1. Health-e-Child: An Integrated Platform for European Paediatrics
Konstantin Skaburskas
CERN IT/GD
Special thanks to David Manset (Maat-G) for the slides provided for this presentation.
07 Sept 2007, CoreGRID Summer School
Budapest

2. Project Objectives
Establish Horizontal and Vertical integration of data, information and knowledge
Develop a Grid-based biomedical information platform, supported by sophisticated and robust search, optimisation, and matching techniques for heterogeneous information,
Build enabling tools and services that improve the quality of care and reduce its cost by increasing efficiency
Integrated disease models exploiting all available information levels
Database-guided decision support systems
Large-scale, cross-modality information fusion and data mining for knowledge discovery
A Knowledge Repository for Paediatrics

3. Project General Info
Instrument: Integrated Project (IP) of the Framework Program FP6
Project Identifier: IST
Coordinator: Siemens AG, Dr. Jörg Freund
Partner: 14 European (companies, hospitals, institutions)
Timetable: 01-Jan-06 to 31-Dec-09 (4 years)
Total cost: Mio. €
EC funding: Mio. €
Web page:

4. A Geographically Distributed Environment
Introduction
A Geographically Distributed Environment
ASPER +
UCL +
GOSH
Clinical Site
An Integration Challenge
UWE
SIEMENS
CERN
R&D Site
NECKER
IGG
FGG
EGF
UOA
INRIA
MAAT
LYNKEUS

5. Health-e-Child Gateway
HeC System Overview
Cardiology
NeuroOncology
Rheumatology
Knowledge Discovery
Decision Support Systems
Disease Models
Common Client Applications
Health-e-Child Gateway
Ontological Layer
Query Processing
Data Management
Grid Middleware
IGG
Necker
GOSH

6. Data Integration Challenge (1)
IGG
GOSH
NECKER
Cardiology DB
MS ACCESS + Excel
TOMCAT
NO - Paper-based
PACS
YES - But not operational
YES NO
Rheumatology
NO - PACS in 2007
Radiology
Not Available
RIS
RADOS
YES - But being tested
Molecular Genetics
NeuroOncology
Proteomics + + +
Highlights
- Several DBMSs: MS Access, RADOS, RIS, TOMCAT …
- Potential problems accessing proprietary systems …
- Heterogeneous data, structured, unstructured …

7. Data Integration Challenge (2)
IGG
IGG
NECKER
NECKER
GOSH
GOSH
GOSH
Highlights
- Several Imaging Modalities: CT, MRI, US …
- Several Imaging Devices: SIEMENS, GE, HP, PHILIPS …
(rough estimation gives: 540’000 images)

8. Applications Integration Challenge (1)
NeuroOncology
Cardiology
Rheumatology
Viewing remote cases
MRI, CT
MRI, US
MRI, US, (x-ray)
Distributed similarity search (involving image features)
- Similar size, location, and enhancement of tumor  search can be run on extracted features
- Similar extend of RV or LV dilation, similar shape
- (images are evaluated by using various scores)
Intensive image processing
- Segmentation and
registration with atlas
- Tumor growth simulation
- Training of model for DSS -
Interactive/automated training or refinement of models
- Interactive refinement (by adjusting parameters)
- Automatic incremental refinement of the model
Algorithm assessment
(same algorithm with different parameters and/or various algorithms)
Highlights
- Different Types of Applications: Image Processing, Data Mining,
GUI Clients, Services …
- Different Levels of Integration: standalone application, online
“gridified” application, external services …

9. Applications Integration Challenge (2)
IGG
NECKER
Highlights
- Different Networks: LANs, WANs, Internet
- Security Constraints: Local & National Regulations
- Bandwidth Limitations: LAN/WAN & Internet uplinks …
GOSH

10. Solution Challenge Problem Description Security Privacy Heterogeneity
- Interconnecting Hospitals through the Internet
- Providing Services & Data Online
Privacy
- Connecting a Research Platform to Hospitals’ Information Systems
- Manipulating Patient Data
Heterogeneity
- Dealing with several imaging devices, technologies, protocols, data, environments…
Distribution, Scalability
- Coping with geographically distributed sites across Europe (France, UK, Italy…)
- Building a scalable system for a future expansion
Usability
- End-users: Clinicians
- Providing a rapid and efficient access to the Platform

11. Solution Challenge Horizontal Platform Problem Description R H E U M A
Security
- Interconnecting Hospitals through the Internet
- Providing Services & Data Online
Usability
- End-users: Clinicians
- Providing a rapid and efficient access to the Platform
Privacy
- Connecting a Research Platform to Hospitals’ Information Systems
- Manipulating Patient Data
Distribution, Scalability
- Coping with geographically distributed sites across Europe (France, UK, Italy…)
- Building a scalable system for a future expansion
Heterogeneity
- Dealing with several imaging devices, technologies, protocols, data, environments… R H E U M A C A R D I O N E U R O
Horizontal Platform

12. + Challenge Horizontal Platform R H E U M A C D I O N IGG GOSH NECKER
Data Flow
IGG
GOSH
NECKER +

13. + + + + + + + Solution Our Approach Highlights One Key Access Point
- Simplicity, Abstraction from the complexity of Grid
- Modularity & Scalability, Off-the-shelf components
- State-of-the-art Approaches + + +
One Key
To enter
the system
Access
Point
Per
Institution + + +
Hospital X +
User
Workstation
Gateway

14. + + + + + + + Solution Our Approach Access Point Per Institution
Hospital X +
User
Workstation
Gateway

15. Health-e-Child EGEE gLite The Platform The Health-e-Child Access Point
Scheduling
Job
Managnt
Info
System
Monitoring
Access
Point
Computation Unit
Hosting Domain 1 Stable & Secure Environment
HeC Gateway
HeC Gateway
HeC
DBMS
Storage
Security
&
Registration
Data Unit
200GB
50GB
1TB
Hosting Domain 2 Stable & Secure Environment
Virtualization…

16. The Health-e-Child Gateway (1)
The Platform
The Health-e-Child Gateway (1)
Client Applications
Access
Point
Functionality Access
HeC Gateway
Infrastructure Abstraction
gLite Infra
Knowledge
Repository
Hospitals’ IS
Computing Resources
Inside the box…

17. The Health-e-Child Gateway (2)
The Platform
The Health-e-Child Gateway (2)
Client Applications
Client Applications
Access
Point
Authen. &
Author.
Services
Ongoing
Portal
Service &
Factory
Integration
Data
Grid Abstraction
DB Abstraction
AMGA
OGSA-DAI
gLite API
GT4*
Functionality Access
HeC Gateway
Infrastructure Abstraction
Hospitals’ IS
gLite Infra
Knowledge
Repository
* GT4: Globus Toolkit 4 (WSRF Container)
* OGSA-DAI or AMGA: Data Access & Integration
Inside the box…

18. Access Health-e-Child SOA
Client Applications
Access
Point
Health-e-Child SOA
Functionality Access
HeC Gateway
Infrastructure Abstraction
Computing Resources

19. Data Distribution & Federation
Security
Services
Discovery & Composition
Connectivity
Access
Point
HeC Gateway
Data Integration
Grid
Medical Query
Processing
Data Distribution & Federation

20. + + + + + + + Our Approach One Key To enter the system Hospital X User
Workstation
Gateway

21. Security Authentication Highlights: Access Point
Client
Workstation
Highlights:
- Leveraged Security Model (2-FA is respected)
- HeC CA, Affordable Solution: both in terms of cost & effort
- Gives us the freedom to make several tests
(since based our own CA)
- Certificates are used in different contexts (e.g. logging)
2. Authentication request
Authentication
Factory
4. Returns Endpoint
Resource
3. Instantiates
Authentication
9. Check VO membership
5. Authentication Part1
1. Generate Grid Proxy
6. PIN Code Request
VOMS
8. VOMS Request
7. Authentication Part2
10. Returns atributes blob
12. Authentication OK
11. Store VOMS Proxy
HEARTBEATS
Note:
Tunnels: HTTPS + GSI Secure Conversation
Heartbeat = resource & proxy lifetime extension
HeC Gateway
Grid Services

22. Security Logging Logging HeC Gateway Log4j Appender
Extended Appender for fetching more detailed information
UserID, Layer, Service, Operation, Log Level, Timing …
Appender is asynchronous
Almost no impact on perform times (much less than log in files)
Web Portal only available at the Institution
Access is restricted to server administrator (HTTPS)
Uses HeC Certificates
Functionality
Log can be sorted by user/layer/service/operation…
Statistics can be processed
Services/Layer reliability,
Services/Layer load,
User Performed Operations,
Platform Usage,
Layer/Service/Operation & Platform Performance
Log Traces can be generated
Possibility to export traces as text file
Auth
Portal
Log Database
Misc
HeC Gateway
Web Portal

23. Data Distribution & Federation
Security
Services
Discovery & Composition
Connectivity
Access
Point
HeC Gateway
Data Integration
Grid
Medical Query
Processing
Data Distribution & Federation

24. Client Connectivity (1)
Client Type1
Client Type2
Client Type3
Client Base
Client Base
P2P3*
ServiceLibs
ServiceLibs
ServiceLibs
HTTPS
Stubs
Stubs
GW Stack
GW Stack
GW Stack
Stubs
P2P3 Stack
ServiceLibs
Stubs
HTTPS + XML Conversation
HeC Gateway
Grid Infrastructure
*P2P3: Peer-To-Peer Patient Privacy

25. Data Distribution & Federation
Security
Services
Discovery & Composition
Connectivity
Access
Point
HeC Gateway
Data Integration
Grid
Medical Query
Processing
Data Distribution & Federation

26. Data Integration DICOM Files Highlights: Access Point
Client
Workstation
Authentication
Highlights:
- Asynchronous operations
Thumbnails generated on grid from DICOM slices
(useful for efficiently browsing patient records)
- DICOM Compliant
HEARTBEATS
Portal Factory
HEARTBEATS CE
1. Portal Call (START TRANSF)
Portal
7. Thumbnails
4. Portal Call (ADD)
Resource
6. Store/Register SE
Notification
.5. Pick-up
2. Fire-up
LFC
gridFTP
Tmp
HeC Gateway
Grid Services
3. File Transfer

27. Data Distribution & Federation
Security
Services
Discovery & Composition
Connectivity
Access
Point
HeC Gateway
Data Integration
Grid
Medical Query
Processing
Data Distribution & Federation

28. Grid Middleware Grid Infrastructure GOSH UWE SIEMENS CERN NECKER IGG
UOA
MAAT

30. THANK YOU FOR YOUR ATTENTION