Consortium members Login
Study on AAA
...
Platforms For Scientific Resources in Europe
In December 2011, a consortium of four partners led by TERENA and a number of external experts was awarded a contract by the European Commission to carry out a study into AAA (authentication, authorisation and accounting) platforms and services for scientific resources. The study, led by TERENA, was concluded in September 2012.
The final version of the The AAA Study Final Report is now available as pdf.
Background for the AAA Study
Supporting and promoting scientific research and innovation as well enabling access to scientific information are key priorities for the European Commission and for the Member States.
The rapid development and adoption of Information and Communication Technologies (ICT) has changed the way researchers work, enabling almost instantaneous collaboration regardless of physical location and has provided access to an enormous amount of scientific information that can be processed on powerful computational platforms. This new way of working has generated and generates a huge volume of data, whose exchange and curation pose significant challenges.
To address this point. the High-Level Expert Group on Scientific Data (also known as HLEG on Scientific Data) recommends in its report (Riding the Wave ) the creation of a directive to set up a unified authentication and authorisation system, which they envision would pave the way to distributed and collaborative authentication, authorisation and accounting (AAA) for scientific data. As a result of the recommendations of the HLEG on Scientific Data, the European Commission has tendered to award funding to study the feasibility and impact of adapting the existing, widely used AAA platforms and services to be fully compliant with the requirements posed by the use of data/information resources (such as papers).
A bid in responce to the calls for tender was submitted in the summer 2011 and awarded to the Consortium in December 2011.
Aim of the AAA Study
The goal of the study was to evaluate the feasibility of delivering an integrated Authentication and Authorisation (and possibly accounting) Infrastructure , (AAI, ) to help the emergence of a robust platform platform (Scientific Data Infrastructure(SDI)) for access to and preservation of scientific information.
The targeted actors in the study are were the research and education communities, information service providers (data centres, libraries) and e-Infrastructure /technology providers.
The study was organised in two parts (see picture belowon the righhand side):
- Collection use-cases to derive the AAI requirements;
- Evaluation of existing AA Infrastructures as AAI as well as their gap analisys to identify their strenght strengths and their challangeschallenges. The legal aspects of the different AAIs was also assessed.
The output of the study consists of a set of recommendations for the delivery of an integrated AAI to be used for SDI.
The recommendations target different stakeholders; the European Commission highlight the following priorities:
- The general assumption confirmed by this study is that an AAI for SDI should be built on standard technologies, using mechanisms to translate between various authentication and authorisation technologies, and that federated access plays an important role;
- To fully benefit from federated access, more funding is needed to improve the reach of national identity federations in research an education;
- Further research is needed to enhance authorisation and accounting mechanisms;
- A common policy and trust framework for identity management is needed, as well as clarity on data protection laws – these should be coordinated at European level;
- Relevant organisations such as eIRG, REFEDS (Research and Education Federations), IGTF, the EC and consortia of libraries and data centres should all work towards these goals.
Read more on the Organisation of the Study...
Results of the Study
The tables below summarises the list of high-priority recommendations as identified by the team.
|
|
|
|
The recommendations target different stakeholders:
- The EC for the definition of a possible directive;
...
- Developers to encourage them to use standard technologies to achieve interoperability;
- Member States for creating the conditions for such an infrastructure at a national level;
...
- Policy makers, particularly those involved in the Data Protection Directive, to create awareness of the impact of legislation on cross-boundary access management
...
...
- .
...
The table below summarises the list of high-priority recommendations as identified by the team. The involved stakeholders should act timely to address these points.
Milestones and Meetings
The study will be done in the period from January 2012 till August 2012 with the following deliverables and timetable.
| Name | Deadline | Description |
|---|---|---|
| Draft Final Study Report | June 2012 | Draft AAA-Study-Report - To provide the draft final report of the study for comments. This version of the report was used circulated to before the Final Workshop final workshop (see below) participants and to the partners' liaisons . Partners' liaisons (i.e. REFEDS, TF-EMC2 and other relevant groups) were also consulted. Beside the report, the consortium has made available an additional document "'FIM and Law"; this '. This document covers legal issues in federated access management. |
| Final Workshop | July 2012 | To present the preliminary results to the study and receive feedback during the workshop. The workshop was organised at the Commission's Commission’s premises in Brussels. |
| Final Study Report | Sep 2012 | To include the feedback received during the Final Workshopfinal workshop. |
| Technical Report | Aug 2012 | To report on the use of resources in the performance of the contract including e.g. time-sheets on man/days consumption, travel details, use of consumables, etc. |
Contacts
If you have any question please do not hesitate to contact the study coordinator Licia Florio (florio@terena.org) or TERENA (secretariat@terena.org).
...