1. Safe and secure control of VLBI stations from remote Alexander Neidhardt (FESG, TUM) neidhardt@fs.wettzell.de Martin Ettl (FESG/MPIfR), Jim Lovell (UTAS), Walter Alef (MPIfR), Ed Himwich (NASA/GSFC), Christopher Beaudoin (MIT-Haystack), Christian Plötz (BKG), Arpad Szomoru (JIVE), Matthias Mühlbauer (BKG),

2. Geodetic Observatory Wettzell

3. The ideas behind …

4. Local - Standard operations - Local operator

5. The ideas behind … Local - Standard operations - Local operator Remote - Check system states from everywhere at the observatory - Tele-working - Remote assistance and diagnostics - Control very remote, inaccessible telescopes Internet

6. The ideas behind … Local - Standard operations - Local operator Remote - Check system states from everywhere at the observatory - Tele-working - Remote assistance and diagnostics - Control very remote, inaccessible telescopes Internet Shared Internet - Save, passive data live monitoring - Dedicated control access by responsible person - Shared access from different observatories - Shared night shifts

7. The ideas behind … Local - Standard operations - Local operator Remote - Check system states from everywhere at the observatory - Tele-working - Remote assistance and diagnostics - Control very remote, inaccessible telescopes Internet Shared Internet - Save, passive data live monitoring - Dedicated control access by responsible person - Shared access from different observatories - Shared night shifts Unattended - Observations run autonomous, (semi-) automated and unattended

8. The ideas behind … NEXPReS Novel EXplorations Pushing Robust e-VLBI Services

9. NEXPReS WP5/Task 3: Continuous quality monitoring & Station Remote Control - three-year project from July 2010 to June 2013 - with the goal to develop future e-VLBI services of the European VLBI Network (EVN) and to use e-VLBI for each astronomical observation of the EVN - cooperation of 15 astronomical institutes and National Research and Education Network (NREN) providers - funded by the European Union's Seventh Framework Programme as e ‑ Infrastructure project - with the four technical main activities: - Cloud Correlation - Dynamically Provisioned Network Resources - Computing in a Shared Infrastructure - Provisioning High-Bandwidth, High-Capacity Networked Storage Novel EXplorations Pushing Robust e-VLBI Services WP5/Task 3: (TUM, MPIfR, JIVE) - identify and re-act on observation failures in near real-time - improve diagnostics - allow direct (read) access to the field system control parameters - extend the capabilities of the NASA Field System with - a secure remote control (authentication, authorization, operator roles) and - system monitoring

10. NEXPReS WP5/Task 3: Continuous quality monitoring & Station Remote Control _ now July 1 st

11. The ideas behind … NEXPReS Novel EXplorations Pushing Robust e-VLBI Services The solution: e-RemoteCtrl

13. e-RemoteCtrl wxWidgets Software generator idl2rpc.pl Linux User Credentials System Monitoring Wettzell Software Toolbox (well tested modules & components)

14. The ideas behind … NEXPReS Novel EXplorations Pushing Robust e-VLBI Services The solution: e-RemoteCtrl Security

15. Security Tunneled e-RemoteCtrl Wettzell Software Toolbox (well tested modules & components) sshbroker rbash

16. Security SSH-Broker configuration (passwords are AES encrypted)

17. Security User role management with authentication and authorization ReadChatSchedule (drudg) Adapt (attenuation) ControlSystem change Currently not used Static Roles Observer Notifier Scheduler Agent Operator Superuser Operator Notifier Dynamic Roles SupervisorOperator User rights Number of users Role change

18. Security Role change as three-way-handshake (1) Push role change button Send role change request to server Inform active operators about request User 1ServerUser 2 Reply OK/NOK Verify request Accept role change Verify request Reply OK/NOK Inform requestor about accept Confirm role change Reply OK/NOK Verify request Change active operator Step 1: REQUEST Step 2: CONFIRM Inform requestor about change esu (superuser) eoper (notifier)

19. Security Role change as three-way-handshake (2) Push role change button Send role change request to server Inform active operators about request User 1ServerUser 2 Reply OK/NOK Verify request Accept role change Verify request Reply OK/NOK Inform requestor about accept Confirm role change Reply OK/NOK Verify request Change active operator Step 1: REQUEST Step 2: ACCEPT Inform requestor about change esu (superuser) eoper (notifier)

20. Security Role change as three-way-handshake (3) Push role change button Send role change request to server Inform active operators about request User 1ServerUser 2 Reply OK/NOK Verify request Accept role change Verify request Reply OK/NOK Inform requestor about accept Confirm role change Reply OK/NOK Verify request Change active operator Step 1: REQUEST Step 2: ACCEPT Step 3: CONFIRM Inform requestor about change esu (superuser) eoper (notifier)

21. Security Role change as three-way-handshake (3) Push role change button Send role change request to server Inform active operators about request User 1ServerUser 2 Reply OK/NOK Verify request Accept role change Verify request Reply OK/NOK Inform requestor about accept Confirm role change Reply OK/NOK Verify request Change active operator Step 1: REQUEST Step 2: ACCEPT Step 3: CONFIRM Inform requestor about change esu (superuser) eoper operator esu superuser eoper (notifier) eoper (operator) esu (superuser)

22. The ideas behind … NEXPReS Novel EXplorations Pushing Robust e-VLBI Services The solution: e-RemoteCtrl Security Features

23. Features Status monitor Logging Command input Mark 5 capacity System temperatures Connection status Connection information Chat Main window

24. Features Checklists

25. Features Station specific system monitoring (HTML or plain text) Data for science and analysis Data for system operations Data for diagnosis MCI

26. Features Parallel control of several telescopes Acknowledgements to Jim Lovell, UTAS for his support of the project, the access to the AuScope systems and the usage of the software.

27. The ideas behind … NEXPReS Novel EXplorations Pushing Robust e-VLBI Services The solution: e-RemoteCtrl Security Features Test bed and e-RemoteCtrl network

28. Remote control on site Tele-working regular usage Hartebeesthoek NyAlesund

29. Thank you The software is available on the Web page http://www.econtrol-software.de See also our demo today!!!