Journals of Accelerator Conferences Website (JACoW)
JACoW
is a publisher in Geneva, Switzerland that publishes the
proceedings of accelerator conferences held around the world
by an international collaboration of editors.
| URL | https://doi.org/10.18429/JACoW-ICALEPCS2025-THMR001 |
|---|---|
| Title | Secure integration of SLAC S3DF with EPICS control systems for machine learning-driven accelerator optimization |
| Authors |
|
| Abstract | We present a Secure EPICS PVAccess (SPVA) deployment framework developed at SLAC to enable authenticated, encrypted and authorized access to control systems from external scientific networks. In Phase 1, SPVA has been deployed to connect HPC clients and services on SLAC’s Scientific External Network to internal PVAccess gateways supporting production accelerators. SPVA enforces strong mutual authentication using Kerberos service principals, which establish the runtime identity of services and clients. These identities are used to request short-lived X.509 certificates from the SLAC-managed PVAccess Certificate Management Service (PVACMS). The certificates are used for TLS-secured PVAccess communication, ensuring cryptographic trust between peers. Authorization decisions are enforced through Access Security Files (ACFs) that define PVAccess security groups (ASGs) referencing User Access Groups (UAGs) and Host Access Groups (HAGs). These groups are centrally managed in LDAPS, allowing fine-grained control based on organizational roles and host policies. This framework provides secure, traceable access to EPICS PVs across administrative domains while maintaining compatibility with PVXS-based IOCs and tools. This abstract outlines the architectural design and operational lessons from the Phase 1 rollout, providing a model for deploying secure control system access in federated scientific computing environments. |
| Paper | download: THMR001.pdf |
| Cite | BibTeX, LaTeX, Text/Word, RIS, EndNote |
| Conference | 20th Int. Conf. Accel. Large Exp. Phys. Control Syst. (ICALEPCS'25) |
| Series | |
| Location | Chicago, IL, USA |
| Date | 20-26 Sep 2025 |
| Publisher | JACoW Publishing, Geneva, Switzerland |
| Editorial Board | Kent Wootton (ANL), Jeffery Biss (FNAL), Gustavo Bruno (ANL), Jeff Kirchman (ANL), Kelly Jaje (ANL), Denise Skiadopoulos (ANL), SuYin Grass Wang (ANL) |
| Online ISBN | 978-3-95450-255-4 |
| Online ISSN | 2226-0358 |
| Received | 05 September 2025 |
| Revised | 23 September 2025 |
| Accepted | 29 October 2025 |
| Issued | 25 November 2025 |
| DOI | 10.18429/JACoW-ICALEPCS2025-THMR001 |
| Pages | 1515-1517 |
| Copyright | Published by JACoW Publishing under the terms of the Creative Commons Attribution 4.0 license. Any further distribution of this work must maintain attribution to the author(s), the published article's title, publisher, and DOI. |