CICI: RSARC: SECTOR: Building a Secure and Compliant Cyberinfrastructure for Translational Research

从医疗仪器、传感器、患者诊断记录、基因组和微生物样本收集的异质数据集的数量不断增加，推动了翻译研究。最近信息技术的进步通过对这些拥有大规模计算和存储资源的数据进行深入分析，极大地加速了翻译研究的创新。临床研究人员现在严重依赖这种网络基础设施来了解趋势、得出相关性和/或识别异常，这有助于准确的诊断、精确的药物发现和有效的疾病治疗。在这种情况下，患者数据的安全性、数据的有效共享以及以符合法规的方式处理数据至关重要。该项目解决了数据驱动的翻译研究的资源限制和安全问题。该项目将大大加快严重依赖敏感数据分析的临床研究活动。由此产生的软件定义的安全基础设施可以应用于承载敏感数据的广泛网络基础设施。该项目将加强计算机科学家、临床研究人员和IT经理之间的合作，并提供一个难得的机会，以整体的方式而不是特别的、增量的方式来应对网络基础设施挑战。该项目为翻译研究(Sector)设计和部署了一个安全和合规的网络基础设施，使之能够在私有计算集群、共享的HPC设施和/或符合HIPAA的云之间共享和计算敏感数据集。具体地说，它(1)利用新兴的软件定义基础设施(SDI)、区块链和安全域名系统来延伸敏感和隐私数据的计算边界。这是第一个将SDI的敏捷性和弹性引入临床研究活动的项目；(2)设计了一个框架，能够部署新的工作流，具有细粒度的用户和符合HIPAA(1996年健康保险携带和责任法案)技术保障的访问控制；(3)使用基于流的数据重定向和处理来迁移数据计算，只需很少的工作就可以移植现有的科学应用程序；(4)设计一个门户网站，利用底层的SDI资源来帮助不同的利益相关者表达他们的工作流程，并简化医疗资源的管理。

Translational research has been driven by the increasing amount of heterogeneous data sets collected from medical instruments, sensors, patient diagnosis records, genomic and microbiome samples. The recent advancement in information technology greatly accelerates the innovation in translational research by applying in-depth analysis on these data with large scale computing and storage resources. Clinical researchers now heavily rely on such cyberinfrastructure to understand trends, derive correlations, and/or identify anomalies, which are instrumental to accurate diagnosis, precision drug discovery and effective treatment of diseases. In this context, the security of the patient data, the efficient sharing of data, and the processing of data in a regulation compliant fashion are critical. This project addresses the resource limitations and security aspects of data-driven translational research. The project will greatly speed up clinical research activities that rely heavily on the analysis of sensitive data. The resulting software defined security infrastructure can be applied to a wide range of cyberinfrastructure that carries sensitive data. The project will strengthen the collaboration among computer scientists, clinical researchers, IT managers and provides a rare opportunity to address the cyberinfrastructure challenges in a holistic way instead of an ad hoc, incremental manner.This project designs and deploys a Security and compliant Cyberinfrastructure for Translational Research (SECTOR) that enables sharing and computing on sensitive data sets between private compute clusters, a shared HPC facility and/or a HIPAA compliant cloud. Specifically, it (1) leverages the emerging software defined infrastructure (SDI), blockchain and secure domain name system to extend the boundary of computing on sensitive and private data. This is the first project to bring the agility and resilience of SDI to clinical research activities; (2) designs a framework that enables the deployment of a new workflows with fine grained user and access control that are compliant with the HIPAA (Health Insurance Portability and Accountability Act of 1996) technical safeguard; (3) enables the migration of data computation using streaming based data redirection and processing, requiring very little effort in porting existing scientific applications; (4) designs a portal that exploits the underlying SDI resources to help various stakeholders to express their workflow and simplify the management of healthcare resources.