Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “data authentication”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10

Creating a Prototype Web Application for Spacecraft Real-Time Data Visualization on Mobile Devices

Mobile devices (smart phones, tablets) have become commonplace among almost all sectors of the workforce, especially in the technical and scientific communities. These devices provide individuals the ability to be constantly connected to any area of interest they may have, whenever and wherever they are located. The Huntsville Operations Support Center (HOSC) is attempting to take advantage of this constant connectivity to extend the data visualization component of the Payload Operations and Integration Center (POIC) to a person's mobile device. POIC users currently have a rather unique capability to create custom user interfaces in order to view International Space Station (ISS) payload health and status telemetry. These displays are used at various console positions within the POIC. The Software Engineering team has created a Mobile Display capability that will allow authenticated users to view the same displays created for the console positions on the mobile device of their choice. Utilizing modern technologies including ASP.net, JavaScript, and HTML5, we have created a web application that renders the user's displays in any modern desktop or mobile web browser, regardless of the operating system on the device. Additionally, the application is device aware which enables it to render its configuration and selection menus with themes that correspond to the particular device. The Mobile Display application uses a communication mechanism known as signalR to push updates to the web client. This communication mechanism automatically detects the best communication protocol between the client and server and also manages disconnections and reconnections of the client to the server. One benefit of this application is that the user can monitor important telemetry even while away from their console position. If expanded to the scientific community, this application would allow a scientist to view a snapshot of the state of their particular experiment at any time or place. Because the web application renders the displays that can currently be created with the POIC ground system, the user can tailor their displays for a particular device using tools that they are already trained to use.

Lang, Jeremy S.↗

Investigating Secondary Aerosol Processes in the Amazon through Molecular-level Characterization of Semi-Volatile Organics

In areas where biogenic emissions are oxidized in the presence of anthropogenic pollutants, it has become increasingly apparent that secondary organic aerosol (SOA) formation from biogenic volatile organic compounds (BVOCs) is substantially enhanced. The Amazon forest is the dominant source of BVOCs globally, and the forest is rapidly being converted to urban and agricultural uses. We participated in a collaborative field study located in the Amazon region around Manaus, Brazil, in 2014 (Green Ocean Amazon; GoAmazon). This study was designed to comprehensively examine how BVOC emissions (specifically, the most highly emitted non-methane hydrocarbon, isoprene, and lesser studied sesquiterpenes) and their interaction with anthropogenic pollution (i.e., nitrogen oxides, sulfur dioxide, and black carbon) alter the atmosphere’s oxidative capacity, influence secondary aerosol formation, atmospheric composition and, ultimately, affect the earth’s radiation balance and climate. We provide the first hourly, in-situ measurement of 30 sesquiterpenes and 4 diterpenes, roughly estimating that sesquiterpene oxidation contributes to 10-14% of ozone reactive loss by terpenes and at least 0.4–5% (median 1 %) of total submicron OA mass. However, this is likely a low-end estimate, as evidence for additional unaccounted sesquiterpenes and their oxidation products clearly exists. We also provide new perspectives on sulfate, NO x , and particle acidity influencing isoprene-derived SOA, comparing the central Amazon environment with Southeastern U.S.A. summer, representing clean to polluted conditions, respectively. We find that summed concentrations of isoprene-derived SOA tracers correlated with particulate sulfate spanning three orders of magnitude, suggesting that 1 μg m -3 reduction in sulfate corresponds with at least ~0.5 μg m -3 reduction in isoprene-derived SOA. We also find that SOA mass derived from isoprene oxidation in the presence of NO x is primarily comprised of aerosol sulfate bound with isoprene oxidation products (i.e. organosulfates), ~97% in the Amazon and ~55% in the Southeastern U.S. We infer under natural conditions in high isoprene emission regions, preindustrial aerosol sulfate was almost exclusively isoprene-derived organosulfates, which are traditionally thought as representative of anthropogenic influence. We further report the first field observations showing that particle acidity impacts the distribution of isoprene oxidation tracers in the gas and particle phases, providing physicochemical insight into isoprene SOA formation chemistry. Coupled with other co-located measurements by the DOE Atmospheric Radiation Measurement (ARM) team and collaborating PIs at our measurement site (called T3), on the G1 aircraft, and at additional field sites (T0, T1, T2) this data set has been used to understand emission, oxidation, and particle formation pathways at the molecular level, to elucidate how these pathways change when influenced by anthropogenic sources, and to evaluate their importance for the atmospheric budget of aerosols and the earth’s radiation balance on regional scales. Recommendations: Further constraint of the role of sesquiterpenes on ozone (O 3 ) reactivity and SOA formation is limited by the availability of authentic standards and synthesized compounds of sesquiterpenes and their oxidation products. Future research efforts should focus on making such standards available via custom synthesis to allow for accurate quantification and focused oxidation experiments that will fully elucidate the chemistry of these compounds in the atmosphere. Further, reductions in aerosol sulfate (via SO 2 emissions control) continues to be one of the most effective methods to reduce SOA formation from isoprene, but the concerted role of ammonia (NH 3 ) gas emissions from (agricultural) industry and other sources requires more investigation to better understand the role of aerosol acidity in SOA formation and potential controls. As GoAmazon particles can be more acidic compared to areas with greater anthropogenic NH 3 emissions, this promotes relatively greater organosulfate (OS) formation from isoprene even in the presence of NO x . Because OS and inorganic sulfate differ in water uptake properties, this implies preindustrial aerosol sulfate (albeit less abundant) may have been less reflective than current earth system models assume. Further research should investigate the radiative impacts of organic vs inorganic sulfate in aerosols to improve model representation. Finally, future work (currently underway) should include constraint of the contributions of monoterpene (C 10 H 16 ) BVOCs and biomass burning VOCs as precursors to SOA formation in the region as well as their impacts on radiative forcing in the climate system.

54 ENVIRONMENTAL SCIENCES↗

A Step Toward Working with Untrusted Ground Stations

We are witnessing a shift toward outsourcing satellite and ground station services to third-party commercial entities. As with any enterprise, these third parties can be vulnerable to cyber compromise, including image tampering and deepfake injection. The multimedia community is beginning to establish standards and technology to enable authenticity verification of multimedia created and edited by others. While appealing to the remote sensing domain, the nature of raw satellite imagery is incompatible with the proposed change verification tools, resulting in the need for a means to validate updates made to image products. We present a simple method for verifying a specific class of algorithms. Our inverse processing approach eliminates the need to see the original image as the reversed data can be checked against an original digital signature. We demonstrate our approach on basic image restoration routines and conclude with a discussion on open challenges and next steps.

97 MATHEMATICS AND COMPUTING↗

Alerga: Alert Aggregation and Reasoning in GOOSE Simulation Pipeline

IEC 61850 specifies the Generic Object Oriented Substation Event (GOOSE) protocol as one option for low latency communication of substation-related events. Due to its strict timing requirements, GOOSE lacks any form of encryption or authentication and has only minimal integrity guarantees. These absences render the protocol vulnerable to a variety of communication anomalies, including adversarial action. In particular, an adversary with access to the substation network can launch man in the middle (MITM) attacks. We propose Alerga, a set of tools to allow operators to mitigate some of the risks of the protocol while retaining its strengths. To that end, we have developed first a GOOSE simulation pipeline including data generation, anomaly detection, alert handling, causal reasoning and data visualization components. The simulator is designed to be modular, allowing operators to swap components to better fit their network capabilities. The volume of alert traffic on a substation network threatens operators with alert fatigue. In order to combat this, we secondly present a novel form of alert aggregation and processing, offering operators a condensed view of any threats to the system. Thirdly, to facilitate the handling of these threats, our causal reasoning system traces the alerts back to their most likely cause, generating an initial hypothesis for operators to investigate.

alert aggregation↗

GLOBE Aerosol Field Campaign - U.S. Pilot Study 2016

During the spring of 2016, from April 4 - May 27, sixteen GLOBE schools participated in the GLOBE Aerosol Field Campaign - U.S. Pilot Study. Thirteen teachers from these schools had previously participated in the NASA LEARN program (Long-term Experience in Authentic Research with NASA) where they were GLOBE trained in Atmosphere protocols, and engaged in 1-3 years of research under the mentorship of NASA scientists. Each school was loaned two aerosol instruments for the Campaign duration, either 2 GLOBE sun photometers, 2 Calitoo sun photometers, or 1 of each. This allowed for students to make measurements side-by-side and in the case of the Calitoos, to compare AOT results immediately with each other for better consistency in data collection. Additionally, as part of the Field Campaign evaluation, multiple instruments allow for an assessment of the ease of use of each instrument for grade level of students, whether in middle school or high school. Before the Campaign, all GLOBE and Calitoo instruments were 'checked out' against an AERONET, then checked again upon return after the Campaign. By examining all data, before, during and after the Campaign, this gives an indication of instrument performance and proficiency obtained by the students. Support was provided to each teacher and their students at the level requested, via email, phone or video conferencing.

Pippin, Margaret↗

Scenario-Based Task Design for Airline Pilot Anticipatory Behaviors: Asynchronous Assessment of Complex Cognitive Skills

Airline pilots must anticipate potential threats to passenger safety and efficient flight. Such anticipation needs to occur at both the system and individual levels, yet no formal training for these anticipatory behaviors currently exists. The emerging field of resilience engineering provides a framework to explore this problem. Given the complex nature of this problem, the assessment portion of the project constituted a challenge. Simulator time is expensive as simulators are costly to run, and they are extremely limited in number. Also, by the nature of their work, pilots as a group are hard to connect with in person; thus, asynchronous methods were adopted. Further, to ensure that authentic pilot behaviors were observed, task-based scenarios were used rather than focus group or interview protocols. This session explores the design of asynchronous learning and a measure for assessing pilot anticipatory behaviors outside of a simulator to help design learning opportunities for pilots. The scenario-based and active assessment items will be discussed in detail, and demonstrations of these items will be shared. These items constitute the bulk of the challenge for this work. At the time of this writing, data is being collected to assess the effectiveness of the interactive training module and validate the measures. This data will be analyzed and presented as part of the session. This will include any linkages between the scenario-based and traditional assessment items.

task design↗

Cybersecurity Certification Requirements for Distributed Energy Resources: A Survey of SunSpec Alliance Standards

This survey paper explores the cybersecurity certification requirements defined by the SunSpec Alliance for Distributed Energy Resource (DER) devices, focusing on aspects such as software updates, device communications, authentication mechanisms, device security, logging, and test procedures. The SunSpec cybersecurity standards mandate support for remote and automated software updates, secure communication protocols, stringent authentication practices, and robust logging mechanisms to ensure operational integrity. Furthermore, the paper discusses the implementation of the SAE J3072 standard using the IEEE 2030.5 protocol, emphasizing the secure interactions between electric vehicle supply equipment (EVSE) and plug-in electric vehicles (PEVs) for functionalities like vehicle-to-grid (V2G) capabilities. This research also examines the SunSpec Modbus standard, which enhances the interoperability among DER system components, facilitating compliance with grid interconnection standards. This paper also analyzes the existing SunSpec Device Information Models, which standardize data exchange formats for DER systems across communication interfaces. Finally, this paper concludes with a detailed discussion of the energy storage cybersecurity specification and the blockchain cybersecurity requirements as proposed by SunSpec Alliance.

Tsikteris, Sean (ORCID:0009000524202250)↗

Image Detective 2.0: Engaging Citizen Scientists with NASA Astronaut Photography

Image Detective 2.0 engages citizen scientists with NASA astronaut photography of the Earth obtained by crew members on the International Space Station (ISS). Engaged citizen scientists are helping to build a more comprehensive and searchable database by geolocating this imagery and contributing to new imagery collections. Image Detective 2.0 is the newest addition to the suite of citizen scientist projects available through CosmoQuest, an effort led by the Astronomical Society of the Pacific (ASP) and supported through a NASA Science Mission Directorate Cooperative Agreement Notice award. CosmoQuest hosts a number of citizen science projects enabling individuals from around the world to engage in authentic NASA science. Image Detective 2.0, an effort that focuses on imagery acquired by astronauts on the International Space Station, builds on work initiated in 2012 by scientists and education specialists at the NASA Johnson Space Center. Through the many lessons learned, Image Detective 2.0 enhances the original project by offering new and improved options for participation. Existing users, as well as new Image Detective participants joining through the CosmoQuest platform, gain first-hand experience working with astronaut photography and become more engaged with this valuable data being obtained from the International Space Station. Citizens around the world are captivated by astronauts living and working in space. As crew members have a unique vantage point from which to view our Earth, the Crew Earth Observations (CEO) online database, referred to as the Gateway to Astronaut Photography of Earth (https://eol.jsc.nasa.gov/), provides a means for crew members to share their unique views of our home planet from the ISS with the scientific community and the public. Astronaut photography supports multiple uses including scientific investigations, visualizations, education, and outreach. These astronaut images record how the planet is changing over time, from human-made changes like urban growth and agriculture, to natural features and landforms such as tropical cyclones, aurora, coastlines, volcanoes and more. This imagery provides researchers on Earth with data to understand the planet from the perspective of the ISS, and is a useful complement to other remotely sensed datasets collected from robotic satellite platforms.

Higgins, Melissa↗

TPSAS-NF1676L-18251-DND

The National Wildlife Federation (NWF) and its Eco-Schools USA program is focused providing an engaging educational experience to help students better understand the essential principles of Earth's systems and the impact of climate change on them. The program is aimed to provide those students with the ability to communicate about climate change and apply knowledge in decision making. To achieve these objectives, the NWF partnered with NASA scientists and developed the Eco-Schools USA Climate Change Connections (CCC) is a 9th-12th grade curriculum. CCC is designed to build upon and utilize the many NASA mission resources, programs, and associated interfaces to enhance authentic learning experiences for both educators and students. It seeks to develop an integrated systems-thinking approach to understanding and acting upon the issue of climate change. In collaboration with mission specialists from ICESat, LandSat, Terra, AQUA, AURA, a cross programmatic curriculum was developed to provide a unified or systems-thinking approach to addressing realworld Earth systems problems (see NWF web page below). In this presentation, we provide an overview of the Climate Change Connections lesson curriculum but focus specifically on a couple of example exercises where NASA data sets are used to teach basic lessons about aspects of the climate system as it pertains to the built environment. In particular, we show how data adapted from NASA’s GEWEX Surface Energy Budget are applied to a lesson in solar energy. These data sets are made available directly through NASA web portals entitled “My NASA Data” and the Prediction of Worldwide Renewable Energy Resource. At the POWER web portal there is a link to the Surface meteorology and Solar Energy web portal providing data sets tailored specifically to the assessment of solar energy resource at any location on the globe. Here, we depict the sources of these data and their subsequent usage in the Eco-Schools USA CCC Lessons.

Paul W Stackhouse↗

Evaluation of the Biolog automated microbial identification system

Biolog's identification system was used to identify 39 American Type Culture Collection reference taxa and 45 gram-negative isolates from water samples. Of the reference strains, 98% were identified to genus level and 76% to species level within 4 to 24 h. Identification of some authentic strains of Enterobacter, Klebsiella, and Serratia was unreliable. A total of 93% of the water isolates were identified.

NASA Program Environmental Health↗

Antarctic iron meteorites: An unexpectedly high proportion of falls of unusual interest

The inhabited and explored areas of Earth have contributed 725 iron meteorites, accounting for 28% of the 2611 authenticated meteorites known of all types. Observed fall statistics give a much different view of relative abundance. The 42 historic iron meteorite falls spanning 230 years suggests a frequency of one fall per 5.6 years and represents only 4.9% of the total 853 known falls. Antarctic iron meteorite recoveries offer promise of providing a new perspective on the influx problem. At least 42 iron meteorite specimens were found during the last 25 years by various field teams working in Antarctica. Most of these specimens were not described in detail, but the available data indicates that 21 separate falls are represented, 50% of the number of recovered specimens. Twelve of the 21 falls were both structurally classified and placed into chemical groups. They are listed in order of increasing structural complexity and/or Ni content.

Clarke, R. S., Jr.↗

Service-Oriented Architecture for NVO and TeraGrid Computing

The National Virtual Observatory (NVO) Extensible Secure Scalable Service Infrastructure (NESSSI) is a Web service architecture and software framework that enables Web-based astronomical data publishing and processing on grid computers such as the National Science Foundation's TeraGrid. Characteristics of this architecture include the following: (1) Services are created, managed, and upgraded by their developers, who are trusted users of computing platforms on which the services are deployed. (2) Service jobs can be initiated by means of Java or Python client programs run on a command line or with Web portals. (3) Access is granted within a graduated security scheme in which the size of a job that can be initiated depends on the level of authentication of the user.

Jacob, Joseph↗

Community Energy Planning: Best Practices and Lessons Learned in NREL's Work with Communities

The clean energy transition is accelerating due to local, state, and national actions combined with external market forces. Regardless of where goals are set and decisions are made, clean energy deployment occurs on the ground in communities. As a result, communities increasingly need technical expertise and assistance with planning for and managing the energy transition. Building on decades of work with state, local, and tribal jurisdictions, the National Renewable Energy Laboratory (NREL) increasingly provides community-driven modeling, analysis, and technical assistance to enable more data-driven and equitable community energy planning. To inform and enhance NREL's capabilities in community energy planning and provide a resource for others working in this space, the Joint Institute for Strategic Energy Analysis (JISEA) Sustainable Communities Catalyzer supported this best-practices presentation based on interviews with seasoned NREL practitioners and a literature review on equitable community energy planning. Findings include five best practices for community energy planning that NREL practitioners and others can apply to strengthen their impact: 1) do your homework in preparation for community interactions; 2) be humble, authentic, and honest in your interactions with community members; 3) respect community agency in every step of the process; 4) meet the community where they are; 5) democratize participation.

best practices↗

The State of Cryptolib – The Open-Source Satellite Cryptography Library

What state would the world be in if all internet traffic was unencrypted? Imagine an alternate universe where you can plug a packet sniffing device into your home internet and capture the web traffic of the entire world. It seems obvious that this scenario is less than desirable. If we would not allow this for the internet, why would we allow this in the space domain? With the advent of open-source ground stations, commercial off the shelf hardware, and ground stations as a service, the barrier to entry for space communications is rapidly lowering. New players enter the space realm everydayevery day, and the presence of tools to allow apprentice evildoers the ability to exploit satellite communications is on the horizon. Not only are legacy missions at risk, but future missions are as well - particularly lower budget science missions with more stringent sciencesize, weight, and power constraints. that may find it difficult to utilize hardware-based encryption solutions. In terms of Civilian Aerospace, NASA Standard 1006 generally directs that missions "shall protect the command stack with encryption that meets or exceeds Federal Information Processing Standards (FIPS) 140". Fortunately, the Consultative Committee for Space Data Systems (CCSDS) has published an international standard on Space Data Link Security. The combination of these two forces has resulted in CryptoLib - an open-source, C-based, encryption library that aims to be CCSDS SDLS compliant. CryptoLib is designed to support smaller missions on a tight budget that may be subject to the more stringent command link encryption requirements. Additionally, CryptoLib serves as an underpinning in JPL's Key Management & Cryptography (KMC) suite and is also designed to function as a 'drop-in' for smaller missions. CryptoLib is in active development and currently provides Telecommand (TC), Telemetry (TM), and Advanced Orbiting Systems (AOS) encryption and decryption capabilities with a variety of encryption and authentication schemes. This presentation will report the latest features, current status, and future plans for CryptoLib.

open-source encryption↗

The State of CryptoLib – The Open-Source Satellite Cryptography Library

What state would the world be in if all internet traffic was unencrypted? Imagine an alternate universe where you can plug a packet sniffing device into your home internet and capture the web traffic of the entire world. It seems obvious that this scenario is less than desirable. If we would not allow this for the internet, why would we allow this in the space domain? With the advent of open-source ground stations, commercial off the shelf hardware, and ground stations as a service, the barrier to entry for space communications is rapidly lowering. New players enter the space realm everydayevery day, and the presence of tools to allow apprentice evildoers the ability to exploit satellite communications is on the horizon. Not only are legacy missions at risk, but future missions are as well - particularly lower budget science missions with more stringent sciencesize, weight, and power constraints. that may find it difficult to utilize hardware-based encryption solutions. In terms of Civilian Aerospace, NASA Standard 1006 generally directs that missions "shall protect the command stack with encryption that meets or exceeds Federal Information Processing Standards (FIPS) 140". Fortunately, the Consultative Committee for Space Data Systems (CCSDS) has published an international standard on Space Data Link Security. The combination of these two forces has resulted in CryptoLib - an open-source, C-based, encryption library that aims to be CCSDS SDLS compliant. CryptoLib is designed to support smaller missions on a tight budget that may be subject to the more stringent command link encryption requirements. Additionally, CryptoLib serves as an underpinning in JPL's Key Management & Cryptography (KMC) suite and is also designed to function as a 'drop-in' for smaller missions. CryptoLib is in active development and currently provides Telecommand (TC), Telemetry (TM), and Advanced Orbiting Systems (AOS) encryption and decryption capabilities with a variety of encryption and authentication schemes. This presentation will report the latest features, current status, and future plans for CryptoLib.

open-source encryption↗

Broadly neutralizing antibodies against sarbecoviruses generated by immunization of macaques with an AS03-adjuvanted COVID-19 vaccine

The rapid emergence of severe acute respiratory syndrome coronavirus 2 (SARS-CoV-2) variants that evade immunity elicited by vaccination has placed an imperative on the development of countermeasures that provide broad protection against SARS-CoV-2 and related sarbecoviruses. Here, we identified extremely potent monoclonal antibodies (mAbs) that neutralized multiple sarbecoviruses from macaques vaccinated with AS03-adjuvanted monovalent subunit vaccines. Longitudinal analysis revealed progressive accumulation of somatic mutation in the immunoglobulin genes of antigen-specific memory B cells (MBCs) for at least 1 year after primary vaccination. Antibodies generated from these antigen-specific MBCs at 5 to 12 months after vaccination displayed greater potency and breadth relative to those identified at 1.4 months. Fifteen of the 338 (about 4.4%) antibodies isolated at 1.4 to 6 months after the primary vaccination showed potency against SARS-CoV-2 BA.1, despite the absence of serum BA.1 neutralization. 25F9 and 20A7 neutralized authentic clade 1 sarbecoviruses (SARS-CoV, WIV-1, SHC014, SARS-CoV-2 D614G, BA.1, and Pangolin-GD) and vesicular stomatitis virus–pseudotyped clade 3 sarbecoviruses (BtKY72 and PRD-0038). 20A7 and 27A12 showed potent neutralization against all SARS-CoV-2 variants and multiple Omicron sublineages, including BA.1, BA.2, BA.3, BA.4/5, BQ.1, BQ.1.1, and XBB. Crystallography studies revealed the molecular basis of broad and potent neutralization through targeting conserved sites within the RBD. Prophylactic protection of 25F9, 20A7, and 27A12 was confirmed in mice, and administration of 25F9 particularly provided complete protection against SARS-CoV-2, BA.1, SARS-CoV, and SHC014 challenge. These data underscore the extremely potent and broad activity of these mAbs against sarbecoviruses.

60 APPLIED LIFE SCIENCES↗

Practical Pocket PC Application w/Biometric Security

I work in the Flight Software Engineering Branch, where we provide design and development of embedded real-time software applications for flight and supporting ground systems to support the NASA Aeronautics and Space Programs. In addition, this branch evaluates, develops and implements new technologies for embedded real-time systems, and maintains a laboratory for applications of embedded technology. The majority of microchips that are used in modern society have been programmed using embedded technology. These small chips can be found in microwaves, calculators, home security systems, cell phones and more. My assignment this summer entails working with an iPAQ HP 5500 Pocket PC. This top-of-the-line hand-held device is one of the first mobile PC's to introduce biometric security capabilities. Biometric security, in this case a fingerprint authentication system, is on the edge of technology as far as securing information. The benefits of fingerprint authentication are enormous. The most significant of them are that it is extremely difficult to reproduce someone else's fingerprint, and it is equally difficult to lose or forget your own fingerprint as opposed to a password or pin number. One of my goals for this summer is to integrate this technology with another Pocket PC application. The second task for the summer is to develop a simple application that provides an Astronaut EVA (Extravehicular Activity) Log Book capability. The Astronaut EVA Log Book is what an astronaut would use to report the status of field missions, crew physical health, successes, future plans, etc. My goal is to develop a user interface into which these data fields can be entered and stored. The applications that I am developing are created using eMbedded Visual C++ 4.0 with the Pocket PC 2003 Software Development Kit provided by Microsoft.

Logan, Julian↗

WLCG Token Usage and Discovery

Since 2017, the Worldwide LHC Computing Grid (WLCG) has been working towards enabling token based authentication and authorisation throughout its entire middleware stack. Following the publication of the WLCG Common JSON Web Token (JWT) Schema v1.0 [1] in 2019, middleware developers have been able to enhance their services to consume and validate the JWT-based [2] OAuth2.0 [3] tokens and process the authorization information they convey. Complex scenarios, involving multiple delegation steps and command line flows, are a key challenge to be addressed in order for the system to be fully operational. This paper expands on the anticipated token based workflows, with a particular focus on local storage of tokens and their discovery by services. The authors include a walk-through of this token flow in the RUCIO managed data-transfer scenario, including delegation to FTS and authorised access to storage elements. Next steps are presented, including the current target of submitting production jobs authorised by Tokens within 2021.

Bockelman, Brian↗