93 results about "Isolated environment" patented technology

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

The invention provides a hot updating method, system and equipment for an automation program of semiconductor equipment and a medium. The method comprises the following steps: dynamically loading a new version script code into an isolated runtime environment created by an application domain or a class loader through a reflective API (Application Program Interface) so as to isolate new and old codes. And performing preheating initialization on the new code in an isolated environment, wherein the preheating initialization comprises execution of an initialization function and simulation of a production request test. After preheating is completed, a new request of the production environment is routed to the new version to be processed through atomic switching operation, and meanwhile, the current running version continues to complete existing in-process affairs. According to the method, shutdown is avoided through dynamic loading and isolation, stability is improved through preheating initialization, new requests and in-process transactions are considered in atomic switching, non-shutdown updating of the automatic program of the semiconductor equipment is achieved, production interruption is effectively eliminated, and the equipment utilization rate and operation and maintenance flexibility are improved.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

Systems, computer program products, and methods are described herein for enhanced encryption orchestration and application integration frameworks. The system performs steps of initializing a broker application to act as a data security broker within a computing environment; providing an application programming interface (API) for external application interaction; receiving and processing requests via the API for access to encrypted code and data; containerizing the code and data within an isolated environment, subject to predefined rules; monitoring usage to ensure adherence to these rules; initiating self-destruction of the container upon reaching a predetermined usage limit or condition; and securely erasing all sensitive data and code after usage completion.

The invention relates to the technical field of computer system maintenance, and particularly discloses a computer system and a computer system maintenance method, and the method comprises the steps: obtaining the basic information of each to-be-installed patch corresponding to a target computer system, and carrying out the preliminary analysis to obtain the safety evaluation coefficient of each to-be-installed patch; collecting multi-dimensional data of the target computer system, and generating a virtual copy synchronized with the target computer system in real time in the isolation environment; installing each patch to be installed in the original target computer system in the isolation environment, running a core function module of the target computer system in the isolation environment, and further verifying a compatibility evaluation coefficient of each patch to be installed in the isolation environment; synchronously monitoring the dynamic operation behavior of each patch to be installed in real time in the isolation environment, and detecting a potential behavior threat assessment coefficient of each patch to be installed in the isolation environment; not only is the possibility of patch introduction reduced, but also a solid foundation is provided for long-term maintenance and safety management of the system.

The present application provides a microfluidic device, comprising at least one microfluidic channel unit, each microfluidic channel unit comprising a microfluidic channel configured to contain a fluid and comprising a plurality of independent compartments. Each microfluidic channel unit comprises a first side wall and a second side wall opposite and spaced apart from the first side wall, a plurality of first extensions formed on the first side wall extending toward the second side wall without abutting the second side wall, a plurality of second extensions formed on the second side wall extending toward the first side wall without abutting the first side wall, the plurality of first extensions and the plurality of second extensions being alternately arranged in the microfluidic channel. A compartment is formed in at least one first extension or at least one second extension. The compartment has an opening positioned such that the fluid does not directly flow into each compartment. The microfluidic device of the present application has a stable isolated environment to facilitate various reactions and prevent micro-objects in the compartments from escaping.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

Disclosed is a system (100). The system (100) includes a client device (101) and a host device (102). The host device (102) includes processing circuitry (120) that is configured to download files by way of file links, generate an isolated environment by way of a virtual non-transitory computer-readable medium such that the one or more files are received and processed in the isolated environment, generate a first mitigation signal when a data breach associated with the one or more files is detected. Based on the first mitigation signal (i) the virtual non-transitory computer-readable medium is compressed and encrypted and (ii) the generated isolated environment is deleted and generate a second mitigation signal when a data breach associated with the one or more files is not detected. Based on the second mitigation signal (i) the generated isolated environment is deleted and (ii) the virtual non-transitory computer-readable medium is deleted.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via a communications network, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the communications network, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

The invention provides a code execution method and device, electronic equipment and a storage medium, relates to the technical field of computers, and is used for improving response speed, code transmission safety and concurrency performance and stability of a sandbox system, effectively multiplexing process resources and reducing resource overhead. The method comprises the following steps: in a sandbox system starting stage, creating and initializing a sandbox process pool for operating environments of different programming languages according to predefined process parameters; preheating the process in an initialization stage of the sandbox system; after a code execution request is received each time, distributing a target sandbox process from a corresponding sandbox process pool according to the target programming language type; the code to be executed is encrypted and transmitted to the target sandbox process, decryption is carried out in the isolation environment of the target sandbox process, and code execution and execution result asynchronous return are carried out; and before the target sandbox process is returned, performing health check on the target sandbox process, and determining to destroy or recycle the target sandbox process to the corresponding sandbox process pool for reuse.

The invention provides a table data processing method and related equipment. The method comprises the following steps: in response to a first operation on a first table, generating an isolation environment and a second table arranged in the isolation environment; the second table comprises table structure information and / or table data information of the first table; in response to a table configuration operation on the second table, table change information is generated; and in response to a deployment operation in the isolated environment, deploying at least part of the table change information to the first table. According to the table data processing method and the related equipment provided by the invention, modification of the table data in the isolation environment does not influence the table data in the production environment, so that the development and test cost of the table is reduced, and the safety of the table data is guaranteed.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

A data processing device 10 includes a processing logic execution management unit 11 that, by using an isolation function of an operating system in a virtual machine in a node, causes a plurality of processing logics to operate in an isolated environment in the node, and calls the plurality of processing logics in such a manner that the plurality of processing logics are isolated from each other.

The invention discloses a modular development life cycle management method, system and device based on hot update, and the method comprises the steps: responding to a detection result that a target module appears in a module warehouse, dynamically loading the target module in a preset isolation environment, and verifying the target module; when the target module passes the verification, registering the target module into a target system; obtaining a target function module corresponding to the target module in the target system according to the target module and the target system; obtaining calling data and / or dependence data of the target function module according to the target function module; obtaining target time based on a preset prediction algorithm according to the calling data and / or dependency data of the target function module; and according to the target time, loading the target module into the target system to replace the original module used by the target function module. The problems that in the prior art, a large amount of manual operation is needed in modular development life cycle management based on hot updating, and the automation degree is low are solved.

Techniques for data management are described. An example method may include processing a first message indicating that an intermediate computing system managed by a first data center has received data from a second data center in a second area. The method may also include transmitting a first control instruction to the intermediate computing system to validate the data based at least in part on the first criteria. The method may also include processing verification results from the intermediate computing system. The method may also include processing a second message indicating that data is released from the first isolated environment of the intermediate computing system. The method may also include processing, by the computing system, a third message indicating that the second message originates from a computing device located in the first area. The method may also include causing the data to be released from the first isolated environment.

The application discloses an audio task processing method and an audio agent system. The audio agent system is composed of an MCP client, an LLM planner, an MCP server and a tool package. After receiving audio and instructions, the MCP client generates a subtask sequence corresponding to instruction text by the LLM planner. The MCP client iterates the subtask sequence to call the MCP server to determine candidate tools from the tool package according to the function description of the subtask. The LLM planner decides the optimal tool and generates an execution command, which is packaged with an audio path to the MCP server. The MCP server calls the tool to execute audio processing in an isolated environment according to the execution command of the optimal tool and the audio path. The audio processing result is forwarded to the LLM planner through the MCP client, and the LLM planner updates the audio path according to the audio processing result. The LLM planner aggregates the audio processing results of all subtasks, generates final reply content and sends it to the MCP client for display. The application can ensure stable execution of complex task processes.

Data processing devices 10A–10C are each a device that processes data in an isolated environment within a node 1–3 and each comprise an encryption proxy unit 11A–11C that uses a common key to encrypt processed data that is processed in the isolated environment and transmits the encrypted data to the other data processing devices and uses the common key to decrypt encrypted data received from the other data processing devices and outputs the decrypted data into the isolated environment and a network setting unit 12A–12C that establishes network settings such that the processed data and the encrypted data transit the proxy unit 11A–11C.

The utility model discloses a high-speed plastic nail feeding mechanism which comprises a round vibration disc and a guide strip installed on the right side of the round vibration disc, a straight vibration strip is arranged on the right side of the guide strip, a material distributing disc is arranged on the right side of the straight vibration strip, and a motor is arranged on the right side of the material distributing disc to drive the material distributing disc to rotate. The motor is electrically connected with an external power source, a plurality of nail blowing air valves are arranged on the left side of the material distribution disc at equal intervals, plastic nail bodies are clamped into the nail blowing air valves, and by installing a sound insulation cover, noise generated in the process that the plastic nail bodies are vibrated through a circular vibration disc is reduced, so that the plastic nail bodies are prevented from being damaged. And noise generated when the rubber nails are vibrated by the circular vibration disc can be effectively reduced through the sound insulation cover. The sound insulation cover can provide an isolated environment, noise transmission is reduced, interference of the surrounding environment is effectively reduced, meanwhile, the storage amount and the working condition of the circular vibration disc can be directly checked through the transparent sound insulation cover, and the storage amount and the working condition can be timely checked and added when the storage amount is insufficient.

This invention relates to an open extension system and method for graphical programming software, belonging to the field of computer software technology. The system includes: an extension repository, which uses an independently deployed remote service to store and manage approved third-party extension packages and maintain extension metadata mapping files; a client extension management module, which loads the metadata mapping files when the editor starts and initiates extension loading requests on demand in response to user operations; a dynamic loading and security sandbox module, which retrieves extension packages from the extension repository according to loading requests and loads them into a secure, isolated environment for execution; an application programming interface (API) module, which provides standardized API interfaces for third-party extensions; and an aspect-oriented injection engine, which dynamically weaves the functional logic of third-party extensions during editor runtime. This invention overcomes the limitations and closed nature of block-based extensions, achieving secure, efficient, and flexible extension of graphical programming software.

A software detection method, comprising: acquiring an executable file of software to be subjected to detection; during the process of executing the executable file in an isolated environment, continuously acquiring application programming interface (API) sequences executed in the isolated environment, wherein the API sequences comprise a first API sequence executed in the isolated environment before a first moment; on the basis of the first API sequence executed in the isolated environment before the first moment, analyzing the executable file to obtain an analysis result; when the analysis result indicates that a malicious code is detected in the executable file, releasing resources for executing the executable file in the isolated environment; and when the analysis result indicates that no malicious code is detected in the executable file, analyzing the executable file on the basis of a second API sequence executed in the isolated environment before a second moment. By means of continuously analyzing whether there is maliciousness in a file to be subjected to detection during the dynamic execution of said file and advancing the timing of analysis, API sequence extraction and API sequence analysis can be performed in parallel, thereby improving the efficiency of analysis of a malicious code.

The present invention discloses a method and device for secure isolation and integration of Web application plug-ins. It belongs to the technical field of Web operating systems. In a Web operating system, a third-party plug-in source code is input; the third-party plug-in source code is compiled into a wasm file through the wasm compilation module of the sandbox module, wherein the sandbox module is used to provide an isolated environment; the wasm file is converted into the C source code and header file corresponding to the third-party plug-in source code through the wasm2c conversion module of the sandbox module; the third-party plug-in source code is sandboxed and reconstructed; the plug-in library source code is written, and the C source code and header file corresponding to the third-party plug-in source code are called; the plug-in library source code is compiled into a plug-in library and run. The function of securely accessing the third-party plug-in source code in the form of a plug-in in a Web application is realized, which solves the problem that existing Web applications cannot securely use third-party plug-ins developed in system languages ​​such as C / C++, realizes isolated control of memory access to third-party plug-ins, and avoids security risks such as data leakage and terminal device loss of control caused by third-party plug-in vulnerabilities.

1. The name of the product of this design: operating interface of the virtual machine graphical user interface of the NAS device of the computer. 2. Purpose of this design product: To use part of the hard disk and memory capacity of the physical machine as the hard disk and memory capacity of the virtual machine, and to simulate a complete computer system with complete hardware system functions and running in a completely isolated environment through software. 3. The design highlights of this appearance design product are located in the part of the graphical user interface. 4. The picture or photo that best illustrates the key points of the design: Main view of Design 1. 5. Designate Design 1 as the base design. 6. Purpose of the graphical user interface: This graphical user interface, in its entirety and in part, is used to manage the virtual machines of the NAS device. 7. Human-computer interaction mode of the graphical user interface: The main view of Design 1 is the display interface of the device. Click the "Manage" button of the main view of Design 1 to enter the Design 1 change state diagram 1, and click "Storage" of the Design 1 change state diagram 1 to enter the Design 1 change state diagram 2; the main view of Design 2 is the display interface of the device. Click the "Manage" button of the main view of Design 2 to enter the Design 2 change state diagram 1, and click "Network" of the Design 2 change state diagram 1 to enter the Design 2 change state diagram 2; the main view of Design 3 is the display interface of the device. Click the "Manage" button of the main view of Design 3 to enter the Design 3 change state diagram 1, and click "Log" of the Design 3 change state diagram 1 to enter the Design 3 change state diagram 2; the main view of Design 4 is the display interface of the device. Click the "Manage" button of the main view of Design 4 to enter the Design 4 change state diagram 1, and click "Mirror" of the Design 4 change state diagram 1 to enter the Design 4 change state diagram 2. 8. Description of other situations that need explanation: Design 1 reference figure 1 is a reference schematic diagram of the main view, and Design 1 reference figure 2 is a reference schematic diagram of the change state diagram. 9. Other situations that need to be explained Other explanations: The dotted line in the view shows the part of the graphical user interface, which does not constitute the part for which protection is required for this design; the parts other than the dotted line are the parts for which protection is required for this design.

According to the instruction-level program debugging method and device and the computer program product provided by the embodiment of the invention, the tracking log entry is generated by acquiring the execution data information of the machine instruction, and the key register value and the memory access information before and after each instruction is executed are recorded; any instruction execution point can be accurately traced back in the replay process, then the first tracking log entry is preprocessed into a structured instruction tracking log entry, and machine instructions of a target program are executed one by one through a preset instruction level simulator based on an instruction sequence of a uniform format and an analyzable structure, so that the replay efficiency of the target program is improved. The execution of the instruction is accurately simulated, the instruction-level replay operation of the program state is realized, the dependency on the external environment in the debugging process is greatly reduced based on simulator replay, debugging can be performed in a controlled and isolated environment, any execution path of the program can be replayed, the target program does not need to be run again, and the debugging efficiency is improved. And debugging of occasional and difficult-to-reproduce problems is greatly facilitated.

A processing device 10 provides an isolated environment for processing data by processing logic in accordance with a policy. The processing device 10 includes an attestation report generation unit 122 that, following generating the isolated environment, verifies the isolated environment at a verification timing after initialization of the isolated environment and after the execution of processing of the data in the isolated environment, and generates report data including results of the verification. An attestation report includes a hash value of an attestation report from a preceding time.

Techniques are described for data management. An example method can include receiving, by a first data center in a first region, a message indicating that an intermediate computing system managed by the first data center has received data from a second data center in a second region, the data stored in an isolated environment of the intermediate computing system. The method can further include determining a criterion for validating the data. The method can further include transmitting to the intermediate computing system, first control instructions to validate the data while stored in the isolated environment based at least in part on the criterion. The method can further include receiving validation results from the intermediate computing system. The method can further include causing the data to be released from the isolated environment based at least in part on the validation results.

The invention relates to a model card example code-oriented automatic program repairing method. The method comprises the following steps: performing syntax and semantic joint analysis on a model card document, extracting code snippets and execution clues, and reconstructing the model card document into a runnable document containing preset execution logic; determining a version combination according to clues to generate an environment identifier, constructing or multiplexing an isolation environment and binding a document, executing the document and recording information to form a complete log to locate a failure position, and extracting a context containing an error root cause in combination with execution state association. And converting context and environment information into a determinable condition, retrieving a repair strategy or case, and generating and optimizing a repair patch. And if the patch fails, iteration is carried out until success or an upper limit is reached. And finally, identifying missed conditions, and updating the knowledge base in combination with the optimal scheme to realize dynamic iterative expansion of the repair strategy. By adopting the method, the executable performance and reusability of codes and the stability of platform ecology can be improved.

Systems and methods for locating microserver nodes in proximity to edge devices using georouting are disclosed. Microservers automatically form a global peer-to-peer network to serve edge functions and content to edge devices. Edge devices use HyperText Transfer Protocol (HTTP) to execute serverless functions or otherwise retrieve data from edge nodes and / or microservers located in proximity to the HTTP client. The cloud platform locates the nearest edge node and / or microserver. Edge devices georoute HTTP requests to the nearest edge node and / or microserver. Serverless functions are implemented in secure, isolated environments using a blockchain.

The application provides a lightweight function running method and system for a server-unaware computing scene, and the method comprises the following steps: providing a communication primitive for fast cold start of an isolated environment and high-performance intermediate data transmission; for a server-unaware function computing workflow scene, a runtime is provided as a new software stack architecture; the function and the underlying runtime relied by the function are all deployed in the same CPU privilege level and address space for cold start operation; a library operating system with a workflow granularity is used to provide underlying runtime services for the function, and a memory-safe language is used to provide memory isolation and sharing; and an on-demand loading mechanism is implemented for the library operating system. The application solves the technical problems of slow cold start of an isolated environment, poor intermediate data transmission performance, large cold start range and high cost, and poor flexibility of memory isolation and sharing.