Enable collaborative work, with common security tools that address:

1. Security and Policy for Group Collaboration MICS/SciDAC Network Research Security Solutions to Enable Dynamic, Distributed Collaborations • Membership management • Ease credential management • Group administration • Resource participation • Low cost of participation • Integration w/ local security • Rights assignment • Community based authorization • Restricted delegation • Application support • Feature-rich software • Standards based Grid Security Infrastructure – The Novel Ideas • Enable collaborative work, with common security tools that address: • Large and geographically distributed membership • Membership with diverse expertise, comprising different roles • Community resources with associated community policies • Develop novel tools and approaches for: • Management of collaboration membership and resources • Online CA & Credential Repository (CR), local security integration • Management of roles and privileges • Community Authorization Service (CAS), restricted delegation • Integration in collaborative tools and environments Accomplishments and Plans • Community Authorization Service • Demo with ESG DODS system Nov 2001 Done • Deliver w/ simple policies May 2002 Done • Gather feedback and deliver 2nd version Sep 2002 Done • Deliver integrated with GT3/Web Services Sep 2003 Done • Standards • X.509 & GSS drafts Feb 2002 Done • Final X.509 & GSS standards Feb 2003 Done • Other Software • Draft conformant GSS Apr 2002 Done • Integration of Online CA (KCA) and GSI Sep 2002 Done • Demo online CA Mar 2003 Done • Authorization Callouts for site integration Apr 2003 Done • Security support for GT3/Web Services May 2003 Done Future Plan Highlights (Pending Funding) • Integration with attribute authorities (e.g. VOMS) • Better site security integration – e.g. with Kerberos • Integration with policy decision services (e.g. PERMIS, Akenti) • Increased removal of security concerns from applications Impact and Connections • IMPACT: • New PKI-based approaches to credential management, restricted delegation, policy management • Development of security tools and services for collaboration • Widespread deployment and adoption of approaches and tools • CONNECTIONS: • This work is responsible for development of the Globus Toolkit’s widely used Grid Security Infrastructure (GSI) • Used by numerous SciDAC collaboratories, including DOE Science Grid, Particle Physics Data Grid, Earth Systems Grid, and Fusion Collaboratory. • Also used by many non-DOE projects worldwide, including NSF TeraGrid, NASA IPG, NEESGrid, European Data Grid. Principal Investigators: Steve Tuecke, Argonne National Laboratory Carl Kesselman, University of Southern California, Information Sciences Institute Miron Livny, University of Wisconsin, Madison MICS Program Manager: Thomas Ndousse