13 results about "Kernel system" patented technology

The invention discloses a remote attestation method of a cloud server, electronic equipment and a storage medium, and relates to the technical field of computers and cloud computing. The method comprises the steps that a loading message from a virtualization component in a cloud server is received, a preset security architecture is deployed in the cloud server, and a secure world operation environment and a non-secure world operation environment are created on the preset security architecture; generating a remote attestation report based on the loaded message; the remote certification report is output to a remote certification verification assembly in the cloud server, the remote certification verification assembly runs in the non-secure world operation environment, and the remote certification verification assembly is used for conducting remote certification on the target trusted kernel system according to the remote certification report. The technical problem that an advanced reduced instruction set computer server lacks a scheme for supporting remote certification of a plurality of trusted execution environment operating systems in the prior art is solved.

This disclosure provides a permission management system applicable to the field of information security technology. The system includes: a resource management subsystem, which provides a first operation and maintenance interface to an enterprise for receiving and managing the enterprise's user information, organizational structure information, and resource items. The organizational structure information is used to determine the permission scope of a user's organizational structure, and the resource items include various attributes associated with users and permissions; and a kernel system, which interconnects with the resource management subsystem for providing and maintaining a permission management policy library. In response to an administrator selecting a permission management policy, the kernel system combines the user information, organizational structure information, and resource items based on the permission management policy to grant permissions to users and manage the roles of the granted users. This disclosure also provides a permission management method, device, storage medium, and program product.

Systems and methods for processing a plurality of images include obtaining input data including the plurality of images; providing the input data to a first machine learning model; providing an output of the first machine learning model to a second machine learning model and a third machine learning model; generating a first feature map corresponding to a plurality of kernels based on an output of the second machine learning model; generating a second feature map corresponding to a plurality of weights based on an output of the third machine learning model; generating a predicted kernel based on a weighted sum of the plurality of kernels; and generating output data based on the input data and the predicted kernel.

An information handling system comprising a hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio / video user query input data and generate a first encryption key for transmission to an audio / video encryption driver and a second unprivileged AI productivity-tool software process. The hardware processor to execute computer-readable program code of the audio / video encryption filter driver to encrypt the audio / video user query input data with the first encryption key for storage in an allocated encrypted storage buffer portion of the kernel system memory and the for second unprivileged AI productivity-tool software process to access the audio / video user query input data from the allocated encrypted storage buffer portion of the kernel system memory with the first encryption key to determine a capability intent action responsive to a user query input.

The application provides a watchdog detection method. The method comprises: in the process of system service process initialization, a first watchdog is started; wherein the first watchdog is used for detecting the system service process and restarting the system service process when the system service process is abnormal, and the system service process is located in an application program framework layer of an electronic device; a second watchdog starts the detection function of the first watchdog; wherein the second watchdog is located in a kernel layer of the electronic device and is also used for detecting a kernel system; and the second watchdog restarts the kernel system when the first watchdog is abnormal. In this way, since the detection function of the second watchdog on the first watchdog is started after the system service process is started, the problem that the second watchdog detects the first watchdog before the system service process is started can be avoided, and the phenomenon that the second watchdog restarts the kernel system due to the mistaken assumption that the first watchdog is abnormal before the system service process is started can be avoided.

A method and system for kernel data isolation based on multiple kernel page tables is provided. Through creating multiple kernel page tables in a kernel system and binding specific applications to a corresponding page table for operation, each internal process of the application remains consistent with the corresponding page table in terms of kernel address space, and the kernel address spaces of different applications are isolated from each other due to existence of the different page tables. The system includes a page table management module and a private memory management module. The present disclosure protects private application data at the granularity of applications in the same kernel at very low costs to prevent data breach caused by read attacks on kernel address space or privilege escalation attacks, maintains privilege level division of kernel address spaces, and ensures transparency of private memories among applications and general IO capability of private memories.

The invention provides a safe starting method and upgrading method of an MCU (Microprogrammed Control Unit) and electronic equipment. A first kernel and a second kernel run in the MCU, the first kernel is used for running a hardware security module, the second kernel is used for running an application program, and the safe starting method of the MCU comprises the following steps: responding to an MCU reset signal, starting the first kernel, and performing primary verification on the application program by adopting a first verification algorithm; when the first verification is passed, a second kernel is started to execute a key task in the application program, and meanwhile, a second verification algorithm is adopted to conduct second verification on the application program; and when the secondary verification is passed, executing the target task in the application program, and judging that the MCU application program is successfully started. According to the method, the HSM kernel and the first verification algorithm are adopted to guarantee basic safety and quick start, so that the application kernel system can quickly process key tasks; and after starting, resources are utilized to complete full-quantity verification in parallel, so that the final safety is ensured while the speed is considered.

The application provides an NPU instruction optimization system and method for OpenCL heterogeneous computing. An OpenCL compiling and runtime layer is inserted between a host end and an NPU device. Standard OpenCL kernel code is deeply analyzed, and a neural network operator that can be optimized is identified and converted into a special intermediate representation designed by the NPU. The special intermediate representation is mapped to a special hardware unit and a kernel system of the NPU device to generate an instruction stream containing NPU special instructions. The application can efficiently map high-level operators and data patterns related to neural network computing that are implied in the standard OpenCL kernel code to the special hardware unit and the memory system of the self-developed NPU through identification, conversion and fusion technologies while supporting the OpenCL standard, so that the performance level of the NPU native private software stack is approached or even reached while the programming convenience of OpenCL is maintained.

A method is disclosed and includes determining a test plan to test a kernel on a mobile device, and determining an interaction input message according to the test plan, the interaction input message comprising first data. The method also includes transmitting the interaction input message comprising the first data to the mobile device over a network-based communication channel. The kernel in the mobile device generates the interaction output message in response to receiving the interaction input message. The method also includes receiving, from the mobile device, the interaction output message comprising second data from the mobile device over the network-based communication channel, and determining if the interaction output message is consistent with the test plan.

An information handling system comprising a hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio / video user query input data and generate a first encryption key for transmission to an audio / video encryption driver and a second unprivileged AI productivity-tool software process. The hardware processor to execute computer-readable program code of the audio / video encryption filter driver to encrypt the audio / video user query input data with the first encryption key for storage in an allocated encrypted storage buffer portion of the kernel system memory and the for second unprivileged AI productivity-tool software process to access the audio / video user query input data from the allocated encrypted storage buffer portion of the kernel system memory with the first encryption key to determine a capability intent action responsive to a user query input.

The application discloses a kind of monitoring Linux full quantity directory file landing method, system, equipment and storage medium, the method includes: initialization fanotify;File is monitored based on fanotify in the file system in system;When first write event occurs, fanotify reports file modification event;The path of the file modification event is recorded to buffer area, and timeout time is recorded.Through the processing scheme of the present disclosure, in the case where kernel system is not intruded, full quantity directory high performance, high real-time monitoring effect can be achieved, and maintenance cost is low.

The invention provides an NPU instruction optimization system and optimization method for OpenCL heterogeneous computing, and the method comprises the steps: inserting an OpenCL compiling and runtime layer between a host end and NPU equipment, carrying out the deep analysis of a standard OpenCL kernel code, recognizing an optimizable neural network operator, and converting the optimized neural network operator into a special intermediate representation of NPU design; and mapping the special intermediate representation to a special hardware unit and a kernel system of the NPU equipment, and generating an instruction stream containing the NPU special instruction. On the premise of supporting the OpenCL standard, advanced operators and data modes which are implied in a standard OpenCL kernel code and are related to neural network calculation are efficiently mapped to a special hardware unit and a memory system of a self-developed NPU (Network Processing Unit) through identification, conversion and fusion technologies, so that the programming convenience of the OpenCL is kept, and the programming efficiency of the OpenCL is improved. And the performance level of the NPU native private software stack is approached or even reached.

Systems and techniques that facilitate qubit differentiation with a numerically controlled oscillator (NCO) kernel are provided. One or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory that can execute the computer executable components stored in memory. The computer executable components can comprise an input component that receives a setpoint having a phase or a frequency for a quantum signal as input. The computer executable components can further comprise an execution component that generates a kernel based on the setpoint for the quantum signal using a logic block in an integrated circuit, wherein the logic block comprises an NCO that generates the kernel using a reading of a waveform lookup table.