{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T20:34:55Z","timestamp":1772138095512,"version":"3.50.1"},"reference-count":27,"publisher":"Oxford University Press (OUP)","issue":"1","license":[{"start":{"date-parts":[[2019,6,14]],"date-time":"2019-06-14T00:00:00Z","timestamp":1560470400000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["HG006620"],"award-info":[{"award-number":["HG006620"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["CA231877"],"award-info":[{"award-number":["CA231877"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["DBI 1661497"],"award-info":[{"award-number":["DBI 1661497"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006668","name":"Oregon Health and Science University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006668","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,1,1]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:sec>\n                    <jats:title>Motivation<\/jats:title>\n                    <jats:p>Large biomedical datasets, such as those from genomics and imaging, are increasingly being stored on commercial and institutional cloud computing platforms. This is because cloud-scale computing resources, from robust backup to high-speed data transfer to scalable compute and storage, are needed to make these large datasets usable. However, one challenge for large-scale biomedical data on the cloud is providing secure access, especially when datasets are distributed across platforms. While there are open Web protocols for secure authentication and authorization, these protocols are not in wide use in bioinformatics and are difficult to use for even technologically sophisticated users.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Results<\/jats:title>\n                    <jats:p>We have developed a generic and extensible approach for securely accessing biomedical datasets distributed across cloud computing platforms. Our approach combines OpenID Connect and OAuth2, best-practice Web protocols for authentication and authorization, together with Galaxy (https:\/\/galaxyproject.org), a web-based computational workbench used by thousands of scientists across the world. With our enhanced version of Galaxy, users can access and analyze data distributed across multiple cloud computing providers without any special knowledge of access\/authorization protocols. Our approach does not require users to share permanent credentials (e.g. username, password, API key), instead relying on automatically generated temporary tokens that refresh as needed. Our approach is generalizable to most identity providers and cloud computing platforms. To the best of our knowledge, Galaxy is the only computational workbench where users can access biomedical datasets across multiple cloud computing platforms using best-practice Web security approaches and thereby minimize risks of unauthorized data access and credential use.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Availability and implementation<\/jats:title>\n                    <jats:p>Freely available for academic and commercial use under the open-source Academic Free License (https:\/\/opensource.org\/licenses\/AFL-3.0) from the following Github repositories: https:\/\/github.com\/galaxyproject\/galaxy and https:\/\/github.com\/galaxyproject\/cloudauthz.<\/jats:p>\n                  <\/jats:sec>","DOI":"10.1093\/bioinformatics\/btz472","type":"journal-article","created":{"date-parts":[[2019,6,5]],"date-time":"2019-06-05T23:19:10Z","timestamp":1559776750000},"page":"1-9","source":"Crossref","is-referenced-by-count":8,"title":["Cloud bursting galaxy: federated identity and access management"],"prefix":"10.1093","volume":"36","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4986-2157","authenticated-orcid":false,"given":"Vahid","family":"Jalili","sequence":"first","affiliation":[{"name":"Department of Biomedical Engineering, Oregon Health and Science University , Portland, OR, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Enis","family":"Afgan","sequence":"additional","affiliation":[{"name":"Department of Biology, Johns Hopkins University , Baltimore, MD, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"James","family":"Taylor","sequence":"additional","affiliation":[{"name":"Department of Biology, Johns Hopkins University , Baltimore, MD, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4583-5226","authenticated-orcid":false,"given":"Jeremy","family":"Goecks","sequence":"additional","affiliation":[{"name":"Department of Biomedical Engineering, Oregon Health and Science University , Portland, OR, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2019,6,14]]},"reference":[{"key":"2023013109495999900_btz472-B1","author":"Afgan","year":"2018"},{"key":"2023013109495999900_btz472-B2","first-page":"871","author":"Afgan","year":"2018"},{"key":"2023013109495999900_btz472-B3","doi-asserted-by":"crossref","first-page":"W537","DOI":"10.1093\/nar\/gky379","article-title":"The galaxy platform for accessible, reproducible and collaborative biomedical analyses: 2018 update","volume":"46","author":"Afgan","year":"2018","journal-title":"Nucleic Acids Res"},{"key":"2023013109495999900_btz472-B4","doi-asserted-by":"crossref","first-page":"2225","DOI":"10.1002\/cpe.3265","article-title":"Cilogon: a federated x. 509 certification authority for cyberinfrastructure logon","volume":"26","author":"Basney","year":"2014","journal-title":"Concurr. Comput. Pract. Exp"},{"key":"2023013109495999900_btz472-B5","doi-asserted-by":"crossref","first-page":"180039","DOI":"10.1038\/sdata.2018.39","article-title":"Simplifying research access to genomics and health data with library cards","volume":"5","author":"Cabili","year":"2018","journal-title":"Sci. Data"},{"key":"2023013109495999900_btz472-B6","doi-asserted-by":"crossref","first-page":"e2002654.","DOI":"10.1371\/journal.pbio.2002654","article-title":"Genes, cells, and biobanks: yes, there\u2019s still a consent problem","volume":"15","author":"Caulfield","year":"2017","journal-title":"PLoS Biol"},{"key":"2023013109495999900_btz472-B42","first-page":"26","volume-title":"Proceedings of the Practice and Experience in Advanced Research Computing 2017 on Sustainability, Success and Impact","author":"Chard","year":"2017"},{"key":"2023013109495999900_btz472-B7","doi-asserted-by":"crossref","first-page":"20170387.","DOI":"10.1098\/rsif.2017.0387","article-title":"Opportunities and obstacles for deep learning in biology and medicine","volume":"15","author":"Ching","year":"2018","journal-title":"J. R. Soc. Interface"},{"key":"2023013109495999900_btz472-B8","doi-asserted-by":"crossref","first-page":"367.","DOI":"10.1038\/s41586-018-0590-4","article-title":"Single-cell transcriptomics of 20 mouse organs creates a Tabula Muris","volume":"562","author":"Consortium","year":"2018","journal-title":"Nature"},{"key":"2023013109495999900_btz472-B9","doi-asserted-by":"crossref","first-page":"588.","DOI":"10.1038\/nbt.3496","article-title":"Secure cloud computing for genomic data","volume":"34","author":"Datta","year":"2016","journal-title":"Nat. Biotechnol"},{"key":"2023013109495999900_btz472-B10","doi-asserted-by":"crossref","first-page":"e1005772.","DOI":"10.1371\/journal.pgen.1005772","article-title":"Consent codes: upholding standard data use conditions","volume":"12","author":"Dyke","year":"2016","journal-title":"PLoS Genet"},{"key":"2023013109495999900_btz472-B11","doi-asserted-by":"crossref","first-page":"1676.","DOI":"10.1038\/ejhg.2016.115","article-title":"Registered access: a \u2018triple-a\u2019 approach","volume":"24","author":"Dyke","year":"2016","journal-title":"Eur. J. Hum. Genet"},{"key":"2023013109495999900_btz472-B12","doi-asserted-by":"crossref","first-page":"1721","DOI":"10.1038\/s41431-018-0219-y","article-title":"Registered access: authorizing data access","volume":"26","author":"Dyke","year":"2018","journal-title":"Eur. J. Hum. Genet"},{"key":"2023013109495999900_btz472-B13","volume-title":"SOA Governance: Governing Shared Services on-Premise and in the Cloud","author":"Erl","year":"2011"},{"key":"2023013109495999900_btz472-B14","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1007\/11577188_2","volume-title":"IFIP International Conference on Network and Parallel Computing","author":"Foster","year":"2005"},{"key":"2023013109495999900_btz472-B15","author":"Hogg","year":"2005"},{"key":"2023013109495999900_btz472-B16","doi-asserted-by":"crossref","first-page":"208.","DOI":"10.1038\/nrg.2017.113","article-title":"Cloud computing for genomic data analysis and collaboration","volume":"19","author":"Langmead","year":"2018","journal-title":"Nat. Rev. Genet"},{"key":"2023013109495999900_btz472-B17","doi-asserted-by":"crossref","first-page":"8.","DOI":"10.1038\/s41540-017-0011-6","article-title":"Improved prediction of parp inhibitor response and identification of synergizing agents through use of a novel gene expression signature generation algorithm","volume":"3","author":"McGrail","year":"2017","journal-title":"NPJ Syst. Biol. Appl"},{"key":"2023013109495999900_btz472-B18","first-page":"41","article-title":"Oasis WS-trust 1.4","volume":"1","author":"Nadalin","year":"2008","journal-title":"Spec. Ver"},{"key":"2023013109495999900_btz472-B19","author":"Perlman","year":"2016"},{"key":"2023013109495999900_btz472-B20","doi-asserted-by":"crossref","first-page":"245.","DOI":"10.1038\/nmeth.3732","article-title":"Integrative genomic analysis by interoperation of bioinformatics tools in genomespace","volume":"13","author":"Qu","year":"2016","journal-title":"Nat. Methods"},{"key":"2023013109495999900_btz472-B41","doi-asserted-by":"crossref","first-page":"500","DOI":"10.1038\/ng0506-500","article-title":"GenePattern 2.0","volume":"38","author":"Reich","journal-title":"Nat. Genet."},{"key":"2023013109495999900_btz472-B21","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/2.485845","article-title":"Role-based access control models","volume":"29","author":"Sandhu","year":"1996","journal-title":"Computer"},{"key":"2023013109495999900_btz472-B22","doi-asserted-by":"crossref","first-page":"e1002195.","DOI":"10.1371\/journal.pbio.1002195","article-title":"Big data: astronomical or genomical?","volume":"13","author":"Stephens","year":"2015","journal-title":"PLoS Biol"},{"key":"2023013109495999900_btz472-B40","first-page":"203","volume-title":"IEEE 12th International Conference on e-Science, Baltimore, MD","author":"Tuecke","year":"2016"},{"key":"2023013109495999900_btz472-B23","doi-asserted-by":"crossref","first-page":"114.","DOI":"10.1186\/s13073-016-0363-3","article-title":"Application of RNAi-induced gene expression profiles for prognostic prediction in breast cancer","volume":"8","author":"Wang","year":"2016","journal-title":"Genome Med"},{"key":"2023013109495999900_btz472-B24","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1016\/j.inffus.2018.09.012","article-title":"Machine learning for integrating data in biology and medicine: principles, practice, and opportunities","volume":"50","author":"Zitnik","year":"2019","journal-title":"Inf. Fus"}],"container-title":["Bioinformatics"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/bioinformatics\/advance-article-pdf\/doi\/10.1093\/bioinformatics\/btz472\/29025227\/btz472.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/bioinformatics\/article-pdf\/36\/1\/1\/48981731\/bioinformatics_36_1_1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/bioinformatics\/article-pdf\/36\/1\/1\/48981731\/bioinformatics_36_1_1.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,31]],"date-time":"2023-01-31T13:28:16Z","timestamp":1675171696000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/bioinformatics\/article\/36\/1\/1\/5514039"}},"subtitle":[],"editor":[{"given":"John","family":"Hancock","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2019,6,14]]},"references-count":27,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,1,1]]}},"URL":"https:\/\/doi.org\/10.1093\/bioinformatics\/btz472","relation":{"has-preprint":[{"id-type":"doi","id":"10.1101\/506238","asserted-by":"object"}]},"ISSN":["1367-4803","1367-4811"],"issn-type":[{"value":"1367-4803","type":"print"},{"value":"1367-4811","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2020,1,1]]},"published":{"date-parts":[[2019,6,14]]}}}