23 results about "Kernel system" patented technology

The invention provides a tensor core system for a large language model and a hardware chip, and relates to the technical field of artificial intelligence chips, and the tensor core system comprises an activation matrix processing part which is used for caching and preprocessing activation matrix data read from the interior of a memory to obtain a target activation matrix; the weight matrix processing component is used for caching and preprocessing the weight matrix data read from the inside of the memory to obtain a target weight matrix; the tensor kernel operation component is used for performing matrix floating-point number multiply-add operation on the target activation matrix and the target weight matrix to obtain a floating-point number multiply-add operation result, and accumulating the accumulation matrix and the floating-point number multiply-add operation result based on a preset floating-point number system to obtain a target result matrix; and the accumulation matrix and result processing component is used for performing floating-point number system conversion processing on the target result matrix to obtain a to-be-written result matrix, and writing the to-be-written result matrix into the memory. The method is more beneficial to improving the computing power utilization rate of the chip.

Systems and methods for streamlining risk modeling in software development using natively sourced kernels are described. The system may receive a native kernel for the first model, wherein the native kernel comprises a native code sample and a native description of the native code sample. The system may input the native code sample into an artificial intelligence model to generate a first output. The system may filter the first output based on the native description to generate a first validation assessment for the first model. The system may generate for display, in the user interface, the first validation assessment.

Systems and methods for streamlining risk modeling in software development using natively sourced kernels are described. The system may receive a native kernel for the first model, wherein the native kernel comprises a native code sample and a native description of the native code sample. The system may input the native code sample into an artificial intelligence model to generate a first output. The system may filter the first output based on the native description to generate a first validation assessment for the first model. The system may generate for display, in the user interface, the first validation assessment.

The invention provides an implementation method of a localized operating system VOI desktop, which is implemented by customizing Linux system startup logic in combination with an OverlayFS technology and a virtual disk technology. The method comprises the steps that an operating system mirror image is manufactured, an operating system is installed in a virtual disk, a kernel mirror image is modified, and kernel mounting root partition logic is redefined; deploying a virtual desktop, managing a mirror image file on a server side, distributing the mirror image file to a terminal and creating an independent desktop file; and when the desktop is started, the kernel system is guided through the guide program, the OverlayFS is mounted in the kernel system by using the virtual disk according to a predefined rule, and the root partition is switched. According to the invention, a high-performance virtual desktop environment is realized, multi-system coexistence and rapid switching are supported, the hardware compatibility is good, the system performance loss is less than 3% through testing, and the storage space is saved by more than 60%.

The invention discloses a remote attestation method of a cloud server, electronic equipment and a storage medium, and relates to the technical field of computers and cloud computing. The method comprises the steps that a loading message from a virtualization component in a cloud server is received, a preset security architecture is deployed in the cloud server, and a secure world operation environment and a non-secure world operation environment are created on the preset security architecture; generating a remote attestation report based on the loaded message; the remote certification report is output to a remote certification verification assembly in the cloud server, the remote certification verification assembly runs in the non-secure world operation environment, and the remote certification verification assembly is used for conducting remote certification on the target trusted kernel system according to the remote certification report. The technical problem that an advanced reduced instruction set computer server lacks a scheme for supporting remote certification of a plurality of trusted execution environment operating systems in the prior art is solved.

This disclosure provides a permission management system applicable to the field of information security technology. The system includes: a resource management subsystem, which provides a first operation and maintenance interface to an enterprise for receiving and managing the enterprise's user information, organizational structure information, and resource items. The organizational structure information is used to determine the permission scope of a user's organizational structure, and the resource items include various attributes associated with users and permissions; and a kernel system, which interconnects with the resource management subsystem for providing and maintaining a permission management policy library. In response to an administrator selecting a permission management policy, the kernel system combines the user information, organizational structure information, and resource items based on the permission management policy to grant permissions to users and manage the roles of the granted users. This disclosure also provides a permission management method, device, storage medium, and program product.

Systems and methods for processing a plurality of images include obtaining input data including the plurality of images; providing the input data to a first machine learning model; providing an output of the first machine learning model to a second machine learning model and a third machine learning model; generating a first feature map corresponding to a plurality of kernels based on an output of the second machine learning model; generating a second feature map corresponding to a plurality of weights based on an output of the third machine learning model; generating a predicted kernel based on a weighted sum of the plurality of kernels; and generating output data based on the input data and the predicted kernel.

An information handling system comprising a hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio / video user query input data and generate a first encryption key for transmission to an audio / video encryption driver and a second unprivileged AI productivity-tool software process. The hardware processor to execute computer-readable program code of the audio / video encryption filter driver to encrypt the audio / video user query input data with the first encryption key for storage in an allocated encrypted storage buffer portion of the kernel system memory and the for second unprivileged AI productivity-tool software process to access the audio / video user query input data from the allocated encrypted storage buffer portion of the kernel system memory with the first encryption key to determine a capability intent action responsive to a user query input.

The application provides a watchdog detection method. The method comprises: in the process of system service process initialization, a first watchdog is started; wherein the first watchdog is used for detecting the system service process and restarting the system service process when the system service process is abnormal, and the system service process is located in an application program framework layer of an electronic device; a second watchdog starts the detection function of the first watchdog; wherein the second watchdog is located in a kernel layer of the electronic device and is also used for detecting a kernel system; and the second watchdog restarts the kernel system when the first watchdog is abnormal. In this way, since the detection function of the second watchdog on the first watchdog is started after the system service process is started, the problem that the second watchdog detects the first watchdog before the system service process is started can be avoided, and the phenomenon that the second watchdog restarts the kernel system due to the mistaken assumption that the first watchdog is abnormal before the system service process is started can be avoided.

The present invention relates to the field of data processing technology, and discloses a vehicle-mounted fusion display method, system and device, including a vehicle-mounted fusion display system, a vehicle-mounted fusion display method and a vehicle-mounted fusion display device. The vehicle-mounted fusion display system is integrated by a kernel system and an Android system through shared memory. The vehicle-mounted fusion display system includes a vehicle-mounted instrument display module, a vehicle-mounted central control panel display module and an information fusion module. The information fusion module includes a digital display unit, an image display unit, a voice display unit, a touch screen control unit, a data loading unit and an information conversion unit. Compared with traditional vehicle-mounted display methods, systems and devices, the present invention realizes the fusion function between the control kernel system of the vehicle-mounted instrument display and the control Android system of the vehicle-mounted central control panel display screen, and achieves the synchronous operation and processing of data information between the kernel system and the Android system on the same memory, and the information interaction effect of the shared memory.

The present invention provides a method and device for evaluating the compatibility of system call interfaces in application software, including: S1, analyzing the kernel system call interfaces of the operating system before and after the migration of the application software to obtain a system call difference data set; S2, parsing the system call interfaces of the application software to obtain a system call number list; S3, analyzing the system call compatibility of the application software based on the system call difference data set and the system call number list. The present invention does not require the provision of source code, does not require the running of a program, and directly performs system call compatibility analysis on the application software binary file, solving the problem of incomplete compatibility coverage caused by the lack of an evaluation method at the kernel level in the existing application software compatibility evaluation solutions in the market.

The present disclosure describes an apparatus, device, method and computer program for modifying a target application. Examples relate to apparatuses, devices, methods, and computer programs for modifying a target application. An apparatus for a computer system includes memory circuitry, machine-readable instructions, and processor circuitry to execute the machine-readable instructions to: launch a target application using a loader application; obtaining, by the loader application, information related to a kernel system call that has been made by the target application; and an instruction to modify, by the loader application, the target application based on information relating to a kernel system call that has been made by the target application, where the modified instruction is configured to trigger an operation equivalent to the kernel system call, where the operation is equivalent to the kernel system call while avoiding the context switching.

A method and system for kernel data isolation based on multiple kernel page tables is provided. Through creating multiple kernel page tables in a kernel system and binding specific applications to a corresponding page table for operation, each internal process of the application remains consistent with the corresponding page table in terms of kernel address space, and the kernel address spaces of different applications are isolated from each other due to existence of the different page tables. The system includes a page table management module and a private memory management module. The present disclosure protects private application data at the granularity of applications in the same kernel at very low costs to prevent data breach caused by read attacks on kernel address space or privilege escalation attacks, maintains privilege level division of kernel address spaces, and ensures transparency of private memories among applications and general IO capability of private memories.

The invention provides a safe starting method and upgrading method of an MCU (Microprogrammed Control Unit) and electronic equipment. A first kernel and a second kernel run in the MCU, the first kernel is used for running a hardware security module, the second kernel is used for running an application program, and the safe starting method of the MCU comprises the following steps: responding to an MCU reset signal, starting the first kernel, and performing primary verification on the application program by adopting a first verification algorithm; when the first verification is passed, a second kernel is started to execute a key task in the application program, and meanwhile, a second verification algorithm is adopted to conduct second verification on the application program; and when the secondary verification is passed, executing the target task in the application program, and judging that the MCU application program is successfully started. According to the method, the HSM kernel and the first verification algorithm are adopted to guarantee basic safety and quick start, so that the application kernel system can quickly process key tasks; and after starting, resources are utilized to complete full-quantity verification in parallel, so that the final safety is ensured while the speed is considered.

The invention relates to the technical field of computers, and discloses a resource configuration method and device for a kernel system, computer equipment and a storage medium, and the method comprises the steps: obtaining Buildroot extension resources configured by a user for the kernel system; reading a target resource type and resource description information of the Buildroot extension resource; an auxiliary construction script deployed in a Buildroot directory is started, and resource configuration strategies corresponding to different resource types are configured in the auxiliary construction script; and calling the auxiliary construction script to determine a target resource configuration strategy corresponding to the target resource type, and performing resource configuration according to the target resource configuration strategy and the resource description information. The problem that manual configuration operation is needed in the mirror image construction process in the prior art is solved.

The application provides an NPU instruction optimization system and method for OpenCL heterogeneous computing. An OpenCL compiling and runtime layer is inserted between a host end and an NPU device. Standard OpenCL kernel code is deeply analyzed, and a neural network operator that can be optimized is identified and converted into a special intermediate representation designed by the NPU. The special intermediate representation is mapped to a special hardware unit and a kernel system of the NPU device to generate an instruction stream containing NPU special instructions. The application can efficiently map high-level operators and data patterns related to neural network computing that are implied in the standard OpenCL kernel code to the special hardware unit and the memory system of the self-developed NPU through identification, conversion and fusion technologies while supporting the OpenCL standard, so that the performance level of the NPU native private software stack is approached or even reached while the programming convenience of OpenCL is maintained.

A method is disclosed and includes determining a test plan to test a kernel on a mobile device, and determining an interaction input message according to the test plan, the interaction input message comprising first data. The method also includes transmitting the interaction input message comprising the first data to the mobile device over a network-based communication channel. The kernel in the mobile device generates the interaction output message in response to receiving the interaction input message. The method also includes receiving, from the mobile device, the interaction output message comprising second data from the mobile device over the network-based communication channel, and determining if the interaction output message is consistent with the test plan.

An information handling system comprising a hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio / video user query input data and generate a first encryption key for transmission to an audio / video encryption driver and a second unprivileged AI productivity-tool software process. The hardware processor to execute computer-readable program code of the audio / video encryption filter driver to encrypt the audio / video user query input data with the first encryption key for storage in an allocated encrypted storage buffer portion of the kernel system memory and the for second unprivileged AI productivity-tool software process to access the audio / video user query input data from the allocated encrypted storage buffer portion of the kernel system memory with the first encryption key to determine a capability intent action responsive to a user query input.

The application discloses a kind of monitoring Linux full quantity directory file landing method, system, equipment and storage medium, the method includes: initialization fanotify;File is monitored based on fanotify in the file system in system;When first write event occurs, fanotify reports file modification event;The path of the file modification event is recorded to buffer area, and timeout time is recorded.Through the processing scheme of the present disclosure, in the case where kernel system is not intruded, full quantity directory high performance, high real-time monitoring effect can be achieved, and maintenance cost is low.

The invention provides an NPU instruction optimization system and optimization method for OpenCL heterogeneous computing, and the method comprises the steps: inserting an OpenCL compiling and runtime layer between a host end and NPU equipment, carrying out the deep analysis of a standard OpenCL kernel code, recognizing an optimizable neural network operator, and converting the optimized neural network operator into a special intermediate representation of NPU design; and mapping the special intermediate representation to a special hardware unit and a kernel system of the NPU equipment, and generating an instruction stream containing the NPU special instruction. On the premise of supporting the OpenCL standard, advanced operators and data modes which are implied in a standard OpenCL kernel code and are related to neural network calculation are efficiently mapped to a special hardware unit and a memory system of a self-developed NPU (Network Processing Unit) through identification, conversion and fusion technologies, so that the programming convenience of the OpenCL is kept, and the programming efficiency of the OpenCL is improved. And the performance level of the NPU native private software stack is approached or even reached.

The invention provides a compatibility evaluation method and device for a system calling interface in application software, and the method comprises the steps: S1, analyzing a kernel system calling interface of an operating system before and after the application software is migrated, and obtaining a system calling difference data set; s2, analyzing an application software system call interface to obtain a system call number list; and S3, analyzing the system calling compatibility of the application software based on the system calling difference data set and the system calling number list. According to the method, source codes do not need to be provided, a program does not need to be operated, system calling compatibility analysis is directly carried out on the binary file of the application software, and the problem that compatibility coverage is incomplete due to the fact that a kernel layer lacks an evaluation method in an existing application software compatibility evaluation scheme in the market is solved.

The present application provides a watchdog detection method. The method includes a software watchdog periodically detecting the CPU operating status of an electronic device; wherein the software watchdog is located in the kernel layer of the electronic device; if the CPU operating status meets the preset kernel restart condition, the software watchdog restarts the kernel system and stops feeding the hardware watchdog; if the kernel system restarts successfully, the software watchdog resumes feeding the hardware watchdog; if the hardware watchdog does not receive the software watchdog's feeding operation within the detection period, the electronic device is restarted. In this way, a detection mechanism is set between the hardware layer and the kernel layer of the electronic device, realizing hierarchical recovery of the electronic device.

Systems and techniques that facilitate qubit differentiation with a numerically controlled oscillator (NCO) kernel are provided. One or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory that can execute the computer executable components stored in memory. The computer executable components can comprise an input component that receives a setpoint having a phase or a frequency for a quantum signal as input. The computer executable components can further comprise an execution component that generates a kernel based on the setpoint for the quantum signal using a logic block in an integrated circuit, wherein the logic block comprises an NCO that generates the kernel using a reading of a waveform lookup table.