1 / 13

Manifesto for secure data sharing

Manifesto for secure data sharing. 17.09.2012, Prague, GlobusEUROPE 2012. By Pawel Plaszczak, Michał Orzechowski, Sebastian Czechowski. The pressing need for sharing. Scientists wants to sharing: Large scientific data sets Hardware resources Specialised software Human knowledge

bruben
Download Presentation

Manifesto for secure data sharing

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Manifesto for secure data sharing 17.09.2012, Prague, GlobusEUROPE 2012 By Pawel Plaszczak, Michał Orzechowski, Sebastian Czechowski

  2. Thepressingneedforsharing Scientists wants to sharing: • Large scientific data sets • Hardware resources • Specialised software • Human knowledge What “securesharing” means ? • Authentication, authorization • Secure Communication • Accounting (log of operations)

  3. What is Virtual Organization (VO)? • People, resources, services from different physical organizations • Some common goal • Mutual trust relationship • Member identity provided by the originating organization • Dynamic membership

  4. How is it implemented today (1) • Shibboleth and the Federated Security • Shibboleth is a framework that allows access the on-line resource • Shibboleth separates service, authentication and authhorization procedures • Shibboleth architecture • Identity Provider • Provider Service

  5. How is it implemented today (2) • Globus Toolkit • GSI • X.509 certificates • Cofidential Communication • Single sing-on • VOMS • LCAS/LCMAPS • Pool account mechanism

  6. How is it implemented today (3) • Other solutions • Dropbox • Rapidshare • Google Docs • Skype • And many, many others....

  7. Totherescue:AdHoc sharing TheManifesto for theSecure Data Sharing • Freetheordinaryusers • Deadeasyinterface. Zero IT skillassumed • Data sharingmust be: • easy • efficient • takesseconds • safe AdHoc: thetool for rapidsharing • Thehistory: Virolab (2007-2009),Initiative for Globus in Europe (2011-2013)

  8. AdHoc works with Shibboleth and GSI/VOMS • AdHoc on top of VOMS

  9. showcase

  10. User interaction 1. Creating new group in existing VO 2. Add users to VO 3. Share Resource

  11. Summary: rapid sharing possible on grid • AdHoc follows the Manifesto for the Secure Sharing: • AdHoc enables easy sharing in seconds, without sysadmin intervention • AdHoc does not require IT skills, replacing commandline with a simple GUI • AdHoc uses commonplace security paradigms, including Shibboleth and PKI/GSI/VOMS, thus can easily be used in most grid infrastructures worldwide

  12. Partners • Initiative for Globus in Europe (IGE), 7th Framework • Leibniz-Rechenzentrum, Bayerische Akademie der Wissenschaften • University of Southampton • Technische Universität Dortmund • Universitatea Tehnica Cluj-Napoca • Universidad Complutense de Madrid • Poznan Supercomputing and Networking Center • Uppsala Universitet • University of Edinburgh – Edinburgh Parallel Computing Centre • Stichting voor Fundamenteel Onderzoek der Materie – Institute for Subatomic Physics • University of Chicago • GridwiseTech • Credits also to all Virolab (6th Framework) members, project led by University of Amsterdam

  13. www.gridwisetech.comul. Chrobrego 28/4 31-428 Kraków, Poland Tel. +48 12 294 71 20

More Related