White paper overview 2nd eIRG meeting April, 16th 2004

1
White paper overview2nd eIRG meetingApril,
16th 2004

• Fotis Karayannis, Editor
• GRNET - Greek Research Technology Network
• fkara_at_grnet.gr, http//www.grnet.gr
• Dublin, April 16th, 2003

2
Outline

• Rome summary recommendations
• Updated Table of Contents
• Overview
• Chapter outlines
• Policy roadmap

3
Rome summary

• Taken from the Rome eIRG minutes..
• Consolidate progress so far refine white
  paper
• Focus on Authentication Authorization (AA)
  current practises
• Need some movement on Policies e.g. AA

4
Updated Table of Contents

• 1. Background eInfrastructure (Updated)
• 2. The eIRG terms of reference (New - As defined
  in the Rome meeting)
• 3. The white paper scope (updated)
• 4. Use Model (updated)
• 5. Current practices and achievements
  (significantly new material now focus on AA(A))
• 6. Policy Framework (empty in Rome first draft
  policies)

5
Overview

• New members added in the editorial board since
  Dec 2003
• White paper now reached a decent status
• Could be published to a wider audience to get
  feedback and other views
• But still with a work in progress label
• White paper is broadly influenced by Grid
  communities and EGEE M/W and Application
  directions
• Input from Supercomputing world and SC Grids
  (DEISA)
• Input on other M/W schemes (e.g. Shibboleth,
  PAPI) and application areas (e.g. Digital
  Libraries) frameworks
• Input from NREN community (most on AUPs)
• But first policies are going to be used first by
  FP6 projects!

6
Chapter 1

• 1. Background eInfrastructure (Updated)
• Decide on concrete next steps regarding the
  policy framework
• Concrete authentication policy proposal
• The way forward for grid authorization
• Promote co-operations between EU and similar
  programs of other regions

7
Chapter 2

• 2. The eIRG terms of reference
• As exactly defined in the Rome meeting!

8
Chapter 3

• 3. The white paper scope
• White paper summarizes trends.. on resource
  access and sharing ..policies
• This version focuses on AA and identifies a
  roadmap for future development
• Same methodology now focusing on current
  practices ? policy framework life cycle

9
Chapter 4

• 4. Use model policy architecture
• Policy architecture updated
• Use model ideas
• need to come up with an actual use model
• complicated because of multiple
  components/domains VOs!
• only the networking layer could need a separate
  use model (e.g. to cope with end2end, QoS and
  Bandwidth on Demand issues)
• Updated high-level use cases focusing on eScience

10
Chapter 4 Policy Architecture
11
Chapter 5

• 5. Current practices and achievements
• Emphasis on AuthN (first), AuthZ (second),
• Accounting (later?)
• Urgent project needs (EGEE, DEISA, SEE-GRID)
• Content covered by the Daves, Diegos and
  Patricks presentations (-

12
Chapter 6

• 6. Policy framework
• Identifies draft policies on
• AuthN, AuthZ, Funding, Sharing, Usage
• Again covered by eInfrastructure presentations
  (-
• Policy framework roadmap

13
Policy roadmap - Executive summary

• Immediate actions on
• Generic statement Promote interoperable
  authentication and authorisation infrastructures
  enabling seamless sharing of eInfrastructure
  resources
• Special statement The EUGridPMA, as a group of
  mutually trusted CAs and TACAR as the common CA
  repository constitute concrete first steps
  towards common EU authentication policies,
  essential for resource access and sharing in the
  major FP6 e-science projects

14
Policy roadmap - Executive summary (2)

• Subsequent actions on
• Enable federated solutions, decoupling local
  authentication procedures at a user's origin
  organization from local authorisation
• Formulate policies for Authorisation
• Allow privacy preservation
• Start working out policies towards accounting
  and resource sharing
• Work towards a first version of an Acceptable Use
  Policy document
• The above activities have to be supplemented by
  the creation and continuous update of a registry
  of European ICT resources and policies for
  e-Science and beyond, and the promotion of
  international collaboration on resource sharing
  policy aspects
• User communities