- Open Access
CaGrid Workflow Toolkit: A taverna based workflow tool for cancer grid
© Tan et al; licensee BioMed Central Ltd. 2010
- Received: 15 July 2010
- Accepted: 2 November 2010
- Published: 2 November 2010
In biological and medical domain, the use of web services made the data and computation functionality accessible in a unified manner, which helped automate the data pipeline that was previously performed manually. Workflow technology is widely used in the orchestration of multiple services to facilitate in-silico research. Cancer Biomedical Informatics Grid (caBIG) is an information network enabling the sharing of cancer research related resources and caGrid is its underlying service-based computation infrastructure. CaBIG requires that services are composed and orchestrated in a given sequence to realize data pipelines, which are often called scientific workflows.
CaGrid selected Taverna as its workflow execution system of choice due to its integration with web service technology and support for a wide range of web services, plug-in architecture to cater for easy integration of third party extensions, etc. The caGrid Workflow Toolkit (or the toolkit for short), an extension to the Taverna workflow system, is designed and implemented to ease building and running caGrid workflows. It provides users with support for various phases in using workflows: service discovery, composition and orchestration, data access, and secure service invocation, which have been identified by the caGrid community as challenging in a multi-institutional and cross-discipline domain.
By extending the Taverna Workbench, caGrid Workflow Toolkit provided a comprehensive solution to compose and coordinate services in caGrid, which would otherwise remain isolated and disconnected from each other. Using it users can access more than 140 services and are offered with a rich set of features including discovery of data and analytical services, query and transfer of data, security protections for service invocations, state management in service interactions, and sharing of workflows, experiences and best practices. The proposed solution is general enough to be applicable and reusable within other service-computing infrastructures that leverage similar technology stack.
- Service Discovery
- Service Invocation
- Globus Toolkit
- Proxy Certificate
- Data Pipeline
For years, web-based systems have provided biological and medical scientists access to various data and computation resources to facilitate their scientific exploration. To achieve a fully functional data pipeline, scientists used to switch among browsers, copy from one web page, convert the obtained data and paste it to another one. The emergence of web services made their functionality accessible by computer programs which helped automate the data pipeline that was previously performed manually. Today, the number of available web services has grown significantly. BioCatalogue , a curated catalogue of life science web Services, has collected more than 1400 services from over 100 providers, and a paper  from 2006 reported 3000 publicly available services in molecular biology.
Cancer Biomedical Informatics Grid (caBIG) , sponsored by the US National Cancer Institute (NCI), is an information network enabling cancer researchers and physicians to share data and knowledge, and thus accelerate the discovery of new cancer treatment methods. Cancer Grid (caGrid)  is the underlying infrastructure of caBIG, and is built on the Globus toolkit Grid middleware . CaGrid consists of web services as virtualized access points of data and analytical resources related to cancer detection, diagnosis, treatment and prevention. As of May 2010, caGrid hosts more than 140 data and analytical services. Despite the diversity of cancer research related resources, caGrid organizes them into two categories: data resources are exposed as data services; analysis applications are exposed as analytical services. Typical data services include human biospecimens, entrez genes, microarray, etc; typical analytical services include gene alignment, clustering, classification, principle component analysis, etc. Most of caGrid services are accessible by all researchers without any security requirement. Some of them limit their access to certain caGrid users, but researchers can obtain a caGrid credential easily and contact service owners for specific access permit.
Due to diverse purposes and approaches of scientific investigations performed by researchers, few web services alone can fulfill the requirement of an in-silico experiment. Instead, it is often required that services are composed and orchestrated in a given sequence to realize data pipelines, which are often called scientific workflows.
Many scientific workflow systems, such as Kepler , Triana , Trident  and Taverna , and parallel scripting systems, such as Swift  and Pegasus , are available today to aid the execution of workflows. All these systems support the composition of local or remote executable components and execute them in a predefined sequence.
Service discovery -where to find services that are relevant to the scientific investigation of the user.
Data access - what kind of data (data types) can be obtained from a given service and how to transfer data from and to it.
Service interaction - how to invoke services and maintain the session information in multi-steps interactions.
Security enforcement - how to enforce authentication and authorization in service invocations and privacy and integrity in data transfers.
Knowledge sharing - how to share workflows with the community, how to find out what other researches in the field are doing and to leverage the best practice from them.
We have followed two principles in the design and development of the toolkit. Firstly, instead of reinventing the wheel, we have adopted the software tools which are widely used by the life science community, namely Taverna and myExperiment . We have provided added value to these tools by offering more advanced features in form of plug-ins that make caGrid infrastructure accessible from Taverna. Secondly, we have worked closely with scientists from caBIG to fulfill their needs, while making our tool applicable to a broader user community that embraces a similar service infrastructure.
Correspondence between logical components and Taverna plug-ins
cagrid-activity plug-in contains a service discovery tool
A GUI to build CQL clauses
An activity to transfer files between services and clients
cagrid-activity plug-in takes care of stateful service invocation
cagrid-activity plug-in takes care of secured service invocation
An activity to delegate credential
This component simply uses myExperiment website.
In a typical service-oriented infrastructure like caGrid, the address of a service of interest is not usually known to end users. This makes the task of locating appropriate services a challenge for the user, given the fact that caGrid now comprises more than 140 services storing different data or providing varied analysis capabilities, which are deployed at geographically distributed institutions.
On top of the Globus Index Service , caGrid provides the mechanism to discover services of interest by querying a live service registry. All caGrid services are required to publish the metadata that describes their functionality using the WSRF (Web Service Resource Framework) , a family of specifications for web services to expose state and property information. This information is aggregated in the registry Index Service and used to find out information about the currently running services and their current WSDL addresses. Clients can then query this aggregated information using standard WSRF operations.
The services' descriptive metadata includes service name, WSDL, hosting research center, operations with associated data types, and the semantic annotation on the aforementioned metadata. Service discovery component locates caGrid services by querying the Index Service. It provides three types of querying methods leveraging caGrid's metadata and indexing infrastructure:
String based querying performs free text searching in service descriptions. For example, one can search for services whose descriptions contain string 'array'.
Property based querying performs search towards pre-defined service properties. For example, to locate services hosted by NCICB (the NCI Center for Bioinformatics), or whose name is CaArraySvc, etc.
Semantic based querying. caGrid uses an ontology called NCI Enterprise Vocabulary Services (EVS)  to annotate services and their associated data. A vocabulary item in EVS is called Concept and the Concept Code is used to uniquely identify it. Semantic based approach allows users to locate services which are annotated with some concept code (for example, C44282 representing concept Microarray).
caGrid Data Service  is used to share cancer research data. CaGrid data services implement an object-oriented virtualization on top of the backend data source. Based on this virtualization, data items can be searched for by their object classes, properties, and association relations. caGrid also defines a XML based object oriented query language called caGrid Query Language (CQL)  for querying purpose. Data access component provides a GUI to build CQL queries against data services, and users can browse the data object model graph and build a CQL clause easily without knowing the syntax of it.
Another feature offered by the data access component is the data transfer tool called caGrid transfer. It leverages the caGrid transfer utility  to move files between services and clients using HTTP protocol, without embedding them in SOAP messages. In our practice, we found this is more efficient since it avoids data serialization or deserialization and saves a lot of memory on both client and server side.
CaGrid services use WSRF extension to enable stateful communications with clients. Service invocation component implements WSRF specification so that it can interact with services in a stateful manner. This feature is extremely useful in a multi-step interaction with a service, which is quite common in scientific applications. For example, a scientist submits a data set to a caGrid service to run a computation-intensive task. Since the computation usually takes some time in the backend system, result cannot be returned in a synchronous manner. In this case the service chooses to synchronously return an EPR (End Point Reference) which identifies the state of the service interaction. At a later time, the scientist uses the EPR as a handler to query the status of the task that he submitted earlier, and obtain the result when it is ready. The WSRF implementation on the server side uses the EPR to identify the instance of the service and return the specific result data appropriately. The issuance and management of an EPR is handled by the Globus toolkit and the service invocation component, and is transparent to users.
Security is an important aspect in biomedical applications. Scientists want to ensure the privacy, integrity, authentication and authorization in the sharing of data and computation resources in a multi-institutional environment. For example, scientists may constrain the access to their data to certain organizations or groups of users (authentication and authorization); they may want to access their data in an encrypted way so no other people can intercept the content (privacy); they may also want an assurance that the data the recipient gets is exactly the same as sent by the sender (integrity). All these issues have been addressed by the Grid Security Infrastructure (GSI)  in the Globus toolkit. GSI leverages Public Key Infrastructure (PKI) and X.509 certificates  to achieve these security requirements.
caGrid devised the Grid Authentication and Authorization with Reliably Distributed Services (GAARDS)  as an extension to the GSI to provide services and tools for the administration and enforcement of security policies in caGrid. Security enforcement component (component (4) in Figure 1) allows users to log in to caGrid, obtain a grid credential from the Authentication Service, store it locally and use it for subsequent service invocations for the lifetime of the credential (effectively achieving single sign-on). In addition to this single-sign-on feature, the security enforcement component also allows credential delegation so that a service can act on behalf of the user. For example, the Federated Query Processor (FQP) service can use a delegated credential from a user, query multiple data services on the user's behalf, aggregate the results and forward them back to the user. More comprehensive explanation and an example are given in the results section.
myExperiment  is a sister project of Taverna and a web-based collaborative platform for sharing workflows and related research objects such as data items, papers, software bundles, etc. Knowledge sharing component simply uses myExperiment website to publish the workflows  built and used by caGrid community. These workflows contain detailed descriptions of what the workflows are set to achieve and instructions on how to use them (e.g. what data to use as input). They also embed knowledge on how to use individual services as well as how to orchestrate multiple services into a full-fledged data pipeline. These workflows range from simple tasks such as querying microarray data and retrieving medical images, to full-fledged routines such as federated query over multiple data sources and lymphoma type prediction (see Scenario 4 in the Results section). For space limit we do not iterate over all the workflows and users are encouraged to visit the link given in  to find the ones they are interested in. These workflows are modelled in a graphical way and organized into meaningful modules, so that they can easily be reused out of the box, or be modified and repurposed.
In this section, we show the usage of these plug-ins through several typical application scenarios. A more complete list of functions can be found from the user manual and more example workflows from myExperiment . For a more complete reference on how to use other types of services shown in Figure 1, please refer to [2, 23, 24].
Scenario 1: service discovery
Scenario 2: access of caArray data using cql-builder and cagrid-transfer
caArray [25, 26] is an open-source, web and programmatically accessible microarray data management system developed by caBIG. Since it acquires, disseminates and aggregates a large volume of cancer related array data, cancer researchers in caBIG frequently start their in-silico investigation by querying and retrieving data from caArray, and subsequently analyze them using tools and services on and off the caGrid.
In the CQL builder GUI (the upper dialog of Figure 5), users can choose which service to query by giving the service's URL, and then its object-oriented data model is populated and ready to be selected. Users can select one of them (gov.nih.nci.caarray .domain.file.CaArrayFile) and edit the criteria clause (the GUI to edit query criteria is shown in the lower part of Figure 5).
Scenario 3: secured query and credential delegation
The caGrid Federated Query Processor (FQP) service provides a mechanism to perform distributed queries over multiple data services and result aggregation. FQP is a secure service so that a user who invokes it needs to use his X.509 certificate to encrypt or sign the invocation message. However, it is not sufficient that the FQP authenticates the invoker, since the FQP subsequently needs to query multiple data services on behalf of the invoker. Therefore the FQP must be supplied with the invoker's credential so that those data services can give FQP the same privileges they would give to the original invoker.
GSI introduces X.509 proxy certificates  that allow a user (the service invoker in our case) to assign dynamically a new X.509 identity to an entity (the FQP in our case) and then delegate a subset of his rights to that entity. Users create a proxy certificate by issuing a new X.509 certificate signed using their own credentials instead of involving a CA. In caGrid, the Credential Delegation Service (CDS) is a WSRF-compliant Grid service that enables users/services (delegator) to delegate their Grid credentials to other users/services (delegatee) such that the delegatee(s) may act on the delegator's behalf.
Scenario 4: lymphoma type prediction as a complex case
Here we describe a real-life workflow built for caBIG users to illustrate a fairly complex scenario. The workflow enables cancer diagnosis based on microarray analysis .
Several other Taverna extensions for specific uses exist, such as CDK-Taverna  and an R-extension . CDK-Taverna is an extension to access a cheminformatics library called CDK, and the R-extension allows users to submit a statistical calculation job to a remote R server. The caGrid extension of Taverna is implemented from the perspective of service computing, enabling users to access a broad range of remote services in a more standard, secure and scalable manner. In this way scientists can greatly improve their productivity by accessing powerful information provision tools and automate their data analysis, without knowledge of, or control over, the internal workings of those tools. In addition to caGrid services, we have successfully applied the caGrid Workflow Toolkit in other projects which use similar services technology stack, for example, the CardioVascular Research Grid (CVRG) . This effort is part of the Service-oriented Science mission .
New challenges rise in the caBIG community when more users rely on the caGrid Workflow Toolkit to document and execute their in-silico experiments. While the current toolkit offers day-to-day functions to search, compose, orchestrate services and share workflows, it does not address much of knowledge transfer and reuse. A framework called CaaS (Composition-as-a-Service)  is positioned to overcome the isolated nature of current service composition approaches in which knowledge can neither accumulate nor be shared among people who do similar research. In short, CaaS is a recommendation framework that provides composition recommendations to stakeholders and collects feedback from them. It leverages cutting edge technologies like social network analysis, web 2.0, recommendation systems, etc.
In biomedicine and bioinformatics, service computing infrastructure now plays a key role in the integration of various data and computational resources in a uniformed manner. Workflow technology is widely used in the orchestration of multiple services to facilitate in-silico research. By extending the Taverna Workbench, caGrid Workflow Toolkit provided a comprehensive solution to compose and coordinate services in caGrid, which would otherwise remain isolated and disconnected from each other. Using it users can access more than 140 services and are offered with a rich set of features including discovery of data and analytical services, query and transfer of data, security protections for service invocations, state management in service interactions, and sharing of workflows, experiences and best practices. Although we currently focus on application domains such as cancer (caBIG) and cardiovascular (CVRG), the proposed solution does not limit itself to any specific application and general enough to be applicable and reusable within other service-computing infrastructures.
* Project name: caGrid Workflow Toolkit
* Project home page: http://wiki.cagrid.org/display/workflow/
* Operating system(s): Platform independent
* Programming language: Java
* Other requirements: Java 1.6.0 or higher, http://java.sun.com/. Taverna 2.1.2,
* License: caBIG® Open Source Software License caGrid 1.3,
* Any restrictions to use by non-academics: none
We thank caBIG community for their help in various use cases, the caArray team from the National Cancer Institute for the help in using caArray Grid service, and the genePattern team from the Broad Institute of MIT and Harvard for the help in using genePattern Grid services. We also thank Ms. Monika Machunik's contribution to cql-builder, and the Google Summer of Code program for the sponsorship. This project has been funded in part with Federal funds from the National Cancer Institute, National Institutes of Health, under Contract No. N01-CO-12400.
- Bhagat J, Tanoh F, Nzuobontane E, Laurent T, Orlowski J, Roos M, Wolstencroft K, Aleksejevs S, Stevens R, Pettifer S, et al.: BioCatalogue: a universal catalogue of web services for the life sciences. Nucl Acids Res 2010, gkq394.Google Scholar
- Hull D, Wolstencroft K, Stevens R, Goble C, Pocock M, Li P, Oinn T: Taverna: a tool for building and running workflows of services. Nucleic acids research 2006, 34: W729-W732. 10.1093/nar/gkl320View ArticlePubMedPubMed CentralGoogle Scholar
- Von Eschenbach A, Buetow K: Cancer Informatics Vision: caBIG. Cancer Informatics 2006, 2: 22.PubMed CentralGoogle Scholar
- Saltz J, Kurc T, Hastings S, Langella S, Oster S, Ervin D, Sharma A, Pan T, Gurcan M, Permar J, et al.: e-Science, caGrid, and Translational Biomedical Research. Computer 2008, 41: 58–66. 10.1109/MC.2008.459View ArticlePubMedPubMed CentralGoogle Scholar
- Foster I: Globus Toolkit Version 4: Software for Service-Oriented Systems. Journal of Computer Science and Technology 2006, 21: 513–520. 10.1007/s11390-006-0513-yView ArticleGoogle Scholar
- Ludäscher B, Altintas I, Berkley C, Higgins D, Jaeger-Frank E, Jones M, Lee E, Tao J, Zhao Y: Scientific Workflow Management and the Kepler System. Concurrency and Computation: Practice & Experience 2006, 18: 1039–1065.View ArticleGoogle Scholar
- Taylor I, Shields M, Wang I, Harrison A: The Triana Workflow Environment: Architecture and Applications. In Workflows for E-science: Scientific Workflows for Grids. Edited by: Taylor IJ, Deelman E, Gannon DB, Shields M. Guildford: Springer; 2007:300–319.View ArticleGoogle Scholar
- Barga RS, Jackson J, Araujo N, Guo D, Gautam N, Grochow K, Lazowska E: Trident: Scientific Workflow Workbench for Oceanography. 2008 IEEE Congress on Services - Part I 2008, 465–466. full_textView ArticleGoogle Scholar
- Zhao Y, Hategan M, Clifford B, Foster I, von Laszewski G, Raicu I, Stef-Praun T, Wilde M: Swift: Fast, Reliable, Loosely Coupled Parallel Computation. 2007 IEEE Congress on Services 2007, 199–206. full_textView ArticleGoogle Scholar
- Deelman E: Pegasus: A framework for mapping complex scientific workflows onto distributed systems. Scientific Programming 2005, 13: 219–237.View ArticleGoogle Scholar
- Tan W, Foster I, Madduri R: Combining the Power of Taverna and caGrid: Scientific Workflows that Enable Web-Scale Collaboration. IEEE Internet Computing 2008, 12: 61–68. 10.1109/MIC.2008.120View ArticleGoogle Scholar
- De Roure D, Goble C, Stevens R: The design and realisation of the Virtual Research Environment for social sharing of workflows. Future Generation Computer Systems 2009, 25: 561–567. 10.1016/j.future.2008.06.010View ArticleGoogle Scholar
- Globus Index Service[http://www.globus.org/grid_software/monitoring/index-service.php]
- Foster I, Czajkowski K, Ferguson DE, Frey J, Graham S, Maguire T, Snelling D, Tuecke S: Modeling and managing State in distributed systems: the role of OGSI and WSRF. Proceedings of the IEEE 2005, 93: 604–612. 10.1109/JPROC.2004.842766View ArticleGoogle Scholar
- NCI Enterprise Vocabulary Services (EVS)[https://cabig.nci.nih.gov/concepts/EVS/]
- Saltz J, Oster S, Hastings S, Langella S, Kurc T, Sanchez W, Kher M, Manisundaram A, Shanbhag K, Covitz P: caGrid: design and implementation of the core architecture of the cancer biomedical informatics grid. Bioinformatics 2006, 22: 1910–1916. 10.1093/bioinformatics/btl272View ArticlePubMedGoogle Scholar
- Common/caGrid Query Language (CQL)[http://cagrid.org/display/dataservices/CQL]
- caGrid Transfer[http://cagrid.org/display/transfer/]
- Welch V, Siebenlist F, Foster I, Bresnahan J, Czajkowski K, Gawor J, Kesselman C, Meder S, Pearlman L, Tuecke S: Security for Grid Services. 12th IEEE International Symposium on High Performance Distributed Computing 2003, 48–57. full_textGoogle Scholar
- Sotomayor B, Childers L: Globus Toolkit 4: Programming Java Services. Morgan Kaufmann; 2006.View ArticleGoogle Scholar
- Langella S, Hastings S, Oster S, Pan T, Sharma A, Permar J, Ervin D, Cambazoglu BB, Kurc T, Saltz J: Sharing Data and Analytical Resources Securely in a Biomedical Research Grid Environment. Journal of the American Medical Informatics Association 15: 363–373. 10.1197/jamia.M2662Google Scholar
- myExperiment -- caBIG workflows[http://www.myexperiment.org/search?query=cabig&type=workflows]
- Oinn T, Greenwood M, Addis M, Alpdemir MN, Ferris J, Glover K, Goble C, Goderis A, Hull D, Marvin D, et al.: Taverna: lessons in creating a workflow environment for the life sciences. Concurrency and Computation: Practice & Experience 2006, 18: 1067–1100.View ArticleGoogle Scholar
- Taverna Workbench[http://www.taverna.org.uk/]
- Bian X, Klemm J, Basu A, Hadfield J, Srinivasa R, Parnell T, Miller S, Mason W, Kokotov D, Duncan M: Data submission and curation for caArray, a standard based microarray data repository system. In 3rd International Biocuration Conference. Nature Publishing Group; 2009.Google Scholar
- Shipp MA, Ross KN, Tamayo P, Weng AP, Kutok JL, Aguiar RCT, Gaasenbeek M, Angelo M, Reich M, Pinkus GS, et al.: Diffuse large B-cell lymphoma outcome prediction by gene-expression profiling and supervised machine learning. NATURE MEDICINE 2002, 8: 68–74. 10.1038/nm0102-68View ArticlePubMedGoogle Scholar
- Kuhn T, Willighagen E, Zielesny A, Steinbeck C: CDK-Taverna: an open workflow environment for cheminformatics. Bmc Bioinformatics 2010, 11: 159. 10.1186/1471-2105-11-159View ArticlePubMedPubMed CentralGoogle Scholar
- Li P, Castrillo J, Velarde G, Wassink I, Soiland-Reyes S, Owen S, Withers D, Oinn T, Pocock M, Goble C, et al.: Performing statistical analyses on quantitative data in Taverna workflows: An example using R and maxdBrowse to identify differentially-expressed genes from microarray data. Bmc Bioinformatics 2008, 9: 334. 10.1186/1471-2105-9-334View ArticlePubMedPubMed CentralGoogle Scholar
- CardioVascular Research Grid[http://cvrgrid.org/]
- Foster I: Service-Oriented Science. Science 2005, 308: 814–817. 10.1126/science.1110411View ArticlePubMedGoogle Scholar
- Blake MB, Tan W, Rosenberg F: Composition as a Service. IEEE Internet Computing 2010, 14: 78–82. 10.1109/MIC.2010.2View ArticleGoogle Scholar
- myExperiment - Query caArray Data Service and Retrieve files[http://www.myexperiment.org/workflows/1254]
- myExperiment - Invoke caGrid FQP securely and use credential delegation[http://www.myexperiment.org/workflows/1255]
- myExperiment - Lymphoma Type Prediction Workflow[http://www.myexperiment.org/workflows/746]
This article is published under license to BioMed Central Ltd. This is an Open Access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/2.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.