Authentication for Propulsion Test Streaming Video

A streaming video system was developed and implemented at SSC to support various propulsion projects at SSC.  These projects included J-2X and AJ-26 rocket engine testing. The previous methodology of allowing access to the project video streams was performed through the center firewall via the use of an IP address control list.  This is not a true authentication method, but has been the only solution since the audience includes commercial partners external to NASA.  An authentication for the propulsion test streaming video audience was required that could integrate with the Agency authentication methodology, especially for a specific internal audience (NASA and it contractors). An innovative approach had to be developed since team members consist of NASA and NASA contractor personnel as well as non-NASA personal from commercial partners. The video stream for each project was designed to be limited to a specific audience, and would only be available to approved destinations within NASA, NASA contractors, and NASA partners/customer facilities.  This project developed an authentication mechanism so that controlled access to each project video stream would be enabled, and only the identified members of the project team could view the video stream of the live engine test.

An application was developed that could enforce two-factor authentication for NASA access to the Propulsion Test Streaming Video System.  To gain access to the Propulsion Test Streaming Video System, all user requests are submitted through the NASA Account Management System (NAMS).  The assigned approver of these requests is the respective Project Manager for each of the engine test projects.  Then, for authentication purposes, a user is required to use either a NASA issued SmartCard or RSA token to gain access to the website.  Upon authentication, the user enters the website page. The page displays hyperlinks to each engine test video streams that the user has been granted access to.  The user can then selects the chosen video stream for live viewing from their end-user device/location.  For commercial customers, the video stream is sent directly from the video encoder to the customer's corporate streaming server for distribution within the customer's facility. The architecture of the Propulsion Test Streaming Video System was redesigned in order to provide a service capable of supporting two-factor authentication.