80 likes | 228 Views
GN2 JRA5 Roaming and Authorisation. Jürgen Rauschenbach, DFN-Verein jrau@dfn.de. JRA5 Visions. JRA5 will is based on the following visions: To build a roaming infrastructure enabling full mobility of members of the scientific community in Europe across institutional campuses.
E N D
GN2 JRA5 Roaming and Authorisation Jürgen Rauschenbach, DFN-Verein jrau@dfn.de
JRA5 Visions • JRA5 will is based on the following visions: • To build a roaming infrastructure enabling full mobility of members of the scientific community in Europe across institutional campuses. • To build an interoperable authentication and authorisation infrastructure that will be used all over Europe enabling seamless sharing of e-science resources. • To develop and pilot a single sign-on system enabling a log in once experience for network and application access, even beyond organisational boundaries.
Visions in examples • an employee from University A visiting the research institute B to be given access to local resources (network, library ...) after being authenticated at their home institute; • a student from university C taking a course at university D to, after registering on the course, automatically be given access to library data bases and be authorised to work in an e-learning system; • the members of a co-operative project between university E and several other universities to be authorised to work in a project support software; • a newly appointed administration personnel to automatically be authorised to use administration systems according to the installed access rules.
JRA5 work items • Roaming (define, design, prototype and build a NREN roaming infrastructure) • Authentication and Authorization Infrastructure (define, design, prototype and build a NREN AAI) • Single Sign-On (based on roaming and AAI results build an integrated infrastructure for cases that allow SSO) • Integration of New Technologies (broaden the scope, integration of MIPv6 and other new appropriate solutions in the mobility field)
JRA5 state-of-the-art • Kick-off 8-9 September in Berlin (27 participants from 19 organisations) • followed by a TF-Mobility (new) meeting next day • TF Mobility new work items discussed • partner presentation showed many activities in the countries on roaming and AA Infrastructures • results of TF-Mobility and TF-AACE presented: base line for JRA5 • more detailed work plans discussed • non-funded part: more contributions then originally planned :-)
Roaming tasks (extended) • Roaming glossary of terms (Sept-Oct): review on-going • EduRoam portal promotion (Sept-end of project) • Investigating the applicability of EduRoam for roaming access to services (Sept-Jan05) • Inter-NREN roaming requirements (Oct-Feb05) • Policy and legal framework document (Dec-May) • Making existing trust fabric more robust (Sep-end) • Evaluating the influence of new technologies, architecture blueprint (Dec-Aug05) • Requirements for roaming access to commercial networks (Dec-Sept05) • Inter-NREN roaming architecture (March05-Aug05)
AAI tasks (extended) • Requirement specification (Sep-Dec) • Application Interface definition, AA-RR (Sep-Jan05) • Architectural definition of the system (Nov-April05) • Interface implementation (Feb05-May05) • Definition and selection of protocols and profiles to be supported (Jan05-May05) • AAI design (June05) • Testbed implementation (April05-...) • JRA1 AAI proposal and first solution (tbd) • Grid AAI observation and evaluation (Sep-end)