Q1) How can I access theIPregistry.org?
A1) You need to create a user account to access the data in theIPregistry.org. Click here for instructions to walk you step-by-step through the process.
Q2) How do I update the IP addresses for my organisation?
A2) Click here for step-by-step instructions on how to add or delete an IP address or range.
Q3) A publisher has asked for my Organisation’s PSI Org ID in order to process my renewal or new subscription. Where can I find this information?
A3) Your PSI Org ID is listed with your Organisation details within theIPregistry.org. The publisher will require the 6 figure digit at the end of the ID, which is a persistent identifier (PID). Simply log in to your theIPregistry.org user account to view this information.
Q4) I am not permitted to sign as an authorized representative of the University/Library. Is it possible for theIPregistry to pre-sign the Terms and Conditions and then I can get the document signed and returned to you?
A4) We are always happy to review our T&Cs with individual organisations, please contact us at [email protected] to request a Word version of them. The appropriate organisational representative can sign the document and return it to us. We will then arrange for this to be countersigned and a copy returned to you. This document will supersede any online T&Cs.
Q5) I didn’t add the IP addresses shown on my organisation profile. Where did they come from?
A5) PSI undertook a clean-up of publisher held IP addresses which involved cross matching the data held by over 150 publishers, verifying the data against IANA data and corresponding with individual libraries. The project took 4 years to complete and highlighted the fact that 58% of the IP address data held by publishers was wrong. Many of the IPs listed in theIPregistry.org are the result of this project although we have received many updates to the original data, from both publishers and libraries, since theIPregistry.org went live.
Q6) What does the colour coding in theIPregistry mean?
A6) The green colour code in theIPregistry.org means the IP is verified and correct. Purple coloured IPs are also verified and correct, but the purple colour indicates that the IP is a proxy/remote IP for that organisation. The purple status is used to provide an extra piece of information on theIPregistry.org. Some organisations will also see amber coloured IPs, these IPs are awaiting verification. We don’t want you to have any ambers, if you see any then they should be turned green if correct or deleted if incorrect.
Q7) What process is used to verify that IP addresses are correct (i.e. colour coded as green)?
A7) If an IP address has a green status – we believe it is correct because:
- a) several publishers provided us with the same IP address – theIPregistry.org was originally created from IP data provided to us by many different publishers if, for example, 10 publishers provided the same IP address for an organisation, this was one of the indicators.
- b) we use the online IANA/WHOIS data to double-check if the IP address is listed here for your institution. This information is not always accurate, so only used as a secondary check.
- c) the IP address is registered for the same country as the institution.
- d) the IP address does not overlap or clash with any other institution we have in theIPregistry.org.
We then ask institutions themselves to register and verify that the IP data we already hold is correct. This is where you can delete old/incorrect IP addresses, if there are any, and add any missing correct IPs. All publishers using our data have written to subscribers to ask that they register with us and confirm the data is correct.
Q8) TheIPregistry.org is free for libraries, but will theIPregistry.org start to charge libraries in future?
A8) No. The publishers must pay to receive updates from theIPregistry.org. The publishers who support us are essentially providing this FREE service for libraries.
Q9) Why do I have to use theIPregistry.org to update my IPs with some publishers?
A9) The publishers that have signed up to receive updates from theIPregistry.org are providing this FREE to use service for their customers because they believe that it will facilitate the process of IP updates. Libraries can use the registry to broadcast IP changes to multiple publishers at the click of a button. For libraries that must currently communicate changes to many different vendors (sometimes over 800 vendors!) theIPregistry.org will greatly reduce the burden. Publishers also hope to reduce the burden on their own staff. Publisher staff must process hundreds of IP address updates every month, they do not have the necessary resources to be able to check and verify these updates so, without theIPregistry.org, errors and inconsistencies become the norm rather than the exception.
Q10) I’d like to be able to allocate different IP addresses to different parts of my organisation so that we can have separate agreements with publishers and different parts of the organisation can subscribe to different content. Is this possible?
A10) Yes, we can build a hierarchy and allocate different IPs to different parts of the hierarchy. Organisations can tell us how the hierarchy should be built to reflect the subscriptions they have.
Q11) My organisation has been split into a hierarchy in theIPregistry.org but we only ever subscribe to content as a single entity. Can my IPs be amalgamated to just one organisation?
A11) Yes, we do not require a hierarchy to be created in any particular way. We prefer for the institutions themselves to tell us how they should be displayed and how their subscriptions should be reflected in theIPregistry.org.
Q12) How do I know which publishers are receiving my updates?
A12) When you log in to your organisation profile, you’ll see a list of all the publishers who are currently receiving your updates via theIPregistry.org. The list is growing, there are now over 100 publishers receiving updates via theIPregistry.org, and each time you sign-in you will see the latest list.
Q13) How do I add a publisher to my list?
A13) Each time a new publisher signs up to receive updates via theIPregistry.org they provide us with their list of customers, if you are on the list, we add them to your list of publishers and they automatically start to receive your updates along with all of the other publishers on your list. This process has been designed to keep the workload for librarians down to an absolute minimum.
Q14) I’ve submitted changes to theIPregistry.org. Why don’t these changes show on the organisation profile?
A14) Updates are vetted and verified by theIPregistry team. You’ll receive an email to alert you whether the changes have been approved or rejected. Approved changes should be live on theIPregistry.org within 48 hours of submission. Rejected updates will be followed up by the team also within this timeframe.
Q15) Do I have to provide IP details in a specific format?
A15) TheIPregistry.org can accept CIDR or whichever format is easiest for our users to supply. We can also accept IPv6 as well as IPv4.
Q16) There are IPs in use at the library that we don’t want to send to publishers, for example those used for walk-in users. Can these be managed from within theIPregistry?
A16) You can add details of these IPs in the notes field for your organisation. This will allow all of your IPR users to be able to access the information. We will look at developing a separate category of IPs within the main IP management field in future.
Q17) Does theIPregistry.org only serve academic libraries? Or are you also serving other types of library?
A17) TheIPregistry.org provides a service for all libraries using IP address authentication to provide access for users. This includes academic, public, corporate and hospital libraries.
Q18) Our data protection officer has told me that IP addresses are personal data and cannot be shared so I don’t think we can use theIPregistry.org. Is this right?
A18) This is a common misconception, however, according to the Information Commissioners Office (ICO) personal data is defined as “…information relating to a person (a ‘data subject’) who can be identified, directly or indirectly…”. IP addresses of organisations cannot be considered as personal information. This has been tested in the European court. In October 2016 the Court of Justice of the European Union ruled that “The dynamic internet protocol address of a visitor constitutes personal data, with respect to the operator of the website, if that operator has the legal means allowing it to identify the visitor concerned with additional information about him which is held by the internet access provider”. We have also received direct clarification of this from the ICO. Only dynamic IP addresses, when used in conjunction with other data, such as logfiles, can be considered personal information. We do not hold any personal data related to users of the organisational IP addresses, nor do we have legal grounds to access this information.
The full ECJ press release can be seen at the following link:
Q19) Who is behind theIPregistry.org?
A19) TheIPregistry.org is run by PSI Ltd — a small, for-profit company based in Oxford, UK. PSI is the brainchild of Andrew and Justin who met while working for one of the larger society publishers. Working closely with both libraries and publishers at that time they recognised a number of problems facing the publishing industry that could only be overcome through communication, collaboration and innovation. One problem was the poor condition of IP address data on publishing systems, whether on systems managed by publishers, platforms, subscription agents, or aggregators. All of which pose specific concerns regarding usage reporting, security issues, and a host of related challenges. PSI’s objective in developing theIPregistry.org was to create a resource for publishers and libraries that addresses these issues. In practical terms, the only way to do this was to create a cross industry initiative that works for publishers and libraries alike to eliminate the major inefficiencies inherent in the current system – namely multiple parties communicating, transmitting, re-entering, and editing complex strings of numbers.
Q20) What is the PSI block list?
A20) PSI has developed two block lists designed to help organisations protect themselves from various forms of cyber-crime. The Incoming block list is a list of IP addresses that have been identified as the source of phishing, spamming, hacking and other forms of cyber-crime. This block list can be passed your organisation’s IT department so they can block any activity originating from these IP addresses. This will reduce the number of phishing emails getting through to your network and help to protect your organisation from intrusions. The Outgoing block list is a list of domain names and IP addresses of sites that have been identified as malicious and/or illegal. This list can be used to prevent access to these sites from within your organisation.
Q21) Is theIPregistry.org data used to help publishers identify usage and understand how their content is used?
A21) Yes. One of the advantages to libraries of using theIPregistry.org is that the data is fully auditable. Librarians can view the data used by our publisher partners to report usage metrics and can ensure that it is correct. We are happy to say that there is no personal data involved in this process as we collect data on organisational IP addresses only. We do not collect, or have access to, any data relating to the individuals accessing content. We report the organisational affiliation linked to the IP addresses in question. The publishers using this service do so because they understand the value of usage data along with the need for privacy.
These are questions that have been asked by librarians using theIPregistry.org. If you have questions that aren’t answered here, please get in touch with us using [email protected]. You may see your question added to the list.