564 results about "Domain controller" patented technology

A method for facilitating distributed authentication includes the step of requesting, by a user of a client machine residing in a first domain, access to a resource residing in a second domain. The client machine authenticates the user to an intermediate machine. The intermediate machine impersonates the client machine. The intermediate machine impersonating the client machine requests access to the second domain from a domain controller residing in the second domain. The domain controller authorizes the requested access, responsive to a determination that the impersonated client machine is trusted for delegation. The domain controller transmits to an application server residing in the second domain, authentication data associated with the impersonated client machine. The application server transmits, to the intermediate machine, a launch ticket uniquely identifying a logon token. The client machine provides, to the application server, the launch ticket to access the resource residing in the second domain.

A tamper-resistant apparatus located on board of an aircraft for avoiding a restricted air space (RAS) comprising: (a) a tamper-resistant restricted air space (TAP-RAS) database configured to include a set of coordinates that determines the RAS; and (b) a navigational processor configured to navigate the aircraft around the RAS, if a valid overriding command is not generated. The navigational processor includes: a Satellite Positioning System (SATPS) configured to substantially continuously obtain a set of real time position coordinates of the aircraft; a restricted airspace controller configured to receive a set of real time data including the set of coordinates that determines the RAS, the set of real time position coordinates; and configured to analyze the set of real time data in order to substantially continuously generate a set of real time commands; and an aircraft controller configured to navigate the aircraft utilizing the real time set of commands around the RAS. The navigational processor is configured to navigate the aircraft in an overriding mode, if the valid overriding command is generated.

A zone controller having an electronic board with a plurality of electronic components attached thereto. The electronic components are constructed and arranged to receive a plurality of signals from a plurality of thermostats and to transmit a plurality of signals to a plurality of air control devices for controlling airflow in ducts. The electronic components include a first grouping of electronic components that are not accessed to perform either installation or operation functions, a second grouping of electronic components that are accessed to perform installation functions, and a third grouping of electronic components that are only accessed to perform operation functions. A first cover is provided that covers and prevents access to the first grouping of electronic components. A second cover is provided that selectively covers and prevents access to the second grouping of electrical components but not the third grouping of electrical components.

A computer chassis compliant with the Intelligent Platform Management Interface includes a central baseboard management controller (CBMC) and at least one computer board set. The computer board set includes a microcontroller that operates simultaneously as a satellite management controller to receive system management requests from the CBMC and to provide system management information to the CBMC, and as a local baseboard management controller to receive system management information about the computer board set and to provide the system management information about the computer board set to the computer board set. The computer board set detects a local event, which is entered in a local system event log. The satellite management controller determines if the event was requested by the CBMC, and if so, transmits a corresponding event message to the CBMC. The local baseboard management controller determines if local action is required and performs the local action.

A method of and system for digital rights management, in which access to a piece of content is granted in accordance with a license owned by a license owner to a client who is a member of a domain. This requires successfully verifying that a membership relation exists between the client and the domain as reflected in a first state variable, and that an association relation exists between the license owner and the domain as reflected in a second state variable. Both relationships are revoked by executing an online protocol between the parties in the relationship after which both remove the corresponding state variable. The domain controller propagates the state administration relating to the domain is propagated to the client so that the client can update its state administration.

A client computer that supports different behaviors when connected to a private network behind a network firewall than when outside the network firewall and connected indirectly through an access device. The client computer is configured to attempt communication with a device on the network. Based on the response, the client computer can determine that it is behind the network firewall, and therefore can operate with less restrictive security or settings for other parameters appropriate for when the client is directly connected to the network. Alternatively, the client computer may determine that it is indirectly connected to the network through the Internet or other outside network, and therefore, because it is outside the private network firewall, should operate with more restrictive security or settings of other parameters more appropriate for use in that network location. The described approach operates even if the remote client computer has a direct connection to the network that enables it to authenticate with a domain controller.

A system and method for allowing user access to software applications, data storage and retrieval, and electronic mail and messaging services in a networked computing environment are provided. The need for software installation, upgrade, and version control, and the need for certain hardware upgrades are eliminated by providing software and data storage and retrieval to a user or to groups of users from a remote terminal server via a networked computing environment. Software applications, data and electronic mail and messaging services are stored, maintained and operated at a remote terminal server and are provided to the user over the Internet or over an intranet of an organization such as a company or educational institution. Data is stored and secured at a remote file server, and web operations are provided by a remote web server. The backend of the system, including the terminal servers, file servers and web servers is managed and secured by a domain controller.

In one or more embodiments, one or more systems, methods, and / or processes may receive a service function chain description that includes service functions associated with multiple domains, and rather than any of the domains ignoring or rejecting outside nodes, nodes may be configured to communicate with the outside nodes in implementing a service function chain associated with the service function chain description. For example, an arbiter (e.g., a central arbiter) may provide control information and / or configuration information, based on the service function chain description, to one or more systems of each domain. In one instance, the arbiter may provide the control information and / or the configuration information to a border node of each domain. In another instance, the arbiter may provide the control information and / or the configuration information to a domain controller of each domain.

An embodiment of the invention provides an SDN-based tiered routing path determination method and device that are applied to an inter-domain controller and an intra-domain controller in a software-defined network; the SDN-based tiered routing path determination method comprises the following steps: a cross-domain request of a data flow sent by the intra-domain controller is obtained; according to the cross-domain request, a start point network domain and an intermediate network domain where a source node is positioned are determined; network performance information sent by the intra-domain controller is obtained; according to the network performance information and a plurality of preset cross-domain route selection strategies, an optimal routing path for transmitting the above data flow in all network domains is determined; according to the start point network domain and the intermediate network domain, boundary information of a first network domain and boundary information of a second network domain are determined and sent to the intra-domain controller, and the intra-domain controller is enabled to determine the optimal routing path for data transmission in the network domains. Via the SDN-based tiered routing path determination method and device, optimal design of a cross-domain routing path can be realized.

Techniques are disclosed for provisioning a virtual desktop. A VM hosting the desktop may be joined to a domain using offline domain join and customized by modifying contents of a virtual disk of the VM, as per the customization requirements, without powering on the VM. While the VM is powered off, a composer application customizes the VM by applying system and user profile configuration changes and network configuration changes, as well as optionally creating a user data disk and pushing to the VM a script for formatting said disk during the VM's first power-on. In addition, while the VM is powered off, the composer invokes a domain joining tool to join the VM to a domain controller without having to reboot the VM. A snapshot is then taken of the VM, after which the VM is then powered on and the script for formatting the user data disk executes.

A method, system, and computer program product for monitoring and correcting directory service domain controller replication errors is provided. In one embodiment, a replication monitor queries the director service for replication information and determines whether an error exists. If an error is determined to exist, then the replication monitor consults a database of known error types and associated corrective actions to determine the appropriate corrective action. The appropriate corrective action is then performed. The replication monitor also visually displays information regarding the progress of the domain controller replication process, wherein the information includes the identity of domain controller replication partners and the status of the replication process between any two domain controller replication partners, including whether, for example, errors have been determined and whether corrective action is being or has been taken.

Embodiments of the present application enable a user to map a network topology and to then dynamically filter the map display by hiding or showing nodes based on discovery characteristics, such as Simple Network Management Protocol (SNMP) status, Active Directory (AD) Domain Controllers (DC) status, group membership status, etc. to allow customization of maps views. In particular, a topology mapping is formed by collecting topology data of a network and storing this topology data. Filtering criteria are received from a user, and the stored topology data is filtered using this received filtering criteria. The filtered topology data is then displayed to the user.

Active directory (AD) Domain Controllers (DC) discovery includes determining the topology of the network, such as the nodes and connections in the network. For example, synthetic data may be transferred within the network and traced to determine the presence and relationships of the various network components. Alternatively, other mapping techniques are based upon mapping a known set of nodes to determine the relationship of the nodes. Next, Lightweight Directory Access Protocol (LDAP) commands are forwarded to the various nodes to identify the AD DC within a range of IP addresses discovered during the mapping of to the topology of the network.

The invention discloses a distributed domain controller system based on the network architecture of an automatic driving system. The system is provided with a central domain calculation control unit including a central domain calculation control sub unit and a vehicle Ethernet switch domain unit, wherein the central domain calculation control sub unit is connected with the vehicle Ethernet switchdomain unit in a vehicle Ethernet mode, the system is provided with a vehicle control unit including a central gateway unit, a power domain control unit, a chassis domain control unit, a vehicle bodycontrol domain unit and an electronic cabin unit, the different-function units are connected with the central gateway unit through controlling a local area network CAN bus, and the central gateway unit is connected with the vehicle Ethernet switch domain unit in a vehicle Ethernet mode. The system is advantaged in that flexibility of overall configuration, efficiency of data calculation and command execution under different dedicated functional units, and convenience of fault and abnormality handling and component replacement can be improved.

The invention relates to a plug-and-play smart vehicle domain controller with a redundant structure and a method. The domain controller is provided with a power supply redundancy structure, a microcontroller redundancy structure, a microprocessor redundancy structure, a communication redundancy structure, a data redundancy structure and a redundancy management module through a hardware redundancymethod. The microcontroller redundancy structure comprises more than two microcontroller MCUs which realize intelligent control and an auxiliary chip. The microprocessor redundancy structure is a multi-embedded microprocessor structure. The communication redundancy comprises multiple redundant buses. The data redundancy structure comprises more than two data storage units. The redundancy management module is used to isolate, switch and reconstruct input and output channels and signals of the domain controller when faults or attacks are discovered. The domain controller is connected with the whole vehicle to complete safe deployment, and is suitable for smart vehicles of the L3 class and above or link smart vehicles. Compared with the prior art, the domain controller provided by the invention has the advantages of high security, high reliability, high adaptability, good cross-platform versatility and the like.

Branch domain controllers (DCs) contain read only replicas of the data in a normal domain DC. This includes information about the groups a user belongs to so it can be used to determine authorization information. Password information, however, is desirably replicated to the branch DCs only for users and services (including machines) designated for that particular branch. Moreover, all write operations are desirably handled by hub DCs, the primary domain controller (PDC), or other DCs trusted by the corporate office. Rapid authentication and authorization in branch offices is supported using Kerberos sub-realms in which each branch office operates as a virtual realm. The Kerberos protocol employs different key version numbers to distinguish between the virtual realms of the head and branch key distribution centers (KDCs). Accounts may be named krbtgt_<ID> where <ID> is carried in the kvno field of the ticket granting ticket (TGT) to indicate to the hub KDC which krbtgt′ key was used to encrypt the TGT.

Active directory (AD) Domain Controllers (DC) discovery includes determining the topology of the network, such as the nodes and connections in the network. For example, synthetic data may be transferred within the network and traced to determine the presence and relationships of the various network components. Alternatively, other mapping techniques are based upon mapping a known set of nodes to determine the relationship of the nodes. Next, Lightweight Directory Access Protocol (LDAP) commands are forwarded to the various nodes to identify the AD DC within a range of IP addresses discovered during the mapping of to the topology of the network.

The invention relates to an environment zone controller which is used for controlling signals to be sent to executing mechanisms of an air conditioner fan, a curtain, a lamp, a new wind valve and the like through various acquired signals in an indoor environment so as to maintain environment parameters set by a user. The controller is also provided with an input port and an output port of digital quantity and simulating quantity, an RS232 port, an RS485 port, and an RJ45 port carrying out data interaction with an upper computer; and control software is loaded on a hardware module, carries out signal acquisition on an environment sensor in the environment zone through the input port of digital quantity and simulating quantity, at least comprises a temperature control module, an optical control module and an air quality control module, and controls the signals to be sent to the executing mechanisms of the air conditioner fan, the curtain, the lamp, the new wind valve and the like by the temperature control module, the optical control module and the air quality control module according to various acquired signals so as to maintain the environment parameters set by the user. The invention can start one part of functions according to different zones, such as subsystems of a new wind quantity control system and the like.

The invention provides an information processing method based on a vehicle-mounted gateway controller and the gateway controller. The method includes the steps of obtaining communication data to be transmitted, and transmitting communication data to other domain controllers through an Ethernet module integrated in an AURIX chip according to a preset domain control configuration. According to the embodiment of the invention, the vehicle-mounted gateway controller processes information, which ensures safe and real-time information exchange, and increases safety and reliability of an entire vehicle system.

The invention discloses a wireless access controller deployment method based on an SDN (Software Defined Network), and belongs to the technical field of wireless communication networks. The deployment method comprises the following steps that: a plurality of access network domain controllers process flow table establishment or update requests of base stations or access points which are directly connected with the plurality of access network domain controllers; a global controller runs on a cloud platform to construct an event-based publishing and subscribing system, and is connected with the access network domain controllers to construct physically-distributed and logically-centralized wireless access controller deployment architecture; and the access network domain controllers communicate with management applications running on the access network domain controllers through a northbound protocol, and communicate with an underlying data surface through a southbound protocol. Through adoption of the wireless access controller deployment method, the problem of delay in concurrent request processing in centralized control of a conventional single controller is solved; the advantage of a centralized control thought of the SDN is kept; and global optimal scheduling can be performed. The deployment method has very high extensibility and robustness.

The invention discloses a cloud computing safety control platform based on safety classification. The cloud computing safety control platform comprises a cloud computing system, at least one domain included in the cloud computing system and at least one virtual platform included in the domain, wherein at least one cloud controller is arranged in the cloud computing system; at least one domain controller is arranged in the domain; at least one security manager is arranged in the virtual platform; the overall cloud is monitored and all domains are controlled by the cloud controller; an instruction from the cloud controller is received and all virtual platforms in the domain are controlled by the domain controller; and the instruction of the domain controller is received by the security manager in the virtual platform and corresponding safety level of VM (virtual memory) is operated. According to the cloud computing safety control platform based on safety classification, a cloud environment is divided into different safety level domains, so that the cloud computing system has the characteristics of simplicity, isolation, flexibility and expandability.

A method and system for downloading software according to an identity of a user. Upon booting up a client computer, the user is automatically directed to a deployment server, which contains a listing of software to which the user is authorized to download and use. The directions to the deployment server are provided by a domain name server, or a domain controller. The software initially loaded onto the client computer is minimal, such that it is easily appended with additional features and programs.

The invention discloses an augmented reality vehicle-mounted head-up display system, which comprises front windshield glass mounted on an automobile body, and further comprises an advanced driving assistance system module, a navigation module, a V2X communication module, a vehicle-mounted domain controller module and an AR-HUD (Augmented Reality Head-Up Display) projection whole-machine module which are mounted on the automobile body. The system tracks vehicle conditions, road conditions and outside information that affects driving in real time through the vehicle-mounted advanced driving assistance system module, the navigation module and the V2X module; the AR-HUD projection whole-machine module accurately projects a virtual image into a real environment, so that a driver sees augmentedoutside environment information, and the assisted driving capacity and the driving safety, timeliness, accuracy and stability are greatly improved; and part of the modules can directly use existing hardware modules of an automobile, so that the cost is low.

The invention relates to a multi-sensor-based target detection fusion device and method. The fusion device comprises at least two sensor units, a vehicle-mounted driving auxiliary domain controller, a display screen and a power source. Each sensor unit comprises a sensor and an electronic controller connected with the sensor, wherein the electronic controller is connected with the vehicle-mounted driving auxiliary domain controller to form a distributed structure. The vehicle-mounted driving auxiliary domain controller is connected with the display screen. The power source is connected with the sensor unit, the vehicle-mounted driving auxiliary domain controller and the display screen separately. The method comprises the steps of determining target pairs, wherein the target pairs with the closest distance are obtained, and the target pairs may be the same target found by different sensors; determining whether the target pairs are the same or not. Compared with the prior art, the multi-sensor-based target detection fusion device has the advantages that more attributes of the targets are obtained, the framework is simple, and expandability is achieved.

Disclosed are a multi-domain controller, a single-domain controller, and a software-defined optical network system and method. The multi-domain controller at least comprises a virtual network service manager. The virtual network service manager is configured to process a cross-domain or single-domain virtual optical network service (VONS) service request from an application layer. The cross-domain VONS service request is divided into two parts to be processed: an inter-domain part and each intra-single-domain part. The inter-domain part of the cross-domain VONS service request is processed by the multi-domain controller; with regard to a service request for a bandwidth on demand (BOD) connection attribute in the cross-domain VONS service request, the request is forwarded to a routing connection controller; and with regard to a service request for an optical virtual private network (OVPN) attribute in the cross-domain VONS service request, OVPN service processing comprising establishment and deletion is performed according to acquired virtual network layer resources.

The invention discloses a power domain control system for an electric car. The power domain control system for the electric car comprises a power domain controller, a battery pack information acquisition system, a motor control system and other auxiliary devices; wherein the power domain controller integrates whole car control and battery management functions; the battery pack information acquisition system realizes battery pack information acquisition and high-pressure contactor drive functions, and comprises a high-pressure management module and a unit information acquisition module; and thepower domain controller is in communication with a motor controller through a power controller area network (CAN) bus, is in communication with an instrument and other domain controllers of the car through a whole car CAN bus, is in communication with a quick charging pile through a quick charging CAN bus, and is in communication with the battery pack information acquisition system and a chargerthrough a battery intranet CAN bus. According to the power domain control system for the electric car provided by the invention, the power domain system becomes three parts, namely, the domain controller, the battery pack information acquisition system and a motor drive system, so that the integration level of power domain software is improved, the design of the battery pack system is simplified,and the structure of the power domain system is optimized.

The invention relates to a 3D (3-dimnesional) printing manufacturing method for a PDC (primary domain controller) drill bit body. The method has the technical scheme of comprising the following steps that a 3D model of the PDC drill bit body is built; the 3D model is subjected to 2D (2-dimnesional) processing; a corresponding laser scanning path is generated according to a formed 2D pattern; multiple layers of metal material powder is uniformly paved on a material increasing manufacturing equipment platform; metal material powder on the processing platform is scanned according to the laser scanning path; the PDC drill bit body is separated from the surface of the processing platform in a line cutting mode; the drill bit body is subjected to various process processing such as wear-resistant layer spraying and welding on the drill bit body by using the technical requirement of the designed PDC drill bit body as the criterion; flaw detection and cleaning are carried out, and finally, the PDC drill bit body after the manufacturing completion is formed. The 3D printing manufacturing method has the beneficial effects that the problem of single structural form of the PDC drill bit body manufactured by adopting a traditional material decreasing manufacturing method is solved, meanwhile, the defects of the traditional machining and casting process are greatly overcome, the integral performance and the manufacturing efficiency of the PDC drill bit are improved, and the manufacturing cost is reduced.

A method for facilitating distributed authentication includes the step of requesting, by a user of a client machine residing in a first domain, access to a resource residing in a second domain. The client machine authenticates the user to an intermediate machine. The intermediate machine impersonates the client machine. The intermediate machine impersonating the client machine requests access to the second domain from a domain controller residing in the second domain. The domain controller authorizes the requested access, responsive to a determination that the impersonated client machine is trusted for delegation. The domain controller transmits to an application server residing in the second domain, authentication data associated with the impersonated client machine. The application server transmits, to the intermediate machine, a launch ticket uniquely identifying a logon token. The client machine provides, to the application server, the launch ticket to access the resource residing in the second domain.