caGrid 1.0 Security Break Out Session

1
caGrid 1.0 Security Break Out Session

• Overview
• Discussed Each Focus Area In Detail
• Federated Identity Management
• Trust Management
• Service Provider Credential Provisioning
• Authorization / Virtual Organizations
• caGrid Integration

2
caGrid 1.0 Security Break Out Session

• Agreed that the scope of caGrid 1.0 security
  would be limited to de-identified data.
• Agreed to present in the monthly architecture
  t-con
• Agreed we need a working group for Identity
  Management and Federation
• Agreed we need an Authorization working group.

3
caGrid 1.0 Security Break Out Session

• Federated Identity Management
• Dorian should be sufficient it meeting
  requirements
• Trust Management
• Agreement reached on the need for a Trust Service
• We will need to a method of enforcing Trust
  Levels
• Service Provider Credential Provisioning
• Need a method for provisioning service
  credentials
• More discussion need to occur on the heuristics.
• Authorization / Virtual Organizations
• In caGrid we want to empower service providers to
  make authorization decisions.
• We will provide a method of Attribute Based
  Authorization both at the User and Group Level
• Lots of Issues that need to be resolve.
• Implementation and deployment will be an
  iterative process.
• Subset in place at caGrid 1.0 Release