Abstract: Some embodiments may facilitate boot-specific key access to perform cryptographic operations. A first boot record and a second boot record may be generated independently in response to a request to boot a virtual device. The first and second boot records may be compared and in response to a match between the first boot record and the second boot record, an identify certificate may be obtained. Authorization to access and use a key for cryptographic operations may be obtained in response to a verification of the identity certificate by a cryptographic processor.

Abstract: Latency experienced by a user of a client device may be reduced by preloading virtual devices in anticipation of a connection request from the client device. For example, a plurality of virtual devices may be partially loaded prior to a connection request from a client device. In response to the connection request from the client device, a user associated with the client device may be identified and user profile information associated with the user may be retrieved. Based on the retrieved user profile information associated with the user, a virtual device, from among the plurality of preloaded virtual devices, may be loaded, such that the loading of the virtual device is complete and is specific to the user of the client device.

Abstract: Some embodiments may facilitate boot-specific key access to perform cryptographic operations. A first boot record and a second boot record may be generated independently in response to a request to boot a virtual device. The first and second boot records may be compared and in response to a match between the first boot record and the second boot record, an identify certificate may be obtained. Authorization to access and use a key for cryptographic operations may be obtained in response to a verification of the identity certificate by a cryptographic processor.

Abstract: Reduction in latency experienced by a user of a client device may be facilitated by latency-based selection of a virtual device platform. A latency associated with each of the virtual device platforms may be determined. A first virtual device platform, from the virtual device platforms, may be selected for connecting to the client device, for example, based on the determined latencies. It may be determined whether the first virtual device platform includes user profile information associated with the user. Based on the determination that the first virtual device platform does not include the user profile information, the user profile information may be caused to be transferred to the first virtual device platform from another virtual device platform. The first virtual device platform may be caused to load a virtual device associated with the client device based on the user profile information.

Abstract: Latency experienced by a user of a client device may be reduced by predictively loading virtual devices in anticipation of a connection request from the client device. For example, a time at which the client device will connect to a virtual device platform may be predicted. The time may be predicted based on a connection pattern associated with the client device. User profile information of a user associated with the client device may be retrieved, and a virtual device specific to the user may be loaded based on the user profile information. The loading of the virtual device may be performed prior to the predicted time and in response to the connection request from the client device, information associated with the virtual device may be accessed by the client device.

Abstract: Latency experienced by a user of a client device may be reduced by preloading virtual devices in anticipation of a connection request from the client device. For example, a plurality of virtual devices may be partially loaded prior to a connection request from a client device. In response to the connection request from the client device, a user associated with the client device may be identified and user profile information associated with the user may be retrieved. Based on the retrieved user profile information associated with the user, a virtual device, from among the plurality of preloaded virtual devices, may be loaded, such that the loading of the virtual device is complete and is specific to the user of the client device.

Abstract: Systems, methods and computer program products that enable efficient roaming of virtual mobile devices. In one embodiment, multiple PoP locations having a set of common master images are maintained. A communication from a mobile device received at a central facility identifies a user, a location and a type of the mobile device. The central facility determines performance measures for the PoP locations and identifies a preferred PoP location in response to the communication. If the preferred PoP location has available capacity, the central facility directs the preferred PoP location to provision resources and instantiate a virtual device from a selected master image corresponding to the mobile device. If the preferred PoP location persistently stores a user data volume for the user, the virtual device is attached to the stored user data volume. Otherwise, data is transferred from the user's data volume to a cache attached to the virtual device.

Abstract: Systems, methods and computer program products that enable efficient roaming of virtual mobile devices. In one embodiment, multiple PoP locations having a set of common master images are maintained. A communication from a mobile device received at a central facility identifies a user, a location and a type of the mobile device. The central facility determines performance measures for the PoP locations and identifies a preferred PoP location in response to the communication. If the preferred PoP location has available capacity, the central facility directs the preferred PoP location to provision resources and instantiate a virtual device from a selected master image corresponding to the mobile device. If the preferred PoP location persistently stores a user data volume for the user, the virtual device is attached to the stored user data volume. Otherwise, data is transferred from the user's data volume to a cache attached to the virtual device.

Abstract: Systems, methods and computer program products that enable efficient roaming of virtual mobile devices. In one embodiment, multiple PoP locations having a set of common master images are maintained. A communication from a mobile device received at a central facility identifies a user, a location and a type of the mobile device. The central facility determines performance measures for the PoP locations and identifies a preferred PoP location in response to the communication. If the preferred PoP location has available capacity, the central facility directs the preferred PoP location to provision resources and instantiate a virtual device from a selected master image corresponding to the mobile device. If the preferred PoP location persistently stores a user data volume for the user, the virtual device is attached to the stored user data volume. Otherwise, data is transferred from the user's data volume to a cache attached to the virtual device.

Abstract: Methods, systems, and products are provided that display memory statistics for a keydrive that do not require the keydrive to be plugged into another device. Displaying memory statistics according to embodiments of the present invention include receiving a command resulting in a change to the memory usage of the keydrive, calculating memory statistics describing the current state of memory usage of the keydrive, storing the memory statistics in memory on the keydrive, and displaying the memory statistics on a display on the keydrive. Calculating memory statistics describing the current state of memory usage of the keydrive may be carried out by calculating a total memory usage of the keydrive. Calculating memory statistics describing the current state of memory usage of the keydrive may also be carried out by calculating a percent of total memory used.

Abstract: Methods, systems, and products are provided that display memory statistics for a keydrive that do not require the keydrive to be plugged into another device. Displaying memory statistics according to embodiments of the present invention include receiving a command resulting in a change to the memory usage of the keydrive, calculating memory statistics describing the current state of memory usage of the keydrive, storing the memory statistics in memory on the keydrive, and displaying the memory statistics on a display on the keydrive. Calculating memory statistics describing the current state of memory usage of the keydrive may be carried out by calculating a total memory usage of the keydrive. Calculating memory statistics describing the current state of memory usage of the keydrive may also be carried out by calculating a percent of total memory used.

Abstract: An improved method, apparatus, and computer instructions for identifying a memory leak in a heap. Prior to the start of the observation period, all live objects in the heap are identified to form a set of live objects by altering an indicator in the live objects. After running the system for the required amount of time or until completion of the event being monitored, the system is used to obtain the list of live objects without the altered indicator. Live objects without the altered indicators form the most likely objects associated with a memory leak.

Abstract: A system and method for high performance pre-parsed markup language is presented. A file converter performs translation between a binary data file and a markup language file. When translating a binary data file, the file converter translates binary data header tags and binary data sizes to markup language elements and markup language data sizes, respectively, and stores them in a markup language header. The file converter then translates the binary data file's records to markup language records. When a user is finished modifying the markup language file, the file converter translates the markup language file back to a binary data file by translating the markup language header tags and markup language data sizes to binary data header tags and binary data sizes, respectively, and stores them in a binary data header. The file converter then translates the markup language file's records to binary data records.

Abstract: A method and system that provides a pass through block device that is utilized to redirect all the writes bound to the system drive(s) to an overlay skin device. Reads are performed on overlay device contents and the overlay device contents take precedence over the contents of the base device. Applications of a particular theme may be installed on the overlay device. The overlay device is provided on a removable media and thus allows for creation of a set of exchangeable skins. Nested overlays are utilized to create separation of the OS data, application data, and user data. Switchable user skins enable writes into overlays and allow a user to create operating environments which can be utilized to change the use of a computer system. Since the overlays are provided on a removable media, the user only needs to substitute the overlay to switch the user's operating environment.

Abstract: A method and system that enables anti-virus scanning protection of a computer system by placing all changes/updates/installations on a system-wide skin and performing the scan and clean operation on the skin before allowing the components to be merged with those of the base system. A system-wide skin is provided, which covers the entire base system of a computer. A complete scan and clean operation is first performed on the base system before a first skin is placed over the base system. Then any new applications, files, or data are installed on the skin, which overlays the entire base system, such that no updates are actually made to the base system while the system-wide skin is present. All subsequent scan and clean operations are conducted only on the system-wide skin, thus significantly reducing the time for completing such operations. Multiple skins may be provided and clean data merged from one skin to another.

Abstract: A method and system for determining the memory utilization of a heap are provided. With the method and system, object allocations and optionally, possible memory freeing events are used to initiate a mark-and-count operation. The mark-and-count operation marks the live objects and maintains a running count of their memory bytes allocated to the live objects, referred to as a live count. The execution of the mark-and-count operation may be dependent upon various criteria including thresholds, functions of the live count, peak live counts, number of memory bytes allocated since a previous mark-and-count operation was performed, and the like. In addition to the live count, a total number of bytes allocated to objects may be maintained in order to obtain information regarding the heap memory utilization.