Title: KAREN
1KAREN
2Todays Plan
- Introduction
- Collaboration now and in the future
- Lunch
- Tools
- Capability Development
- Wrap up
3eResearch infrastructure
Applications Distributed Science and
Learning Digital Libraries
Middleware Identifiers Authentication Authorizatio
n Resource Management
Collaborative Science and Education
Resources Computation Information Instrumentation
Network
Access Policies Legal and Institutional Privacy
Credit NSF Network MIddleware Initiative, 2004.
4Middleware
- Software programs that
- provide essential access, communication,
accounting, security, trust, and coordination
services between the (computational and data)
resources of the grid and the higher-level
services that use them.
Credit Distributed Systems Technology Centre
(DSTC). E-Research Middleware The Missing Link
in Australias e-Research Agenda.
http//www.itee.uq.edu.au/eresearch/papers/eResea
rchMiddleware.pdf
5Some types of middleware
- Collaborative research environments
- Video conferencing
- Support for collaboration
- Grid services
- Data storage, transfer and synchronisation
- Resource scheduling, monitoring and management
- Workflow management
- Federated identity access management
- Authentication, authorisation, access control,
certification - Goal is single sign-on for distributed resources
6Videoconferencing
- Widely used in CRIs and universities
- Can be ISDN or IP-based
- IP-based videoconferencing can be routed over
KAREN - Different tools for different situations
- Access Grid groups
- EVO desktop
- High definition
7Access Grid
- Group-to-group collaboration between potentially
large numbers of sites - Room-based advanced videoconferencing suite with
shared applications - Visualisation
- Remote control of instruments
- Data-sharing
- Shared whiteboard
- Shared browser
8(No Transcript)
9Access Grid New Zealand nodes
Credit Access Grid New Zealand.
http//accessgrid.karen.net.nz
10NEES at Auckland
Credit BeSTGRID. http//www.bestgrid.org
11Personal Access Grid
12Desktop Collaboration - EVO
- User operated
- Web cam and head set on desktop
- Collaborators go to a web link
- Cross platform
- High quality video and sound, multiple cameras
- Shared whiteboard and desktop
- Recorded session
- No associated costs
Credit BeSTGRID. http//www.bestgrid.org
13EVO (Enabling Virtual Organisations)
Credit BeSTGRID. http//www.bestgrid.org
14(No Transcript)
15(No Transcript)
16(No Transcript)
17(No Transcript)
18(No Transcript)
19(No Transcript)
20Want to try EVO?
- All the information you need is at
http//www.bestgrid.org/index.php/Getting_Started_
with_EVO_in_New_Zealand - You need a webcam and headset (BeSTGRID offers
recommendations) - EVO is at http//evo.caltech.edu
- Email us if you would like to meet in EVO for a
quick demo
21Videoconferencing interoperability
- Different systems in use
- Different requirements
- Historical
- Collaboration requires interoperability
- Multipoint Control Units (MCUs) and bridging
services enable different systems to talk to
each other - Few of these services available in NZ now, but
should develop in next couple of years
22Virtual Research Environments (VREs), or
Collaboratories
- Researchers want spaces where they can easily and
securely - Communicate
- In real time, e.g. instant messaging
- Asynchronously, e.g. email, bulletin boards
- Share documents and other resources
- Manage a "virtual organisation" e.g. meeting
calendar
23What happens now?
- Researchers use project websites, wikis and email
- Ad hoc workspaces are created for individual
projects - Organisational tools cant be used for
collaboration with external partners - Technical expertise to set up and maintain
24Example VRE Sakai
- Web based and researcher driven
- Announcements
- Chat rooms
- Discussion boards
- Email lists and archive
- Shared resources (documents and files)
- Calendar
- Wiki
- And more
25Sakai
- http//sakaiproject.org/
- International open source development
- Software for e-learning and e-research
- 149 production RE organisations
- 115 pilots
- Auckland Universitys BeSTGRID hosts a Sakai
Collaboration Server for KAREN at
http//sakai.bestgrid.org/portal
26Sakai Foundation Members
Credit http//sakaiproject.org
27My Workspace Tools
Sakai worksite setup
28Shared Project Workspace
29Shared Resources
30VREs Future vision
- Support day-to-day work by integrating access to
- Communication, including audio and video
- Hardware and scientific equipment
- Software applications, e.g. analysis tools
- Automated workflows
- Data repositories and library resources
- Common desktop applications, e.g. email.
31Sakais Future Vision
iPhone Sakai
32What is Grid Computing?
- The next generation computing infrastructure to
support the growing need for computational based
science - Analogy with power grid
- User has no knowledge of resource (data or
computational) location
33A Grid in Action
authentication site C
site A
user
site G
site D
site E
site F
34Driving a Grid
- Grid tools
- Globus, Condor, SunGrid Engine
- Scripts
- Workflows
- Portal
- Web service
- Submit Command
- condor_submit Job.cmd
- Job.cmd
- universe vanilla
- environment pathc\WINDOWS\SYSTEM32
- executable hanoi.exe
- TransferInputFiles cygwin1.dll
- arguments 10 28 (Process)
- output hanoi.(Cluster).(Process).out
- error hanoi.(Cluster).(Process).err
- log hanoi.(Cluster).(Process).log
- Requirements (OpSys "WINNT51") (Arch
"INTEL") - Rank Mips
- ShouldTransferFiles YES
- WhenToTransferOutput ON_EXIT
- queue 512
35Kepler Workflow Tool
- Example of the 'R' system in a Kepler workflow
36myExperiment.org
37The NZ Grid Scene
- BeSTGRID
- Auckland, Massey and Canterbury with funding from
TEC - Data grid 100 Tbytes
- Computational Grid
- Canterbury
- Massey cluster
- Other
- AgResearch
- VUW
- VUW desktop grid
- 250 Unix w/s managed by SGE
- 900 Windows w/s managed by Condor
- Gravitational Lensing
- 2000 cpu hours/day
- OGLE-390 event
- Earth sized planet
- 23,000 light years away
38Identity Management Defined
- What is Identity Management?
- Identity management is the set of business
processes, and a supporting infrastructure, for
the creation, maintenance, and use of digital
identities. The Burton Group (a research firm
specializing in IT infrastructure for the
enterprise) - Identity Management in this sense is often called
Identity and Access Management (IAM) - What problems do Identity and Access Management
address?
Credit Keith Hazelton, UW-Madison, viaKen
Klingenstein, Director, Internet2 Middleware and
Security
39Identity and Access Management
- Hi! Im Lisa. (Identity)
- and heres my NetID / password to prove it.
- (Authentication)
- I want to do some E-Reserves reading.
- (Authorization ? Allowing Lisa to use
the services for which shes authorized) - And I want to change my grade in last semesters
Physics course. - (Authorization ? Preventing her from doing
things shes not supposed to do)
Credit Keith Hazelton, UW-Madison, viaKen
Klingenstein, Director, Internet2 Middleware and
Security
40Identity Management Today
- Tedious registration
- Inconsistent user data
- Different login processes
- Different passwords
- Unprotected resources because of difficulty
- Expensive inter-institutional access
41Tomorrows Vision
- No user registration or maintenance at resource
- Single login process
- Many new resources available to users
- Enlarged user community for resources
- Authorization independent of location
- Efficient implementation of inter-institutional
access
42Shibboleth
- Authenticate at home organisation
- Authorise at resource provider without knowing
users identity
Credit Ken Klingenstein, Director, Internet2
Middleware and Security
43Trust Federations
- Technologies like Shibboleth need the resource
provider and home organisation to trust each
other. - Australia
- Functioning trial federation
- Funding to develop national trust federation
(AAF) - New Zealand
- Universities looking to join Australian
federation - Project starting to assess organisational IAM
capability within the KAREN community
44Closing Observations
- Key tools and technologies are available
- NZ organisations must start aligning with
standards to achieve interoperability - Not just technical issues sharing requires
policies and processes, and these can be even
more difficult and time-consuming - Trust federations are emerging - NZ must be
part of these if we want to collaborate
internationally