1 / 14

COBWEB, AIP-6 and Access Management Federations

COBWEB, AIP-6 and Access Management Federations. Chris Higgins, Project Coordinator, University of Edinburgh. chris.higgins@ed.ac.uk. Andreas Matheus, Technical Coordinator, Secure Dimensions GmbH. am@secure-dimensions.de. Citizen Observatory Web (COBWEB).

edith
Download Presentation

COBWEB, AIP-6 and Access Management Federations

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. COBWEB, AIP-6 and Access Management Federations Chris Higgins, Project Coordinator, University of Edinburgh. chris.higgins@ed.ac.uk Andreas Matheus, Technical Coordinator, Secure Dimensions GmbH. am@secure-dimensions.de

  2. Citizen Observatory Web (COBWEB) • Research project started Nov 2012 for 4 years • Crowdsourced environmental data to aid decision making • Introduce quality measures, reduce uncertainty • Fusion crowdsourced data with reference data… • Spatial Data Infrastructure - like initiatives - National SDI’s in UK, Greece and Germany - INSPIRE - GEOSS • Testbed approach using UNESCO Biosphere Reserves

  3. FP7-ENV-2012 observatories

  4. GEOSS Architecture Implementation Pilot • One of the means by which GEOSS addresses interoperability issues and GCI extension work • Led by the Open Geospatial Consortium (OGC) • All contributions are in-kind • Phased approach • AIP-6 kickoff 28/29 March 2013 in Washington • Still options for participation…

  5. IdP IdP IdP IdP IdP Single Sign On Federation Service Providers SP SP SP Identity Providers Organisations SP SP Coordinating Centre SP SP SP Authenticates here Users SP SP SP SP SP SP

  6. Why put effort into federated access control? • Authentication is the process of verifying that claims made concerning a subject, eg, identity, who is attempting to access a resource are true • Frequently, SDI content and service providers need to know who is accessing their valuable, secure, protected data • The ability for a group of organisations with common objectives, ie, a federation, to securely exchange authentication information is a powerful SDI enabler • Even more so if removing some of the barriers to interoperability…

  7. COBWEB’s need for Federation technology • “…addressing questions of privacy…” • COBWEB about environmental, not personal data • Some kinds of protected data that may be encountered during the project: • Personal information to assign unique identity • Location protected species • Reference data from European National Mapping and Cadastral Agencies • Conflated data • Testbed for research and development

  8. GEOSS’s current need for SSO • From previous AIP’s, identified need for all users to authenticate so can gather metrics • Concept of a “GEOSS-User”: • any authenticated participant from the GEOSS AIP-6 Access Management Federation • Access Management Federations enable SSO

  9. AIP-5 “Use Cases” in scope for COBWEB AIP-6 work • Registration for Authentication via OpenID • Registration as OpenID user for Authentication via SAML2 • Organizational user for Authentication via SAML2 • Identification as "GEOSS User" During Registration • OpenID-Protected Data Access via OpenID Authentication • SAML2-Protected Data Access via OpenID Authentication • OpenID-Protected Data Access via SAML2 Authentication • SAML2-Protected Data Access via SAML2 Authentication • Registering and Modifying a New Identity or Service Provider

  10. GEOSS AIP-6 Data Sharing and COBWEB • Plan is to setup a federation of GEOSS members to establish SSO • Not currently concentrating any particular SBA’s, however SBA Water is participating • Support Single Sign On • Reliable identification of a “GEOSS-user” • Desired outcome for AIP-6 is answers to: • Can AMF’s meet COBWEB requirements for privacy? • Do AMF’s meet GEOSS requirements?

  11. Current list of organisations indicating strong interest in participating: • ESA (European Space Agency) • NASA (North American Space Agency) • INPE (National Institute for Space Research) • Tufts University • Secure Dimensions • EDINA (University of Edinburgh) Will expand: • Other FP7 projects? • Existing academic sector federations? COBWEB partners {

  12. AIP-6 Results / Future Work • Sept 2013: Demo of COBWEB AIP-6 outputs at OGC Technical Committee meeting at ESA/ESRIN • Jan 2014: AIP-6 results demonstrated at GEO Plenary in Geneva • Feb 2014: Completion of AIP-6 activities • Post AIP-6, COBWEB will respond to feedback from stakeholders, eg, GEO, in framing next steps, maybe: • Electronic licence negotiation • Authorisation • eCommerce • …?

  13. Links to Previous Work regarding AMF • OGC White Paper http://portal.opengeospatial.org/files/?artifact_id=47848 • Engineering Report from the OGC Web Service Shibboleth Interoperability Experiment https://portal.opengeospatial.org/files/?artifact_id=47852 • INSPIRE Conference 2011 Paper http://ijsdir.jrc.ec.europa.eu/index.php/ijsdir/article/view/245/324 • Authentication workshop at the GEO-IX Plenary, Brazil, 2012 http://edina.ac.uk/events/cobwebworkshop.html

More Related