HADA – An Access Controlled Application for Publishing and Discovering Linked Government Data

1. HADA – An Access Controlled Application for Publishing and Discovering Linked Government Data Owen Sacco owen.sacco@deri.org IESD 2012 - EKAW 2012 Galway, Ireland Tuesday 9th October 2012

2. US Government’s principal agency for: • Protecting the Health of all Americans • Providing all essential Human Services

3. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE Promote the advancement of the Health, Safety, and Well-Being of the American People HHS IT Asset Discovery ApplicationHADA

4. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE

5. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE Currently, data about HHS IT Investments exists: In different systems In different data models With different levels of access

6. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE

7. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE HADA aims to provide intelligent: Aggregation of this data to support information discovery Interoperability amongst the different systems Fine-grained Access Control Using Semantic Web principles

8. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE Public Data WWW Docs EPLC and other docs Data Enterprise Repositories IT asset information are pre-aggregated from multiple data sources Which are stored in a database Semantic Database Access rules are checked to grant or restrict access to the IT Investment Cost Data Access Rules Who can see what? If she has access, she can view the Investment cost She searches for a specific IT Investment cost Web Application

9. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE Presentationand Navigation of Content Presentation Layer Enforcement of Privacy Policies Privacy Preference Manager Privacy Layer Privacy Preferences Repositories Semantic Database Semantic Model Transformation Semantic Transformation and Synthesis Existing Ontologies Semantic Layer (e.g. FEA) XML XML XML XML XML Extracted instance data in XML format Content Extraction Layer System Content Extraction Metadata Extraction and Manual Clarification Etc. Docs Code Instance data Data Layer CPIC Repositories EA Repositories Code, Documentation, Etc. Repositories

10. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE

11. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE

12. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE • Publishing Linked Data using the Linked Data API • A RESTful API over RDF graphs • Acts as a proxy over SPARQL endpoints • Easy-to-process representations of resources • Indexing and searching RDF data using SIREn • “A Lucene plugin to efficiently index and query RDF, as well as any textual document with an arbitrary amount of metadata fields” Storing RDF data using Sesame and ARC over MySQL

13. HEALTH AND HUMAN SERVICES DOMAIN IT PROGRAM MANAGEMENT OFFICE Attribute based access and fine grained access More than one rule can be applied to each data element

14. Privacy Preference Ontology rdfs:Literal foaf:Agent acl:Access acl:Access rdfs:Resource ppo:appliesToResource ppo:hasAccessAgent ppo:hasAccessQuery ppo:hasAccess ppo:hasNoAccess rdf:Statement ppo:AccessSpace ppo:PrivacyPreference ppo:appliesToStatement ppo:hasAccessSpace wo:Weight ppo:hasPriority ppo:appliesToNamedGraph ppo:hasConditionOperator trix:Graph ppo:hasCondition ppo:ConditionOperator ppo:conditionOperatorOf ppo:appliesToDataset ppo:hasChildConditionOperator ppo:Condition void:Dataset ppo:hasLogicalOperator ppo:Operator ppo:appliesToContext rdfs:Resource ppo:resourceAsSubject ppo:resourceAsObject ppo:classAsSubject ppo:classAsObject ppo:hasLiteral ppo:hasProperty rdfs:Resource rdfs:Resource rdfs:Class rdfs:Class rdfs:Literal rdfs:Propoerty Applies To Conditions Access Test Queries Access Control Privileges Namespace: http://vocab.deri.ie/ppo#

15. Privacy Preference Ontology PREFIX ppo: <http://vocab.deri.ie/ppo#> . PREFIX hada: <http://hprod.dyndns.org/> . hada:pp1 a ppo:PrivacyPreference; ppo:appliesToResource <http://hprod.dyndns.org/hada/Investment/90000001>; ppo:hasAccessacl:Read; ppo:hasAccessSpace [ ppo:hasAccessQuery "ASK {?x foaf:topic_interest <http://hprod.dyndns.org/hada/vocab/Asset>}"]. Namespace: http://vocab.deri.ie/ppo#

16. Privacy Preference Ontology Privacy Preference ppo:hasAccessQuery ppo:appliesToResource ppo:hasAccess Who is interested in Asset 90000001 acl:Read Namespace: http://vocab.deri.ie/ppo#

17. Privacy Preference Manager • Privacy Preference Manager provides: • Creating privacy preferences • Enforcing privacy preferences User Privacy Preference Manager Privacy Preferences Repositories SPARQL Endpoint RDF Documents

18. Enforcing Privacy Policies SPARQL Endpoint John John’s Profile RDF Documents Logs In John’s RDF Profile Request Request RDF DATA Privacy Preference Manager RDF Data Retriever & Parser Access Query Result Query RDF Data Query Request Privacy Preferences Privacy Preferences Enforcer Privacy Preference Filtered RDF Data Privacy Preferences Creator

21. Towards Patient Controlled Privacy • HHS is exploring to use on healthdata.gov: • Linked Data API for publishing Linked Data • Privacy Preference Frameworkto provide the Patient to control third party access to his/her health data Interface Interface John Alex Privacy Preference Manager Privacy Preference Manager Privacy Preferences Privacy Preferences SPARQL Endpoint SPARQL Endpoint RDF Documents RDF Documents

22. Links • HADA: http://hprod.dyndns.org/ • Linked Data API: http://code.google.com/p/linked-data-api/ • SIREn: http://siren.sindice.com/ • Sesame: http://www.openrdf.org/ • PPO Namespace URI: http://vocab.deri.ie/ppo# • PPM Screencasts: • Creating Privacy Preferences: http://bit.ly/p0N1Vi • Viewing Filtered Triples: http://bit.ly/qiAdxT • Email: owen.sacco@deri.org