NCeSS e-Infrastructure for the Social Sciences Project: Security and Geospatial Services

1
NCeSS e-Infrastructure for the Social Sciences
Project Security and Geospatial Services

• Andy Turner
• http//www.geog.leeds.ac.uk/people/a.turner/

2
Overview

• Introduction
• Work Package 3.2
• Work Package 4.1
• Feedback

3
Introduction

• The NCeSS e-Infrastructure for the Social Science
  (NeSS) Project
• http//www.ncess.ac.uk/services/
• 2007-01-01 to 2009-12-31
• Delayed start
• 7 Major Work Packages
• Security and Geospatial Service Work undertaken
  in Work Packages 3.2 and 4.1

4

• Some Key People to Mention
• Rob Proctor
• Research Director
• June Finch
• Project Coordinator
• Taken over from Mike Daw
• Rob Allan
• e-Science Expert
• Xiaobo Yang
• Portal Maintainer
• Pascal Ekin
• Geospatial Services and Grid Expert

5
Work Package 3.2Security Authentication and
Authorisation

• People
• Rob Proctor
• Wei Jie
• Deliverables
• 3.2.1 Report Review of Grid Authentication and
  Authorization Technologies
• 3.2.2 Report User Requirements
• 3.2.3 Implementation?

6
Work Package 4.1Grid Enabling Simulation Models

• Part done by PolicyGrid and MoSeS
• MoSeS People
• Mark Birkin
• Andy Turner
• Paul Townend
• Junaid Arshad
• OGC GeoLinking Interoperability Experiment

7

• MoSeS NeSS Deliverables
• 4.1.1 GLS Client
• 4.1.2 Deployed GLS
• 4.1.4 Geographical Mapping Service
• 4.1.5 Workflows

8
Feedback

• Questions/comments?

9
Acknowledgements and Thanks

• Thanks to NCeSS researchers, collaborators and
  funders.
• Thanks to all involved in the OGC GeoLinking
  Interoperability Experiment (especially the UK
  part of the consortium)
• Thanks Paul Townend for work on a GLS Client
  which is to be delivered as part of Work Package
  4.1
• Thanks Junaid Arshad for ongoing work on Security
  and delivery work on Work Package 4.1
• Thanks Wei Jie for sharing reports and
  presentation material for Work Package 3.2
• Thanks to all involved in eResearch for improving
  our hardware, software and data resources so that
  we can all do our bit to better understand and
  plan our future.
• Thank you for listening!

10
(No Transcript)
11
Authentication Issues

• Adopting Shibboleth as the authentication
  infrastructure
• Build federation for eSS community and define
  user attributes
• Integration of Shibboleth with legacy
  authentication systems
• Integration of Shibboleth with Sakai portal

12
Security Challenges

• Simplicity
• Avoiding complicated security procedures like
  authentication, delegation, etc
• Usability
• Providing web-based one stop environment to
  access a variety of social science resources like
  datasets, tools, services, wiki, blogs, etc.
• Interoperability
• Making legacy security systems interoperable
• Manageability
• Relieve administrator and service providers
  workload
• Granularity
• Providing flexibility for service providers to
  make fine-grained authorization for various
  resources

13

Authorization Issues

• Design implement a fine-grained authorization
  infrastructure for grid-enabled datasets
• Attribute-based fine-grained access control for
  OGSA-DAI b
• ased social science datasets
• Using Shibboleth, VOMS and PERMIS as
  authorization engine