A pathfinder project for a National AAAI
Lead Research Organisation:
University College London
Department Name: Physics and Astronomy
Abstract
The RCUK National e-Infrastructure projects wish to propose to undertake pilots to demonstrate the proposed access and resource management infrastructure works in several common research settings, especially in areas where data must be securely accessed, stored and transported.
The pilots will integrate 2 key existing Authentication, Authorisation and Accounting Infrastructure (AAAI) technologies, Assent and SAFE. The Authentication Service Assent is already in service at a number of institutions and Safe Share will be deployed, subject to successful pilots, at eMedLab (Crick/UCL), Farr Institute (London, HeRC, Wales and Scotland) and the Administrative Data Research Network. The Authorisation and Accounting service SAFE is currently used by Archer, DiRAC and the Hartree Centre.
The proposed pathfinder initiative will pilot the integration of these capabilities as a significant step towards implementing a coherent National Authentication, Authorisation and Accounting Infrastructure that serves the needs of UK and international research collaborations.
To deliver our vision of opening up access to the National E-Infrastructure we need to take these individual pieces and integrate them into a UK-wide service, which will also be compatible with EU and international projects' access and resource management services. This will allow us to then roll out a robust user management system across the National E-Infrastructure for both academic and industrial partners. The development of a final national solution is complex and by its nature cannot be quick. It must fit with European and global advances and requires international trust agreements. In order to move towards this, we propose this pathfinder project, which will utilise existing developments and provide a first working service on the National E-Infrastructure.
The pilots will integrate 2 key existing Authentication, Authorisation and Accounting Infrastructure (AAAI) technologies, Assent and SAFE. The Authentication Service Assent is already in service at a number of institutions and Safe Share will be deployed, subject to successful pilots, at eMedLab (Crick/UCL), Farr Institute (London, HeRC, Wales and Scotland) and the Administrative Data Research Network. The Authorisation and Accounting service SAFE is currently used by Archer, DiRAC and the Hartree Centre.
The proposed pathfinder initiative will pilot the integration of these capabilities as a significant step towards implementing a coherent National Authentication, Authorisation and Accounting Infrastructure that serves the needs of UK and international research collaborations.
To deliver our vision of opening up access to the National E-Infrastructure we need to take these individual pieces and integrate them into a UK-wide service, which will also be compatible with EU and international projects' access and resource management services. This will allow us to then roll out a robust user management system across the National E-Infrastructure for both academic and industrial partners. The development of a final national solution is complex and by its nature cannot be quick. It must fit with European and global advances and requires international trust agreements. In order to move towards this, we propose this pathfinder project, which will utilise existing developments and provide a first working service on the National E-Infrastructure.
Planned Impact
This pathfinder will build on and integrate the following existing capabilities:
Jisc's Assent service, to provide users with a common, single sign on mechanism that integrates with institutional identity management systems to confirm a researcher's identity; and its peer systems overseas.
Existing virtual organisation (VO) systems, such as the EPPC's SAFE management infrastructure.
A High Assurance Network and two-factor authentication, where appropriate, for secure data access and transport e.g. JISC's SafeShare service.
Four work packages are proposed to undertake this integration work and pilot the services in the field at sites across the RCUK domain.
The cost to RCUK will be £173932 over 10 months.
The outputs will be secure and very secure versions of a common AAAI application which integrates Assent and SAFE. This will also be able to federate with SAML and X.509 identity management systems which is a requirement for international collaborations.
A technical design and business case for a proposed National AAAI service will be produced.
Jisc's Assent service, to provide users with a common, single sign on mechanism that integrates with institutional identity management systems to confirm a researcher's identity; and its peer systems overseas.
Existing virtual organisation (VO) systems, such as the EPPC's SAFE management infrastructure.
A High Assurance Network and two-factor authentication, where appropriate, for secure data access and transport e.g. JISC's SafeShare service.
Four work packages are proposed to undertake this integration work and pilot the services in the field at sites across the RCUK domain.
The cost to RCUK will be £173932 over 10 months.
The outputs will be secure and very secure versions of a common AAAI application which integrates Assent and SAFE. This will also be able to federate with SAML and X.509 identity management systems which is a requirement for international collaborations.
A technical design and business case for a proposed National AAAI service will be produced.
Organisations
- University College London (Lead Research Organisation)
- Medical Research Council (Co-funder)
- Jisc (Co-funder, Collaboration)
- Economic and Social Research Council (Co-funder)
- Engineering and Physical Sciences Research Council (Co-funder)
- Arts and Humanities Research Council (Co-funder)
- Natural Environment Research Council (Co-funder)
- Biotechnology and Biological Sciences Research Council (Co-funder)
Publications
Trayford J
(2020)
Fade to grey: systematic variation of galaxy attenuation curves with galaxy properties in the eagle simulations
in Monthly Notices of the Royal Astronomical Society
Trayford J
(2020)
Massive low-surface-brightness galaxies in the eagle simulation
in Monthly Notices of the Royal Astronomical Society
Tress R
(2020)
Simulations of the Milky Way's central molecular zone - I. Gas dynamics
in Monthly Notices of the Royal Astronomical Society
Trotta D
(2020)
Fast Acceleration of Transrelativistic Electrons in Astrophysical Turbulence
in The Astrophysical Journal
Vandenbroucke B
(2020)
CMACIONIZE 2.0: a novel task-based approach to Monte Carlo radiation transfer
in Astronomy & Astrophysics
Vandenbroucke B
(2020)
Infrared luminosity functions and dust mass functions in the EAGLE simulation
in Monthly Notices of the Royal Astronomical Society
Van Daalen M
(2020)
Exploring the effects of galaxy formation on matter clustering through a library of simulation power spectra
in Monthly Notices of the Royal Astronomical Society
Van der Werf P
(2020)
An ALMA survey of the SCUBA-2 CLS UDS field: physical properties of 707 sub-millimetre galaxies
in Monthly Notices of the Royal Astronomical Society
Vidal J
(2020)
Efficiency of tidal dissipation in slowly rotating fully convective stars or planets
in Monthly Notices of the Royal Astronomical Society
Wang J
(2020)
Universal structure of dark matter haloes over a mass range of 20 orders of magnitude.
in Nature
Wang Y
(2020)
Iterative removal of redshift-space distortions from galaxy clustering
in Monthly Notices of the Royal Astronomical Society
White S
(2020)
The globular cluster system of the Auriga simulations
in Monthly Notices of the Royal Astronomical Society
Wijers N
(2020)
The warm-hot circumgalactic medium around EAGLE-simulation galaxies and its detection prospects with X-ray and UV line absorption
in Monthly Notices of the Royal Astronomical Society
Witek H
(2020)
Towards numerical relativity in scalar Gauss-Bonnet gravity: 3 + 1 decomposition beyond the small-coupling limit
in Physical Review D
Woss A
(2020)
Efficient solution of the multichannel Lüscher determinant condition through eigenvalue decomposition
in Physical Review D
Wu X
(2020)
Photometric properties of reionization-epoch galaxies in the simba simulations
in Monthly Notices of the Royal Astronomical Society
Wurster J
(2020)
Non-ideal magnetohydrodynamics versus turbulence - I. Which is the dominant process in protostellar disc formation?
in Monthly Notices of the Royal Astronomical Society
Wurster J
(2020)
Non-ideal magnetohydrodynamics versus turbulence II: Which is the dominant process in stellar core formation?
in Monthly Notices of the Royal Astronomical Society
Wurster J
(2021)
Do we need non-ideal magnetohydrodynamic to model protostellar discs?
in Monthly Notices of the Royal Astronomical Society
Xu W
(2020)
Galaxy properties in the cosmic web of EAGLE simulation
in Monthly Notices of the Royal Astronomical Society
Yoo T
(2020)
On the origin of low escape fractions of ionizing radiation from massive star-forming galaxies at high redshift
in Monthly Notices of the Royal Astronomical Society
Yurchenko S
(2020)
ExoMol line lists - XXXVIII. High-temperature molecular line list of silicon dioxide (SiO2)
in Monthly Notices of the Royal Astronomical Society
Yurchenko S
(2020)
ExoMol molecular line lists - XXXVII. Spectra of acetylene
in Monthly Notices of the Royal Astronomical Society
Yurchenko S
(2020)
ExoMol line lists - XXXIX. Ro-vibrational molecular line list for CO2
in Monthly Notices of the Royal Astronomical Society
Yurchenko S
(2020)
ExoMol line lists - XL. Rovibrational molecular line list for the hydronium ion (H3O+)
in Monthly Notices of the Royal Astronomical Society
Description | We demonstrated the practicality of having a central Authentication and Authorisation Service and linking it to a well used Accounting Service. This was tested in 3 common settings. We were able to demonstrate the successful use of a central Identity Provider for non academic users of academic eninfra structure |
Exploitation Route | This has been used to form the basis of the Proposed UKRI AAAI Framework |
Sectors | Aerospace, Defence and Marine,Agriculture, Food and Drink,Chemicals,Communities and Social Services/Policy,Construction,Creative Economy,Digital/Communication/Information Technologies (including Software),Education,Electronics,Energy,Environment,Financial Services, and Management Consultancy,Healthcare,Government, Democracy and Justice,Culture, Heritage, Museums and Collections,Pharmaceuticals and Medical Biotechnology,Retail,Security and Diplomacy,Transport |
Description | Used as the Basis for a UKRI White Paper on AAAI Approach will be used to open up the UKRI Einf to Public Sector, Industry and Commerce |
First Year Of Impact | 2018 |
Sector | Digital/Communication/Information Technologies (including Software),Healthcare |
Impact Types | Policy & public services |
Description | Fed into UKRI eInfrastructure policy |
Geographic Reach | Europe |
Policy Influence Type | Participation in a guidance/advisory committee |
Title | IMproved usability of JISC Assent Authentication Service and creation of Credential Conversion Service at RAL |
Description | The Assent Authentication Service was shown to work with an Authorisation and Accounting Service (SAFE). An API will be published. A credential conversion service was bulit at RAL to allow UK researchers to use home credentials to access international research projects |
Type Of Material | Improvements to research infrastructure |
Year Produced | 2018 |
Provided To Others? | Yes |
Impact | The construction of a plan to create a service to allow UK researchers single sign on to UK and World EInfrastrcutures |
Description | AAAI for the UK NeI |
Organisation | Jisc |
Country | United Kingdom |
Sector | Public |
PI Contribution | PI of RCUK pilot project for AAAI |
Collaborator Contribution | Software development and testing at 8 UK HEIs and ROs |
Impact | SAFE+ASSET AAAI service |
Start Year | 2016 |
Title | Collaboration with Atempo |
Description | Tape to Tape data transfter between DiRAC sites. |
Type Of Technology | Software |
Year Produced | 2019 |
Open Source License? | Yes |
Impact | Proof of COncept that data could be read from Tape stores remotely via a remote file system |
Title | Fast Network Links for Durham and Cambridge Univeristies |
Description | The Universeities and Cambridge are now linked by a highly performant Network |
Type Of Technology | Physical Model/Kit |
Year Produced | 2019 |
Impact | Both HEIs are able to ingest data at a faster rate |
Title | Improved usability of JISC Assent Authentication Service and creation of Credential Conversion Service at RAL |
Description | The Assent Authentication Service was shown to work with an Authorisation and Accounting Service (SAFE). An API will be published. A credential conversion service was bulit at RAL to allow UK researchers to use home credentials to access international research projects |
Type Of Technology | Software |
Year Produced | 2018 |
Open Source License? | Yes |
Impact | The construction of a plan to create a service to allow UK researchers single sign on to UK and World EInfrastrcutures |
Description | Member of UKRI E-Infrastructure Expert Panel 2017-2019 |
Form Of Engagement Activity | A formal working group, expert panel or dialogue |
Part Of Official Scheme? | No |
Geographic Reach | National |
Primary Audience | Policymakers/politicians |
Results and Impact | Created 7 white papers for UKRI which detailed a Roadmap for future e-Infrastructure funding in the UK |
Year(s) Of Engagement Activity | 2017,2018,2019 |
Description | NeI Project Directors Group |
Form Of Engagement Activity | A formal working group, expert panel or dialogue |
Part Of Official Scheme? | No |
Geographic Reach | National |
Primary Audience | Policymakers/politicians |
Results and Impact | Reports on AAAI, Data E-Infrastructure, Using Cloud for Research The National NeI Survey 2014, 2015, 2016 Report on Gender in HPC BEIS e-Infrastructure Business Case Integration activities of the NeI |
Year(s) Of Engagement Activity | 2014,2015,2016,2017 |
URL | https://neipdg.ac.uk/ |