The security task of Work Package 2 aims at improving the security functionality of DataGrid software. It is a collaboration between developers from Work Package 2, Helsinki Institute of Physics (HIP), Eötvös Loránd University in Hungary and Kungliga Tekniska Högskolan (KTH) from Sweden. The task itself cooperates and discusses issues with other security groups mentioned further below.
The security task has set up a web collaboration area for everyday coordination and documentation. All security task activities are described there in more detail.
Current components
- EDG Java Security
- Trust Manager - X.509 certificate-based authentication
- Authorization Manager- the basic
module of the authorization framework
- Authorization Filter - controls access to web services accessible via HTTPS (used in Spitfire v1.1.0)
- AXIS authorization handler - control access to web services accessible via SOAP (used in Spitfire v2.x.x)
- Web Interface for the administration of the Authorization Manager
Closed activities
- Test case: Grid enabling of Castor, a mass storage system (April 2002)
- Online Credential Retrieval (OCR) System
- Spitfire
- AuthorizationXSQLHandler plugin for the Oracle XSQL Servlet (June 2002)
- Spitfire HTTP client (September 2002)
- Independent authorization servlet (July 2002)
Potential future activities
- CAS
- Evaluation of CAS alpha release 2 focusing on similarities and differences to VOMS.
- LCAS and LCMAPS - ensuring interoperability with VOMS so that LCAS/LCMAPS
clients and servers can talk with VOMS equivalents and vice versa.
- Verification of other single sign-on systems with respect to EDG
security software, e.g. Liberty Alliance and PingID specs.
Related DataGrid security activities
- EDG Security Coordination within the framework of WP 7 (datagrid-wp7-security-l@in2p3.fr, meetings minutes at http://hepwww.rl.ac.uk/edgwp7sec/)
- Authorization Working Group at INFN
- Slashgrid
- LCAS and LCMAPS at WP4/NIKHEF.
Links of interest
- Global Grid Forum Security Area
- Liberty Alliance - industry collaboration for creating standards for single sign-on and identity federation
- PingID
- Globus Security page
- Globus's Java CoG page
 |
The European Organization for Nuclear Research |
