75results about "Specific access rights" patented technology

Systems and methods are described for building artificial intelligence (“AI”) agents. A server can provide a user interface (UI) that includes options to select and connect various agent objects. The agent objects can include prompt objects, dataset objects, model objects, and one or more code objects. A subset of the agent objects can be identified as available for selection based on evaluation of at least one management policy associated with an administrative user. A manifest file is generated based on the connected agent objects, and the manifest is validated against dependency rules to ensure that the stages of the agent meet prerequisites for the stages. Then, the server performs a simulated execution of an agent that corresponds to the validated manifest file, including an identification of at least one execution metric associated with the simulated execution.

Systems and methods are described for dynamic execution of artificial intelligence (“AI”) agents. A server can receive, from a client device, an input associated with an AI agent. Based on a manifest file or user profile, the server can identify a management policy that applies to the AI agent. The server then dynamically configures access to the agent objects based on applying the management policy. The management policy is applied to a device status of the client device, a user profile of a user of the client device, and / or a network configuration of the client device. The server then executes a modified workflow based on the dynamically configured access, wherein the modified workflow bypasses or changes operation of at least one of the agent objects. Based on the modified workflow, the server transmits an output to the client device.

Systems and methods are described for building artificial intelligence (“AI”) agents. A server can provide a user interface (UI) that includes options to select and connect various agent objects. The agent objects can include prompt objects, dataset objects, model objects, and one or more code objects. A subset of the agent objects can be identified as available for selection based on evaluation of at least one management policy associated with an administrative user. A manifest file is generated based on the connected agent objects, and the manifest is validated against dependency rules to ensure that the stages of the agent meet prerequisites for the stages. Then, the server performs a simulated execution of an agent that corresponds to the validated manifest file, including an identification of at least one execution metric associated with the simulated execution.

Systems and methods are described for dynamic execution of artificial intelligence (“AI”) agents. A server can receive, from a client device, an input associated with an AI agent. Based on a manifest file or user profile, the server can identify a management policy that applies to the AI agent. The server then dynamically configures access to the agent objects based on applying the management policy. The management policy is applied to a device status of the client device, a user profile of a user of the client device, and / or a network configuration of the client device. The server then executes a modified workflow based on the dynamically configured access, wherein the modified workflow bypasses or changes operation of at least one of the agent objects. Based on the modified workflow, the server transmits an output to the client device.

Systems and methods are described for tool discovery and ingestion for artificial intelligence (“AI”) agents. An AI platform can discover a first tool specification that includes an action and a description. The first tool specification is ingested to create a first tool object. The first tool object includes the action and an endpoint. Tool labels are determined from the specification and applied to the first tool object. A user interface displays the tool object, and it is added to an AI agent. The AI agent includes a manifest file that is used to execute the AI agent. This includes determining whether the AI agent is authorized to perform the action, and providing the AI agent with access to a tool credential, wherein the tool credential is sent to the endpoint.

The system provides a permissions engine derives permissions for responses from artificial intelligence (AI) agents. The permissions are derived based on the access permissions of chunks used to generate the response, and the response is cached for reuse with users meeting the permissions level. The system can also derive an access permission level for a user attempting to access the cached result or other content. This can be based on a managed access profile that includes user behavior criteria and device criteria. Likewise, the system can validate and derive sensitivity levels of resources that are ingested for use in the artificial intelligence (AI) agents and discriminate between chunks to use in synthesizing results based on the derived permissions of the chunks and their relationship to the user.

Methods and systems for managing operation of a data processing system are disclosed. A management controller of the data processing system may obtain identifying information for a user of hardware resources of the data processing system. Based on the identifying information, entitlement data for the user may be obtained for use in performance of an entitlement enforcement process. Performance of the entitlement enforcement process may be initiated by the management controller and may include obtaining entitlement compliant hardware resources of the data processing system. A computer-implemented service for which the user is entitled to may be provided using the entitlement compliant hardware resources.

According to examples, an apparatus may include a memory on which is stored machine-readable instructions that may cause a processor to determine, for each of a plurality of members in a group, a respective least privilege level for a resource and determine, based on the determined respective least privilege levels, a privilege level to be assigned to the group for the resource. The instructions may also cause the processor to assign the determined privilege level to the group for the resource and apply the assigned privilege level to the members of the group for the resource.

Systems and methods are described for tool discovery and ingestion for artificial intelligence (“AI”) agents. An AI platform can discover a first tool specification that includes an action and a description. The first tool specification is ingested to create a first tool object. The first tool object includes the action and an endpoint. Tool labels are determined from the specification and applied to the first tool object. A user interface displays the tool object, and it is added to an AI agent. The AI agent includes a manifest file that is used to execute the AI agent. This includes determining whether the AI agent is authorized to perform the action, and providing the AI agent with access to a tool credential, wherein the tool credential is sent to the endpoint.

The present disclosure generally relates to Blockchain-based systems configured to process access rights to resources in a computationally efficient manner. Certain embodiments of the present disclosure generally relate to systems and methods that generate distributed applications to represent digital access rights to resources. Additionally, certain embodiments of the present disclosure generally relate to systems and methods that enhance the processing of assigning access rights using a Blockchain-based system using metadata.

In some aspects, the HVAC field device described herein includes: a housing; an HVAC functional device; a non-volatile memory unit including: a first set of computer-executable instructions in a first memory partition configured to execute an operating system; and a second set of computer-executable instructions in a second memory partition configured to execute an application module, wherein the application module is configured to control operation of the HVAC functional device; a volatile memory unit; and at least one processor configured to: execute the operating system in a first memory region of the volatile memory unit and execute the application module in a second memory region of the volatile memory unit, wherein the application module is prevented from accessing the first memory region of the volatile memory unit.

Systems and methods are provided for managing computing services for an application, the application comprising a plurality of virtual computing components executing on one or more host computing devices, wherein service virtual computing components are for performing application functions, and wherein system computing components are for performing system functions, the system functions comprising management of the application virtual computing components; determining that a service virtual computing component is for performing using a first access credential to provide a first computing service to an application virtual computing component, and that the service virtual computing component is for performing using a second access credential to provide a second computing service to a system computing component, wherein the first access credential is assigned a different set of computing resource access permissions than the second access credential.

Systems and methods are described for comparing execution of two or more artificial intelligence (AI) AI agents. A platform can provide a user interface (UI) that allows for selection or creation of multiple AI agents. The AI agents can utilize different agent objects, such as different prompts, datasets, or models. The AI agents can be displayed on a single UI screen, where execution of the AI agents is simultaneously simulated. The same inputs can be provided to the multiple AI agents, and the corresponding outputs can display on screen. The platform can also vectorize and compare the semantic similarity of the outputs, presenting an indicating of the semantic similarity on the same UI screen.

Systems and methods are described for tool discovery and ingestion for artificial intelligence (“AI”) agents. An AI platform can discover a first tool specification that includes an action and a description. The first tool specification is ingested to create a first tool object. The first tool object includes the action and an endpoint. Tool labels are determined from the specification and applied to the first tool object. A user interface displays the tool object, and it is added to an AI agent. The AI agent includes a manifest file that is used to execute the AI agent. This includes determining whether the AI agent is authorized to perform the action, and providing the AI agent with access to a tool credential, wherein the tool credential is sent to the endpoint.

Techniques of remote computing resource access using sharable links are disclosed herein. One example technique includes receiving, at a security portal of a private network, an access request from a client device of a user for accessing a virtual machine ("VM") on the private network via a public network. The technique can then include retrieving a copy of a configuration file corresponding to the virtual machine according to the VM identifier in the access request and accessing the virtual machine according to operating parameters in the retrieved copy of the configuration file to generate an execution result. The technique can further include transmitting, from the security portal, the execution result to the client device of the user via the public network, thereby shielding, with the security portal, the virtual machine on the private network from actions initiated via the public network.

Methods, systems, apparatuses, and computer program products are provided for protecting data in a memory of an integrated circuit (IC). A process token is obtained in a special purpose IC from a host that is external to and communicatively connected to the special purpose IC. The process token is stored in a first memory portion of the special purpose IC. In response to receiving a processing request from the host, the processing request is processed, and data generated by processing the processing request is written in a second memory portion of the special purpose IC. When a read request is received to read the data in the second memory portion, a determination is made whether the read request includes a read token that matches the previously stored process token. If the read token matches the process token, the data in the second memory portion may be returned to the host.

Methods, systems, and computer program products for modelling and governance for transitive privileged access are provided. A method may include receiving potential transitive access data associated with at least one potential transitive access path, receiving privileged access data associated with a plurality of privileged accesses including a current privileged access, and determining a first target privileged access based on the current privileged access, the potential transitive access data, and the privileged access data. The method may also include generating a first directional graph edge from a first graph node associated with the current privileged access to a second graph node associated with the first target privileged access, the first directional graph edge representing a first transitive access path from the first graph node to the second graph node. The method may also include terminating the current privileged access based on the first transitive access path.

Techniques are described for executing satisfiability modulo theories (SMT) solvers in a "shadow" system configuration where input queries are provided to a primary SMT solver system and additionally to one or more secondary SMT solver systems. SMT solver systems can be used by cloud providers and in other computing environments to analyze the implications of configured user account policies defining permissions with respect to users' computing resources and associated actions within a computing environment, to help ensure the security of computing resources and user data, etc. The results generated by a primary SMT solver system can be provided to one or more secondary SMT solver systems, where each of the secondary SMT systems can comprise different system components or different versions of system components, to assess the correctness of the primary SMT solver system, to compare performance metrics, among other possible types of analyses.

Systems and methods are described for comparing execution of two or more artificial intelligence (AI) AI agents. A platform can provide a user interface (UI) that allows for selection or creation of multiple AI agents. The AI agents can utilize different agent objects, such as different prompts, datasets, or models. The AI agents can be displayed on a single UI screen, where execution of the AI agents is simultaneously simulated. The same inputs can be provided to the multiple AI agents, and the corresponding outputs can display on screen. The platform can also vectorize and compare the semantic similarity of the outputs, presenting an indication of the semantic similarity on the same UI screen.

Systems and methods for a virtual machine executing on a host device to establish a secured wireless connection and control a wireless network device without being exposed to the wireless network credentials are provided. A supplicant proxy is provided at the virtual machine to route authentication requests generated at the virtual machine through a supplicant and receive session keys from the supplicant, where the supplicant is at another virtual machine executing on the host device and has access to the network credentials.

A server device for managing privilege delegation to control execution of commands thereon is described. Execution of a command, according to first privileges, by a remote management (RM) server on the server device is requested from a RM client on a client device. An agent plug-in, chained to a command execution plug-in of the RM server, intercepts the request and forwards related information to an agent service cooperating with an operating system of the server device. The agent service determines whether to execute the command according to second privileges, different from the first privileges and if permitted, delegates the second privileges to the command, and causes, via the agent plug-in chained to the command execution plug-in, the command to be executed according to the second privileges.

The invention provides a control method and device based on inter-core communication, electronic equipment and a chip, and relates to the technical field of computers.The method comprises the steps that power-off is triggered in response to a first subsystem of the chip, and a second subsystem of the chip is prevented from sending data to the first subsystem; checking the first subsystem before power-off based on the first state information of the inter-core communication module of the first subsystem and the second state information of the inter-core communication module of the second subsystem; and determining whether the first subsystem is powered off or not according to the check result before power-off. According to the technical scheme provided by the invention, before the first subsystem is powered off, the data transmission of the opposite-end second subsystem is stopped, and the states of the first subsystem and the second subsystem are checked, so that the problems of unprocessed data loss caused by direct power-off of the first subsystem and chip bus hanging caused by bus access to an invalid address can be avoided, and the reliability of the system is improved. The power-on and power-off safety in a distributed inter-core communication scene is ensured, and the chip operation stability can be remarkably improved.

The invention is applicable to the technical field of computer storage, and provides an access resource control method and system based on directory granularity, electronic equipment and a computer program product, and the method comprises the following steps: determining a target access resource configuration rule and a target time window of a target directory; calculating an access resource limit of the target directory in the target time window based on the target access resource configuration rule; in response to an access request of at least one client to the target directory, generating an access credential of each client based on the access resource quota; and sending the access credential to the corresponding client. According to the scheme, access resource control of directory granularity is realized, and the service quality during directory access in the distributed file system is improved.

Provided is a blockchain provision system using a non-competitive consensus algorithm and micro-chain architecture to ensure transaction processing speed, scalability, and security useful for commercial services. The system includes: a network providing the blockchain services. The network includes: mainnets communicating with other micro-chains according to an inter-chain communication protocol and issuing or burning a coin, and a micro-chain architecture connected to the mainnet and including a plurality of micro-chains in which a smart contract conclusion performed using the coin operates according to each area, and the micro-chains independently perform business logic without interfering with each other, and execute different business logics to execute smart contracts corresponding to the micro-chains, respectively.

Systems and methods are described for dynamic execution of artificial intelligence (“AI”) agents. A server can receive, from a client device, an input associated with an AI agent. Based on a manifest file or user profile, the server can identify a management policy that applies to the AI agent. The server then dynamically configures access to the agent objects based on applying the management policy. The management policy is applied to a device status of the client device, a user profile of a user of the client device, and / or a network configuration of the client device. The server then executes a modified workflow based on the dynamically configured access, wherein the modified workflow bypasses or changes operation of at least one of the agent objects. Based on the modified workflow, the server transmits an output to the client device.

Described are techniques for automated least privilege role definition. The techniques include enumerating access patterns including a subject, a verb, an object location, and an object type of respective Application Programming Interface (API) calls in source code associated with a binary program. For a first function call in the source code, the technique is configured to generate a first object type based on an API definition associated with the function call, a first verb based on an API-to-verb matching database, a first subject based on a program-to-subject mapping database and the binary program, and a first object location based on the API definition associated with the function call. The technique further includes generating a Role Based Access Control (RBAC) role definition based on the enumerated access patterns.

Embodiments of this application provide an application permission management method that relates to the field of operating system technologies. In the method, a permission that an application has can be changed based on a running status of the application, thereby refining a granularity of managing, by an electronic device, the permission that the application has. In the method, the electronic device switches, in response to a switching instruction input by a user for the application, the application from a first state to a second state. The electronic device determines, based on the second state of the application and a management rule, a target permission bit of each kernel function for the application and a status of the target permission bit, and changes the status of the target permission bit. The status of the target permission bit varies when the application is in the first state and the second state. This application is applied to a process in which the electronic device performs permission management on the application.

The present disclosure relates to a method executed by a computer system with a processor for managing access to a human presence sensor. The method involves identifying a first request from a first application for sensor access and determining that the application has the necessary presence sensor capability, thereby granting access. Conversely, upon identifying a second request from a second application lacking the presence sensor capability, access is denied. This method ensures that only applications with the requisite capabilities are permitted access to the human presence sensor, thereby enhancing security and resource management within the system.