FESR Trinacria Grid Virtual Laboratory Grid Industry Day Catania October 2006 Secure Data Storage Into Grid Enviroment Unico Srl : Aldo Campisano Giordano Scuderi

Catania, October Agenda Who we are Who we are What we do What we do Why Secure Data for GRID Why Secure Data for GRID

Catania, October Who we are Unico Srl Activity: Design and Sales of Computer Systems Services & Support Employ : 30 people Locations: Catania – Napoli – Milano Invoice (FY 05): 8,123 k Euro ( 1,450 k Euro Services & Support 17.9% ) Investment R&D: 120 k Euro ( 1.5 % ) Internal Training: 40 k Euro ( 0,5 % )

Catania, October Certifications ISO 9001:2000 Anagrafe Nazionale Ricerche Nr HP Preferred Partner Sun Microsystem Partner Cisco Certified Microsoft Certified

Catania, October What we do System Integration  Multiple Operating Sistems  HP-UX  Solaris  Linux  Windows Server  Applications  High Availability Systems  Clustering  Networking ( LAN – WAN )  Wireless Tecnology  Storage Area Network  Network Attached Storage  Security  Disaster Recovery Planning

Catania, October What we do Some Customer Accent Srl Applied Materials ( Catania – Milano – L’Aquila ) Autogrill ( Data Center Milano ) Hewlett-Packard Italiana ST Microelectronics (Italy – France - Malta – Marocco) Università Catania – Messina

Catania, October What we do Services The Design of Architecture for Systems, Storage & Network Installation – Startup - Tuning Planned Hardware and Software Maintenance Help Desk Desk Side & Remote Support Fleet Management for PC & Mobile Pay per Use for : Computing - Storage – Printing & Coping

Catania, October Why GRID Access to Grid Enviroment is appealing Large Enterprise and SME offering : Computing Power & Performance Large Area of Storage A Pay per Use approach: –Pay only for what use and when you need it –No impact on their assets –Lower Total Cost of Ownership Avalaibility of Application Software

Catania, October Why Grid At the same time they need : An easy User Interface Availability Reliability Data Integrity A detailed Accounting Management System Relative low cost High Level of Security and……

Catania, October Secure Data Storage …. PROTECT THEIR OWN DATA FROM ACCESS BY ANY OTHER USER

Catania, October EncodedText.enc ClearText.txt Secure Data Storage sensitive Data could be “sensitive” and then must be protected  We believe that to protect access to the file with password is not secure enough  We trust that protect informations contained in user data using Encryption algorithm is much more secure Before Encryption After Encryption

Catania, October Secure Data Storage A password, used to protect access to a file, can be discovered in worse case, in some hours….. ….. but time needed to crack a 128-bit key, even using a very fast today’s computer, is : 1,198,920,341,200,668,243 years

Catania, October Secure Data Storage A higher level application built on top of many gLite grid services: – Command Line application for data management A lower level API built on top of gLite API: – API to access encrypted data from user application

Catania, October Command Line Application Set of commands that can be used from user interface: – Similar to lcg-util commands, but work on encrypted data – Give to the users transparent encryption/decryption process Example (copy local file to grid): lcg-cr -d -L lcg-scr -d -L Allow to accomplish ordinary data management operations: – Data copy to Grid storage element – Data copy from Grid storage element – Delete data from Grid storage element

Catania, October Application Program Interface Library that allow User Application to access encrypted data: – Transparent encryption and decryption – Extends existing API’s adding all the secure storage functionality Porting of user applications require small changes: – Example:  gfal_read (fd, buffer, buffer_size )  gfal_secure_read ( fd, buffer, buffer_size )

Catania, October Implementation Command Line Application Under Development –First alpha release coming soon

Catania, October Future development API development will start after first release of Command Line Application – Essential functions are being included in first release – API and Command Line Application are released under Open Source License ( source code are available ) – Tutorial and documentation for developers – An example of API implementation

Catania, October Secure Storage System Only encrypted data are present in GRID Storage Encryption and Decryption are transparent Only authorized users will get key Encrypted data Key Secure Storage Software Data Grid Storage Key repository

Catania, October Thanks