1. DECIDE DECIDE ( Diagnostic Enhancement of Confidence by an International Distributed Environment ) Valeria Ardizzone Consorzio COMETA & INFN Catania (DECIDE Technical Coordinator) EGTF, Lyon, 20.09.2011 From neurological research to clinical praxis: a European e-Service to support the early diagnosis of neurodegeneration

2. 2 Outline Project overview Project goals Project e-Infrastructure Science Gateway services deployed Authentication and Authorization (SAML, SSO, IDEM Federation) Applications and Grid services interfaces within Liferay portlet (JSAGA, REST, Robot Certificates) Data Repository platform( gLibrary, Secure Storage System) Summary and Conclusion

3. 3 DECIDE at a glance DECIDE at a glance www.eu-decide.eu www.eu-decide.eu ➡ Submitted to EC Call: FP7-INFRASTRUCTURES-2010-2 – Virtual Research Communities ➡ Started on the 1 st September 2010 ➡ Duration: 24 Months ➡ Requested EC contribution: ~2.4 M€ ➡ GARR provides overall coordination ➡ COMETA does the technical coordination ➡ The DECIDE Scientific Coordinator is the neuGRID Principal Investigator ➡ Involves 13 European Partners + a European network of major reference centers in Neurology, and patient advocate societies all across Europe ➡ All stakeholders involved, from the network layer to end-users

4. 4 DECIDE Partners 1 CONSORTIUM GARR Italy 3 CONSORZIO COMETA Italy Network and GRID Infrastructure Partners 2 CNR 6 UNIVERSITY OF GENOA - UNIGE Italy 7 UNIVERSITY OF FOGGIA - UNIFG Italy 9 MAAT FRANCE - maat G France 10 IMPERIAL COLLEGE– United Kingdom 11 UNIWERSYTET WARSZAWSKI - Poland Application Layer Partners 4 FATEBENEFRATELLI - Italy 5 UNIVERSITY SAN RAFFAELE - Italy 8 FONDAZIONE SDN - Italy 12 CENTRE HOSPITALIER UNIVERSITAIRE DE TOULOUSE - France 13 ALZHEIMER EUROPE - Luxembourg Clinical and Patient Layer Partners A vertical approach to e-Health, targeting the needs of neuroscientists community through the provisioning of an e-Infrastructure aimed at supporting them in the daily execution of the diagnosis.

5. 5 The DECIDE project goals ➡ To provide the Neuroscientific and Medical community with a dedicated e- A Infrastructure ➡ relying on GEANT, EGI and NeuGrid ➡ To deploy a secure and user-friendly service for the early diagnosis and research on dementia and other brain diseases ➡ linking large distributed DBs of multi-modal neuro-images ➡ To validate the e-Infrastructure and the services ➡ with real patients in day-by-day clinical practice ➡ To propose a long-term vision for the sustainability of the infrastructure of the project ➡ and its extension to new communities and pathologies ➡ To disseminate the results and provide training programmes ➡ promoting the adoption of the DECIDE infrastructure and services.

6. 6 DECIDE service architecture

7. Memorandum of Understanding (MoU)

8. 8 DECIDE Science Gateway Liferay is currently the most used framework to build Science Gateway in the “Grid world”. http://applications.eu-decide.euhttp://applications.eu-decide.eu/ Main Requirement : “To ease the access to the distributed computing and storage resources by the largest possible community of (Grid non-expert) clinicians through a set of well defined and domain specific applications.” Technical Requirements : ➡ Ease of use; ➡ Modular, reusable, extensible to more user communities ➡ Security - AAI integration

9. 9 User Registration Request (http://applications.eu-decide.eu/register)http://applications.eu-decide.eu/register ➡ GrIDP is a catch-all identity federation for Grid users

10. 10 Authentication mechanism

11. 11 The GARR-IDEM Identity Federation (www.idem.garr.it)www.idem.garr.it IDEM figures: 45 IDPs (not only in Italy): 31 in production; 14 in tests; >2,700,000 end users (as of October 2010) ; ~50% of the Italian higher education & research community

12. Authorization and Roles The Scientific Board of DECIDE has decided that a board of people designed grants authorisations. A centralised LDAP server provides the authorisations by associating users with roles so a user can perform on the Science Gateway all the activities designed for the roles he/she is associated with. Different Roles : Users with no expertise: Generic Users, Trainees; Users with expertise: Neurologists, Physicians, Scientists; Others: Data Managers, Trainers Manager; The educational and training programmes of DECIDE will be required as pre- requisite for the authorization to the e-services usage.

13. 13 Applications’ GUI

14. 14 ROBOT certificate The core of the new library is represented by the eTokenServer Java class, a multithreaded server which accepts all the requests coming from a list of authorized clients and manages a list of robot certificates kept in the USB token. SSL protocol is used between Client/Server token

15. 15 Physician workflow Physician Is able to run the analysist. Once the execution will be completed a report is sent by the Grid to the DECIDE service. SE 3 3 1 2 Parameters (Gender, age, etc.) 4 Parameters (Gender, age, etc.) 5 6 + 7 8

16. 16 Data Repository Management service The project will design and implement a multimodal imaging repository, to include MRI, PET and EEG datasets and made them available for exploitation to the data analysis software at the basis of the diagnostic/prognostic service. Secure Storage System: a service to manage confidential data. It is the unique system providing these features and compliant with the gLite middleware. gLibrary: gLibrary is one of the first robust solutions and easy-to-use system available to provide access to digital repositories on grid infrastructures.

17. 17 Normals Database Upload workflow Server with Robot SE 1 2 3 5 Secure Storage Keystore 4 6 + Images Metadata

18. 18 Summary & Conclusion The main difference of the DECIDE Science Gateway with current Grid portal available in other projects is: the ease of use, (security) the independence from the digital personal certificates (thanks to robot certificates); Grid transactions are secured by proxy certificates created by the robot server; the user possibility to have different roles and privileges in different real organization he/she belongs; the separation between authentication mechanism (based on Federation) and authorization one (based on LDAP); (middleware) standard adoption (SAGA, SAML, JSR 286); independence from middleware and oeprating systems (JSAGA); middleware interfaces exposed and embedded in the Science Gateway are modular, reusable and extensible. (Digital Repository) Data management services are used through the Representational State Transfer (REST) functions of the gLibrary and together with the encryption/decryption Secure Storage functionalities: the data confidentiality is guaranteed.

19. 19 CREDITS VALERIA ARDIZZONE RICCARDO BRUNO ANTONIO CALANDUCCI MARCO FARGETTA ELISA INGRA’ SALVATORE MONFORTE GIANLUCA PASSARO FABRIZIO PISTAGNA RITA RICCERI RICCARDO ROTONDO DIEGO SCARDACI ACKNOWLEDGMENTS MARIA LAURA MANTOVANI FULVIO GALEAZZI STEFANO GARGIULO DAVID MANSET SABRINA TOMASSINI

20. 20 Thank you for your kind attention! For further information please contact Laura Leone (laura.leone@garr.it)laura.leone@garr.it (DECIDE project coordinator) and/or visit www.eu-decide.eu