SDCI Sec Improvement: Building from Bedrock: Infrastructure Improvements for Collaboration and Science

在过去的十年中，新的基础认证和授权工具被开发并部署在美国的研究/教育基础设施中。这大大提高了校园和机构间管理身份和访问控制的能力。现在是将虚拟组织和科学合作系统地连接到这一基石的时候了。 这项研究将扩展现有的基础层组件，以促进领域科学应用程序与新基础设施的连接，并将通过直接和密集的工作与几个理事会的象征性NSF支持的虚拟组织（VO）连接科学协作能力。这一基石的大部分是基于在NSF中间件计划下开发的工作，并导致了两个变革性的网络安全范式：联邦身份和应用程序的本土化。这项研究的目的是建立在这一基石上，使科学和研究社区能够更好地使用。 它的核心是基础系统的改进和扩展？Shibboleth，石斑鱼，COmanage？集成到面向VO的工具包中。 该工具包植根于设计和交付给重要和独特的VO，选择以确保服务于各种各样的VO。 该工具包将用于构建联合和国产VO应用程序，包括协作（wiki、列表、临时会话、共享日历、音频会议）和领域科学（联合SSH、cvs、文件共享）。 它将提供集成的身份管理，访问控制，组管理和配置/取消配置，这些服务连接到可扩展和强大的协作的基础。 这些工具将支持三种主要的协作研究环境方法：命令行导向、科学网关和协作管理平台。该研究应加强关键的跨领域领域的CI软件，长期可持续性和自我发展，并通过增强身份认证和授权促进基于CI的科学，工程和教育的进步。

Over the last decade, new foundational authentication and authorization tools were developed and deployed within the US research/education infrastructure. These have substantially improved campus and inter-institutional capabilities to manage identity and access controls. It is time to systemically connect virtual organizations and scientific collaborations to this bedrock. This research will extend existing base layer components to facilitate connection of domain science applications to the new infrastructure and will connect scientific collaborative capabilities through direct and intensive work with emblematic NSF-supported Virtual Organizations (VOs) across several Directorates. Much of this bedrock is based on work developed under the NSF Middleware Initiative and resulted in two transformative cybersecurity paradigms: federated identity and domestication of applications.The intent of this research is to build on this bedrock to enable greater use by science and research communities. It centers on improvement and extension of base systems ? Shibboleth, Grouper, COmanage ? into an integrated VO-oriented toolkit. The toolkit is rooted in design and delivery to important and distinctive VOs, selected to insure service to a broad variety of VOs. The toolkit will be used to construct federated and domesticated VO applications, both collaborative (wikis, lists, ad hoc calendaring, shared calendars, audioconferencing) and domain science (federated SSH, cvs, fileshares). It will provide integrated identity management, access controls, group management, and provisioning/de-provisioning with these services connected to the bedrock for scalable and robust collaborations. The tools will enable three primary approaches to collaborative research environments: command line orientation, science gateway, and collaboration management platform. The research should enhance critical cross-cutting areas regarding CI software, long-term sustainability, and self-manageability, and facilitate advances in CI-based science, engineering, and education through enhanced identity authentication and authorization.