Transcript tele-breakout-resource-manage-shuo-yang.ppt

Osaka University,Japan
Yang Shuo
Kazunori Nozaki
Shinji Shimojo
SEAMLESS, AND SAFE RESOURCE
MANAGEMENT TECHNOLOGY
Penetrator visualization service
Users can apply some
annotations here.
BUT,
They want to share
those annotations
depending on their
roles.
Necessity of a security source management
• The conventional technologies of those access
controls are insufficient for e-Science environments
because of the scale and diversity.
Control
Uid: you
VO: A
Annotation
Control
Uid: s-date
VO: B
Annotation
Tiled Display Wall
VO: A
VO: B
PERMIS、Penetrator Integrated middleware system
Policy Enforcement Point
Meta data
service
Viz.xml
（ID 1）
Viz.xml
（ID 2）
XML
repository
middleware that achieve access
control function easily
②search
①search
Access control
service
③result
Viz.xml
Penetrator
Servlet
⑫ Viz.xml
final result
GAMA
Gridsphere
⑪ Filtered Viz.xml file
Filtering Function
Tomcat
④Viz.xml
⑩XSLT (pattern N) return
④User ID
XSLT
acquisition
service
⑨XSLT（ pattern N）
⑥Proxy certificate
GT4
XSLT
offered
service
PERMIS
⑤Proxy certificate
GAMA
server
Policy Decision Point
⑧Reture XSLT Style Sheet
⑦search attribute certificate
Attribute
certificate
LDAP server
repository
XSLTstyle
sheet
XSLT
（pattern N）
4
Experiment of a visualization system using Integrated
authorization and authentication middleware
• Visualization and access control system by cooperating with GAMA, PERMIS,
and Penetrator seamlessly
Computer center
Hospital Ａ
Medical
Institute Ｂ
Doctor
id/passwd
Medial
researcher
researcher
Visualization
service
PERMIS PEP
Simulation
service
Visualization
service
PERMIS PEP
PERMIS PEP
E-science Platform
Access control
using PERMIS
Authentication
method by GAMA
Attribute
certificate
MyProxy
Media data PERMIS PEP
Transfer
Medial ＤＢ
PERMIS PEP
simulation result
Transfer service
Visible result
Volume data retrieval
service by Penetrator
SRB service
PERMIS PEP
Research node
access service
research node
Penetrator Demostration using TDW