Identity Management in the Asia Pacific Region: Facilitating Secure and Easy Access to Online Services

Transcription

1 CHAIN REDS Final Conference, Brussels, 31 March, 2015 Identity Management in the Asia Pacific Region: Facilitating Secure and Easy Access to Online Services Suhaimi Napis, PhD Universiti Putra Malaysia SIFULAN.my Outline Brief Background of Malaysia as Direct Beneficiary of EU FP7 Identity and Access Management Current Activities of Japan Academic Access Federation (GAKUNIN) and Malaysia's SIFULAN.my and others in the region Aspirations and Future Outlook 1

2 Brief Background First attended the Enabling Grids for E-sciencE (EGEE '06 Conference) Geneva, Switzerland, September 2006 (special thanks to Dr Simon Lin of Academia Sinica Grid Computing) Became partner of EUAsiaGrid Project ( ) which has had the greatest impact on Malaysia Continued on to EGI InSPIRE (Integrated Sustainable Pan- European Infrastructure for Researchers in Europe) Project as Asia Pacific Joint Research Unit together with Academia Sinica ( ) Just concluded the signing of Grant Agreement of EGI-ENGAGE (Engaging the EGI Community towards an Open Science Commons) as small partner of Competence Centre (Disaster Mitigation) led by Academia Sinica together with other Asian partners) Malaysia as Direct Beneficiary Malaysia is already connected to GEANT via TransEurasian Information Network (TEIN) since 2005 as do Indonesia and the rest of ASEAN countries (Except Brunei) via Malaysian Research and Education Network (MYREN) Involvement as partner of EUAsiaGrid Project had the greatest impact on the development of Grid and Distributed Computing in Malaysia Started from Zero; began developing the technical capability to build the first cluster according to standards outlined by EGEE (then) and eventually approved as Certified Site. Revised the Terms of Reference of National Grid Computing Initiative (NGCI) Now we have several Certified Sites that contributed over 700 (another 700 for CMS soon) cores to EGI. We believe in the sharing principle "to get some you should give some" For sustainability, we include in the next phase of MYREN development of cyberinfrastructure to include Network, Compute, and Storage 2

3 Malaysia as Direct Beneficiary... Established Malaysia National Certificate Authority (CA) and later joined as member of Asia Pacific Grid Policy Management Authority which partners with EU Grid PMA and TAG PMA Malaysian Identity Federation and Access Management (MyIFAM) runs National CA and also Malaysian Academic Access Federation An entity called SIFULAN (Secure Identity Federation on Unified Lightweight Access management) was established and since MyIFAM runs both services, we are in a good position to provide differing Level of Assurance (LoA) (ie Level 1, 2, 3 and 4) Towards ISO/IEC 29115:2013 (Information technology -- Security techniques -- Entity Authentication Assurance Framework)... something that is not everybody's fancy. 3

4 ISO/IEC 29115:2013 ISO/IEC 29115:2013 (Information technology -- Security techniques -- Entity authentication assurance framework) provides framework through the following: specifies four levels of entity authentication assurance; specifies criteria and guidelines for achieving each of the four levels of entity authentication assurance; provides guidance for mapping other authentication assurance schemes to the four LoAs; provides guidance for exchanging the results of authentication that are based on the four LoAs; and provides guidance concerning controls that should be used to mitigate authentication threats Identity and Access Management Definition: Identity management is the set of business processes, and a supporting infrastructure, for the creation, maintenance, and use of digital identities The Burton Group (a research firm specializing in IT infrastructure for the enterprise) Recent terms: Identity and Access Management/Governance Basic questions: Are the people using the services who they claim to be? Are they a member of our campus community? Have they been given permission? Is their privacy being protected? Policy/process issues need to be addressed at institution, national and international levels Organizations/Initiatives: InCommon (US) and edugain (GEANT) edugain-enable the trustworthy exchange of information related to identity, authentication and authorisation of GEANT partners' fed. 4

5 Identity Federation in Asia GAKUNIN (Japanese Academic Access Federation) and SIFULAN (Secure Identity Federation on Unified Lightweight Access Management; Malaysia's Academic Access Federation) are partnering together in developing trust framework for ASEAN countries. Series of workshops and engagement activities to share experiences not just for ASEAN countries but also in other countries eg Sri Lanka, Bangladesh, Eager to leverage on CHAINREDS's successes, developed technologies and experience in other regions (Africa, Mediteranean, Latin America) Always showing examples on how things work by doing demos from CESNET's Atlases Project and GAKUNIN wiki service greatly help us in engaging communities as they can see the benefits Aspirations Under Asia Pacific Advanced Network (APAN), we established Identity and Access Management Task Force (IAM-TF) with the objective of supporting the development and establishment of research and education identity federation and eduroam service in the Asia Pacific region. We believe that sharing can be enhanced if we know who access what and want to make users understand that in the future it is necessary to develop the trust framework: No access without identity vetting No more anonymous access For example, in Digital Learning Environment IAM- Identity Vetting is very important to provide simple learning analytics of learners thus facilitating credits for online learning/blended learning (Massively Open Online Courses MOOC) Also important in the sharing of data and repositories 5

6 Future Outlook ASEAN Catch-All Federation and for the homeless Assist in the expansion of access to online services like library subscription, educational contents, MOOC, etc Help in negotiation for better pricing of library subscription and other cloud services especially for students Already service providers and identity companies knocking on our doors to partner Acknowledgements Muhammad Farhan Sjaugi, Perdana University of Malaysia Centre for Bioinformatics Professsor Motonori Nakamura, GAKUNIN, National Institute of Informatics Professor Kazutsuna Yamaji, GAKUNIN, National Institute of Informatics, Japan 6

7 Asia Pacific Advanced Network Conference August, 2015 Kuala Lumpur Malaysia apan.net Thank You (^L^) 7