657results about How to "Flexible management" patented technology

Methods and systems are provided for fine tuning access control by remote, endpoint systems to host systems. Multiple conditions/states of one or both of the endpoint and host systems are monitored, collected and fed to an analysis engine. Using one or more of many different flexible, adaptable models and algorithms, an analysis engine analyzes the status of the conditions and makes decisions in accordance with pre-established policies and rules regarding the security of the endpoint and host system. Based upon the conditions, the policies, and the analytical results, actions are initiated regarding security and access matters. In one described embodiment of the invention, the monitored conditions include software vulnerabilities.

Methods and systems are provided for fine tuning access control by remote, endpoint systems to host systems. Multiple conditions/states of one or both of the endpoint and host systems are monitored, collected and fed to an analysis engine. Using one or more of many different flexible, adaptable models and algorithms, an analysis engine analyzes the status of the conditions and makes decisions in accordance with pre-established policies and rules regarding the security of the endpoint and host system. Based upon the conditions, the policies, and the analytical results, actions are initiated regarding security and access matters. In one described embodiment of the invention, the monitored conditions include software vulnerabilities.

A system and method for assigning virtual machines to network interfaces. A first virtual machine is assigned to a network interface according to a first rule and a second virtual machine is assigned to a network interface according to a second rule. The assignment rules are dependent on network conditions as determined through at least one of the network interfaces. The first rule and the second rule may specify assignments differently, such that the same network conditions may result in different assignments for the first and second virtual machines.

To provide an apparatus and method for efficiently displaying image content, which is sent and received between a server and a client, in a correct direction. An image content providing server stores, as property information, original angle information indicating correct directions of image content as metadata of the image content. The server generates content information including the original angle information and sends the generated content information to a client. This allows the client to understand the correct direction of the image content received from the server, and to obtain and display image data in the correct direction by performing rotation processing in the client device based on the obtained information or to request the server to perform the rotation processing.

The invention relates to an RFID based intelligent logistics managing system, which belongs to the field of logistics management, and used for managing logistics information of cargoes with RFID tags. The logistics managing system comprises a logistics control system, a storage system arranged in a warehouse and a vehicle-mounted mobile module, wherein the logistics control system is connected with the storage system and the vehicle-mounted mobile module via a communication network to realize commutation between the logistics control system and the storage system or the vehicle-mounted mobile module, each of the storage system and the vehicle-mounted storage system is equipped with an RFID reader, the RFID readers read information of the RFID tags, and the RFID information is transmitted to the logistics control system. According to the RFID based intelligent logistics managing system, logistics information can be managed in a highly-efficient, automatic, informationized, networked, intelligent and flexible manner.

The present invention discloses a network flow assorting and processing method which comprises the steps as follows: building a service tree that is corresponding with the service assorted structure; allocating the parameters that matches with flow making either node of the service tree relating to the flow attribution of corresponding service; allocating the executing strategy, wherein any executing strategy comprises a plurality of strategy rules and each strategy rule defines a processing action of a service node; as for the received net flow, executing the matching that matches with the flow matching parameters and invoking corresponding executing strategy to process according to matching result and the structure of the service tree. The present invention also discloses a net flow assorted processing device. The present invention can reduce the allocating workload of managing the net flow and increase the transplant performance of the net flow management. Besides, the net flow management can be more efficiency and flexible.

The invention discloses a network privilege management method, device and system, relates to telecommunication network technology, can make terminal manage managed account anytime and anywhere, and realizes convenient and flexible management for the managed account. The network privilege management method provided by the embodiment of the invention includes steps that the terminal receives management request of the managed account through a network management system; and the terminal sends instruction to a green networking system to manage the managed account. The invention is suitable for any scene needing account monitoring.

The invention discloses a method and a device for log recording. The method comprises obtaining log data which comprise log levels and characteristic information identifications; writing the log data of corresponding log levels in a configuration file when the preset configuration file corresponding to a certain log level exists; enabling the configuration file to be used for scanning by using a preset progress to conduct unusual log reminding treatment; organizing corresponding log data in the configuration file according to the characteristic information identifications. The method and the device can improve efficiency for locating logs and reporting unusual logs while reducing occupation of log data storage resources.

The invention discloses a method for realizing remote access of campus network resource and a system thereof, relating to technology of remote access of the Internet. The invention is invented to solve the problem that users not in the campus network can not access the campus network resource currently. In the invention, through adopting an application program of a VPN client terminal, a request of the establishment of a virtual special tunnel connection is sent to a VPN server; the VPN server verifies the request of the establishment of the virtual special tunnel connection and after the request is qualified, the VPN server returns a response of the successful establishment of the virtual special tunnel connection to the VPN client terminal; the VPN client sends an authorization request to the VPN server and according to an access right of the VPN client terminal, the VPN server returns an authorization message to the VPN client terminal; the VPN client terminal analyzes the received authorization message and according to the authorization message to access electronic resource in the campus network through the virtual special tunnel. The invention realizes the goal that the users outside the campus network can access the campus network resource safely.

A central site, using grid operator requirements to reduce portfolio power according to frequency decreases within a frequency band, determines the optimal frequency triggers at which each load within a portfolio should reduce power and by how much power. Power availability of each load is optimized. These triggers and individual load power reductions are periodically dispatched from the central site to the individual loads. Each load detects when a frequency deviation occurs and is able to independently and rapidly reduce its power consumption according to the triggers and corresponding power reductions it received previous to the frequency deviation. Reliance upon the central site to detect a frequency deviation and then to dispatch power reductions in real time is not needed. The system also detects frequency increases and directs a portfolio of loads to consume more power. The system applies to energy loads and detection of a grid signal in general.

The invention discloses a data permission management method, a data permission management system and a service management system and relates to the field of computer technologies. The method disclosed by the invention comprises the steps that the data permission management system receives a user's data access request intercepted by the service system; through analysis of the data access request, an object to be accessed by the user is acquired; access permission information of the object to be accessed by the user is searched in permission configuration information; and the access permission information is integrated with the data access request, and then the integrated information and request are returned to the service system, so that the service system can continue processing the data access request with the access permission information. According to the invention, uniform and centralized management of data permissions of each service system can be implemented by the data permission management system; and management and maintenance become convenient.

A semiconductor memory device includes a plurality of N external ports, each of which receives commands, and an internal circuit which performs at least N access operations during a minimum interval of the commands that are input into one of the external ports.

The present disclosure provides a method whereby a mobility management entity (MME) in a cellular communication system transmits uplink data, the method comprising: receiving uplink data from a terminal; determining if the received uplink data is an Internet Protocol (IP) packet by examining the uplink data; transmitting the uplink data to a destination node via a packet data network (PDN) if the uplink data is an IP packet; and transmitting the uplink data to the destination node via a service capability exposure function (SCEF) if the uplink data is not an IP packet, wherein the uplink data comprises an indicator for indicating whether the uplink data is an IP packet.

The invention provides a method for accessing and uploading data in a data storage system. The method of accessing data comprises the following steps: a client side initiates an access request message for access to a file; an authentication server determines the security level of the file according to feature information of the file in the access request message after receiving the access request message; if the security level of the file requires to carry out a smart key equipment certification process, the authentication server informs the client side of utilizing smart key equipment to carry out the smart key equipment certification process; after receiving information for the smart key equipment authentication, the client side carries out the smart key equipment authentication process; if the authentication server approves the smart key equipment authentication, the authentication server sends a notification message to a storage server; the storage server allows the client side to access to the file; the client side acquires the file, and decrypts the data of the file by utilizing a decryption key in the smart key equipment, so as to obtain the decrypted data.

Data management between a common data store and multiple applications of multiple disparate application frameworks. A data storage component is provided that facilitates the storage of data, which data includes structured, semi-structured, and unstructured data. A common data platform interfaces to the data storage component to provide data services accessible by a plurality of disparate application frameworks, which data services allow a corresponding application of the different frameworks to access the data.

An embodiment of the invention discloses an access point and a method for managing an access point working group. The method includes: dividing access points in the access point working group into a main access point and auxiliary access points, wherein a communication mechanism can be consulted between the main access point and each auxiliary access point; and then, enabling the main access point to receive load information and/or status information reported by each auxiliary access point according to the communication mechanism determined after consultation and to control the status of each auxiliary access point according to the communication mechanism determined after consultation and the received load information and/or status information, so that flexible management of the access point working group is realized, for example, when total load of the access point working group is heavy, the main access point controls each auxiliary access point to enter a service status to meet needs of a user terminal, and when the total load of the access working group is light, the main access point controls each auxiliary access point to enter a standby status to save electrical energy.

The invention discloses an SDN (Software Defined Network) platform based on router virtualization and an implementation method, and relates to the field of virtualization technology, SDNs and cloud computation. The SDN platform comprises a virtual router, an Openflow switch and an SDN controller, wherein the SDN controller comprises an eastbound-westbound interface, a northbound interface, a first southbound interface and a second southbound interface; the second southbound interface is used for controlling data packet forwarding of the virtual router, and recording flow entry information of the virtual router; the first southbound interface is used for learning routing topology and a flow table of the second southbound interface in order to control rapid forwarding of the Openflow switch; and an application programming interface (API) layer based on an Openflow protocol is encapsulated on an integrated code layer of the virtual router. Through adoption of the SDN platform based on the router virtualization and the implementation method, high data forwarding performance and routing performance between an SDN network and a conventional network can be realized. The virtual router has the characteristics of high functional extensibility and high flexibility, and can be applied to the cloud computation easily.

An architecture provides the ability to create and maintain multiple instances of virtual servers, such as virtual filers (vfilers), within a server, such as a filer. A vfiler is a logical partitioning of network and storage resources of the filer platform to establish an instance of a multi-protocol server. Each vfiler is allocated a subset of dedicated units of storage resources, such as volumes or logical sub-volumes (qtrees), and one or more network address resources. Each vfiler is also allowed shared access to a file system resource of a storage operating system. To ensure controlled access to the allocated and shared resources, each vfiler is further assigned its own security domain for each access protocol. A vfiler boundary check is performed by the file system to verify that a current vfiler is allowed to access certain storage resources for a requested file stored on the filer platform.

The invention discloses one method and system to realize the test on any two end systems property parameters in IP network in any place, which comprises the following steps: firstly downloading test programs to central register and manager person sets control strategy and sends test through browser; test servo starts mobile probe for test and sending test message to signal station to fulfill test result into data servo to display results.

Methods, systems, and apparatuses are disclosed for enabling a virtual personalized network. Communications are established with a personal digital gateway to control access, sharing, security, and/or management of up-to-date personalized data exchanged between or among a plurality of associated communications devices and/or communications networks. The associated communications devices are owned, operated, and/or accessed by a common user.

The method divides log information management system into log request process module and log information process module. Log detection process of the method includes (1) the log request process module constructs and outputs log detection request to the log information process module; (2) after detecting the log detection request, the log information process module detects stored state of log information in log information base, determines whether the detected stored state of log information exceeds prearranged configured threshold of log stored state; if yes, deleting log information with attribute being as unimportant in log information base; otherwise, ending current process. The invention realizes detection of log information, deletes unimportant log information automatically.