SEARCH · Engineering Papers

Results for “Authentication”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

All sources NASA NTRS DOE OSTI

DOE OSTI2026

Picolinate-based acyclic ligand for rare earth element extraction and separation

The rare earth elements (REEs) play an important role in many modern technologies, particularly those relevant to clean energy. Despite their increasing importance, obtaining them in elementally pure forms suitable for downstream applications is challenging due to their similar chemical properties. This problem has impeded efforts to efficiently and selectively extract them from end-of-life materials and electronic waste. Here, we report a cost-efficient acyclic picolinate-based chelator H 4 aapa. The REE stability constants (log K ML ) of this chelator were measured via pH potentiometric and UV-Visible spectrophotometric titrations, revealing it to preferably bind light over heavy REEs like many recently reported 18-membered macrocycles. Its REE complexes were characterized by X-ray crystallography and NMR spectroscopy, demonstrating that this chelator can attain different conformations. The unique properties of aapa were subsequently used to separate REEs via the dissolution of insoluble REE oxalate mixtures. This dissolution-based separation led to large separation factors, the most significant being that for the Ce 3+ /Lu 3+ pair (38.6) at pH 4. Leveraging the strong REE binding affinity of aapa, we further demonstrated this chelator can leach REEs from authentic end-of-life materials in the form of magnet waste and autocatalyst smelting (autocat) slag. With this approach, exposure of these materials to a 20 mM solution of aapa at neutral pH generates a metal-containing solution enriched in Nd 3+ and Dy 3+ by 56.9 wt% and 3.0 wt%, marking a 4-fold improvement over the use of 4 M HNO 3 .

Gao, Yangyang [University of California, Santa Bar↗

DOE OSTI2021

Adding power of artificial intelligence to situational awareness of large interconnections dominated by inverter‐based resources

Abstract Large‐scale power systems exhibit more complex dynamics due to the increasing integration of inverter‐based resources (IBRs). Therefore, there is an urgent need to enhance the situational awareness capability for better monitoring and control of power grids dominated by IBRs. As a pioneering Wide‐Area Measurement System, FNET/GridEye has developed and implemented various advanced applications based on the collected synchrophasor measurements to enhance the situational awareness capability of large‐scale power grids. This study provides an overview of the latest progress of FNET/GridEye. The sensors, communication, and data servers are upgraded to handle ultra‐high density synchrophasor and point‐on‐wave data to monitor system dynamics with more details. More importantly, several artificial intelligence (AI)‐based advanced applications are introduced, including AI‐based inertia estimation, AI‐based disturbance size and location estimation, AI‐based system stability assessment, and AI‐based data authentication.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2021

WLCG Token Usage and Discovery

Since 2017, the Worldwide LHC Computing Grid (WLCG) has been working towards enabling token based authentication and authorisation throughout its entire middleware stack. Following the publication of the WLCG Common JSON Web Token (JWT) Schema v1.0 [1] in 2019, middleware developers have been able to enhance their services to consume and validate the JWT-based [2] OAuth2.0 [3] tokens and process the authorization information they convey. Complex scenarios, involving multiple delegation steps and command line flows, are a key challenge to be addressed in order for the system to be fully operational. This paper expands on the anticipated token based workflows, with a particular focus on local storage of tokens and their discovery by services. The authors include a walk-through of this token flow in the RUCIO managed data-transfer scenario, including delegation to FTS and authorised access to storage elements. Next steps are presented, including the current target of submitting production jobs authorised by Tokens within 2021.

Bockelman, Brian↗

DOE OSTI2024

Extending Rucio with modern cloud storage support

Rucio is a software framework designed to facilitate scientific collaborations in efficiently organising, managing, and accessing extensive volumes of data through customizable policies. The framework enables data distribution across globally distributed locations and heterogeneous data centres, integrating various storage and network technologies into a unified federated entity. Rucio offers advanced features like distributed data recovery and adaptive replication, and it exhibits high scalability, modularity, and extensibility. Originally developed to meet the requirements of the high-energy physics experiment ATLAS, Rucio has been continuously expanded to support LHC experiments and diverse scientific communities. Recent R&D projects within these communities have evaluated the integration of both private and commercially-provided cloud storage systems, leading to the development of additional functionalities for seamless integration within Rucio. Furthermore, the underlying systems, FTS and GFAL/Davix, have been extended to cater to specific use cases. This contribution focuses on the technical aspects of this work, particularly the challenges encountered in building a generic interface for self-hosted cloud storage, such as MinIO or CEPH S3 Gateway, and established providers like Google Cloud Storage and Amazon Simple Storage Service. Additionally, the integration of decentralised clouds like SEAL is explored. Key aspects, including authentication and authorisation, direct and remote access, throughput and cost estimation, are highlighted, along with shared experiences in daily operations.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

DOE OSTI2024

Transitioning GlideinWMS, a multi domain distributed workload manager, from GSI proxies to tokens and other granular credentials

GlideinWMS is a distributed workload manager that has been used in production for many years to provision resources for experiments like CERN’s CMS, many Neutrino experiments, and the OSG. Its security model was based mainly on GSI (Grid Security Infrastructure), using X.509 certificate proxies and VOMS (Virtual Organization Membership Service) extensions. Even when other credentials, like SSH keys, were used to authenticate with resources, proxies were also added all the time, to establish the identity of the requestor and the associated memberships or privileges. This single credential was used for everything and was, often implicitly, forwarded wherever needed. The addition of identity and access tokens and the phase-out of GSI forced us to reconsider the security model of GlideinWMS, to handle multiple credentials which can differ in type, technology, and functionality. Both identity tokens and access tokens are supported. GSI proxies even if no more mandatory, are still used, together with various JWT (JSON Web Token) based tokens and other certificates. The functionality of the credentials, defined by issuer, audience, and scope, also differ: a credential can allow access to a computing resource, or can protect the GlideinWMS framework from tampering, or can grant read or write access to storage, can provide an identity for accounting or auditing, or can provide a combination of any the formers. Furthermore, the tools in use do not include automatic forwarding and renewal of the new credentials so credential lifetime and renewal requirements became part of the discussion as well. In this paper, we will present how GlideinWMS was able to change its design and code to respond to all these changes.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2025

WLCG transition from X.509 to Tokens: Progress and Outlook

Since 2017, the Worldwide LHC Computing Grid (WLCG) has been working towards enabling token-based authentication and authorization throughout its entire middleware stack.Taking guidance from the WLCG Token Transition Timeline, published in 2022, substantial progress has been achieved not only in making middleware compatible with the use of tokens, but also in understanding the limitations of the WLCG Common JWT Profiles, first published in 2019. Significant scalability experience has been gained from Data Challenge 2024, during which millions of files were transferred with tokens used as credentials - a significant percentage of the total transfers completed.Besides describing the state of affairs in the transition to tokens, revisions to the WLCG token profile, and the evolving road maps, this contribution also covers the corresponding transition from VOMS-Admin to INDIGO-IAM services, with continuing improvements in terms of functionality as well as deployment.

Dack, Thomas [Rutherford Appleton Laboratory]↗

DOE OSTI2024

Gcn2 structurally mimics and functionally repurposes the HisRS enzyme for the integrated stress response

Protein kinase Gcn2 attenuates protein synthesis in response to amino acid starvation while stimulating translation of a transcriptional activator of amino acid biosynthesis. Gcn2 activation requires a domain related to histidyl-tRNA synthetase (HisRS), the enzyme that aminoacylates tRNA His . While evidence suggests that deacylated tRNA binds the HisRS domain for kinase activation, ribosomal P-stalk proteins have been implicated as alternative activating ligands on stalled ribosomes. We report crystal structures of the HisRS domain ofChaetomium thermophilumGcn2 that reveal structural mimicry of both catalytic (CD) and anticodon-binding (ABD) domains, which in authentic HisRS bind the acceptor stem and anticodon loop of tRNA His . Elements for forming histidyl adenylate and aminoacylation are lacking, suggesting that Gcn2 HisRS was repurposed for kinase activation, consistent with mutations in the CD that dysregulate yeast Gcn2 function. Substituting conserved ABD residues well positioned to contact the anticodon loop or that form a conserved ABD–CD interface impairs Gcn2 function in starved cells. Mimicry in Gcn2 HisRS of two highly conserved structural domains for binding both ends of tRNA—each crucial for Gcn2 function—supports that deacylated tRNAs activate Gcn2 and exemplifies how a metabolic enzyme is repurposed to host new local structures and sequences that confer a novel regulatory function.

Science & Technology - Other Topics↗

DOE OSTI2022

Document-Based Nuclear Archaeology

Deeper reductions in the nuclear arsenals will require better understanding of historic fissile material management and production. The concept of “nuclear archaeology” has been considered since the 1990s to provide the tools and methods to develop independent production estimates, primarily based on nuclear forensic techniques. Here, we propose to add a framework for reconstructing the history of a nuclear program that complements traditional nuclear archaeology techniques by examining the role of operating records to support such an effort. As a test case, we use the JEEP II reactor, a 2 MW civilian research reactor at Norway’s Institute for Energy Technology (IFE), in operation for more than fifty years, however, recently shut down permanently. We have collected, analyzed, and started to preserve the reactor’s operating records, which exist on both analog and digital media, and to simulate parts of its history using OpenMC/ONIX neutronics calculations. Here, a particular focus of this project has been on digital data curation and preservation to confirm and maintain the integrity, authenticity, and provenance of these records. In developing guidelines for best practices that conform to existing standards for long-term digital preservation and curation, we hope this project can help lay the basis for future nuclear archaeology efforts to support nuclear arms control and disarmament.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

DOE OSTI2025

Demonstration and Concept of Operations for a Zero-Knowledge Protocol Passive Imaging Measurement for Arms Control

Here, we present an imaging system that employs zero-knowledge protocols to protect sensitive geometrical information, along with procedures to increase confidence in the result. The goal of this work is to enable the inclusion of warhead confirmation measurements in future arms control treaties. We present a demonstration of both true positive and true negative measurements that validate models and establish authenticating procedures toward meeting acceptance requirements for use in nuclear facilities. We use a two-dimensional time-encoded fast neutron imaging system with an anti-symmetric mask pattern; the fast neutron count values exceeding minimum or maximum thresholds indicate that two measured items are not identical. Laboratory measurements over twenty trials show that alarm rates for negative confirmation measurements are within uncertainties of model predictions. Positive confirmation measurements indicate that alarm rates are large enough to encourage treaty compliance.

Sweany, Melinda Dominique [Sandia National Laborat↗

DOE OSTI2021

RNA nanotechnology to build a dodecahedral genome of single-stranded RNA virus

The quest for artificial RNA viral complexes with authentic structure while being non-replicative is on its way for the development of viral vaccines. RNA viruses contain capsid proteins that interact with the genome during morphogenesis. The sequence and properties of the protein and genome determine the structure of the virus. For example, the Pariacoto virus ssRNA genome assembles into a dodecahedron. Virus-inspired nanotechnology has progressed remarkably due to the unique structural and functional properties of viruses, which can inspire the design of novel nanomaterials. RNA is a programmable biopolymer able to self-assemble sophisticated 3D structures with rich functionalities. RNA dodecahedrons mimicking the Pariacoto virus quasi-icosahedral genome structures were constructed from both native and 2'-F modified RNA oligos. The RNA dodecahedron easily self-assembled using the stable pRNA three-way junction of bacteriophage phi29 as building blocks. The RNA dodecahedron cage was further characterized by cryo-electron microscopy and atomic force microscopy, confirming the spontaneous and homogenous formation of the RNA cage. The reported RNA dodecahedron cage will likely provide further studies on the mechanisms of interaction of the capsid protein with the viral genome while providing a template for further construction of the viral RNA scaffold to add capsid proteins for the assembly of the viral nucleocapsid as a model. Understanding the self-assembly and RNA folding of this RNA cage may offer new insights into the 3D organization of viral RNA genomes. Finally, the reported RNA cage also has the potential to be explored as a novel virus-inspired nanocarrier.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2022

Next generation experimental data access at NSLS-II

The NSLS-II network and computing infrastructure has been significantly updated recently. The re-IP process in 2020-2021 enabled the NSLS-II network to be routable to the rest of the BNL campus. Then, standardization of the operating systems and deployment procedures helped to deliver a consistent environment to workstations and servers used by all NSLS-II beamlines. In particular, the RedHat Enterprise Linux 8 was deployed to 700+ machines using the RedHat Satellite infrastructure management product, and all critical services (IOCs, databases, etc.) were migrated to the new OS. NFS users’ home directories are consistent across all of the machines, which eliminates the need for the individual configuration of the user environment on each host. The standard suite of software packages is available to the beamline staff and users, which includes the system packages (deployed via RPM) as well as the conda environments for data acquisition and analysis. Security measures were implemented to comply with the industry standards, which include multi-factor authentication (using Duo), secure screen lock for the beamline machines, and advanced access control to the experimental data that is stored in shared central storage available on all hosts. These major enhancements facilitated sharing the experimental data (currently for a number of selected beamlines, with a plan to extend it to the whole facility in the nearest future) with the users via an externally facing JupyterHub instance. The beamlines keep using the Bluesky data acquisition framework to orchestrate their experiments, and the new infrastructure enabled them to use a next-generation data access library called tiled.

36 MATERIALS SCIENCE↗

DOE OSTI2023

Data transfer for STAR grid jobs

The Solenoidal Tracker at RHIC (STAR) is a multipurpose experiment at the Relativistic Heavy Ion Collider (RHIC) with the primary goal to study the formation and properties of the quark-gluon plasma. STAR is an international collaboration of member institutions and laboratories from around the world. Yearly data-taking period produces PBytes of raw data collected by the experiment. STAR primarily uses its dedicated facility at BNL to process this data, but has routinely leveraged distributed systems, both high throughput (HTC) and high performance (HPC) computing clusters, to significantly augment the processing capacity available to the experiment. The ability to automate the efficient transfer of large data sets on reliable, scalable, and secure infrastructure is critical for any large-scale distributed processing campaign. For more than a decade, STAR computing has relied upon GridFTP with its x509-based authentication to build such data transfer systems and integrate them into its larger production workflow. The end of support by the community for both GridFTP and the x509 standard requires STAR to investigate other approaches to meet its distributed processing needs. In this study we investigate two multi-purpose data distribution systems, Globus.org and XRootD, as alternatives to GridFTP. We compare both their performance and the ease by which each service is integrated into the type of secure and automated data transfer systems STAR has previously built using GridFTP. The presented approach and study may be applicable to other distributed data processing use cases beyond STAR.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2026

Beyond Solanaceae: incorporation of feruloyltyramine and feruloyloctopamine into Cannabaceae lignins

The ferulic acid amides, feruloyltyramine and feruloyloctopamine, have been widely reported as integral constituents in the lignins in several species of Solanaceae in which they function as authentic lignin monomers. In the present study, we demonstrate that these ferulic acid amides are likewise incorporated into the lignins of species within Cannabaceae, including hemp (Cannabis sativa), hops (Humulus lupulus), and European nettle tree (Celtis australis). Structural analyses using derivatization followed by reductive cleavage (DFRC) and two-dimensional nuclear magnetic resonance (2D-NMR) spectroscopy revealed that these ferulic acid amides are incorporated via 4−O- and 8−O-ether linkages, as well as through 8−5′ linkages forming phenylcoumaran structures. Examination of a broad phylogenetic range of plant families demonstrated the absence of these ferulic acid amides from the lignins of all families studied except Solanaceae and Cannabaceae. Given the distant phylogenetic relationship between Solanaceae and Cannabaceae, the recruitment of these ferulic acid amides as lignin monomers in both lineages likely constitutes a case for convergent evolution at the level of lignin biosynthetic pathways. The significance of these ferulic acid amides lies in their unique role as the sole nitrogen-containing phenolic compounds known to participate in lignin formation.

Cannabaceae↗

DOE OSTI2024

Orbital Ingredients and Persistent Dirac Surface State for the Topological Band Structure in FeTe 0.55 Se 0.45

FeTe 0.55 Se 0.45 (FTS) occupies a special spot in modern condensed matter physics at the intersections of electron correlation, topology, and unconventional superconductivity. The bulk electronic structure of FTS is predicted to be topologically nontrivial due to the band inversion between the d x z and p z bands along Γ − Z . However, there remain debates in both the authenticity of the Dirac surface states (DSSs) and the experimental deviations of band structure from the theoretical band inversion picture. Here we resolve these debates through a comprehensive angle-resolved photoemission spectroscopy investigation. We first observe a persistent DSS independent of k z . Then, by comparing FTS with FeSe, which has no band inversion along Γ − Z , we identify the spectral weight fingerprint of both the presence of the p z band and the inversion between the d x z and p z bands. Furthermore, we propose a renormalization scheme for the band structure under the framework of a tight-binding model preserving crystal symmetry. Our results highlight the significant influence of correlation on modifying the band structure and make a strong case for the existence of topological band structure in this unconventional superconductor. Published by the American Physical Society 2024

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗

DOE OSTI2024

Nuclear Quadrupole Resonance for Substance Detection

This review paper provides a comprehensive overview of recent advances in nuclear quadrupole resonance (NQR) spectroscopy for substance detection, highlighting its principles, methodologies, and applications. The paper elucidates the fundamental physics underlying NQR spectroscopy, emphasizing the interaction between nuclear quadrupole moments and electric field gradients. It explores the various experimental techniques and instrumentation developments that have enabled the sensitive detection and precise characterization of substances containing quadrupolar nuclei. A significant portion of the survey is dedicated to discussing the diverse applications of NQR spectroscopy, including the detection of explosives, drug pharmaceuticals, and material authentication. Furthermore, the survey examines the challenges and limitations associated with NQR spectroscopy, including issues related to signal-to-noise ratio (SNR), temperature dependency, and substance restrictions. Strategies to overcome these challenges are discussed, offering insights into the future directions of NQR spectroscopy research that includes artificial intelligence (AI), internet of things (IoT) integration, incorporating a cloud database for NQR parameter storage, and multi-modal analysis.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2023

Incremental Threshold Scheme Enabled IoT Group Key Management

Cyber landscape evolves rapidly. Internet of Things (IoT) and Edge Computing (EC) have rapidly become an integral part of the modern computing infrastructure. It is expected that there will be more than 50 billion active and connected IoT devices by 2025 [1]. Pervasive IoT/EC creates unprecedented opportunities bridging the gap between previously segregated cyber and physical spaces. However, this progress also brings along new security challenges. IoT devices typically have limited computation, communication, and storage resources. This leads to security architecture designs such as using symmetric keys for group communication. While secure and efficient in stable network settings, symmetric key solutions are ill-adapted for IoT's highly dynamic device mobility behavior and frequent group membership turnover. Whenever IoT members leave a group, the known symmetric keys cannot be made forgotten, posing a serious vulnerability. This leads to frequent re-groupings that require expensive re-authentication, key regeneration, and key redistribution in order to maintain IoT/EC security. We present a novel symmetric key management framework that integrate an Incremental Threshold Scheme (ITS) cryptographical function into communication protocol's key rotation mechanism to allow for secure and efficient symmetric key communication group member node revocation. This ITS-enabled key management framework alleviates the need of frequent and expensive re-grouping and re-keying needed by today's large and dynamic IoT/EC operations. We further applied this ITS-enabled key management framework to a distributed IoT/EC-integrated publish and subscribe framework for applicability validation.

Li, Mingyan↗

DOE OSTI2021

Cyber Protection of Grid-Connected Devices Through Embedded Online Security

Cybersecurity research regarding the electric power grid has primarily been focused on protecting the communication layer of grid-connected devices against cyber-attack threats. Although many developed methods have greatly reduced the effects of a cyber-attack on the vulnerabilities of grid-connected devices, discovering new vulnerabilities is inevitable and a constant threat. As a result, the overall reliability and security of network communications with regard to grid-connected devices is a concern. Here, this paper proposes a method that further secures a system by focusing on the control and hardware layer of grid-connected devices. The device’s controller firmware will be validated and authenticated using integrated device emulation resources prior to being activated to control the grid-connected device. This verification process is performed while the controller is online and actively controlling power flows related to the device. Therefore, an attack to the system through a malicious firmware patch would be detected by the online security and rejected while safely maintaining continuous and stable control of the device. This method integrates the concepts of firmware hot-patching, digital twins, and active monitoring into an overall cybersecurity protection system.

cybersecurity↗

DOE OSTI2025

Rapid Event Detection via Synchro-Waveform Based Temporal Attention Network in Distributed Grid

Compared with the information collected from phasor measurement units, synchro-waveforms contain high-fidelity disturbances of the grid, which can be a granular and authentic representation of measurements in the modern power system. However, the dynamic changing morphology makes it challenging to effectively capture various disturbance information from the synchro-waveforms. To tackle this issue, this paper proposes a Synchro-waveform based Temporal Attention (STA) network to achieve rapid event detection. First, a multi-scenario distributed model with renewable integration is established to generate synchro-waveforms under various uncertainties. Then, three typical temporal features are extracted directly from the synchro-waveform measurements. Additionally, the lightweight STA network is deployed to identify the most common event types in renewable energy systems via the self-attention based vision transformer module. The results from simulated experiments demonstrate that the proposed approach can achieve rapid and real-time detection within 0.81 ms and over 96.27 % accuracy.

Dong, Yuqing [University of Tennessee (UT)]↗