36 results about "Hosting environment" patented technology

The invention provides a video processing method and device, electronic equipment, a computer readable storage medium and a computer program product. The method is applied to a simulator in a host environment, and the simulator is used for simulating and running a video application program in a virtual environment in the host environment. The method comprises the following steps: receiving decoding configuration parameters sent by a proxy decoder running in a virtual environment; when it is detected that a target hardware decoder adapted to the decoding configuration parameters exists in the host environment, determining a decoding instance of the target hardware decoder in the host environment; when first video code stream data which is sent by the proxy decoder and comes from a video application program is received, decoding the first video code stream data through a decoding instance of the target hardware decoder to obtain first decoded data; and sending the first decoded data to a proxy decoder, so as to send the first decoded data to a video application program for video playing. According to the invention, the video playing fluency of the video application program can be improved.

The invention provides an applet communication control method, an applet construction method, devices and equipment. The invention relates to the technical field of computers, in particular to the technical field of applets. According to the specific implementation scheme, when the applet is started, an event bus is initialized in a host environment, and the event bus is used for maintaining the event subscription relation of each independent subpackage; generating a corresponding event message through the event bus in response to a calling request sent by the first independent subpackage for the target service; under the condition that a second independent subpackage of the target service is not loaded in the local memory, temporarily storing the event message in a message queue, and triggering a downloading and loading process of the second independent subpackage; and monitoring the loading state of the second independent subpackage, and when it is detected that the second independent subpackage is loaded and registered to the event bus, taking out the event message from the message queue and distributing the event message to the second independent subpackage. According to the scheme, the starting speed of the applet is increased, and continuity and stability of the business process are guaranteed.

This invention belongs to the field of electronic connector technology, and particularly relates to an electronic connector with antenna function and its anti-interference method, comprising: a metal shell, an insulating body fixedly installed inside the metal shell, a connecting plug on one side of the insulating body, a conductive terminal group on the connecting plug, a PCB board on the other side of the insulating body, a radiating antenna on the PCB board, a buffer plate on the periphery of the connecting plug, and a buffer pad fixedly installed on one side of the buffer plate; a buffer assembly, located inside the metal shell, for buffering the buffer plate; the invention adopts a monopole antenna topology structure, and with the design of no radiator and PCB ground short-circuit pin, it significantly reduces the coupling of USB3.x ground noise to the antenna resonant structure, effectively avoids noise interference in the 2.4-2.5GHz band, significantly improves the stability and consistency of 2.4GHz band wireless communication on different USB3.x hosts, and adapts to complex host environments.

The invention relates to the technical field of data processing, and discloses a right-click menu implementation method, device and system based on a sandbox mechanism, and the method comprises the steps: analyzing a menu configuration file of a right-click menu starting operation, creating an isolation execution environment, creating a proxy object of a menu item element in the menu configuration file, and starting the right-click menu; establishing an access boundary according to the proxy object, loading a target script corresponding to the menu item element through the resource acquisition interface, executing the target script in the isolated execution environment when the access element of the target script does not exceed the access boundary, and rendering a right-click menu interface corresponding to the right-click menu opening operation according to a script execution result. It can be seen that by implementing the method, script execution security isolation, host environment risk reduction, accurate access boundary control, boundary crossing behavior eradication and script execution security improvement can be achieved, meanwhile, developers can be supported through the scripts to flexibly configure and achieve the function of each menu item, and the implementation security and flexibility of the right-click menu are improved.

Provided in the present application are an access control method and apparatus, and a computing device. The method comprises: providing a policy management module in a host environment; receiving an access control policy regarding a first application sandbox input by a user by means of the policy management module, and on the basis of the access control policy, performing access control on a file that can be accessed by a first application; mapping the file path of the file, which can be accessed by the first application, in a local file system of the host environment to a first file path, and mounting the first file path to an intermediate mounting point; and mapping the first file path to a second file path, and mounting the second file path to a shared file directory of the application sandbox, such that the application sandbox accesses a shared file in the local file system by means of the shared file directory. By means of establishing an independent intermediate mounting point for each application sandbox, the method achieves the file isolation of shared files among a plurality of application sandboxes, and dynamic access control of the shared files, thereby improving the security and real-time performance of access control of the shared files.

Described herein are systems utilizing a DevSecOps model comprising a CI / CD template, framework interfacing with a CI / CD pipeline that can integrate the assemblage of software components that collectively automate the building, testing, and delivery of applications within various hosting environments. Also described herein are methods utilizing the aforementioned systems.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method for operating a home-session management function (H-SMF) in a wireless communication system, according to an embodiment, may comprise transmitting a first message requesting subscription data for a packet data unit (PDU) session to a unified data management (UDM), receiving, from the UDM, a second message including the subscription data and information about allowing routing of roaming traffic to an edge hosting environment (EHE) of a home network, and selecting a home-edge application server discovery function (H-EASDF) based on the second message.

The application discloses a cross-platform VSTO plug-in development framework and an implementation method for one-time development and multi-version multiplexing, belongs to the technical field of plug-in development, and comprises a bottom-up runtime version detection layer, a reflection calling layer, an abstract interface layer, a platform adaptation layer and a unified interface adaptation layer; wherein the runtime version detection layer is used for automatically identifying a host environment and a specific version of host software when the VSTO plug-in is started, collecting interface rendering parameters and outputting a standardized environment identification tuple. The application provides a compatible framework and a matching unified interface design scheme for "one-time development and multi-version multiplexing", realizes configuration-free installation and interface self-adaptive compatibility of the same plug-in package on Excel 2007-2019 and WPS 2016-2019, greatly reduces compatibility code and interface development costs, and improves plug-in adaptation efficiency, installation success rate and user interaction experience.

The invention discloses an automatic penetration test system, and relates to the technical field of network security. The system comprises a man-machine interaction unit, an information collection and analysis unit, a vulnerability scanning and analysis unit, a penetration strategy decision unit, a penetration task execution unit, a tool calling auxiliary interface and a plurality of integrated test tools, the information collection and analysis unit comprises a host information collection and analysis sub-unit and a system configuration information collection and analysis sub-unit, and the various integrated test tools comprise an information collection tool, a vulnerability scanning tool and a penetration test tool which cooperate with one another to test the information collection tool, the vulnerability scanning tool and the penetration test tool. The purpose of making penetration test decisions and automatic testing according to the detected local area network host environment and features and penetration test tool features and functions can be achieved, then penetration test experience of experts can be replaced, repeated test steps and processes are automated, manpower and time cost consumed by enterprises is effectively reduced, and the efficiency of the enterprises is improved. And the penetration test efficiency is effectively improved.

The application provides a method and device for information synchronization in different host environments, which can be used in the financial field or other technical fields. The method comprises the following steps: receiving a user information synchronization request, wherein the user information synchronization request comprises a first user identifier, a second user identifier and to-be-synchronized information; querying an association relationship between a first user corresponding to the first user identifier and a second user corresponding to the second user identifier according to the first user identifier and the second user identifier; and updating user information of the second user based on the to-be-synchronized information if the association relationship between the first user and the second user is a preset relationship; wherein the first user and the second user are users in different host environments. The device is used for executing the above method. The method and device for information synchronization in different host environments provided by the embodiment of the application improve the synchronization efficiency of user information.

Methods, systems, and devices for data management are described. The method may include obtaining a first backup of a host data store in a host environment, the first backup containing a set of multiple files from the host data store, generating, for one or more files of the set, a respective hash value using content of a respective file of the one or more files, storing the respective hash value for the one or more files of the set of multiple files in a database in association with metadata for the respective file, where the database is indexed based on hash values, querying the database for a hash value generated based on content of a compromised file, and identifying, in response to querying, a latest backup of the host data store of the host environment that does not contain the hash value for the compromised file.

The invention discloses a deserialization utilization chain mining method for Dotnet, and belongs to the technical field of Web security. In order to solve the problems that an existing. NET environment is lack of a high-adaptability white-box analysis tool and automatic judgment of a deserialization utilization chain is difficult, C # source codes are generated through a decompilation program set, a code attribute graph oriented to a hosting environment is constructed, Source and Sink rules are customized, a potential vulnerability utilization chain is queried in a graph database, and the potential vulnerability utilization chain is queried in the graph database. And the validity is judged by using a large language model. According to the method, the deserialization vulnerability utilization chain in the hosting program set can be efficiently found, and the automation and intelligence level of vulnerability mining is improved.

The invention provides a secret key charging method and system for virtual password equipment, and belongs to the technical field of secret key charging. After a filling medium is inserted into the client terminal, the client terminal sends the encryption public key of the target cloud virtual password device and the length of the generated filling key to the server; the server initiates a quantum key request to a quantum distribution device based on the encryption public key and the length of the generated charging key, so as to obtain a quantum key with a specified length, and sends the quantum key to the server; the server generates a session key ciphertext and a charging key ciphertext based on the quantum key and the encryption public key, and feeds back the key ciphertext to the client terminal; and the client terminal verifies the charging medium, and writes the session key ciphertext and the charging key ciphertext into the charging medium after the verification is passed. According to the method and the device, the effects of improving the confidentiality and the security of the charging key, preventing the wrong charging of the charging key and improving the security and the reliability of the key plaintext in the untrusted host machine environment can be achieved.

A method for virtual interaction between a host user at a first physical location and a guest user at a second physical location is provided. The method includes receiving, by the guest assembly, environmental information relating to a host environment in the first physical location; displaying, a 3D virtual reconstruction of the host environment at the second physical location using the environmental information; and displaying a virtual avatar of the host user within the 3D virtual reconstruction. A guest user can enter a predefined area of the second physical location to be virtually transported to the host environment. The method further provides for virtual reconstruction of surfaces of the host environment and applying textures to those surfaces. A corresponding system and non-transitory computer readable medium are also described.

The application relates to a simulation authorization evaluation method and system, an electronic device and a storage medium. The method comprises the following steps: obtaining static authorization information of a simulation system recorded when a license is issued, and obtaining dynamic authorization information of the simulation system collected during running; the static authorization information comprises basic license features, and the dynamic authorization information comprises host environment features and service behavior features; the authorization state of the simulation system is evaluated according to the basic license features, the host environment features and the service behavior features; and control measures matched with the authorization state are triggered for the simulation system. The scheme provided by the application can improve the authorization robustness in a private delivery environment and enhance the identification capability of abnormal use behaviors.

The invention discloses a method and device for running an Android system in a container and electronic equipment, and belongs to the field of computers. The method specifically comprises the steps that a host environment of an Android container is a Linux environment; the surface synthesizer component receives to-be-rendered data sent by at least one Android application, and sends the to-be-rendered data to the graphic memory allocation component; the graphic memory allocation component sends to-be-rendered data to the graphic open source library; the graph open source library renders the to-be-rendered data; a rendering result reaches the surface synthesizer component through the graphic open source library and the graphic memory allocation component; the surface synthesizer component sends the rendering result of the at least one Android application to a remote control server; and the remote control server sends the rendering result to the remote control client, so that the remote control client displays the rendering result. According to the method, the application range and universality of the Android container can be enhanced, so that the Android container can adapt to different Linux host environments more flexibly.

The invention relates to the technical field of digital information transmission, and discloses a gateway plug-in system based on a WASM, and the system comprises a plug-in management module which is used for creating an independent WASM gateway plug-in instance for each WASM gateway plug-in in a preloading plug-in list obtained according to routing configuration in a sandbox execution environment; the host agent module is used for establishing a controlled communication channel between the sandbox execution environment and the gateway host environment; the route matching module is used for matching a target WASM gateway plug-in from the route configuration according to the received client request and a preset hierarchical priority matching algorithm; and the extensible request module is used for dynamically loading and executing the target WASM gateway plug-in by adopting the WASM gateway plug-in instance according to the plug-in execution assembly line to obtain a plug-in processing result. According to the system provided by the invention, the security of gateway service logic extension and the resource fine management, host capability exposure control and multi-plug-in cooperative processing capabilities are improved.

Methods, systems, and devices for data management are described. The method may include obtaining a first backup of a host data store in a host environment, the first backup containing a set of multiple files from the host data store, generating, for one or more files of the set, a respective hash value using content of a respective file of the one or more files, storing the respective hash value for the one or more files of the set of multiple files in a database in association with metadata for the respective file, where the database is indexed based on hash values, querying the database for a hash value generated based on content of a compromised file, and identifying, in response to querying, a latest backup of the host data store of the host environment that does not contain the hash value for the compromised file.

A data management system may support a configuration backup of a first backup system that manages backup procedures for data of a host environment that is separate from the first backup system. The data management system may transmit, to the first backup system, a request to generate the configuration backup that includes information for the one or more backup procedures managed by the first backup system. The data management system may cause the configuration backup to be stored in a separate storage location. In response to first backup system failure, the data management system may transmit, to a second backup system, a request to apply one or more configurations for the first backup system to the second backup system based on the stored configuration backup for the first backup system.

This invention relates to the field of digital information transmission technology and discloses a gateway plugin system based on WASM. The system includes: a plugin management module, which creates an independent WASM gateway plugin instance for each WASM gateway plugin in a pre-loaded plugin list obtained according to routing configuration within a sandbox execution environment; a host proxy module, used to establish a controlled communication channel between the sandbox execution environment and the gateway host environment; a route matching module, used to match the target WASM gateway plugin from the routing configuration based on received client requests and a preset hierarchical priority matching algorithm; and an extensible request module, used to dynamically load and execute the target WASM gateway plugin using the WASM gateway plugin instance in a plugin execution pipeline, obtaining the plugin processing result. The system provided in this application improves the security of gateway business logic extension, as well as fine-grained resource management, host capability exposure control, and multi-plugin collaborative processing capabilities.

[0006] A method and apparatus are provided for transmitting policy information between a first network and a home network of a user equipment (UE) accessing an edge hosting environment (EHE) in the first network. One method, implemented in a first session management function (SMF) in the first network (VPLMN), includes sending a request for PDU session establishment for the UE to a second SMF in the home network, indicating that the first SMF is requesting authorization for a home routing session breakout (HR-SBO) for a packet data unit session, and receiving a response message from the second SMF including one or more offload identifiers (IDs), each of which identifies one or more offload policies for edge computing (EC) services to be applied in the first network. Transmitting the offload policies themselves is not always required; only the IDs are used.

The invention provides an access control method and device and computing equipment. A strategy management module is arranged in a host environment, an access control strategy of a first application sandbox input by a user through the strategy management module is received, and access control is carried out on a file which can be accessed by a first application according to the access control strategy. Mapping a file path of a file which can be accessed by a first application in a local file system of the host environment into a first file path, and mounting the first file path to the middle mounting point; and mapping the first file path into a second file path, and mounting the second file path to a shared file directory of the application sandbox, so that the application sandbox accesses a shared file in the local file system through the shared file directory. According to the method, an independent middle mounting point is established for each application sandbox, so that file isolation of shared files among a plurality of application sandboxes and dynamic access control of the shared files are realized. And the security and real-time performance of access control of the shared file are improved.

This application provides an incremental topology node layout method, apparatus, electronic device, and storage medium. The method includes: determining the new topology node to be added to the target topology structure, and the parent topology node of the new topology node; obtaining the topology node set of the target topology structure and a preset node distance; filtering the topology node set according to the preset node distance to obtain a valid topology node set; determining the incremental direction of the new topology node based on the valid topology node set and the parent topology node; generating the layable positions of the new topology node according to the incremental direction and the valid topology node set; and rearranging the target topology structure according to the layable positions. This method allows for the addition of new topology nodes without changing the original topology layout, reducing the computational load of topology node layout, lowering the probability of unresponsiveness in computationally sensitive host environments, improving the efficiency of topology node layout, and enhancing the user experience.

The invention relates to a method for intercepting, by an analysis module, a communication stream destined for an application running in a container on a host environment comprising an operating system, the method comprising a configuration step (301) during which a set of code instructions is associated with a particular execution point of a data transfer system call, and an execution step (303) of said set of instructions in the kernel space of the host operating system when a system call triggered from at least one container reaches (302) the execution point, the execution of said set of instructions comprising at least the copying (304) of the contents of a memory area of ​​the kernel space modified by the system call to a memory area of ​​the user space. Figure 3.

The invention discloses a data sandbox resource isolation automatic verification method, which belongs to the technical field of computer security, and comprises the following steps: constructing a simulation instruction, executing a resource instantiation operation in an isolation space of a target data sandbox based on the simulation instruction, and generating a source end test resource set; traversing a system interface and a network port of the external host environment, and performing feature matching and searching based on the unique feature identifier of the source end test resource set to obtain an external environment resource mapping snapshot; according to the existence incidence relation between the external environment resource mapping snapshots and the source end test resource set, cross-border resource items are recognized, and isolation failure state descriptors are generated; and analyzing the isolation failure state descriptor, carrying out risk quantification and vulnerability classification, and generating a data sandbox isolation efficiency verification report. By adopting a mode of constructing characterization test resources in an isolation space and actively detecting an external environment for matching and comparison, a resource isolation failure point can be identified, and a risk can be quantitatively evaluated.

The invention discloses a vehicle-mounted path dynamic mapping and control method and system based on external hosting. The method establishes and maintains a primary navigation session in an external hosting environment, determines interface capability characteristics of the vehicle-mounted navigation system, and dynamically maps the primary navigation session into a path execution instruction set adapted to the vehicle-mounted navigation system based on the interface capability characteristics, and sends the path execution instruction set to the vehicle-mounted navigation system. In the navigation execution process, the external hosting environment monitors the vehicle state or the change of the external environment in real time, the vehicle state information can be obtained through positioning of the external hosting environment when the vehicle-mounted navigation system does not have the state return capability, and the navigation task is dynamically updated when the preset condition is met. Therefore, unified navigation control of vehicle-mounted navigation systems with different capabilities is realized, and dependence on touch interaction in a driving process is reduced.

This specification discloses an application processing method, apparatus, storage medium, and electronic device. The method includes: loading an application connector component in the host environment corresponding to the host application in response to a resource access request from the host application; triggering the initialization mounting logic of the application connector component to obtain web page document content and parse runtime proxy configuration information from the web page document content; performing pre-interception and interface takeover on the request initiation logic of the host browser's native global asynchronous network request interface in the host environment based on the runtime proxy configuration information; after the global asynchronous network request interface is in the interface takeover state, loading the corresponding application resources based on the resource entry address of the target business sub-application using a micro-frontend architecture engine; and performing target address redirection processing on the network request initiated by the target business sub-application based on the runtime proxy configuration information through the global asynchronous network request interface in the interface takeover state.

The embodiment of the application discloses a firmware upgrade method, a storage device and a computer program product. The firmware upgrade method comprises the following steps: after confirming that a firmware upgrade trigger command issued by a host is received, entering a firmware receiving preparation state; in response to a first write command issued by the host, judging whether a preset first logical block address specially used for identifying a firmware receiving request is carried in the first write command; if yes, performing a firmware receiving initialization operation, and entering a firmware data transmission state; otherwise, exiting a firmware upgrade state, and performing a write operation. The application can solve the problem that the firmware upgrade mode of the existing storage device is interrupted or blocked in the normal write operation in the firmware upgrade process in the host environment supporting only general read and write commands, and the continuity of the host service is affected.

Methods and apparatus are provided for transferring policy information between a first network and a home network of a User Equipment (UE) accessing Edge Hosting Environment (EHE) in the first network. One method implemented in a first session management function (SMF) in the first network (VPLMN) comprises sending to a second SMF in the home network a request for a Packet Data Unit (PDU) session establishment for the UE indicating that the first SMF requests authorization for home routed session breakout (HR-SBO) for the PDU session and receiving from the second SMF a response message including one or more offload identifiers (IDs), each ID of the one or more offload IDs identifies one or more offload policies for Edge Computing (EC) services, to be applied at the first network. Transferring the offload policies themselves is not always required, only IDs are used.

The application relates to the technical field of computers, and provides a multi-network card configuration method, a multi-network card configuration system, electronic equipment and a storage medium, the method comprising the following steps: configuring an initialization container in a workload yaml, and configuring a docker binding network command in the initialization container; delivering configuration parameters to a KubeEdge cluster end device, so as to obtain host environment variables in the KubeEdge cluster end device through the configuration parameters; and performing multi-network card configuration based on the host environment variables and the docker binding network command. The multi-network card configuration method provided by the application adds a docker binding network command in an initialization container through the initialization container function of Kubernetes, realizes multi-network card configuration of a container on a KubeEdge cluster end device, solves the problem of manually performing multi-network configuration of a docker container, and realizes automatic configuration of multi-network cards of a container on the KubeEdge cluster end device.