Digital Infrastructures for Research 2017

Session

Security, trust and identity management

Nov 30, 2017, 4:00 PM

The Square Meeting Centre

Conveners

Security, trust and identity management

• Tommi Nyronen (CSC)

Description

Security, trust and identity management is especially required by scientific communities that need to process and manage sensitive data. We hope to bring together experts with complementary skills and viewpoints from scientific, e-Infrastructure and management perspectives in the session, and discuss the solutions and gaps that exist.

The session sets the present scene by describing scientific requirements and solutions emerging from the life sciences which has progressed in the field due to pressing demand to analyse sensitive human data. A range of technologies are already being more offered and developed by European e-Infrastructures to meet some these challenges. For example, operational security for the European Open Science Cloud and federated authentication and authorisation services for scientists to enable scientific collaborations at scale.

82. Authentication and Authorisation Service for ELIXIR Research Infrastructure

Mikael Linden (CSC)

11/30/17, 4:00 PM

Presentations

ELIXIR is the European research infrastructure for biological data. ELIXIR AAI (authentication and authorisation infrastructure) is the ELIXIR service portfolio for authenticating researchers for the ELIXIR services and assisting the services in deciding what the users are permitted to do in the service. ELIXIR AAI is part of the ELIXIR Compute Platform that was established in 2015 to build...

115. User authentication, authorization, and identity management for services in structural biology

Daniel Kouril (Masaryk University)

11/30/17, 4:15 PM

Presentations

The West-Life Virtual Research Environment provides services for computation and data management to researchers in structural biology. It builds on European e-Infrastructure solutions from EGI and EUDAT and links together web services and repositories for structural biology. The West-Life VRE continues to develop the community and services established in previous projects and activities. ...

77. Evolving Operational Security for the EOSC era

Dr Sven Gabriel (NIKHEF), Urpo Kaila (CSC)

11/30/17, 4:30 PM

Presentations

The EOSC-hub proposes a new vision to data-driven science, where researchers from all disciplines have easy, integrated and open access to the advanced digital services, scientific instruments, data, knowledge and expertise they need to collaborate to achieve excellence in science, research and innovation. The process towards the integration of the different security activities will...

54. Challenges for Data Loss Prevention at Research Infrastructures

Urpo Kaila (CSC)

11/30/17, 4:45 PM

Presentations

Data Loss Prevention (DLP) is a classic but, currently, often overlooked security domain. DLP aims to identify and restrict access to non-public information, such as Personally Identifiable Information (PII) or confidential information.  DLP covers data in rest, data in transit and data in use and also requires procedures and tools to monitor how DLP is implemented. Researchers, research...

132. Check-in towards an integrated authentication and authorisation infrastructure for the EOSC

Mr Nicolas Liampotis (GRNET)

11/30/17, 5:00 PM

Presentations

The European Open Science Cloud (EOSC) aims to enable trusted access to services, systems and the re-use of shared scientific data across disciplinary, social and geographical borders. The EOSC-hub will realise the EOSC infrastructure as an ecosystem of research e-Infrastructures leveraging existing national and European investments in digital research infrastructures. Check-in, which is the...

11. OIDC-Agent - OIDC for the commandline

Uros Stevanovic (KIT-G)

11/30/17, 5:10 PM

Presentations

OIDC-Agent is a tool to simplify OpenID Connect (OIDC) token management on the commandline. It was designed to manage OIDC tokens and make them easily usable. We followed the ssh-agent design, so users can handle OIDC tokens in a similiar way as they do with ssh keys. Multiple account configurations may be loaded in oidc-agent concurrently. oidc-add is also used to remove a loaded...

86. eduTEAMS: An AAI solution for scientific collaborations at scale

Christos Kanellopoulos (GÉANT)

11/30/17, 5:20 PM

Presentations

eduTEAMS is a suite of AAI services, which enable the integration of users from a wide range of environments, connecting them to specific services (such as instruments), and also to other generic services such as storage and compute provided by eInfrastructure providers or even commercial entities. The development of Phase 1 of eduTEAMS was completed in July 2016 with the successful...