48 results about "Kernel system" patented technology

The invention provides a firewall system based on a virtual machine, comprising a kernel system, a firewall and a customer operation system. The kernel system is arranged in a safe partition of a disk. The customer operation system is used directly by users. The virtual network connection is adopted between the kernel system and the customer operation system. The network access of the customer operation system is forwarded by the kernel system. The firewall is arranged in the kernel system, and the network access of the customer operation system is controlled by the firewall after being forwarded by the kernel system. The firewall system based on the virtual machine has the advantages that: firstly, the firewall software does not depend on the type of the customer operation system which can be Windows, Linux or other operational systems; secondly, even being reinstalled, the customer operation system is stilled protected by the bottom firewall; thirdly, even the customer operation system is provided with vulnerabilities or a backdoor, private data which are sent out accidentally can also be intercepted by the bottom firewall.

In the method for implementing the event transfer system of a real time operating system kernel, the task with the highest priority first obtains the event under the multi-tasking environment which requires real time characteristics. In the case of the multi-tasking environment in which the priority-based preemptive scheduling is adapted, if a plurality of tasks with respect to one event, call a kernel system function of receiving the event, the real time operating system kernel queues the tasks into the waiting-list of the event in the priority order. In this state, when the event is sent, the task having the highest priority in the waiting-list immediately obtains the event, is woken up and is resumed in its execution.

A booting system includes a central processing unit (CPU) core, a system bus, a main memory, a boot loader memory device, a first external memory device, a boot logic unit, a second external memory device and an external interface unit. The first external memory stores a boot loader program, which is transferred to the boot loader memory device. An operating system stored in the second external memory unit is transferred to the main memory by an external interface unit, which is controlled by the boot loader program. The first external memory device and the boot logic unit may be excluded, and a ROM may be employed as the boot loader memory device. Therefore, a booting speed may be increased, a number of input and output pins may be reduced, and power consumption may also be reduced.

The invention discloses a kernel-based Android application real-time behavior analysis method and a behavior analysis system capable for implementing the method. The method comprises a system call monitoring initialization step, a kernel system call interception monitoring and parsing step, a parsing result-based information logging step and an information log-based application behavior reconstruction step. A system call is intercepted and parsed in a kernel, so that an application file, a network as well as inter-process communication and other particular behaviors of the Android system are reconstructed; the whole behavior analysis process is monitored in real time in the kernel, so that the accuracy of behavior obtaining is guaranteed; meanwhile, the kernel has the highest authority, so that malware is hard to evade the kernel; according to the method, no code in the Android system is modified, so that the performance loss is low; practice proves that a result of the method can serve as key evidence to be obtained and provides a reference for malware detection.

The IP kernel simulating verification platform based on PCI bus includes crystal vibrator, DC voltage regulator, FPGA, programming interface, SDRAM and PCI interface. The verification process includes describing IP kernel system in Verilog HDL language, interconnecting the top layer simulating modules with PCI bus, interconnecting hardware modules with internal bus the same as that in SoC inside the chip, embedding verified IP kernel into the verification platform, and controlling the platform to test IP kernel in PC. The present invention has verification platform with simple structure and convenient use, and verification process capable of simulating effectively SoC environment of IP, utilizing FPGA and PC in the hardware verification of IP, real-time creating test data for IP kernel to test and real-time accessing the register and memory inside IP kernel to obtain the verification finishing data.

The invention relates to a method for supporting the integrity measurement of boot files in trusted virtual domain of a zero-downtime machine. Management tool and boot manager of the virtual domain in privilege domain are modified to realize that the integrity measurement of the system boot files in the trusted virtual domain is just carried out when the system boot files are loaded, therefore, the safety and extensible problems for carrying out the integrity measurement of the system boot files in the trusted virtual domain when booting computer are overcome and the system flexibility are improved, and the arrangement of the trusted virtual domain including re-customizing or updating kernel system of virtual domain can be carried out dynamically during running process of computer, and data service of other virtual domain in the same hardware platform is not interrupted when booting trusted virtual domain. The measurable boot files comprise configuration files of virtual domain, boot configuration files of virtual domain and the files that are needed to be measured are designated by the boot configuration files of virtual domain. The method can cooperate with other trusted computing technology in virtual environment to build a complete virtual domain boot trusted chain.

An interruption management method in a car operation system based on power PC processor characterizes in applying different processed filed conservations according to the operation state of a system when interruption happens to the inserted real-time operation system applying double kernel structure realized based on power PC processor and applying one time conservation one time recover when carrying out kernel operation so as to reduce unnecessary stack operation, which increases the interruption response speed and system operation efficiency.

The invention discloses a universal convolution-pooling synchronous processing convolution kernel system, and belongs to the technical field of convolution neural network acceleration in machine learning. An existing machine learning method is realized by adopting software, so that the problems of limited computing power, higher cost and the like exist. According to the present invnetino, the machine learning is realized by adopting the hardware design, the purpose of accelerating the convolutional neural network is realized in a convolutional-pooling synchronous processing manner, and the machine learning can be realized quickly and efficiently with low power consumption on the premise that the accuracy is not changed. According to an existing convolutional neural network, a convolution kernel is generally of a fixed size and cannot adapt to various design requirements, but the convolution kernel of the invention can change the parameters such as the size and the step length of the convolution kernel and can adapt to the design requirements under various conditions.

Described is an enhanced application of a fast kernel trap, or kernel function call, in combination with a kernel system call providing a system of handling complications during kernel thread operations. In the event of a complication during kernel function call processing, the kernel function call promotes to a system call. If the kernel function call holds a spin lock at the time of promotion, the spin lock is released. Kernel function call processing is divided into phases and a phase identifier is provided to the system call. To avoid repeating processing steps already performed by the kernel function call, system call processing begins at the phase where the complication occurred. When the system call processing reaches a suspend phase, the system call will demote to a kernel function call and release its kernel stack.

A PCI (peripheral component interconnect) resource traversal method comprises the following steps of: according to a PCI data structure stored in a kernel system, acquiring data information of a PCI main bus, and setting the PCI main bus as a current PCI bus; scanning all PCI devices under the current PCI bus; recording all the PCI devices, recording relevant information of positions of the PCI devices at the PCI bus into a single data structural body; judging whether bridges exist in the PCI devices; when the bridges exist in the PCI devices, judging whether all the bridges are not connected with downlink buses; and when the bridges are connected with the downlink buses, acquiring the downlink buses connected on all the bridges one by one, and setting the downlink buses as the current PCI buses one by one. The invention further provides a PCI resource traversal system. Through the PCI resource traversal method and the PCI resource traversal system, PCI resource traversal can be quickly realized, and resources of a computer can be saved safely and reliably.

The invention discloses a general control kernel system used for integrated circuit manufacturing equipment. The system comprises a configuration module, a control module and a monitoring module, wherein the configuration module is used for instantiating objects and registering the instantiated objects into name space when an object system is started, establishing an initial name space structure, and initializing the objects in the initial name space tree structure; the control module is used for controlling a service that a high-level control unit calls and executes a low-level control unit according to the initial name space tree structure established by the configuration module, wherein the controlled objects comprise a physical layer, a functional layer and an operation layer according to the level from low to high and the controlled objects also comprise a maintenance layer which is at the same level as the operation layer; and the monitoring module is used for monitoring conditions of the kernel system and executes corresponding operations independently when the conditions are met. The invention provides a strong application programming interface supporting software interlock, data logging and communication function, and realizes component development and software reuse through a flexible configuration strategy.

The invention provides a method for processing event information in multiple systems. The method is applied to the operating environment of terminal equipment comprising a kernel system and multiple subsystems and comprises steps as follows: when any subsystem detects event trigger information, the subsystem executes corresponding operation on a file node which is provided by the kernel system and corresponds to the event trigger information, and the event information is generated; at least one subsystem corresponding to an event type of the event information is determined; the kernel system controls the at least one corresponding subsystem to read data of the operation executed on the file node, and the event information is acquired. With the adoption of the technical scheme, the blank of absence of a processing solution of the event information in multiple systems in the prior art is filled up.

Disclosed is an apparatus and method of processing input and output in a multi-kernel system. A method of processing input and output in a multi-kernel system according to the present disclosure includes: setting a shared memory between a first kernel on a main processor and a lightweight kernel on a parallel processor; setting a data transmission and reception channel between the first kernel on the main processor and the lightweight kernel on the parallel processor using the shared memory; providing, on the basis of the data transmission and reception channel, an input/output task that occurs in the lightweight kernel to the first kernel on the main processor; processing, by the first kernel on the main processor, an operation corresponding to the input/output task; and providing a result of the processing to the lightweight kernel.

The invention relates to a service processing method and device based on a container technology, computer equipment and a storage medium. The method comprises the following steps: receiving a servicerequest sent by a user terminal, wherein the service request carries resource demand information; constructing a container corresponding to the resource demand information as a container matched withthe user terminal; controlling the container, and processing the service request; if it is detected that the container finishes processing the service request, deleting the container. By adopting themethod, the purpose of constructing the matched container in real time to execute the service request according to the service request sent by the user terminal is achieved; in the process of executing the service request, the container shares the kernel system of the server, the kernel system does not need to be occupied independently, the defect that resources of the server are occupied greatlydue to the fact that the service request is executed through a virtual machine is overcome, and therefore, the resources of the server are saved, and the resource utilization rate of the server is further increased.

The invention provides a method for improving software compatibility for a linux system. The method mainly comprises the following steps: capturing a processing process identification number called bya kernel system from a received command; suspending an original processing process called by the kernel system to enable the original processing process to be in a dormant state; cloning a system call process of the kernel, and modifying an interface address in a cloned system call process copy into an address stored by a custom function, wherein the modified cloned system call process copy is inan active state to wait for the CPU to execute a related processing command; and after the command is executed, destroying the cloned system call process copy, searching the original processing process according to the processing process identification number, and recovering the operation of the original processing process. According to the method, the compatibility of the software for the linuxsystem is effectively improved, the consumed time of the method is short, and the whole method is dynamically executed and is more efficient and stable. Meanwhile, the safety performance of the wholemethod is improved.

The invention provides a kernel-based method for detecting the super privilege acquisition behavior of an application program, which comprises the following steps: 1) collecting a kernel system call log generated in the running of an Android application to be detected; 2) judging whether the Android application to be detect has acquired the super permission through a log, continuing to execute ifthe Android application is established, or ending the analysis; 3) analyzing the sequence relation, frequency relation and parameter special assignment of system call through log, comparing with 4 CVEfeatures, and analyzing the method of obtaining super privilege used by Android application to be detected.

The invention discloses a microkernel kernel system applied in control software of vehicle air conditioning control panel products, which comprises the following steps of: (1) initializing; (2) converting tasks; (3) collecting user operation instructions: collecting the instructions sent out after the user operation; (4) displaying the system state: converting the command collected in the step (3) into system instructions and using a display device to represent each state of the system; (5) controlling logical calculation: calculating the states of each executing agency on the system instructions of the step (4) according to the logic of the air conditioning; (6) controlling drive output and controlling each executing mechanism; (7) implementing system services: providing CAN/LIN communication service; and (8) implementing basic system services: providing the basic services like a timer and ADC and the like. The logical change of the system structure leads the microkernel kernel system to have higher performance, consistency and robustness on multi-aspects like parallel development, testing and performances, and the like.

The invention discloses a security audit method and system for a kernel, which is mainly comprises: integrating the kernel inverted hook technology into a host security system, organically combining the host security audit technology and the kernel inverted hook technology, scanning each kernel module in equipment and determining kernel hooks installed in each kernel module, the kernel module provided with illegal software is determined, and the determined kernel module is unloaded, thereby improving the security and the reliability of a kernel system.

The invention belongs to the technical field of data tracking, and discloses a big data full life cycle management method, system and application based on duty tracking, in a big data life cycle, in a data acquisition, storage and integration process, a probe is added to collect corresponding link data, and the data is transmitted to a duty tracking platform to perform aggregation analysis, so that the data acquisition, storage and integration efficiency is improved. Visual data are assembled and then stored, a Web tracking function, a topological graph and a monitoring alarm function are opened, and tracking of the life cycle of big data is achieved. According to the method, byte code enhancement and plug-in type collection are adopted, high expandability and stability are achieved, the micro-kernel architecture is used in the data collection stage, the micro-kernel architecture splits a changing part and an invariable part, the test cost is reduced, the stability of a kernel system and other plug-ins can be guaranteed, and the test efficiency is improved. When a new processing process is added, only a corresponding plug-in module needs to be added, and the expandability is extremely high.