学生的隐私对学生来说是非常重要的, 向教授和荣誉教授致敬——尤其是在这个不确定的时代. 虽然我们都在“新常态”下挣扎,” we wanted to take a moment to address some unfounded fears that are making the rounds about privacy.
我们自己也曾经是学生, 当我们决定为测试构建Honorlock基础架构时, we wanted something seamless for users while also protecting the privacy of those who use our solution. 出于这些原因, the Honorlock system only requires that you install the Honorlock Chrome extension into Google Chrome.
We made this choice to keep our users from having to install invasive technology that interacts with your computer at the operating system level – no bueno.
那么如何使用b谷歌Chrome和Chrome扩展帮助保护隐私? 嗯，其实很简单.
- 因为扩展包含在Chrome浏览器本身, 它只能访问浏览器提供的有限操作——没有其他权限.
- 该扩展仅在您在学习管理系统内时有效, 永远不要访问任何个人或私人数据.
- 当分机处于活动状态时，分机上的红色指示灯闪烁. 如果此指示灯未显示, 您可以相信，在此期间没有任何活动被监视或记录.
分机上红色指示灯闪烁.
是否可以访问其他计算机, 移动设备和网络上的设备，并扫描他们的信息?
Honorlock does not scan your network, your computer, your phone or any other devices on your network. 诺诺洛克无法访问任何人的网络或设备, 除非所有者或用户允许我们访问，否则我们也无法访问. Furthermore, Honorlock does not route traffic from your device through our servers in any way. We have a patent that is available for public consumption that explains the exact process in which we know when a student is searching the internet for exam content. It is a complex method for both scrubbing content from the web and also knowing the exam questions being presented to the exam taker through the LMS. 通过问题排序和随机化, we are able to triangulate when a search takes place for the exam questions and content within the exam. 这是通过合作伙伴关系和其他自托管内容的方式完成的. If students are not searching for their exam questions during the time of the exam t在这里 is nothing Honorlock can track in regards to any computer, 移动设备, 平板电脑, 等. 考试在家庭或考场内进行.
Does Honorlock route traffic through your servers in order to analyze or monitor information from devices on the server?
No. Honorlock不是您下载并安装在计算机上的应用程序. Honorlock是一个轻量级的Chrome扩展，它给了我们非常有限的访问. 谷歌采取严格措施确保用户隐私，不允许未经检查的访问. They will in fact reject an extension submission if it’s an invasion of privacy or if the request for certain information isn’t warranted.
诺诺洛克能做什么?
Honorlock can log the websites you go to (or attempt to go to) from Chrome (which processes the request) and only when you are actively in an exam. 我们从LMS收集您的IP地址、电子邮件地址和您的姓名. 我们还会在考试结束后的一段时间内保存您的照片和身份证, 以防你的学校需要这些证件作为认证.
Honorlock标识学生考试何时结束. 这是由学生在LMS内提交考试决定的. 当这种情况发生时, Honorlock自动停止所有记录并结束由Honorlock监控的考试会话. 这将结束摄像头、桌面屏幕和音频的录制.
Here are a few actions you can take after your exam has ended to make you feel more comfortable about using Honorlock:
- 考试结束后删除Honorlock扩展. 只需导航到Chrome工具栏中的扩展，右键单击，然后删除. 您可以重新安装扩展为您的下一次考试. 它需要不到30秒的时间来安装Honorlock扩展.
- 您可以创建一个新的Chrome人来完成您的测试与Honorlock. Open Chrome, navigate to the people tab across the top of your screen, then click create a new user. 这意味着任何书签、密码等.，当您测试时，您已保存的内容不会显示在Chrome窗口中.
Honorlock是否出售或共享您的数据?
No. 如果诺诺洛克把它的代理业务卖给另一方, the information we’ve described elsew在这里 would then be transferred to the new owner to ensure continuity of proctoring for your exams under the conditions of your school’s agreement with us.
The bottom line is Honorlock is dedicated to protecting your privacy – it’s a cornerstone of our business. 我们也有责任确保您的记录是持久的和安全的. 如果您仍然担心，我们邀请您与我们联系. Honorlock支持24/7/365. If you encounter any issues or have any questions, you may contact us by live chat, and/or email support@honorlock.com.
诺诺洛克想确保你清楚地知道我们在做什么或没有做什么. 为了给你必要的内心平静, 以下是我们为保障您的隐私而采取的措施:
- Honorlock通过亚马逊网络服务托管在云端
- Honorlock将信息存储六个月，然后清除这些数据. Honorlock, 作为AWS合作伙伴, 遵循联邦NIST 800-88数据/驱动器破坏证明指南. AWS procedures include a decommissioning process that is designed to prevent customer data from being exposed to unauthorized individuals. AWS使用了DoD 5220中详细介绍的技术.22-M (“National Industrial Security Program Operating Manual “) or NIST 800-88 (“Guidelines for Media Sanitization”) to destroy data as part of the decommissioning process.
- 数据传输符合行业标准. 传输中的数据使用TLS 1加密.2、使用SHA-256和RSA 2048位公钥进行系统内外的所有数据传输. 所有进出我们网络的数据传输都使用SSL进行处理. 所有传输到我们平台的数据都通过SSL接收到我们的web服务器和api. 数据通过使用SSL的web服务器传回给我们的客户. 传输中的数据按照最新的SSL协议进行加密, 通过我们最新的漏洞扫描.
- 存储的数据是加密的. 所有数据使用AES-256块加密的行业标准是安全的.
- Honorlock不是数据的所有者，而是为大学保存数据.
- Honorlock employees do not have access to the data unless their job requires it (ie support or proctors). If they do have authorized access, it’s behind VPN and their access is tracked, logged, and audited.
- Honorlock不需要帐户或密码. 我们尽可能少地收集，因为我们与LMS集成在一起. 当监考启用时，我们使用您对LMS的访问权限让您访问您的考试. 诺瑞洛克的员工都经过培训和认证，其中包括FERPA培训. 所有的员工都接受了如何使用我们产品的培训, FERPA, 事件4响应, 及资料保障. All support and proctoring employees also conduct jobspecific training and certifications for supporting the product, 支持学生, 以及如何有效地监考.
- Honorlock拥有SOCII认证，这意味着它的数据, 安全, 商业惯例每年由外部独立第三方进行审计.
- Honorlock has an information 安全 policy and logical 安全 policies which are related strictly to protecting data and student privacy.
- Honorlock进行常规的脆弱性评估, 扫描, 以及渗透测试，以确保我们继续不惜一切代价保护所有数据. 这些测试由独立的第三方执行. Honorlock符合GDPR和CCPA要求. 这些政策可在我们的网站上公开获取. Honorlock符合GDPR要求. 阅读我们的GDPR & 隐私盾公告 在这里. If a student requests to have their information removed they will be provided a Right to Erasure Request Form. 在收到请求后, 诺诺洛克将与该机构联系，以确保他们了解该请求, they have adequate time to download (or with our assistance provide them) the media prior to deletion for perseverance of the student academic records. 一旦删除完成，学生将收到删除的确认.
.png)
