PAPI based federation as a test-bed for a common security infrastructure in EFDA sites
description
Transcript of PAPI based federation as a test-bed for a common security infrastructure in EFDA sites
![Page 1: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/1.jpg)
EFDA Federation Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
PAPI based federation as a test-bed for a common security infrastructure in EFDA sites
R. Castro , J. Vega , A. Portas, D. R. López, S. Balme , J.M. Theis , P. Lebourg , H. Fernandes , A. Neto , A. Duarte , F. Oliveira , F. Reis , K.
Purahoo , K Thomsen , W. Schiller , J. Kadlecsik
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
![Page 2: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/2.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Index Motivation Federation as solution PAPI PAPI for Federation EFDA Federation Future lines
![Page 3: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/3.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Motivation Security framework for service access control Necessity in organizations of sharing resources for
collaborative work Transparency Simple management
![Page 4: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/4.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Federation Set of organizations sharing resources based on:
Trust Policies agreements An Authentication and Authorization system
Requirements Single Sign On Secure Access Users Mobility Simple Management and Scalability Transparency Common tools compatibility
![Page 5: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/5.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
PAPI system Distributed AA system
Authentication Server (AS) Point of Access (PoA) Group Point of Access (GPoA) PAPI Front-End Server
Authentication modules X.509 certificates LDAP SQL Local file
![Page 6: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/6.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
How does it work?
HTTP Client
Authenticationdata
AuthenticationServer
Encry-cookie S1 Encry-cookie S2
PoATemporalSigned-URLs Signed-URL
Signed-URL
Encry-cookie
Encry-cookie
HTTPServer S1
HTTPServer S2
PoA
![Page 7: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/7.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Group Point of Access
One credential -> Many resources
GPoA 1
Point ofAccess
Point ofAccess
Point ofAccess
Point ofAccess
GPoA 2
HTTP Client
1
2
![Page 8: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/8.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Front-End Service Easy services integration
One XML configuration point
PoA
PoA
PoA
GPoA
HTTPServer
HTTPService
HTTPServer
![Page 9: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/9.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
PAPI for Federation Fulfills federation requirements
Trust among components based on PKI Client types:
Common web browsers JAVA applications (JWS supported)
Standard java library (version > 1.5) RT-HTTPClient
[http://www.innovation.ch/java/HTTPClient/] jakarta commons-httpclient
[http://jakarta.apache.org/commons/httpclient/] Service types:
Web page servers Application servers (example Tomcat) Wiki integration (XWIKI)
![Page 10: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/10.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
PAPI in a Federated Organization
![Page 11: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/11.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Federation Architecture Easy management
![Page 12: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/12.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Federation Mechanism
Webbrowser
AuthenticationServer
FederatedSerice
User Repository
Federation GPoA
Federated Organization
Federated Organization
User’s home Organization
FederatedSerice
Federation WAYF
??
![Page 13: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/13.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
EFDA Federation Starting decision: meeting 28/11/2006 in JET
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
![Page 14: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/14.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Coordination EFDA wiki site
RP -> Authentication and Authorisation Systems Mail list
[email protected] EFDA Jabber
![Page 15: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/15.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Current State CEA
Federated, Attributes, Java Apps EFDA wiki federated !!!
CIEMAT Federated, Attributes, Java Apps
EFDA Federating
HAS/KFKI Federating, Integrating PAPI and Shibboleth
IST Federated, Attributes, Java Apps
JET Federated, Attributes, Java Apps
![Page 16: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/16.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Future lines Evaluation of results of PAPI - Shibboleth integration New authentication mechanisms New services available in the federation Agreements on polices Evaluate new coordinated technologies taking
advantage of trust and policy agreement
![Page 17: PAPI based federation as a test-bed for a common security infrastructure in EFDA sites](https://reader035.fdocuments.in/reader035/viewer/2022070417/568154a7550346895dc2b69e/html5/thumbnails/17.jpg)
EFDA Federation
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Thank you for your attention
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
Para ver esta película, debedisponer de QuickTime™ y deun descompresor TIFF (LZW).
R. Castro , J. Vega , A. Portas, D. R. López, S. Balme , J.M. Theis , P. Lebourg , H. Fernandes , A. Neto , A. Duarte , F. Oliveira , F. Reis ,
K. Purahoo , K Thomsen , W. Schiller , J. Kadlecsik