Integrated Account Management Architecture

Tsukuba-GAMA is an open source software which provides user and credential management, using the Grid Security Infrastructure (GSI) based on Public Key Infrastructure (PKI), X.509 certificate, proxy certificate, and the concept of Virtual Organization (VO).

In order to respect the publication policies of data owners, one of the key issues of e-Science is its focus on the concept of a VO, a dynamic collection of individuals, institutions, and resources. To achieve VO-based design for an account management architecture, GSI with VO-level authentication and authorization provided by VOMS (VO Membership Service), is commonly used. However, Grid-based applications and middleware suites are often too complicated for application users and developers.

As always, there is still a need for users to generate and manage certificates carefully. In order to reduce such complexity, and retuce vulnerability risks due to mistakes by inexperienced users, Tsukuba-GAMA (Grid Account Management Architecture) provides a flexible and easy interface for account management on the e-Science.

Components

• Account and Credential Management Portal

  • It allows users to release from credential management on user's client. Tsukuba-GAMA portlet on GridSphere version 2 and 3 provides CA (Certificate Authority) and credential (EE; end-entity) store using MyProxy.

• PHP Authentication Module and Portal Development Kit

  • It allows application portal developers to manage the end-user's Grid credential using MyProxy PHP client and session management.

• Servlet Authentication Filter

  • It allows clients to authenticate against a MyProxy and VOMS servers. After a successful authentication, a delegation is retrieved and stored on the web server. Java/Servlet code can make use of this delegation to perform operations on the client's behalf.

• GridSphere Authentication Modules

  • These allow clients to authenticate against a MyProxy and VOMS servers. After a successful authentication, a delegation is retrieved and stored on the web server. JSR168 portlets code can make use of this delegation to perform operations on the client's behalf.

• OpenID Authentication Module for Java/Servlet

• Tsukuba-GAMA Credential Manager

Download

LICENSE, Recent code is downloadable from svn managed by sourceforge.

• Installation

Publications

• Naotaka YAMAMOTO, Isao KOJIMA, Yoshio TANAKA, Satoshi SEKIGUCHI, VO-enabled Service Harmonization in the GEO Grid, escience, pp.174-181, 2008 Fourth IEEE International Conference on eScience, 2008, link

• S. Sekiguchi et al., Design Principles and IT Overview of the GEO Grid, IEEE Systems Journal，Vol. 2, No. 3，pp.374-389，2008.9

Related Links

Softwares

• GAMA (Grid Account Management Architecture)

• MyProxy by CILogon

• VOMS (Virtual Organization Membership Service)

• GridSphere

• GridSite

• LCAS/LCMAPS (NIKHEF, DataGrid)

• PRIMA/GUMS

Projects

• sourceforge

• GEO Grid uses Tsukuba-GAMA

• PRAGMA uses Tsukuba-GAMA