SDCI Sec Improvement: Building from Bedrock: Infrastructure Improvements for Collaboration and Science

SDCI Sec 改进：从基石开始构建：协作和科学的基础设施改进

• 批准号: 1032468
• 负责人: Kenneth Klingenstein
• 金额: $ 265万
• 依托单位: INTERNET2
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2015-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1032468&HistoricalAwards=false
• 关键词: SDCI; Sec; Improvement; Building; Bedrock

Over the last decade, new foundational authentication and authorization tools were developed and deployed within the US research/education infrastructure. These have substantially improved campus and inter-institutional capabilities to manage identity and access controls. It is time to systemically connect virtual organizations and scientific collaborations to this bedrock. This research will extend existing base layer components to facilitate connection of domain science applications to the new infrastructure and will connect scientific collaborative capabilities through direct and intensive work with emblematic NSF-supported Virtual Organizations (VOs) across several Directorates. Much of this bedrock is based on work developed under the NSF Middleware Initiative and resulted in two transformative cybersecurity paradigms: federated identity and domestication of applications.The intent of this research is to build on this bedrock to enable greater use by science and research communities. It centers on improvement and extension of base systems ? Shibboleth, Grouper, COmanage ? into an integrated VO-oriented toolkit. The toolkit is rooted in design and delivery to important and distinctive VOs, selected to insure service to a broad variety of VOs. The toolkit will be used to construct federated and domesticated VO applications, both collaborative (wikis, lists, ad hoc calendaring, shared calendars, audioconferencing) and domain science (federated SSH, cvs, fileshares). It will provide integrated identity management, access controls, group management, and provisioning/de-provisioning with these services connected to the bedrock for scalable and robust collaborations. The tools will enable three primary approaches to collaborative research environments: command line orientation, science gateway, and collaboration management platform. The research should enhance critical cross-cutting areas regarding CI software, long-term sustainability, and self-manageability, and facilitate advances in CI-based science, engineering, and education through enhanced identity authentication and authorization.

在过去的十年中，新的基础认证和授权工具被开发和部署在美国的研究/教育基础设施中。这大大提高了校园和机构间管理身份和访问控制的能力。现在是将虚拟组织和科学合作系统地连接到这一基石的时候了。该研究将扩展现有的基础层组件，以促进领域科学应用与新基础设施的连接，并将通过与nsf支持的象征性虚拟组织（VOs）跨多个部门的直接和密集工作，连接科学协作能力。这一基石的大部分是基于NSF中间件倡议下开发的工作，并产生了两种变革性的网络安全范式：联邦身份和应用程序的驯化。这项研究的目的是建立在这个基础上，使科学和研究团体能够更多地使用它。它以基础系统的改进和扩展为中心。石斑鱼，石斑鱼，管理？集成到一个面向vo的工具包中。该工具包植根于对重要和独特的vo的设计和交付，以确保为各种vo提供服务。该工具包将用于构建联邦和家养VO应用程序，包括协作（wiki、列表、特别日历、共享日历、音频会议）和领域科学（联邦SSH、cvs、文件共享）。它将提供集成的身份管理、访问控制、组管理和供应/取消供应，这些服务连接到可扩展和健壮协作的基础。这些工具将支持协作研究环境的三种主要方法：命令行导向、科学网关和协作管理平台。该研究应加强有关CI软件、长期可持续性和自我管理的关键交叉领域，并通过增强身份认证和授权促进基于CI的科学、工程和教育的进步。