SHRINE 1.25.4, SHRINE 2.0.0, and SHRINE 3.0.0 have dedicated release note sub-pages. Prior versions below.


SHRINE 1.22.8 was released on 4/12/2017

  • WARNING: Networks will not be able to run a mix of 1.21 and 1.22.8. Nodes running SHRINE 1.22.8 will not trust messages sent by a node running SHRINE 1.21 or earlier, or vice versa. SHRINE 1.22.8 signs and verifies using the Cryptographic Message Syntax (CMS) standard instead of custom code. (SHRINE 1.22.8 is compatible with SHRINE 1.22.4.)

  • SHRINE 1.22.8 is a bug fix release
    • No limit on the number of certificates in a key store.
    • Port values for nodes are read correctly within the dashboard, allowing the hub dashboard's to present information from other dashboards in the network.
    • Fix for a low-probability bug where encoded user names and passwords could be logged (encoded) to catalina.out.
  • UPGRADE Your Host: To to JDK 8 and Tomcat 8 . Performance and security improvements in these dependencies enhance SHRINE. 

  • NEW: Better Data Steward Support To Replace Automatic Lockout
    • Aggregate counts in SHRINE are now rounded to the nearest 5, +/-10. (configurable)
      • Increased noise injected in aggregate counts from sigma 1.3 to 6.5 (now configurable)
      • Inspired by HIPPA and FIRPA
    • SHRINE nodes email an audit request digest to a data steward once every 30 queries per researcher or 30 days (configurable) 
    • A new view in the DSA to show a digest of query terms that researcher has used at a glance, enabling a data steward to compare Research Topics to Researcher Query Terms for auditing purposes
    • Configuration option to turn lockout off (defaults to on, will default to off in 1.23. We will remove the legacy lockout support in 1.24)

  • NEW: Node data service
    • Serve static node-specific static data about a given shrine node, defined in configuration
      • Inspired by the need to identify a point of contact to run an i2b2 query for cohort studies.
  • IMPROVED Support for cohort studies
    • See above
    • Unbound database storage for flagged query messages (formerly limited to 256 characters). 
    • Tests for the I2b2AdminService, used by the "data admin app" to run a local i2b2 query.

  • IMPROVED: SHRINE System Admin Dashboard
    • Now contains the Problem Log tab, which serves as a web interface table of the various problems that SHRINE reports.
    • Now contains the Remote Dashboards tab, which allows admins at a Hub to connect to the Dashboard of Downstream nodes.
    • The keystore panel will now show whether there are certificate errors between nodes , as well as report on the certificates being used.
    • Many small improvements.

  • IMPROVED: Fixed many bugs within the web client
    • Including scaling problems in the graph feature from SHRINE 1.21
    • Developed a technique to automate tests of the interaction between SHRINE's web client and the QEP

  • OTHER IMPROVEMENTS of note:
    • Bot defense at the adapter to limit queries to a researcher's throughput - 10 queries per minute and 200 per workday (configurable)
    • Dashboard and DSA sessions expire after 20 minutes
    • Replaced custom public key certificate signing with the Cryptographic Message Syntax (CMS) industry standard
  • KNOWN ISSUES: 
    • Dragging a previous query to the query builder to re-run a query will not be successful if every query result is an error. Workaround: recreate query and execute.

  • NOTE: SHRINE 1.22.8 is comprised of the following internal releases:  SHRINE 1.22.5.1, SHRINE 1.22.7.1, and SHRINE 1.22.8

SHRINE 1.22.4 was released on 1/26/2017

  • WARNING: Networks will not be able to run a mix of 1.21 and 1.22.4. Nodes running SHRINE 1.22.4 will not trust messages sent by a node running SHRINE 1.21 or earlier, or vice versa. SHRINE 1.22.4 signs and verifies using the Cryptographic Message Syntax (CMS) standard instead of custom code. 

  • UPGRADE Your Host: To to JDK 8 and Tomcat 8 . Performance and security improvements in these dependencies enhance SHRINE. 

  • NEW: Better Data Steward Support To Replace Automatic Lockout
    • Aggregate counts in SHRINE are now rounded to the nearest 5, +/-10. (configurable)
      • Increased noise injected in aggregate counts from sigma 1.3 to 6.5 (now configurable)
      • Inspired by HIPPA and FIRPA
    • SHRINE nodes email an audit request digest to a data steward once every 30 queries per researcher or 30 days (configurable) 
    • A new view in the DSA to show a digest of query terms that researcher has used at a glance, enabling a data steward to compare Research Topics to Researcher Query Terms for auditing purposes
    • Configuration option to turn lockout off (defaults to on, will default to off in 1.23. We will remove the legacy lockout support in 1.24)

  • NEW: Node data service
    • Serve static node-specific static data about a given shrine node, defined in configuration
      • Inspired by the need to identify a point of contact to run an i2b2 query for cohort studies.
  • IMPROVED Support for cohort studies
    • See above
    • Unbound database storage for flagged query messages (formerly limited to 256 characters). 
    • Tests for the I2b2AdminService, used by the "data admin app" to run a local i2b2 query.

  • IMPROVED: SHRINE System Admin Dashboard
    • Now contains the Problem Log tab, which serves as a web interface table of the various problems that SHRINE reports.
    • Now contains the Remote Dashboards tab, which allows admins at a Hub to connect to the Dashboard of Downstream nodes.
    • The keystore panel will now show whether there are certificate errors between nodes , as well as report on the certificates being used.
    • Many small improvements.

  • IMPROVED: Fixed many bugs within the web client
    • Including scaling problems in the graph feature from SHRINE 1.21
    • Developed a technique to automate tests of the interaction between SHRINE's web client and the QEP

  • OTHER IMPROVEMENTS of note:
    • Bot defense at the adapter to limit queries to a researcher's throughput - 10 queries per minute and 200 per workday (configurable)
    • Dashboard and DSA sessions expire after 20 minutes
    • Replaced custom public key certificate signing with the Cryptographic Message Syntax (CMS) industry standard

SHRINE 1.21.2 was released on 6/17/2016

  • NEW: QEP cache of queries and query results.
    • Researchers can see previous query results without waiting for a response from the SHRINE hub.


SHRINE 1.20.1 was released on 12/22/2015.

  • WARNING: Nodes running SHRINE 1.19.2 or earlier will not be able to understand messages sent by a SHRINE 1.20.1 node. Networks will not be able to run a mix of 1.19 and 1.20.
  • IMPROVED: Graphical overhaul of the SHRINE Data Steward
  • NEW: Enhanced Error Messaging
    • Error messages from SHRINE sites contain more detailed information on errors.
    • These errors will show up in the Query Status panel of the SHRINE webclient and can be clicked to provide even more information.
  • NEW: Query Audit Databases
    • Additional logging databases intended for independent auditing of the Query Entry Point (queries submitted by this site) and Adapter (all queries this site has responded to).
  • NEW: SHRINE Dashboard (Prototype)
    • Improved diagnostic information interface for SHRINE.
    • Current prototype mirrors information available at shrine/rest/happy/all.


SHRINE 1.19.2 was released on 07/07/2015.

  • Mandatory upgrade for SHRINE 1.19.x users, fixes logging of i2b2 messages that may contain sensitive information.


SHRINE 1.19.1 was released on 06/19/2015.

  • Compatible with i2b2 1.7.05. Previous versions of SHRINE are not compatible with i2b2 1.7.05 due to changes in i2b2 messaging.
    • Also tested with i2b2 1.7.01 and 1.7.03a.
  • NEW: SHRINE Data Steward Application
    • Allows researchers to attach query topic information to each of their queries.
    • Allows sites to better control and audit the use of the network.
    • Optional component not required for all networks, but is highly recommended.
    • Details on implementing the Data Steward can be found in the Upgrading SHRINE to 1.22.8 (from 1.20-1.21) article.


SHRINE 1.18.2 was released on 03/27/2015.

  • FIXED: Dragging previous query created on SHRINE 1.17.x or earlier causes webclient to hang browser.
    • This release is an optional upgrade for new sites that have started with 1.18.x, as they do not have legacy query data that would cause this bug to appear.


SHRINE 1.18.1 was released on 02/17/2015.

  • Mandatory upgrade for SHRINE 1.18.0 users, fixes security issues with obfuscated patient values.


SHRINE 1.18.0 was released on 01/26/2015.

  • NEW: Add alternate trust model for larger networks using a self-signed certificate authority. More details available here: Using a Certificate Authority for SHRINE
  • WARNING: Messaging changes are not backward-compatible with SHRINE 1.17 and earlier. Networks with a mix of 1.17 and 1.18 nodes will not be able to communicate properly!


SHRINE 1.17.1 was released on 10/30/2014.

SHRINE 1.17.0 was released on 09/26/2014.

SHRINE 1.16.2 was released on 08/12/2014.

SHRINE 1.16.1 was released on 07/07/2014.

SHRINE 1.16.0 was released on 06/27/2014.

SHRINE 1.15.0 was released on 04/04/2014.

  • No labels