Lightweight virtualization management method for hybrid heterogeneous system and related equipment

By initializing and classifying nodes in a hybrid heterogeneous system, deploying operating systems and performing collaborative supervision and security isolation, a variety of hardware resource management and high-precision time response are solved, and efficient utilization of hardware resources and stable operation of the system are achieved.

CN120469764APending Publication Date: 2025-08-12XIAN MICROELECTRONICS TECH INST
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510539020.4
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-04-27
Publication Date
2025-08-12

AI Technical Summary

Technical Problem

The existing embedded resource virtualization technology is difficult to manage multiple underlying hardware resources in a unified manner, and cannot meet the different needs of embedded applications and provide high-precision time responses, especially when there are few research on lightweight virtualization of resources of RTOS in real-time operating system.

Method used

By obtaining different nodes in the hardware layer in a hybrid heterogeneous system for initialization, classifying them into local Master nodes and remote Slave node groups, deploying operating systems and collaborative supervision, achieving secure isolation, and completing lightweight virtualization management of hybrid heterogeneous systems.

Benefits of technology

It realizes the comprehensive integration and efficient utilization of hardware resources, improves resource utilization, ensures the stable operation of the system in high concurrency and large data volume scenarios, and provides an application safety isolation mechanism to prevent failures from affecting the overall system, improving the reliability and stability of the system.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120469764A_ABST
    Figure CN120469764A_ABST
Patent Text Reader

Abstract

The invention relates to the technical field of embedded systems, and discloses a lightweight virtualization management method and related equipment for a hybrid heterogeneous system, and the method comprises the steps: obtaining different nodes of a hardware layer in the hybrid heterogeneous system, and carrying out the initialization; classifying different initialized nodes to obtain node roles; deploying an operating system according to the node role; performing cooperative supervision in the operating system to obtain a supervision result; and performing security isolation on the application corresponding to the node role according to a supervision result, and completing the lightweight virtualization management work of the hybrid heterogeneous system. According to the method, different nodes of the hardware layer in the hybrid heterogeneous system are acquired and initialized, so that comprehensive integration and efficient utilization of hardware resources are realized. According to the method, the initialized nodes are classified according to the characteristics, and the corresponding operating systems are deployed based on the node roles, so that various hardware resources can be specifically configured and optimized, the idle and waste of the resources are avoided, and the resource utilization rate of the hybrid heterogeneous system is remarkably improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of embedded systems, and in particular to a hybrid heterogeneous system lightweight virtualization management method and related equipment. Background Art

[0002] Current embedded resource virtualization technologies primarily include hardware virtualization and operating system virtualization. Linux Containers, a containerized technology within the operating system virtualization field, is widely used. This technology implements process-group-based resource management through control groups in the Linux kernel. It uses namespaces to provide each container with a specific namespace, enabling process-level isolation. However, widely used Linux Containers are deployed based on the Linux operating system and suffer from poor performance in some scenarios requiring strong real-time system support.

[0003] At present, there is little research on lightweight resource virtualization based on real-time operating systems (RTOS). However, with the diversification of hardware resources, complexity of application scenarios and increasingly high real-time requirements in embedded hybrid heterogeneous systems, there is a need for solutions that can uniformly manage multiple underlying hardware resources, meet the different needs of embedded applications and provide high-precision time response. Summary of the Invention

[0004] In order to overcome the defects of the above-mentioned existing technologies, the purpose of the present invention is to provide a hybrid heterogeneous system lightweight virtualization management method and related equipment to solve the technical problem of how to uniformly manage multiple underlying hardware resources, meet the different needs of embedded applications and provide high-precision time response.

[0005] The present invention is achieved through the following technical solutions: In a first aspect, the present invention provides a lightweight virtualization management method for a hybrid heterogeneous system, comprising: Obtain different nodes of the hardware layer in a hybrid heterogeneous system for initialization; Classify the different nodes after initialization to obtain node roles; Deploy the operating system based on the node role; Conduct collaborative supervision in the operating system to obtain supervision results; Based on the supervision results, the applications corresponding to the node roles are securely isolated to complete the lightweight virtualization management of hybrid heterogeneous systems.

[0006] Preferably, different nodes of the hardware layer in the hybrid heterogeneous system are obtained for initialization, and the initialization process includes: Establish connections with different nodes in the hardware layer through hardware interfaces; Use the preset initialization script to initialize hardware resources, load drivers, and perform basic configuration settings for different nodes.

[0007] Preferably, in the step of classifying the different nodes after initialization to obtain node roles, the node roles include a local Master node and a plurality of remote Slave node groups; The local Master node is used to complete the collaborative monitoring function; The remote slave node groups are used to complete the collaborative supervision and application calculation in response to the local master node.

[0008] Furthermore, in the step of deploying the operating system according to the node role, the process of deploying the operating system includes: After the application is triggered on the local Master node, it is scheduled by the local Master node and assigned to the corresponding remote Slave node group for execution, and the results after execution are summarized.

[0009] Furthermore, the step of performing collaborative supervision in the operating system to obtain supervision results includes: The local Master node supervision process is as follows: After the system starts, the local Master node starts the real-time operating system, enables the supervisor role, and completes the initialization of other roles in the remote auxiliary system; Create virtual IO devices for remote communication and a resource list to store information about all roles in the system. Analyze the application's operating conditions based on the resource list and then use the scheduler to deploy the application. Finally, summarize the application's operating results returned by other roles to the shared memory area. The slave node group in the remote system completes the auxiliary part of the auxiliary supervision work: After the system starts, the remote slave node group completes hardware resource initialization, enables the supervised modules of the remote slave node group, creates their own local virtual IO devices to complete remote communication, creates a resource list to store all role information in the system, and updates the resource list information in real time according to its own real-time dynamics and synchronizes it to the local Master role.

[0010] Preferably, in the process of performing security isolation on the applications corresponding to the node roles according to the supervision results, the security isolation measures include: Monitor the current role in applications of different roles for memory overflow and network attacks. If so, perform security isolation. Otherwise, continue normal operation. For different applications within the same role scope, runtime security middleware will be used to ensure the independence and non-interference between each application.

[0011] In a second aspect, the present invention further provides a hybrid heterogeneous system lightweight virtualization management system, comprising: The node initialization module is used to obtain different nodes of the hardware layer in the hybrid heterogeneous system for initialization; The node classification module is used to classify different nodes after initialization to obtain node roles; System deployment module, used to deploy operating systems based on node roles; A collaborative supervision module is used to conduct collaborative supervision in the operating system to obtain supervision results; The security isolation module is used to securely isolate the applications corresponding to the node roles based on the supervision results, and complete the lightweight virtualization management of hybrid heterogeneous systems.

[0012] In a third aspect, the present invention also provides a mobile terminal comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the lightweight virtualization management method for hybrid heterogeneous systems as described above when executing the computer program.

[0013] In a fourth aspect, the present invention further provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the lightweight virtualization management method for hybrid heterogeneous systems as described above.

[0014] In a fifth aspect, the present invention further provides a computer program product comprising computer instructions, wherein the computer instructions instruct a computing device to execute operations corresponding to the hybrid heterogeneous system lightweight virtualization management method as described above.

[0015] Compared with the prior art, the present invention has the following beneficial technical effects: This invention provides a lightweight virtualization management method for hybrid heterogeneous systems. By acquiring and initializing different nodes in the hardware layer of a hybrid heterogeneous system, it achieves comprehensive integration and efficient utilization of hardware resources. Initialized nodes are classified according to their characteristics, and corresponding operating systems are deployed based on node roles. This allows for targeted configuration and optimization of various hardware resources, thereby avoiding idle and wasted resources and significantly improving resource utilization in the hybrid heterogeneous system.

[0016] Furthermore, the collaborative monitoring middleware can collect and analyze the operational status, resource usage, and application performance data of different nodes in real time. It can also flexibly assign different application instances to corresponding nodes, achieving dynamic balancing of the system load. This load balancing mechanism not only effectively prevents performance degradation caused by overload on certain nodes, but also ensures that the entire system maintains efficient and stable operation in complex scenarios such as high concurrency and large data volumes, significantly improving the overall efficiency of the system.

[0017] Furthermore, the present invention provides a strong guarantee for the reliability of hybrid heterogeneous systems through application security isolation measures. Based on the supervision results, the system can isolate applications that pose security risks to prevent them from affecting the normal operation of other applications and nodes. This isolation mechanism can not only effectively resist external attacks and internal errors, but also ensure that the entire system can continue to operate stably when any node or application fails, and will not cause an overall collapse due to local failures. Therefore, the application security isolation measures of the present invention significantly improve the reliability and stability of hybrid heterogeneous systems. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 This is a flow chart of a lightweight virtualization management method for a hybrid heterogeneous system according to an embodiment of the present invention; Figure 2 Schematic diagram of unified resource management of a hybrid heterogeneous system according to an embodiment of the present invention; Figure 3 Schematic diagram of a collaborative supervision model in an embodiment of the present invention; Figure 4 This is a schematic diagram of a safety isolation application in an embodiment of the present invention; Figure 5 This is a structural diagram of a lightweight virtualization management system for a hybrid heterogeneous system according to an embodiment of the present invention; In the figure: 1. Node initialization module; 2. Node classification module; 3. System deployment module; 4. Collaborative supervision module; 5. Security isolation module. DETAILED DESCRIPTION

[0019] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0020] The purpose of the present invention is to provide a lightweight virtualization management method and related equipment for hybrid heterogeneous systems to solve the technical problem of how to uniformly manage multiple underlying hardware resources, meet the different needs of embedded applications and provide high-precision time response.

[0021] The present invention is described in further detail below with reference to the accompanying drawings: See also Figure 1 In one embodiment of the present invention, a lightweight virtualization management method for a hybrid heterogeneous system is provided, comprising: Step 1: obtain different nodes of the hardware layer in the hybrid heterogeneous system for initialization; Specifically, the initialization process includes: Establish connections with different nodes in the hardware layer through hardware interfaces; Use the preset initialization script to initialize hardware resources, load drivers, and perform basic configuration settings for different nodes.

[0022] The diversity of underlying hardware resources in this embodiment determines that the hybrid heterogeneous system must adopt a unified resource management method to achieve higher resource utilization, faster application deployment, lower power consumption costs and stronger load balancing.

[0023] In this embodiment, the related BSP software is adapted for different nodes of the hardware layer of the heterogeneous system to complete the initialization work at the hardware level.

[0024] Step 2: Classify the initialized nodes into different roles. Specifically, the node roles include a local Master node and several remote Slave node groups; The local Master node is used to complete the collaborative monitoring function; The remote slave node groups are used to complete the collaborative supervision and application calculation in response to the local master node.

[0025] Step 3: Deploy the operating system according to the node role; Specifically, the process of deploying an operating system includes: After the application is triggered on the local Master node, it is scheduled by the local Master node and assigned to the corresponding remote Slave node group for execution, and the results after execution are summarized.

[0026] In this embodiment, the operating system functions of the local Master node need to be as complete as possible, and the remote Slave node group runs the operating system microkernel or collaborative monitoring program (bare metal program).

[0027] This embodiment uses container technology to implement process-level virtualization and lightweight management among hybrid heterogeneous systems, so that they have higher resource utilization, faster application deployment, lower power consumption costs and stronger load balancing.

[0028] Step 4: Perform collaborative supervision in the operating system to obtain supervision results; Specifically, the steps of performing collaborative supervision in the operating system to obtain supervision results include: The collaborative management layer is located between the real-time operating system (RTOS) (or bare metal system) and the top-level application. It is used to complete device virtualization and resource management, complete system health monitoring and security management, and coordinate the scheduling of various roles in the system. The collaborative supervision model will run in each node role of the entire system. The local Master node performs the supervision process as follows: After the system starts, the local Master node starts the real-time operating system, enables the supervisor role, and completes the initialization of other roles in the remote auxiliary system; Create virtual IO devices for remote communication and a resource list to store information about all roles in the system. Analyze the application's operating conditions based on the resource list and then use the scheduler to deploy the application. Finally, summarize the application's operating results returned by other roles to the shared memory area. The slave node group in the remote system completes the auxiliary part of the auxiliary supervision work: After the system starts, the remote slave node group completes hardware resource initialization, enables the supervised modules of the remote slave node group, creates their own local virtual IO devices to complete remote communication, creates a resource list to store all role information in the system, and updates the resource list information in real time according to its own real-time dynamics and synchronizes it to the local Master role.

[0029] In this embodiment, the collaborative supervision middleware is used to complete the device virtualization, resource management, collaborative scheduling, health monitoring and other functions of the entire system. During the operation of the entire system, each hardware resource maintains the same resource list, including the model, memory, operating frequency, health status, etc. of all hardware in the system. Each node role updates the list resources regularly through the heartbeat function.

[0030] Step 5: Based on the supervision results, securely isolate the applications corresponding to the node roles to complete the lightweight virtualization management of the hybrid heterogeneous system.

[0031] Specific safety isolation measures include: Monitor the current role in applications of different roles for memory overflow and network attacks. If so, perform security isolation. Otherwise, continue normal operation. For different applications within the same role scope, runtime security middleware will be used to ensure the independence and non-interference between each application.

[0032] The adoption of the security isolation function in this embodiment ensures that the operation of any application will not interfere with other applications, and the failure of any application will not affect the overall function of the entire system, thereby maintaining the stability of the system.

[0033] according to Figure 2 The figure shows unified resource management for a hybrid heterogeneous system, primarily relying on collaborative supervision middleware. The local supervisor role runs the Master module, while the remote role runs the Slave module. The scheduler in the Master coordinates the application pool, distributing different applications to corresponding heterogeneous resources to achieve load balancing. The user interface in the Master includes a graphical user interface, editing and compiling functions, and resource viewing capabilities.

[0034] The collaborative supervision model is an abstract model of the collaborative supervision middleware, which is used to show the architecture of the entire middleware after it is deployed in the system. The local Master is responsible for completing the main control and coordination functions, and the remote Slave is responsible for responding to the local Master and maintaining a real-time resource status list, such as Figure 3 shown.

[0035] This embodiment provides a lightweight virtualization management method for hybrid heterogeneous systems. By acquiring and initializing different nodes at the hardware layer of a hybrid heterogeneous system, it achieves comprehensive integration and efficient utilization of hardware resources. Initialized nodes are classified according to their characteristics, and corresponding operating systems are deployed based on node roles. This allows for targeted configuration and optimization of various hardware resources, thereby avoiding idle and wasted resources and significantly improving resource utilization in the hybrid heterogeneous system.

[0036] Example 2 This embodiment provides a lightweight virtualization management method for a hybrid heterogeneous system, and the embodiment is designed using Xilinx Zynq ZCU102.

[0037] Xilinx Zynq ZCU102 is a typical hybrid heterogeneous system, including different architecture modules such as Cortex A53, Cortex R5 and FPGA, and lightweight virtualized resource management is implemented on this platform.

[0038] according to Figure 4As shown in the figure, based on the hardware characteristics of this platform, the Cortex A53 will assume the master role and run a full-featured real-time operating system, while the Cortex R5 and FPGA will assume the slave roles, running a tailored microkernel real-time operating system and bare-metal programs, respectively. The quad-core layout of the Cortex A53 is configured to simultaneously run two dual-core real-time systems, assuming both master and slave roles. The collaborative supervisor, acting as middleware, virtualizes local resources and obtains resource lists from remote roles in real time. The master coordinates application scheduling based on the resource list and balances load according to the resource availability of each role. The master coordinates and allocates application workloads based on the current resource utilization of each core, achieving load balancing and efficient resource utilization across the entire system.

[0039] Example 3 This embodiment also provides a hybrid heterogeneous system lightweight virtualization management system, including: Node initialization module 1 is used to obtain different nodes of the hardware layer in the hybrid heterogeneous system for initialization; Node classification module 2, used to classify different nodes after initialization to obtain node roles; System deployment module 3, used to deploy the operating system according to the node role; Collaborative supervision module 4, used for collaborative supervision in the operating system to obtain supervision results; The security isolation module 5 is used to perform security isolation on the applications corresponding to the node roles according to the supervision results, and complete the lightweight virtualization management of the hybrid heterogeneous system.

[0040] Example 4 The present invention also provides a mobile terminal, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, such as a hybrid heterogeneous system lightweight virtualization management program.

[0041] When the processor executes the computer program, the steps of the hybrid heterogeneous system lightweight virtualization management method are implemented, for example: Obtain different nodes of the hardware layer in a hybrid heterogeneous system for initialization; Classify the different nodes after initialization to obtain node roles; Deploy the operating system based on the node role; Conduct collaborative supervision in the operating system to obtain supervision results; Based on the supervision results, the applications corresponding to the node roles are securely isolated to complete the lightweight virtualization management of hybrid heterogeneous systems.

[0042] Alternatively, when the processor executes the computer program, the functions of each module in the above system are realized, for example: Node initialization module 1 is used to obtain different nodes of the hardware layer in the hybrid heterogeneous system for initialization; Node classification module 2, used to classify different nodes after initialization to obtain node roles; System deployment module 3, used to deploy the operating system according to the node role; Collaborative supervision module 4, used for collaborative supervision in the operating system to obtain supervision results; The security isolation module 5 is used to perform security isolation on the applications corresponding to the node roles according to the supervision results, and complete the lightweight virtualization management of the hybrid heterogeneous system.

[0043] Exemplarily, the computer program may be divided into one or more modules / units, which are stored in the memory and executed by the processor to implement the present invention. The one or more modules / units may be a series of computer program instruction segments capable of implementing specific functions, and the instruction segments are used to describe the execution process of the computer program in the mobile terminal.

[0044] For example, the computer program may be divided into a node initialization module 1, a node classification module 2, a system deployment module 3, a collaborative supervision module 4, and a security isolation module 5; The specific functions of each module are as follows: Node initialization module 1 is used to obtain different nodes of the hardware layer in the hybrid heterogeneous system for initialization; Node classification module 2, used to classify different nodes after initialization to obtain node roles; System deployment module 3, used to deploy the operating system according to the node role; Collaborative supervision module 4, used for collaborative supervision in the operating system to obtain supervision results; The security isolation module 5 is used to perform security isolation on the applications corresponding to the node roles according to the supervision results, and complete the lightweight virtualization management of the hybrid heterogeneous system.

[0045] The mobile terminal may be a computing device such as a desktop computer, a notebook, a PDA, a cloud server, etc. The mobile terminal may include, but is not limited to, a processor and a memory.

[0046] The processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the mobile terminal, connecting various parts of the entire mobile terminal using various interfaces and lines.

[0047] The memory may be used to store the computer programs and / or modules, and the processor implements various functions of the mobile terminal by running or executing the computer programs and / or modules stored in the memory and calling the data stored in the memory.

[0048] The memory may primarily include a program storage area and a data storage area. The program storage area may store an operating system and at least one application required for a function (such as sound playback or image playback); the data storage area may store data generated based on the use of the mobile phone (such as audio data and a phone book). Furthermore, the memory may include high-speed random access memory (RAM) and non-volatile memory, such as a hard disk, internal memory, a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) card, a Flash Card, at least one disk storage device, a flash memory device, or other volatile solid-state storage device.

[0049] Example 5 The present invention also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the steps of the hybrid heterogeneous system lightweight virtualization management method.

[0050] If the module / unit integrated in the mobile terminal is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium.

[0051] Based on this understanding, the present invention can implement all or part of the processes in the above-mentioned method by means of a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium. When the computer program is executed by a processor, it can implement the steps of the above-mentioned method for scheduling aggregated reinforcement learning resources. The computer program includes computer program code, which can be in source code form, object code form, executable file, or some intermediate form.

[0052] The computer-readable medium may include: any entity or device that can carry the computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signal, telecommunication signal and software distribution medium, etc.

[0053] It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practices in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practices, computer-readable media do not include electrical carrier signals and telecommunication signals.

[0054] Example 6 A computer program product includes computer instructions, wherein the computer instructions instruct a computing device to execute operations corresponding to the hybrid heterogeneous system lightweight virtualization management method as described above.

[0055] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered by the scope of protection of the claims of the present invention.

Claims

1. A lightweight virtualization management method for hybrid heterogeneous systems, characterized in that: include: Obtain different nodes of the hardware layer in a hybrid heterogeneous system for initialization; Classify the different nodes after initialization to obtain node roles; Deploy the operating system based on the node role; Conduct collaborative supervision in the operating system to obtain supervision results; Based on the supervision results, the applications corresponding to the node roles are securely isolated to complete the lightweight virtualization management of hybrid heterogeneous systems.

2. A lightweight virtualization management method for hybrid heterogeneous systems according to claim 1, characterized in that: In the process of obtaining and initializing different nodes of the hardware layer in the hybrid heterogeneous system, the initialization process includes: Establish connections with different nodes in the hardware layer through hardware interfaces; Use the preset initialization script to initialize hardware resources, load drivers, and perform basic configuration settings for different nodes.

3. A lightweight virtualization management method for hybrid heterogeneous systems according to claim 1, characterized in that: In the step of classifying the initialized different nodes to obtain node roles, the node roles include a local Master node and a group of remote Slave nodes; The local Master node is used to complete the collaborative monitoring function; The remote slave node groups are used to complete the collaborative supervision and application calculation in response to the local master node.

4. A lightweight virtualization management method for hybrid heterogeneous systems according to claim 3, characterized in that: In the step of deploying the operating system according to the node role, the process of deploying the operating system includes: After the application is triggered on the local Master node, it is scheduled by the local Master node and assigned to the corresponding remote Slave node group for execution, and the results after execution are summarized.

5. A lightweight virtualization management method for hybrid heterogeneous systems according to claim 3, characterized in that: The step of performing collaborative supervision in the operating system to obtain a supervision result includes: The local Master node supervision process is as follows: After the system starts, the local Master node starts the real-time operating system, enables the supervisor role, and completes the initialization of other roles in the remote auxiliary system; Create virtual IO devices for remote communication and a resource list to store information about all roles in the system. Analyze the application's operating conditions based on the resource list and then use the scheduler to deploy the application. Finally, summarize the application's operating results returned by other roles to the shared memory area. The slave node group in the remote system completes the auxiliary part of the auxiliary supervision work: After the system starts, the remote slave node group completes hardware resource initialization, enables the supervised modules of the remote slave node group, creates their own local virtual IO devices to complete remote communication, creates a resource list to store all role information in the system, and updates the resource list information in real time according to its own real-time dynamics and synchronizes it to the local Master role.

6. A lightweight virtualization management method for hybrid heterogeneous systems according to claim 1, characterized in that: In the process of securely isolating applications corresponding to node roles based on the supervision results, the security isolation measures include: Monitor the current role in applications of different roles for memory overflow and network attacks. If so, perform security isolation. Otherwise, continue normal operation. For different applications within the same role scope, runtime security middleware will be used to ensure the independence and non-interference between each application.

7. A lightweight virtualization management system for hybrid heterogeneous systems, characterized in that: include: The node initialization module is used to obtain different nodes of the hardware layer in the hybrid heterogeneous system for initialization; The node classification module is used to classify different nodes after initialization to obtain node roles; System deployment module, used to deploy operating systems based on node roles; A collaborative supervision module is used to conduct collaborative supervision in the operating system to obtain supervision results; The security isolation module is used to securely isolate the applications corresponding to the node roles based on the supervision results, and complete the lightweight virtualization management of hybrid heterogeneous systems.

8. A mobile terminal comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the steps of the hybrid heterogeneous system lightweight virtualization management method as described in any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the hybrid heterogeneous system lightweight virtualization management method as described in any one of claims 1 to 6 are implemented.

10. A computer program product comprising computer instructions, characterized in that The computer instructions instruct the computing device to execute operations corresponding to the hybrid heterogeneous system lightweight virtualization management method as described in any one of claims 1-6.