The INDIGO-Datacloud Authentication and Authorization Infrastructure

Ceccanti, Andrea; Hardt, Marcus; Wegh, Bas; Millar, AP; Caberletti, Marco; Vianello, Enrico; Licehammer, Slávek

doi:10.1088/1742-6596/898/10/102016

Cited by 21 publications

(13 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…INDIGO [17] provides a token translation system that supports interoperability among sources supporting different protocols.…”

Section: Related Workmentioning

confidence: 99%

“…e problem of the reunification of personal data has been well identified in the literature in Chapter IV in [4] and remains relevant. In fact, academic and industrial solutions, either they be (i) personal data stores [5][6][7][8], (ii) identity managers [9][10][11][12][13], (iii) anonymous certificate systems [3,14,15], or (iv) delegation architecture [16,17], do not address the specific needs of PII management within TCPA. Indeed, (i) personal data stores only support simple PII management scenarios where PII is collected on an "all-ornothing" basis.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

An Efficient User-Centric Consent Management Design for Multiservices Platforms

Marillonnet

Ates²,

Laurent

et al. 2021

Security and Communication Networks

View full text Add to dashboard Cite

This paper presents an efficient user-centric consent management system to access online services of the Territorial Collectivities and Public Administration (TCPA) as well as user-authorized third parties. It defines a novel PII manager that supports a set of sources obeying to different authorization and PII retrieval protocols. This contribution is motivated by the necessity to interface TCPA services with remote sources that provide Personally Identifiable Information (PII). Hence, the originality of our solution is multifold. First, the burden for enforcing the interoperability between the sources and the TCPA services collecting the PII is reduced from the point of view of the user, the administrator of the User-Relationship Management (URM) platform, and the territorial agent responsible for processing the user’s queries. Second, it defines a unified consent model supporting four types of sources. Third, it goes into details of practical implementations. Fourth, the relevance of the proposed PII manager for a relevant TCPA use case is demonstrated through a functional analysis.

show abstract

“…INDIGO [17] provides a token translation system that supports interoperability among sources supporting different protocols.…”

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

An Efficient User-Centric Consent Management Design for Multiservices Platforms

Marillonnet

Ates²,

Laurent

et al. 2021

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…More details on the service can be found in previous publications [4,15] or on the IAM website [16]. In the following sections, we discuss recent developments that address WLCG requirements.…”

Section: The Indigo Iam Servicementioning

confidence: 99%

Beyond X.509: Token-based authentication and authorization in practice

2020

View full text Add to dashboard Cite

One of the key challenges identified by the HEP R&D roadmap for software and computing is the ability to integrate heterogeneous resources in support of the computing needs of HL-LHC. In order to meet this objective, a flexible Authentication and Authorization Infrastructure (AAI) has to be in place, to allow the secure composition of computing and storage resources provisioned across heterogeneous providers (e.g., Grid, private and commercial Clouds, HPC centers). At CHEP 2018, we presented how a flexible AAI based on modern, standard Web technologies (OpenID Connect, OAuth and JSON Web Tokens) and centered on the INDIGO Identity and Access Management (IAM) service could support the transition of the WLCG infrastructure to a token-based AAI. In the meanwhile, INDIGO IAM has been selected by the WLCG Management Board as the solution that will be adopted by LHC experiments, and is also at the core of the AAI envisioned to support the computing needs of the ESCAPE project. In this contribution, which represents a follow up to last-year plenary talk, we describe the work done recently on the IAM service to support WLCG requirements.

show abstract

“…Examples of other funded digital assets include deploying an instance of the INDIGO Identity and Access Management (IAM) [16] service to be used as the IRIS identity proxy, extending the Rucio data management system [17] to support multiple VOs and development of an OpenStack reference platform optimised for scientific computing.…”

Section: Digital Assetsmentioning

confidence: 99%

IRIS – providing a nationally accessible infrastructure for UK science

et al. 2020

View full text Add to dashboard Cite

In many countries around the world, the development of national infrastructures for science either has been implemented or are under serious consideration by governments and funding bodies. Current examples include ARDC in Australia, CANARIE in Canada and MTA Cloud in Hungary. These infrastructures provide access to compute and storage to a wide swathe of user communities and represent a collaboration between users, providers and, in some cases, industry to maximise the impact of the investments made. The UK has embarked on a project called IRIS to develop a sustainable e-infrastructure based on the needs of a diverse set of communities. Building on the success of the UK component of the WLCG and the innovations made, a number of research institutes and universities are working with several research groups to co-design an infrastructure, including support services, which take this to a level applicable to a wider use base. We present the preparatory work leading to the definition of this infrastructure, showing the wide variety of use cases which require to be supported. This leads us to a definition of the hardware and interface requirements needed to meet this diverse set of criteria, and the support posts identified in order to make best use of this facility and sustain it into the future.

show abstract

The INDIGO-Datacloud Authentication and Authorization Infrastructure

Cited by 21 publications

References 0 publications

An Efficient User-Centric Consent Management Design for Multiservices Platforms

An Efficient User-Centric Consent Management Design for Multiservices Platforms

Beyond X.509: Token-based authentication and authorization in practice

IRIS – providing a nationally accessible infrastructure for UK science

Contact Info

Product

Resources

About