Authentication with User Driven Web Application for Accessing Remote Resources
Authentication with User Driven Web Application for Accessing Remote Resources
复制标题
DOI：
10.1145/3219104.3229290
复制
发表时间：
2018-07
期刊：
影响因子：
--
通讯作者：
Yige Wang;Ruizhu Huang;Weijia Xu
中科院分区：
文献类型：
--
作者：
Yige Wang;Ruizhu Huang;Weijia Xu
随着数据驱动分析和数据科学的兴起，对高性能计算资源和网络基础设施(CI)的需求已经广泛渗透到学术界几乎所有领域。尽管CI提供商在基础设施即服务模式(IaaS)方面取得了持续的成功，但为不同的用户和用例提供更多服务模式的需求也在不断增长。我们提出了一个Web应用程序框架，它允许用户将自己的分析工作流作为Web服务运行，其他使用现有凭据进行身份验证的用户可以访问该Web服务。通过此框架，可以将自组织分析例程描述并包装在可共享和可重用的工作流模型中。虽然该框架为任何拥有有效凭据的用户提供了一种访问和利用远程资源的新方法，但在某些情况下，更灵活的身份验证方法可以进一步降低HPC资源的访问障碍。在本文中，我们详细介绍了该框架的凭据管理，并报告了我们在启用对远程资源的临时访问方面所做的初步工作，包括使用动态生成的凭据和社交登录。
With the emerging of data-driven analysis and data science, the needs of high-performance computing resources and cyberinfrastructure (CI) have been widely spread across almost all domain fields in academia. While CI providers have continued success with the infrastructure-as-a-service model (IaaS), there are increasing demands to offer more service models for diverse users and use cases. We have proposed a web application framework, which empowers users running their own analytic workflows as a web service that is accessible by other users authenticated with existing credentials. Through this framework, ad-hoc analysis routines can be described and wrapped in a workflow model that is shareable and re-useable. While the framework offers a new way for any user with valid credential to access and utilize remote resources, there are cases where more flexible authentication methods can further lower the access barrier of HPC resources. In this paper, we detail credential management of this framework and report our preliminary works on enabling temporary access to the remote resources including using dynamic generated credentials and social logins.