PAPI based federation as a test-bed for a common security infrastructure in EFDA sites

EFDA Federation Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).

R. Castro , J. Vega , A. Portas, D. R. López, S. Balme , J.M. Theis , P. Lebourg , H. Fernandes , A. Neto , A. Duarte , F. Oliveira , F. Reis , K.

Purahoo , K Thomsen , W. Schiller , J. Kadlecsik

Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).

EFDA Federation

Index Motivation Federation as solution PAPI PAPI for Federation EFDA Federation Future lines

EFDA Federation

Motivation Security framework for service access control Necessity in organizations of sharing resources for

collaborative work Transparency Simple management

EFDA Federation

Federation Set of organizations sharing resources based on:

Trust Policies agreements An Authentication and Authorization system

Requirements Single Sign On Secure Access Users Mobility Simple Management and Scalability Transparency Common tools compatibility

EFDA Federation

PAPI system Distributed AA system

Authentication Server (AS) Point of Access (PoA) Group Point of Access (GPoA) PAPI Front-End Server

Authentication modules X.509 certificates LDAP SQL Local file

EFDA Federation

How does it work?

HTTP Client

Authenticationdata

AuthenticationServer

Encry-cookie S1 Encry-cookie S2

PoATemporalSigned-URLs Signed-URL

Signed-URL

Encry-cookie

HTTPServer S1

HTTPServer S2

EFDA Federation

Group Point of Access

One credential -> Many resources

GPoA 1

Point ofAccess

GPoA 2

HTTP Client

EFDA Federation

Front-End Service Easy services integration

One XML configuration point

HTTPServer

HTTPService

HTTPServer

EFDA Federation

PAPI for Federation Fulfills federation requirements

Trust among components based on PKI Client types:

Common web browsers JAVA applications (JWS supported)

Standard java library (version > 1.5) RT-HTTPClient

[http://www.innovation.ch/java/HTTPClient/] jakarta commons-httpclient

[http://jakarta.apache.org/commons/httpclient/] Service types:

Web page servers Application servers (example Tomcat) Wiki integration (XWIKI)

EFDA Federation

PAPI in a Federated Organization

EFDA Federation

Federation Architecture Easy management

EFDA Federation

Federation Mechanism

Webbrowser

AuthenticationServer

FederatedSerice

User Repository

Federation GPoA

Federated Organization

User’s home Organization

FederatedSerice

Federation WAYF

EFDA Federation

EFDA Federation Starting decision: meeting 28/11/2006 in JET

EFDA Federation

Coordination EFDA wiki site

RP -> Authentication and Authorisation Systems Mail list

efda-federation@ciemat.es EFDA Jabber

EFDA Federation

Current State CEA

Federated, Attributes, Java Apps EFDA wiki federated !!!

CIEMAT Federated, Attributes, Java Apps

EFDA Federating

HAS/KFKI Federating, Integrating PAPI and Shibboleth

IST Federated, Attributes, Java Apps

JET Federated, Attributes, Java Apps

EFDA Federation

Future lines Evaluation of results of PAPI - Shibboleth integration New authentication mechanisms New services available in the federation Agreements on polices Evaluate new coordinated technologies taking

advantage of trust and policy agreement

EFDA Federation

Thank you for your attention

R. Castro , J. Vega , A. Portas, D. R. López, S. Balme , J.M. Theis , P. Lebourg , H. Fernandes , A. Neto , A. Duarte , F. Oliveira , F. Reis ,

K. Purahoo , K Thomsen , W. Schiller , J. Kadlecsik

PAPI based federation as a test-bed for a common security infrastructure in EFDA sites

Documents

Transcript of PAPI based federation as a test-bed for a common security infrastructure in EFDA sites

Alexander Rd. Decatur Blvd. Michael Way Rancho Rd ......PAPI TRANSIENT PARKING RUN-UP AREA FOR RWY 7 COMPASS ROSE SEGMENTED CIRCLE W/WIND SOCK PAPI 15 15 16 PAPI PAPI PAPI RANCHO DRIVE

PAPI Programmer's Reference

USER MANUAL · papi with portable mounting user manual . papi with portable mounting ...

EFDA-JET Bulletin€¦ ·

OPTIMIZING PAPI FOR LOW-OVERHEAD COUNTER MEASUREMENTweb.eece.maine.edu/~vweaver/projects/papi-rdpmc/... · additional PAPI counter could be enough to cause noticeable perturbations.

Papi Native Event

Annual Progress Report 2009 - KTH/Annual_Report_2009.pdf · Annual Progress Report 2009 ... The EFDA leadership during 2009 includes the EFDA Leader, Mr. Jerome Pamela and the EFDA

Temporary Installation Methods for PAPI/A-PAPI Systems · Airports have a need to temporarily install a precision approach path indicator (PAPI) or an abbreviated PAPI (A-PAPI) to

EFDA Dipole Status

Input documentation for ETSAP-TIAM and EFDA-TIMES · 450 ppm - Heat transmis. invest. 25 $/GJ - World 450 ppm - Regional fission max. 25% - World EFDA-TIMES December 2009 EFDA-TIMES

Papi parivar

PAPI verfy

PAPI USER GUIDE - Vrije Universiteit Brusselparallel.vub.ac.be/education/computerarchitectuur/... · PAPI User’s Guide Version 2.3 - 5 - WHAT IS PAPI? PAPI is an acronym for Performance

PAPI 2014 - United Nations Development Programme...vi PAPI 2014 PAPI 2014 vii FOREWORD The Viet Nam Provincial Governance and Public Administration Performance Index (PAPI) is a policy

Inspection manual FOR inspectors - EFDA

SMF / PAPI Photometric Instrument for PAPI lights alignment · The SMF/PAPI is the sole instrument in the world fo ... SMF / PAPI Photometric Instrument for PAPI lights alignment

Riset Papi KOstick

PAPI Documentation

Projec of Papi

EFDA Conference -