A national-scale authentication infrastructure

Butler, Randy; Welch, Von; Engert, D.E.; Foster, Ian; Tuecke, Steven; Volmer, J.; Kesselman, Carl

doi:10.1109/2.889094

Cited by 187 publications

(6 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…During Run 1 and Run 2, CMS transferred data among sites via protocols based on the grid security infrastructure (GSI) [365,366], with GSIFTP the most common protocol used and GridFTP its most common implementation. When the end of support for GSI was announced, the LHC community started looking for a replacement both for the protocol and an authentication mechanism.…”

Section: Data Transfer Protocolsmentioning

confidence: 99%

Development of the CMS detector for the CERN LHC Run 3

Hayrapetyan,

Tumasyan,

Adam

et al. 2024

J. Inst.

View full text Add to dashboard Cite

Since the initial data taking of the CERN LHC, the CMS experiment has undergone substantial upgrades and improvements. This paper discusses the CMS detector as it is configured for the third data-taking period of the CERN LHC, Run 3, which started in 2022. The entire silicon pixel tracking detector was replaced. A new powering system for the superconducting solenoid was installed. The electronics of the hadron calorimeter was upgraded. All the muon electronic systems were upgraded, and new muon detector stations were added, including a gas electron multiplier detector. The precision proton spectrometer was upgraded. The dedicated luminosity detectors and the beam loss monitor were refurbished. Substantial improvements to the trigger, data acquisition, software, and computing systems were also implemented, including a new hybrid CPU/GPU farm for the high-level trigger.

show abstract

Section: Data Transfer Protocolsmentioning

confidence: 99%

Development of the CMS detector for the CERN LHC Run 3

Hayrapetyan,

Tumasyan,

Adam

et al. 2024

J. Inst.

View full text Add to dashboard Cite

show abstract

“…Grid Security Infrastructure (GSI) is now a de-facto standard for authentication for grid computing. GSI is implemented using a public key infrastructure (PKI) [2], [4]. There is more variety in authorization approaches, likely reflecting a wider variety in authorization requirements than authentication requirements for key use cases.…”

Section: Vo Management In Grid Environmentsmentioning

confidence: 99%

“…The authorization model in Globus Toolkit is best represented by the grid-mapfile and associated mechanism [2], [5]. A gridmapfile associates the Distinguished Name in a digital certificate, typically tied to authentication, with a local account name at a resource, e.g., a UNIX local account.…”

Section: Grid-mapfilementioning

confidence: 99%

“…Access to virtualized research facilities and materials by research collaborators, sometimes from virtual organizations, can be made safer, easier and more scalable by lateral knowledge transfer and integration of a single sign-on (SSO) authentication mechanism, such as those deployed for shared web-based resources. This sort of mechanism has been independently developed, albeit with a much more limited scope, by Grid middleware functionalities themselves [2]. eScience environments have been utilized most actively in the fields collectively referred to as "big science," such as high energy physics, astronomy and biology [3], [10], [11].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Virtual Organization Platform Interoperability Provides the Long Tail an eScience Environment

Nishimura

Sakane

Yamaji

et al. 2016

Journal of Information Processing

View full text Add to dashboard Cite

Abstract:The core technology of eScience is the connection of distributed resources such that they appear as one virtual instance, enabling the collaborative research work on the Internet on that shared virtualized resource. eScience first embraced shared resources through support of "big science" in the Grid computing field. By contrast, emerging cloud services make high-end eScience infrastructure such as shared computing and disk resources affordable to common researchers. Though there are many such services to choose between, users always have to be authenticated as a researcher and authorized when they utilize services provided by a given collaboration. Effectively leveraging the world-wide deployment of academic identity federations may allow us to build a complete and coherent eScience environment more securely, easily, and scalably. One marked recent tendency in Identity Federation is to support virtual organization (VO), organizations composed of individuals principally domiciled at and authenticating against an organization but acting in a particular role within the virtual organization. A similar theme also emerged in Grid computing. However, all known current schemes have no common method for sharing VO information because every virtual organization is, today, largely bespoke, and these custom-built implementations take into account the principal needs of the federation and country and project where the VO emerged, leading each federation to employ different standards in integration with VO's and provision of information to VO's. This paper offers a historical perspective on VO technology, first by assessing its evolution in the Grid computing field followed by an analysis of progress in broader identity federation. Finally, potential evolutionary paths are divided into three natural categories, and we perform a technical and operational comparison of current VO technology and its capacity to meet these new use cases today and in envisioned futures. Reflecting how much development and operational costs are acceptable for each party concerned, two of these are considered preferred choices for the short-term and long-term transition to the unified, global VO platform.

show abstract

“…User write RSL scripts, which identify resources and specify requirements and parameters for each. An RSL script can be used as the user interface to globusrun, an upper-level Globus service that first authenticates the user by using Grid Security Infrastructure (GSI) 8 and the schedules and monitors the job across the various machines by using two other Globus toolkit services: the Dynamically-Updated Request Online Coallocator and Grid Resource Allocation and Management 7 . RSL is designed to be an easy-to-use language to describe multi resource multi site jobs while hiding all the site-specific details associated with requesting such resources.…”

Section: Grid Computing and Mpich-g2mentioning

confidence: 99%

Untitled

Sirisup¹,

U-ruekolan²

2011

ScienceAsia

View full text Add to dashboard Cite

Grid computing technology addresses the growing need for computing resources in simulation-based engineering and science (SBES). However, optimal performance of grid computing technology requires 'virtually tightly coupled' computing resources. This, though, may not be economically available in many research societies. In this work, we propose a new approach to improve performance of a typical parallel application for SBES on a 'virtually not tightly coupled' grid computing environment. To this end, we have proposed, implemented, and investigated the performance of a new grid programming technique based on the Global Arrays toolkit and multi-level topology-aware approach. We have found that performance of the evaluating application implemented with this new technique outperforms both MPICH-G2 and native Global Arrays implementations, but is still comparable to that of the application implemented with OpenMP, the native Symmetric-Multi Processors programming.

show abstract

A national-scale authentication infrastructure

Cited by 187 publications

References 3 publications

Development of the CMS detector for the CERN LHC Run 3

Development of the CMS detector for the CERN LHC Run 3

Virtual Organization Platform Interoperability Provides the Long Tail an eScience Environment

Untitled

Contact Info

Product

Resources

About