Many park districts are looking at free internet service as an enhancement for their citizens and visitors. Urban areas provide it as an added service to visitors. Some rural areas are providing it because the for-profit internet providers do not service the area. Therefore, park districts would like to provide internet training, educational, and recreational activities that would not otherwise be available. Wired networks use wires, such as Cat5e cabling, to connect computers to each other and the internet. Wi-Fi (Wireless Fidelity), also called 802.11 networking or wireless networking, is a system where computers connect to the network using radio signals. Park districts should be careful when providing this service for a variety of reasons.

If the office uses wireless routers to connect computers in the office and does not have a desire to share it with others, they should take precautions. Unless the system has safeguards, such as the requirement to input a username and password, a person outside the district might be able to pick up a signal and surf the web on the connection. Also, these outside people might be able to enter the district’s computer system and delve into personnel files, financial information, utility billing, accounts payable and receivables, which can cause major problems. Standard control procedures should be in place on any wired or wireless computer or terminal including the use of usernames and passwords, as well as good security software such as anti-virus and firewall programs. Passwords should never be allowed to be left as “password”, “123”, “ABC”, the name of the park district, or other easily guessed passwords. Automatic programs that require the changing of passwords on a regular basis are recommended, and work areas should be monitored to see if users are posting their passwords on sticky notes or a piece of paper taped to the monitor, etc. that can easily be found and misused.

It may be illegal to share the internet connection with the public – check with the provider first. If free Wi-Fi or wired internet connections are offered in the park district for citizen use, here are a few options that could be followed. The most secure is to hire an internet provider or consultant to handle all the security issues. This puts the burden of liability on the vendor, not the park district. Use only a qualified vendor — they should be able to describe in detail their security procedures and provide references. Sign a contract with them that details the responsibilities of the vendor including insurance requirements.

Another option is to have the internal IT (information technology) department set up the system. This puts the burden of liability on the park district. Only professional and knowledgeable internal staff should attempt this. Contact the internet provider, as they may have restrictions on bandwidth or the rate of data transfer measured in bits per second (bps). A user sending bulk e-mails or large video files can exceed the bandwidth and lock up the system. It is recommended to limit the amount of bandwidth a single connected device can use. This will prevent a single user from using up all available bandwidth.

A physical firewall such as a router in place between the park district’s system and the public use Wi-Fi system is a good protective feature. Software firewalls should be very strong to prevent illegal entry into the network. Wireless routers and connecting computers should be configured with the most secure authentication and encryption methods possible, to prevent unauthorized access to internal data and wireless traffic. All wireless traffic should be electronically monitored to detect access to and block potentially dangerous and/or illegal sites including child pornography, download sites, and terrorist sites. If the internet connection is used for any criminal reasons, the park district may be held liable if reasonable protections are not in place and monitored.

There is a cost involved in setting up a public Wi-Fi system; the larger the system the more the expense to install and maintain. It is illegal to charge for internet use without the permission of the provider. Also, there are a variety of grants available.

Anybody logging on to the system should first see a “Terms of Service” screen and require clicking an agreement stating that the user understands and agrees to the restrictions before being allowed to access the system. The “Terms of Service” will need to be enforced with security systems and policies; otherwise, any illegal activity on this system could cause the park district to be liable. Terms could include:

• Restrictions on times of day or locations were the public internet could be accessed
• Limits on the amount of bandwidth that may be used
• Restrictions of the viewing of inappropriate web sites or engaging in questionable online activities

The National Conference of State Legislatures has a web site, www.ncsl.org/default.aspx?tabid=13494, which lists sources of computer hacking and unauthorized access laws by state.

Public Wi-Fi access can be a tool of public service and economic opportunity. It can also be an unlocked door to the park district’s confidential information and a portal for illegal activity. Choose a provider wisely, install good security measures and update them regularly.