同步辐射装置远程实验方法研究

The macromolecular crystallography beamline at shanghai synchrotron radiation facility (SSRF) is the art-of-edge beamline in China, it is the most important platform for structure biology. Every year more than 160 research groups all over the country used the beamline to determine the macromolecular structure to help their research. A lot of signification results is archived by users, To further improve the operation efficiency of the beamline, and more important, to reduce the users' travel fatigue and expenses, we will conduct research on the remote experiment method based on the virtualization technology for SSRF macromolecular crystallography beamline. The beamline control system is a distributed system, all the equipments are distributed and the control and data acquisition is utilized the Ethernet. There are several protocol based on TCP/IP are developed and used for control all of the beamline equipments. For the data privacy and equipment safety we need to develop authentication server to manage the users account and the privilege for different user group to beamline components, also the sample information and the management of the data storage. One time session ID will be generated by the authentication server to make sure the safety. The intuitive Graphical User Interface (GUI) is provided for users from biological field, several GUI clients could be launched at the same time on different computers, but only one client is activated to control the beamline and carry out their experiment.IPv6 is deployed in our institute recently, compared to the IPv4, the IPv6 protocol have several benefits, such as the IPv6 protocol include the IPsec as a mandatory specification to grantee the network layer security. It is more easily to manage the ipv6 networks thanks to the autoconfiguration capabilities. To protect the network we will reduce the risk by only virtualizing the GUI client under ipv6 network for remote experiment. Based on the existed distributed beamline control system, we will integrate the virtualization technology and IPv6 protocol to offer user community to carry out their experiment from anywhere only in the time slice which allocated by authentication server.

上海光源是面向国内外开放的重要科研平台，自2009年运行开放以来，接待了超过10000名用户，用户通过该平台取得了丰硕的研究成果。为了更好的服务于用户群体，节约经费支出及时间成本，更有效的利用机时，本项目将研究建立有效而安全的远程实验方法。通过联锁与授权管理，确保设备及用户数据安全。进而，结合IPv6网络，实现快速且具有安全策略管理的远程实验。以生物大分子晶体学光束线为基础，控制系统的特点为分布式系统，开发后，所有设备的控制及数据传输协议均基于TCP/IP的简单文本形式；系统对用户的访问采用授权服务器来分配用户对设备的访问权限，保证系统的安全性；系统提供给用户直观的图形界面，并且支持多客户端但仅有一个客户端处于活跃状态。通过虚拟化的技术，把图形界面服务提供给远程用户进行实验，结合用户帐号、样品信息和数据存储管理，使得用户能在其分配时段具有访问上海光源生物大分子晶体学线开展远程实验。

同步辐射装置作为国家大装置平台，采用连续24小时运行的开放模式。远程实验能够有效地减轻束线科研人员、外地用户的劳动强度，提高运行效率。本课题的研究中，基于上海光源生物大分子线站开展了实验流程的全自动化，开展了设备与软件系统安全性的开发。基于EPICS系统在IPv6环境下的应用研究，提高对光束线设备的自动控制程度。实验流程中的自动换样机械手是晶体学实验能够全自动以及远程的前提，在研究中通过配置硬件联锁、上样探测装置，保证机械手上样的稳定性。在虚拟化方面，通过对比不同的虚拟化技术，最后采用虚拟机以及Nomachine提供虚拟桌面。结合系统账号认证以及数据获取系统对设备的权限管理，BluIce的客户端能够成功运行在远程用户所在地，从而顺利开展远程实验。远程实验模式的开展能够极大地提高科研效率。