Poster Number
16
Poster Title
REMS: Enabling Scalable and Standards-Compliant Access Control for Sensitive Research Data
Authors
Meeri Hakala, Jaakko Leinonen, Tommi Nyrönen (CSC - IT Center for Science)
Abstract
The Resource Entitlement Management System (REMS) is a platform for managing access to research resources, particularly controlled-access datasets. Upon identifying a relevant dataset, users authenticate via federated identity, complete a data access application, accept licence terms, and submit the request for review. REMS then routes the application to the appropriate data access committee, streamlining the authorisation workflow.
REMS is a reference implementation of the GA4GH Passport standard (v1), designed to communicate access decisions to relying systems such as secure processing environments. These decisions are encoded using the GA4GH Visa format, enabling machine-readable access rights and enhancing interoperability across heterogeneous infrastructures. REMS also supports the Data Use Ontology (DUO), reducing manual processing in data access workflows.
To support usability, REMS provides web interfaces for both applicants and resource owners, supplemented by detailed documentation. An API is also available for querying access rights associated with authenticated users.
REMS has been adopted by multiple organisations in Finland and internationally. Its modular architecture and standards-based design allow it to accommodate diverse access control requirements across research domains and infrastructures.
REMS is a reference implementation of the GA4GH Passport standard (v1), designed to communicate access decisions to relying systems such as secure processing environments. These decisions are encoded using the GA4GH Visa format, enabling machine-readable access rights and enhancing interoperability across heterogeneous infrastructures. REMS also supports the Data Use Ontology (DUO), reducing manual processing in data access workflows.
To support usability, REMS provides web interfaces for both applicants and resource owners, supplemented by detailed documentation. An API is also available for querying access rights associated with authenticated users.
REMS has been adopted by multiple organisations in Finland and internationally. Its modular architecture and standards-based design allow it to accommodate diverse access control requirements across research domains and infrastructures.
Digital Poster