i2b2 Release 1.7.11

Release Date:

...

March 6, 2019

Release Summary

Release 1.7.11 contains several new enhancements to the i2b2 kernel, many of which improve the security around signing into usability of the i2b2 WebClient. We have included some Auditing features like logging all successful and attempted logins into the i2b2 Web Client or keeping a log of all the Admin functions performed with the Admin Modulea new Identified Data Plan for PHI data and have a license model.

Highlight of Features

• Workplace folder of either: 1) ontology terms or 2) individual patients can be dragged to a query panel and all be dropped into the panel.
• Previous queries panel with a list of patients can have a single patient dragged to a query panel
• Added to web client
  • Filter List By User
  • Search Previous Queries - already exists
  • Page Through Previous Queries By Date
  • Include Auto refresh for a timed interval
• Identified Data Plan
• New license
• Upgrade to Wildly 14
• Document full SSL on database and wildfly

...

...

• i2b2 Database
• i2b2 Server (kernel)
• i2b2 Web Client
  
  

Database Drivers

The JDBC drivers were updated to the following versions.

...

Database Changes

Release 1.7.11 involves a few changes to the i2b2 Database. Some are simple an addition to the sample data that is included in the demo data that is delivered with the software while others are changes to the database structure to support new features that are included in 1.7.11

Crcdata Tables

QT_

...

PRIVILEGE

• Added new entry for the Identity Data Plan

...

Metadata Taables

TABLE_

...

ACCESS

• Added new column for the Identity Data Plan

Change Summary - Release 1.7.11

Did you know?

• Changes to the i2b2 server & database are listed under i2b2 Kernel (Core) Software
• Changes to the i2b2 Web Client are listed under i2b2 Web Client Software
• Additional information about the new features can be found in the Feature Details - Release 1.7.11 section located this Change Summary section.

...

Feature Details - Release 1.7.11

New Feature: Role-based Ontology Protection

...

New Feature: Workplace Folder drag and drop

Now you can drag a workplace folder to the query tool, the folder can contain sub folders.   All the concepts, previous queries, and individual patients will be displayed in the panel.

Below is the workplace with combination of available items

Image Added                    

After the drag and drop to the query panel the list of all the items are displayed

Image Added

New Feature: Individual Patient drag and drop from Previous Query Panel

Once a patient set is created, that patient can be dragged and dropped to the Query Tool Panel

Below is a patient set with 2 patients

Image Added

After drag and drop of the individual patient to the query tool panel

Image Added

New Feature: Previous Queries Upgrade in Web Client

...

The i2b2 software now officially supports WildFly 14. The primary advantages are the faster install/upgrade of i2b2 as a pre-packaged collection (WAR) and managed data source connections/pooling.

New Feature: Inter-CELL SSL Setup

Create server and client certificates (Wildfly 10 & 14)

The keytool utility stores the keys and certificates in a file termed as keystore, a repository of certificates used for identifying a client or a server. Typically, a keystore contains one client or one server's identity, which are protected by using a password.

Create a Self Signed Certificate

You can create a certificate for your server using the following command:

Now let's copy this keystore into the configuration folder of the application server:

Now export the server certificate in a file called server.crt:

Now import the cert into the CA for the Java JRE:

In /opt/{wildfly} in bin run add-user.sh to create user and select (a) management user

Wildfly 10 Setup

In Wildfly 10 run jboss-cli.sh

Connect to the server

Start by creating a Security Realm which will contain the keystore and trustore references

Next, for one-way SSL, set the path to the keystore, along with the keystore path and password:

Finally, set the value of Undertow's https listener to your Security Realm:

If the above fails edit the standalone.xml and add right after http-listener

                <https-listener name="default-https" security-realm="SSLRealm" socket-binding="https"/>

Wildfly 14 Setup

In Wildfly 14 run jboss.cli.sh

Connect to the server

Finally, set the value of Undertow's https listener to your Security Realm:

 Both Wildfly 10 and 14

Add the following to the axis2.xml file right after the   <transportReceiver name="http"

   <transportReceiver name="https"

                       class="org.apache.axis2.transport.http.AxisServletListener"/>

Change the crc.properties, ontology.properties and workplace.properties files to point to the https://localhost:8443

Database Changes

Change all the pm_cell_data within the PM Database to https://localhost:8443

Image Added

After all the cells have been updated it should look like below.

Image Added

Webclient Changes

Webclient, if using self-signed cert add the following to the index.php

        curl_setopt($proxyRequest, CURLOPT_SSL_VERIFYHOST, 0);

        curl_setopt($proxyRequest, CURLOPT_SSL_VERIFYPEER, 0);

Also into the index.php add the new url to the whitelist such as:

$WHITELIST = array(

        "http" . (($_SERVER['SERVER_PORT'] == '443') ? 's' : '' ) . "://" . $_SERVER['HTTP_HOST'],

        "http://services.i2b2.org",

        "http://127.0.0.1:9090",

        "http://127.0.0.1:8080",

        "http://127.0.0.1",

        "http://localhost:8080",

        "http://localhost:9090",

        "https://localhost:8443",

        "http://localhost"

);

Updated: i2b2 License

The i2b2 software is now made available under the terms of the Mozilla Public License (MPL) version 2.0. i2b2 is also distributed under the terms of the Healthcare Disclaimer addendum.

...