87results about How to "Avoid bypass" patented technology

The invention discloses a method, device and system used for digesting security policy conflicts. When a flow rule control device receives a flow rule policy issued by an application proxy device, semantic analysis is performed on the flow rule policy based on aliases so that an alias rule set of the flow rule policy is formed; the alias rule set of the flow rule policy is compared with the alias rule set of the current rules so as to judge existence of the policy conflicts; and if the policy conflicts do not exist, the flow rule policy is transmitted to corresponding switches so that the corresponding switches perform corresponding routing forwarding according to the flow rule policy. Therefore, a situation of bypassing security rules through other flow rule policies or policy combinations can be effectively prevented, and security of an SDN framework based on OpenFlow can be enhanced.

A framed filter media comprising a filter media having a fluid inlet face and a fluid outlet face with peripheral sidewalls. The peripheral sidewalls are attached to a strip frame by an adhesive-potting compound. The continuous strip frame is formed into three or more (up to an infinite number if the sidewall sections(s) is formed into a circular filter frame) sidewall sections having a substantially flat sidewall and at least two projecting filter retaining tabs which form a channel on a first face of the sidewall section for containing the adhesive potting compound. The sidewall sections are separated by corner notches extending through the retaining tabs at least to the substantially flat sidewalls. Two terminal sidewall sections meet to form a seam such that the sidewall sections circumscribe the filter media peripheral sidewalls. The continuous strip frame is formed by extruding a continuous strip frame blank comprising at least a substantially flat sidewall and at least two projecting filter retaining tabs forming a continuous channel on a first face of the continuous strip frame blank. The filter retaining tabs are then notched to form corner notches which corner notches extend at least to the substantially flat sidewalls creating sidewall section between the corner notches and optionally scoring first and / or second faces of the sidewall portions to form living hinges. The continuous strip frame blank is further cut into discrete strip frame blanks.

Beverage brewing devices having a brewing unit having a brewing chamber and a closure mechanism, the closure mechanism having an open and closed orientation and a pod holder configured to hold a pod containing an extractable material, the pod having a peripheral flange, wherein the pod holder has a cup, a ledge extending substantially horizontally from the cup in an outward direction, and a gasket connected to the ledge about the cup, wherein, when the closure mechanism is in the closed orientation, a seal is created between the peripheral flange of the pod and the gasket of the pod holder to prevent bypass of liquid around the pod.

The invention relates to a patient ventilation or breathing device and components therefore for use in all forms of respiratory apparatus ventilation systems including invasive and non-invasive ventilation, positive airway pressure therapy, Continuous Positive Airway Pressure (CPAP), and particularly Bi-Level therapy and treatment for sleep disordered breathing (SDB) conditions such as Obstructive Sleep Apnea (OSA), and for various other respiratory disorders and diseases. The invention particularly relates to a blower, to a blade, to a gasket, to a cable, to an impeller, to a gas inlet and inlet member, to an improved air path or fluid flow path and components thereof, and / or to a modular ventilation or breathing device as referred to above and particularly incorporating one or more of the other aspects of the invention.

The invention provides hydrocarbon recovery processes that may be utilized in heavy oil reservoirs. Horizontal hydrocarbon production wells may be provided below horizontal oxidizing gas injection wells, with distant combustion gas production wells offset from the injection well by a distance that is greater than the hydrocarbon production well offset distance. Oxidizing gases injected into the reservoir through the injection well support in situ combustion, to mobilize hydrocarbons. The process may be adapted for use in a reservoir that has undergone depletion of petroleum in a precedential petroleum recovery process, such as a steam-assisted-gravity-drainage process, leaving a residual oil deposit in the reservoir as well as mobile zone chambers. Processes of the invention may be modulated so that a portion of the residual oil supports in situ combustion, while a larger portion of the residual oil is produced, by channelling combustion gases along the pre-existing mobile zones with the reservoir.

A multilayer electrode battery which restrains temperature rise produced by an internal short circuit and has a compact size and a large battery capacity. The battery is a multilayer electrode battery which uses an electrode formed by providing positive temperature coefficient characteristics to at least one of an active material and an electronic conductive material in contact with the active material, and a collector of at least one of a positive electrode and a negative electrode, and which has a plurality of layers of multilayer electrode bodies.

A device for protecting an electrical system against surge voltages, comprising one or more protection components provided with means for connecting same with said system and means for disconnecting said component from said system, characterised in that it comprises arc-breaking means for preventing the generation of electric arcs between the disconnection means and the connection means when the disconnection means is in an open state, wherein said arc-breaking means consist of an insulating flap capable of moving within the gap and comprising a central portion to be positioned between the disconnection and connection means, and side portions shaped in such a way as to prevent the electric arc from bypassing the arc-breaking means. Electrical surge voltage protection devices are also described.

The invention relates to a stable gas membrane used for removing, recovering, and gathering ammonia or organic amine from dosage liquor or wastewater. The gas membrane comprises a membrane shell, hollow fibrous membranes (A) and hollow fibrous membranes (B). A cavity is provided in the middle of the membrane shell. An inlet and an outlet are respectively arranged on each of the two ends of the membrane shell. The hollow fibrous membranes (A) and the hollow fibrous membranes (B) are positioned in the cavity of the membrane shell. A shell pass outlet communicating with the atmosphere is arranged on a lower end of the membrane shell. The hollow fibrous membranes (A) and the hollow fibrous membranes (B) are uniformly arranged in the membrane shell with regular spaces. Dosage liquor or wastewater containing ammonia or organic amine is delivered through the tube pass of the hollow fibrous membranes (A), and absorption liquid is delivered through the tube pass of the hollow fibrous membranes(B). With the gas membrane provided by the invention, problems of traditional gas membranes of leakage and low service life are overcome; dilution of a byproduct ammonium salt solution caused by a concomitant osmotic distillation phenomenon can be effectively inhibited; ammonium salt concentration of the byproduct ammonium salt solution can be increased from 10-20% to 20-40%; mass transfer coefficient at the acid absorption liquid side can be substantially improved; the ammonia removing efficiency is high; the ammonia removing effect is stable for a long-term; and the service life of membranesets can be improved by 3-10 times than common gas membranes.

The invention discloses a data access control system and method for a storage system. The data access control system for the storage system comprises four logical functional parts which include a security policy server, an application server and access security agent, a storage security gateway and a storage system. According to the data access control system and method for the storage system, security load information for data block access is generated according to a security policy, the security load of data is transmitted and stored, a protocol is analyzed so that the security load can be obtained, the legality of an access request is calculated and verified according to the security load, and whether data access is allowed or not is controlled. According to the data access control system for the storage system, due to the fact that the security load is added to a data access protocol layer of the storage system, the security load is analyzed through security agent software, data access control is conducted according to the security load, in this way, higher-intensity and higher fine security control over data access can be achieved in the true sense.

The embodiment of the invention discloses an IPSec (Internet Protocol Security) VPN (Virtual Private Network) communication service processing method and a system under an IPv6 (Internet Protocol Version 6) environment. The method comprises the steps that access equipment receives an IPv6 data package sent by a client side; whether a source IPv6 address is a static address is identified according to static route identification information in top 64 route prefixes in the source IPv6 address in the IPv6 data package; if the source IPv6 address is the static address, the access equipment identifies whether the IPv6 data package is an IPSec VPN data package according to access type identification in the top 64 route prefixes; if the IPv6 data package is the IPSec VPN data package, certification information in rear 64 route prefixes in the source IPv6 address is certificated; if certification is not passed, the IPSec VPN data package is discarded; and if the certification is passed, the IPSec VPN data package is forwarded to a unified access IPSec VPN gateway or other targeted VPN gateways according to a destination address in the IPSec VPN data package. According to the IPSec VPN communication service processing method and the system, an IPSec VPN flow under the IPv6 environment can be supervised, and the monitoring efficiency is improved.

The present invention describes an electrochemical system as well as a bipolar plate for use in an electrochemical system. The electrochemical system (1), consists of a layering of several cells (2), which in each case are separated from one another by bipolar plates (3), wherein the bipolar plates comprise openings for the cooling (4) or for the removal and supply of operating media (5) to the cells, and the layering may be set under mechanical compressive stress, wherein at least one cell comprises an electrochemically active region (6) which is surrounded by a boundary wall (7) of the bipolar plate, and a channel structure (8) of the bipolar plate is provided within the electrochemically active region, for the uniform media distribution, wherein at least one gas diffusion layer (9) is provided for the micro-distribution of media. Limitation elements (10) are provided in the border region between the channel structure as well as the boundary wall, for avoiding fluid from bypassing between the channel structure and the boundary wall, wherein the gas diffusion layer covers the channel structure and / or at least parts of the limitation elements. The reliability and the efficiency of electrochemical systems are decisively increased by way of preventing the bypass in the border region of the electrochemically active field.

An assembly (1) of baffles and seals for mounting in a heat exchanger shell (4), which assembly (1) comprises a plurality of longitudinal baffles (6,7); at least one longitudinal seal (14,16,17), wherein the assembly (1) further comprises a wall member (21, 22) that is arranged to extend between spaced apart longitudinal baffles (6,7) so as to form a double wall with the heat exchanger shell (4) after mounting, and wherein the at least one longitudinal seal (14,16,17) is arranged on the wall member (21, 22) and away from the longitudinal baffles (6,7) so as to sealingly engage the wall member (21, 22) against the heat exchanger shell (4) after mounting.

A blocking element for a gate used as a checkpoint includes a housing having a height, a support having a second height and arranged in the housing, a horizontally directed pivot axis furnished on the support, and a pair of blocking vanes each of which are in a form of a circle sector, wherein the pair of blocking vanes are mounted, by way of a tapering sector inner side of the blocking vanes and such that the blocking vanes can pivot about the horizontally directed pivot axis. A drive motor is connected to the blocking vanes on the pivot axis, wherein the drive motor in response to a signal, slides one of the blocking vanes into the other in a telescopic manner from a position which blocks a passage of the gate into a position, which opens the passage of the gate, and wherein the blocking vanes can be drawn apart from one another in order to again block the passage of the gate.

The present invention generally relates to filtration, and more particularly to filter assemblies including filter housings, filter elements and safety filter elements for filtering flowing fluid such as air.

The invention discloses a dataflow control method facing a virtual desk top and an information safety device. The method comprises the following steps that an identity of a middleman is added between the virtual desktop and an operation platform, and the middleman establishes control for channels according to set strategies. Thus, data exchange between the virtual desktop and the operation platform is effectively controlled, and data safety in the virtual desktop system is improved.

A security chip for protecting a network security system comprises a data security part for providing a secure encryption and decryption algorithm and an interaction protocol, wherein the data security part mainly comprises an encryption and decryption algorithm control engine, an authorization counter, a true random number generator, a unique serial number and a secure EEPROM; and a network security part composed of a network white list filtering module and a network data processing module. The encryption and decryption algorithm control engine comprises private key security storage for supporting private key ECDH operation and ECDSA signature authentication. The mainstream national password and commercial password encryption and decryption algorithms perform high-speed encryption and reduction on the data stream so as to adapt to the security requirements of different scenes. The chip safety management supplies power, manages the read-write ROM on the chip, allows special equipment to write, and allows remote erasure but does not allow reading. The invention also provides a network security system using the security chip. The sensitive data communication security can be protectedfrom the hardware level, and the efficiency can be greatly improved while the system security is improved.

The invention discloses a hard disk firmware attack preventing system. The system comprises a blacklist and white list database used for storing a blacklist and a white list of hard disk instruction invariant features, a white list matching module used for receiving hard disk control instructions sent out by a computer and comparing whether the hard disk control instructions are matched with the white list or not, an instruction blocking and transmitting module used for blocking the unmatched hard disk control instructions and transmitting the matched instructions to a hard disk, and a suspicious instruction processing module used for outputting instruction identity information of the instructions which are not matched with the white list or the blacklist so that the instruction identity information can be analyzed manually. The invention further provides a hard disk firmware attack preventing method. On the premise that the computer normally visits hard disk user data, the purposes of blocking hostile attacks and recognizing unknown behaviors are achieved.

A filter element assembly has at least two cylindrically shaped and concentrically arranged filter media sleeves each connected at one end thereof to an inlet plate and each connected at the other end to a closed end terminal plate. Openings are provided in the inlet plate to permit entry of liquid to be filtered into the annular space between the filter sleeves. The closed end terminal plate prevents flow of unfiltered liquid from the annular space between the sleeves so as to force the liquid through the porous media of the sleeves to effect filtration.

The invention discloses an air conditioning unit, an air conditioning system and a fan operating method and device of the air conditioning unit. The working reliability and the energy efficiency of the data center air conditioning system are improved. The air conditioning unit includes a main control board, at least one refrigeration system and monitoring modules, the monitoring modules are arranged according to fans of all refrigerating systems and used for monitoring wind output information of the fans; and the main control board is connected with the fans and the monitoring modules and is used for determining the lowest rotating speed, used for restraining backflow of cold air flow, of the corresponding fan according to the wind outlet information of the corresponding fan when any refrigerating system breaks down or is in the standby state and controlling the corresponding fan to operate at the lowest rotating speed.

The invention relates to a monolithic catalyst reactor for synthesis gas preparation through natural gas reforming. The monolithic catalyst reactor consists of multilayer structures of monolithic catalysts, an oxygen distributor, a reactor and particle catalysts, wherein the particle catalysts are filled among the monolithic catalysts, the oxygen distributor and the reactor, the monolithic catalysts consist of at least one metal in honeycomb cordierite supported Ni and Rh or monolithic foam silicon carbide, the oxygen distributor is prepared from high-temperature oxidation-resistant alloy, the particle catalysts are obtained from at least one metal in Mg-Al spinel supported Ni and Rh, and the reactor is formed by a stainless steel reactor lined with high-temperature casting ceramics. The monolithic catalyst reactor can be used for converting natural gas, water vapor and oxygen / air into synthesis gas.

The invention discloses a rotation control method of a winding machine. The rotation control method comprises the following steps that the winding machine acquires the number of turns for winding each cake; the winding machine records the forward rotation number of turns of a coil; and when the forward rotation number of turns is greater than the winding number of turns, the winding machine reminds a user of the winding number of turns through voice. The technical scheme provided by the invention has the advantage of preventing excessive winding.

A data acquired system is provided. The data acquired system includes a main structure with a cavity formed therein, the cavity having a bottom for mounting a circuit board with electrical components thereto, a fan assembly disposed on the main structure, and an airflow guide disposed within the cavity and configured to guide airflow from the fan assembly for heat dissipation of the electrical components, the airflow guide positioned at a distance above the electrical components to form a gap between the airflow guide and the electrical components, wherein a sidewall of the cavity is provided with an air vent corresponding to the gap such that the airflow passes through the gap and is discharged from the air vent.

It relates to an abrasion rotating cylinder with spiral freezing device. The central shaft, whose top and bottom ends are set in the frame connected top and bottom bearing base, has a sprocket which connects through chains with the sprocket of the output shaft of the electric decelerator loaded on the frame, it also combines with at least two layers scattered suspension arms with the outside of each layer suspension arm connected with a ring bone structure and the outer circumference of each ring bone structure connecting with a strip bone structure with wind blocking ridge. The boss of the cross section of the strip bone structure taking on the 'n' form is set with abrasion-proof plastic strips of 'n' form profile.

The invention relates to the technical field of browser remote access, and particularly discloses a safe remote access system, which comprises a safety confirmation unit used for receiving an access request, judging the authority of an access request sender and establishing a connection channel based on the authority of the request sender; an access rating unit which is used for acquiring an access purpose and judging the level of the access purpose; an identity verification unit which is used for obtaining verification information based on the level of the access purpose and sending access content based on the verification information. According to the method, a remote access way is limited in a browser by detecting an access source, malicious programs are prevented from bypassing security means through common software, and a multi-account login way is set for important information, so that a user seeks friends to log in, and subsequent responsibility investigation is facilitated while the security is improved.

A steam trap 20 is used for draining off condensate from a collecting chamber 34 in which condensate resulting in a pressure gas system is collected, the collecting chamber 34 being pressurised by a gas pressure which, depending upon the operating state of the pressure gas system, may be a negative pressure below the atmospheric pressure, an overpressure above the atmospheric pressure or an atmospheric pressure itself. The steam trap 20 may be separated via an interface into an integral first assembly unit 45 and an integral maintenance assembly unit 47 which comprises the essential wear and tear parts.

The invention belongs to the technical field of computer networks, and relates to a large-scale Internet of Things service domain isolation communication method and device, electronic equipment and a storage medium. According to the method, identity-based access control is introduced to realize logic isolation of topology and performance in an initial state of an Internet of Things service domain; meanwhile, in combination with a key management service, privacy protection is carried out on data communication service of the service domain, and end-network-cloud data full-life-cycle logic isolation, including topology isolation, performance isolation and service isolation, of the service domain of the Internet of Things is ensured. The method comprises the following steps: firstly, establishing a terminal identity at an access network position of an Internet of Things terminal by adopting an access network real source address verification technology and a real identity mechanism based on a network address; dividing fragments and allocating resources for different service domains through a software definition network slicing mechanism in the management domain to realize topology and performance isolation of the different service domains; and finally, realizing service isolation based on an access control mechanism, and realizing data encryption by using symmetric key exchange.

The invention provides a single sign-on tamper-proofing method and device, computer equipment and a storage medium. The method comprises the following steps: obtaining first login information of a user logging in a server, associating the first login information with a first tag, generating a private key and a public key which are bound with each other, packaging and encrypting the first tag in the public key, and storing the public key in a session library of the server, thereby realizing the encryption of the tag, and preventing an illegal person from inputting the tag into the session library and directly entering the server; sending the private key to a pre-associated terminal device; obtaining a to-be-verified private key input by the user through the terminal equipment; judging whether the to-be-verified private key is the same as a private key or not, if yes, searching whether a public key corresponding to the private key exists in a session library, if yes, decrypting the public key by the private key to obtain a first label, and obtaining first login information corresponding to the first label to log in a server again through the first login information, thereby realizing single sign-on of a user.

The present invention is a substrate conveying device of a thin film forming apparatus, in order to achieve the following purpose, that is, a large mask plate (35) that covers the entire outer peripheral portion of a substrate (4) is not provided in a film forming chamber (1), It can reliably prevent the plasma generated from the electrode (3) from going around the back side of the substrate (4), and can reduce costs and improve maintenance performance. 4) the opening portion (36) and the partition wall plate (37) opposite to the inductively coupled electrode (3), and the side of the partition wall plate (37) away from the inductively coupled electrode (3) is configured with a A picture frame-shaped substrate holder (38) for the substrate (4), such that the substrate (4) is disposed at approximately the center of the opening (36) of the partition wall (37) and at the outer peripheral edge of the substrate holder (38) Covered by a bulkhead (37).