Health-e-Child: An Integrated Platform for European Paediatrics Konstantin Skaburskas CERN IT/GD Special thanks to David Manset (Maat-G) for the slides provided for this presentation. 07 Sept 2007, CoreGRID Summer School Budapest

Project Objectives Establish Horizontal and Vertical integration of data, information and knowledge Develop a Grid-based biomedical information platform, supported by sophisticated and robust search, optimisation, and matching techniques for heterogeneous information, Build enabling tools and services that improve the quality of care and reduce its cost by increasing efficiency Integrated disease models exploiting all available information levels Database-guided decision support systems Large-scale, cross-modality information fusion and data mining for knowledge discovery A Knowledge Repository for Paediatrics

Project General Info Instrument: Integrated Project (IP) of the Framework Program FP6 Project Identifier: IST-2004-027749 Coordinator: Siemens AG, Dr. Jörg Freund Partner: 14 European (companies, hospitals, institutions) Timetable: 01-Jan-06 to 31-Dec-09 (4 years) Total cost: 16.7 Mio. € EC funding: 12.2 Mio. € Web page: http://www.Health-e-Child.org

A Geographically Distributed Environment Introduction A Geographically Distributed Environment ASPER + UCL + GOSH Clinical Site An Integration Challenge UWE SIEMENS CERN R&D Site NECKER IGG FGG EGF UOA INRIA MAAT LYNKEUS

Health-e-Child Gateway HeC System Overview Cardiology NeuroOncology Rheumatology Knowledge Discovery Decision Support Systems Disease Models Common Client Applications Health-e-Child Gateway Ontological Layer Query Processing Data Management Grid Middleware IGG Necker GOSH

Data Integration Challenge (1) IGG GOSH NECKER Cardiology DB MS ACCESS + Excel TOMCAT NO - Paper-based PACS YES - But not operational YES NO Rheumatology NO - PACS in 2007 Radiology Not Available RIS RADOS YES - But being tested Molecular Genetics NeuroOncology Proteomics + + + Highlights - Several DBMSs: MS Access, RADOS, RIS, TOMCAT … - Potential problems accessing proprietary systems … - Heterogeneous data, structured, unstructured …

Data Integration Challenge (2) MRI @ IGG X-Ray @ IGG X-Ray @ NECKER CT @ NECKER US @ GOSH X-Ray @ GOSH PACS @ GOSH Highlights - Several Imaging Modalities: CT, MRI, US … - Several Imaging Devices: SIEMENS, GE, HP, PHILIPS … (rough estimation gives: 540’000 images)

Applications Integration Challenge (1) NeuroOncology Cardiology Rheumatology Viewing remote cases MRI, CT MRI, US MRI, US, (x-ray) Distributed similarity search (involving image features) - Similar size, location, and enhancement of tumor  search can be run on extracted features - Similar extend of RV or LV dilation, similar shape - (images are evaluated by using various scores) Intensive image processing - Segmentation and registration with atlas - Tumor growth simulation - Training of model for DSS - Interactive/automated training or refinement of models - Interactive refinement (by adjusting parameters) - Automatic incremental refinement of the model Algorithm assessment (same algorithm with different parameters and/or various algorithms) Highlights - Different Types of Applications: Image Processing, Data Mining, GUI Clients, Services … - Different Levels of Integration: standalone application, online “gridified” application, external services …

Applications Integration Challenge (2) IGG NECKER Highlights - Different Networks: LANs, WANs, Internet - Security Constraints: Local & National Regulations - Bandwidth Limitations: LAN/WAN & Internet uplinks … GOSH

Solution Challenge Problem Description Security Privacy Heterogeneity - Interconnecting Hospitals through the Internet - Providing Services & Data Online Privacy - Connecting a Research Platform to Hospitals’ Information Systems - Manipulating Patient Data Heterogeneity - Dealing with several imaging devices, technologies, protocols, data, environments… Distribution, Scalability - Coping with geographically distributed sites across Europe (France, UK, Italy…) - Building a scalable system for a future expansion Usability - End-users: Clinicians - Providing a rapid and efficient access to the Platform

Solution Challenge Horizontal Platform Problem Description R H E U M A Security - Interconnecting Hospitals through the Internet - Providing Services & Data Online Usability - End-users: Clinicians - Providing a rapid and efficient access to the Platform Privacy - Connecting a Research Platform to Hospitals’ Information Systems - Manipulating Patient Data Distribution, Scalability - Coping with geographically distributed sites across Europe (France, UK, Italy…) - Building a scalable system for a future expansion Heterogeneity - Dealing with several imaging devices, technologies, protocols, data, environments… R H E U M A C A R D I O N E U R O Horizontal Platform

+ Challenge Horizontal Platform R H E U M A C D I O N IGG GOSH NECKER Data Flow IGG GOSH NECKER +

+ + + + + + + Solution Our Approach Highlights One Key Access Point - Simplicity, Abstraction from the complexity of Grid - Modularity & Scalability, Off-the-shelf components - State-of-the-art Approaches + + + One Key To enter the system Access Point Per Institution + + + Hospital X + User Workstation Gateway

+ + + + + + + Solution Our Approach Access Point Per Institution Hospital X + User Workstation Gateway

Health-e-Child EGEE gLite The Platform The Health-e-Child Access Point Scheduling Job Managnt Info System Monitoring Access Point Computation Unit Hosting Domain 1 Stable & Secure Environment HeC Gateway HeC Gateway HeC DBMS Storage Security & Registration Data Unit 200GB 50GB 1TB Hosting Domain 2 Stable & Secure Environment Virtualization…

The Health-e-Child Gateway (1) The Platform The Health-e-Child Gateway (1) Client Applications Access Point Functionality Access HeC Gateway Infrastructure Abstraction gLite Infra Knowledge Repository Hospitals’ IS Computing Resources Inside the box…

The Health-e-Child Gateway (2) The Platform The Health-e-Child Gateway (2) Client Applications Client Applications Access Point Authen. & Author. Services Ongoing Portal Service & Factory Integration Data Grid Abstraction DB Abstraction AMGA OGSA-DAI gLite API GT4* Functionality Access HeC Gateway Infrastructure Abstraction Hospitals’ IS gLite Infra Knowledge Repository * GT4: Globus Toolkit 4 (WSRF Container) * OGSA-DAI or AMGA: Data Access & Integration Inside the box…

Access Health-e-Child SOA Client Applications Access Point Health-e-Child SOA Functionality Access HeC Gateway Infrastructure Abstraction Computing Resources

Data Distribution & Federation Security Services Discovery & Composition Connectivity Access Point HeC Gateway Data Integration Grid Medical Query Processing Data Distribution & Federation

+ + + + + + + Our Approach One Key To enter the system Hospital X User Workstation Gateway

Security Authentication Highlights: Access Point Client Workstation Highlights: - Leveraged Security Model (2-FA is respected) - HeC CA, Affordable Solution: both in terms of cost & effort - Gives us the freedom to make several tests (since based our own CA) - Certificates are used in different contexts (e.g. logging) 2. Authentication request Authentication Factory 4. Returns Endpoint Resource 3. Instantiates Authentication 9. Check VO membership 5. Authentication Part1 1. Generate Grid Proxy 6. PIN Code Request VOMS 8. VOMS Request 7. Authentication Part2 10. Returns atributes blob 12. Authentication OK 11. Store VOMS Proxy HEARTBEATS Note: Tunnels: HTTPS + GSI Secure Conversation Heartbeat = resource & proxy lifetime extension HeC Gateway Grid Services

Security Logging Logging HeC Gateway Log4j Appender Extended Appender for fetching more detailed information UserID, Layer, Service, Operation, Log Level, Timing … Appender is asynchronous Almost no impact on perform times (much less than log in files) Web Portal only available at the Institution Access is restricted to server administrator (HTTPS) Uses HeC Certificates Functionality Log can be sorted by user/layer/service/operation… Statistics can be processed Services/Layer reliability, Services/Layer load, User Performed Operations, Platform Usage, Layer/Service/Operation & Platform Performance Log Traces can be generated Possibility to export traces as text file Auth Portal Log Database Misc HeC Gateway Web Portal

Data Distribution & Federation Security Services Discovery & Composition Connectivity Access Point HeC Gateway Data Integration Grid Medical Query Processing Data Distribution & Federation

Client Connectivity (1) Client Type1 Client Type2 Client Type3 Client Base Client Base P2P3* ServiceLibs ServiceLibs ServiceLibs HTTPS Stubs Stubs GW Stack GW Stack GW Stack Stubs P2P3 Stack ServiceLibs Stubs HTTPS + XML Conversation HeC Gateway Grid Infrastructure *P2P3: Peer-To-Peer Patient Privacy

Data Distribution & Federation Security Services Discovery & Composition Connectivity Access Point HeC Gateway Data Integration Grid Medical Query Processing Data Distribution & Federation

Data Integration DICOM Files Highlights: Access Point Client Workstation Authentication Highlights: - Asynchronous operations Thumbnails generated on grid from DICOM slices (useful for efficiently browsing patient records) - DICOM Compliant HEARTBEATS Portal Factory HEARTBEATS CE 1. Portal Call (START TRANSF) Portal 7. Thumbnails 4. Portal Call (ADD) Resource 6. Store/Register SE Notification .5. Pick-up 2. Fire-up LFC gridFTP Tmp HeC Gateway Grid Services 3. File Transfer

Data Distribution & Federation Security Services Discovery & Composition Connectivity Access Point HeC Gateway Data Integration Grid Medical Query Processing Data Distribution & Federation

Grid Middleware Grid Infrastructure GOSH UWE SIEMENS CERN NECKER IGG UOA MAAT

THANK YOU FOR YOUR ATTENTION www.health-e-child.org