Vidmid-vc: Middleware for Video Conferencing Services Egon Verharen, SURFnet Vidmid-vc chair Middleware Vidmid VC History, Scope, Status, Authentication & Authorization, Object classes and dir.services, Resource discovery Future One of the integrating projects. Video killer app. IP tel. Vc services coming to a campus near you (if not already there), I2 Commons. 4/25/2002

Background Why Formed in spring 2001 Collaboration does not know boundaries Services coming your way Shared need & interest Formed in spring 2001 Spent some time naming and scoping Critical insight and momentum from ViDe & Internet2 Middleware (MACE & Shibboleth) leaders Focus on videoconferencing and video-on-demand for their middleware requirements Component of NSF Middleware Initiative (NMI) NMI-EDIT http://www.nmi-edit.org/ 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Middleware and federated administrations It’s not the network, it’s not applications, it’s the stuff nobody wants to do Stuff Identification (“who are you?”) Authentication (“prove me who you are”) Authorization (“I tell you want you can do”) Directory services (where the info is stored) Security Federated Administration Virtual organisations/Communities of interest Trust-based connection between (local) security domains Higher ed 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Where are we ? H.323, SIP, multicast tools 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Campus authentication Vidmid in id-world Objectclass standards (e.g.eduperson, gridperson) Content Portals Shibboleth exchange of attributes Future PKI DoDHE et al. Grids et al. Interrealm Learning Management Systems Security Domain Personal Portals Web services and servers WebISO Enterprise directory Campus authentication Future PKI 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Vidmid VC VidMid VideoConferencing Goals: Enable authenticated and authorized call setup Work out architectural issues Id, Authnz, Dir. + Resource discovery, security/PKI (for encryption, authentication, signing) Both intra- and interrealm Identify infrastructure to support interrealm community video H.323, SIP, VRVS/AG (multicast) Instigate client/gw development foster interoperability at identifier, security and video stream levels Engage industry players 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Vidmid VC status Workplan (from vidmid-vc workshop @ UNC, nov. 2001) Deliverables: Scenario’s (Art Vandenberg GSU, Mary Fran Yafchak SURA, EV) Object Classes & Directory services (Tyler Johnson UNC, RadVision) See presentation Larry Amiot Video-app directory Implementation, directory of video-directories ITU standard Resource discovery whitepaper Framework of requirements, thread models and security services (Samir Chatterjee & Tyler Johnson) 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Vidmid VC status, deliverables Derive flows and develop architecture for inter-realm authentication and authorization in a federated model Conferencing attributes, endpoint authentication, datastream protection Testbeds SURA CfP for SURA members 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

A&A call setup auth auth EP EP media 8:OK reg. autz autz Ent.p. autz 1 1a & 2a EP EP 9 media 8:OK reg. 2 GK/proxy server GK/proxy server 5 3 6 autz autz 4 7 Ent.p. autz Ent.p. autz ? Shibb? 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Areas for Joint R&D Networking Middleware QoS for digvid applications (TF-NGN, I2 QoS) Network analysis and simulation tools (TF-NGN, VideNet Scout, I2 e2e) High-reliability architectures (TF-STREAM) Multicast address space management (Geant) IPv6 (6net wp’s) Middleware Globally-scaleable H.323 number/dial plan & update (TF-STREAM, ViDe NASM) Inter-gatekeeper communication (ViDeNet) Security and authentication (I2 vidmid) Directory services (I2 vidmid, ViDeNet, TF-LSD) Creation of video teleconferencing schema extensions (I2 vidmid) If your project or group isn’t listed here, it doesn’t mean it isn’t good. It’s just that we don’t know about it (but that also gives to think) 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Areas for Joint R&D Videoconferencing Streaming Gateway development (I2 Commons) VRVS, AccessGrid (see next pres), MPEG-2, MJPEG SIP & VoIP (many, vidmid, TERENA?) Integration alternative media streams (I2, AccessGrid) e.g. MPEG-4 & HDTV & MJPEG) Data collaboration tools (ViDe, AccessGrid) (Semi)Automated scheduling (VRVS, AccessGrid, …) Streaming VoD 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Summary Vidmid on speed Deliverables ready Near Future Prepare Object classes White paper on authnz, resource discovery Near Future SIP clients Directory testbed Prepare And join 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Background info, URLs & docs Vidmid website http://middleware.internet2.edu/video/ Workplan vidmid-vc http://middleware.internet2.edu/video/VidMid-VC-workplan-12-February-2002.html Scenario’s (Art Vandenberg GSU, Mary Fran Yafchak SURA, EV) http://middleware.internet2.edu/video/draft-internet2-vidmid-vc-scenarios-02.html Object Classes & Directory services (Tyler Johnson UNC, RadVision) http://middleware.internet2.edu/video/draft-nmi-commObjectDefinition-00.doc http://middleware.internet2.edu/video/draft-nmi-commObjectWhitePaper-00.doc Resource discovery whitepaper (Art Vandenberg, GSU) http://middleware.internet2.edu/video/draft-internet2-vidmid-vc-resource-discovery-01.txt Directory of video-directories (ViDeNet) http://videnet.unc.edu/vide-dod/index.phtml 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

Figure 1. Relationship of H323 LDAP components h323 LDAP Server Enterprise Directory User data cn . commURI Gatekeeper Local endpoint tables Figure 1. Relationship of H323 LDAP components h323 LDAP Server commObject data commUniqueId commOwner 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/

H.323 authenticated call setup Terminals register with gatekeeper (H.225.0 RAS: registration, admission, status) Terminals call each other (H.225.0 Call signaling) audio/video traffic exchange (RTP) For authn: H.235 annex D (username/passwd), annex E (cert, PKI) 4/25/2002 ViDe/SURA ws, http://middleware.internet2.edu/video/