Infrastructure

The current CILogon authentication system is hosted on multiple hardware systems in Illinois, but it is a single point of failure if the University internet connection is compromised. We should replicate the CILogon authentication service to provide redundancy. To do this, we would need to install CILogon services at probably one (or all?) Coordinating Nodes, and these would act as a backup in case the CILogon service is down. There would need to be a high degree pf physical security for the machines, but we would still probably issue certificates with a different CA to distinguish them from the current CILogon highly trusted service. For example, we might have a CA called the "CILogon DataONE Replicated Certificate Authority Silver" and one analogous for Basic.

This needs considerably more discussion and design with Jim Basney and Randy Butler before it could be designed and implemented.