The hotel is a public Internet site, and the WIFI authenticated not just to protect against internet activity, but more importantly to meet the requirements for Internet security and public security auditing."Just put a real name on it."In fact, certification is only the first step: logs are being kept, reports are being checked, data protection packages are not in place. This piece, taking into account our experience with the hotel service, says how far compliance is going to go.
Let's get to the specific requirements of local public security.
The local requirements for access to accommodation are not identical. Some require only real names and logs, some require access to local public Internet security management platforms, or extra regulations for foreign hotels. The first step in compliance is not to buy systems, but to go to the territorial security department to ask questions about specific local requirements, preferably with written specifications or matching files. We have seen hotels build a set of local standards, and the local demand for access to platforms has been reversed. This cost could have been avoided by one consultation. Don't worry, asking again is the most economical way to do it.
The real name information is traceable.
The core of compliance is"We'll find someone if something happens."The identification information collected during authentication must be real and can be matched to the specific natural person. The mobile number is a basic tool, because the cell phone number itself is actually named; for more demanding scenarios, an ID may be required. Note that the actual name information collected must be linked to the Internet Behaviour log, which means that at some point in time an IP is used and can be found. If authentication is certified and the log on the web is log on the log, the real name is not match.
The logs have both the contents and the length of time.
The logs are not random. Usually they need to be kept, including online accounts, corresponding real names, downline time, assigned IP addresses, and visiting target information. There is a clear requirement for more than six months in the long term, and there are some longer places. Logs must be complete, non-retigable, and stored with sufficient capacity planning. A full hotel can produce a log volume every day, which may be fully stored for two months if it is not planned, old logs will be covered and left unattained only when checked.
Follow up with the PSP.
If local access is required to the public access safe management platform, this interface often has a specific protocol and data format, and requires a dedicated line or VPN channel to follow the approval process. The connection involves a network of agencies, platforms, hotels, systems firms, and many cycles. This needs to be followed up by an individual who keeps track of each link. Once the match is completed, it must be verified whether the data are properly reported and the fields that are reported are in accordance with the requirements.
Personal information collected must also be protected by law.
Compliance is a two-way process. On the one hand, it is necessary to satisfy public security audits and collect real names; on the other hand, the cell phone numbers and identity information collected are personal information, which the hotel has an obligation to protect from abuse or disclosure. The system should be encrypted when storing such information, access control must be exercised and no full customer information can be exported by front desk.
Access to the Internet for visitors and staff should also be managed
The number of visitors can be certified in light form, but not completely. Hotel staff have to be connected to the network and managed. In compliance planning, all people who can connect to the hotel are screened and made sure that they do not bypass certification.
You must always be able to cooperate with the inspection.
The inspection is often a surprise, requiring that an Internet record be provided for a certain time period and someone’s Internet trail at short notice. The system should easily search and export logs by time, by account number, by IP, rather than temporarily looking to the vendor for half a day of remote operation.
The system of authenticating the live-name web access to hotels is certified, loged, reported, protected and checked together for a set of things. Any missing link is not really compliant.