47results about How to "Guaranteed safe isolation" patented technology

The invention relates to an enterprise application deployment and management system for multiple tenants. A container-based multi-tenant isolation mechanism is realized; the integration and migration of enterprise legacy systems are supported; rich enterprise-level services are provided; SOA architecture-based enterprise-level application development is supported; perfect self-service ability is provided; high availability of a platform can be provided; dynamic expansion and demand-based scalability can be realized; and pure asynchronous intelligent routing is realized. The objective of the invention is to solve problems in multi-tenant resource isolation, compatibility with existing applications and composite application construction in cloud computing technologies for enterprise applications. The enterprise application deployment and management system for multiple tenants has the advantages of multi-tenant safe isolation, seamless migration of enterprise applications and the scalability of applications.

The invention discloses a Xen-oriented memory sharing security isolation method for virtual machines, belongs to the technical field of virtual security, and particularly relates to the field of memory sharing security improvement for Xen virtual machines. The Xen-oriented memory sharing security isolation method has the advantages that the Xen-oriented memory sharing security isolation method is used for open-source software Xen of the virtual machines; existing memory sharing mechanisms of the open-source software Xen are analyzed, and can be extended and additionally provided with mandatory access control modules on the basis of security frames XSM (Xen security modules) of the open-source software Xen on the premise that influence on normal use of other functions of the open-source software Xen is prevented, the memory sharing authority is required to be checked when memories are about to be shared, only memory sharing operation which meets specific access control rules can be authorized, and accordingly the purpose of monitoring the memory sharing security of the virtual machines can be achieved.

The embodiment of the invention provides a software upgrading method based on an OTA upgrading system and the OTA upgrading system, and the method comprises the steps that a package issuing unit encrypts a software package to obtain an encrypted software package, and generates metadata for the software package; a package issuing unit sends the encrypted software package to the downloading unit andsends the metadata to the upgrading service unit; an upgrading service unit acquires a vehicle certificate sent by a vehicle, encrypts the metadata by adopting the vehicle certificate to obtain encrypted metadata, and sends the encrypted metadata to the vehicle; enthe vehicle decrypts the encrypted metadata by adopting a preset vehicle private key, and verifies the legality of the metadata; if the metadata is legal, the vehicle acquires the encrypted software package from the downloading unit and decrypts the encrypted software package according to the metadata; the vehicle verifies the legality of the software package according to the metadata; and if the software package is legal, the vehicle is upgraded by adopting the software package. According to the embodiment of the invention, theproblems of tampering and replay attacks of the software package can be prevented.

The invention relates to the technical field of software security, and discloses a method and device for enhancing security of application software. The method comprises the following steps: establishing a virtual security domain for each protected application software in an operation system; mapping the application process, required resources and security requirement of the protected applicationsoftware into a subject, an object and intra-domain security attribute corresponding to the application software, and respectively mapping other processes in the operation system into an extra-domainsubject and an extra-domain object; trapping a resource request transmitted by the application process in the operation system; and controlling the access of the subject, mapped by the application process, to the subject which is mapped by the required resource according to the resource request permission and the intra-domain security attribute. By adopting the scheme of the invention, the security of the application software can be ensured on the basis of not influencing the operation efficiency of the software or re-deploying the application software and the service system in which the application software is positioned.

The invention discloses an online real-name certification system for an online medical system and an online real-name certification method of the online real-name certification system. The online real-name certification system comprises a registration client side module, a real-name certification module and a hospital side information collection module, wherein the registration client side module is used for inputting and encrypting basic identity information of a user per se by the user, the hospital side information collection module is used for encrypting the collected basic identity information, the real-name certification module is used for carrying out consistency matching for cipher texts from the registration client side module and the hospital side information collection module and obtaining additional information corresponding to the user for the matched cipher texts, the additional information is provided by the hospital side information collection module, authentication information is provided by the user, the real-name certification is passed if the authentication information is matched with the additional information, otherwise, the real-name certification is not passed, and a real-name certification result can be sent to the registration client side module by the real-name certification module. According to the online real-name certification system and the online real-name certification method which are disclosed by the invention, quick and efficient effects are realized, user privacy is effectively protected, and the correspondence to the real-name certification of medical mechanisms related to all online medical systems can be realized by one-time certification pass.

The invention discloses a system and method for improving the video investigation efficiency on the basis of multi-network data fusion application, and relates to the field of image video investigation and network communications. According to the system, the police intranet, video private network and Internet all access a platform through a security boundary for communication and interaction; thepolice intranet deploys a video investigation cooperative combat platform; the video private network deploys a video investigation combat platform; the Internet deploys a video investigation combat platform mobile client; the security boundary accesses the platform to provide the security of the whole intranet and the access function of an outer network. Accordingly, investigators do not need to browse massive amounts of video, and the investigation efficiency is improved; the purpose that information is shared on the police intranet, and meanwhile security isolation of the intranet is guaranteed; the problem that the massive amounts of video accesses the police intranet, and the efficiency is affected by bandwidth limitation of the police intranet is avoided; information sharing is achieved; the purpose that multiple types of police handle cases cooperatively is achieved.

The invention discloses a method and a system for user account project management. The method comprises: acquiring user project mapping relations, acquiring case information of cases generated by operating an application program on a physical machine; according to the user project mapping relations and the case information, determining to-be-deployed cases, to-be-deployed projects, to-be-deployed users, to-be-deployed physical machines, and to-be-deployed files; determining the to-be-deployed physical machines have user accounts related to the to-be-deployed users and user account groups related to the to-be-deployed projects, determining the user account groups related to the to-be-deployed projects on the to-be-deployed physical machines comprise the user accounts related to the to-be-deployed users, and the user account groups related to the to-be-deployed projects being arranged to have operating authorization on the to-be-deployed cases and the to-be-deployed files. The method provides a management scheme for users to visit corresponding cases, thereby ensuring safe isolation among projects and making users manage application programs more conveniently.

The invention relates to the field of voltage stabilized power supply, in particular to a high-power wide-range adjustable DC linear regulated power supply, which includes a switching power input circuit, an auxiliary switch power supply circuit, the power factor compensation boost circuit, the isolated power conversion circuit of the switching power supply, the voltage and current controllable BUCK circuit and the load voltage and current display circuit. By the cooperatively connected circuit modules, the invention solves the problems of narrow voltage regulation range, small power and bulkyof the existing DC linear voltage stabilized power supply.

The invention discloses a variable multifunctional embedded roadside motorized parking space which comprises a ground marking system, a lane function indicating system and a roadside parking space display and monitoring system. The parking space has the advantages of being variable and multifunctional, wherein the variable advantage is characterized in that the parking space is used for passage ofmotor vehicles during the daytime to meet the demand for large traffic flow during the daytime and used for parking on the roadside at night to meet the demand of parking on the roadside at night; the multifunctional advantage is characterized in that the parking space is used as a motorway during the daytime and as the roadside parking space and a motor vehicle and non-motor vehicle isolation belt at night.

The invention discloses a cable connector on-line monitoring system which comprises a plurality of temperature sensing chips, data acquisition units, a high voltage isolation transformer, an upper computer and a CAN bus communication controller. The temperature sensing chips are connected with cable connectors respectively and used for obtaining current temperature signals of the cable connectors; the data acquisition units are connected with the temperature sensing chips respectively and used for collecting the current temperature signals obtained by the temperature sensing chips; the high voltage isolation transformer is respectively connected with a power source and the data acquisition units, enables the output voltage of the power source to be converted and outputs the isolation voltage to supply power to the data acquisition units; the CAN bus communication controller is respectively connected with the upper computer and the data acquisition units and enables all the current temperature signals collected by the data acquisition units to be transmitted to the upper computer.

The invention discloses an integrated power control device of a liquefied natural gas power ship. The integrated power control device comprises an inclosed unit and a control unit, the inclosed unit comprises an inclosed chamber allowing a gas fuel pipeline to penetrate, a first automatic stop valve, a second automatic stop valve, a gas pressure-adjusting valve, a first automatic ventilating valve, a second automatic ventilating valve, a gas detector and a ventilating duct are arranged in the inclosed chamber, the control unit comprises a control chamber, an air pressure-adjusting valve, a first electromagnetic valve, a second electromagnetic valve, a third electromagnetic valve and a fourth electromagnetic valve are arranged in the control chamber, and the air pressure-adjusting valve controls the first automatic stop valve, the second automatic stop valve, the first automatic ventilating valve and the second automatic ventilating valve through the first electromagnetic valve, the second electromagnetic valve, the third electromagnetic valve and the fourth electromagnetic valve respectively. The integrated power control device can balance controlling and safety protection of the LNG (liquefied natural gas) power ship, is high in adaptability, simple in structure and suitable for being widely applied to the technical field of the LNG power ship.

The invention discloses an access mode leakage prevention data safety isolation and sharing realization method. According to the method, based on physical isolation, the agent encryption technology is utilized to realize data safety isolation and sharing, an original data storage mode is changed, a binary tree storage mode is utilized to guarantee that an access mode in a data access process is not leaked, and user privacy can be successfully protected. The method is advantaged in that safety risks caused by data sharing among users, attack possibility existing in virtual resource pooling and no user access mode hiding in a cloud data storage scheme can be successfully solved, through agent introduction, the data sharing function among the users in a department is realized, data safety isolation among departments is guaranteed in a physical mode, data storage is realized through employing a binary tree mode, and a user access mode is successfully hidden.

The invention discloses a high-voltage electric fire pump control cabinet with an emergency mechanical pump starter. The control cabinet comprises a control cabinet body, the control cabinet body comprises a main cabinet and an auxiliary cabinet arranged in one side of the main cabinet, an FC control loop for control a fire pump is arranged in the main cabinet, and the FC control loop comprises anF fuse cart arranged in the middle portion of the main cabinet and connected with an inlet wire of a high voltage power supply, a C high voltage vacuum contactor arranged in the bottom of the main cabinet, and an emergency manual control mechanism arranged in the bottom of the auxiliary cabinet. The high-voltage electric fire pump control cabinet with the emergency mechanical pump starter is reasonable in design, the emergency manual control mechanism can be used to safely control work of the C high voltage vacuum contactor, use of the high voltage electric fire pump when a secondary controlloop is in failure is ensured, and convenient replacement of the F fuse core and safe maintenance of the C high voltage vacuum contactor are considered in design of the control cabinet.

The invention discloses a high-voltage fixed-frequency voltage regulation and stabilization power system provided with an intelligent control system, comprising a control system, a high-voltage input switch, a segmentation transformer, a power unit group, a filter, a high-voltage output switch, and an isolation transformer. The high-voltage input switch, the segmentation transformer, the power unit group, the filter, the high-voltage output switch and the isolation transformer are connected with the control system. The high-voltage input switch is connected with the segmentation transformer. The segmentation transformer is connected with the power unit group. The power unit group is connected with the filter. The filter is connected with the high-voltage output switch. The high-voltage output switch is connected with the isolation transformer. The power units in the power unit group are connected in series in a star shape. The high-voltage fixed-frequency voltage regulation and stabilization power system provided with an intelligent control system has the advantages of simple structure, strong applicability, reliability, stability, and efficient and timely voltage regulation.

The invention belongs to the field of chemical fiber production equipment and discloses a plate type preheater for acid bath, a flash evaporation device of the plate type preheater for acid bath and an alkaline cleaning process. The plate type preheater for acid bath comprises a preheater plate integration part, a preheater upper cover and a preheater shell, the preheater upper cover and the preheater shell are provided with a preheater steam inlet and a preheater condensate outlet, the preheater steam inlet is formed above a steam-side seam of the plate integration part, and the preheater condensate outlet is formed below the steam-side seam of the plate integration part. The flash evaporation device of the plate type preheater for acid bath takes the plate type preheater for acid bath as the preheater fittingly used with a quick alkaline cleaning process, the problems of insufficient circulation sectional area of low-pressure secondary steam, rapid decline of flash evaporation performance and the like caused by blockage of plate seams and sulfide scaling formation due to sulfide and colloidal particles when the plate preheater is used for acid bath preheating are solved, steam-water ratio of the flash evaporation device is smaller than 0.2, and about 40% of steam is saved as compared with that of a traditional flash evaporation device.

The invention discloses a built-in type switch cabinet. The built-in type switch cabinet comprises a cabinet body and a circuit breaker. The cabinet body is provided with a front cabinet plate; the cabinet body is internally provided with a three-phase static contact unit; the static contact unit comprises an upper static contact and a lower static contact; the upper static contact is electrically connected with a main busbar; the lower static contact is electrically connected with a branch busbar; the circuit breaker is provided with a three-phase moving contact unit; the moving contact unit comprises an upper moving contact and a lower moving contact; the three-phase static contact unit is arranged in tandem; the three-phase moving contact unit is arranged in tandem; the circuit breaker can be pushed into the cabinet body from the front of the cabinet and can move to the left and right between a test position and a work position; each phase of moving contact unit and each phase of static contact unit of the circuit breaker at the work position are contacted and electrically connected; and the front cabinet plate is provided with an observation window. The advantages are as follows: user operation is carried out in front of the cabinet, contact states can be observed through the observation window during operation, good isolation or contact is ensured, safety hidden risks are avoided, the performance is improved, the cost is reduced, and the reliability and safety are improved.