Audiences
Increasingly at JISC we are asking projects to look at who their audiences are and what the audience would like from the project. I thought I’d write a post to explain what it is we are looking for as I realise it can be quite a confusing area. I’d also welcome comments from those who are grappling with this at the moment so we can improve the advice we give and hopefully make it a positive experience for all concerned.
To set the background, looking in much more detail at audiences has recently become important for JISC. Back in the ‘Thousand Flowers’ days we knew broadly who the audience was for projects and it was sufficient to broadly outline who the key stakeholders were (which, note, could be a larger group than the audience). What was important was to get small projects out there experimenting with the technology and passing those lessons on to quite a broad audience who would pick up what was of interest to them. Some projects would fail as a result of not quite connecting with their audience or simply not having an audience but that was all part of the risk-taking we did for the sector. Fast forward to today and we are commissioning some very large projects and we are getting some of those to go along what we call the Development to Service route. What this means is that we are interested in how they go from being a good idea to being something that can be used by others. Unfortunately JISC can’t support all of those projects so we have to know which ones are of particular interest and for the others we’d like to help them find funding from other sources. This is where knowing who could use the service and who would be interested in funding it proves to be vital.
So, how do you go about doing that? I’ve tried to combine some do’s and don’ts below from projects that have been both successful and unsuccessful in finding audiences to use them.
DO:
- Get engaged with your community through events, mailing lists, blogs, etc and find out what they think about your idea and who they think would find it useful. They are also likely to have some useful input into what you need to do. A good recent example is my last post that I did on OpenID; the JISC-SHIB list are actively discussing its conclusions and helping suggest how we can take it forward;
- Identify named communities, institutions, companies and organisations who would be interested in your project. It is so much easier if you can name members of your audience. So, for example, my NAMES project is working very closely with the British Library. That is so much better than saying the audience is ‘those in the academic community who would be interested in an authoritative registry of academic names’;
- Work with those named entities to establish their interest in your project. They could well help with testing intial demos and prototypes or be able to offer some financial asssistance or resources in other areas such as connections to other similar initiatives or those who could help you;
- Talk with your programme manager who may be able to suggest useful people to get in touch with or audiences it may be useful to engage with;
- Put the work in on your project plan to identify key named audiences, record who those are and come back and revisit these, changing them as necessary;
- Get a demo or prototype out early so your potential audiences can see what it is you are doing and get to grips with it;
- Come along to JISC organised events such as Andy McGregor’s Developer Happiness Days or the JISC Conference as they provide a good opportunity to talk about what you are doing and find more potential named interested parties for your audience;
DON’T:
- Define your audience so widely that it will be impossible to take practical action to engage with them. If you’re aiming at ‘the UK academic community’ or ‘those interested in repositories’ then you need to be doing some more work;
- Skimp on engaging with your audience and getting their feedback. You need their interest even if JISC are doing the funding as it provides evidence that what you are doing is useful;
- Use surveys as a substitute for engaging with your audience or finding it. Surveys are useful but they can’t be used on their own;
Hopefully that is helpful and if you have something to add to the above then please post a comment.
JISC OpenID Report
This morning I got the final copy of this report so I popped it straight up onto the JISC site, which means you can see it around lunchtime if you click here.
We feel this is an important report for the sector as it reviews a technology that we constantly get asked questions about and up to now we haven’t had authoritative answers for. OpenID is, without a doubt, an important technology but up until now there hasn’t been a comprehensive review of how it could be used in the higher and further education sectors. This has led to a lot of speculation and rhetoric with very strong advocates for the technology but, equally, very strong critics. We’re hoping this report will inform the debate, particularly given the project has also developed a gateway between OpenID and the UK federation so those with OpenID credentials can access Shibbolised resources (subject to the resource provider being happy with providing access).
Overall, the conclusions were:
i) there is considerable interest in OpenID in the commercial market place, with players such as Google and Microsoft taking an active interest. However,
ii) all commercial players want to be OpenID providers, since this gives them some control over the users, but fewer want to be service providers since this increases their risks without any balancing rewards
iii) until we can get some level of assurance about the registration of users and their attributes with the OpenID providers, it won’t be possible to use OpenID for granting access to resources of any real value. In other words, without a trust infrastructure OpenID will remain only of limited use for public access type resources such as blogs, personal repositories, and wikis
iv) imposing such a trust infrastructure with barriers to the acquisition and use of OpenIDs may be seen to negate its open-access, user-centric advantages
v) OpenID has a number of security vulnerabilities that currently have not been addressed, but at least one of these is also present in the current UK federation.
The implications from this are:
i) Whilst OpenID does have its security vulnerabilities and weaknesses, some of these are also shared by Shibboleth as it is currently designed. Other technologies may subsequently solve these and therefore this could have implications for the UK federation.
ii) The UK federation as currently deployed has a significant shortcoming which is the readiness of IdPs to disclose the real-world identity of users to SPs (as distinct from providing opaque persistent identifiers to support simple customisation). This is not a technical shortcoming but an operational one. Whilst it is relatively easy to solve, until it is, it limits the applicability of Shibboleth to personalised and other services which need to know who the users are. OpenID does not suffer from this limitation and therefore there might be use for it in some scenarios where trust issues can be resolved.
And, finally, the recommendations are:
i) The UK academic community should keep track of both OpenID and CardSpace identity management systems as they evolve. There is clearly a great demand for a ubiquitous secure identity management system, but no consensus yet as to what this should be.
ii) Now that a publicly available OpenID gateway has been built, publicise its availability to the community and monitor its applications and usage. If usage becomes substantial, consider productising the service.
iii) Consider offering a more secure and more trustworthy gateway registration service for SPs that do not use, or use more than, the eduPersonPrincipalName attribute. This will allow them to use OpenIDs for authentication and a wider selection of eduPerson attributes for authorisation. (The current self-registration service is clearly open to abuse).
I’d welcome any comments on the report and/or gateway. I think what we need to do is to keep the debate going and share experience to ensure that researchers and learners can get the most of OpenID.
AHM2008
I am currently sitting waiting for a sleeper back to London so it seemed a good time to reflect on this year’s All Hands Meeting that I attended in Edinburgh, the main annual e-Science conference in the UK. There were several changes for this year. The first was the venue so goodbye to the East Midlands Conference Centre and hello to a multi-location venue in Edinburgh. I think the overall reaction was positive with a variety of places to meet up with colleagues both on and off site and a series of venues from the National e-Science Centre (NeSC) to the Appleton Tower and the very shiny and slick Informatics Forum. Accommodation was a little far from the main venue locations but had wireless and a good breakfast (always essential to get me going in the morning!). Dinner was also very well received at Dynamic Earth, with plenty to look around before the dinner and plenty of opportunities to mix with colleagues old and new. I was rather less convinced about having coffee breaks that ran through the sessions but most people seemed to get used to it and there was a good deal of material to fit in so you could forgive the programme committees from running out of space to get it all in! So, down to the sessions, which proved notable this year for being very much focused on researchers carrying out good research enabled by e-Science. It seemed that this year we saw a good deal more adoption of the tools that we’ve heard about in previous years and that was good to see. Whilst tool development is still vital, it’s equally vital that the tools are used in a production environment.My first session was a BoF run by Alex Hardisty and Neil Chue Hong on e-Infrastructure. I think the level of attendance rather took the organisers by surprise and a couple of thought-provoking presentations helped kick off our consideration of the subject material. I’ll pop a link in here to the conclusions of the session when I get it but, in summary:
- e-Infrastructure is for everyone and is useful for a range of different challenges. What determines its success is how it is used;
- e-Infrastructure is increasingly being used by researchers as part of what they do on a day to day basis;
- There are increasingly varied ways in which e-infrastructure can be used and this is likely to get more diverse into the future;
- There is a mix of requirements from e-Infrastructure. Some are quite happy to glue together components and use it in a very ad hoc way. Others would like a more structured approach. All in all, it’s quite a complex landscape so it’s important to work with the researchers as to what best suits what they are doing;
- e-Infrastructure is already part of everyday research and that is likely to get to be more so as time goes on;
My first event followed after the BoF. We’d invited an Australian delegation led by Dr Ann Borda to a drinks reception so that they could meet up with the eResearch team and members of the JISC Support of Research Committee (JSR). There were some great conversations as all of the eResearch team got a chance to swap experiences of eResearch. From my side, I got up to date with Australian developments in eResearch tools with Jane Hunter, Paul Davies and Ann Borda. I also had a great conversation with Andrew Treloar, David Groenewegen and Paul Bonnington that ranged from approaches to data and the latest on ANDS to internet TV. Finally, I got the chance to catch up over dinner with Andy Richards and Neil Geddes from the National Grid Service. As always in these events, one of the main reasons for us to attend is to meet up with those who are out practising eResearch so I spent quite a lot of time on the stand on Tuesday. It proved to be a great opportunity to catch up with some of my more recent projects so thanks to Tom Jackson from iREAD, Pete Burnap from SPIDER and Stephen Booth from Grid-SAFE for popping in and catching up.
I also had an interesting conversation with Andrew Cormack on PII (Personally Identifiable Information). Andrew’s point was that most applications simply don’t need to ship PII and I would agree. I think it’s often used as a comfort blanket but it’s a comfort blanket that carries its own risks. If SPs (or RPs if you prefer that term) were to adhere to Kim Cameron’s second law (minimal disclosure for a constrained use) from his Laws of Identity then the world would be a better place. This brought us to an interesting case of what happens with grid computing. It’s one of the few cases where you cannot get around issuing PII because you need to have a way of contacting the user in case their job fails or if it’s not going as intended. However, it still adheres to Kim’s second law in that there is only the need to get a contact address for the user.
Finally, I talked with Richard Sinnott and David Medyckyj-Scott on geo data and access to more complex data sets. Richard has a long history of complex access to data sets, particularly around medical data and using roles to determine who can access what. I think we are reaching a stage where we can start moving towards a broader rollout of the technologies so that they become more ubiquitous and it is hopefully something we can build on top of Richard’s work and that of the data access projects we are currently running. On the geo side, we are already running quite a few geo projects and I can see that location is going to prove to be increasingly important for research data and collaboration. One of the initiatives that David is very much interested in is INSPIRE, a European directive to create a spatial data infrastructure in Europe. I think INSPIRE is going to prove important over the next few years as it will help make spatial data easier to access and also provide an incentive to talk about spatial data in a common way.
POSTSCRIPT - This has been a long time in gestation as I’ve tried to get my notes down to a reasonable size for a blog post, which reflects just how much material there is at All Hands, making it a very worthwhile event to attend if you are involved in research and want to find new and better ways of doing research.
Less of the XML
I’m sitting in another conference where I’ve seen several presentations that are littered with XML that is then dissected ad nauseam. Now, I’m sure that they are very valuable for the people who are presenting them and we’re all familiar with the pride with which we talk about our new ‘baby’. Unfortunately, it switches off the bulk of the audience (I’m not just talking about myself, btw - there are several people who feel the same way). So, if you’re a developer or technical manager then please resist the temptation to put XML in your presentation. Diagrams to show how your system works are good (animated ones even better). Short, concise slides that outline where your solution could be used and how it helps the user are good. Short demonstrations of your system working are good. Sharing all that lot on a site like SlideShare or on a website (which is what we do at JISC) is even better.
If you do this then you avoid the demoralising prospect of people switching off from what you are presenting altogether (and, yes, this even applies to technical people). If someone wants to see exactly what is in the XML you output or take in then you can safely rest assured that they’ll ask you about it over coffee.
IDM2008
Given this is my second blog entry in as many days you’re either in for a treat or the tedium continues; I leave you to decide. I’d also add that due to train issues, this and the above entry WERE written separately but offline as there doesn’t yet appear to be a 3G service that provides continuous coverage on the journeys I make; if anyone can suggest one then please comment below.
So, today was IDM2008, billed as an opportunity for those from business and government to get together and share their experiences on identity management. I was the representative from higher and further education and giving a presentation on Innovation, which outlined what we had done on the Access Management Federation and subsequent developments.
The day featured the following presentations;
· Graham Morrison on getting Kerberos to solve the Home Office’s issues of ‘seamless authentication’ across a range of different systems. I liked this one for a number of reasons. The first was that it was using what was already there and proven to work, which I think is important in identity and access management (IAM). Next, it has been kept simple – you can’t get much more simple than using Kerberos to issue a ticket to authenticate the user (the Ticket Granting Ticket) and a ticket to authorise them to do ‘stuff’ (the Session Ticket or TGS). Finally, it deals with levels of assurance but only gets into heavyweight biometrics and role-based access control, etc when it needs to;
· David McIntosh (hope I spelt that right) presenting on biometric technologies and SITC. The former taught me that your ear echoes back any sound that is played into it in a unique way to you; interesting but not particularly useful unless you want to biometrically identify someone in a quiet environment. The latter could be more widely useful to JISC as it is a body consisting of SMEs that would like to engage with universities;
· Jim Slevin on Manchester Airports IDM systems. A very topical presentation as the authentication of a user can now be carried out by National Identity Card, which has caused quite a stir in the papers this morning. More interestingly, their focus was on delivering a capability, not a solution, which I think we should focus more on. You can actually do something with a capability;
· Joe Baguely presented on AD as an identity store. The sub-title was ‘are you mad?’ and I think this summed up many people’s impression of doing this but Joe presented a very convincing argument to re-use what is already in place with Active Directory (AD) and carried out a rather unsubtle plug for his organisation, which does this and I am not going to repeat here. I also quite liked the idea of Segregation of Duties or SOD – I’ve known it as a concept but having an acronym somehow makes me feel so much better;
· Fraud and IDM by Logica. I quite liked the abstract for this so attended. I didn’t entirely regret it but found out more interesting facts about fraud than necessarily the business case for IDM, which is why I’d originally gone;
· Dave Nesbitt on how to avoid an identity trainwreck. Whilst this was saying what we all know such as getting senior level sponsorship, having clear priorities on what is going to be done agreed with key users, iteratively deploying rather than going for big bang and technology is difficult, it’s the human stuff that is difficult, it’s all worth repeating. Even the take home message was worthwhile: ‘IDM is many small projects to constantly improve your infrastructure that never end’;
· David Bowen looked at how identity management worked at Great Ormond Street Hospital. I didn’t learn much from this but had a sharp intake of breath on the mention that single sign-out is more difficult but more valuable than single sign-in. On the Shib front I don’t think we are ever going to get there and we shouldn’t be trying given the issues, IMHO;
· Yours truly was next up and if you read this blog and the stuff on what I do on the JISC site then you’re going to know what was presented;
· Conn Crawford went through how local authorities approach identity management but specifically what Sunderland have been doing. It was great to see Conn again. He has a knack of connecting up a range of identity management ‘stuff’ to do really valuable things in the community. What he has done ranges from federated solutions right the way through to user-centric identity management and he was presenting on the Let’s Go Sunderland portal he has put together that allows kids from a disadvantaged background to load up a smart card with activities they can attend. They have an allowance every month and sign up for activities but the smart thing is that they also tell the portal what they are interested in, which gives the resource providers some anonymised marketing info back and hence an incentive to offer their resources to the scheme. This is a great example of making personalisation work whilst protecting the individual;
· Alan Coburn presented on Glow, a teaching and learning portal for Scottish schools. I think the most interesting thing out of this was that schools wanted to sign up for it, hence there were a great number of users, and that they had used Shib but not the federation. It turns out the latter was due to specifying it before the federation existed;
· Hellmuth Broda had the rather unenviable task of being last up and went through Liberty Alliance. All very good stuff but nothing new for me. What was of more interest was his company’s creation of batches of unique codes that could be attached to 2D bar codes, RFID tags and text messages; basically, name a media and it could be attached. The potential was huge as these codes linked to specific actions such as vouchers, one time visits to web sites, etc. More info on this is at www.firstondemand.com;
Thanks also go to Professor Gloria Laycock, who did a great job chairing the meeting to the extent that we even finished early! All in all, a useful day and there were quite a few contact I met during the day that I’ll follow up further. Well worth a look next year if you are interested in identity management outside the education sector.
NGS Innovation Forum 2008
I was recently at the NGS (National Grid Service) Innovation Forum 2008 to find out what existing users of the NGS were doing and to see what the reaction was to future plans for NGS Phase 3. The first, very encouraging, point was that there were more users there this year than there have been for previous years. Secondly, these users were more diverse, with representation from researchers, e-science centres and support functions for researchers such as IS and research computing directors.
Day one started with presentations from researchers in biology and physics biomolecules with representatives from other research areas being amongst those at the event. It has been particularly encouraging for JISC as a funder to see this transition of the NGS from providing resource predominantly for those in the ‘hard’ sciences such as physics and chemistry to greater provision for those in social sciences and the arts and humanities. One message that remains, however, is that if the NGS is to get more users from a wider range of disciplines then they need to offer alternative methods of accessing the service to the command line and these need to be easy to use. The benefits are very tangible, with one presentation reporting that modelling time had been taken down from one month to six hours.
Michael Wilson then described how EGI (the European Grid Initiative) could involve the NGS amongst others and sparked off a very lively debate on who would take the NGI (National Grid Initiative) role for the UK that was required by EGI. Whilst the UK and other countries have expressed an interest in EGI there is still no firm commitment and Michael’s talk stressed that EGI was only a co-ordinating body for European provision of grid infrastructure, not a funding body for national facilities, as has previously been the case with bodies such as EGEE. This meant there needed to be national commitment to ensure that the UK was appropriately represented.
From the European perspective we moved to Daniel Katz’s presentation on TeraGrid, the American national grid. There were a number of points that were particularly notable in the presentation, out of which the most interesting one was the concept of Campus Champions. Campus Champions help promote TeraGrid and grid usage within their campus in exchange for attendance at TeraGrid meetings and a t-shirt! More to the point, they are people who would like to encourage grid usage and work with those who are new to the grid to help them carry out their research more quickly or simply do new research. It is something that we see happen on an ad hoc basis in the UK but gives food for thought on how we get phase 3 of the NGS to encourage new users. Also of interest for me, with my access management hat on was TeraGrid’s experimental use of InCommon to access grid resources.
After lunch, the programme moved onto grid technologies. There was a good section on Condor for managing campus grids. Whilst there is often not much attention paid to grids within an institution they form a vital part of the infrastructure available to researchers. Hugh Beedie also pointed out that they could be a very effective green alternative to high performance computing, especially given modern machines’ power efficiency. Next up was a session on Clearspeed from Steven Young. He described how there were four of these maths acceleration cards that now feature at the Oxford node of the NGS. At this stage, there isn’t much use of them but they look promising for jobs that are maths intensive.
The day finished with presentations on the training available on the NGS (from David Ferguson) and Andy Richards talking about NGS Phase 3. Both provoked lively debate from the audience and there was a great deal of interest in David’s offer to run training on a regional basis so if you couldn’t attend the event and you read this then get in touch directly with the training team and find out about courses at http://www.nesc.ac.uk/training/.
Day two was a chance to tie up with the campus grid SIG and to look at what the experience was for those who had joined the NGS. The overall conclusions seemed to be that whilst it wasn’t easy to set up the software, the NGS had a very active support community that made the whole process a easier and that there were tangible benefits from going through that process. This led into how to make the NGS sustainable, which follows the general trend with projects in JISC that are moving to be a service. It was a topic that received a good deal of audience feedback and I am hoping that this can be followed up after the event as it is not going to be an easy task keeping access as easy as possible whilst making sure that institutions are appropriately recompensed for what they contribute.
The day finished with presentations on new directions for the NGS. Keir Hawker went through what data services were on offer, with a range of options from Oracle through to MySQL. Mike Jones then went through how the SARoNGS project was working to allow users who were members of the UK Access Management Federation to get access to NGS resources.
So, what were the key points to take away from the meeting? I think they were:
- Research is global and the grid offers a good way of working collaboratively within a trusted infrastructure. It will be interesting to see how this ties into ongoing work on interfederation and virtual organisations in the identity and access management area;
- The NGS has a great deal to offer the researcher and they are very keen to engage with active researchers to help them carry out novel research or to make what they do more efficient;
- There are no doubt potential users of the NGS who could benefit enormously from using it so it is well worthwhile attending a training event or one of the e-Research Roadshows to find out more;
- Whilst there are resources to try the NGS that are free at the point of use, this model will not scale infinitely so there need to be equitable models for sustainability;
- There is a growing community of researchers from an increasingly wide range of disciplines but there still needs to be a focus on growing that further;
- The institution needs to get involved in helping its researchers access grid facilities as more and more research is collaborative in nature. This is not just providing access to the NGS but includes grid resources on campus so that researchers have a range of resources available to them;
All in all, it looks to be an exciting future for the NGS. The next major decision point is whether approval is granted by JSR for the Phase 3 proposal. My thanks to Andy Richards and the team at NGS for a great event and inviting me along and paying for my accommodation.
New Research Project: Privacy Value Networks
I spotted this on the Oxford Internet Institute Newsletter, which may be of interest to those looking at privacy and identity.
3. New Research Project: Privacy Value Networks
————————————————–The OII is to lead the £2m Privacy Value Networks project: one of three awarded funding under the Technology Strategy Board’s ‘Ensuring Privacy and Consent’ research programme. It will investigate the way the public thinks about privacy and how organisations can model the costs and benefits of processing personal information.
Project website: http://www.pvnets.org/
Project PI Dr Ian Brown, said: “Privacy has become a major issue in the UK, with worries about the development of a surveillance society. We are delighted to have this opportunity to carry out research that will ensure businesses and government agencies fully understand privacy concerns, and can provide effective and efficient services that properly deal with them.”
The project will look at privacy in a range of contexts. These include creating a sensor-enhanced Facebook to help understand how students might share or restrict automatically gathered information such as their location, current companions and activity. Researchers will also investigate how families share this type of information using a new mobile phone application, and how it might be used to improve the lives of children and the elderly while protecting their privacy and autonomy.
The project will look at the government’s own use of sensitive personal information in the Identity and Passport Service, and how it is interpreted by staff and passport applicants. It will also work with financial institutions to design privacy-friendly services that reduce the financial exclusion of those with limited or damaged credit histories.
Given it is sponsored by the TSB, who are doing quite significant projects in this area then I think it is is one to watch over the next few months. I feel it has some interesting tie-ins with projects such as FLAME and is going to provide useful input into the future work that JISC are looking to do on identity.
Grant 10/08: Project to Develop an Identity Toolkit
This all sounds a little complex from the title above but I’m really looking forward to some good responses on this grant (started off as a call but has now moved into our new money issuing process so has a different name). More details can be found here.
For those with quite long memories the background to this was to take up a recommendation from the Identity Project and provide funding for the development of an identity toolkit that would help universities and colleges with putting in an identity infrastructure. It’s work that has been done at some institutions already so people like Cardiff, for example, have done a good deal of work in this area. However, what this grant aims to do is to bring together that good experience and provide it all in one place so that everyone can use it either a little or a lot, dependent on where they are in the cycle of managing identity.
We’re hoping this is going to be a very useful piece of work as more and more institutions are joining the federation and having to address the subject of identity management as part of moving to using the federation to control access to resources. Whilst it is not going to be a panacea it should form an important part of the future work on identity and access management that is going to go ahead over the next few years.
30-5-10
I visited Paul Walk over at UKOLN recently to talk about Shared Infrastructure Services (SIS), amongst other things, and one idea that came out of that discussion was the 30-5-10 idea.I’ll set a bit of background before ploughing into the idea itself. Most projects at JISC do some really useful stuff that researchers, educationalists, developers and a whole range of other audiences can take and use for themselves (in response to the cynics, we also do really useful stuff for the other projects that can’t necessarily be used straight away but it helps get us along the process to things that can be used ;-)). The problem we often face is that the stuff we produce isn’t used because it might not be communicated in quite the right way or the target audience may well not be aware of it. As a programme manager that can get very frustrating because sometimes you see an alternative widget that isn’t as good that is being used simply because the project staff or organisation they are working for are better at promoting it. So, we come to 30-5-10. It’s intended for software or services that can be quite easily demonstrated. So, good core candidates are some of the SIS projects and projects like NaCTeM. The idea is this:
- 30 seconds to get across what your project or the service(s) within your project do. This could be used at a JISC meeting, when you’re at a conference or wherever you meet other people that might be interested in what you are doing. The reason for 30 seconds is that within that time you should be able to get across what your project or service does in a sufficiently compelling way that it piques the interest of those who may want to use it so they want to know more. So, if we take NaCTeM’s Termine service, the 30 seconds could go something like ‘Termine is a service supplied by the National Centre for Text Mining in Manchester to extract meaningful terms from a piece of text or a corpus of texts that are submitted to it. It uses advanced text mining techniques to ensure that those terms are very accurate relative to the area that the body of text was submitted from. Termine also ranks the occurrence of terms. Possible uses include automated metadata extraction to tag the articles submitted.’. I’m sure that if someone from NaCTeM sees this they will have a few corrections but it gives you an idea of what you would say;
- 5 minutes to outline how to solve a problem your audience have. So you have the person or audience’s interest. What next? You have a dialogue with them to understand how your widget could solve a problem they have, which makes what you have done relevant to them. This involves actively listening to what they say so they spend more time talking than you do? There’s a lot on active listening on the web so I won’t try to cover it here but if you’re asking open questions like ‘What kind of things that you’re doing do you think my widget would be useful for?’ as opposed to ‘Do you think this is useful?’ then you’re onto a good start; try to ensure you’re not asking questions that have yes or no answers. In my text mining example above, I’m a stressed new programme manager who hasn’t much time to understand the background to committee papers so term extraction helps me by pulling out the key terms that I can then research on the web, making me seem knowledgeable (well, more so than Sarah Palin
); - 10 minutes to set up a quick demo that produces results. Even if your service or project is quite complex and has lots of configuration options, you need to be able to have something a developer can integrate pretty quickly and 10 minutes is a good target. My term extraction example above is to some extent a bit unfair in some ways; I can submit text online and get answers in substantially less than 10 minutes but it would be good if I could do that in a RESTful way, which I can’t currently;
So there it is. I’d welcome comments from projects or others about how do’able or sane this is but please bear in mind that the whole premise behind this is to quickly get potential users to a point where they have experienced your solution and are interested in taking it further. They are then likely to have the patience to get to grips with that SOAP interface or spend a little more time discovering the nuances of what you’ve put together.
TERENA NRENs and Grids Meeting, September 2008
Introduction
I recently attended the NRENs and Grids Meeting in Dublin, kindly hosted by Trinity College. It gathered together a European audience of those involved in providing national education networks (hence the NRENs bit) and those involved in developing grid software and hardware. The JISC interest in this event was that we are currently working on a number of projects and programmes with a grid related element (such as the e-Infrastructure programme and new work that we are currently formulating under the capital programme).
The programme for the event can be found here and the slides from the presentations at the event can be found in links next to the programme item. I’ll not repeat what is on the slides in this blog entry; I’ll just point to the presentations of particular interest and comment on why I found that particular presentation interesting.
Day One - Grids
The first day focused on developments in grids. The session on eduGAIN was particularly useful in covering how eduGAIN works; it’s quite a complex system but very effective so I’d recommend using the presentation as a 101 if you’re new to it. Items of interest were that eduGAIN are going to be reviewing using Shib 2.0 and future developments also include non-web-based apps. Both of these are areas that JISC is actively involved in so it would be worth following what is being done in eduGAIN.
The next presentation looked at easing access to grids via identity federations. This was of special interest as we are currently involved in doing the same thing through the SARoNGS project. This meant we had quite a lot to share with the group and after the coffee break Jens Jensen and I did a short presentation on what we were doing under SARoNGS, receiving some useful feedback and some good contacts to share software resources and use cases. My feeling is that this is a useful area to link up with other European countries on as there are common problems that can be more quickly and effectively addressed through mutliple groups rather than one group on its own. For example, we have an issue that the SARoNGS solution is constrained by UK Federation policy on passing a unique user name and sharing information between service providers, meaning it cannot be IGTF compliant and is a little less secure. Norway has similar issues and we resolved to review what could be done in terms of a possible future change to policy that would allow a better technical solution and that would still meet the original goals of that particular aspect of the policy. I also talked with Christoph Witzig of SWITCH and there is potential to work with them on aspects of MyProxy to make interoperability easier.
Authorisation developments in grids proved to be an interesting presntation by David Kelsey as it gave an insight into future work under EGEE. The main messages were that there was a scaling back of funding for EGEE that has led to a great deal more focus on specific elements of the infrastructure that need to be tuned and that there was now an expectation from the EC of member states funding grid work. The reduction in funding has meant that the technical work on middleware has been reduced and there has been a shift to focusing on the authorisation framework and an analysis of how authorisation could be more effective. There is a broader desire to have a common policy for VOs, which would then mean that trust in them could be brokered in a similar way to the way it is in IGTF.
To wrap up the day, there was a discussion session on what we all felt would be important to address around grids. The overwhelming part of the discussion focused on levels of assurance, something we have already looked at under the ES-LoA and FAME-PERMIS projects at JISC. The overall agreement was that this is an area that needs to be addressed to allow new users onto the grid using a lower level of assurance, such as those with a federated ID as opposed to a digital certificate. It’s going to be interesting to see what happens over the next year or so as members of the group grapple with this issue. There was also some discussion on attracting more users and new users to grids. It was generally agreed that we need to lower the bar slightly for those outside the traditional disciplines that use the grid (such as particle physicists and computational chemists). Current initiatives in Europe would suggest that many have joined JISC in looking at how this could be done and have been succesful, SWITCH being one of the early ones with its IGTF compliant VASH and SLCS solution.
Day Two - Virtualisation
Virtualisation is something we have looked at previously under the NGS but the time was not quite right. Day Two showed plenty of evidence that maybe it is time to go back to this area under the new round of capital funding to see what we can do.
Cloud Computing for On Demand Resource Provisioning looked at one potential method of providing virtualised resources in a grid environment. The concept was to have a virtualised layer to separate the virtual machine from the physical location. Ignacio Martin Lorente explained how the University of Madrid was trialling using OpenNEbula to be able to do this and hence bring into use machines that had previously not been on the grid as well as allowing for burst traffic by using resources such as Amazon EC2. I won’t try to explain how the whole thing works; it’s much better explained in Ignacio’s slides. Setting up VOs on these virtualised resources can take as little as 20 seconds for a standard setup, meaning that environments can be set up and maintained easily without having to rely on being on a physical server. Ignacio finished his presentation with a look at the RESERVOIR project under the EU Framework Programme , which is a 3 year 17m euro project to get a Next Generation Infrastructure for Service Delivery. I think both of these projects have interest for JISC and it was useful to have examples of how virtualisation could work within an institution and a broader initiative to get cloud computing working across Europe.
The presentation on the Challenges of Deploying Virtualisation in a Production Grid covered pretty much what it said on the tin. Stephen Childs went through how Grid-Ireland had worked on having virtualised environments in their grid environment through open-source software called Xen. He also covered the results of a survey he carried out to look at virtualisation. The key points to come out were:
- It is important to treat a virtualised environment in a production grid in exactly the same way that you would any other production environment. Some of the virtual machines are going to be up for a long time so need patches, etc in the same way as any other physical server;
- Virtualisation is gradually gaining ground and now there is a choice of VM software from commercial to open source, it is starting to become an activity that is being engaged in across European academic institutions. However;
- This activity is currently on a trial basis as people get used to what is involved in provisioning VMs as opposed to physical servers;
- There has to be an awareness of where I/O is critical as Xen is especially weak on this at the moment, meaning a virtualised server may not be the best solution;
- There need to be solid use cases for implementing virtualisation and it must be used appropriately. The two main reasons for not using virtualisation in the survey were management issues and performance;
- A VM host does not behave in the same way as a physical host in all cases - there may be issues with compatibility even if the setup is exactly the same;
- Monitoring is still quite flaky;
Finally, Stephen outlined how Grid-Ireland has used Xen to install, effectively, ‘grid in a box’, where institutions simply needed to host the box they were given and management was carried out by Grid-Ireland. This was a neat solution for the institution but involved quite a lot of overhead for Grid-Ireland on management.
I thought this was a good presentation and Stephen is a useful person to talk with further about virtualisation (as further discussions over coffee proved). He is going to look at putting the survey into a PDF format so that the results can be shared with others.
The remaining presentations covered physical infrastructure so, whilst interesting, were not quite as relevant to what we are doing in Innovation Group.
The final discussion covered future topics and certainly one that we raised was accessing data on the grid, which we are doing quite a lot of work on under the e-Infrastructure programme .
All in all, I think this is a useful group to keep in touch with as the topics they are addressing are ones that we are either currently working on or are interested in for the future. The event provided a good opportunity to meet with others working in the same areas and share experience as well as get pointers to resources that we could use at JISC.
My thanks go to our hosts at Trinity College in Dublin, who worked very hard to make sure the event ran smoothly, with particular thanks to John Walsh for booking an excellent venue for dinner and being on hand to offer local knowledge (he even guided us back to the hotel from the restaurant!).