CILogon: A federated X.509 certification authority for cyberinfrastructure logon

Journal Article · Fri Apr 04 00:00:00 EDT 2014 · Concurrency and Computation. Practice and Experience

DOI:https://doi.org/10.1002/cpe.3265· OSTI ID:1618024

Basney, Jim ^[1]; Fleury, Terry ^[1]; Gaynor, Jeff ^[1]

---

1. National Center for Supercomputing Applications University of Illinois at Urbana‐Champaign 1205 West Clark Street Urbana Illinois 61801 USA

SUMMARY

CILogon provides a federated X.509 certification authority for secure access to cyberinfrastructure such as the Extreme Science and Engineering Discovery Environment. CILogon relies on federated authentication (Security Assertion Markup Language (OASIS, Burlington, MA (USA)) and OpenID) for determining user identities when issuing certificates. Federated authentication enables users to obtain certificates using existing identities (university, Google, etc.). Federated authentication also enables CILogon to serve a national‐scale user community without requiring a large network of registration authorities performing manual user identification. CILogon supports multiple levels of assurance and custom interfaces for specific user communities. In this article, we introduce the CILogon service and describe experiences and lessons learned from the first 3 years of operation. © 2014 The Authors. Concurrency and Computation: Practice and Experience published by John Wiley & Sons Ltd.

• Sponsoring Organization: USDOE
• Grant/Contract Number: SC0008597
• OSTI ID: 1618024
• Journal Information: Concurrency and Computation. Practice and Experience, Journal Name: Concurrency and Computation. Practice and Experience Journal Issue: 13 Vol. 26; ISSN 1532-0626
• Publisher: Wiley Blackwell (John Wiley & Sons)
• Country of Publication: United Kingdom
• Language: English