TAGPMA - Information

Review Materials

Margaret Murray — Tue, 14 Aug 2007 09:07:11 -0400

Items for discussion and review in TAGPMA conference calls.

Attachment	Size
StatusMatrix11Sept07.xls	48.5 KB
StatusMatrix28Aug07.xls	49 KB
TAGPMA_Process_After.pdf	32.56 KB
TAGPMA_Process_Before.pdf	32.07 KB
StatusFromVinod.pdf	19.96 KB

Nine New Members Join The Americas Policy Management Authority

Darcy Quesnel — Thu, 17 Aug 2006 16:50:16 -0400

OTTAWA, ONTARIO, CANADA - The International Grid Trust Federation (IGTF) expanded its membership substantially when The Americas Grid Policy Management Authority (TAGPMA) voted to admit nine new members at its second face-to-face meeting held in Ottawa, July 17-19, 2006.

"This expansion will greatly enhance our ability to interact with users from Latin America, TeraGrid and Universities throughout the Americas", said Darcy Quesnel, chair of TAGPMA.

Membership in TAGPMA is open to Grid authentication providers and Grid relying parties operating in the Americas. TAGPMA accredits its membersâ€™ Grid authentication services to IGTF-approved authentication standards. TAGPMA accreditation allows members to interoperate with other IGTF participants in worldwide collaborations on the Grid.

The IGTF is a federation of the three regional policy management authorities: the Asia Pacific Grid Policy Management Authority, the European Policy Management Authority, and TAGPMA. Together these policy management authorities include 70 site and organization members, allowing thousands of researchers to authenticate to tens of thousands of Grid resources such as supercomputers and data stores all over the world.

Founding members from the U.S. and Canada - including CANARIE that was hosting this event â€“ expressed their satisfaction in having new contributors to the innovative work that the body is undertaking. Members such as HEBCA/USHER, Open Science Grid, TeraGrid, EELA, and DOEGrids/ESnet have been working on developing a new IGTF Authentication Profile which will be used to approve a new class of Grid Authentication service providers. The new IGTF profile will allow sites with well managed user account databases to translate their user identities into globally recognized Grid identities.

In addition, TAGPMA has begun investigation of interoperability with and leveraging of non-Grid-specific PKIs via the innovative use of bridge certificate authority technologies, to potentially deliver grid resources to a far wider and significantly expanded community.

The new TAGPMA members are: Universidade Federal Fluminense from Brazil represented by Vinod Rebello, Universidad de los Andes from Venezuela represented by Vanessa Hamar, Red Univesitaria Nacional from Chile represented by Juan Carlos Martinez, Universidad Nacional de La Plata from Argentina represented by Javier DÃaz, Universidad Nacional AutÃ³noma de MÃ©xico represented by Alejandro NÃºÃ±Ã©z, National Center for Supercomputing Applications represented by Jim Basney, Texas Advanced Computer Center represented by Margaret Murray, Purdue University represented by Matthew Lundmark, and University of Virginia represented by Jim Jokl.

For more information contact Darcy Quesnel.

Photos

Darcy Quesnel — Thu, 17 Aug 2006 14:34:14 -0400

www.flickr.com

More Flickr photos tagged with tagpma

TAGPMA Charter

Darcy Quesnel — Wed, 26 Oct 2005 17:29:17 -0400

The current TAGPMA charter was adopted at the Santiago F2F Meeting on 9Nov2007:

Previous charter drafts:

Attachment	Size
TAGPMAcharterv2_5_with_markup.pdf	230.25 KB
TAGPMAcharterv2_5.pdf	148.78 KB
TAGPMAcharterv2_3.doc	162 KB
TAGPMAcharter-v2.2.pdf	170.2 KB
TAGPMA-charter-v2.doc	132.5 KB
TAGPMA charter v1.pdf	83.44 KB

Trust on the Grid Goes Global

Darcy Quesnel — Thu, 06 Oct 2005 11:11:22 -0400

Boston, Mass., USA â€“ Today (5 October, 2005), users of Grid computing worldwide are a step closer to accessing computers and information in 50 countries and regions , from Canada to China, Portugal to Pakistan. The International Grid Trust Federation (IGTF), established this week during the 15th Global Grid Forum (GGF) in Boston, brings together Grid organizations representing Asia, the Americas and Europe that are working towards allowing scientific researchers to identify themselves to any Grid resource in the world with just a single online identity.

IGTF's members issue electronic certificates that allow scientists to use the Grid. The Grids protected by IGTF certificates include over 40,000 computer processors and petabytes of storage - equivalent to over a million DVDs. Making sure the owners of Grids trust each other's security procedures is key to letting researchers access all these resources.

â€œLiving in the information age, access to electronic resources has never been so vital beforeâ€, says Christos Kanellopoulos of Aristotle University of Thessaloniki, Greece, and co-chair of the GGF Certification Authorities Operations working group (CAOPS): â€œAlready today e-scientists can use their certificates to access and use grid enabled resources in any part of the world, making the World Wide Grid a reality. IGTF is a big step towards the dream of bridging the digital divideâ€.

The IGTF brings grid-oriented organizations around the globe much closer to realizing the promise of grids. Grids aim to harness the power of geographically dispersed computing resources, experimental facilities and research centres. Grid developersâ€™ goal is to provide seamless access to all the resources available. However, at present there are many independently operated grids, spread throughout the world, and users able to work on one canâ€™t necessarily gain access to the others.

Fundamental to user access is user authentication â€“ making sure that only those users who have the proper credentials are granted access to the resources. While this can be a significant challenge within a grid, achieving agreement on how to provide this level of authentication between grids has been an even bigger challenge. Thatâ€™s where the IGTF takes centre stage. With the establishing of the IGTF, the foundation is laid for building a trusted basis for identity management, and a further step taken towards global interoperability for scientific grids.

The IGTF is a federation of certification authorities or grid policy management authorities (grid PMAs), and the major grid infrastructure projects that together define the policies and standards for grid identity management. Comprising the three regional grid policy management bodies, the Asia Pacific Grid PMA (APGridPMA), the European Policy Management Authority for Grid Authentication in e-Science (EUGridPMA) and the Americas GridPMA (TAGPMA), the federation today has 61 members and covers 50 countries and regions.

The new federation builds on the strong foundations laid in Europe by the EUGridPMA, which established the common baseline for identity providers that is considered trustworthy by an increasing number of resource centres and service providers. These same guidelines were also adopted by the APGridPMA and the TAGPMA, who at the same time enriched the federation with innovative services for quickly bootstrapping new centres in the Grid, and integration of the Grid with the scientistsâ€™ home organisations.

The three EU e-Infrastructure projects Enabling Grids for e-Science (EGEE), the Distributed European Infrastructure for Supercomputing Applications (DEISA), and the South-Eastern European Grid-enabled e-Infrastructure Development (SEE-GRID), as well as the Nordic European Grid (NorduGrid), were the first to join the common trust domain, and the strong support from the e-Infrastructure Reflection Group at the European policy level further accelerated the building of the federation.

Also the US-based Open Science Grid (OSG) and TERAGrid projects, the ApGrid and PRAGMA projects in the Asia Pacific, and the world-wide LHC Computing Grid (LCG), base their authentication on the certificates issued by the IGTF affiliated certification authorities. Regional and national programmes that collaborate on a global scale also leverage the IGTF foundations today.

â€œRecently, the number of organizations involved in large scale regional and international Grid projects in the Asia Pacific region has been dramatically increasing,â€ said Yoshio Tanaka (AIST, Tokyo, Japan), chair of the Asia Pacific Grid PMA. â€œThere is a strong demand for establishing trust federation with production Grid projects in Europe and Americas. The IGTF accelerates the emergence of a globe-wide Grid infrastructureâ€.

Leveraging both national and international support from a variety of sources, the members of the federation are able to provide high-quality credentials â€“ called certificates â€“ at no cost to the scientists. Key members of federation, like The DoEGrids Certificate Authority operated by the U.S. Department of Energyâ€™s ESnet, and the Grid-FR CA operated by the French national research council CNRS, ensure that no scientists are â€left out in the rainâ€, and act as a catch-all for communities like the LCG and EGEE projects with a global network of agents.

Tony Genovese from DOEâ€™s Lawrence Berkeley National Laboratory, which manages ESnet for DOE, says: â€œBy establishing IGTF, we are seeing the fruition of a the first steps ESnet and the European Grid took back in February 2002 when a researcher at Fermilab used an authenticating certificate created by ESnet to successfully transfer files to Imperial College and Lancaster University in the U.K. We did this as part of the pilot for the Particle Physics Data Grid. Once the British sites and Fermilab recognized and accepted each otherâ€™s certificates, the data transfer went smoothlyâ€

The IGTF is closely linked to the efforts of the CA Operations Working Group in the Global Grid Forum, whose co-chair Darcy Quesnel of CANARIE is also the chair of the Americas Grid PMA. The working group provides the standard federation documents and the broad consensus between providers and relying parties.

The other important element for enabling a wide trust base is the use of the TACAR repository run by TERENA, the Trans-European Research and Educational Networking Association: a single source for all relying parties to validate their trust infrastructure both for the IGTF and for many other academic identity providers.

The future work of the IGTF will venture into better integration of Grid authentication with other mechanisms. â€œThe future is going to be with integrated services. Currently grid identity management is usually a separate thing the user needs to think about,â€ said David Groep of NIKHEF (Amsterdam, the Netherlands) and chair of the EUGridPMA. â€œIn the future, single sign-on should integrate grid, network and campus resources in a seamless system. Grid computing in a university classroom is currently hard to do; new services that will emerge based on the IGTF work will alleviate this barrierâ€.

For more information regarding the IGTF in general, please contact:

Tony Genovese electronically at tony@es.net or by phone at +1 510 486-4003 (available working hours US Pacific time),
Darcy Quesnel electronically at darcy.quesnel@canarie.ca or by phone at +1 613 996-2144 (available working hours Canadian Eastern time),
David L. Groep electronically at davidg@eugridpma.org (available working hours Central European Time),
Yoshio Tanaka electronically at yoshio.tanaka@aist.go.jp (available working hours Japanese Standard Time)

Attachment	Size
igtf-newsrelease-10-1.pdf	64.55 KB

Welcome

Darcy Quesnel — Fri, 23 Sep 2005 16:14:36 -0400

The Americas Grid Policy Management Authority (TAGPMA) is a federation of authentication providers and relying parties headed by a Policy Management Authority of those responsible for grids in North and South America. Our goal is to foster the cross-domain trust relationships that are needed to deploy grids in the Americas and around the world.

This federation is open to any grid-related authentication provider or relying party in the Americas. Through multiple recognized authentication profiles, we will work with many different types authorities whether they implement a classic public key infrastructure or not.

We are also involved globally with other regional grid PMA's - EUGridPMA and APGridPMA - to define authentication profiles and related minimum requirements. Members who meet these minimum requirements will be trusted globally through our involvement in the International Grid Trust Federation.