1. White paper overview 2 nd eIRG meeting April, 16 th 2004 Fotis Karayannis, Editor GRNET - Greek Research & Technology Network fkara@grnet.gr, http://www.grnet.gr Dublin, April 16th, 2003

2. Royal Irish Academy, Dublin, April 16 th, 20042 Outline Rome summary & recommendations Updated Table of Contents Overview Chapter outlines Policy roadmap

3. Royal Irish Academy, Dublin, April 16 th, 20043 Rome summary Taken from the Rome eIRG minutes..: “Consolidate progress so far – refine white paper…” Focus on Authentication & Authorization (AA) current practises “Need some movement on Policies – e.g. AA”

4. Royal Irish Academy, Dublin, April 16 th, 20044 Updated Table of Contents 1. Background – eInfrastructure (Updated) 2. The eIRG terms of reference (New - As defined in the Rome meeting) 3. The white paper scope (updated) 4. Use Model (updated) 5. Current practices and achievements (significantly new material – now focus on AA(A)) 6. Policy Framework (empty in Rome – first draft policies)

5. Royal Irish Academy, Dublin, April 16 th, 20045 Overview New members added in the editorial board since Dec 2003 White paper now reached a “decent” status Could be published to a wider audience to get feedback and other views But still with a “work in progress” label White paper is broadly “influenced” by Grid communities and EGEE M/W and Application directions Input from Supercomputing world and SC Grids (DEISA) Input on “other” M/W schemes (e.g. Shibboleth, PAPI) and application areas (e.g. Digital Libraries) frameworks Input from NREN community (most on AUPs) But first policies are going to be used first by FP6 projects!

6. Royal Irish Academy, Dublin, April 16 th, 20046 Chapter 1 1. Background – eInfrastructure (Updated) “Decide on concrete next steps” regarding “the policy framework”: “Concrete authentication policy proposal” “The way forward for grid authorization” “Promote co-operations between EU and similar programs of other regions”

7. Royal Irish Academy, Dublin, April 16 th, 20047 Chapter 2 2. The eIRG terms of reference As exactly defined in the Rome meeting!

8. Royal Irish Academy, Dublin, April 16 th, 20048 Chapter 3 3. The white paper scope “White paper summarizes trends.. on resource access and sharing..policies” “This version focuses on AA and identifies a roadmap for future development” Same methodology – now focusing on current practices  policy framework life cycle

9. Royal Irish Academy, Dublin, April 16 th, 20049 Chapter 4 4. Use model – policy architecture Policy architecture updated Use model ideas need to come up with an actual use model complicated because of multiple components/domains – VOs! only the networking layer could need a separate use model (e.g. to cope with end2end, QoS and Bandwidth on Demand issues) Updated high-level use cases focusing on eScience

10. Royal Irish Academy, Dublin, April 16 th, 200410 Chapter 4 – Policy Architecture

11. Royal Irish Academy, Dublin, April 16 th, 200411 Chapter 5 5. Current practices and achievements Emphasis on AuthN (first), AuthZ (second), Accounting (later?) Urgent project needs (EGEE, DEISA, SEE-GRID) Content covered by the Dave’s, Diego’s and Patrick’s presentations (-:

12. Royal Irish Academy, Dublin, April 16 th, 200412 Chapter 6 6. Policy framework Identifies draft policies on AuthN, AuthZ, Funding, Sharing, Usage Again covered by eInfrastructure presentations (-: Policy framework roadmap

13. Royal Irish Academy, Dublin, April 16 th, 200413 Policy roadmap - Executive summary Immediate actions on : Generic statement: “Promote interoperable authentication and authorisation infrastructures enabling seamless sharing of eInfrastructure resources” Special statement: “The EUGridPMA, as a group of mutually trusted CAs and TACAR as the common CA repository constitute concrete first steps towards common EU authentication policies, essential for resource access and sharing in the major FP6 e-science projects”

14. Royal Irish Academy, Dublin, April 16 th, 200414 Policy roadmap - Executive summary (2) Subsequent actions on :  “Enable federated solutions, decoupling local authentication procedures at a user's origin organization from local authorisation”  Formulate policies for Authorisation  “Allow privacy preservation”  “Start working out policies towards accounting and resource sharing”  Work towards a first version of an Acceptable Use Policy document  “The above activities have to be supplemented by the creation and continuous update of a registry of European ICT resources and policies for e-Science and beyond, and the promotion of international collaboration on resource sharing policy aspects “  User communities