National Institute of Advanced Industrial Science and Technology Updates of the APGrid PMA Yoshio Tanaka APGrid PMA, Chair Grid Technology Research Center, AIST, Japan

APGridPMA: Members AffiliationNameProduction CAExperimental CA AIST / JapanYoshio Tanakain operationin operation (limited use) ASCC / TaiwanEric Yenin operationnone KISTI / KoreaSangwan Kimin operationnone CNIC/SDG / ChinaKai Nanunder reviewin operation IHEP / ChinaGonxing Sunin operationnone APAC/AustraliaDavid Bannonin operationwill close NAREGI/JapanMasataka Kanamoriin operationclosed NCHC / TaiwanTsung-Ying Wuaccreditedin operation (limited use) SDSC(PRAGMA) / USAMason Katzplanning NECTEC / ThailandSornthep VannaratPlanningin operation NGO / SingaporeJon Lauunder reviewnone ThaiGrid / ThailandSugree PhatanapheromPlanning KEK / JapanTakashi Sasakiin operationwill close HKU / HongKongChen Lin, Elaineno planin operation U of Hyd / IndiaArun Agarwalno planin operation USM / MalaysiaBoon Yaikno planin operation Osaka U / JapanSusumu Dateplanningin operation

Geographical locations (except US and AU)

APGrid CAs (accredited, 1/3) Australia APACGrid CA Accredited in Nov Started the operation in Feb Audited in March 2006 David Bannon, Graham Jenkins, Chris Kendrick Issues certificates for LCGChina IHEP CA Accredited in May 2005 (already in operation) Audited in December 2005 profile of the root cert. has been changed Gongxing Sun, Gang Chen, Fan HuaXiang Issues certificates for LCG CNIC / SDG CA Accredited in Dec Not yet in operation Going to launch a new CA hierarchical CA need to be accredited again Kai Nan, Morrise Xu,

APGrid CAs (accredited, 2/3) Japan AIST GRID CA Accredited in Sep Started the operation in March 2005 Audited in March 2005 Yoshio Tanaka, + 5 staffs NAREGI CA Accredited in Nov Started the operation in Feb Not yet audited Currently, removed from IGTF CA distribution Masataka Kanamori, + 4 staffs KEK Grid CA Accredited in Jan Started the operation in Feb Not yet audited Takashi Sasaki, + 2~3 staffs Issues certificates for LCG

APGrid CAs (accredited, 3/3) Korea KISTI GRID CA Accredited in Aug (already in operation) Not yet audited Sangwan Kim, Jae-hyuck Kwak Issues certificates for LCGTaiwan ASGCC CA Operated by Academia Sinica Grid Computing Center Accredited in Sep (already in operation) Audited in Aug Eric Yen, C.C. Chang, + 1~2 operators Issues certificates for LCG NCHC Grid CA Operated by National Cener for High-performance Computing Accredited in Feb Not yet in operation Alex Wu, Weicheng Huang, + 1~2 operators

APGrid CAs (under review, planned) Singapore NGO CA will be operated by National Grid Office and Netrust Inc. CP/CPS under review will issue certificates for LCGThailand NECTEC CA will be operated by National Electronics and Computer Technology Center drafting CP/CPS Thai National Grid Center will be operated by Thai National Grid Center drafting CP/CPSUSA PRAGMA CA will be operated by SDSC planning to be a catch-all CA for PRAGMA members drafting CP/CPS

APGrid CAs (general membership) China Univ. of Hong KongIndia Univ. of HyderabadJapan Osaka Univ.Malaysia Univ. Sains Malaysia

Grid Communities in Asia Pacific – at a glance – ApGrid: Asia Pacific Partnership for Grid Computing Open Community as a focal point more than 40 member institutions from 15 economics Kick-off meeting: July 2000, 1 st workshop: Sep PRAGMA: Pacific Rim Applications and Grid Middleware Assembly NSF funded project led by UCSD/SDSC 30 member institutions Establish sustained collaborations and advance the use of the grid technologies 1 st workshop: Mar. 2002, 10 th workshop: next month! APAN (Asia Pacific Advanced Network) Grid Committee Bridging APAN application communities and Grid communities outside of APAN Grid WG was launched in 2002, re-organized as a committee in 2005 APGrid PMA: Asia Pacific Grid Policy Management Authority General Policy Management Authority in the Asia Pacific Region 16 member CAs A founding member of the IGTF (International Grid Trust Federation) Officially started in June 2004 APEC/TEL APGrid Building social framework Semi-annual workshops APAN (Asia Pacific Advanced Network) Middleware WG Share experiences on middleware. Recent topics include ID management and National Middleware Efforts. Approved in January 2006.

NSF-funded project lead by UCSD/SDSC. 1 st workshop was held in March Establish sustained collaborations and advance the use of the Grid technologies for applications. Expected outcomes: Advance scientific applications Increase productive and effective use of the grid by researchers and scientists in the Pacific Rim Increase interoperability of grid middleware in Pacific Rim and throughout the world Tightly collaborating with ApGrid. Having workshops 2~3 times a year. P acific R im A pplication and G rid M iddleware A ssembly

PRAGMA && TAGPMA Chille CICESE (Centro de Investigacion Cientifica y de Education Superior de Ensenada)Mexico UNAM (Universidad Nacional Autonoma de Mexico) As of today, UNAM is not an institutional memberUSA NCSA PNG (Pacific Northwest Gigapop) Starlight (located at Univ. Illinois, Chicago) Transpac (located at Indiana Univ.) UCSD SDSC

APGridPMA: Status & Activities Accreditation of CAs 9 accredited CAs AIST, APAC, ASGCC, CNIC, IHEP, KEK, KISTI, NAREGI, NCHC 7 CAs are in operation CNIC/SDG will change the structure and will be re-accreditedAudit AIST, APAC, ASGCC, IHEP have been audited by the other CAs. Regular (monthly) VTC. Brief status reports of each CA In-depth report of a CA Decisions Examination for accreditation of a CA Approval of charter, minimum CA requirements, etc. Open discussions (physical) face-to-face meeting (at least) once per year. 1 st face-to-face meeting was in Dec. 2005, Beijing. 2 nd meeting will be in Oct. 15, 2006, Osaka, Japan.

Some Updates Issues to be discussed Accreditation of NGO/Netrust CA Some information are confidential Too short validity period of CRL Netrust CA agreed with disclosing audit report to the APGrid PMA auditors Accreditation of CNIC/SDG CA hierarchical CA IGTF CA distribution from the APGrid PMA Will need to limit the number of CAs per region Japanese universities will build UPKI China has some national/international Grid project Need to consider hierarchical structure of PMAs

Proposed audit items NAREGI PKI WG has subjectively selected criteria for auditing Grid CAs. based on AICPA/CICA WebTrust SM/TM Program for Certification Authority minimum CA requirements of APGrid PMA and EUGrid PMA Web Trust WebTrust is a seal awarded to web sites that consistently adhere to certain business standards established by the Canadian Institute of Chartered Accountants (CICA.ca) and the American Institute of Certified Public Accountants (AICPA).CICA.caAICPA In the program, “ Web Trust Principles and Criteria for Certification Authorities ” lists criteria for CAs. may too much for Grid CAs.

Audit checklist Simply pickup items from WebTrust SM/TM criteria based on minimum CA requirements. The number of criteria: WebTrust SM/TM Check List Principle Principle Principle Others4

Rough procedures for auditing Pre examination (few days) Review all available documents CP/CPS, User ’ s manual, Operational manual, CRL, CA Certificate, etc. Prepare score sheet Main examination (half day) Interview to CA staffs Detailed flow of identifying end entities and issuing certificates How accesses to the CA private key is controlled Inspection of equipments CA server, CA room, backup media, archived logs, a safe box, etc. Post examination (half day) Draft and send an audit report The audited CA is requested to send a report on plans for the improvements in 1 week