195results about How to "Guaranteed isolation effect" patented technology

The invention relates to a data isolation method used in storage cloud, and belongs to the distributed storage field. The data isolation method comprises the following steps: (1) according to security demands of an organization, establishing security policy configuration of a tenant in master nodes of a storage cloud system; (2) establishing a user subject belonging to the organization and stamping role tags in a role model of the organization for the subject; (3) organizing an administrator to stamp the tags in the Tag model of the organization for an accessed resource object established by certain user in the organization; (4) according to role privileges of accessed resources, setting a security access policy of a role subject for the accessed resource object and storing the security access policy in the master nodes of the storage cloud system; and (5) according to the security access policy, judging whether the role subject passes the access to the accessed resource object by the master nodes, executing the access if yes and refusing the access if no. The data isolation method has the beneficial effects that the appropriate data isolation is ensured in a cloud-stored enterprise, and the adopted policy follows a universality principle, thus being applicable to public cloud, private cloud and mixed cloud.

The invention provides a block chain block-building method based on the parallel PipeLine technology. The block chain block-building method is characterized by comprising following steps of (1) storing data in a bucketing manner; (2) establishing a temporary data index; (3) changing a trigger point of a new round of block building; (4) processing remaining business; and (5) carrying out father Hash assignment operation. By means of the block chain block-building method, the computer resource on each node can be utilized fully, the block-building efficiency and the system scalability can be improved, the capacity of the CPU and the memory of the node is increased, the response speed of the system is further increased, the block-building information integrity and the block sequence are guaranteed by means of the bucket model, and are not affected by network delay and the like, and the block chain block-building method has good portability and can be applied in different block-building schemes.

The invention is suitable for the technical field of computers, providing a method and system for safely transmitting data among parallel-running multiple user operating systems. The method comprises the following steps: a data transmission module applies for a shared physical memory; the data transmission module applies for a virtual memory page from the operating system; the data transmission module converts the virtual address of the virtual memory page to generate a physical address corresponding to the virtual address, and stores the direct mapping relationship between the virtual address and the physical address in front of the shared physical memory; the data transmission module transmits the physical address of the virtual memory page to a virtual machine monitor to achieve the purpose of mapping the virtual address to the physical address again; the virtual machine monitor maps the physical addresses submitted by the user operating systems to the same shared physical memory; and the data transmission module writes data into the shared physical memory or reads data from the shared physical memory. By utilizing the method and the system, data can be exchanged without a third party tool, and the operation is safe and convenient.

The invention discloses a method for scheduling virtual CPU (Central Processing Unit), belongs to the technical field of computer virtualization and solves the problems that I/O processing can not be responded in time, load characteristics can not be satisfied and a load balancing strategy in a traditional scheduling algorithm is too simple. The method comprises the following steps: carrying out scheduling initialization, inserting into a virtual CPU running queue, carrying out virtual CPU operation, carrying out load balancing, updating a credit value and system load, reassigning the credit value, reassigning physical CPUs and revising the type of a virtual machine. The virtual machine is divided into three classes, carries out dynamic isolation on different types of load and is bound to two groups of physical CPU with different types of load to run, and different time slices are given to the virtual CPU on which different types of load are operated to improve operation efficiency and guarantee I/O performance. The virtual CPU scheduling method redesigns the load balancing strategy, and selects the strategy with minimum migration expenses in addition to that the isolation of different types of load is guaranteed, and the problem that the load balancing strategy in the traditional scheduling algorithm is too simple is solved.

The invention aims to provide a hard alloy sintered antisticking coating which is mainly prepared from tween, aluminium oxide powder or zirconium oxide powder, titanium carbide, graphite powder, methylcellulose, polyethylene glycol and the rest of water. The hard alloy sintered antisticking coating is rational and scientific in formula and has the advantages of simplicity in preparation, high-temperature resistance, high attachment to a graphite boat, environment friendliness and the like; sticky phases such as nickel and cobalt in a hard alloy are separated from the graphite boat; the problem of sticky boat and carbon penetration which cannot be completely solved by the existing coating and antisticking method is solved; the one-time success rate of sintering the large sticky phase hard alloy product is increased; and the hard alloy sintered antisticking coating is outstanding in performance and has prominent practical characteristics and obvious advancement.

The invention provides a Docker-based lightweight website deployment method. The method comprises the steps of deploying a Docker service in a server; and adding an application deployment engine to aDocker container execution environment according to the Docker service, thereby finishing Docker-based lightweight website deployment. According to the Docker-based lightweight website deployment method, the problems of huge resource occupation, slow startup and poor expansibility due to startup of multiple virtual machines for running different applications in a conventional virtual machine modeare solved; and higher performance and efficiency are realized.

A fin type field-effect transistor forming method comprises the steps of providing a semiconductor substrate and a hard mask layer covering the semiconductor substrate, wherein the hard mask layer defines the fin portion of a fin type field-effect transistor; using the hard mask layer as a mask to etch a part of the semiconductor substrate to form the fin portion; forming an isolation layer covering the fin portion, wherein the surface of the isolation layer is flush with the surface of the hard mask layer; using the hard mask layer and the isolation layer as masks and forming a well region and a punchthrough-preventing region in the semiconductor substrate, wherein the punchthrough-preventing region is located at the bottom of the fin portion; etching a part of isolation layer after the well region and the punchthrough-preventing region are formed, forming a shallow-groove isolation structure, wherein the surface of the shallow-groove isolation structure is lower than the top of the fin portion. A formed fin type field-effect transistor is better in the punchthrough-preventing effect, the fin portion is better in quality, the isolation effect of the well region is better, and the performance stability of the fin type field-effect transistor is effectively improved.

The invention provides a method and a system for isolating network transparent service access based on dual and one-way switching equipment. A service request end sends data to a preposed agent program. A preposition agent program receives the data and marks the identification recombination data of the request end and transmits data to a rear agent program through forward positive one-way transmission equipment; a rear agent program analyzes the request and requests data from the business service; a business service responds and returns data; the rear agent receives the response data for recombination; data is transmitted to a pre-proxy program through reverse one-way transmission equipment; and the front proxy program analyzes the data to obtain the identifier of the request end and returns the data to the service request end. According to the invention, between two physical isolation networks, request data is securely accessed to one-way transmission from the preposed proxy programthrough one-way transmission link, and response data is returned to a service request end from a postposed proxy program through the other reverse one-way link, so that cross-network transparent access of services is completed.

The invention discloses a distributed container cluster service discovery method based on a homebred CPU and operation system. According to the method, a service discovery function is provided in a DNS mode, domain names are allocated to services, names and information of the services are organized into the domain names to register into containerization software, the domain names and the service information are mapped mutually into a database, and in the process of accessing the services, corresponding IP addresses and port information are acquired by the service names so as to achieve the service discovery function. The method disclosed by the invention supports to operate on a distributed container cluster management platform based on the homebred CPU and operation system, and can achieve the service discovery function of a distributed container cluster; a problem of dependence of containers and service release on a sequence is solved, the services are not required to be released before the containers are started, and the deployment difficulty is reduced; and a discovered service set is a universal set of the services in the distributed container cluster, and is the same for eachcontainer, no matter when the containers are started.

The invention discloses a distributed object storage cluster and a request response method thereof, a system and a computer readable storage medium. The distributed object storage cluster comprises aHaproxy server cluster, a keystone authentication module, a metadata service cluster and an object storage cluster. A Haproxy serv cluster include a plurality of Haproxy server nodes; Between each Haproxy serv node, heartbeat monitoring and resource takeover are realize through Keepalived, and that client used for sending service request is authenticated by the keystone authentication module. Thedistributed object storage cluster provided by the invention guarantees the security and isolation of user data through the unified authentication of keystone. Deploying multiple Haproxy server nodesas interfaces to the object storage cluster at the same time realizes the high availability of the whole object storage cluster when the number of parallel service requests grows rapidly.

The invention discloses a mass data real-time acquisition and processing method under the supercomputing environment. Firstly, the message source of the data source side generated by the supercomputing cluster data is collected through the source side of the flume software, the collected message source is then gathered into Kafka software through the flume software, and the message sources is stored after being buffered by the Kafka software, the message source to be processed is extracted from the Kafka software through Spark software for data processing, so that the real-time collection andprocessing of massive data under the supercomputing environment is realized. The Kafka is used as an intermediate buffer, and the reliability of the data is improved. A distributed message subscription system based on the Kafka can have multiple message producers and multiple consumers, and the high availability of the system message is guaranteed. The method combines with the docker containerization technology and the load balancing technology to realize container orchestration and management, the method can be applied to real distributed data collection, real-time processing and scalable super-large cluster environment.

The invention provides a grid stack structure and a method for manufacturing the grid stack structure. The grid stack structure comprises an isolation medium layer, wherein the isolation medium layer is formed on a grid and embedded into the grid; a side wall is used for covering the opposite side surfaces of the isolation medium layer; and the isolation medium layer positioned on an active region is thicker than the isolation medium layer positioned on a connecting region. The method for manufacturing the grid stack structure comprises the following steps of: eliminating a part of thickness of the grid, wherein the eliminated thickness of the grid on the active region is greater than the thickness of the grid on the connecting region so as to expose the opposite inner walls in the side wall; and forming the isolation medium layer on the grid, wherein the isolation medium layer covers the exposed inner walls. The invention also provides a semiconductor and a manufacturing method thereof. By the invention, the probability that a short circuit is formed between the grid and a second contact hole can be reduced; and process compatibility can be formed between a first contact hole and the second contact hole.

The invention provides a method for processing a database affair, a client and a server. The method includes: allowing the server to receive a database access request for requesting target data and sent by the client; sending a first version of the target data to the client, wherein the first version is a version of the target data which is currently stored in the server, and the server only savesthe last submitted updated version of the target data; receiving an affair submitting request sent by the client who executes a first affair on the basis of the first version, wherein the affair submitting request includes a log for recording data operation of the first affair; modifying the version of the target data stored in the server currently according to the data operation of the first affair if the data operation of the first affair and the version of the target data stored in the server currently do not have data conflicts according to the log, and acquiring a submitted updated version of the target data. The method for processing the database affair can achieve an unlocked affair mechanism, and can lower the complexity of storage management of the database.

The invention discloses an electric power system wireless heterogeneous network selection method and device. The method comprises the steps that the service request of a service to be accessed to thenetwork is received; the service feature parameters of the service request are extracted; accessing to an electric power wireless private network or wireless public network is selected according to the service feature parameters; and network resource allocation is performed for the service accessed to the network according to the service feature parameters. The QoS (Quality of Services) requirements of different electric power services are considered, and the most appropriate network is selected for bearing according to the service features. Meanwhile, the concept of resource partitioning is put forward for guaranteeing the safety isolation requirement, and different physical isolation resource pools are assigned to the lean control services, the common control services and other servicesso that the service isolation can be effectively guaranteed, the quality of services can be enhanced and the method and the device have important meaning for enhancing the lean service level of the electric power wireless network.

The invention provides a medical self-disinfection logistics robot and a control method thereof. The medical self-disinfection logistics robot comprises a robot body, a disinfection system and a maincontroller; at least one accommodating bin is arranged in the robot body, and a cargo bin door of the accommodating bin is arranged on the outer surface, used for taking and placing cargos, of one side of the robot body; the disinfection system comprises air curtain spray heads installed outside the robot body, and each air curtain spray head is used for spraying a disinfectant to form an air curtain at least on the first side of the robot body, so that an accommodating space of the accommodating bin is isolated from an external environment through the air curtain; and the main controller is connected with the air curtain spray heads and is used for controlling opening or closing of the air curtain spray heads according to a control command. According to the medical self-disinfection logistics robot, the cross infection caused by contamination of pathogens is effectively avoided when the logistics robot works in a germ environment.

The present invention discloses a user connection and virtual resource distribution method for maximizing benefits of all service providers as a target. The method comprises: based on a benefit function, defining the users' and service providers' benefits; employing the Lagrange to perform dual to obtain necessary and sufficient conditions of optimal resource distribution in a mixing business scene; and employing a low-complexity method to perform iteration solution of a resource distribution result, and finally combining the resource distribution result. A user connection scheme is designed according to the greedy strategy, about a new user arrival condition, the new user selects the optimal base station for connection according to local information in the condition of keeping constant original user connection; and moreover, because the Lagrange dual and the heuristic idea, the user connection and virtual resource distribution method in the ultra dense heterogeneous network can reduce the number of iterations and computation complexity so as to rapidly find the resource distribution scheme.

The invention provides a RDMA and HTM based distributed optimistic concurrency control method, which do not have to acquire a data set of transaction access in advance and do not have to segment a transaction in advance. The control method divides operation of the transaction into two stages: an execution stage and a submission stage. An optimistic concurrency control method and a lock protection method are combined, a read-write set is dynamically maintained during the execution stage of the transaction, and then pre-acquisition of the data set of the transaction can be avoided; Verification is performed and then submission is performed in the submission stage of the transaction, and in this way, pre-segmentation of the transaction can be avoided. Through RDMA and HTM based hardware simplification concurrency control method and decentralization distributed design, the RDMA and HTM based distributed optimistic concurrency control method has excellent expansibility, can conveniently adjust the number of machines according to the demands, and can provide a common feasible solution scheme for high efficient processing of super-large scale concurrent transactions.

The invention provides a dynamic tester with a detection signal and power supply isolation function. The tester comprises an RS485 communication circuit, a starting circuit and a Hall current sensor circuit, wherein an input end of a first isolated amplifier module circuit is connected with an input voltage detection signal, and a signal output end is connected with a singlechip circuit; an inputend of the Hall current sensor circuit is connected with an input current detection signal, and an output end of the Hall current sensor circuit is connected with a signal input end of a second isolated amplifier module circuit; an output end of the second isolated amplifier module circuit is connected with the singlechip circuit; the RS485 communication circuit, the starting circuit, a relay starting circuit and a buzzer starting circuit are respectively connected with the singlechip circuit; a third power circuit is connected with the first isolated amplifier module circuit and the second isolated amplifier module circuit; a fifth power circuit is connected with the Hall current sensor circuit; and a seventh power circuit is connected with the singlechip circuit and the RS485 communication circuit. The scheme guarantees full isolation of input and output signals with power supply, over-voltage cannot occur, and the safety is greatly improved.

The invention relates to the field of disposable sanitary products, and in particular to an isolation type paper diaper. The paper diaper includes a paper diaper body. The paper diaper body includes aliquid-permeable surface layer, a liquid-impermeable bottom layer and an absorber disposed between the surface layer and the bottom layer, and is defined to have a transverse direction in the width direction and a longitudinal direction in the longitudinal direction; the paper diaper body is provided with a front waist region, a crotch region and a back waist region in the longitudinal direction,leak-proof partitioning edges are arranged on the liquid-permeable surface layer at both lateral sides of the absorber, an isolation layer is arranged above the liquid-permeable surface layer betweenthe crotch region and the back waist region of the paper diaper body, both lateral sides of the isolation layer are fixedly connected with the leak-proof partitioning edges or the liquid-permeable surface layer respectively, and the length of the isolation layer is 1/4 to 1/3 of the length of the absorber. The paper diaper is used for isolating excretions of infants, especially for loose stools,and the paper diaper can keep the skin dry and has good antibacterial effects.

The invention provides a distributed file system metadata management method. By separating the read-only operation and the modification operation of a metadata server, disc access frequency caused by read-only operation I/O of metadata at an MOS (management operating system) end is reduced, and the performance of data modification operation at the MOS end is improved; by mapping the metadata hash on different MPSs (microprocessor system), the cache hit ratio of the MPSs is improved, and the performances of the metadata server is further improved. Moreover, access of a client and the MPSs to the metadata is shielded when the metadata are modified by theMOSs, and the isolation of the modification operation on the metadata is guaranteed.

The invention relates to a battery diaphragm and a preparation method and an application thereof. The diaphragm consists of a lithium ion battery diaphragm base material and an inorganic coating layer; the base material consists of a supporting layer and a compact layer; the compact layer is coated with the inorganic coating layer; the diaphragm has excellent high-temperature resistance, has certain strength after treatment at a temperature of 300 DEG C for 1h, and has the thermal shrinkage rate of less than or equal to 2%; the rigid structure stability and isolation performance of the diaphragm coating layer at a high temperature are ensured; the base material has a uniform and compact dual-layer structure, so that pin holes and a filler particle falling-off phenomena in a subsequent coating process can be controlled effectively, and requirements of the lithium ion battery diaphragm on the aspects of thermal resistance, porosity and strength can be satisfied; and therefore, the battery diaphragm is excellent in the comprehensive performance.

The invention discloses a database system applied to a real-time big data scene. The database system applied to the real-time big data scene is characterized by comprising a data capturing module which is used for defining the range for capturing a data source, automatically capturing webpage data, performing content extraction and repetition exclusion, and performing context analysis; a feature database module which is used for storing Cookie data, advertisement position dada and linked data; a real-time database module which is used for performing indexing and sharding storage on the data in the feature database module; an advertisement putting module which is used for obtaining advertisement feature data from the real-time database module, comparing the advertisement feature data with the data in the feature database module, and finally determining whether to put advertisement to specific users and which advertisement is put to the users. The database system disclosed by the invention has the beneficial effects that as a three-level storage structure of internal memory, SSD and hard disk is adopted, the system not only provides high-speed real-time data access ability, but also can effectively cope with super-large scale data storage and has the disaster recovery ability.

The invention relates to a method for isolating a device. The method for isolating the device comprises the following steps that firstly, shallow trench isolation is conducted between two doping zones on the front face of a wafer and metal interconnection is conducted on the front face of the wafer; secondly, the back face of the wafer with metal interconnected is thinned; thirdly, trenches are etched on the back face of the wafer after the back face is thinned; fourthly, the trenches etched on the back face of the wafer are filled with isolating substances. Trenches are etched on the back face of a silicon substrate so that plasma damage caused by the operation that deep trenches are etched on the front face of the wafer can be reduced and meanwhile the isolating effect on the device can be guaranteed.