Abstract: The present invention is notably directed to a user trusted device (10), comprising: a connection interface (12) enabling connection (S2) with a computer (101); and a persistent memory (14) storing modules (15, 16, 17), which are configured, upon connection of the user trusted device (10) with said computer (101) via said connection interface (12), to: enable said computer (101) to start booting (S3, S3a) from the user trusted device (10); map (S6) firmware data to a code, the firmware data comprising program code of an initialization firmware and/or data accessible by the initialization firmware (122) of the computer while starting to boot; attest (S7-S12) trustworthiness of the code; and enable (S14) said computer (101) to complete booting from the user trusted device (10) if the code is attested. The present invention is further directed to related systems and methods.

Abstract: Various embodiments monitor a distributed software system. In one embodiment, at least one monitoring policy associated with a distributed software system is selected. A policy type associated with the monitoring policy is identified. An installer is selected based on the policy type associated with the monitoring policy. Monitoring software is installed in a computing environment utilizing the installer. The monitoring software is configured to monitor the distributed software system based on the monitoring policy.

Abstract: Methods and apparatus are provided for provisioning an operating system image from a server (2) to an untrusted user terminal (4) via a data communications network (3). A trusted device (5) such as a pocket USB device has tamper-resistant storage (9) containing bootloader logic, for controlling booting of a user terminal, and security data. On connection of the trusted device (5) to an untrusted user terminal (4), the user terminal is booted via the bootloader logic on the trusted device. Under control of the bootloader logic, a connection is established to the server (2) via the network (3) and the server is authenticated using the security data on the trusted device (5). An operating system boot image is received from the server (2) via this connection. The boot image is used to provision an operating system image from the server (2) to the user terminal (4) for execution of the operating system at the user terminal (4).

Abstract: A system and method for providing a consistent view of data stored therein, which can change dynamically in an uncoordinated way, includes a client program and a snapshot server program. The snapshot server program permits one or more client programs to request snapshots of data from the snapshot server program such that the data included in or referenced by a snapshot originates from one or more host server programs and the data is accessible to the snapshot server program, but is managed independently of the snapshot server program.

Abstract: The present invention relates to a context-based service look up, wherein a service instance, having a scope includes at least one service instance data set having a hierarchy of levels. A service consumer data set, having a hierarchy of levels is received from a service consumer, having a situation. Comparisons are made of each service consumer data set with each service instance data set, for the same level. Dependent on results of the comparisons, it is determined whether said situation of said service consumer matches said scope of said service instance.

Abstract: Holding devices for a medical device including a holder and a second component part by which the holder is coupled or adapted to be coupled are disclosed. The holder has a receiving portion into which a functional member can be detachably introduced. The holder further includes a pivot portion about which the holder is pivoted about an axis of rotation to a support of the second component part, wherein the support is movable vis-à-vis the second component part in a spring-loaded manner. The second component part includes a recess within which the pivot portion and the support are arranged so that upon pivoting the holder about the axis of rotation merely the receiving portion protrudes from the recess. Medical devices for extracorporeal blood treatment including a holding device of this type are also disclosed.

Abstract: A connector adapted to be detachably arranged in an opening of a housing of a medical device and including a connecting element to which a single-use article can be connected outside of the housing is disclosed. Via a hollow link portion the connecting element is connected to a coupling adapted to be inserted into the interior of the housing through the opening of the housing. Moreover, the connector includes a spring element adapted to be detachably arranged at the link portion so that the connector is supported at the housing to be axially resilient via the spring element. A medical device for extracorporeal blood treatment including such connector as an interface to a single-use article, for example, is also disclosed.

Abstract: The invention relates to a medical device for extracorporeal blood treatment comprising an extracorporeal blood circulation having at least one tube and at least two sensor units measuring on the tube with different operating principles, wherein portions of the tube are adapted to be coupled to the at least two sensor units for measurement. According to the invention, each sensor unit consists of a sensor-specific component and a sensor-neutral component, wherein the sensor-neutral components of the sensor units are formed to be identical whereas the sensor-specific components are different in response to the operating principle and comprise a respective specific sensor system.

Abstract: A filter holder for the support of a filter on the casing of a medical device for extra-corporal blood treatment is disclosed. The filter holder has a first grip leg and a second grip leg, which are arranged with respect to each other so that a reception area is formed between the two grip legs. The filter can be inserted into this reception area between the two grip legs, so that the filter is held in the filter holder against the force of gravity. At least one trough- or U-shaped indentation is provided on at least one grip leg, whose cross-section enables the wedging in of a hose. A medical device for extra-corporal blood treatment with such a filter holder for the reception of a filter is also disclosed.

Abstract: A computer implemented access control system, the system includes a database for storing a serialized version of an XACML permissions hierarchy. The system also includes a memory for storing an original version of the XACML permissions hierarchy, and an XACML serialization engine configured to convert the XACML permissions hierarchy into the serialized version, wherein the serialized version contains a listing of at least a portion of the predicates possible in the XACML permission hierarchy and the effect on each of the portion of the predicates.

Abstract: A method of acquiring tags using web search includes receiving a search query in a search engine, processing the search query and returning a list of candidate resources corresponding to the search query, determining a candidate resource out of the list of candidate resources, extracting tags from the search query, and tagging the candidate resource with the extracted tags.

Abstract: A process for the quantitative optical analysis of fluorescently labeled biological cells involves contacting a cell layer on a transparent support at the bottom of a reaction vessel with a solution containing the fluorescent dye. This process can also be used for improving the sensitivity in the quantitative optical analysis of a luminescent biological cell layer. Analogously, these process principles can also be used in receptor studies for the masking of the interfering background radiation in the quantitative optical analysis of fluorescently or luminescently labelled reaction components. In this case, a receptor layer at the bottom of a reaction vessel is in contact with a solution in which a fluorescent or luminescent ligand is dissolved.

Abstract: A disposable test cassette for qualitative and/or quantitative analysis of analytes, having a structured body having introduced cavities connected to one another by channels, at least one inlet for introducing a sample fluid containing the analyte, at least one reagent chamber in which one or more reagents are stored and at least one detection chamber in which a signal for detection or quantitative analysis of the analyte is detected, wherein a floor or ceiling of the detection chamber is a signal transducer or a window for detection of a signal, fluid cannot be drawn by capillary forces into the reagent chamber or to the opening, and at least the reagents in the reagent chamber are stored in dry form. Also disclosed is an apparatus for bioassaying analytes including the test cassette, and also a method for operating this apparatus.

Abstract: A system and method for providing a consistent view of data stored therein, which can change dynamically in an uncoordinated way, includes a client program and a snapshot server program. The snapshot server program permits one or more client programs to request snapshots of data from the snapshot server program such that the data included in or referenced by a snapshot originates from one or more host server programs and the data is accessible to the snapshot server program, but is managed independently of the snapshot server program.

Abstract: A computer implemented access control system, the system includes a database for storing a serialized version of an XACML permissions hierarchy. The system also includes a memory for storing an original version of the XACML permissions hierarchy, and an XACML serialization engine configured to convert the XACML permissions hierarchy into the serialized version, wherein the serialized version contains a listing of at least a portion of the predicates possible in the XACML permission hierarchy and the effect on each of the portion of the predicates.

Abstract: A method of acquiring tags using web search includes receiving a search query in a search engine, processing the search query and returning a list of candidate resources corresponding to the search query, determining a candidate resource out of the list of candidate resources, extracting tags from the search query, and tagging the candidate resource with the extracted tags.

Abstract: A system and method for processing of markup language information, such as extensible markup language (XML) based control information is disclosed. The system comprises a compression sender entity and a decompression receiver entity. The sender entity uses its internal, binary representation derived from textual XML-based protocol header and encodes the binary representation as a tag-length-value (TLV) binary value. The TLV binary value is embedded as encoded data in a specifically marked comment, which may be detected by the receiver entity. The receiver entity builds up an internal, binary data structure based on the encoded data representing the original XML data. The system avoids the usage of string data to represent a small set of well known strings and uses a more compact binary encoding which reduces space and time to process the data.

Abstract: In one embodiment, a computer-implemented method for authentication by kinematic pattern match is provided. The computer implemented method prompts a user for a kinematic input, receives an element of a kinematic pattern to form a set of received elements, and determines whether there are additional elements of the kinematic pattern. Responsive to a determination that there are no additional elements of the kinematic pattern, forms a kinematic pattern from the set of received elements and computes a signature from the set of received elements. The computer implemented method further determines whether the signature matches a predetermined value, and responsive to a determination that the signature matches a predetermined value, sends an authentication signal.

Abstract: A system and method for providing a consistent view of data stored therein, which can change dynamically in an uncoordinated way, includes a client program and a snapshot server program. The snapshot server program permits one or more client programs to request snapshots of data from the snapshot server program such that the data included in or referenced by a snapshot originates from one or more host server programs and the data is accessible to the snapshot server program, but is managed independently of the snapshot server program.

Abstract: In a process for the quantitative optical analysis of fluorescently labelled biological cells 5, a cell layer on a transparent support at the bottom 2 of a reaction vessel 1 is in contact with a solution 3 containing the fluorescent dye 4. The sensitivity of analytical detection can be considerably improved if to the fluorescent dye 4 already present in addition a masking dye 9, which absorbs the excitation light 6 for the fluorescent dye 4 and/or its emission light 7, is added to the solution 3 and/or if a separating layer 10 permeable to the solution and absorbing and/or reflecting the excitation light 6 or the emission light 7 is applied to the cell layer at the bottom 2. This process can also be used for improving the sensitivity in the quantitative optical analysis of a luminescent biological cell layer. The separating layer 10 must in this case be composed such that it has a high power of reflection for the luminescent light 11.