-
公开(公告)号:US10192066B2
公开(公告)日:2019-01-29
申请号:US15125675
申请日:2014-03-14
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , Marco Casassa Mont , Suksant Sae Lor , Simon Kai-Ying Shiu
Abstract: In one implementation, a data sharing system can comprise a trust engine to identify an environment that satisfies a level of trust, an access engine to request access to a set of data, a procedure engine to receive a procedure, a restriction engine to receive a semantic restriction associated with a semantic term of the environment, a tracker engine to track the procedure during execution, and a control engine to maintain execution of the procedure based on the restriction and trace information. In another implementation, a method for sharing a set of data can comprise validating an environment satisfies a level of trust, receiving a procedure to access the set of data, receiving a semantic restriction associated with a semantic term of the environment, tracing the procedure during execution, and providing a view of the set of data based on the restriction and a semantic mapping of trace information.
-
公开(公告)号:US20180150405A1
公开(公告)日:2018-05-31
申请号:US15577846
申请日:2015-12-18
Applicant: Hewlett Packard Enterprise Development LP
Inventor: Patrick Goldsack , Brian Quentin Monahan , James Salter , Adrian John Baldwin
IPC: G06F12/1018 , G06F3/06
CPC classification number: G06F12/1018 , G06F3/0619 , G06F3/0649 , G06F3/065 , G06F3/0679 , G06F8/437 , G06F2212/401
Abstract: In one example in accordance with the present disclosure, a method for data type management may include adding a first data to a first data set. The first data set may belong to a plurality of data sets stored in a memory and each data set in the plurality may correspond to a type table defining data types in the corresponding data set. The method may further include determining that a first data type of the first data is not in a first type table corresponding to the first data set and generating an identifier corresponding to the first data type. The identifier may identify uses of the first data type within each data set in the plurality and may be a standardized value that is used by each data set in the plurality. The method may also include inserting the identifier into the first type table.
-
公开(公告)号:US20160217295A1
公开(公告)日:2016-07-28
申请号:US14915971
申请日:2013-10-31
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , Marco Casassa Mont , Suksant Sae Lor , Simon Kai-Ying Shiu
IPC: G06F21/62
CPC classification number: G06F21/6218 , G06F21/552 , G06F21/6254
Abstract: According to an example, trusted function based data access security control may include determining a restriction set by a first entity and related to access to and/or analysis related to data under the control of the first entity. A trusted function including meta-data that describes a transformation of the data may be ascertained. A determination may be made as to whether the meta-data of the trusted function matches the restriction related to the access to and/or analysis related to the data. In response to a determination that the meta-data of the trusted function matches the restriction, the trusted function may be executed to allow controlled access to the data by a second entity. In response to a determination that the meta-data of the trusted function does not match the restriction, execution of the trusted function may be prevented to prevent access to the data by the second entity.
Abstract translation: 根据一个示例,基于信任功能的数据访问安全控制可以包括确定第一实体的限制集合并且与在第一实体的控制下与数据有关的访问和/或分析相关。 可以确定包括描述数据变换的元数据的可信函数。 可以确定信任功能的元数据是否与对与数据有关的访问和/或分析相关的限制进行匹配。 响应于可信功能的元数据与该限制匹配的确定,可以执行可信函数以允许第二实体对数据的受控访问。 响应于可信函数的元数据与限制不匹配的确定,可以防止可信函数的执行以防止第二实体访问数据。
-
公开(公告)号:US20180225150A1
公开(公告)日:2018-08-09
申请号:US15748478
申请日:2015-07-27
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , Brian Quentin Monahan , Granville Barnett
CPC classification number: G06F9/5033 , G06F8/41 , G06F9/46 , G06F9/5044 , G06F9/544
Abstract: An example computing device comprises a first processing unit having first capabilities, a second processing unit having second capabilities, and a shared memory accessible by the first processing unit and the second processing unit. The shared memory stores data objects in association with type information indicating the data type of the data objects. The example computing device further comprises an instruction set to, when executed by a processing unit of the computing device, select one of the first processing unit and the second processing unit to perform a computation of a particular type, using data of a particular type stored in the shared memory, wherein the selection is performed based on a predefined affinity of the first processing unit for the particular computation type and/or the particular data type and a predefined affinity of the second processing unit for the particular computation type and/or the particular data type.
-
公开(公告)号:US10310877B2
公开(公告)日:2019-06-04
申请号:US15573112
申请日:2015-07-31
Applicant: Hewlett Packard Enterprise Development LP
Inventor: Philipp Reinecke , Brian Quentin Monahan , Granville Barnett , Patrick Goldsack
Abstract: Examples analyze source code of a task prior to compiling the source code to determine a static property of the task. Examples determine a category for the task based at least in part on the static property. Examples compile the source code to generate a binary of the task. Examples determine execution parameters for the task based at least in part on the category. Examples schedule the binary for execution based at least in part on the execution parameters.
-
公开(公告)号:US10193892B2
公开(公告)日:2019-01-29
申请号:US15116851
申请日:2014-03-14
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , Marco Casassa Mont , Simon Kai-Ying Shiu , Suksant Sae Lor
Abstract: In one implementation, a data sharing system can comprise a trust engine to identify an environment that satisfies a level of trust, an access engine to request access to a set of data, a procedure engine to receive a procedure, a restriction engine to receive a restriction associated with a resource of the environment, a monitor engine to maintain resource utilization information, and a control engine to limit execution of the procedure based on the restriction and the resource utilization information. In another implementation, a method for sharing a set of data can comprise validating an environment satisfies a level of trust, receiving a restriction associated with a resource of the environment, receiving a procedure to access the set of data, ascertaining resource utilization information, and providing a view of the set of data based on the restriction and the resource utilization information.
-
公开(公告)号:US20180246813A1
公开(公告)日:2018-08-30
申请号:US15756056
申请日:2016-01-19
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , James Salter , Adrian John Baldwin
IPC: G06F12/0895 , G06F12/0864 , G06F12/02 , G06F12/14
CPC classification number: G06F12/0895 , G06F9/00 , G06F12/0215 , G06F12/0292 , G06F12/0864 , G06F12/145
Abstract: An example system in accordance with an aspect of the present disclosure includes a cache engine, a validate engine, and an access engine. The cache engine is to cache, into an address cache of an object reference, an object address corresponding to an object, in response to performing a lookup of the object via at least one indirection. The validate engine is to validate that an object ID of the object located at the cached object address corresponds to a reference object ID that is stored in the object reference and associated with the object. The access engine is to access the object via a lookup of the object address cached in the address cache of the object reference, in response to validating the reference object ID.
-
公开(公告)号:US10558500B2
公开(公告)日:2020-02-11
申请号:US15748478
申请日:2015-07-27
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , Brian Quentin Monahan , Granville Barnett
Abstract: An example computing device comprises a first processing unit having first capabilities, a second processing unit having second capabilities, and a shared memory accessible by the first processing unit and the second processing unit. The shared memory stores data objects in association with type information indicating the data type of the data objects. The example computing device further comprises an instruction set to, when executed by a processing unit of the computing device, select one of the first processing unit and the second processing unit to perform a computation of a particular type, using data of a particular type stored in the shared memory, wherein the selection is performed based on a predefined affinity of the first processing unit for the particular computation type and/or the particular data type and a predefined affinity of the second processing unit for the particular computation type and/or the particular data type.
-
公开(公告)号:US10380025B2
公开(公告)日:2019-08-13
申请号:US15756056
申请日:2016-01-19
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , James Salter , Adrian John Baldwin
IPC: G06F12/0895 , G06F9/00 , G06F12/14 , G06F12/02 , G06F12/0864
Abstract: An example system in accordance with an aspect of the present disclosure includes a cache engine, a validate engine, and an access engine. The cache engine is to cache, into an address cache of an object reference, an object address corresponding to an object, in response to performing a lookup of the object via at least one indirection. The validate engine is to validate that an object ID of the object located at the cached object address corresponds to a reference object ID that is stored in the object reference and associated with the object. The access engine is to access the object via a lookup of the object address cached in the address cache of the object reference, in response to validating the reference object ID.
-
公开(公告)号:US20160381036A1
公开(公告)日:2016-12-29
申请号:US15116851
申请日:2014-03-14
Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventor: Patrick Goldsack , Marco CASASSA MONT , Simon Kai-Ying SHIU , Suksant SAE LOR
CPC classification number: H04L63/105 , G06F15/16 , G06F21/00 , G06F21/577 , G06F21/6218 , G06F2221/034 , G06F2221/2149 , H04L63/10
Abstract: In one implementation, a data sharing system can comprise a trust engine to identify an environment that satisfies a level of trust, an access engine to request access to a set of data, a procedure engine to receive a procedure, a restriction engine to receive a restriction associated with a resource of the environment, a monitor engine to maintain resource utilization information, and a control engine to limit execution of the procedure based on the restriction and the resource utilization information. In another implementation, a method for sharing a set of data can comprise validating an environment satisfies a level of trust, receiving a restriction associated with a resource of the environment, receiving a procedure to access the set of data, ascertaining resource utilization information, and providing a view of the set of data based on the restriction and the resource utilization information.
Abstract translation: 在一个实现中,数据共享系统可以包括:信任引擎,用于识别满足信任级别的环境;访问引擎,用于请求访问一组数据;接收过程的过程引擎;接收 与环境资源相关联的限制,维护资源利用信息的监视引擎,以及基于限制和资源利用信息来限制该过程的执行的控制引擎。 在另一实现中,共享一组数据的方法可以包括验证满足信任级别的环境,接收与环境资源相关联的限制,接收访问该组数据的过程,确定资源利用信息,以及 基于限制和资源利用信息提供该组数据的视图。
-
-
-
-
-
-
-
-
-