Poster ID
P-11
Poster Title
Passport, Please! A GA4GH-Based Trust and Access Platform for a National Hospital Network
Authors
1. Satrio Wibowo (Balai Besar Biomedis dan Genomika Kesehatan)
2. Renata Triwijaya S.Bio.Inf. (Balai Besar Biomedis dan Genomika Kesehatan)
3. Annisa Muthiah Sukirman S.Bio.Inf. (Balai Besar Biomedis dan Genomika Kesehatan)
4. Angganararas Lungidningtyas S.Bio.Inf. (Balai Besar Biomedis dan Genomika Kesehatan)
5. Irene Lorinda Indalao, PhD (Balai Besar Biomedis dan Genomika Kesehatan)
6. Indri Rooslamiati Supriadi M.Sc, Apt. (Balai Besar Biomedis dan Genomika Kesehatan)
7. Ines Atmosukarto, PhD (Balai Besar Biomedis dan Genomika Kesehatan)
2. Renata Triwijaya S.Bio.Inf. (Balai Besar Biomedis dan Genomika Kesehatan)
3. Annisa Muthiah Sukirman S.Bio.Inf. (Balai Besar Biomedis dan Genomika Kesehatan)
4. Angganararas Lungidningtyas S.Bio.Inf. (Balai Besar Biomedis dan Genomika Kesehatan)
5. Irene Lorinda Indalao, PhD (Balai Besar Biomedis dan Genomika Kesehatan)
6. Indri Rooslamiati Supriadi M.Sc, Apt. (Balai Besar Biomedis dan Genomika Kesehatan)
7. Ines Atmosukarto, PhD (Balai Besar Biomedis dan Genomika Kesehatan)
Abstract
Background. As Indonesia's Biomedical and Genome Science Initiative (BGSI) scales genomic and clinical data collection through its Generasi Sehat (GenSet) cohort and disease-based Hubs, a consistent and trusted mechanism is needed to govern access to these datasets by participating Hubs and their collaborating Spokes and Satellites across the national network.
Objective. We developed the Data Access Portal (DAP), a secure, browser-based system through which authorised hospital users can request and obtain controlled access to BGSI datasets. The DAP implements the GA4GH Passport and Visa standards, providing a foundation for authorisation across BGSI data services.
System. The DAP authenticates users through the BGSi Authorisation Service and enforces organisation-scoped, dataset-level access control. Each dataset is annotated with GA4GH Data Use Ontology (DUO) terms and is accessible only to users holding a Visa explicitly granted for that dataset. Access is governed through a Data Access Committee (DAC) workflow: hospital users submit requests for specific Visas, which DAC reviewers approve or reject through the DAC interface. All state transitions including request submission, review, grant, revocation, and account deactivation are recorded in an immutable audit log. Following approval, the DAP securely issues a cryptographically signed GA4GH Passport containing the user’s approved access grants. Authorised services, including notebook, dashboards, and analysis environments, can verify and trust the Passport when granting access to approved datasets. A parallel, DAC-reviewed airlock workflow governs the export of derived analysis outputs.
Status. The DAP is deployed as a containerised service and serves as BGSI’s controlled-access and governance layer for its national hospital network. It governs access to approved datasets and analysis services and is being further developed within the broader BGSI Trusted Research Environment (TRE).
Conclusion. Native implementation of GA4GH Passport, Visa, and DUO provides BGSI with a standards-based framework for interoperable, governed, and auditable data access. The DAP establishes a consistent foundation for TRE integration and offers a transferable model for other national genomic initiatives.
Keywords: GA4GH Passport; GA4GH Visa; DUO; data access committee; controlled access; audit logging; data airlock; Trusted Research Environment; genomic data governance; BGSI; Indonesia
Objective. We developed the Data Access Portal (DAP), a secure, browser-based system through which authorised hospital users can request and obtain controlled access to BGSI datasets. The DAP implements the GA4GH Passport and Visa standards, providing a foundation for authorisation across BGSI data services.
System. The DAP authenticates users through the BGSi Authorisation Service and enforces organisation-scoped, dataset-level access control. Each dataset is annotated with GA4GH Data Use Ontology (DUO) terms and is accessible only to users holding a Visa explicitly granted for that dataset. Access is governed through a Data Access Committee (DAC) workflow: hospital users submit requests for specific Visas, which DAC reviewers approve or reject through the DAC interface. All state transitions including request submission, review, grant, revocation, and account deactivation are recorded in an immutable audit log. Following approval, the DAP securely issues a cryptographically signed GA4GH Passport containing the user’s approved access grants. Authorised services, including notebook, dashboards, and analysis environments, can verify and trust the Passport when granting access to approved datasets. A parallel, DAC-reviewed airlock workflow governs the export of derived analysis outputs.
Status. The DAP is deployed as a containerised service and serves as BGSI’s controlled-access and governance layer for its national hospital network. It governs access to approved datasets and analysis services and is being further developed within the broader BGSI Trusted Research Environment (TRE).
Conclusion. Native implementation of GA4GH Passport, Visa, and DUO provides BGSI with a standards-based framework for interoperable, governed, and auditable data access. The DAP establishes a consistent foundation for TRE integration and offers a transferable model for other national genomic initiatives.
Keywords: GA4GH Passport; GA4GH Visa; DUO; data access committee; controlled access; audit logging; data airlock; Trusted Research Environment; genomic data governance; BGSI; Indonesia
Digital Poster