Related papers: Fermilab's Transition to Token Authentication
Static, long-lived credentials for workload authentication create untenable security risks that violate Zero-Trust principles. This paper presents a multi-cloud framework using Workload Identity Federation (WIF) and OpenID Connect (OIDC)…
The transition to post-quantum cryptography (PQC) presents significant challenges for certificate-based identity management in industrial environments, where secure onboarding of devices relies on long-lived and interoperable credentials.…
A multi-MW proton facility, Project X has been proposed and is currently under development at Fermilab. As part of this development program, we are constructing a prototype of the front end of the Project X linac at Fermilab. The…
The Fermilab Accelerator Division, Instrumentation Department is adopting an open-source framework to replace our embedded VME-based data acquisition systems. Utilizing an iterative methodology, we first moved to embedded Linux, removing…
At the end of its operations in 2011, the Fermilab antiproton production complex consisted of a sophisticated target system, three 8-GeV storage rings (namely the Debuncher, the Accumulator and the Recycler), 25 independent multi-GHz…
Federated Learning (FL) enables collaborative training of Large Language Models (LLMs) across distributed data sources while preserving privacy. However, when federated LLMs are deployed in critical applications, it remains unclear which…
The Real-Time Systems Engineering Department of the Scientific Computing Division at Fermilab has deployed set of customizations to our Off-The-Shelf Data Acquisition solution (otsdaq) at the Fermilab Test Beam Facility (FTBF) to read out…
Forward-secure signatures guarantee that the signatures generated before the compromise of private key remain secure, and therefore offer an enhanced compromise-resiliency for real-life applications such as digital forensics, audit logs,…
Modernizing the Fermilab accelerator control system is essential to future operations of the laboratory's accelerator complex. The existing control system has evolved over four decades and uses hardware that is no longer available and…
Most quantum communication networks around the world are used for a single task: quantum key distribution. In order to initiate the transition to multi-purpose quantum communication networks, we demonstrate the implementation of two…
Fermilab has long had the world's most intense antiproton source, but the opportunities for medium-energy antiproton physics have been limited, and those for low-energy antiproton physics nonexistent. The conclusion of E835 brings this era…
The Elastic Analysis Facility (EAF) hosted at Fermi National Accelerator Laboratory (Fermilab) is a platform being developed with the goal of providing a fast and efficient facility for physics analysis. As high-energy physics moves towards…
The Fermilab proton source is capable of providing 8 GeV protons for both the future long-baseline neutrino program (NuMI), and for a new program of low energy muon experiments. In particular, if the 8 GeV protons are rebunched and then…
The security of cryptographic communication protocols that use X.509 certificates depends on the correctness of those certificates. This paper proposes a system that helps to ensure the correct operation of an X.509 certification authority…
HEPCloud is rapidly becoming the primary system for provisioning compute resources for all Fermilab-affiliated experiments. In order to reliably meet the peak demands of the next generation of High Energy Physics experiments, Fermilab must…
Project X is a multi-megawatt proton facility being developed to support intensity frontier research in elementary particle physics, with possible applications to nuclear physics and nuclear energy research, at Fermilab. The centerpiece of…
Cloud computing is significantly reshaping the computing industry built around core concepts such as virtualization, processing power, connectivity and elasticity to store and share IT resources via a broad network. It has emerged as the…
Enterprise software engineering is shifting away from deterministic CRUD/REST architectures toward AI-native systems where large language models act as cognitive orchestrators. This transition introduces a critical security tension:…
Fermilab has traditionally not been an EPICS house; as such expertise in EPICS is limited and scattered. PIP-II will be using EPICS for its control system. When in operation, it will need to interface with the existing, modernized (see…
Fermilab has been working with the international particle physics and nuclear physics communities to explore and develop research programs possible with a new high intensity proton source known as "Project-X". Project X will provide…