1 / 30

Partners: Cardiff University ActivePlan Solutions Ltd

COllaborative VIrtual TEams (COVITE) Project J.S. Pahwa, P. Burnap, L. Joita, W.A.Gray, O.F.Rana, John Miles. Partners: Cardiff University ActivePlan Solutions Ltd. Overview. Project Concept The Product Supplier Catalogue Database (PSCD) Application Security Management Collaboration

amethyst-reid
Télécharger la présentation

Partners: Cardiff University ActivePlan Solutions Ltd

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. COllaborative VIrtual TEams (COVITE) ProjectJ.S. Pahwa,P. Burnap, L. Joita, W.A.Gray, O.F.Rana, John Miles Partners: Cardiff University ActivePlan Solutions Ltd

  2. Overview • Project Concept • The Product Supplier Catalogue Database (PSCD) Application • Security Management • Collaboration • Data Definition • Data Search • Conclusions and further work

  3. Project Concept • AEC (Architecture/ Engineering/ Construction) industry projects involve many individuals and companies forming a consortium for the duration of a project • Consortia members are geographically dispersed • Product/Service Manufacturers and Suppliers databases (if existent!) are heterogeneous • Product/Service Manufacturers’ product information is plentiful and the majority is unstructured and unreachable

  4. The PSCD The PSCD application – Grid-enabled data management tool that provides the data structure for storing and retrieving information across a number of product suppliers’ databases.

  5. Collaborative Support Consideration Collaboration occurs between: • Product Suppliers and Contractors for procurement of supplies • Product Specification Designers for defining and building industry standards to describe available products • Members of the Consortium working on a particular construction project which require information on the products

  6. PCD Master Data Security Service The PSCD Specification Designers Product Class Supplier Databases Specification creation and management keep Suppliers up to date .NET Web Services Multiple Database Search Service (MDSS) Cluster of GRID computers Master Grid Service (MGS) PSCD Application Poll and connect to relevant databases at runtime GRID Services .NET Web Services Users/User Groups Supplier Databases managed by suppliers COVITE Cardiff Universityactiveplan

  7. The PSCD • Software tools used: • Apache Tomcat web server, Axis, Ant • Microsoft IIS web server • GT3.0.2 core • Servlet, ASP, JSP, VBScript, C# • Resources used on the server side: • 2 computers in Welsh eScience, in the Grid network (bouscat, agents-comsc) • 6 computers in the local network

  8. Grid Security Infrastructure (GSI) • GSI uses the Public Key Infrastructure (PKI), X.509 certificates and Secure Socket Layer (SSL) • X.509 certificates provide users with a unique global identification • Authorization to access a resource is controlled by a mapping between the user’s distinguished name and a local Unix/Linux ID via a grid-mapfile

  9. Grid Security Infrastructure (GSI) • X.509 Certificate: subject : C=UK,O=eScience,OU=Cardiff,L=WeSC,CN=liviu joita issuer : C=UK,O=eScience,OU=Authority,CN=CA,E=ca-operator@grid-support.ac.uk start date : Tue Nov 12 15:33:51 GMT 2002 end date : Wed Nov 12 15:33:51 GMT 2003 • Distinguished Name: CN=liviu joita,L=WeSC,OU=Cardiff,O=eScience,C=UK • Main advantages of using GSI: • Single sign-on • Users do not have username/passwords, instead they have public/private key pairs and identity certificates

  10. PSCD Application Tomcat Authentication Server IIS Application Server Firewall Submit user proxy certificate Client Side Web Browser 3 2 4 1 Security Architecture • First, a user has to have a valid proxy certificate. The user submits his proxy certificate, the VO who belongs to and his role within the VO to the Tomcat Authentication Server (AS) via a web interface using JSP - servlet interface. • Tomcat AS authenticates the certificate and obtains the local user name for the PSCD application from the grid-mapfile. • Tomcat AS passes the local user name, the user role and the VO to the IIS server that runs the PSCD system (which is a .NET web application environment). IIS then matches the username, the role and the VO to its local DB and creates a session for that user. • User preferences are applied to the ‘index’ page of the PSCD system and the user is presented with the home page of the application. The PSCD Authentication Architecture using a valid proxy certificate

  11. MyProxy Server 3 4 5 IIS Application Server Tomcat Authentication Server Firewall 2 6 1 Submit username/ password Client Side Web Browser Security Architecture PSCD Application • First, a user has to have a valid proxy certificate on the MyProxy Server machine. • The user submits his username/password pair credentials, the VO who belongs to and his role within the VO to the Tomcat Authentication Server (AS) via a web interface using JSP - servlet interface. • Tomcat AS uses the username/password pair to authenticate and authorize the user against his proxy certificate from MyProxy server • Tomcat AS authenticates the proxy certificate uploaded from MyProxy server and obtains the local username for the PSCD application from the Grid-map file. • Tomcat AS passes the local user name the user role and the VO to the IIS server that runs the PSCD system (which is a .NET web application environment). IIS then matches the user name to its local DB and creates a session for that user. • User preferences are applied to the ‘index’ page of the PSCD system and the user is presented with the home page of the application. The PSCD Authentication Architecture using username/password credentials

  12. The Product Class • A standard product definition for providing product information. • Acts as a template and provides meta information for creating actual product information. • Is made up of a number of specifications conforming to different specification types. • Can be used by Product Suppliers for population of product information in their databases.

  13. The Product Class Database • A tool for creating Product Classes and Product Class Specifications. • Enables Product Class versioning. • Releases Product Class for subscription by Product Suppliers. • Provides meta information for building product search criteria.

  14. List Specification Value Value … The Product Class and its various specification types Product Class Table Specification Specification Group Sub Product Class Specification Specification Specification List of Column Specifications where each column specification has list of values relative to other column specification values. Value Table Spec List Specification Sub-Specification Group Product Class Specification

  15. Product Class Versioning • New products emerge • Existing products evolve and are assigned more attributes • New versions created and assigned • Product suppliers notified • New classes downloaded

  16. Transport Layer Product Catalogue Database Product Supplier Database Table Table <xml> … … … </xml> Xml Parse Service Table Table … … Transport Layer Product Class Subscription

  17. Product Class Category Product Category Product Class Version Category Hierarchy Product Class Definition Specification List Version Specification Group Version Table Version Sub Product Class Version List Specification Table Specification Specification Group Sub Product Class List Definition Specification Group Definition Table Definition Sub Product Class Definition Product Class Database Structure

  18. Data Search • Information held by large number of data sources in a Wide Area Network. • Access to such information held by large number of organisations. • Information processing with aid of independent mechanisms, and • Sharing of information with those who need it.

  19. Objectives • Searching autonomously managed data sources external to the Grid Environment. • Processing, analysing and sharing information in real time. • Collaborative working. • Collation of searched datasets. • Optimisation of data access operations. • Web Services support throughout. • Use of single proxy.

  20. The Approach • Does a data source really need to be “Grid Enabled” to provide data access support to the Grid Environment? - may be not. • Instead, why not just Grid enable the data access process? - grid enabled data sources and grid enabled data access are two different things.

  21. The MDSS • A virtual distributed database search model. • A database centric Grid service for accessing and processing information from large number of data sources. • Searches supplier data sources based on a search criteria. • Enables a channel for product suppliers for advertising products to a large user base. • Built using Globus Toolkit 3.0.2 (Core).

  22. The Search • What to search? - a search criteria submitted by the user. • Where to search? - data sources that match user’s request. • What are the available resources to propagate the search? - the available Database Search Services in the MDSS

  23. Search Criteria Where to Search? <NewDataSet> <Supplier> <IDSupplier>1</IDSupplier> <SupplierWS>http://131.251.42.40/test/categories.asmx</SupplierWS> </Supplier> … </NewDataSet> Available GSHs <NewDataSet> <GridServiceHandle> <IDGsh>1</IDGsh> <GSH>http://131.251.42.40:8080/ogsa/services/DatabaseSearchService</GSH> </GridServiceHandle> <GridServiceHandle> <IDGsh>2</IDGsh> <GSH>http://131.251.47.110:18080/ogsa/services/DatabaseSearchService</GSH> </GridServiceHandle> … </NewDataSet>

  24. MDSS Architecture Two major components: • Master Grid Service: identify resources available, register new resources, job allocation, data parsing and data aggregation. • Database Search Service: data search, data aggregation, data parsing,collaborative working.

  25. Single user Metadata Product Classes Active Plan (Search Criteria Specified here) VO Master Grid Service * Metadata Query *Job Allocation Grid Service * Collation of datasets Grid Engine (based on the OGSA Model) Grid DB Search Service Grid DB Search Service Grid DB Search Service Apache Axis Soap Server <<soap messages >> <<soap messages >> <<soap messages >> WS Layer WS Layer WS Layer WS Layer WS Layer WS Layer Supplier databases - MDSS Architecture -

  26. Job Execution Grid Service Manager GSH Document Parser Master Grid Service Database Search Service Supplier Document Parser Data Aggregation Xml Converter OGSA Container Master Grid Service Modules

  27. MDSS Design Features • Ability to register new data sources. • Ability to enhance MDSS capability by adding more machines in the Grid cluster. • Supplier databases free of Grid Complexities. • Ability to identify data sources to be searched in real time. • Distribute search equally among available GSHs. • New instance of Database Search Service for each operation.

  28. Conclusions & Further Work • Product Class creation, versioning, subscription and search. • Peer Review System. • Multiple instances of Master Grid Services. • Data Streaming. • Data Caching. • Memory Resident databases.

  29. Demonstration Please visit Welsh e-Science booth for the demonstration of the grid enabled PSCD Application between 1300 -1400 today.

  30. Questions?

More Related