Abstract: Task scheduling in a hybrid cloud that includes a private cloud and an external cloud is performed. First a job to be performed is identified. Then, the job identified is decomposed into a set of tasks, whereby a task schedule is obtained for tasks of the set of tasks to be executed across the hybrid cloud. Next, a task to be executed in the external cloud that requires private data from the private cloud for its execution is detected from the task schedule. Finally, one or more non-anonymized portions of the private data are anonymized before execution of the detected task in the external cloud, by executing an anonymizing function from the private cloud. De-anonymization functionality may similarly be involved.

Abstract: A computer implemented method includes storing data in a server, selecting a block of data from the stored data, storing the selected block of data in a cache memory of the server, and transmitting a block availability signal to a client, the block availability signal including an identifier of the selected block of data and indicating that the selected block of data is stored in the cache memory and is available to be accessed by the client.

Abstract: A method and system for transmitting data including pieces of data. The method includes the steps of: placing a piece of data on at least one cache memory; and sending a signal indicating a presence of the piece of data on the cache memory to at least one client, where at least one of the steps is carried out by a computer device.

Abstract: A method and system for transmitting data including pieces of data. The method includes the steps of: placing a piece of data on at least one cache memory; and sending a signal indicating a presence of the piece of data on the cache memory to at least one client, where at least one of the steps is carried out by a computer device.

Abstract: Methods and apparatus are provided for provisioning an operating system image from a server (2) to an untrusted user terminal (4) via a data communications network (3). A trusted device (5) such as a pocket USB device has tamper-resistant storage (9) containing bootloader logic, for controlling booting of a user terminal, and security data. On connection of the trusted device (5) to an untrusted user terminal (4), the user terminal is booted via the bootloader logic on the trusted device. Under control of the bootloader logic, a connection is established to the server (2) via the network (3) and the server is authenticated using the security data on the trusted device (5). An operating system boot image is received from the server (2) via this connection. The boot image is used to provision an operating system image from the server (2) to the user terminal (4) for execution of the operating system at the user terminal (4).

Abstract: Data comprising a plurality of data blocks is provisioned to a distributed computing system, via a network, from remote data storage at a data-provider site. At a node computer of the distributed computing system, a network access client is provided for obtaining data blocks from the remote data storage via the network, and adaptation layer logic is provided for generating metadata for the data blocks in a file system of the distributed computing system. Also at the node computer, a copy-on-read driver is provided for accessing the remote data storage via the network access client and for accessing local data storage of the node computer. In response to a first read request corresponding to a data block from the node computer, the copy-on-read driver copies that data block from the remote data storage to the local data storage for use in the distributed computing system.

Abstract: Embodiments are directed to a computer-implemented method for ranking a proximity of data sources with one or more reference entities, which may be authoritative entities. The method comprises identifying several data sources and one or more reference entities. For each of the identified reference entities a vector of terms representative of said each of the reference entities is obtained. For each data source of the identified data sources, terms from said each data source are selected, an array comprising the selected terms can be accordingly populated, and a term frequency of terms of the vector obtained for said each of the reference entities is determined, in said array. The term frequency corresponds to the number of occurrences of said each of the terms in said array. The method ranks a proximity of the identified data sources with each of the one or more reference entities.

Abstract: The present invention is notably directed to a user portable device (10), preferably a secure tamper-proof device, comprising: a connection interface (12) enabling connection (S2) with a computer (101); a persistent memory (14); and a bootloader (16) stored on said persistent memory (14), preferably on a secure memory (141) of the device, wherein the bootloader (16): is detectable (S3) by a firmware (122) of the computer (101) upon connection (S2) of the device (10) with said computer (101) via said connection interface; and comprises instructions for said firmware (122) to load (S4) the bootloader (16) into a memory (121) of the computer (101) for subsequent execution (S5); and to interact with the firmware, upon execution at the computer (101), to: determine, in a physical storage medium (120) of said computer (101) storing a first host operating system (111-1) and a second host operating system (111-2) respectively on a first portion (120-1) and a second portion (120-2) thereof, said second portion (120-2)

Abstract: Task scheduling in a hybrid cloud that includes a private cloud and an external cloud is performed. First a job to be performed is identified. Then, the job identified is decomposed into a set of tasks, whereby a task schedule is obtained for tasks of the set of tasks to be executed across the hybrid cloud. Next, a task to be executed in the external cloud that requires private data from the private cloud for its execution is detected from the task schedule. Finally, one or more non-anonymized portions of the private data are anonymized before execution of the detected task in the external cloud, by executing an anonymizing function from the private cloud. De-anonymization functionality may similarly be involved.

Abstract: Data comprising a plurality of data blocks is provisioned to a distributed computing system, via a network, from remote data storage at a data-provider site. At a node computer of the distributed computing system, a network access client is provided for obtaining data blocks from the remote data storage via the network, and adaptation layer logic is provided for generating metadata for the data blocks in a file system of the distributed computing system. Also at the node computer, a copy-on-read driver is provided for accessing the remote data storage via the network access client and for accessing local data storage of the node computer. In response to a first read request corresponding to a data block from the node computer, the copy-on-read driver copies that data block from the remote data storage to the local data storage for use in the distributed computing system.

Abstract: Apparatus and method for scheduling event streams. The apparatus includes (i) an interface for receiving event streams which are placed in queues and (ii) a scheduler which selects at least one event stream for dispatch depending on sketched content information data of the received event streams. The scheduler includes a sketching engine for sketching the received event streams to determine content information data and a selection engine for selecting at least one received event stream for dispatch depending on the determined content information data of the received event streams. The method includes the steps of (i) determining content information data about the content of event streams and (ii) selecting at least one event stream from the event streams for dispatch depending on the content information data. A computer program, when run by a computer, causes the computer to perform the steps of the above method.

Abstract: The present invention is notably directed to a user portable device (10), preferably a secure tamper-proof device, comprising: a connection interface (12) enabling connection (S2) with a computer (101); a persistent memory (14); and a bootloader (16) stored on said persistent memory (14), preferably on a secure memory (141) of the device, wherein the bootloader (16): is detectable (S3) by a firmware (122) of the computer (101) upon connection (S2) of the device (10) with said computer (101) via said connection interface; and comprises instructions for said firmware (122) to load (S4) the bootloader (16) into a memory (121) of the computer (101) for subsequent execution (S5); and to interact with the firmware, upon execution at the computer (101), to: determine, in a physical storage medium (120) of said computer (101) storing a first host operating system (111-1) and a second host operating system (111-2) respectively on a first portion (120-1) and a second portion (120-2) thereof, said second portion (120-2)

Abstract: Auditable data distribution from a server to clients is achieved as follows. The server delivers chunks of a data file, and identifiers of the chunks, to the clients. For each chunk of the data file received by the clients, a digest is generated by the client that received the chunk, using at least a part of the chunk and further data of the client that received the chunk. The further data is known to the server. The client that received this chunk sends the digest to the server, which receives the digest. The server determines an identity of the clink that received the chunk in question, by comparing the digest to the chunks that the server has sent and to the further data known to the server. The server stores the identity of the client that received the chunk.

Abstract: A method for transmitting data between a sender queue of a sender intermediate layer of a protocol stack and a receiver queue of a receiver intermediate layer of the protocol stack. The method includes receiving a data message from a sender messaging layer. The method also includes tagging the data message with a unique identifier. The method further includes writing the data message as a data window in the sender queue of the sender intermediate layer. The method additionally includes transmitting a front data window of the sender queue of the sender intermediate layer to the receiver queue of the receiver intermediate layer. The method also includes receiving a single receipt-acknowledgement message after a receiver transport layer of the protocol stack has received all of the front data window. The method further includes receiving a commit-acknowledgement message.

Abstract: A method for transmitting data between a sender queue of a sender intermediate layer of a protocol stack and a receiver queue of a receiver intermediate layer of the protocol stack. The method includes receiving a data message from a sender messaging layer. The method also includes tagging the data message with a unique identifier. The method further includes writing the data message as a data window in the sender queue of the sender intermediate layer. The method additionally includes transmitting a front data window of the sender queue of the sender intermediate layer to the receiver queue of the receiver intermediate layer. The method also includes receiving a single receipt-acknowledgement message after a receiver transport layer of the protocol stack has received all of the front data window. The method further includes receiving a commit-acknowledgement message.

Abstract: A data processing entity that includes a mass memory with a plurality of memory locations for storing memory blocks. Each of a plurality of software images includes a plurality of memory blocks with corresponding image addresses within the software image. The memory blocks of software images stored in boot locations of a current software image are relocated. The boot blocks of the current software image are stored into the corresponding boot locations. The data processing entity is booted from the boot blocks of the current software image in the corresponding boot locations, thereby loading the access function. Each request to access a selected memory block of the current software image is served by the access function, with the access function accessing the selected memory block in the associated memory location provided by the control structure.

Abstract: A method for deploying an operating system onto a client system includes, with the client system, receiving a bootloader image from an external device in response to a request for the bootloader image and installing the bootloader. The installed bootloader is configured to provide a streaming function from the client system to both a client repository of the client system and a remote data repository and selectively redirect requests for a block of data to one of: the client repository and the remote data repository. The method further includes, with the client system, during operation of a function of the operating system, making a request for a data block of the operating system, the data block including the function, and receiving the data block from one of: the client repository and the remote repository based on availability information.

Abstract: A method for transmitting data between a sender queue of a sender intermediate layer of a protocol stack and a receiver queue of a receiver intermediate layer of the protocol stack implemented with a sliding window protocol. The method includes receiving a data message or a collection of data messages from a sender messaging layer; tagging the data message or the collection of data messages with a unique identifier; writing the data message or the collection of data messages tagged with the unique identifier as a data window in the sender queue; transmitting a front data window of the sender queue to the receiver queue; receiving a single receipt-acknowledgement message after the receiver transport layer has received all of the front data window; and receiving a commit-acknowledgement message after the receiver messaging layer has read from the receiver intermediate layer all of the front data window.

Abstract: A method for identifying a geographic location of a server. A request is delivered to the server to send back a message via a cellular network; the message of the server is received via a cell of the cellular network; cell location information about the geographic location of the cell that received the message is delivered; the cell location information is used as information about the geographic location of the server.

Abstract: A data processing entity that includes a mass memory with a plurality of memory locations for storing memory blocks. Each of a plurality of software images includes a plurality of memory blocks with corresponding image addresses within the software image. The memory blocks of software images stored in boot locations of a current software image are relocated. The boot blocks of the current software image are stored into the corresponding boot locations. The data processing entity is booted from the boot blocks of the current software image in the corresponding boot locations, thereby loading the access function. Each request to access a selected memory block of the current software image is served by the access function, with the access function accessing the selected memory block in the associated memory location provided by the control structure.