for your organisation. This will allow all of your IPR users to be able to access the information. We will look at developing a separate category of IPs within the main IP management field in future.

Q17) Does theIPregistry.org only serve academic libraries? Or are you also serving other types of library?

A17) TheIPregistry.org provides a service for all libraries using IP address authentication to provide access for users. This includes academic, public, corporate and hospital libraries.

Q18) Our data protection officer has told me that IP addresses are personal data and cannot be shared so I don’t think we can use theIPregistry.org. Is this right?

A18) This is a common misconception, however, according to the Information Commissioners Office (ICO) personal data is defined as “…information relating to a person (a ‘data subject’) who can be identified, directly or indirectly…”. IP addresses of organisations cannot be considered as personal information. This has been tested in the European court. In October 2016 the Court of Justice of the European Union ruled that “The dynamic internet protocol address of a visitor constitutes personal data, with respect to the operator of the website, if that operator has the legal means allowing it to identify the visitor concerned with additional information about him which is held by the internet access provider”. We have also received direct clarification of this from the ICO. Only dynamic IP addresses, when used in conjunction with other data, such as logfiles, can be considered personal information. We do not hold any personal data related to users of the organisational IP addresses, nor do we have legal grounds to access this information.

The full ECJ press release can be seen at the following link:

https://curia.europa.eu/jcms/upload/docs/application/pdf/2016-10/cp160112en.pdf

Q19) Who is behind theIPregistry.org?

A19) TheIPregistry.org is run by PSI Ltd — a small, for-profit company based in Oxford, UK. PSI is the brainchild of Andrew and Justin who met while working for one of the larger society publishers. Working closely with both libraries and publishers at that time they recognised a number of problems facing the publishing industry that could only be overcome through communication, collaboration and innovation. One problem was the poor condition of IP address data on publishing systems, whether on systems managed by publishers, platforms, subscription agents, or aggregators.  All of which pose specific concerns regarding usage reporting, security issues, and a host of related challenges. PSI’s objective in developing theIPregistry.org was to create a resource for publishers and libraries that addresses these issues.  In practical terms, the only way to do this was to create a cross industry initiative that works for publishers and libraries alike to eliminate the major inefficiencies inherent in the current system – namely multiple parties communicating, transmitting, re-entering, and editing complex strings of numbers.

Q20) What is the PSI block list?

A20) PSI has developed two block lists designed to help organisations protect themselves from various forms of cyber-crime. The Incoming block list is a list of IP addresses that have been identified as the source of phishing, spamming, hacking and other forms of cyber-crime. This block list can be passed your organisation’s IT department so they can block any activity originating from these IP addresses. This will reduce the number of phishing emails getting through to your network and help to protect your organisation from intrusions. The Outgoing block list is a list of domain names and IP addresses of sites that have been identified as malicious and/or illegal. This list can be used to prevent access to these sites from within your organisation.

Q21) Is theIPregistry.org data used to help publishers identify usage and understand how their content is used?

A21) Yes. One of the advantages to libraries of using theIPregistry.org is that the data is fully auditable. Librarians can view the data used by our publisher partners to report usage metrics and can ensure that it is correct. We are happy to say that there is no personal data involved in this process as we collect data on organisational IP addresses only. We do not collect, or have access to, any data relating to the individuals accessing content. We report the organisational affiliation linked to the IP addresses in question. The publishers using this service do so because they understand the value of usage data along with the need for privacy.

Q22) I manage the IP addresses for a consortium, can I use theIPregistry.org on behalf of my members?

A22) Yes, consortia administrators can use theIPregistry.org, free-of-charge, to submit IP address updates on behalf of members, or you can simply use theIPregistry.org to ensure you are kept up to date with the IP address updates submitted by your members.

As a consortia user you will not be able to self-register for all members of your consortium. Please contact [email protected] with a list of the organisations for which you require access, and the team will set up your account as appropriate.

Once you are registered as a user for an organisation you will automatically receive an alert each time an update is submitted by one of your member organisations. Where member organisations have registered user accounts, they will also receive an automatic alert each time you submit an IP address update on their behalf.

Q23) As an agent I manage the IP address updates for a number of clients, can I use theIPregistry.org on behalf of my clients?

A23) As an agent you can apply to use theIPregistry.org, free-of-charge, on behalf of your customers. To do this please contact [email protected]. Once your application is accepted you will be able to:

  • view the IP addresses listed for your customers.
  • submit IP updates via theIPregistry.org (you will be asked to provide evidence that the update originates from the customer).
  • see if the IPs have already been confirmed by the organisation.

You will need to accept our tailored agent terms & conditions. If you do not wish to use theIPregistry.org you can ask customers to submit their own IP address updates via theIPregistry.org.

These are questions that have been asked by librarians using theIPregistry.org. If you have questions that aren’t answered here, please get in touch with us using [email protected]. You may see your question added to the list.

Subscribe to our mailing list

* indicates required

The Media Education Foundation (MEF) has signed up to receive IP address updates via "http://theIPregistry.org". @MediaEd is encouraging #libraries to register for FREE access to https://theIPregistry.org.
#publishing #publishers #fbf2024 #FrankfurtBookFair2024 #STMFrankfurt

Do you subscribe to @SBLpress content? Make sure your IP data is correct in http://theIPregistry.org to make sure your access to content is set up correctly.
#library #libraryservices #libraries #librarians #librarylife #publishingindustry #publishing #publishers #publisher

Do you subscribe to Penn State University Press content? Make sure your IP data is correct in http://theIPregistry.org to make sure your access to content is set up correctly.
#libraries #publishers #publishing

Aerospace Medical Association (AsMA) has signed up to receive IP address updates via https://theIPregistry.org. @Aero_Med is encouraging #libraries to register for FREE access to https://app.theipregistry.org.
#Library #libraries #publisher #publishers #publishing

We’re happy to say that @GeoScienceWorld has signed up to receive IP address updates with details of verified changes via https://theIPregistry.org. GeoScienceWorld will soon be implementing our APIs to automate the process.
#Library #Libraries #publishing #publishers

GeoScienceWorld is the latest #publisher to sign up to receive IP address updates with details of verified changes via https://theIPregistry.org. @GeoScienceWorld is encouraging #libraries to register for FREE access to https://app.theipregistry.org.
#Library

Do you subscribe to @IllinoisPress content? Make sure your IP data is correct in http://theIPregistry.org to make sure your access to content is set up correctly.
#libraries #library #publishers #publishing

Do you subscribe to @MSUpress content? Make sure your IP data is correct in http://theIPregistry.org to make sure your access to content is set up correctly.
#libraries #library #publishers #publishing

Do you subscribe to @DukePress content? Make sure your IP data is correct in http://theIPregistry.org to make sure your access to content is set up correctly.
#libraries #library #AcademicLibraries

We’re happy to say that Aerospace Medical Association has signed up to receive IP address updates via http://theIPregistry.org. @Aero_Med is encouraging #libraries to register for FREE access to https://theIPregistry.org.
#Library #libraries #publisher #publishers #publishing

Do you subscribe to @ProjectEuclid content? Make sure your IP data is correct in http://theIPregistry.org to make sure your access to content is set up correctly.
#libraries #librarytwitter #librarylife #AcademicLibraries

We're happy to say that GeoScienceWorld is the latest #publisher to sign up to receive IP address updates with details of changes via http://theIPregistry.org.
@GeoScienceWorld is encouraging #libraries to register for FREE access to https://theIPregistry.org.
#publishing #library

Load More...

“I believe it’s a valuable service and I hope that more content providers will keep track of IP changes through here. Just this week I’m auditing our IP addresses with a major aggregator, and their list of our IP addresses is a mess. If they subscribed to the IP Registry, they, their customers, and the accuracy of their customers’ usage data would all benefit greatly.”

“The University of Cambridge warmly supports the IP Registry initiative and looks forward to the greater efficiencies it will bring, not least in reducing the admin overhead with multiple publishers and in ensuring reliability for our usage statistics data”

“… we LOVE the work you are doing – such a great collaboration and time saver for all!”

“I’ve been following this project for a few years and think it was a stroke of genius. It will save a lot of time on my end for sure.”

“I would like to say that the idea where libraries will give their essential data to publishers in only one place is great!”

“It makes me very happy when I receive an email saying that one of our vendors has joined theIPregistry.org. It makes managing our IP addresses so much easier.  Thank you!!”

This is a great service, and I am grateful for the brilliant service and support!

Thanks for the great service that IP Registry provides vendors and libraries.