SEE-GEO Meeting 20 th March 2008 NCeSS e-Infrastructure for the Social Sciences Project: Security and Geospatial Services Andy Turner

SEE-GEO Meeting 20 th March 2008 Overview Introduction Work Package 3.2 Work Package 4.1 Feedback

SEE-GEO Meeting 20 th March 2008 Introduction The NCeSS e-Infrastructure for the Social Science (NeSS) Project – – to –Delayed start… –7 Major Work Packages –Security and Geospatial Service Work undertaken in Work Packages 3.2 and 4.1

SEE-GEO Meeting 20 th March 2008 Some Key People to Mention –Rob Proctor Research Director –June Finch Project Coordinator –Taken over from Mike Daw –Rob Allan e-Science Expert –Xiaobo Yang Portal Maintainer –Pascal Ekin Geospatial Services and Grid Expert

SEE-GEO Meeting 20 th March 2008 Work Package 3.2: Security Authentication and Authorisation People –Rob Proctor –Wei Jie Deliverables –3.2.1 Report: Review of Grid Authentication and Authorization Technologies –3.2.2 Report: User Requirements –3.2.3 Implementation?

SEE-GEO Meeting 20 th March 2008 Work Package 4.1 Grid Enabling Simulation Models Part done by PolicyGrid and MoSeSPolicyGridMoSeS MoSeS People –Mark Birkin –Andy Turner –Paul Townend –Junaid Arshad OGC GeoLinking Interoperability Experiment

SEE-GEO Meeting 20 th March 2008 MoSeS NeSS Deliverables –4.1.1 GLS Client –4.1.2 Deployed GLS –4.1.4 Geographical Mapping Service –4.1.5 Workflows

SEE-GEO Meeting 20 th March 2008 Feedback Questions/comments?

SEE-GEO Meeting 20 th March 2008 Acknowledgements and Thanks Thanks to NCeSS researchers, collaborators and funders. Thanks to all involved in the OGC GeoLinking Interoperability Experiment (especially the UK part of the consortium) Thanks Paul Townend for work on a GLS Client which is to be delivered as part of Work Package 4.1 Thanks Junaid Arshad for ongoing work on Security and delivery work on Work Package 4.1 Thanks Wei Jie for sharing reports and presentation material for Work Package 3.2 Thanks to all involved in eResearch for improving our hardware, software and data resources so that we can all do our bit to better understand and plan our future. Thank you for listening!

SEE-GEO Meeting 20 th March 2008

Authentication Issues Adopting Shibboleth as the authentication infrastructure Build federation for eSS community and define user attributes Integration of Shibboleth with legacy authentication systems Integration of Shibboleth with Sakai portal

SEE-GEO Meeting 20 th March 2008 Security Challenges Simplicity Avoiding complicated security procedures like authentication, delegation, etc Usability Providing web-based one stop environment to access a variety of social science resources like datasets, tools, services, wiki, blogs, etc. Interoperability –Making legacy security systems interoperable Manageability –Relieve administrator and service providers workload Granularity –Providing flexibility for service providers to make fine-grained authorization for various resources

SEE-GEO Meeting 20 th March 2008 Authorization Issues Design & implement a fine-grained authorization infrastructure for grid-enabled datasets Attribute-based fine-grained access control for OGSA-DAI b ased social science datasets Using Shibboleth, VOMS and PERMIS as authorization engine