50 results about "Isolated environment" patented technology

The invention provides a hot updating method, system and equipment for an automation program of semiconductor equipment and a medium. The method comprises the following steps: dynamically loading a new version script code into an isolated runtime environment created by an application domain or a class loader through a reflective API (Application Program Interface) so as to isolate new and old codes. And performing preheating initialization on the new code in an isolated environment, wherein the preheating initialization comprises execution of an initialization function and simulation of a production request test. After preheating is completed, a new request of the production environment is routed to the new version to be processed through atomic switching operation, and meanwhile, the current running version continues to complete existing in-process affairs. According to the method, shutdown is avoided through dynamic loading and isolation, stability is improved through preheating initialization, new requests and in-process transactions are considered in atomic switching, non-shutdown updating of the automatic program of the semiconductor equipment is achieved, production interruption is effectively eliminated, and the equipment utilization rate and operation and maintenance flexibility are improved.

The invention provides a code execution method and device, electronic equipment and a storage medium, relates to the technical field of computers, and is used for improving response speed, code transmission safety and concurrency performance and stability of a sandbox system, effectively multiplexing process resources and reducing resource overhead. The method comprises the following steps: in a sandbox system starting stage, creating and initializing a sandbox process pool for operating environments of different programming languages according to predefined process parameters; preheating the process in an initialization stage of the sandbox system; after a code execution request is received each time, distributing a target sandbox process from a corresponding sandbox process pool according to the target programming language type; the code to be executed is encrypted and transmitted to the target sandbox process, decryption is carried out in the isolation environment of the target sandbox process, and code execution and execution result asynchronous return are carried out; and before the target sandbox process is returned, performing health check on the target sandbox process, and determining to destroy or recycle the target sandbox process to the corresponding sandbox process pool for reuse.

A data processing device 10 includes a processing logic execution management unit 11 that, by using an isolation function of an operating system in a virtual machine in a node, causes a plurality of processing logics to operate in an isolated environment in the node, and calls the plurality of processing logics in such a manner that the plurality of processing logics are isolated from each other.

The invention discloses a modular development life cycle management method, system and device based on hot update, and the method comprises the steps: responding to a detection result that a target module appears in a module warehouse, dynamically loading the target module in a preset isolation environment, and verifying the target module; when the target module passes the verification, registering the target module into a target system; obtaining a target function module corresponding to the target module in the target system according to the target module and the target system; obtaining calling data and / or dependence data of the target function module according to the target function module; obtaining target time based on a preset prediction algorithm according to the calling data and / or dependency data of the target function module; and according to the target time, loading the target module into the target system to replace the original module used by the target function module. The problems that in the prior art, a large amount of manual operation is needed in modular development life cycle management based on hot updating, and the automation degree is low are solved.

Techniques for data management are described. An example method may include processing a first message indicating that an intermediate computing system managed by a first data center has received data from a second data center in a second area. The method may also include transmitting a first control instruction to the intermediate computing system to validate the data based at least in part on the first criteria. The method may also include processing verification results from the intermediate computing system. The method may also include processing a second message indicating that data is released from the first isolated environment of the intermediate computing system. The method may also include processing, by the computing system, a third message indicating that the second message originates from a computing device located in the first area. The method may also include causing the data to be released from the first isolated environment.

The application discloses an audio task processing method and an audio agent system. The audio agent system is composed of an MCP client, an LLM planner, an MCP server and a tool package. After receiving audio and instructions, the MCP client generates a subtask sequence corresponding to instruction text by the LLM planner. The MCP client iterates the subtask sequence to call the MCP server to determine candidate tools from the tool package according to the function description of the subtask. The LLM planner decides the optimal tool and generates an execution command, which is packaged with an audio path to the MCP server. The MCP server calls the tool to execute audio processing in an isolated environment according to the execution command of the optimal tool and the audio path. The audio processing result is forwarded to the LLM planner through the MCP client, and the LLM planner updates the audio path according to the audio processing result. The LLM planner aggregates the audio processing results of all subtasks, generates final reply content and sends it to the MCP client for display. The application can ensure stable execution of complex task processes.

Data processing devices 10A–10C are each a device that processes data in an isolated environment within a node 1–3 and each comprise an encryption proxy unit 11A–11C that uses a common key to encrypt processed data that is processed in the isolated environment and transmits the encrypted data to the other data processing devices and uses the common key to decrypt encrypted data received from the other data processing devices and outputs the decrypted data into the isolated environment and a network setting unit 12A–12C that establishes network settings such that the processed data and the encrypted data transit the proxy unit 11A–11C.

This invention relates to an open extension system and method for graphical programming software, belonging to the field of computer software technology. The system includes: an extension repository, which uses an independently deployed remote service to store and manage approved third-party extension packages and maintain extension metadata mapping files; a client extension management module, which loads the metadata mapping files when the editor starts and initiates extension loading requests on demand in response to user operations; a dynamic loading and security sandbox module, which retrieves extension packages from the extension repository according to loading requests and loads them into a secure, isolated environment for execution; an application programming interface (API) module, which provides standardized API interfaces for third-party extensions; and an aspect-oriented injection engine, which dynamically weaves the functional logic of third-party extensions during editor runtime. This invention overcomes the limitations and closed nature of block-based extensions, achieving secure, efficient, and flexible extension of graphical programming software.

According to the instruction-level program debugging method and device and the computer program product provided by the embodiment of the invention, the tracking log entry is generated by acquiring the execution data information of the machine instruction, and the key register value and the memory access information before and after each instruction is executed are recorded; any instruction execution point can be accurately traced back in the replay process, then the first tracking log entry is preprocessed into a structured instruction tracking log entry, and machine instructions of a target program are executed one by one through a preset instruction level simulator based on an instruction sequence of a uniform format and an analyzable structure, so that the replay efficiency of the target program is improved. The execution of the instruction is accurately simulated, the instruction-level replay operation of the program state is realized, the dependency on the external environment in the debugging process is greatly reduced based on simulator replay, debugging can be performed in a controlled and isolated environment, any execution path of the program can be replayed, the target program does not need to be run again, and the debugging efficiency is improved. And debugging of occasional and difficult-to-reproduce problems is greatly facilitated.

Techniques are described for data management. An example method can include receiving, by a first data center in a first region, a message indicating that an intermediate computing system managed by the first data center has received data from a second data center in a second region, the data stored in an isolated environment of the intermediate computing system. The method can further include determining a criterion for validating the data. The method can further include transmitting to the intermediate computing system, first control instructions to validate the data while stored in the isolated environment based at least in part on the criterion. The method can further include receiving validation results from the intermediate computing system. The method can further include causing the data to be released from the isolated environment based at least in part on the validation results.

The invention relates to a model card example code-oriented automatic program repairing method. The method comprises the following steps: performing syntax and semantic joint analysis on a model card document, extracting code snippets and execution clues, and reconstructing the model card document into a runnable document containing preset execution logic; determining a version combination according to clues to generate an environment identifier, constructing or multiplexing an isolation environment and binding a document, executing the document and recording information to form a complete log to locate a failure position, and extracting a context containing an error root cause in combination with execution state association. And converting context and environment information into a determinable condition, retrieving a repair strategy or case, and generating and optimizing a repair patch. And if the patch fails, iteration is carried out until success or an upper limit is reached. And finally, identifying missed conditions, and updating the knowledge base in combination with the optimal scheme to realize dynamic iterative expansion of the repair strategy. By adopting the method, the executable performance and reusability of codes and the stability of platform ecology can be improved.

The application provides a lightweight function running method and system for a server-unaware computing scene, and the method comprises the following steps: providing a communication primitive for fast cold start of an isolated environment and high-performance intermediate data transmission; for a server-unaware function computing workflow scene, a runtime is provided as a new software stack architecture; the function and the underlying runtime relied by the function are all deployed in the same CPU privilege level and address space for cold start operation; a library operating system with a workflow granularity is used to provide underlying runtime services for the function, and a memory-safe language is used to provide memory isolation and sharing; and an on-demand loading mechanism is implemented for the library operating system. The application solves the technical problems of slow cold start of an isolated environment, poor intermediate data transmission performance, large cold start range and high cost, and poor flexibility of memory isolation and sharing.

As various systems evolve towards autonomous self-evolution, self-optimization capability has become a crucial characteristic of modern systems. Systems need to be able to propose improvement suggestions and automatically modify their own code or configuration based on operational data, user feedback, or external instructions. However, existing technologies suffer from deficiencies such as a lack of secure testing mechanisms, data corruption during testing, a stateless branching concept, a lack of conflict handling mechanisms, and insufficient rollback capabilities. This application provides a secure testing method, system, and computer-readable storage medium for system self-optimization, aiming to enable the target system to test improvement suggestions in an isolated environment, independently store state changes generated during testing, intelligently merge them into the main system after successful testing, safely discard them upon test failure, and support precise rollback, ensuring the system maintains stability and data integrity while autonomously evolving.

The utility model provides a kind of pneumatic isolated environment lift door, it is related to the technical field of isolation door, solve the problem that the transmission efficiency of movable door is low and the space occupied by driving structure is large under the condition of double-layer material conveying of existing rapid roller shutter door.The utility model includes main frame, movable door that is lifted and set in main frame, a group of lifting cylinders for driving movable door lifting symmetrically installed in the left and right sides of the front of main frame, a group of lifting linear guide rails for guiding left and right when movable door lifting symmetrically installed in the left and right sides of the front of main frame, a group of edge sealing symmetrically installed in the left and right inside of the front of main frame, a group of position sensors for positioning lifting stroke are respectively installed in the upper and lower ends of edge sealing.The utility model has the beneficial effects that: the up and down terminal point of lifting is accurately controlled, the overall structure space is simplified;Better ensure the movement track when moving;It can be used together in two sets.

The utility model discloses a dustproof two-side vertical pile cutting machine, which relates to the technical field of flannelette cutting, and comprises a rack, a flannelette roller, a driving roller, a support, an expansion piece, a lifting plate, a cutting knife and a dustproof material receiving assembly, the flannelette roller and the driving roller are respectively arranged on the rack, the support is connected to the rack, the expansion piece is arranged on the support and connected with the lifting plate, and the cutting knife is connected with the lifting plate. The lifting plate is provided with a cutting knife, and the dustproof material collecting assembly is installed on the side portion of the machine frame and located on one side of the cutting knife. The dust cover surrounds the material receiving supporting plate, so that lint on the material receiving supporting plate can be placed in an environment relatively isolated from the outside, dust and fluff in a workshop are effectively prevented from easily making contact with each other and staying on the static lint, the lint collected on the material receiving supporting plate is cleaner, the surface is smoother, and the quality of the lint is improved. Long time consumed for cleaning lint by subsequent personnel is saved, and the practicability is improved.

The invention belongs to the technical field of constant-temperature feeding of mink cubs, and particularly relates to a maternal-imitating constant-temperature feeding device for mink cubs, which comprises a constant-temperature box, an air cushion is fixedly mounted at the bottom of an inner cavity of the constant-temperature box, first mink-imitating plush cloth is fixedly mounted at the top of the air cushion, and second mink-imitating plush cloth is fixedly mounted on the inner wall of the constant-temperature box. A micro vibration motor and a heating plate are fixedly mounted in the air cushion, a heating wire is fixedly mounted in the heating plate, a mounting frame is fixedly mounted on one side of the constant-temperature box, an air pump is fixedly mounted in the mounting frame, an air outlet pipe of the air pump is communicated with the air cushion, a groove is formed in the top of the constant-temperature box, and a sealing gasket is fixedly mounted at the bottom of the groove; according to the invention, through a'temperature-contact-pacifying 'three-in-one mode of bionic contact, bionic stimulation and restoration of female mink feeding, a cub engraving behavior caused by a traditional isolated environment is avoided, so that the survival rate of the mink cubs is improved.

The application relates to a model card example code-oriented automatic program repair method. The method comprises the following steps: performing joint syntax and semantics analysis on a model card document, extracting a code segment and an execution clue, and reconstructing into a runnable document containing preset execution logic; then determining a version combination generation environment identifier according to the clue, constructing or reusing an isolated environment, binding the document, executing the document, recording information to form a complete log to locate a failure position, and combining an execution state to associate and extract a context containing an error root cause. The context and environment information are converted into a determinable condition, a repair strategy or a case is retrieved, a repair patch is generated and optimized. The patch is verified, and if the verification fails, iteration is performed until success or an upper limit is reached. Finally, a non-hit condition is identified, an optimal scheme is updated in combination with a knowledge base, and repair strategy dynamic iteration and expansion are realized. The method can improve the executability, reusability and stability of a platform ecology of code.

The application relates to the computer technical field and discloses a simulation detection method and device for component replacement in operating system migration and a medium. The method first determines component replacement operations required for migration from a current operating system to a target operating system. Subsequently, installation of a target kernel is simulated in a first isolated environment constructed through a namespace and a virtual root directory. On the basis of successful kernel simulation installation, a temporary boot environment is generated and the system is restarted to verify the loading process of the kernel. After successful kernel loading, the aforementioned component replacement operations are simulated in another isolated environment, and a simulation detection result is obtained. The application can detect kernel installation and component replacement in the migration process in advance without changing the current operating system.

The invention relates to the technical field of vulnerability processing, in particular to an integrated processing method for linkage of real-time collection and reproduction verification of vulnerability information, which comprises the following steps: converting vulnerability information data into standardized vulnerability knowledge entries based on a semantic analysis and structured extraction technology, and generating a vulnerability reproduction script adaptive to a target controlled environment; running the vulnerability reproduction script in the target controlled environment, and collecting a system index and a behavior log during running; and based on a preset vulnerability triggering feature, obtaining a reproduction result, generating a defense strategy and pushing the defense strategy to the security device. According to the method, the intelligence utilization efficiency is improved through structured extraction and semantic analysis, the reproduction script is generated based on standardized vulnerability knowledge entries, and automatic and portable vulnerability verification is achieved. The script is operated in the isolation environment, the reproduction result is safely and efficiently obtained, the defense strategy is automatically generated according to the result and pushed to the security equipment in time, the vulnerability handling period is remarkably shortened, and the network security protection capability is improved.

A substrate support assembly includes a shaft body, a plate attached to an upper portion of the shaft body, and a plug or cap attached to a lower portion of the shaft body. The shaft body, the plate and the plug or cap define an internal shaft area having an isolated environment. The internal shaft area is a vacuum environment or comprises an inert gas.

The application provides a large file and heterogeneous data one-way processing system for an isolated environment, and relates to the technical field of data processing. The application relates to the technical field of data processing. The input adaptation module is connected with the security isolation module in series, the input adaptation module is configured with a dynamic fragmentation unit, graphic elements, characters and topologies are matched and associated through a multimodal matching, the security isolation module adopts a light gate physical isolation, the light gate physical isolation comprises a one-way protocol stack and a double-checking unit, the one-way protocol stack only receives fragmented data output by the input adaptation module; through a dynamic adjustment mechanism of multimodule linkage, the limitations of the prior art under the isolated environment are solved, dynamic fragmentation and double-checking linkage balance transmission efficiency and security, transmission success rate is significantly improved compared with a fixed fragmentation mode; parameters of preprocessing and heterogeneous data processing are coordinated to avoid feature distortion, and data correlation accuracy is improved; and resource allocation is optimized based on dynamic scheduling of load and storage state.

The invention discloses a cross-device task migration system and method based on device capacity dynamic aggregation, and belongs to the technical field of computers, the system comprises a main control device and an auxiliary device which are in communication connection, the main control device is provided with a task decomposer, a function scheduler and other modules, and the auxiliary device is provided with a resource agent and a safe enclave. The task decomposer splits an intensive task into an independent stateless function, the function scheduler generates description file broadcast and sends an encrypted code, data and a key to target equipment after receiving a bidding message containing credible proof of auxiliary equipment, and the secure enclave decrypts, verifies and calculates in an isolated environment, encrypts and returns a result; according to the method, dynamic aggregation of computing power is achieved, the resource utilization rate is increased, safety is guaranteed through trusted computing and encryption, and reliability is enhanced through redundancy computing and a redistribution mechanism.

A pop up cover for a crib is provided for providing a safe, comfortable and isolated environment for a child in a crib. The pop-up cover may be made of breathable fabric panels having an integrated frame, for example a flexible frame, which can be folded (collapsed) on itself, for example when folded in specific ways if appropriate force is applied and which keeps the fabric in a taught, open position when unfolded (preventing the panels form falling inwards onto each other). The pop up cover can be lightweight and compact, quick and easy to set up, dark inside and breathable.

The invention discloses an application instance isolation method, a medium and an application isolation system, and relates to the technical field of smart home / smart home, and the method comprises the steps: receiving a first hardware peripheral access request initiated by a service application, converting the first hardware peripheral access request into a second hardware peripheral access request, and determining a corresponding first application instance; then performing permission verification and memory cross-border verification on each first application instance, and determining a first priority of the first application instance at the same time; and after the instance passes the dual verification, calling the corresponding peripheral drive program according to the first priority and determining an operation result. According to the method, dual isolation of the applications is realized through memory boundary check and priority scheduling, the problem of application isolation when the third-party application program is deployed on the embedded equipment is effectively solved, different applications can be orderly operated in a security isolation environment, and the security isolation performance of the applications is improved. Therefore, the stability and the safety of the embedded equipment are guaranteed.

The application belongs to the technical field of feature engineering, and specifically discloses a feature extraction and identification method based on field data. According to the application, the running parameters of a target device collected in the field are analyzed in multiple dimensions; target key parameters are selected from various parameter categories; the target correlation between the target key parameters and other running parameters is calculated according to a parameter correlation coefficient calculation strategy; key feature parameters are selected from the target key parameters according to the target correlation, and a fault mode of the target device is identified according to the key feature parameters based on an attention mechanism and a generative adversarial network identification model. In this way, in the case of limited isolated environment conditions, the running parameters collected in the field are used to the greatest extent, an identification model based on an attention mechanism and a generative adversarial network suitable for an isolated environment is introduced, and the purpose of learning a generative task without using as much labeled data as possible is achieved, thereby effectively improving the accuracy of identifying fault modes.

The disclosure provides a method for isolated environments for containerized workloads within a virtual private cloud in a networking environment. The method generally includes defining, by a user, a subnet custom resource object for creating a subnet in the virtual private cloud, wherein defining the subnet custom resource object comprises defining a connectivity mode for the subnet; deploying the subnet custom resource object such that the subnet is created in the virtual private cloud with the connectivity mode specified for the subnet; defining, by the user, a subnet port custom resource object for assigning a node to the subnet, wherein one or more containerized workloads are running on the node; and deploying the subnet port custom resource object such that the node is assigned to the subnet.

A purpose of the present invention is to prevent a third party from illegally obtaining confidential information or fragments for restoring confidential information.　An isolated environment according to the present invention allows for recovery of confidential information from a prescribed number of fragments or division of confidential information into a prescribed number of fragments. For example, the isolated environment may include a secure element unit or a TEE portion. For example, when restoring confidential information from a plurality of fragments, the isolated environment may use fragments stored in the isolated environment and fragments input to the isolated environment from outside. Furthermore, when restoring confidential information from a plurality of fragments, for example, the isolated environment may use a plurality of fragments that are input to the isolated environment from outside. In this case, at least some of the fragments input from outside into the isolated environment may be encrypted.

The invention belongs to the technical field of computer security, and particularly relates to an automatic identification and repair method for Python component vulnerabilities, which comprises the following steps: acquiring and standardizing a Python project dependency description file, analyzing and cleaning, and extracting a component name and an accurate version number; in combination with operation platform information, through parallel query of a preset lightweight feature library, components with security risks are rapidly identified; intelligently determining a target repair version for the vulnerability component by adopting a minimum change strategy; upgrading is executed in the isolated environment, API compatibility is automatically verified through a function signature comparison method, and if interface change is detected, a rollback mechanism is triggered; a structured report is generated, and repaired items and items needing manual intervention are clarified. By adopting the technical scheme, full-process automatic closed loop from dependency analysis, vulnerability matching and intelligent repair to compatibility verification is realized, and the accuracy, efficiency and reliability of Python project safety management are remarkably improved.

A system for communication of data with isolated environments, the system including at least a processor and a memory communicatively connected to the at least a processor, the memory containing instructions configuring the at least a processor to receive one or more transmission datum from an operating environment, wherein the operating environment conforms with at least one design assurance level (DAL) classification, modify the one or more transmission datum as a function of the at least one DAL classification and transmit the one or more transmission datum through an intelligent bus controller as a function of the modification.

This invention discloses a method and system for automated diagnosis and repair of application anomalies driven by a large model. The method includes: capturing application runtime anomalies and their context information in a non-intrusive manner; performing distributed root cause analysis based on the captured information to locate the root cause anomaly node and generate a diagnostic report; inputting the report into a large language model to generate targeted repair code; automatically verifying the repair code in an isolated environment, driving the large model to iteratively correct based on feedback when failure occurs, until verification is passed or termination conditions are met; and automatically submitting the repaired code after successful verification. The system comprises five functional modules. This invention achieves a closed-loop process from anomaly detection, intelligent root cause localization, large model-assisted repair to automated verification and submission, significantly improving the automation level of software system operation and maintenance and the efficiency of fault repair.