EOSDIS User Registration System (URS) 1 GES DISC User Working Group May 10, 2011 GSFC, NASA

Background A study was performed to determine possible solutions for an EOSDIS User Registration System (URS) that will serve as a centralized system for EOSDIS user registration and authentication that can also be integrated with existing EOSDIS data access services. Feedback was solicited from the data centers, User Services Working Groups and end users to gain insight into any potential issues. Over 100 comments were received Study methodology included: Review of initial draft URS requirements Review of stakeholder feedback and comments on those requirements Technical analysis of several possible implementations Results from ESDIS Prototype URS system Stakeholder interviews 2

URS Overview The URS will enable improved collection of metrics on users and usage of resources to help evaluate system enhancements and the impact of new tools and services. URS is defined as providing: User Registration User Authentication Profile and Password expiration and Renewal Profile Maintenance Profile Access Key Architectural Drivers: Response Time Availability Scalability Local access to user data Ability of Data Center staff to provide account services Accessibility by a diverse set of technology platforms

Benefits of the URS system EOSDIS Benefits Provide consolidated registration and authentication services Improve metrics collection on usage of EOSDIS Data and Services Ensure consistent policy enforcement Standards based API and Tools reduce integration costs Validation of during registration reduces errors Metrics collected reduce efforts required for ACSI surveys User Benefits Offer customized views Dataset suggestions based previous search and order Order/Search Management - order history, recent queries Opportunity to access tools that cannot fully operate without user identification Access to active participation in exchange of information through sanctioned forums

Proposed URS Solution Essentially a highly available LDAP solution An on-line browser based GUI will be provided to allow users to perform self registration Augment core system with: REST based abstraction layer above pure LDAP API WSDL/SOAP layer above pure LDAP API Mechanism for resolving user registration conflicts across external systems Bulk migration/registration component to ease integration of existing registration systems IP based authentication and access control support Authorization support for interested parties (Tiered Users)

URS Phase I Phased Approach minimizes impact on existing users Phase I will include the transition of EOS Clearinghouse (ECHO) Land Processes Data Center (LP DAAC) user authentication Land Atmosphere Near real-time Capability for EOS (LANCE) User Registration system ESDIS Metric System (EMS) Integration Anonymous FTP Study Understand Current FTP Use Cases Identify & Evaluate Candidate Technologies

URS Phase 1 (Cont’d) High-Availability LDAP System Multi-Master Replication Configuration Load Balanced Servers 24-7 Operations, Redundant Network & Processor Components 7 ECHO LANCE URS Internal Arch. URS