194 results about "Microkernel" patented technology

A level of abstraction is created between a set of physical processors and a set of virtual multiprocessors to form a virtualized data center. This virtualized data center comprises a set of virtual, isolated systems separated by a boundary referred as a partition. Each of these systems appears as a unique, independent virtual multiprocessor computer capable of running a traditional operating system and its applications. In one embodiment, the system implements this multi-layered abstraction via a group of microkernels, each of which communicates with one or more peer microkernel over a high-speed, low-latency interconnect and forms a distributed virtual machine monitor. Functionally, a virtual data center is provided, including the ability to take a collection of servers and execute a collection of business applications over a compute fabric comprising commodity processors coupled by an interconnect. Processor, memory and I / O are virtualized across this fabric, providing a single system, scalability and manageability. According to one embodiment, this virtualization is transparent to the application, and therefore, applications may be scaled to increasing resource demands without modifying the application.

A page table entry management method and apparatus provide the Microkernel System with the capability to program the memory management unit on the PowerPC family of processors. The PowerPC processors define a limited set of page table entries (PTEs) to maintain virtual to physical mappings. The page table entry management method and apparatus solves the problem of a limited number of PTEs by segment aliasing when two or more user processes share a segment of memory. The segments are aliased rather than duplicating the PTES. This significantly reduces the number of PTEs. In addition, the method provides for caching existing PTEs when the system actually runs out of PTEs. A cache of recently discarded PTEs provides a fast fault resolution when a recently used page is accessed again.

A computing system contains and uses a partitioning microkernel (PMK) or equivalent means for imposing memory partitioning and isolation prior to exposing data to a target operating system or process, and conducts continuing memory management whereby data is validated by security checks before or between sequential processing steps. The PMK may be used in conjunction with an Object Request Broker.

The invention discloses a software development method for performing model driven architecture and the system thereof, belonging to the field of computer software. The method comprising the following steps: abstracting a business flow process into node elements, customizing a node business flow description file from control flow, core business flow and page flow three levels, customizing a data model file, and inputting the business flow file and the data model file into a parser to generate target frame codes. The invention also provides an attribute file of business flow graphical layout for WYSIWYG customizing the attribute information of the node elements; the system consists of a microkernel, a plug-in, a tools integration, an application server integration and a knowledge library. The invention can quickly respond to business requirement change and technical change, support highly modularized and highly integrated software system, has wide application and provides a solid foundation for further development of computer software technology.

A computer system employing a microkernel executes two different tasks, e.g., operating systems, yet uses common shared libraries. Rather than each task setting up its own libraries, during compile a global offset table is set up for each task so that the tasks can use common shared libraries. An abstractions layer is established to allow the tasks to share the global offset table, and thus to use common shared libraries. Threading package related services are resolved via the abstractions mechanism. This abstractions mechanism includes services implemented as operating system abstractions, and include thread creation, exit from a thread, etc. Abstracted functions utilize pointers to runtime environment-specific functions, and are utilized by the task's runtime environment.

The embodiment of the invention discloses an encryption method and an encryption system based on ARM TrustZone. The encryption method is used in a mobile device which is provided with an ARM processor. The encryption method includes the steps that a security microkernel is preset in the mobile device, wherein the security microkernel is used for dividing a security zone internal storage into a plurality of task internal storage spaces to support the simultaneous operation of a plurality of independent secure application programs which are dependable without the need for mutual detection; secure startup is carried out to enable the mobile device to run in a security zone when a system kernel is started up; when encryption and decryption need to be carried out on an upper-layer application, the security microkernel is called through TrustZone API to finish the encryption and decryption. On the technical basis of the ARM TrustZone, the security microkernel is built to enable the security zone to be separated from a common zone, and all applications relevant to security on the mobile device are placed in the security zone, so the security of the mobile device is greatly improved.

The invention discloses a micro kernel pluggable program application system and an implementation method thereof, which are used for solving the technical problems of low software updating efficiency and the high redundancy under the conventional software architecture mode. By the method, a friendly plug-in based software updating system is implemented; and during software updating, a plug-in unit is used as an updating logic unit, so the updating redundancy is reduced. By using an extendible plug-in structure, a plug-in description file is used for describing a dependence relation among plug-ins, so a micro kernel can nest and load plug-in resources according to a plug-in resource configuration file and the extendibility is strong. The micro kernel downloads at the first time and uploads a root plug-in comprising a key function according to the plug-in resource configuration file, and downloads and uploads a sub plug-in on which the root plug-in depends; and as the plug-in uploaded at the first time is used at the first time, the user experience is enhanced. By the invention, the judgment on the version of an automatic plug-in, the automatic downloading of the plug-in and dependence uploading procedure architecture based on the plug-in are realized so as to realize the system upgrading automation.

A computing system contains and uses a partitioning microkernel (PMK) or equivalent means for imposing memory partitioning and isolation prior to exposing data to a target operating system or process, and conducts continuing memory management whereby data is validated by security checks before or between sequential processing steps. The PMK may be used in conjunction with an Object Request Broker.

Multiple different operating systems are enabled to run concurrently on the same computer. A first operating system is selected to have a relatively high priority (the realtime operating system, such as C5). At least one secondary operating system is selected to have a relatively lower priority (the general purpose operating system, such as Linux). A common program (a hardware resource dispatcher similar to a nanokernel) is arranged to switch between these operating systems under predetermined conditions and modifications are provided to the first and second operating systems to allow them to be controlled by the common program.

Systems and methods for automated failure recovery of subsystems of a management system are described. The subsystems are built and modeled as services, and their management, specifically their failure recovery, is done in a manner similar to that of services and resources managed by the management system. The management system consists of a microkernel, service managers, and management services. Each service, whether a managed service or a management service, is managed by a service manager. The service manager itself is a service and so is in turn managed by the microkernel. Both managed services and management services are monitored via in-band and out-of-band mechanisms, and the performance metrics and alerts are transported through an event system to the appropriate service manager. If a service fails, the service manager takes policy-based remedial steps including, for example, restarting the failed service.

The invention discloses a method for realizing hardware mirror startup optimization for embedded operating system, not directly ending running of embedded operating system but saving state of the running operating system together with microkernel of the operating system into the in-chip memory of a processor, directly loading at the time of startup and restoring to the running state saved. And it can remarkably speed up system booting and restart so as to remarkably raise startup speed of the embedded system and reduce the time for user to wait.

According to the invention, a motor vehicle control device is provided, comprising: a microkernel; several entities; and a software bus, via which the entities can communicate with each other and with the kernel, wherein one or more of the entities represent respectively one or more modules of the AUTOSAR base software. The present invention is based inter alia on the idea of representing the AUTOSAR architecture on a microkernel-based architecture. Thereby, the motor vehicle control device according to the invention makes it possible for example to link infotainment applications with AUTOSAR-based applications.

The invention discloses an application program dynamic loading method based on a micronucleus operating system, which comprises the following steps: analyzing the format of an object program, calculating and distributing the size of memory which is needed by a code segment and a data segment in a module, coping the code segment and the data segment to the memory, determining a symbol which needs to modify an address according to relocation information of an object file, finding out an original migration of the symbol which needs to modify from a symbol table and a string table, calculating a practical operation address of the symbol, and filling the practical operation address of the symbol to the object program. The application program dynamic loading method greatly reduces the demands of the system for the memory, and does not need the supporting of the operating system which is based on the virtual memory technology. Furthermore, each application program also just pays attention to the development and the testing itself, and the application program after upgrading can be put into service through being directly covered on an original file. Different application programs are coupled through an interface, thereby effectively increasing the development efficiency, and reducing the development complexity.

A security enhanced network device includes a processor, a memory, and a communication controller operably connected to form a processing device. A microkernel provides a partitioning between a communication address space, a security enforcement address space, and a protected operations address space. The communication address space contains communications threads for interacting with a network. The protected operations address space contains protected operations threads for performing protected operations. The security enforcement address space contains security threads for providing secure isolation of the protected operations address space from the communication address space. A method of secure operation of the network device includes: partitioning the network device into the communication address space, the security enforcement address space, and the protected operations address space; interacting with the network; providing secure isolation of the protected operations address space from the communication address space; and performing protected operations.

The invention discloses a Web service container and a method for issuing multiple Web services, in particular a Web service container applied to an open software service framework Apache CXF and a microkernel integration frame. The Web service container comprises a Web service module and a deployer module. The method comprises the steps: the deployer module obtains a generic class including annotation identifications, wherein a deploy file in the deployer module is used for deploying the generic class to be issued in a Web service manner; the deployer module packages the deployed generic class to generate a Web service deployable file; and the deployer module analyzes the Web service deployable file to obtain a Web service deploy file statement, and issuing the Web services according to the Web service deploy file statement. The method for issuing the multiple Web services, disclosed by the invention, realizes that the multiple Web services are issued through operating all modules and deploying the modules in the framework in a thermal deployment manner.

The invention relates to a complete network middleware operation support platform which can be used for integrating a plurality of conventional mainstream middleware technologies, and a method for integrating a heterogeneous middleware member on the platform. The platform disclosed by the invention comprises a microkernel integration frame, a communication service layer, a public service layer, a member container layer and a service engine layer, wherein the microkernel integration frame provides upper-level service integration interface specifications of a life cycle management and command interface, an interoperation interface and a deployer interface needed for deploying specific components, for the four categories of service layers. According to the invention, deep integration of mainstream middleware technologies, such as JEE (Java Enterprise Edition), Web service, CORBA (Common Object Request Broker Architecture), COM / DCOM (Component Object Model / Distributed Component Object Model), and the like, is realized. The complete network middleware operation support platform and the integration method of the heterogeneous middleware can be widely applied to integration of different application service technology systems.

The invention belongs to the field of information security, and in particular relates to a method for performing login authentication and safely guiding another operating system by using a microkernel. The method comprises the following steps of: running the microkernel after starting a computer; by using security environment provided by the microkernel, performing authentication on a microkernel local computer and performing authentication on a network server or a USB key; and performing secondary authentication on a user account and a password input by a user. After two-time authentication is successful, the microkernel guides the operating system of the user, so that the information security of the user is protected and the safety and confidentiality of computer user information are improved.

A method of operation of an computing system includes: providing a microkernel; controlling a reconfigurable hardware device by the microkernel; configuring an event scoreboard module for monitoring the reconfigurable hardware device; and implementing an application configured in the reconfigurable hardware device including receiving a machine identifier for the reconfigurable hardware device.

An operating system includes a non-preemptive microkernel executing one or more processes in accordance with a predetermined priority; and one or more kernels adapted to be executed as one or more processes by the non-preemptive microkernel.

The invention discloses an encryption system and an encryption method based on TrustZone, belonging to the field of encryption of mobile devices. According to the invention, a mobile device system builds a normal mode and a safe mode, in the safe mode, a safe microkernel is preset, and the safe microkernel divides a safe zone memory into a plurality of task memory spaces and supports simultaneous running of independent safe applications; when upper applications need to be encrypted or decrypted, the mobile device system enters in a system monitor mode, context of the normal mode is backed up in the monitor mode, and then, the system enters in a safe mode, a driver layer calls the safe microkernel through a TrustZone API after receiving a call command of the upper applications, the system enters in a user running mode of the safe mode to execute corresponding safe services, and the safe microkernel returns back a key to a server for verification after encryption and decryption; and after the key passes the verification of the server, a user program and the server start normal data exchange, and restore the context of the normal mode.

The invention relates to a cloud computing-oriented comprehensive emergency management platform architecture. The platform architecture adopts a three-layer structure comprising a system service layer at the uppermost layer, a platform service layer at the middle layer and a data layer at the lowermost layer, wherein the system service layer comprises independent subsystems and provides system-level service support for PC (personal computer) terminal, WEB terminal and mobile terminal applications; the platform service layer adopts microkernel group technology and is divided into a plurality of microkernel groups each of which comprises a group of microkernels; one microkernel group provides a group of functions; the data service layer uniformly provides service for all the microkernels; and the data provided by the data service layer are stored in a physical storage device of a cloud platform by adopting the storage virtualization technology, and the data service layer provides an data service engine including data operation, data processing and the like for each database. The platform architecture effectively solves the problem of multi-user demand of the platform and can be widely applied to the design of the comprehensive emergency management platform architecture.

The invention discloses a software architecture method based on a microkernel and a plug-in, which comprises the following steps: on the basis of establishing a dynamic plug-in model, firstly, constructing a basic framework application program for loading a plug-in and providing a necessary execution environment for the operation of the plug-in; secondly, formulating naming rules of the plug-ins,and ensuring uniqueness of plug-in naming of different developers; secondly, sequentially formulating a physical organization rule of the plug-in, constructing a plug-in life cycle layer, constructinga plug-in service layer and constructing a theme event service layer; and finally, constructing a plug-in container, adding a cross-process message forwarding function in the plug-in container and the main frame, and providing a cross-process unified message interaction service. According to the method, software framework core service functions such as theme event interaction and cross-process unified interaction are realized, and the method has the characteristics of high reusability, high expansibility, dynamic plug-in loading and the like of an OSGI technology, and also has cross-platform,high-efficiency and cross-process capabilities.

The invention discloses a subprogram running method and device based on a microkernel system and electronic equipment. The method relates to routing forwarding in the field of computer networks, and comprises the following steps: acquiring a subprogram calling request for a target subprogram of a front-end host through a front-end system management module of a microkernel system; loading a targetsubprogram based on the front-end access path information in the subprogram calling request; calling the target subprogram, determining access information of a target back-end subprogram correspondingto the target subprogram in the server, and sending a service processing request for the target back-end subprogram to the server; receiving service processing result information sent by the server;and processing the service processing result information based on the target subprogram to obtain an application page of the target subprogram. According to the embodiment of the invention, code isolation between the application programs is realized through a plug-in mode of the application programs, the coupling degree between the application programs is reduced, and the development efficiency ofan application system is improved.

The invention relates a method which can realize reference monitors of high level secure operating system, mainly comprising: (1) the structure of a reference monitor; (2) the realization of the controlling of microkernel IPC communications; (3) the initiated process according to the security services needed by the reference monitor. The structure of the reference monitor comprises that the structure reference monitor bases on a microkernel with enhanced security while all service procedures and user applications are out of the microkernel; the inter-process communication (IPC) is the only way for applications to acquire service and access resources and for the interactions between servers. Making use of the structure of the reference monitor to limit the communications between users and acquire system service, the invention enforces of the security verification strategy of access control to avoid authentification bypass, having guaranteed the validity of the utilization and protection of the system resources by the reference monitor and thus improved the safety and service ability of the system. The invention satisfies the security requirements of high-level operating system.

A method of enabling multiple different operating systems to run concurrently on the same RISC (e.g. ARM) computer, comprising selecting a first operating system to have a relatively high priority (the realtime operating system, such as C5); selecting at least one secondary operating system to have a relatively lower priority (the general purpose operating system, such as Linux); providing a common program (a hardware resource dispatcher similar to a nanokernel) arranged to switch between said operating systems under predetermined conditions; and providing modifications to said first and second operating systems to allow them to be controlled by said common program.

The invention provides an analysis and detection method for in vivo micronuclei of a mouse for judging the toxicity of cigarette smokes; the invention is characterized in that the invention adopts the in vivo micronucleus detection mode, and can directly measure the micronucleus rate by the antibody fluorescence labeling method after processes of the stomach filling and toxicity contaminating of the mouse, the cell culture, the fixing and the dyeing. The steps of the invention are as follows: (a) the mouse is selected; (b) agglutinators of the cigarette smokes are prepared; (c) the mouse is contaminated with the toxicity of cigarette smoke condensates (CSC); (d) the mouse is bled for culturing, fixing, dyeing and counting; (e) test results are processed and analyzed so as to judge the toxicity of the cigarette smokes. Compared with the prior art, the invention has the advantages of high sensibility and reliable result, and provides a novel detection method for judging the toxicity of the cigarette smokes.

The invention provides a cooperative concurrent message bus, a driving member assembly model and a member disassembly method. The cooperative concurrent message bus comprises an information acquisition module, a parallel ring distributor, a linear memory block, a message filling module, parallel queue equipment, a message queue pool, a queue sequential manager, an entry mapping table and a system stack. According to the cooperative concurrent message bus, the driving member assembly model and the member disassembly method provided by the invention, the weakness of the existing concurrence implementation technology can be effectively overcome, and the concurrence technology and parallel programming is efficiently and reliably realized. The cooperative concurrent message bus, the driving member assembly model and the member disassembly method have the advantages of universality, low cost, high efficiency, energy saving, reusability, transparent distribution, microkernel, inherent object-supported technology and the like.

The invention discloses a geographic spatial information application system and an implement method thereof based on microkernel technology. The method creates a resource loading server by the microkernel technology. The method comprises the following steps that (1) the resource loading sever obtains a function service demand listing; (2) a resource loading supervisor confirms the function service demand listing and calls a function resolver to form a function module demand listing; (3) a listing counter of the resource loading supervisor checks resource allocation files, calls corresponding function modules and renews function module state labels; (4) a function combiner of the resource loading supervisor uniformly packages function serving modules as a function plug-in, wherein the function plug-in is used for responding calls of a client software, the function combiner generates function module labels, and the function labels and the function plug-in are returned to the client software together; (5) the client software calls the function plug-in. The method creates managing and automatic loading of atom granularity function modules and achieves efficient dispatch and ordering management of function resource, wherein the method bases on the microkernel technology.

A method of enabling multiple different operating systems to run concurrently on the same RISC computer, comprising selecting a first operating system to have a relatively high priority (the realtime operating system, such as C5); selecting at least one secondary operating system to have a relatively lower priority (the general purpose operating system, such as Linux); providing a common program (a hardware resource dispatcher similar to a nanokernel) arranged to switch between said operating systems under predetermined conditions; and providing modifications to said first and second operating systems to allow them to be controlled by said common program.