Hiro Kishimoto

OGSA-WG co-chairs

OGSA andSecurity Services

GGF12 , September 20th, 2004

2OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

What is OGSA

Open service-oriented architecture based on Web services for addressing Grid scenarios

Component-oriented architecture

• Interchangeable components

Meta OS functionalities

• Distributed and heterogeneous environment

A rendering of these functions, based on Web service architecture and specifications

A GGF’s flagship architecture

3OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

OGSA History

Announced at GGF4 (’02/2) WG created (’02/9) 7 interim F2F meetings OGSA Usecase document at GGF10 (’04/3)

• Public comment period completed Declared as GGF’s flagship architecture at GGF10

(’04/3) OGSA document v1 at GGF11 (’04/6)

• First version as informational document• Companion OGSA Glossary document• Public comment period completed

OGSA roadmap draft at GGF12 (’04/9)

4OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

Context Services Info

Services

InfraServices

SecurityServices

Rsrc Mgmt Services

Execution Mgmt

Services

DataServices

PolicyMgmt

VOMgmt

Access

Integration

Provisioning

Cataloging

BoundaryTraversal

Integrity

Authorization

Authentication

WSRF WSN WSDM

EventMgmt

Trouble-shooting

Discovery

JobMgmt

Logging

ExecutionPlanning

WorkflowMgmt

WorkloadMgmt

Provisioning

ApplicationMgmt

DeploymentConfigurationReservation

Naming

Self MgmtServices

HeterogeneityMgmt

Service LevelAttainment

QoSMgmt

Optimization

Information Services

Infrastructure Services

SelfMgmtServices

SecurityServices

Resource Mgmt Services

Execution Mgmt Services

DataServices

Context Services

5OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

Design team

Informal domain expert groups within OGSA

May include co-chairs of other WG/RGs

Output is included in OGSA specification

OGSA-WG

OGSA Data ServiceDesign team

DAIS-WG

GSM-WG

GFS-WG

Info-D WG

ADF, OREP, …

Tele cons, F2F meetings

Data service definition in OGSA docDetailed service description and senarios

6OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

OGSA v2 Definition Process

“top down” and “bottom up” worlds are to be coordinated

OGSA-WG is concerned with defining requirements and overall architecture: the lighthouse towards which others may steer.

WGs within GGF or other bodies may/will be formed to develop specifications that speak to requirements identified by OGSA-WG.

The steps by which a technical specification may become identified as “OGSA compliant” remains to be clearly defined. • A key requirement might be identification as a

“recommendation” in the sense that there are two or more interoperable implementations.

7OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

OGSA v2 Definition Process

OGSA-WG

Design Team

Capability

Architecture Roadmap

EMS Data Security

CSGEPS

And a detailed chart with stages of individual specs and when we expect they would be available.

External standards (e.g., WS specs) thatsatisfy our requirementsOr identify what we’d like to see happen

v1…vN-1

v2…vN

Normative specs

Finer granularity

We are here

Coarser granularity

…

…

8OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

OGSA v2 Doc Process and Deliverables

RootDocuments

Usecase doc Architecture v2 Glossary

Design teamDocuments

Service descriptions Scenarios

Domain expert

WGs createSpecification

sGGF Recommendation documents

9OPERATIONAL SECURITY FOR THE GRID WORKSHOP

GGF12

OGSA v2 Deliverables

Root documents

• Existing usecase v1 document (tier 1)• Revise OGSA document v1 • Also update OGSA Glossary doc

Design team documents

• Service Description describes the services in the area in natural language, listing the interfaces and operations defined by each service.

• Scenarios demonstrates how these services can implement the use cases, using a combination of natural language and UML.

Expert WG document

• Specify the services using a mixture of WSDL and natural language• GGF Recommendation documents.