- caops-wg - lists.ogf.org

CFP: The Third International Symposium on Information Assurance and Security (IAS'07)
by Frank Siebenlist 13 Dec '06

13 Dec '06

FYI - Regards, Frank. --------------------- Call for Papers The Third International Symposium on Information Assurance and Security (IAS'07) http://www.ias07.org/ August 29-31, 2007, Manchester, United Kingdom Overview: Information assurance and security has become an important research issue in networked and distributed information sharing environments. Finding effective ways to protect information systems, networks and sensitive data within the critical information infrastructure is challenging even with the most advanced technology and trained professionals. The International Symposium on Information Assurance and Security aims to bring together researchers, practitioners, developers, and policy makers involved in multiple disciplines of information security and assurance to exchange ideas and to learn the latest development in this important field. Topics: Previously unpublished work offering novel research and application contributions in any aspect of information assurance, security and privacy are solicited for submission to the IAS'07 symposium. Topics of interest include, but are not limited to, the following: - Agent and Mobile Code Security - Anonymity and User Privacy - Authentication and Identity Management - Authorization and Access Control - Biometrics Security and Applications - Computer Forensics - Cryptographic Protocols - Data Integrity and Privacy - Database Security - Denial of Service and Intrusion Detection - Distributed System Security - E-Commerce and E-Government Security - Fraud Control - Information Warfare and Cyber-terrorism - Intellectual Property Protection - Internet and Web Services Security - Key Management and Recovery - New Ideas and Paradigms for Security - Operating System Security - Secure Hardware and Smartcards - Secure Software Technologies - Security Education and Training - Security Management and Strategy - Security Models and Architectures - Security Verification, Evaluations and Measurements - Trust Negotiation, Establishment and Management - Ubiquitous Computing Security Paper Submission: Papers should be original and contain contributions of theoretical, experimental or application nature, or be unique experience reports. The page limit is 6 pages in IEEE 8.5" x 11" two-column format with fonts not smaller than 10 points. Each paper should contain up to 5 keywords. Electronic submission in the PDF or Word format is required. Papers will be evaluated for originality, significance, clarity, and soundness. Except for invited papers, all papers will be reviewed by at least three independent reviewers. Conference Proceedings: Accepted papers will be published by IEEE Computer Society Press. Selected papers presented in the conference will be considered for publication in a special issue of an international journal. Best Paper Awards: The IAS'07 Program Committee will select one winner for the Best Paper Award (all regular papers are eligible) and one winner for the Best Student Paper Award (to be eligible, the student must be the sole author of the paper, or the first author and primary contributor. A cover letter to the General Chair/Program Chair must identify the paper as a candidate for this competition at the time of submission). The award winners will each be presented with an award certificate and a direct payment of £200 at the conference, and an invitation to submit an extended version of the award-winning paper for the consideration of publication in an international journal, JIAS. Key Deadlines: Paper Submission Deadline: March 20, 2007 Author Notification: May 20, 2007 Camera Ready Submission Deadline (6 pages): June 20, 2007 Author Registration Deadline: June 20, 2007. Workshop Proposal Submission Deadline: February 10, 2007. Workshop Proposal Notification: February 15, 2007. Panel/Tutorial Proposal Submission Deadline: April 20, 2007. Proposal Notification: May 20, 2007 Instructions for workshop proposals: IAS'07 invites workshop, panel and tutorial proposals. A workshop proposal should include the following items: (1) Title of the workshop. (2) Scope and Topics. (3) The workshop chair (or co-chairs) with a brief biography. (4) Contact information (email address and phone number). (5) Expected number of attendees. Additional notes for the workshops: - The organisers of a workshop can decide their own paper submission and notification deadlines. - Each workshop should have at least ten papers. - A list of accepted papers (Authors, Titles, Email addresses and Review Results) must be sent to the IAS'07 Program Chair (ias07(a)cs.man.ac.uk) by May 20, 2007. - IAS'07 will provide administrative support for workshop room booking, registration, and publication. All papers accepted by the workshops will be published in the IAS'07 proceedings. - All other workshop related matters, such as collect, review and accept papers, should be planned and organised by the workshop organisers, independently of the IAS'07. Workshop organisers should make sure that the papers be reviewed by at least three reviewers. Financial support for workshop chairs: If workshops are constructed successfully (with at least ten papers), their organisers (one organiser per workshop) will get: - Free registration, - Free accommodation (up to 3 nights). Contacts: Further enquiries regarding matters related to IAS'07 can be sent to the Conference Local Organising Chairs: Ms Bryony Quick; or Mr Iain Hart; Email: ias07(a)cs.man.ac.uk Tel: +44 (0)161 275 6130 Fax: +44 (0)161 275 6204 -- Frank Siebenlist franks(a)mcs.anl.gov The Globus Alliance - Argonne National Laboratory

1 0

OGF Security Area Update December 2006
by David Groep 04 Dec '06

04 Dec '06

Dear all, Over the past few months, several new activities have started in the OGF Security Area. With this Update, we would like to inform you about these activities and at the same time foster coherency in the security area. We hope you find this update useful and welcome any comments you have on this kind of communication, and of course on any grid security related activities. Note also the OGF 19 early registration deadline of December 8 (Friday). We hope that, with the activities listed below, the OGF 19 program will be interesting and packed with security-related activities. Best regards, the Security ADs Blair Dillaway and David Groep. In this update: - NEW: OGSA-AuthN Charter BoF to be held at OGF19 - NEW: Activity discussion on Levels of Assurance issues - OGSA Basic Security Profile Core and Security Channel - OGSA-AuthZ-WG re-chartered - Firewall Issues RG documents and group directions - CAOPS Document progress and sessions These updates will usually be sent to the <security-area at ogf.org> list, to which you can subscribe via http://mailman.ogf.org/ OGSA-AuthN Charter BoF ---------------------- The OGSA-AuthN group is currently being bootstrapped to look at technologies and mechanisms for authentication in the OGSA context. The groups focus will be on the drafting the roadmap for OGSA authentication technologies, documentation of existing authentication community practices, and look at the issues surrounding AuthN delegation. The group and BoF is being organised and animated by Alan Sill of Texas Tech. Discussions on the exact scope of the group are currently ongoing on the BoF mailing list, and a BoF session will be held during OGF19. These discussions should result in a charter proposal being brought to the community at the BoF. It is explicitly a part of the charter for this group to work in a symmetrical manner with any OGSA-AuthZ work that may be needed for consistency in grid services. For more information Draft charter: http://www.ggf.org/gf/group_info/charter.php?review&group=OGSA-AuthN-WG Mailing list: ogsa-authn-bof(a)ogf.org http://www.ogf.org/mailman/listinfo/ogsa-authn-bof/ Topical BoF on Levels of Assurance (LoAs) ----------------------------------------- Ideas around "Levels of Assurance" have been receiving more and more attention, with the advance of federations and Authentication and Authorization infrastructures. "LoA is defined as the strength of authentication required for a service provider to be assured that a resource access is only granted to users whose identities have been verified. It reflects the degree of confidence in an authentication process used to establish the identity of an entity (an individual or a software component) to whom the credential was issued, and the degree of confidence that the entity using the credential is indeed the entity that the credential was issued to." Ning Zhang of Manchester University has taken the initiative to bring up the discussion on this activity in the OGF context. Examples of questions that this activity could address are: - What are the existing definitions of LoA suited to Grid or VO environment? - How to apply LoA to safeguard Grid services/resources? - Are some onerous registration requirements or special condition stipulations due to perceived inadequacies in the strength of authentication? - Are there any limitations in terms of user accessibility, scalability and interoperability? The activity can include discussion on how operational procedures affect LoA, how the various parameters and factors influence the overall LoA value in grid/VO environments, and come up with recommendations on how these factors can be taken into account. The purpose here is to consult, and to seek comments and feedbacks from, the communities concerned (including service providers, from e-Science, e-Business and e-Gov) on their views on the definition and applications of LoA in achieving fine-grained access control. Everyone interested in such an activity is extremely welcome to attend this activity BoF session. If there is sufficient interest within OGF, the BoF can also discuss how the activity is best embedded in the OGF organisation; it is not necessarily the aim of this BoF to result in a new research or working group. More information: Security Area Wiki: https://forge.gridforum.org/sf/wiki/do/viewPage/projects.sec/wiki/LoAInitia… Document "e-Infrastructure Security: Levels of Assurance" https://forge.gridforum.org/sf/sfmain/do/downloadAttachment/projects.sec/wi… Discussion forum: https://forge.gridforum.org/sf/discussion/do/listTopics/projects.sec/discus… OGSA Basic Security Profile Core and Security Channel documents --------------------------------------------------------------- The updated version of the OGSA Basic Security Profile 1.0 - Core has entered WG final call and is available on GridForge: https://forge.gridforum.org/sf/docman/do/downloadDocument/projects.ogsa-wg/… The OGSA Security Profile 1.0 - Secure Channel document draft, discussing how to establish a secure channel in the OGSA context, has been revised and is now available at https://forge.gridforum.org/sf/docman/do/downloadDocument/projects.ogsa-wg/… OGSA-AuthZ-WG re-chartered ------------------------- The OGSA-AuthZ Working Group has been rechartered and now addresses more advanced features that are required, such as obligations, decisions based on action parameters, policy management, dynamic delegation of authority, attribute schema exchanges etc. The new charter is available from http://www.ggf.org/gf/group_info/charter.php?review&group=OGSA-AuthZ-WG Firewall Issues overview document published ------------------------------------------- This "Firewall Issues Overview" information track document by Ralph Niederberger et al., has been published as GFD-I.083. You can download it here: http://www.ggf.org/gf/docs/?final The middlebox technology overview and evaluation document is coming up next, and new documents are being considered on the mailing list More information: Charter: http://www.ggf.org/gf/group_info/charter.php?review&group=FI-RG Mailing list: fi-rg(a)ogf.org http://www.ogf.org/mailman/listinfo/fi-rg/ CAOPS Documents and sessions ---------------------------- CAOPS will hold two sessions during the upcoming OGF 19 event, of which one is traditionally dedicated to the International Grid Trust Federation (IGTF). Current draft document for example include the Grid Certificate Profile, a comprehensive collection of the community knowledge on what works and does not work in an interoperable PKI geared to currently running grids. More information: Charter: http://www.ggf.org/gf/group_info/charter.php?review&group=CAOPS-WG International Grid Trust Federation http://www.gridpma.org/ Grid Certificate Profile: https://forge.gridforum.org/sf/go/doc13741 (PDF) https://forge.gridforum.org/sf/go/doc13742 (MS Word) -- David Groep ** National Institute for Nuclear and High Energy Physics, PDP/Grid group ** ** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

1 0

Grid Certificate Profile document update
by David Groep 30 Nov '06

30 Nov '06

Dear all, I've uploaded an updated version of the Grid Certificate Profile document, clearing up confusion on the use of the Country (C) attribute in issuer and subject distinguished names. It's interpretation for the issuer and subject should be considered differently. The new text in v0.17 The new version reads (in the explanatory footnotes), for issuer (CA) DNs: "If a Country (C) component is included in the issuer DN, it SHOULD reflect the country in which the issuer is based." and for subject end-entity DNs: "The country (C) asserted in the subject DN of an end-entity certificate SHOULD correspond the home country of the end-entity, and thus does not necessarily reflect and is not necessarily the same as the country in which the CA is operating, or the country code in the issuer DN. Therefore, in such cases the Country attribute should not be part of a unique subject DN naming prefix." The new version is on GridForge: https://forge.gridforum.org/sf/go/doc13741 (PDF) https://forge.gridforum.org/sf/go/doc13742 (MS Word) with the comment: new version 0.17: Clarified use of Country(C) attribute in subject and issuer names Regards, DavidG. -- David Groep ** National Institute for Nuclear and High Energy Physics, PDP/Grid group ** ** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

1 0

CAOPS-WG Teleconference
by Darcy Quesnel 30 Nov '06

30 Nov '06

I know that this is very late notice, and I apologize. I thought that I'd telepathically communicated this already out to everyone. We've reserved an hour slot out of the TAGPMA meeting for discussion of CAOPS business. We'll piggyback on ESnet conferencing facilities as usual. Details below. DATE Thursday, 30 November, 13:30 CT (Austin, TX Time) http://indico.na-df.rnp.br/indico/contributionDisplay.py?contribId=19&sessi… AGENDA Documents that should be in the editor queue Documents still in writers hands New Documents? (I'll fill in the agenda with specifics...) CONTACT GDS 0011349884483 or ESNet 884483 or phone 1-510-883-7860 884483# Please join us if you can Darcy

1 1

on-hold cert revocation ("suspend") to disappear?
by Mike Helm 27 Nov '06

27 Nov '06

------- Forwarded Message >From SRS0=c649ea436bb7f94904d7eb80db940951b33abd3e=167=mail.imc.org=owner-ietf-pkix(a)es.net Mon Nov 27 12:55:57 2006 Message-ID: <456B47D1.2050405(a)cs.tcd.ie> Date: Mon, 27 Nov 2006 20:17:21 +0000 From: Stephen Farrell <stephen.farrell(a)cs.tcd.ie> User-Agent: Thunderbird 1.5.0.8 (Windows/20061025) MIME-Version: 1.0 To: Russ Housley <housley(a)vigilsec.com> CC: ietf-pkix(a)imc.org Subject: Re: on-hold certificates in CRLs References: <a7d7da420611270753s70be3596qebe24ea9f3aff6b(a)mail.gmail.com> <7.0.0.16.2.20061127140855.07404318(a)vigilsec.com> In-Reply-To: <7.0.0.16.2.20061127140855.07404318(a)vigilsec.com> List-ID: <ietf-pkix.imc.org> Bit of a late change, but a good one, S. Russ Housley wrote: > > I would like to take this opportunity to advocate the deprecation of "on > hold" altogether. No good can come from it, as been discussed so many > times on this list. > > I can live with the current text, but I think it would be far better to > say that the "on hold" status MUST NOT be used by CAs conforming to > 3280bis. > > Russ > > At 10:53 AM 11/27/2006, Carlos González-Cadenas wrote: >> Hi, >> >> Suppose we have the following ordered temporal sequence >> >> t1 - a certificate with serial "S1" is issued by a CA >> t2 - the certificate is put on-hold by the CA (i.e. in order to >> investigate a possible compromise) >> t3 - a full CRL is issued by the CA >> t4 - the investigation carried by the CA ends up in no compromise, and >> the CA makes the certificate valid again >> t5 - a delta CRL is issued by the CA >> t6 - a full CRL is issued by the CA >> >> Does the CRL logs all the revocation-related events for the >> certificate with serial S1?. >> >> If we assume that all the events are logged, then the CRLs contents >> (for certificate with serial S1) should be: >> >> full CRL issued at t3: contains an entry for S1 at t3 with reason code >> on-hold >> delta CRL issued at t5: contains the previous full CRL entry plus an >> entry for S1 at t5 with reason code removeFromCRL >> full CRL issued at t6: contains both previous entries (so you know >> the on-hold period for the certificate) (maybe this is violating >> RFC3280 as removeFromCRL is only applicable for deltaCRLs??) >> >> If we assume that NOT all events are logged, CRLs issued >=T6 don't >> include revocation entries for certificate S1, that is >> >> full CRL issued at t3: contains an entry for S1 at t3 with reason code >> on-hold >> delta CRL issued at t5: contains the previous full CRL entry plus an >> entry for S1 at t5 with reason code removeFromCRL >> full CRL issued at t6: contains NO entry for S1 >> >> Which is the normative (RFC3280) behaviour for that case?. Is there >> any change between RFC3280 and RFC3280bis about these issues? >> >> Note that if the second case is the normative behaviour IMHO there's >> no way (except storing the CRLs between t2 and the next CRL appeared >> after t4) for a relying party (verifying the certificate in or after >> t6) to know the certificate status between t2 and t4. >> >> Many thanks in advance, >> >> Carlos >> > > ------- End of Forwarded Message

1 0

Extended Validation certificates
by Mike Helm 15 Nov '06

15 Nov '06

>From the CA/Browser forum, which apparently put up a website recently. Objectives: http://cabforum.org/objectives.html "EV SSL Certificates establish online businesses identity by confirming the certificate holder's legal and physical existence." (See link - emphasis on phishing/id fraud prevention, somehow) Vetting process: http://cabforum.org/vetting.html "The Extended Validation (EV) SSL vetting process will validate the requestor's domain control and verify the requesting entity's legal existence and identity:" (see link)

1 1

Topical OGF Levels of Assurance (LoAs) BoF and activity initiative
by David Groep 15 Nov '06

15 Nov '06

Dear all, The OGF Security Area would like to draw your attention to an initiative addressing topics around the concept of Levels of Assurance. We know or expect that at least quite a few of you are interested in this topic, and thus are likely to either participate and have an opinion on this... An initial description of the activity and possible directions are described below. Please note that this will be a topical activity BoF, and is not aimed to be a charter BoF or to necessarily create a new group. If there is sufficient momentum to address this topic (also) in the OGF context, we can subsequently discuss the organisational embedding in an existing or new group. So, if you are interested, please participate via the security area mailing list or the gforge Wiki and forum, whose URLs are listed below. A BoF session to discuss this activity will be organised during OGF19 (to be held in North Carolina on January 29 - February 2, 2007). You are very warmly invited to attend this event, which will be full of new activities in the security area. Best regards, Blair Dillaway and David Groep, (OGF Security ADs) Topical BoF on Levels of Assurance (LoAs) ----------------------------------------- Ideas around "Levels of Assurance" have been receiving more and more attention, with the advance of federations and Authentication and Authorization infrastructures. "LoA is defined as the strength of authentication required for a service provider to be assured that a resource access is only granted to users whose identities have been verified. It reflects the degree of confidence in an authentication process used to establish the identity of an entity (an individual or a software component) to whom the credential was issued, and the degree of confidence that the entity using the credential is indeed the entity that the credential was issued to." Ning Zhang of Manchester University has taken the initiative to bring up the discussion on this activity in the OGF context. Examples of questions that this activity could address are: - What are the existing definitions of LoA suited to Grid or VO environment? - How to apply LoA to safeguard Grid services/resources? - Are some onerous registration requirements or special condition stipulations due to perceived inadequacies in the strength of authentication? - Are there any limitations in terms of user accessibility, scalability and interoperability? The activity can include discussion on how operational procedures affect LoA, how the various parameters and factors influence the overall LoA value in grid/VO environments, and come up with recommendations on how these factors can be taken into account. The purpose here is to consult, and to seek comments and feedbacks from, the communities concerned (including service providers, from e-Science, e-Business and e-Gov) on their views on the definition and applications of LoA in achieving fine-grained access control. Everyone interested in such an activity is extremely welcome to attend this activity BoF session. If there is sufficient interest within OGF, the BoF can also discuss how the activity is best embedded in the OGF organisation; it is not necessarily the aim of this BoF to result in a new research or working group. More information: Security Area Wiki: https://forge.gridforum.org/sf/wiki/do/viewPage/projects.sec/wiki/LoAInitia… Document "e-Infrastructure Security: Levels of Assurance" https://forge.gridforum.org/sf/sfmain/do/downloadAttachment/projects.sec/wi… Discussion forum: https://forge.gridforum.org/sf/discussion/do/listTopics/projects.sec/discus… -- David Groep ** National Institute for Nuclear and High Energy Physics, PDP/Grid group ** ** Room: H1.56 Phone: +31 20 5922179, PObox 41882, NL-1009DB Amsterdam NL **

1 0

List invitation: OGSA-AuthN-BoF for grid services authentication issues
by Alan Sill 08 Nov '06

08 Nov '06

This is the last in a series of messages intended to announce a requested Birds-of-a-Feather session (BoF) at the Open Grid Forum OGF-19 meeting for discussion of Open Grid Services Architecture Authentication topics and activities. The list and its associated BoF are intended to carry out the steps for formation of an OGSA- AuthN work group. This message is being sent out widely to call your attention to the existence of a mailing list specific to this purpose. You may subscribe to the ogsa-authn-bof(a)ogf.org mailing list by sending a message to me or to David Groep <davidg(a)nikhef.nl> , or by visiting the following page: http://www.ogf.org/mailman/listinfo/ogsa-authn-bof Your participation is appreciated. This announcement will be sent to several relevant lists and people to extend the invitation as broadly as possible, but subsequent communication about the BoF will proceed through the above list. Subscription to the above list will be your method to ensure involvement in this process. Best, Alan Sill, Ph.D TIGRE Senior Scientist High Performance Computing Center TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0

OGSA-AuthN-WG charter effort: the Seven Questions
by Alan Sill 06 Nov '06

06 Nov '06

Dear colleagues, Apologies if you are getting these messages more than once due to cross-posting. Once the OGSA-AuthN work group is set up, it will have its own mailing list to which you will be able to subscribe if it is of interest, so that symptom will disappear soon. As a reminder, here are the answers that were presented to the OGSA- WG in response to the standard "seven questions" asked as part of the process of setting up a new group. Comments with respect to the authentication direction to be pursued by this group are welcome and recruited. Anything specific to the Birds-of-a-Feather session we are organizing on this topic for OGF-19 in North Carolina at the end of January is also welcome; we hope this will be a productive work group and BoF session. Alan Begin forwarded message: > From: Alan Sill <Alan.Sill(a)ttu.edu> > Date: October 26, 2006 9:24:27 AM CDT > To: Hiro Kishimoto <hiro.kishimoto(a)jp.fujitsu.com> > Cc: Alan Sill <Alan.Sill(a)ttu.edu>, ogsa-wg WG <ogsa-wg(a)ggf.org>, > David Groep <davidg(a)nikhef.nl>, Blair Dillaway <blaird(a)microsoft.com> > Subject: OGSA-AuthN-WG charter effort: the Seven Questions > > > On Oct 23, 2006, at 9:29 PM, Hiro Kishimoto wrote: > >> The Seven Questions >> >> 1. Is the scope of the proposed group sufficiently focused? > > The scope of the proposed group is strictly limited to > authentication technologies for use within grid services > architectures. As such, I believe it is sufficiently focused, > although the relation to corresponding activities in authorization > and in the activities of other work groups is important and clear. > >> 2. Are the topics that the group plans to address clear and >> relevant for >> the Grid research, development, industrial, implementation, and/or >> application user community? > > Authentication is a key security step in any chain of grid services > usage. Up to now, most grid applications have either used no > security (for testing purposes), a limited and often self-signed > configuration again mostly for testing purposes, or have had to > rely on pure deployment of X.509 technology infrastructures. Some > extensive community practice has grown up in the academic > community, especially with regard to deployment at and between the > large-scale national laboratories and universities on an > international basis, and siloed implementations exist within > industry, as well as some federal non-laboratory organizations. It > is a goal of this work group to document current practice and to > extend the standards basis for development of AuthN technologies > within all of the above communities. Another significant output > will be recommendations for future work in this area, taking into > account all relevant technological development in this area. > Interoperability will also be an important factor, of course. > >> 3. Will the formation of the group foster (consensus–based) work that >> would not be done otherwise? > > Yes. Several conversations on related technologies have sprung up > naturally within segments of the affected communities, as described > above. The existence of an OGSA AuthN work group would allow > concentration and coordination of these conversations and > recommendations in a context that is explicitly connected to the > overall OGSA standards effort. > >> 4. Do the group’s activities overlap inappropriately with those of >> another OGF group or to a group active in another organization >> such as >> IETF or W3C? Has the relationship, if any, to the Open Grid Services >> Architecture (OGSA) been determined? > > There is no other effort exclusively devoted to this task within > OGSA. Polling of the membership of other groups active in the > authentication and authorization areas has resulted in strong > support for the idea of a specific OGSA effort. Groups that have > been polled include the following: > > CA-Ops: Within the current OGF structure, this group is defined as > an operations group responsible for Certificate Authority standards > and participation. It is the parent body (in a historical sense) > of the IGTF described below. > > International Grid Trust Federation (IGTF): an independent body > comprised of three regional policy management authorities (PMAs) > with membership consisting of grid certificate authority providers > and (in some cases) relying parties with an interest in the > operational policies and procedures of the CA providers. The > primary mechanism of operation of the IGTF is through the > development and common accreditation of CAs against specific, > detailed CP/CPS statements within the context of Authentication > Profiles (APs); APs exist for "classic PKI" deployments as well as > short-lived credential and experimental services. Within the > context of the IGTF PMA charters, interest has been growing in > improving the variety and accessibility of grid authentication > methods while retaining the ability to work with existing grid > deployments with high security. > > OGSA-AuthZ: This group is focused on authorization technologies. A > variety of useful documents has been successfully produced through > various incarnations of this group to date. Its membership is > supportive of a corresponding OGSA-AuthN effort. > > Shibboleth for Grids BoF: This BoF was held at GGF-18 and its > activities are documented at the URL http://grid.ncsa.uiuc.edu/ > events/ggf18-shib-bof/ for reference. Although focused primarily > on authorization, Shibboleth technologies are consumers of > authentication information and a great deal of activity is being > devoted to understanding the interaction between Shibboleth and the > needs of grids. The participants in the BoF mailing list are > strongly supportive of an OGSA-AuthN effort. > >> 5. Are there sufficient interest and expertise in the group’s topic, >> with at least several people willing to expend the effort that is >> likely >> to produce significant results over time? > > Yes. A significant short-term effort should be exerted to identify > authors of the proposed documents and a co-chair in the near future. > >> 6. Does a base of interested consumers (e.g., application developers, >> Grid system implementers, industry partners, end-users) appear to >> exist >> for the planned work? > > Yes. The BoF planned for the next OGF meeting should provide > opportunities for organization of work in this area. > >> 7. Does the OGF have a reasonable role to play in the >> determination of >> the technology? > > Yes, as described above. One specific output of the group that > would be made possible by the OGF will be production of an OGF > document with recommended standards for OGSA-AUthN. > > Respectfully submitted, Alan Sill, Ph.D TIGRE Senior Scientist, High Performance Computing Center Adjunct Professor of Physics TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0

Planning attendance for OGF-19 BoF: OGSA-AuthN WG
by Alan Sill 06 Nov '06

06 Nov '06

I am working on the session form for OGF-19 for the BoF we would like to have on the OGSA-AuthN charter to set its initial direction and specific deliverables. Anyone who would like to give a talk, keeping in mind that the session is short, is welcome. A draft charter in short form for this group is at: http://www.ggf.org/gf/group_info/charter.php?review&group=OGSA-AuthN-WG and other related documents will be published shortly. If you are interested in working on the topic of authentication for OGSA grid services, please do contact me. All interested parties are welcome to this effort so we can keep grid services architecture authentication on a good design basis and in touch with the best current and future practices in the field. I am also specifically recruiting help in the form of co-conveners to help with the leadership of this work group. Please also welcome our new OGF Security Area Directors Blair Dillaway and David Groep, and give them the benefit of your communication on various related topics, and every possible cooperation, suggestions, work on documents and standards, etc. If you are going to be in North Carolina for the OGF-19 conference and are interested in these topics, I would like to hear from you. Best, Alan Alan Sill, Ph.D TIGRE Senior Scientist, High Performance Computing Center Adjunct Professor of Physics TTU ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0