High Level Requirement Specification

Security and Authentication

Overview

To be viable in the commercial world, Taverna needs to address Security and Authentication.

Data transfer needs to be secure as some data can be legally or commercially sensitive.

Authentication is required so that resource allocation can be correctly accounted for and so that access policies are adhered to.

Overall Goals

• Secure transmission of data (WS-Security)
• Authentication and the use of Proxy's. The use of proxy's allow for Proxy Delegation within the services to track resource usage for accounting. The use of proxy's also ensure that access policies of a service are applied to the origin of the call rather than intermeditate calls (e.g when one service calls another, the originator should be who called the original service). (GRIDSam and MyProxy)
• For long running workflows it will be neccessary to be able to refresh proxy's.

Assessment

Affected Components

Taverna Workbench

Key Tasks

Appendix