SecurePurdue > I2A2 > Managing Support for PUID

PUID System On-Line Documentation

The PUID system assigns PUIDs to persons and gives authorized staff the ability to verify persons’ relationships with the University.  The PUID is a ten-digit identification number, formatted as xxxxx-xxxxx and assigned to each person based on his or her unique relationship with the University.  The ability to determine whether the person is or has been a student or an employee is important, especially when information about that person needs to be shared across systems.

The PUID is not considered to be a public identifier, and should not be published in a directory or used as an identifier externally to the Purdue University system.

The Purdue Person Search (PPS) Application

The Purdue Person Search (PPS) application provides web access to the data stored by the PUID system, and it provides facilities for managing PUID system data.

Who owns the PUID system and PPS application?

Information Technology at Purdue (ITAP) owns the PUID system and the PPS application.  Data from participating operational systems are fed to the PUID system, and are stored in an Oracle database accessible through I2A2 login.  For additional information look here.

The data owners currently include Student Services and Human Resource Services, although it is anticipated that other offices will be added.  Each office has designated staff members who are system users.  System users have been granted access to the PPS application.  System users are responsible for adding new people to Purdue University systems and provide daily support to PUID.  The integrity of the data included in the PUID system is the responsibility of the data owners.

Who is in the PUID system?

The PUID system was populated in March 2000 with any person who had a student (SI) record or a employee (HRS) record.  Students and Purdue University employees from all Purdue campuses are included in the database.

Requesting Access to the PUID system - the PPS application

Access to the PUID system is through the PPS application. Requests for access are made through the Data Steward in either the Human Resource Services or Student Services.  See the following URL for the name and contact information for the Data Stewards:  http://www.itap.purdue.edu/ea/stewards/.

To request PPS access, use the Purdue Person Search Access Form and submit it to the appropriate Data Steward.

In making access requests, the data owner must identify the Purdue University employee and the business need.  Once the Data Steward has approved the access request, the staff member is given access to PPS.

The Data Steward will use PPS to verify the employee and department.  Within the same application, the Data Steward also will confirm whether the employee’s career account is “coordinated” with other accounts the staff member has.  If the accounts are not coordinated, the person’s alias will be the PUID.  To be able to access the PUID system, the employee must have a Purdue University career account.  The Data Steward will contact the employee and direct them to the ITaP Customer Service Center to coordinate their accounts, or complete a Form 10.  For additional information on coordinated logins, look here.

The Data Steward, collaboratively with the data owner, decides the type of access rights that are granted to the system user.  Possible assignments include: PUID read only access; and update capability to records for one or more relationships.  In addition, the Data Steward and the data owner can decide whether the person who is given rights can update capability to other staff.  The latter assignment is typically done for someone who supervises a work area.

How PUID Works

Each night the PUID system is fed updates from each participating system.  Currently, Human Resource Services (HRS) and Student Information (SI) are the participating systems.  The first update to the PUID system changes system keys, specifically the student identification number from the Student system and the Operational System ID (OpSysID) from the HRS system.  The second update is made from data that have changed in the participating system.  These are changes to data in records that are in the PUID system and new records that have not been added to the PUID system.  Changes to system keys and changes to data in existing PUID records will update automatically.

Records are automatically added to the PUID system if:

Otherwise, the record is sent to “Suspense” (see Managing the Suspense List).

The system users in the central offices must review records placed “in suspense”.  The review entails determining whether the person is a new person requiring a PUID or is the same person with a pre-existing PUID.  See Managing the Suspense List.

Each day, the system users with update capability to the PUID system receive notification about the previous evening’s transactions.  Within the notification, the system users are informed about records that were updated with operational system identification changes, the number of people added to the system, and the number of people who were not added to the system (i.e. “suspense” records).  In addition, e-mail notifications are sent to system users that identify people with similar operational system identifications and the same PUID or the same operational system identifications and different PUIDs.  These data integrity conflicts must be resolved as well and corrections made in the appropriate operational system and within PUID.  See Mechanics of deleting records and clean-up in the authoritative source (Student).

How will new people be added to PUID?

New people will be added to the PUID system through nightly batch feeds from the HRS systems and the Student systems.  New people also will be added “on-line” from managing the Suspense list.  There is a manual override to enter new people to the system that is currently available to I2A2 administration only, since a PKI certificate is required.  This override is a secure web interface that supplements the manual process for staff and precedes the batch update.  This is sometimes necessary to overcome a gap between when service and privileges for a person is needed but before the person is populated in the operational systems.

How will service departments be able to use PUID?

Central offices that provide service to students and employees that include computer accounts for courses, e-mail accounts, identification cards, library access etc., receive nightly files from the HRS and Student systems.  In the future, the PUID will be included in these files as part of nightly processing.  I2A2 will associate PUIDs with sets of characteristics to determine the type of access to resources for which the person is eligible.  These resources might include establishing an e-mail account, access to a data account for a class, receiving class rosters, privileges at service offices such as the Libraries and Card Services.

Departments currently using the Social Security Number (SSN) as an identifier or database key should migrate to use of the PUID, per the Social Security Number Policy (V.5.1). Currently, departments can use PUID/I2A2 to provide access control (authorization) to their applications and services.

Support for PUID

The IT Security and Policy division will handle support for I2A2 and PUID applications.  Questions about a person’s identity and their relationship(s) with the University should be referred to central offices, such as Human Resource Services, the Office of Admissions, the Office of the Registrar, the Graduate School, or the Office of International Students and Scholars.

The PUID project team, that includes the PUID system users and the I2A2 administrators, receives e-mail each day summarizing the nightly batch processing from either Student or HRS systems.  The message confirms that the batch process occurred and summarizes the number of records that were added, updated, added to suspense, or edits.  The system users are responsible for the quality assurance of people in the PUID system and have a vested interest in the ability to identify one’s identity and to track the many relationships the person has with the University.

To Begin Using the PUID application

(For Authorized System Users)

Logging in to PUID

Go to the following URL to begin to use the PUID system.  System users will be prompted for their career account login and password.

https://ias.itap.purdue.edu/srch/puid_show_search.main.

Using PUID for Lookup

The next screen that will be displayed is the home page for the Purdue Person Search.  The system user must place the cursor in the box under “NAME” and enter the name of the person for whom verification is needed.

The next screen that will be displayed is a list of all the people who match on the name criteria selected.  The data that are displayed include the person’s full name, the birth date, the system (such as student and campus, HRS if an employee), the status (such as school of enrollment, department if an employee), and the system identification.  The system identification shows the most recent activity on that person, such as last date of attendance.  If the person is an employee, the position title of the person is displayed.

By scrolling through the list, the user can select the person for whom they are searching or confirm that the person entered does not have a previous relationship.  If the person exists, the user can click on that person’s name and obtain more detailed information about that person.  Information displayed includes the name, operational system ID, gender, birth date, relationship(s) with the University, and address.  If some information is restricted, the record will be marked with “***”.  On the individual record detail, a warning is highlighted and the type of information, such as “restricted data: omit home phone” is displayed.

Managing the Suspense List

It is estimated that more than 90% of new records can be automatically handled by the PUID system.  The remaining 5% to 10% are put on the suspense list and require a review by a system user.  Suspense records are given a “reason” which indicates how many and what kinds of matches were found.

These reasons are:

Scoring

Determining whether a record is added to the PUID database or placed in “suspense” is done through a score that is derived from comparisons of data fields within PUID.  These comparisons are made on name, gender, date of birth, and operational system identification number.

The system users with update capability are responsible for managing the suspense list, as identified by the data owners.  Such records are those for which the system is uncertain whether the person is the same as one already in the PUID system or a new person that should be added.  A manual review within the central offices entails an investigation of information found in core data systems or, in some cases, paper records, to verify the person’s identity.  A variety of reasons for how a record becomes held in suspense, including data entry errors, use of another person’s Social Security Number, or names that are slightly different between the HRS and Student systems.  To review records held in suspense, the system user must click on the “Process Suspense” link at the bottom of the Purdue Person Search page.

Purdue Person - Suspended Records Count

The Suspended Records Count page shows a list of relationships with which the system user is set up to work and the number of suspended updates for each.  Each count is a link that takes the system user to the next page, which is a list of suspended updates for that relationship.

Purdue Person - Process Suspended Records

The Process Suspended Records list is arranged first in date sequence, from oldest to most recent and then alphabetically by the person’s name.  Currently, the list shows name, operational system identification number, gender, birth date, and the reason the record was placed in suspense.

Clicking on any name in the suspense list will re-do the match to existing records in the PUID system, and display the resulting matches.  If updates have been made in PUID since the automatic update, the match list may vary from the reason shown.

Purdue Person - Suspended Record Matches

The Suspended Record Matches list first shows information about the suspended update that needs to be processed (“Searching for”).  The list of matches (“Found”) is arranged by descending match score, to show the best matches first, and then alphabetically.

Each entry shows name, birth date, relationship, and system status and identification.  The content of these last two fields varies for each relationship; for Student relationships, system status contains school and classification, and identification contains the year and session for which the person last attended or applied.  For HRS relationships, the system status contains the home department name, and the identification contains their job title.

A person may be listed more than once in the “Found” list if they have more than one relationship or name that meets the matching criteria.  All the relationships and names are shown on the Suspense Match Details page and accessed by selecting a name from the “Found” list.

The response time to display this page varies depending on the number of name matches found in the PUID system, which in turn depends on the commonality of the name parts.  The most common seem to be names that are of Asian origin.

Only medium- or high-score matches are listed; a count shown at the end of the match list shows how many matches are displayed, and the total number of names compared.

Choices - options listed on this page include:

Handling Unusual Cases -- Merging, Splitting, and Deleting

Each of these unusual cases starts with an essential similarity -- a person has a relationship to the University established where it does not belong.

Handling each case starts with an essential similarity also.  The errant relationship must be “deleted” from where it is.  This will create an entry in Suspense for this relationship.

Then the Suspense entry is processed using normal Suspense processing to add the relationship to an existing person (Merge), create a new PUID (Split), or delete the Suspense entry (Delete).

Merging -- Where one person has two PUIDs

The system user will select merge when it has been discovered that the same person has been issued two or more PUIDs.  This can occur when relationships for a person were not identified as belonging to the same person when they were created.  The system user will need to merge the relationships from two PUIDs into a single PUID.

Splitting -- Where relationships for two people have one PUID

The system user will select split when it has been found that relationships for two different people have been incorrectly identified as being for one person.

Deleting -- To eliminate a relationship

The system user will select delete when it has been found that the same person has been set up with multiple PUIDs and the relationship for this system ID is a duplicate and is being deleted from the Operational system.

Business Rules on Managing Suspense Records

Student Specific issues:

Mechanics of deleting records and clean-up in the authoritative source (Student)