1. A method of virtualized migration control comprising:
executing a hypervisor with computing hardware to implement a virtual machine;
responsive to detecting a removable storage medium communicatively coupled to said computing hardware, executing, through said hypervisor, an instance of a virtualized migration control appliance separate from said virtual machine;
blocking said virtual machine from accessing data stored on said removable storage medium with said instance of said virtualized migration control appliance if at least one governing policy prohibits said virtual machine from accessing said data;
executing a separate instance of said virtualized migration control appliance for each of at least one other removable storage medium communicatively coupled to said computing hardware; and
responsive to determining that a communicatively coupled removable storage medium has been disconnected from said computing hardware, terminating, through said hypervisor, said instance of said virtualized migration control appliance corresponding to said disconnected removable storage medium.
2. The method of claim 1, further comprising making a hardware interface to said removable storage medium invisible to an operating system of said virtual machine.
3. The method of claim 1, further comprising: responsive to a determination that no governing policy prohibits said virtual machine from accessing said data stored on said removable storage medium, allowing said virtual machine to access said data stored on said removable storage medium through a virtual disk implemented in an operating system of said virtual machine, said virtual disk being mapped to said removable storage medium through said instance of said virtualized migration control appliance.
4. The method of claim 1, further comprising satisfying said at least one governing policy by performing with said instance of said virtualized migration control appliance at least one corrective action on data to be read from or written to said removable storage medium.
5. The method of claim 4, in which said at least one governing policy prohibits said virtual machine from accessing said removable storage medium if malware is detected on said removable storage medium, and said at least one corrective action comprises removing said detected malware.
6. The method of claim 4, in which said at least one corrective action comprises performing a data washing procedure on said data to be read from or written to said removable storage medium.
7. The method of claim 1, in which said at least one governing policy is at least partially based on a signature associated with data stored on said removable storage medium.
8. The method of claim 1, in which said at least one governing policy is at least partially based on conditions set by an author of data to be read from or written to said removable storage medium.
9. The method of claim 1, further comprising: encrypting data to be written from said virtual machine to said removable storage medium; and decrypting data to be read from said removable storage medium by said virtual machine; in which said encrypting and decrypting is performed by said virtualized data migration control appliance.
10. The method of claim 1, wherein said virtualized migration control appliance comprises a program executed by said hypervisor for enforcing policies governing the migration of data between said virtual machine and said removable storage medium without an underlying operating system and independent from any virtual machine implemented by said hypervisor.
11. A computing system comprising:
a processor coupled to computer readable memory; and
at least one removable storage medium hardware interface communicatively coupled to said processor;
in which said processor is configured to:
execute a hypervisor to implement a virtual machine; and
responsive to detecting a removable storage medium communicatively coupled to said at least one removable storage medium hardware interface, execute, through said hypervisor, an instance of a virtualized migration control appliance separate from said virtual machine, said instance of said virtualized data migration control appliance being configured to block said virtual machine from accessing data stored on said removable storage medium if at least one governing policy prohibits said virtual machine from accessing said data;
execute a separate instance of said virtualized migration control appliance for each of at least one other removable storage medium communicatively coupled to said at least one removable storage medium hardware interface; and
responsive to determining that a communicatively coupled removable storage medium has been disconnected from said at least one removable storage medium hardware interface, terminate, through said hypervisor, said instance of said virtualized migration control appliance corresponding to said disconnected removable storage medium.
12. The computing system of claim 11, in which said at least one removable storage hardware device interface is invisible to an operating system of said virtual machine.
13. The computing system of claim 11, in which said instance of said virtualized migration control appliance is configured to allow said virtual machine to access said data stored on said removable storage medium through a virtual disk implemented in an operating system of said virtual machine, said virtual disk being mapped to said removable storage medium through said instance of said virtualized migration control appliance.
14. The computing system of claim 11, wherein said virtualized migration control appliance comprises a program executed by said hypervisor for enforcing policies governing the migration of data between said virtual machine and said removable storage medium without an underlying operating system and independent from any virtual machine implemented by said hypervisor.
15. A computer program product comprising:
a non-transitory computer readable storage medium comprising computer executable code, said computer executable code comprising:
computer executable code configured to execute a hypervisor to implement a virtual machine on computing hardware;
computer executable code configured to, responsive to detecting a removable storage medium communicatively coupled to said computing hardware, execute, through said hypervisor, an instance of a virtualized data migration control appliance separate from said virtual machine, in which said instance of said virtualized data migration control appliance is configured to block said virtual machine from accessing data stored on said removable storage medium if at least one governing policy prohibits said virtual machine from accessing said data;
computer executable code configured to execute a separate instance of said virtualized migration control appliance for each of at least one other removable storage medium communicatively coupled to said computing hardware; and
computer executable code configured to, responsive to determining that a communicatively coupled removable storage medium has been disconnected from said computing hardware, terminate, through said hypervisor, said instance of said virtualized migration control appliance corresponding to said disconnected removable storage medium.
16. The computer program product of claim 15, wherein said virtualized migration control appliance comprises a program executed by said hypervisor for enforcing policies governing the migration of data between said virtual machine and said removable storage medium without an underlying operating system and independent from any virtual machine implemented by said hypervisor.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A system for removing toxic substances from the blood of a patient and performing colloid exchange therapy, the system comprising:
a removal interface for withdrawing blood from the patient;
a very large pore hemofilter;
a first tubing fluidly coupled to the removal interface and the very large pore hemofilter;
wherein the very large pore hemofilter:
has a membrane with pores for sieving, and
the membrane is sized and configured to have pores with a sieving coefficient greater than or equal to 0.05 for albumin and a sieving coefficient of less than 0.03 for IgG so as to permit the passage of albumin while excluding the passage of immunoglobulins, so as to create a return stream and an ultrafiltrate stream, the return stream has retained molecules that did not pass through the pores and the ultrafiltrate stream has molecules that passed through the pores,
a return tubing fluidly coupled to the very large pore hemofilter for receiving the return stream;
an ultrafiltrate tubing fluidly coupled to the very large pore hemofilter for receiving the ultrafiltrate stream;
a return interface for introducing the return stream into the patient;
wherein the return tubing is also fluidly coupled to the return interface;
a replacement fluid tubing;
a control valve fluidly coupled to the replacement fluid tubing; and
a fluid reservoir fluidly coupled to the return tubing, the fluid reservoir comprising fluids that contain clean target receptor molecules, including albumin, that are introduced into the patient, and wherein fluid reservoir is fluidly coupled to the return tubing via the replacement fluid tubing, and wherein the control valve on the replacement tubing is operable to regulate the flow of fluid containing albumin at a rate to maintain the patient’s oncotic pressure.
2. The system according to claim 1, wherein the clean target receptor molecules comprise secretory carrier membrane proteins.
3. The system according to claim 1, wherein the clean target receptor molecules comprise soluble cytokine receptor molecules.
4. A system according to claim 1, further comprising an ultrafilitrate control valve fluidly coupled to the ultrafiltrate tubing for controlling fluid flow therein.
5. The system according to claim 1, wherein the clean target receptor molecules comprises albumin and at least one other substance.
6. A system according to claim 5, wherein the other substance is a specific target receptor.
7. A system according to claim 1, further comprising:
a three-way valve fluidly coupled to the ultrafiltrate tubing and the return tubing;
an ultrafiltrate recycling device fluidly coupled to the ultrafiltrate tubing and configured to receive the ultrafiltrate and produce a clean ultrafiltrate stream; and
wherein the three-way valve is configured to selectively direct at least a portion of the clean ultrafiltrate stream to the return tubing.
8. A system according to claim 1, further comprising:
a three-way valve fluidly coupled to the ultrafiltrate tubing and the return tubing;
an ultrafiltrate recycling device fluidly coupled to the ultrafiltrate tubing and configured to receive the ultrafiltrate and produce a stream comprising clean target receptor molecules;
a discard tubing fluidly coupled to the three-way valve; and
wherein the three-way valve is configured to selectively direct at least a portion of the stream to the return tubing.
9. A system according to claim 8, wherein the ultrafiltrate recycling device includes an adsorbent material.
10. A system according to claim 1, wherein the removal interface is adjustable so as to adjust the rate of ultrafiltrate removal by altering the rate of delivering blood to the very large pore hemofilter.
11. The system of according to claim 1, wherein the membrane has a molecular weight cutoff of greater than about 200,000 Daltons and less than about 900,000 Daltons.
12. A system for providing very large pore hemofiltration of a patient’s blood, the system comprising:
a removal interface for withdrawing blood from the patient;
a very large pore hemofilter operable to produce a return stream and an ultrafiltrate stream that has been sieved;
a first tubing fluidly coupled to the removal interface and the very large pore hemofilter;
wherein the very large pore hemofilter has a membrane with a sieving coefficient for albumin that is equal to or greater than approximately 0.05 and with a sieving coefficient for IgG that is equal to or less than 0.1;
a three-way device;
a second tubing fluidly coupled to the very large pore hemofilter for receiving the return stream and fluidly coupled to the three-way device;
an ultrafiltrate tubing fluidly coupled to the very large pore hemofilter for receiving the ultrafiltrate stream;
a return tubing;
a return interface for introducing the return stream into the patient, the return tubing fluidly coupled to the three-way device and to the return interface;
a control valve;
a replacement fluid tubing, wherein the control valve is fluidly coupled to the replacement fluid tubing to control a flow rate in the replacement fluid tubing; and
a fluid reservoir comprising fluids that contain clean target receptor molecules, including albumin, that are introduced into the patient, wherein the fluid reservoir is fluidly coupled to the three-way device via the replacement fluid tubing and wherein the control valve is positioned to control the flow rate of the replacement fluid from the fluid reservoir into the three-way device.
13. The system of claim 12, wherein the membrane has a sieving coefficient for albumin that is equal to or greater than approximately 0.1.
14. The system of claim 12, wherein the membrane has a sieving coefficient for IgG that is equal to or less than 0.03.
15. The system of claim 13, wherein the membrane has a sieving coefficient for albumin that is equal to or greater than approximately 0.1 and with a sieving coefficient for IgG under clinically relevant operating conditions that is equal to or less than 0.03.
16. A method for removing toxic substances from the blood of a patient, the method comprising:
providing a system comprising:
means for withdrawing blood from the patient;
means for delivering the blood to a hemofilter having pores, the hemofilter having a molecular weight cutoff of greater than 150,000 Daltons and less than 1,000,000 Daltons so as to create a return stream and an ultrafiltrate stream, wherein the return stream has retained molecules that did not pass through the pores and the ultrafiltrate stream has molecules, including albumin and excluding immunoglobulins, that passed through the pores;
means for returning the return stream to the patient; and
means for providing fluids to the patient that contain clean target receptor molecules, including albumin, to the patient;
wherein the target receptor molecules include secretory carrier membrane proteins or soluble cytokine receptor molecules; and
conducting plasma colloid exchange therapy with the system sufficient to maintain plasma oncotic pressure of the patient and to provide fresh albumin andor other target receptor molecules to attract target molecules from tissue spaces in the patient.