Valeria Ardizzone (valeria.ardizzone@ctfn.it) Consorzio COMETA (DECIDE Technical Coordinator)

1. From neurological research to clinical praxis: a European e-Service to support the early diagnosis of neurodegeneration The DECIDE Science Gateway(Diagnostic Enhancement of Confidence by an International Distributed Environment) Valeria Ardizzone (valeria.ardizzone@ct.infn.it) Consorzio COMETA (DECIDE Technical Coordinator) EGI Technical Forum, Lyon, 20.09.2011

2. Outline • Project overview • Project goals • Project e-Infrastructure • Science Gateway services deployed • Authentication and Authorization (SAML, SSO, IDEM Federation) • Robot Certificates • Applications and Grid services interfaces within Liferay portlet (JSAGA, REST) • Data management service (gLibrary, Secure Storage System) • Summary and Conclusions

3. DECIDE at a glance • Submitted to EC Call: FP7-INFRASTRUCTURES-2010-2 – Virtual Research Communities • Started on the 1st September 2010 • Duration: 24 Months • Requested EC contribution: ~2.4 M€ • GARR provides overall coordination • COMETA does the technical coordination • The DECIDE Scientific Coordinator is the neuGRID Principal Investigator • Involves 13 European Partners + a European network of major reference centers in Neurology, and patient advocate societies all across Europe • All stakeholders involved, from the network layer to end-users

4. The DECIDE project goals • To provide the Neuroscientific and Medical community with a dedicated e-AInfrastructure • relying on GEANT, EGI and NeuGrid • To deploy a secure and user-friendly service for the early diagnosis and researchon dementia and other brain diseases • linking large distributed DBs of multi-modal neuro-images • To validate the e-Infrastructure and the services • with real patients in day-by-day clinical practice • To propose a long-term vision for the sustainabilityof the infrastructure of the project • and its extension to new communities and pathologies • To disseminate the results and provide training programmes • promoting the adoption of the DECIDE infrastructure and services.

5. DECIDE service architecture

6. A Memorandum of Understanding (MoU)

7. DECIDE Science Gateway http://applications.eu-decide.eu/ • Requirement: • “To ease the access to the distributed computing and storage resources by the largest possible community of (Grid non-expert) clinicians through a set of well defined and domain specific applications.” • Liferay is currently the most used framework to build Science Gateway in the “Grid world” • It is fully compliant with the JSR 286 (“portlet 2.0”) standard • It can be easily combined to build complex and appealing e-collaboration environments. • It will allow clinicians to change how they work and grow scientists research activity.

8. User Registration Request (http://applications.eu-decide.eu/register) • GrIDP is a catch-all identity federation • for Grid users

9. Authentication mechanism «catch-all» Identity Provider Identity Federations’ discovery service

10. Authorization and Roles • Different Roles: • Users with no expertise: Generic Users, Trainees; • Users with expertise: Neurologists, Physicians, Scientists; • Others: Data Managers, Trainers Manager; The Scientific Board of DECIDE has decided that a board of people designed grants authorisations. A centralised LDAP server provides the authorisations by associating users with roles so a user can perform on the Science Gateway all the activities designed for the roles he/she is associated with. The educational and training programmes of DECIDE will be required as pre- requisite for the authorization to the e-services usage.

11. Applications’ GUI

12. SE 3 Physician workflow 2 1 Parameters (Gender, age, etc.) 9 7 4 8 6 5 Parameters (gender, age, etc.) + Physician Is able to run the analysist. Once the execution will be completed a report is sent by the Grid to the DECIDE service.

13. Data and Metadata Management services 5 The project will design and implement a multimodal imaging repository, to include MRI, PET and EEG datasets and made them available for exploitation to the data analysis software at the basis of the diagnostic/prognostic service. gLibrary: gLibrary is one of the first robust solutions and easy-to-use system available to provide access to digital repositories on grid infrastructures. Secure Storage System: a service to manage confidential data. It is the unique system providing these features and compliant with the gLite middleware.

14. SE Normals Database Upload workflow Server with Robot 1 2 3 5 Images Metadata + Secure Storage Keystore 6 4

15. The main difference of the DECIDE Science Gateway with current Grid portal available in other projects is the use of two different security systems linked together by the portal, providing users an easy access to resources without their own certificates. Since users cannot access without Shibboleth and the available services do not provide direct access to resources it is almost impossible for the users perform malicious operation through the portal. Middleware interfaces are exposed to end users through standard portlets embedded in the Liferay container. Grid transactions are secured by proxy certificates created by the robot server. Data management services are used through the Representational State Transfer (REST) functions of the gLibrary and together with the encryption/decryption Secure Storage functionalities: the data confidentiality is guaranteed. The technical solutions adopted in the DECIDE are based on standards and are not bound to any specific implementation; The DECIDE SG can (and will) be re-used in several other contexts. Summary & Conclusion

16. For further information please contact Laura Leone (laura.leone@garr.it) (DECIDE project coordinator) and/or visit www.eu-decide.eu Thank you for your kind attention!