112 results about "Isolated environment" patented technology

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

The invention discloses a method and a system for constructing a characteristic of influence of a solitary wave on underwater sound propagation loss in an ocean. The method comprises the following steps: acquiring acoustic environment parameters of a specified simulated ocean area to construct an ocean acoustic environment; constructing a plurality of internal solitary wave structures according to the internal solitary wave characteristic parameters; combining the marine acoustic environment and the internal solitary wave structure to construct a plurality of internal solitary environment models; setting a sound source and a receiver, and calculating a sound field by adopting a kraken model based on the internal isolated environment models and the set sound source and receiver to obtain sound propagation loss of each internal isolated environment model; and comparing and analyzing the sound propagation loss of various internal isolated environment models to obtain the influence of the internal isolated waves on the sound propagation loss characteristics. The invention aims to improve the accuracy of the characteristic data of the underwater sound propagation loss influenced by the marine internal solitary wave based on the influence of the internal solitary wave characteristic parameters on the sound propagation loss.

A system can receive, at an integration and deployment component, a changeset for an updated microservice and an identifier of a user account that is configured to access the updated microservice, wherein a current version of the microservice is deployed to a service mesh that comprises a group of microservices. The system can instantiate the updated microservice to the service mesh. The system can update routing rules for the service mesh to indicate that any traffic in the service mesh that is associated with the user account and that is directed to the current version of the microservice is to be routed to the updated microservice. The system can, in response to receiving traffic determined to be associated with the user account and directed to the current version of the microservice, route the traffic to the updated microservice instead of routing the traffic to the current version of the microservice.

The invention provides a hot updating method, system and equipment for an automation program of semiconductor equipment and a medium. The method comprises the following steps: dynamically loading a new version script code into an isolated runtime environment created by an application domain or a class loader through a reflective API (Application Program Interface) so as to isolate new and old codes. And performing preheating initialization on the new code in an isolated environment, wherein the preheating initialization comprises execution of an initialization function and simulation of a production request test. After preheating is completed, a new request of the production environment is routed to the new version to be processed through atomic switching operation, and meanwhile, the current running version continues to complete existing in-process affairs. According to the method, shutdown is avoided through dynamic loading and isolation, stability is improved through preheating initialization, new requests and in-process transactions are considered in atomic switching, non-shutdown updating of the automatic program of the semiconductor equipment is achieved, production interruption is effectively eliminated, and the equipment utilization rate and operation and maintenance flexibility are improved.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

Systems, computer program products, and methods are described herein for enhanced encryption orchestration and application integration frameworks. The system performs steps of initializing a broker application to act as a data security broker within a computing environment; providing an application programming interface (API) for external application interaction; receiving and processing requests via the API for access to encrypted code and data; containerizing the code and data within an isolated environment, subject to predefined rules; monitoring usage to ensure adherence to these rules; initiating self-destruction of the container upon reaching a predetermined usage limit or condition; and securely erasing all sensitive data and code after usage completion.

Isolated environments for development of modules of a software system, such as an enterprise resource planning (ERP) system, can be generated using a container image generated from a copy of a central development environment. A graph-based machine learning model can be trained and applied to a graph of the software system to predict dependencies between the modules of the software system. An isolation forest machine learning model can be trained and applied to a selected module to verify its integrity. The container image can be modified based on the predicted dependencies and the integrity verification, among other factors. The modified container image can be executed to generate an isolated environment for the selected module. A version management utility and a transport system can be used during subsequent development in the isolated environment to manage and register repositories and objects associated with the isolated environment.

The invention relates to the technical field of computer system maintenance, and particularly discloses a computer system and a computer system maintenance method, and the method comprises the steps: obtaining the basic information of each to-be-installed patch corresponding to a target computer system, and carrying out the preliminary analysis to obtain the safety evaluation coefficient of each to-be-installed patch; collecting multi-dimensional data of the target computer system, and generating a virtual copy synchronized with the target computer system in real time in the isolation environment; installing each patch to be installed in the original target computer system in the isolation environment, running a core function module of the target computer system in the isolation environment, and further verifying a compatibility evaluation coefficient of each patch to be installed in the isolation environment; synchronously monitoring the dynamic operation behavior of each patch to be installed in real time in the isolation environment, and detecting a potential behavior threat assessment coefficient of each patch to be installed in the isolation environment; not only is the possibility of patch introduction reduced, but also a solid foundation is provided for long-term maintenance and safety management of the system.

A pop up cover for a crib is provided for providing a safe, comfortable and isolated environment for a child in a crib. The pop-up cover may be made of breathable fabric panels having an integrated frame, for example a flexible frame, which can be folded (collapsed) on itself, for example when folded in specific ways if appropriate force is applied and which keeps the fabric in a taught, open position when unfolded (preventing the panels form falling inwards onto each other). The pop up cover can be lightweight and compact, quick and easy to set up, dark inside and breathable.

The present application provides a microfluidic device, comprising at least one microfluidic channel unit, each microfluidic channel unit comprising a microfluidic channel configured to contain a fluid and comprising a plurality of independent compartments. Each microfluidic channel unit comprises a first side wall and a second side wall opposite and spaced apart from the first side wall, a plurality of first extensions formed on the first side wall extending toward the second side wall without abutting the second side wall, a plurality of second extensions formed on the second side wall extending toward the first side wall without abutting the first side wall, the plurality of first extensions and the plurality of second extensions being alternately arranged in the microfluidic channel. A compartment is formed in at least one first extension or at least one second extension. The compartment has an opening positioned such that the fluid does not directly flow into each compartment. The microfluidic device of the present application has a stable isolated environment to facilitate various reactions and prevent micro-objects in the compartments from escaping.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

Disclosed is a system (100). The system (100) includes a client device (101) and a host device (102). The host device (102) includes processing circuitry (120) that is configured to download files by way of file links, generate an isolated environment by way of a virtual non-transitory computer-readable medium such that the one or more files are received and processed in the isolated environment, generate a first mitigation signal when a data breach associated with the one or more files is detected. Based on the first mitigation signal (i) the virtual non-transitory computer-readable medium is compressed and encrypted and (ii) the generated isolated environment is deleted and generate a second mitigation signal when a data breach associated with the one or more files is not detected. Based on the second mitigation signal (i) the generated isolated environment is deleted and (ii) the virtual non-transitory computer-readable medium is deleted.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via a communications network, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the communications network, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

The invention provides a code execution method and device, electronic equipment and a storage medium, relates to the technical field of computers, and is used for improving response speed, code transmission safety and concurrency performance and stability of a sandbox system, effectively multiplexing process resources and reducing resource overhead. The method comprises the following steps: in a sandbox system starting stage, creating and initializing a sandbox process pool for operating environments of different programming languages according to predefined process parameters; preheating the process in an initialization stage of the sandbox system; after a code execution request is received each time, distributing a target sandbox process from a corresponding sandbox process pool according to the target programming language type; the code to be executed is encrypted and transmitted to the target sandbox process, decryption is carried out in the isolation environment of the target sandbox process, and code execution and execution result asynchronous return are carried out; and before the target sandbox process is returned, performing health check on the target sandbox process, and determining to destroy or recycle the target sandbox process to the corresponding sandbox process pool for reuse.

The invention provides a table data processing method and related equipment. The method comprises the following steps: in response to a first operation on a first table, generating an isolation environment and a second table arranged in the isolation environment; the second table comprises table structure information and / or table data information of the first table; in response to a table configuration operation on the second table, table change information is generated; and in response to a deployment operation in the isolated environment, deploying at least part of the table change information to the first table. According to the table data processing method and the related equipment provided by the invention, modification of the table data in the isolation environment does not influence the table data in the production environment, so that the development and test cost of the table is reduced, and the safety of the table data is guaranteed.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

Embodiments relate to dynamic creating a temporary isolated environment in an interactive communication environment for potential bots. In response to identifying that an avatar accessing the interactive communication environment is being controlled by a non-human entity, the avatar is dynamically placed in an isolated virtual environment. Permission of the avatar are disabled in the isolated virtual environment. An authentication inquiry is presented to the avatar identified as being controlled by the non-human entity. A location is transferred for the avatar identified as being controlled by the non-human entity, based on a user response to the authentication inquiry.

A data processing device 10 includes a processing logic execution management unit 11 that, by using an isolation function of an operating system in a virtual machine in a node, causes a plurality of processing logics to operate in an isolated environment in the node, and calls the plurality of processing logics in such a manner that the plurality of processing logics are isolated from each other.

The invention discloses a modular development life cycle management method, system and device based on hot update, and the method comprises the steps: responding to a detection result that a target module appears in a module warehouse, dynamically loading the target module in a preset isolation environment, and verifying the target module; when the target module passes the verification, registering the target module into a target system; obtaining a target function module corresponding to the target module in the target system according to the target module and the target system; obtaining calling data and / or dependence data of the target function module according to the target function module; obtaining target time based on a preset prediction algorithm according to the calling data and / or dependency data of the target function module; and according to the target time, loading the target module into the target system to replace the original module used by the target function module. The problems that in the prior art, a large amount of manual operation is needed in modular development life cycle management based on hot updating, and the automation degree is low are solved.

Techniques for data management are described. An example method may include processing a first message indicating that an intermediate computing system managed by a first data center has received data from a second data center in a second area. The method may also include transmitting a first control instruction to the intermediate computing system to validate the data based at least in part on the first criteria. The method may also include processing verification results from the intermediate computing system. The method may also include processing a second message indicating that data is released from the first isolated environment of the intermediate computing system. The method may also include processing, by the computing system, a third message indicating that the second message originates from a computing device located in the first area. The method may also include causing the data to be released from the first isolated environment.

The application discloses an audio task processing method and an audio agent system. The audio agent system is composed of an MCP client, an LLM planner, an MCP server and a tool package. After receiving audio and instructions, the MCP client generates a subtask sequence corresponding to instruction text by the LLM planner. The MCP client iterates the subtask sequence to call the MCP server to determine candidate tools from the tool package according to the function description of the subtask. The LLM planner decides the optimal tool and generates an execution command, which is packaged with an audio path to the MCP server. The MCP server calls the tool to execute audio processing in an isolated environment according to the execution command of the optimal tool and the audio path. The audio processing result is forwarded to the LLM planner through the MCP client, and the LLM planner updates the audio path according to the audio processing result. The LLM planner aggregates the audio processing results of all subtasks, generates final reply content and sends it to the MCP client for display. The application can ensure stable execution of complex task processes.

Data processing devices 10A–10C are each a device that processes data in an isolated environment within a node 1–3 and each comprise an encryption proxy unit 11A–11C that uses a common key to encrypt processed data that is processed in the isolated environment and transmits the encrypted data to the other data processing devices and uses the common key to decrypt encrypted data received from the other data processing devices and outputs the decrypted data into the isolated environment and a network setting unit 12A–12C that establishes network settings such that the processed data and the encrypted data transit the proxy unit 11A–11C.

The utility model discloses a high-speed plastic nail feeding mechanism which comprises a round vibration disc and a guide strip installed on the right side of the round vibration disc, a straight vibration strip is arranged on the right side of the guide strip, a material distributing disc is arranged on the right side of the straight vibration strip, and a motor is arranged on the right side of the material distributing disc to drive the material distributing disc to rotate. The motor is electrically connected with an external power source, a plurality of nail blowing air valves are arranged on the left side of the material distribution disc at equal intervals, plastic nail bodies are clamped into the nail blowing air valves, and by installing a sound insulation cover, noise generated in the process that the plastic nail bodies are vibrated through a circular vibration disc is reduced, so that the plastic nail bodies are prevented from being damaged. And noise generated when the rubber nails are vibrated by the circular vibration disc can be effectively reduced through the sound insulation cover. The sound insulation cover can provide an isolated environment, noise transmission is reduced, interference of the surrounding environment is effectively reduced, meanwhile, the storage amount and the working condition of the circular vibration disc can be directly checked through the transparent sound insulation cover, and the storage amount and the working condition can be timely checked and added when the storage amount is insufficient.

The embodiment of the invention provides an application program deployment method and device based on a cloud service platform and a storage medium, and the method comprises the steps: obtaining a static file data package of a to-be-deployed custom root file system, and enabling the static file data package to be obtained through the construction of a container mirror image by a root file system configuration device and the packaging of the container mirror image; a binary file of the application program is deployed in the container mirror image; decompressing the static file data packet to deploy a custom root file system locally; and starting the application program in the isolated environment of the custom root file system. According to the embodiment of the invention, the physical machine deploys the self-defined root file system through the static file data packet of the self-defined root file system, a lightweight isolation environment independent of a physical machine environment is provided for an isolated application program, and a container mirror image construction tool or a container arrangement system does not need to be deployed in the physical machine; and light weight of isolation environment deployment is realized.

This invention relates to an open extension system and method for graphical programming software, belonging to the field of computer software technology. The system includes: an extension repository, which uses an independently deployed remote service to store and manage approved third-party extension packages and maintain extension metadata mapping files; a client extension management module, which loads the metadata mapping files when the editor starts and initiates extension loading requests on demand in response to user operations; a dynamic loading and security sandbox module, which retrieves extension packages from the extension repository according to loading requests and loads them into a secure, isolated environment for execution; an application programming interface (API) module, which provides standardized API interfaces for third-party extensions; and an aspect-oriented injection engine, which dynamically weaves the functional logic of third-party extensions during editor runtime. This invention overcomes the limitations and closed nature of block-based extensions, achieving secure, efficient, and flexible extension of graphical programming software.

A software detection method, comprising: acquiring an executable file of software to be subjected to detection; during the process of executing the executable file in an isolated environment, continuously acquiring application programming interface (API) sequences executed in the isolated environment, wherein the API sequences comprise a first API sequence executed in the isolated environment before a first moment; on the basis of the first API sequence executed in the isolated environment before the first moment, analyzing the executable file to obtain an analysis result; when the analysis result indicates that a malicious code is detected in the executable file, releasing resources for executing the executable file in the isolated environment; and when the analysis result indicates that no malicious code is detected in the executable file, analyzing the executable file on the basis of a second API sequence executed in the isolated environment before a second moment. By means of continuously analyzing whether there is maliciousness in a file to be subjected to detection during the dynamic execution of said file and advancing the timing of analysis, API sequence extraction and API sequence analysis can be performed in parallel, thereby improving the efficiency of analysis of a malicious code.

The present invention discloses a method and device for secure isolation and integration of Web application plug-ins. It belongs to the technical field of Web operating systems. In a Web operating system, a third-party plug-in source code is input; the third-party plug-in source code is compiled into a wasm file through the wasm compilation module of the sandbox module, wherein the sandbox module is used to provide an isolated environment; the wasm file is converted into the C source code and header file corresponding to the third-party plug-in source code through the wasm2c conversion module of the sandbox module; the third-party plug-in source code is sandboxed and reconstructed; the plug-in library source code is written, and the C source code and header file corresponding to the third-party plug-in source code are called; the plug-in library source code is compiled into a plug-in library and run. The function of securely accessing the third-party plug-in source code in the form of a plug-in in a Web application is realized, which solves the problem that existing Web applications cannot securely use third-party plug-ins developed in system languages ​​such as C / C++, realizes isolated control of memory access to third-party plug-ins, and avoids security risks such as data leakage and terminal device loss of control caused by third-party plug-in vulnerabilities.

1. The name of the product of this design: operating interface of the virtual machine graphical user interface of the NAS device of the computer. 2. Purpose of this design product: To use part of the hard disk and memory capacity of the physical machine as the hard disk and memory capacity of the virtual machine, and to simulate a complete computer system with complete hardware system functions and running in a completely isolated environment through software. 3. The design highlights of this appearance design product are located in the part of the graphical user interface. 4. The picture or photo that best illustrates the key points of the design: Main view of Design 1. 5. Designate Design 1 as the base design. 6. Purpose of the graphical user interface: This graphical user interface, in its entirety and in part, is used to manage the virtual machines of the NAS device. 7. Human-computer interaction mode of the graphical user interface: The main view of Design 1 is the display interface of the device. Click the "Manage" button of the main view of Design 1 to enter the Design 1 change state diagram 1, and click "Storage" of the Design 1 change state diagram 1 to enter the Design 1 change state diagram 2; the main view of Design 2 is the display interface of the device. Click the "Manage" button of the main view of Design 2 to enter the Design 2 change state diagram 1, and click "Network" of the Design 2 change state diagram 1 to enter the Design 2 change state diagram 2; the main view of Design 3 is the display interface of the device. Click the "Manage" button of the main view of Design 3 to enter the Design 3 change state diagram 1, and click "Log" of the Design 3 change state diagram 1 to enter the Design 3 change state diagram 2; the main view of Design 4 is the display interface of the device. Click the "Manage" button of the main view of Design 4 to enter the Design 4 change state diagram 1, and click "Mirror" of the Design 4 change state diagram 1 to enter the Design 4 change state diagram 2. 8. Description of other situations that need explanation: Design 1 reference figure 1 is a reference schematic diagram of the main view, and Design 1 reference figure 2 is a reference schematic diagram of the change state diagram. 9. Other situations that need to be explained Other explanations: The dotted line in the view shows the part of the graphical user interface, which does not constitute the part for which protection is required for this design; the parts other than the dotted line are the parts for which protection is required for this design.