CC*IIE IAM: FeduShare: Bridging Campus and Research Identity and Access Management for Self-Managed Collaboration

CC*IIE IAM：FeduShare：桥接校园和研究身份和访问管理以实现自我管理协作

• 批准号: 1440609
• 负责人: Jill Gemmill
• 金额: $ 29.1万
• 依托单位: Clemson University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-10-01 至 2016-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1440609&HistoricalAwards=false
• 关键词: CC; IIE; IAM; FeduShare; Bridging

Scientific challenges are often addressed by a team of people from multiple science disciplines, institutions and geographic locations. These teams use computation, communication and data resources scattered across many sites or institutions. Because of the need to authorize access to these resources, it is currently a non-trivial problem for a team to set up the needed working environment, and that problem delays research projects and consumes time and other resources. The sources of difficulties include: campus and research communities are familiar with their own Identity and Access Management (IAM) solutions but are not familiar with the entire solution space; general purpose solution software has been developed in different environments but adoption outside the original environment has been limited; and members of domain science teams are not expert in distributed systems integration.This project is designing a system architecture supporting self-managed collaboration and federation of services named "FeduShare". The FeduShare framework builds on existing Identity Management solutions such as the InCommon federation, Shibboleth servers and the GENI solutions for people/resource management/authorization that build upon them. Case studies used to inform the investigation include InCommon based logins for shell-based access to campus computing clusters, and the integration with identity management in GENI for the purposes of establishing seamless end-to-end communication paths.

科学挑战通常由来自多个科学学科、机构和地理位置的团队来解决。 这些团队使用分散在许多站点或机构的计算、通信和数据资源。 由于需要授权对这些资源的访问，目前对于团队来说，设置所需的工作环境是一个不小的问题，并且该问题延迟了研究项目并消耗了时间和其他资源。 困难的来源包括：校园和研究社区熟悉自己的身份和访问管理（IAM）解决方案，但不熟悉整个解决方案空间;通用解决方案软件已在不同的环境中开发，但在原始环境之外的采用受到限制;而领域科学团队的成员并不擅长分布式系统集成。本项目正在设计一个支持自管理协作和服务联邦的系统架构，名为“FeduShare”。 FeduShare框架建立在现有的身份管理解决方案之上，如InCommon联合、Shibboleth服务器和GENI解决方案，用于建立在它们之上的人员/资源管理/授权。 用于为调查提供信息的案例研究包括基于InCommon的登录，用于基于shell访问校园计算集群，以及与GENI中的身份管理集成，以建立无缝的端到端通信路径。