4results about How to "Achieve security isolation" patented technology

This invention provides a network system, a network worker node, network management and control, and a network isolation method. The network system includes: a container network server interface deployed within the network worker node; the container network server interface is used to: create a corresponding identifier for the container when a container is created within the network worker node, request network management to create a virtual network interface card (NIC) corresponding to the container, and send a virtual port creation request generated based on the virtual NIC and identifier to network management; the first communication port of the virtual NIC is associated with the main namespace of the network system's operating system, and the second communication port of the virtual NIC is associated with the container's namespace; network management is used to create virtual ports according to the virtual port creation request, assign IP addresses to the virtual ports, and feed back the IP addresses to the container network server interface; and a virtual infrastructure network is used to process network data based on the identifier information and IP address of the virtual NIC. This invention can achieve network security isolation.

This invention relates to the field of information security technology, and discloses a secure processing method, system, terminal, and storage medium for verification codes. The method includes: a server generating a first verification code based on a received operation request from a target account, and encrypting the first verification code using an encryption key associated with the target account to obtain ciphertext; the server sending the ciphertext to a client device associated with the target account; the client device decrypting the ciphertext using a decryption key corresponding to the encryption key to obtain a second verification code, and submitting the second verification code to the server; and the server verifying the operation request based on the second verification code. This invention sets the transmission state of the verification code to ciphertext, improving security, and ensures that the verification code can only be decrypted and used by authorized client devices, achieving application-level security isolation.

This invention discloses a PCIe switch with an NTB port supporting multicast. The switch includes at least one NTB port for communicating with root federations or other PCIe switches. Each NTB port includes an address translation module and a multicast management module. The address translation module translates addresses in read / write data packets to a specified PCIe bus domain. The multicast management module is communicatively connected to the address translation module and determines whether to multicast based on the translated address, and then performs data transmission. This PCIe switch can both connect to one or more root federations to achieve secure isolation of PCIe domains and leverage the advantages of multicast to improve bandwidth utilization.