TeraLab IMT, Secure Data Processing and Sharing Infrastructure

TeraLab offers its secure, neutral, and trusted infrastructure for data processing and sharing. The service includes setting up a workspace composed by highly customized virtual machines (CPU, RAM, storage, ...), installing necessary software and tools, and providing services such as access control, monitoring, data storage and backup, and account management. These workspaces are proposed at three levels of autonomy (autonomous, administrated, and highly secure), depending on the project needs, the client’s level of expertise, and the type of data (e.g. sensitive or confidential).

For each project, TeraLab provisions an environment, called “workspace”, which is a dedicated network of virtual servers. A workspace is highly customizable.

The main parameters include:

Number of Virtual servers (VM – virtual machine)

• For each VM

1. The size of the CPU, RAM, Hot storage (fast storage – used during execution), and cold storage (archiving, backup, copy). Upon request, CEPH distributed storage can be provided (in all three modes: block, file or object).
2. The operating system (OS): Only Linux in supported (Ubuntu, Debian, CentOS).
3. A set of software tools, as specified by the end user.
4. At least one project account.
5. When needed, the sizing of GPU resources: number of boards, number of cores, RAM size.

• The firewall rules and the proxy/reverse proxy configurations

TeraLab proposes three levels of autonomy for a workspace:

• Autonomous workspace: Suited for projects where team members are skilled in system administration and security. The principle is to delegate a significant portion of the administration activity to these project members.
• Administered workspace: This offer targets projects with insufficient system administration skills. Operations and securing the workspace are fully performed by the TeraLab team. Users legally commit to strictly follow procedures when extracting and exporting data from the workspace.
• Highly secure workspace: Our offer for projects requiring a high level of assurance that project data will stay within the workspace. Beyond the legal commitment made by the users, means are implemented to technically prevent the extractions of data. This offer provides the core framework of the “Personal Health Data” use cases.

Whenever possible, TeraLab favours the most popular applications of the field as well as libre offers. This policy allows users to better understand their environment and to have many support tutorials. Examples include SSH access to virtual servers; using Git, JupyterLab, etc. The policy, however, does not exclude the possibility to install non-free software, in which case the user is asked to provide the commercial licenses.

No

Setting up a workspace to share and process industrial data from different sources (from the client, its providers, and open data) to work on optimise predictive maintenance models.

Norm-Atis Project

Analysis of multi-source people's travel data (mobile phone, bus, traffic) to improve the design of infrastructures for mobility, like roads, GSM antennas, or bus stops.

TeraLab has provided a common secure computing infrastructure for 8 major French actors in transport and communications.

Users of this service are kindly asked to include in their proposal an estimation of their required infrastructure (number of VMs, CPU, RAM and Storage for each VM).