Ashish Sharma, Tony Pan, Barla Cambazoglu, Joel SaltzOhio State University, Columbus, OH

(ashish, tpan, barla)@bmi.osu.edu

October 10, 2007

caBIG In Vivo Imaging Middleware

For more information: http://www.virtualpacs.org

Overview

• Background on In Vivo Imaging Middleware (IVIM)

• Recent developments/enhancements• Federated query processing infrastructure• Enhanced Security Infrastructure• Extensions in Pathology (caMicroscope) • Grid Enabled CERR (Computational Environment for Radiotheraphy Research)

• XML Data Service• caGrid Data Service for Annotation and Image Markup (AIM)

• Migration and upgrade of IVI Phase 1

• Ongoing / Future work

For more information: http://www.virtualpacs.org

In Vivo Imaging Middleware

• Purpose: create the core infrastructure for Grid enabling imaging applications

• Services, tools, and APIs• DICOM–Grid interoperability• High-performance data transfer• Development/deployment tools for imaging-based grid services• Security

• Layered on the caGrid toolkit

For more information: http://www.virtualpacs.org

Core Capabilities

• DICOM data service• Provides a two way interface between caGrid and DICOM entities• Supports DICOM C_FIND, C_GET, C_MOVE, and C_STORE

commands• Bulk data transport support

• VirtualPACS• Provide DICOM messaging interface to caGrid DICOM data services• Federate multiple grid services

• Generic image data service• Provides a two-way interface between caGrid and images on a file

system• Can be extended to use a database that contains image metadata• Bulk data transport support

For more information: http://www.virtualpacs.org

Core Capabilities

• Bulk data transport• GridFTP is the grid service used for transfer of data• Supports image retrieval and submission• Data generated dynamically based on grid service requests• WS enumeration-based data transfer

• Security• User-level authorization• Data-level authorization• Transport-level authorization

• Development tools• SDK: Introduce extensions to facilitate creation of services• IVIWizard: Tool to facilitate configuration and deployment of

DICOM Data Services

For more information: http://www.virtualpacs.org

New Developments/Enhancements

• New developments• Federated query processing infrastructure• Enhancements to Security Infrastructure• Grid Enablement of CERR• Middleware extensions to support pathology (caMicroscope)• XML Data Service

• Data services in the CardioVascular Research Grid

• AIM Data Service

• Migrate to NCIA v3.0 DICOM model• caGrid 1.1 upgrade

For more information: http://www.virtualpacs.org

Federated Query Processing

Sample queries• “Find all DICOM images where the RECIST length criterion is greater

than a certain value”• “Find all AIM annotations related to a specified set of patients”

• Leveraging caGrid FQP infrastructure• Mechanisms to perform basic distributed aggregations and joins of

queries over multiple data services• Distributed caGrid Query Language (DCQL)

• Components• Federated query processing service, and the query engine• Federated result service• caGrid data services which provide the data

For more information: http://www.virtualpacs.org

FQP Sequence Diagram

For more information: http://www.virtualpacs.org

FQP Client

For more information: http://www.virtualpacs.org

AIM Data Service

• caGrid data service for storing AIM annotations

• Components• XML Backend (Berkeley DB XML database)• Grid data service Wrapper• CQL to XPath translation and query

• Introduce extension to build data services using XML schema• Can be generated from data model in XMI• Can be generated from data model in caDSR and GME• Can be linked to caDSR

For more information: http://www.virtualpacs.org

Security in the Imaging World

• Encryption• Authentication• Authorization• Bulk Data Transport Authorization

• Out-of-band• Harmonization with caGrid security Infrastructure

For more information: http://www.virtualpacs.org

Service and Operation Security

• caGrid provides essential services

• Encryption and signature for session and message

• Authentication with Dorian

• Role/user-based authorization with GridGrouper

• At service level• At operation level• User “role” defined a priori in GridGrouper

• Web service container

• Transport-level security (HTTPS)• Encryption and signature

For more information: http://www.virtualpacs.org

Role and User Management

Manage user and groups• Leverages caGrid GridGrouper group management interface

• Allow creation of user groups and management of user memberships

For more information: http://www.virtualpacs.org

Data-Level Authorization

• PACS may contain data for multiple trials

• Read/write access to data instance

• Based on user identity and groups the user belong to

• Authorization information stored in GridGrouper as data permission groups

• Data permission groups match PACS data hierarchy

• Data permission groups contain user groups, and indirectly users, as members

• DICOMDataService checks GridGrouper Data Permission Groups for authorization before and after PACS query

For more information: http://www.virtualpacs.org

Role-based Security Infrastructure

• Integrate existing authorization mechanisms• May require application specific implementation• NCIA authorization implementation

• Utilizes CSM protection elements and user groups• Authorize based on CSM database table

• Validate and performance optimization• Expanded testing• caGrid 1.1

For more information: http://www.virtualpacs.orgSlide from Walter Bosch

caGrid Enabled CERR

For more information: http://www.virtualpacs.org

gridEnabled CERR

• Computational Environment for Radiotherapy Research• Radiotherapy treatment planning software• Tools for review and analysis• Tools for dosimetry

• caGrid enabled data collection in cooperative groups• Data service for DICOM RT Objects• Data service for CERR Objects

• Grid Enabled CERR Client written in MATLAB• CERR service capable of streaming to CERR Client

For more information: http://www.virtualpacs.org

CERR Data Service

• A caGrid data service for storing CERR objects

• Capabilities• Query• Submit• Retrieve

• Components• Berkeley DB XML database• Bulk data transport

• Will be combined with the DICOM data service to create workflows for radiation treatment planning

• Invoke MATLAB scripts on the remote end

For more information: http://www.virtualpacs.org

caMicroscope

• Service-based infrastructure• Multiple, geographically distributed scientists and developers

access a common image data repository• Shared code repository allowing reusability of the developed codes• Remote job execution• Remote image visualization

• Multi-processor backend• Fast parallel processing of images• Specifically designed for very large-scale image processing• Pipelined processing capabilities

For more information: http://www.virtualpacs.org

caMicroscope

• caMicroscope data service• Based on the caGrid 1.1 middleware• Using Introduce service development toolkit

• Provided operations on images/algorithms• Query

• CQL

• Retrieve/Upload• Bulk data transfer• GridFTP

• View• Aperio libraries

• Parallel execution of MATLAB code on high-end machines • Out-of-core virtual microscope• MATLAB

For more information: http://www.virtualpacs.org

General System Infrastructure

For more information: http://www.virtualpacs.org

Viewing and Execution Client

For more information: http://www.virtualpacs.org

Architecture for Parallel MATLAB Processing

For more information: http://www.virtualpacs.org

XML Data Service Extensions to caGrid

• A general purpose, non-specific XML database backed Data Service• Supports XPath query• Integrates CQL-XPath Conversion in a generic

XPathCQLQueryProcessor• Coupled to an Xpath aware XML Database such as eXist

• CQL to Xpath query translation maps all CQL constructs to a subset of Xpath constructs

• Given an XSD (and in the future, a model), can create and stage an XML Data Service rapidly

For more information: http://www.virtualpacs.org

XML Introduce Extension (Demo)

For more information: http://www.virtualpacs.org

Migration to NCIA v3.0, caGrid 1.1

• Migrate to NCIA v3.0 DICOM model• iviCore Middleware• DICOM Data Service• VirtualPACS• IVI Software Development and Deployment Toolkit

• Upgrade to caGrid 1.1• iviCore Middleware, VirtualPACS and the different grid services• Security Infrastructure• IVI Software Development and Deployment Toolkit