DRAFT

NSF Site VisitDataSpace Review:

Microsoft Presentation 8 Feb 2010

(v5)

DataSpace

1

Why is Microsoft Interested in DataSpace• Large-scale data-driven sciences requires

significant investments in hardware and software infrastructure

• Advances in data storage, processing and information extraction are critical success factors, and fundamentally change how science gets done

• Microsoft is interested in participating in developing breakthrough technologies

• Microsoft is building a life-sciences platform (Amalga Life Sciences) with similar requirements• Including research on federated cross domain

authentication and access control

2

Microsoft Research Experience• Individuals involved in this project have broad

and relevant research experience. Participants’ include:– Dr. Steven White: 3D registration and imaging

platform architecture– Dr. Allen Brown: Life-sciences computational

platforms and data security– Dr. Antonio Criminisi: Anatomical labeling from 3D

data and image recognition– Dr. Martin Will: Life-sciences data management,

analytics, geometry and graphics processing.3

Collaboration with Neuroscience Team

• Microsoft will work with the DataSpace neuroscience team (e.g., Dr Gabrieli’s group):– Applying labeling and registration on

neuroimaging data – Enabling cross-site data sharing and reuse.– Testing and evaluating platform architectures for

remote data analysis

4

Collaboration on Architecture• The DataSpace system will be developed in an

open collaboration between teams to enable sharing of both data and algorithms while allowing parties to protect the privacy and integrity of each.

• Microsoft’s Amalga platform is a federated and loosely coupled architecture ideally suited for research programs like DataSpace

• Microsoft will encourage and support adoption of open standards (e.g. RDF, SPARQL) to facilitate interoperation of systems and sharing of data and algorithms.

5

Backup slide

6

Microsoft Approach to Claims Based Security• Single sign on• Decouple services from authentication• Support different types of credentials• Support federated scenarios for cross

domain authentication and access control

• Facilitate identity delegation• Facilitate claim mapping

Token:A cryptographically signed data unit that expresses one or more claims.

Service(Relying PartyService User

IdentityProvider

3) Authentica

te, Acq

uire Toke

n

4) Token iss

ued with

claim

s

5) Invoke Service using the claims

1) Acquire claim requirements

2) Return claim requirements7

Image /Ontology Mapping Scenarios

Clinical(Amalga)

Pharma (ALS)

Neuroscience (DataSpace)

Indexing/Search X X X

QC/Validation X

Cross-image (longitudinal) X

Cross-image (population) X

Visualization X

Planning (e.g. surgery) X

Data aggregation X X X

Pathology detection X X X

8