NCSA Alliance Portal Expedition Demo Marlon Pierce, Greg Daues, Gopi Kandaswamy, and Liang Fang Supercomputing 2004 Pittsburg, PA

Team Investigators Team Leads –Dennis Gannon, Beth Plale (Indiana University) Day-to-Day Coordinator: –Jay Alameda (NCSA) Partners –Ray Plante, (NCSA, Radio Astronomy), Bob Wilhelmson, (NCSA, MEAD), Richard Alkire (NCSA) –Geoffrey Fox, Marlon Pierce (Indiana University) –Gregor v. Laszewski (ANL) –Chris Johnson, Yarden Livnat (University of Utah)

Overview: Portals and Portlets for Science and Collaboration The presentation will consist of demos from the following Alliance Portal projects –Audio/Video collaboration portlets (Wenjun Wu and Marlon Pierce) –BIMA portlets for radio astronomy (Greg Daues) –Application factories and capability managers for BLAST (Gopi Kandaswamy and Liang Fang) This is built around a portlet architecture. –For much more information and more demos, see OGCE demo here Thursday at 12:30 pm Examples of standard (JSR 168) portlets TeraGrid User Portal, more application portals

GlobalMMCS Portlets and Clients GlobalMMCS is an Indiana University research project to build generic collaboration tools –Bridge gaps between different protocols, standards, servers and client devices. –Provide generalized collaborative session management. One goal of the project is to build web accessible clients that can run anywhere. –Mac, Linux, PC More extensive demos available in the Indiana Booth (1052). –Geoffrey Fox, Wenjun Wu

BIMA Portlets

Application Factory and Capabilities Portlets

App Factory Salient Features Fast, secure and easy creation of services on the Grid –Services are created dynamically from ServiceMapDocuments i.e no code generation, compilation or deployment is done –Applications can be converted into secure services without writing any additional code –Applications run in the environment of the service provider, so users don’t need to deploy applications in their environment Dynamically generate GUIs to services –GUIs are generated dynamically from ServiceMapDocuments. –Users access services securely from the portal using their web browser. So no specialized clients are needed to access the services. Fine grained access control to services –Service provider can specify ‘method’ level access control using capability tokens

Security in Grid Portals Grid Security Infrastructure –Delegation, single sign-on and mutual authentication –Proxy Certificate Proxy Manager Capability Model –Principle of Least privilege –What is Capability? -- One or a set of fine grained authorization policy descriptions with a lifetime protected by signature(s) Capability Manager WS-Security SOAP Processing –Signature/verification and encryption/decryption –SOAP message header carries proxy cert or/and capability tokens

App Factory with Proxy Certificate and Capability Tokens Proxy Manager Portlet GFac Service Portlet User Context proxy certificate proxy certificate Grid Portal GFac Bio Service capability token User Capability Authority Portlet capability token capability token capability token capability token Provider