BE 25 – BEinEIMRT Demo CESGA - UVIGO - USC - CHUS - UCM Araceli Gago Arias, Daniel A. Rodríguez Silva University of Santiago, University of Vigo

Business Experiments in GRID 2 Outline General scenario overview Demonstration architecture Demonstration scenario Live demo Technical innovation Demonstrated use of Grid Validation of AC1 components Conclusion

Business Experiments in GRID 3 - In 2000 more than 6.2 million deaths in the world - 15 million in 2020 (WHO forecast ) - In Europe: 3 million new patients per year million deaths - BUT: Cancer can be cured in many cases General scenario overview

Business Experiments in GRID 4 Chemotherapy Surgery Radiotherapy How to fight cancer >60 % of patients >60 % of patients

Business Experiments in GRID 5 Computed Tomography (CT) Tumor Radiotherapy Depth dose profile Tumor control and complications probability Dose deposition in patient on CT image

Business Experiments in GRID 6 TREATMENT PLANNING SYSTEMS USED TO DESIGN TREATMENTS DOSE ALGORITHMS FastFast Limited accuracyLimited accuracy Treatment Planning Systems (TPS)

Business Experiments in GRID 7 VAST COMPUTATIONAL RESOURCES VIA WEB ACCURATE DOSE ALGORITHMS What can BEinEIMRT do for radiotherapy? Monte Carlo Simulation

Business Experiments in GRID 8 General scenario overview Hospital staff Patient’s Treatment Information Patient’s Treatment Information Hospital TPS Hospital TPS TreatmentRadiationPlanTreatmentRadiationPlan BEinEIMRT Services Patient Verify treatment plans Calculate optimal treaments Verify treatment plans Calculate optimal treaments DICOM

Business Experiments in GRID 9 Main features of e-IMRT platform Treatment verification –Very accurate dose calculation (Monte Carlo) –Grid reduces the response time –Realistic dose simulation in affordable time Searching of optimal treatment solutions –Prescriptions: organs to spare & regions to treat –Many possible solutions fulfilling prescriptions –Set of optimal solutions in affordable time

Business Experiments in GRID 10 Architecture of the demo Service-Oriented Architecture (SOA) –Based on Web Services (WS) Client Web Portal User roles: –Hospital user –Hospital administrator –System administrator SLA Negotiation Services security: PEP + PDP Hospital TREATMENT SERVICES (WS) LOCAL COMPUTING RESOURCES 3rd PARTY COMPUTING RESOURCES 3rd PARTY COMPUTING RESOURCES INTERNET GRID WEB SERVER SLA PEP PDP PEP PDP DB

Business Experiments in GRID 11 Security Components: securing WS Secure data exchange: confidentiality, privacy, and integrity All requests pass through the PEP/PDP security software PEP – Policy Enforcement Point –Vordel’s XML Gateway with BEinGRID enhancements –Protect Web Services from wide range of attacks –Intercepts and processes all incoming requests –Policy-based, centralized control –Secure service virtualization, contextualization, and exposure –Calls out to PDP for authorization request PDP – Policy Decision Point –Axiomatics’ Authorization Service with BEinGRID enhancements –Checks access control requests against its access control policies –Network-hosted: easy to integrate with other solutions e.g. the PEP –Constrained delegated administration of access control policies Validate BEinGRID’s General Security common capabilities

Business Experiments in GRID 12 PEP-PDP interaction

Business Experiments in GRID 13 Management of Grid Resources GridWay Middleware –Submits jobs to Grid resources and monitors them –Requires specific plug-in to work with BE25 SLA Negotiator –Automatically contracts external resources as needed. –Integrated with GridWay –Component from BEinGRID’s SLA cluster Other implemented features –Monitoring of SLA –Accounting of SLA

Business Experiments in GRID 14 SLA Negotiation overview GRIDWAY TREATMENT SERVICES SLA DRMAA SLA Negotiator client SLA Negotiator client SLA Negotiator server GRID EXTERNAL RESOURCES PROVIDER

Business Experiments in GRID 15 SLA components interaction Provider List Pre SLA Broker GW-SLA GW Internal Struct SLA Negotiator client SLA Negotiator client SLA Evaluation SLA Negotiator server Plugin GW-SLA DB Services GRIDWAY Resources provider

Business Experiments in GRID 16 Demonstration scenario Web portal: –Internet browser, any operating system –Java plugin + Flash plugin required (common plugins) SLA negotiation –Admin configuration web page for SLA –Console to check the automatic SLA negotiation Security components –PEP real time monitoring to display blocked and accepted requests –PEP administrator to show Gateway’s policies –Console to monitor the PDP traces

Business Experiments in GRID 17 Live demonstration

Business Experiments in GRID 18 Technical innovation New service for IMRT virtual verification New service for treatment plan optimization 3D gamma maps in minutes Web-based front-end to facilitate the access from hospitals Based on Web Services  easy integration with local TPS Hides computing resources: GridWay+SLAs Service-Oriented security: PEP+PDP integration

Business Experiments in GRID 19 Demonstrated use of Grid Reduces the time to obtain results –The results can be produced on time thanks to the aggregation of computing resources Reduces computing entry investments –The new company only has to buy the front- ends. The computing resources can be provisioned on demand Increases the flexibility –The available computing resources can be adapted to the demand dynamically

Business Experiments in GRID 20 Validation of AC1 components SLA-Negotiation validation –Successfully integrated with GridWay Some additions were needed Allows to add available resources on demand –Validated benefits of using SLA Negotiation Execution time decreases using SLA Negotiation Verification: Execution Time < 5 hours Optimization: Execution time < 2 hours

Business Experiments in GRID 21 Security validation Global security has been improved, hospital data is exchanged safely Anonymization and HTTPS complement Web Services security Validation of AC1 components

Business Experiments in GRID 22 PEP+PDP validation –Policy Enforcement Point (PEP) validation SSL: communication from hospitals to GW and from GW to Services is encrypted Protection against different attacks and bad-formed requests Extensible security gateway: integration with PDP for fine-grained access control –Policy Decision Point (PDP) validation Encryption and digital signatures are used between PEP and PDP Authorization: PEP validates access control requests against PDP policies –Components successfully integrated increasing the security of the services Validation of AC1 components

Business Experiments in GRID 23 Conclusions The proof of concept has been successfully demonstrated Grid reduces the time to obtain results significantly Web portal allows easy, flexible access to services There is room for some improvement in the treatment optimization tool SLA tools provided by BEinGRID’s SLA cluster have been improved Distributed architecture calls for new security mechanisms  Successful integration of those provided by BEinGRID’s General Security cluster

THANK YOU Any questions? © BEinGRID Consortium