International Business Machines Corporation

Globalfoundries Inc.

Thomas Gschwind

Paolo Scotton

Andreas Schade

Michael Baentsch

Peter Buhler

Florian Rosenberg

Metin Feridun

Michael H Kalantar

Hoi Yeung Chan

Christoph Adrian Miksovic Czasch

Lakshminaraya Renganarayana

Ana Claudia Biazetti

Frank Hoering

Jochen M Kuester

Jana Koehler

Michael Moser

Mack Edward Phelps

Kimberly Lynn Gajda

Edward Joseph Dobner

Adam Barrett Darney

Brian David Pate

Tamar Eilam

John G Rooney

Luis Garcés-Erice

Michael Peter Kuyper-Hammond

Michael S Wahler

Sean G Rooney

David Clerc

Christian Gerth

Michael Kuyper

Janette Siu Jong Wong

Oleksandr Maystrenko

Wolfgang Bernhard Kleinoeder

A system and a method for determining a similarity between a first string and a second string. A sequence of edit operations are performed on the first string in order to obtain the second string may be determined. The edit operation is of a first type or a second type. The first type operation comprises a character insertion operation or character removal operation. The second type operation comprises a character maintenance operation. The first type edit operation is associated with an operation score indicative of a cost for applying the edit operation. The first type edit operation is associated with a switching score indicative whether it is immediately followed by a second type edit operation. The switching scores and/or operation scores associated with the sequence of edit operations are combined in order to obtain a combined score that is indicative of the similarity level between the first and second strings.

String similarity determination

The present disclosure relates to a method for enabling a processing of a dataset of records having a set of attributes. The method comprises: selecting a first attribute of the set of attributes and a subset of one or more second attributes of the set of attributes. Distinct values of the subset of second attributes may be determined from the dataset. For each distinct value of the determined distinct values records of the dataset that have said each distinct value may be identified, and a group of words may be formed from values of the first attribute of the identified records. Distinct word sequences may be identified in the formed groups and a level of presence of each word sequence of the word sequences in each of the formed groups may be determined. At least part of the levels of presence may be provided as metadata.

Determining metadata of a dataset

A computer-implemented method and a related system for record linkage of an incoming record to a reference data set may be provided. The method comprises providing a reference data set comprising a plurality of records, each record comprising a plurality of attributes. The method comprises further assigning each of the plurality of records an initial surrogate identifier value, assigning a plurality of block identifiers to each of the records by applying a locality sensitive hashing function to a predefined attribute of the records, resulting in the plurality of the block identifiers, and determining a final surrogate identifier value to each of the records assigned to one of the blocks such that the final surrogate identifier values in each block are uniformly distributed.

Multicriteria record linkage with surrogate blocking keys

Methods for providing the capability to resample computer system metrics, while providing improved accuracy over conventional techniques. The system and method conducts monitoring and measuring metrics of system resource consumption of a plurality of entities to generate resource consumption data, generating a report of the resource consumption data for the plurality of entities for each of a plurality of time periods, identifying a number, k, of the plurality of entities as top-k consumers of resources for each of the plurality of time periods, identifying at least one residual entity of the plurality of entities whose resource consumption is not included in the top-k entities based on residual resource consumption data of the entity, and resampling the reports of the resource consumption data corresponding to the top-k entities and to the at least one residual entity to form at least one report covering a time period.

Computing residual resource consumption for top-k data reports

A computer to boot from a user trusted device, the user trusted device comprising a connection interface enabling connection with said computer, the method comprising: enabling said computer to start booting from the user trusted device upon connection of the user trusted device with said computer via said connection interface; instructing a processor of the computer to execute virtualization sensitive code and issue completion data upon completion of execution, which completion data depends on the virtualization sensitive code and its execution by the processor; determining, based on said completion data, whether the execution was not performed in a virtualized environment; and enabling said computer to complete booting from the user trusted device upon determining that the execution was not performed in a virtualized environment. The invention is further directed to a user trusted device enabling this method and to related systems.

User trusted device for detecting a virtualized environment

Various embodiments manage deployable computing environments. In one embodiment, a system model of a computing environment that includes a set of computing resources is analyzed. The system model at least describes properties of each of the set of computing nodes and identifies a plurality of configuration operations to be executed by each of the set of computing nodes during deployment. A set of dependency information is generated for each of the set of computing nodes based on analyzing the system model. The set of dependency information identifies at least one dependency between two or more of the plurality of configuration operations. An executable coordination operation is added to each of the plurality of configuration operations. The executable coordination operation automatically coordinates execution of the plurality of configuration operations on the computing node.

Implicit coordination for deployment of computing systems using a data sharing service

System and method for providing the capability to resample computer system metrics, while providing improved accuracy over conventional techniques. The system and method conduct s monitoring and measuring metrics of system resource consumption of a plurality of entities to generate resource consumption data, generating a report of the resource consumption data for the plurality of entities for each of a plurality of time periods, identifying a number, k, of the plurality of entities as top-k consumers of resources for each of the plurality of time periods, identifying at least one residual entity of the plurality of entities whose resource consumption is not included in the top-k entities based on residual resource consumption data of the entity, and resampling the reports of the resource consumption data corresponding to the top-k entities and to the at least one residual entity to form at least one report covering a time period.

A method for allowing a computer to boot from a user trusted device is provided. The computer includes a long-term data storage device storing operating system (OS) services. The user trusted device is connectable to the computer and stores a boot loader detectable and executable by a firmware of the computer, an OS loader designed to load an OS of the computer, and one or more crypto drivers designed for allowing access to the OS and data stored encrypted on the data storage device. The method comprises letting the boot loader be executed to cause to transfer the OS loader from the user trusted device to the computer and executing the transferred OS loader to cause to execute the one or more crypto drivers for the OS and the data stored encrypted on the data storage device to start the OS services and complete booting of the computer.

Securely booting a computer from a user trusted device

In an approach to allowing a computer to boot from a user trusted device (UTD), the computer comprises a data storage device storing operating system (OS) services, and a version of an OS loader. The UTD is connectable to the computer and stores a boot loader, detectable by a firmware executing at the computer, and an OS loader, and wherein the UTD prevents an unauthenticated user to modify the boot loader and the OS loader stored thereon. The computer then, upon connection, lets the boot loader be detected by the firmware for execution of the boot loader at least partly at the computer, to cause to transfer the OS loader from the UTD to the computer, and executes the transferred OS loader at least partly from the computer, to execute at least one crypto driver for the OS, to start the OS services and complete booting of the computer.

Booting computer from user trusted device with an operating system loader stored thereon

Method to boot a computer from a user trusted device with an operating system loader stored thereon

A method for allowing an operating system (OS), to access an encrypted data storage system of a computer, wherein: the data storage system comprises: a partition; and first encrypted data units that comprise partition table data of said data storage system; and said computer is connectable to an external device comprising: a boot loader for an external OS that is not installed on the computer; and partitioning information capturing an expected location of said partition in the data storage system; and wherein second encrypted data units that comprise reference partition table data for said data storage system are available from said computer or said external device, the method comprising: upon connection of said external device to the computer, instructing to boot the computer from said boot loader; and during or after booting of the computer: comparing the first and second encrypted data units; and if the first and second encrypted data units match, allow the external OS to access, based on the partitioning information stored on the external device, one or more data units of said partition on the data storage system.

Enabling an external operating system to access encrypted data units of a data storage system

The present invention is notably directed to a method for allowing an operating system, or OS, to access an encrypted data storage system of a computer (), wherein: the data storage system () comprises: a partition (); and first encrypted data units () that comprise partition table data of said data storage system; and said computer () is connectable to an external device () comprising: a boot loader () for an external OS () that is not installed on the computer; and partitioning information () capturing an expected location of said partition () in the data storage system; and wherein second encrypted data units () that comprise reference partition table data for said data storage system are available from said computer () or said external device, the method comprising: upon connection (S) of said external device () to the computer, instructing to boot (S) the computer () from said boot loader (); and during or after booting of the computer: comparing (S) the first () and second encrypted data units (); and if (S) the first and second encrypted data units match, allow (S) the external OS () to access, based on the partitioning information () stored on the external device, one or more data units () of said partition on the data storage system (). The present invention is further directed to related devices, systems and computer program products.

Methods and apparatus are provided for provisioning an operating system image from a server () to an untrusted user terminal () via a data communications network (). A trusted device () such as a pocket USB device has tamper-resistant storage () containing bootloader logic, for controlling booting of a user terminal, and security data. On connection of the trusted device () to an untrusted user terminal (), the user terminal is booted via the bootloader logic on the trusted device. Under control of the bootloader logic, a connection is established to the server () via the network () and the server is authenticated using the security data on the trusted device (). An operating system boot image is received from the server () via this connection. The boot image is used to provision an operating system image from the server () to the user terminal () for execution of the operating system at the user terminal ().

Provisioning of operating systems to user terminals

System and computer program product for allowing a computer to boot from a user trusted device. The computer comprises a long-term data storage device storing operating system (OS) services; and the user trusted device is connectable to the computer and stores: a boot loader, detectable and executable by a firmware of the computer, upon connection of the user trusted device to said computer; an OS loader for the OS; and one or more crypto drivers designed for allowing access to the OS and data, stored encrypted on said data storage device. The user trusted device is designed to prevent unauthenticated access of each of: the boot loader; the one or more crypto drivers; and the OS loader, as stored thereon.

Growing community of inventors

Zurich, Switzerland

Thomas Gschwind