Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

228 results about "Linux kernel" patented technology

The Linux kernel is a free and open-source, monolithic, Unix-like operating system kernel. The Linux family of operating systems is based on this kernel and deployed on both traditional computer systems such as personal computers and servers, usually in the form of Linux distributions, and on various embedded devices such as routers, wireless access points, PBXes, set-top boxes, FTA receivers, smart TVs, PVRs, and NAS appliances. While the adoption of the Linux kernel in desktop computer operating system is low, Linux-based operating systems dominate nearly every other segment of computing, from mobile devices to mainframes. Since November 2017, all of the world's 500 most powerful supercomputers run Linux. The Android operating system for tablet computers, smartphones, and smartwatches also uses the Linux kernel.

Method for compatible operation of Android camera HAL in container based on memory access virtualization

The invention discloses a compatible operation method for an Android camera HAL in a container based on memory access virtualization, and the method comprises the steps: taking a DMA-Buf memory heap of a Linux kernel host system as a target memory heap, taking an ION memory heap of an Android container system as a source memory heap, building a process exclusive memory management context, an FD cache table and a synchronous fence pool, and carrying out the execution of the process exclusive memory management context, the FD cache table and the synchronous fence pool; kernel registration and node binding of virtual ION equipment, pre-allocation of a first memory pool and access hook registration of kernel layer equipment are completed, and when an ION file descriptor is obtained in an HAL process, legality of a container process is verified, and context binding is initialized to the file descriptor; intercepting a memory allocation request of the HAL process, analyzing and adapting parameters, and preferentially multiplexing first memory pool resources to obtain an ION handle; when a data sharing request is processed, matching an FD cache or generating a new FD through an ION handle; when the HAL process releases the memory, resources are recycled according to a memory source, and when the HAL process exits, the context is cached or destroyed, so that cross-system memory operation compatibility is realized.
Owner:北京麟卓信息科技有限公司

Kernel optimization method, system and device based on eBPF and medium

The invention discloses an eBPF-based kernel optimization method, system, equipment and medium, belongs to the technical field of Linux kernel network optimization, and aims to solve the technical problem of how to improve the transmission performance for a specific data stream and specify the data stream to carry out a special routing and transmission process so as to provide services for a special network adapter and improve the transmission performance of the specific data stream. According to the technical scheme, the method comprises the steps that data packet interception is carried out on a plurality of kernel eBPF loading points and program interception points selected by a user through an eBPF kernel hook program, routing query is carried out with a routing kernel module, and selection of an operation function and routing parameters is completed; the routing kernel module completes a routing decision based on various complex routing requirements, configuration conditions, data packet conditions and environment conditions, and returns a query result to the eBPF kernel hook program, and the query result is executed by the eBPF kernel hook program. The system comprises an eBPF user mode management program module, a user mode control tool, an eBPF kernel hook program module and a routing kernel module.
Owner:INSPUR TIANYUAN COMM INFORMATION SYST CO LTD

Linux real-time enhancement method based on domestic real-time kernel

According to the Linux real-time enhancement method based on the domestic real-time kernel, by introducing a kernel adaptation layer and designing a packaging mechanism of the kernel adaptation layer, it is ensured that code space between the real-time kernel and the Linux kernel is effectively isolated, the code coupling degree is reduced, the kernel and the Linux kernel can harmoniously coexist in the same environment and do not interfere with each other, and the real-time performance of the Linux kernel is improved. The real-time task can be called by a non-real-time system and inherits the existing functions and services of the Linux, so that the ecological advantages of the Linux are brought into full play, effective management of hardware and memory resources is ensured through flexible and diversified resource allocation and sharing strategies, and the problems of resource contention and performance reduction are reduced.
Owner:EAST CHINA INST OF COMPUTING TECH

Dual-storage system starting method and device

The invention provides a dual-storage system starting method and device. An architecture in which a master control chip SOC works cooperatively with an external memory DDR, a nonvolatile memory SPI NOR and an SD card is adopted. After the SOC is powered on, a BootROM guide code is executed, a system is initialized, ID Blocks containing a DDR initialization program and an SPL secondary loading program are sequentially obtained and verified from multiple storage media, the DDR initialization program is loaded, DDR is initialized, and the SPL secondary loading program is loaded to the DDR to run. The method comprises the following steps of: firstly, loading an SD (Secure Digital) card, then loading U-Boot firmware, completing initialization of residual hardware and security mirror verification, then detecting and verifying a kernel mirror format and Header information in the SD card, then loading a Linux kernel, an equipment tree and a ramdisk, mounting rootfs to an RAM (Random Access Memory) space, and mounting the SD card as a user data storage space. According to the method, high reliability of system guiding is ensured through the SPI NOR, large-capacity storage and flexible upgrading are achieved through the SD card, and the comprehensive performance of the embedded system in the aspects of reliability, storage expansibility and cost effectiveness is remarkably improved.
Owner:GUANGDONG TELEPOWER TELECOM TECH

SD card-based power distribution terminal upgrading method, system, equipment and medium

The invention discloses a power distribution terminal upgrading method, system and device based on an SD card and a medium. The method specifically comprises the steps of generating an incremental package of a Linux kernel and / or a root file system, calculating a hash value file of the incremental package, and generating a block chain certificate with a timestamp; encrypting and packaging the incremental package, the hash value file and the block chain certificate into a container mirror image, performing digital signature to form an upgrade package, and writing the upgrade package into an SD card; after it is detected that the SD card is inserted, mounting a boot partition, analyzing metadata of an upgrade package, and setting an upgrade flag bit and an upgrade operation type of Boot; and performing digital signature verification, hash value file verification and block chain certificate verification on the upgrade package in the SD card, if the verification is passed, backing up user parameters to the encrypted storage area, and restarting to enter the Recovery OS to complete replacement upgrade of the Linux kernel and / or the root file system. According to the method, safe, efficient and flexible upgrading of the operating system of the power distribution automation terminal is achieved, the rollback function is achieved, and the upgrading risk and cost are effectively reduced.
Owner:ZHUHAI COPOWER ELECTRIC

Kernel probe generation method and device, computer equipment and storage medium

The invention discloses a kernel probe generation method and device, computer equipment and a storage medium, and relates to the technical field of operating system kernel monitoring, and the kernel probe generation method comprises the steps of obtaining a target metadata file corresponding to a current operating system kernel in response to a kernel probe generation request; determining a target declarative strategy file; and determining a target program logic file corresponding to the target declarative strategy file, and generating a probe code according to the target program logic file and the target metadata file to obtain a kernel probe program. The probe program source code adaptive to the current kernel version can be dynamically generated in combination with the target metadata file and the target declarative strategy file, kernel probe development logic and underlying kernel knowledge can be decoupled through the source code generation function, and developers do not need to deeply understand kernel internal data structures and version differences; the development threshold is lower, a specific operating system or probe type is supported, and a universal Linux kernel and multiple probe types are also supported.
Owner:BEIJING LINX SOFTWARE CORP

DPU (Data Processing Unit) equipment initialization method

The invention provides a DPU equipment initialization method, and relates to the field of computer equipment. According to the method, a BAR space mapping process, a PCI device initialization process, a PF data channel initialization process and a VP data channel initialization process are executed respectively; the method comprises the following steps: firstly, carrying out IO remap mapping operation on a BAR register, and mapping a physical address of the BAR register to a virtual address space of a Linux kernel to obtain a BAR space; then PCI device initialization is carried out through the BAR space; secondly, initializing a PCI driver and a kernel timer, and on the basis, maintaining a work queue task and periodically executing port state polling; and finally, distributing an interrupt vector to the VP data channel, and managing the on-off of the VP data channel through the interrupt vector. The invention provides a complete and systematized initialization processing scheme of the DPU high-speed daughter card based on the domestic chip, which is beneficial to improving the development efficiency of domestic equipment.
Owner:CHENGDU KAIDI FEIYAN TECH CO LTD

Kernel indirect control flow transfer dynamic verification method based on eBPF

According to the kernel indirect control flow transfer dynamic verification method based on the eBPF, an eBPF attachment point of an indirect call instruction is positioned, a verification program is dynamically attached, a source address and a target address are captured to generate a compound key, and the legality of a control flow is verified in a pre-constructed BPF hash table; and meanwhile, three indirect addressing modes of a differential strategy adaptive register, an immediate operand and a memory are adopted. Based on an eBPF technology, an EV program can be dynamically loaded into a running kernel as required during running, and the characteristic of dynamic expansion of a modern kernel can be perfectly adapted; all the capabilities are constructed on a universal software mechanism of a Linux kernel and do not depend on any hardware extension; while powerful security defense is provided, extremely low overhead during operation is realized. Benefited from an innovative hybrid verification strategy and an efficient CFG storage scheme, control flow hijacking attacks in the real world can be effectively defended with extremely low performance loss.
Owner:CHANGSHU INSTITUTE OF TECHNOLOGY

File hiding method and system based on ext4 file system

The invention discloses a file hiding method and system based on an ext4 file system, and the method comprises the steps: obtaining a target file and metadata information of a directory where the target file is located according to a target file path needing to be hidden, and distributing a new mapping item in an internal mapping table of the ext4 file system for recording; creating a new hard link in a directory where the target file is located, and associating the new hard link with an inode node for storing metadata information of the target file; reopening the ext4 file system, and deleting the directory entry of the target file, so that the target file cannot be found in the ext4 file system; and re-mounting the ext4 file system, refreshing the Linux kernel cache, and recording the new hard link, the original name of the target file, the inode node number of the target file and the file type into a new mapping item. According to the invention, data security can be ensured, and efficient hidden storage of files is realized.
Owner:KYLIN CORP

Method for detecting linux kernel memory leak

The invention discloses a method for detecting linux kernel memory leak. The method comprises the following steps: acquiring a use index of a system kernel memory through a monitoring program; determining whether memory leak occurs or not according to the use index; and in response to determining that the memory leak occurs, starting an eBPF detection program to monitor memory allocation and release activities in the kernel, and analyzing the memory allocation and release activities to generate a memory leak report to locate the memory leak. According to the method, the system kernel memory is monitored by depending on the system information, the use index of the system kernel memory is acquired through the monitoring program, and whether memory leakage occurs or not is judged according to the use index, so that the use condition of the kernel memory can be monitored in real time with very small system overhead, and the system reliability is improved. And detecting whether the kernel memory leak occurs or not.
Owner:ZHONGLING ZHIXING (CHENGDU) TECH CO LTD

Method for ensuring hard real-time in Linux user mode based on multi-core CPU

The invention discloses a method for ensuring hard real-time in a Linux user mode based on a multi-core CPU, and belongs to the technical field of embedded systems. According to the method, a Linux kernel is configured to be in a completely preemptable mode, user threads with the number equal to that of CPU kernels are created and bound to different kernels, a real-time scheduling kernel is selected, the thread scheduling strategy of the real-time scheduling kernel is set to be SCHEDFIFO, the priority of the real-time scheduling kernel is equal to that of the lowest-priority soft interrupt, the thread stack space is locked, the real-time kernel is isolated through kernel parameters isolcplus and nohzfull, and the cost of tick is avoided. Finally, the real-time core is exclusively used for executing the real-time task. According to the scheme, the problem that the real-time performance of the Linux user state task is poor due to the fact that a kernel cannot be preempted, scheduling delay, memory page changing, system interference and the like is effectively solved, and extremely low delay and high certainty of user state task response are ensured through multi-level collaborative optimization.
Owner:李泽龙

Multi-core processor AMP architecture real-time operating system starting method

The invention relates to the technical field of embedded operating systems, in particular to a multi-core processor AMP architecture real-time operating system starting method, which comprises the following steps: reserving a real-time operating system memory in U-Boot and Linux equipment trees by defining nodes, and setting specific attributes to prevent resource conflicts; a real-time operating system core is forbidden in a Linux device tree, and a node is defined to reserve an inter-core communication shared memory. After the related mirror image is solidified by utilizing a burning tool, the U-Boot firstly loads the mirror image of the real-time operating system to a reserved address, starts a corresponding core by virtue of a CPUON function of a power management interface specification, then loads a Linux kernel and a file system to start the Linux, and the dual systems communicate through a shared memory segment; the starting speed of a real-time operating system is increased, the high-real-time scene requirement is met, and the starting delay risk is reduced.
Owner:GUANGZHOU JINQILI INFORMATION TECH CO LTD

Kernel-level resource creation management and control method and system based on eBPF

The invention discloses a kernel-level resource creation management and control method and system based on an eBPF. The method comprises the steps that when a system kernel receives a creation request of a virtual machine and / or a container, an eBPF verification module reads an authorization strategy corresponding to the creation request from an eBPF Map; judging whether the creation request of the virtual machine and / or the container conforms to the authorization strategy or not; if the authorization strategy is met, the execution of the virtual machine and / or container creation request is allowed, and the creation of the virtual machine and / or container is completed; if the authorization policy is not met, stopping the execution of the virtual machine and / or container creation request; and the eBPF verification module runs in a system kernel and executes verification operation of the authorization strategy in real time. According to the method, the eBPF strategy engine is deployed in the Linux kernel, the creation requests of the container and the virtual machine are intercepted and verified in real time, and dynamic blocking and automatic destroying of unauthorized resources are achieved.
Owner:GUANGZHOU BINGO SOFTWARE

System call hijacking method and device compatible with multi-version Linux kernel

The invention discloses a system call hijacking method and device compatible with multiple versions of Linux kernels, a first hijacking channel and a second hijacking channel are deployed in parallel in a target version of Linux kernel in advance, the first hijacking channel is adapted to a Linux kernel version executing system call through a system call table, and the second hijacking channel is adapted to a second hijacking channel which is adapted to a Linux kernel version executing system call through a system call table. The second hijacking channel is adapted to a Linux kernel version which executes system calling through a system calling distribution function, and the method comprises the following steps: in response to a system calling request, hijacking the system calling request to a pre-defined target address through a target hijacking channel which actually takes effect in a Linux kernel of a target version, determining a corresponding target function based on the target address; sorting system call parameters carried in the system call request into a data format required by a preset hook entry function through a target function, and sending the data subjected to format sorting to the hook entry function; and determining a security processing strategy for the system call request through a hook entry function on the basis of the formatted data.
Owner:QI AN XIN TECHNOLOGY GROUP INC

High-frequency transaction scene-oriented monitoring method and system based on eBPF

The invention provides a monitoring method and system for a high-frequency transaction scene based on an eBPF. The monitoring method comprises the steps that a pre-compiled eBPF byte code program is loaded into a Linux kernel; an eBPF probe is deployed at an event trigger point of each layer of the network protocol stack; establishing a data storage and processing mechanism in a kernel space by using an eBPF Map, acquiring real-time data through a probe, and performing preliminary analysis; further processing is carried out based on the analysis result, and if abnormity is detected, an alarm is given and information is recorded. The technical problem that microsecond-level continuous monitoring and accurate acquisition of abnormal events cannot be realized in high-frequency transactions is solved.
Owner:ECCOM NETWORK SYST CO LTD

Kernel-level heterogeneous collaborative AI reasoning method, device and equipment and storage medium

The invention discloses a kernel-level heterogeneous collaborative AI reasoning method and device, equipment and a storage medium, and relates to the field of AI reasoning acceleration. When the KDS receives a reasoning request submitted by a user space, generating a cross-device plan list according to a global system resource state and issuing the cross-device plan list to the HCEE; the HCEE drives the corresponding target execution equipment according to the task execution sequence, reads the data information from the UCMP, or restores intermediate / result data reasoned and output by the target execution equipment; after reasoning of the plan list is completed, the kernel space triggers an event notification mechanism, and a user process of the user space is awakened; and the user process directly reads the reasoning result from the UCMP. According to the scheme, deep collaboration of task scheduling, memory management and equipment execution is realized on a Linux kernel level, the problems of high overhead, resource islands, memory redundant copy, extensive scheduling granularity and the like of a user mode reasoning framework system are solved, and end-to-end low-delay, high-throughput and high-energy-efficiency AI reasoning acceleration is realized.
Owner:STORAGEX TECH INC +1

Linux operating system drive fuzzy test system based on kernel device model

The invention provides an improved scheme of a fuzzy testing system of a Linux operating system. According to the scheme, fuzzy testing is guided by integrating device attributes, driving attributes and topological relations among devices. Specifically, a new syzlang description is generated by deeply analyzing a Linux kernel source code, so that a test case can introduce modification operation of equipment and drive attributes. Meanwhile, according to the scheme, the depth and the breadth of the fuzzy test are improved based on the corresponding relation between the equipment attribute file and the equipment file, so that the behavior of the kernel driver is more effectively explored. In addition, according to the scheme, concurrent testing is guided through the topological relation between the devices, testing cases related to device attributes and drive attributes are increased, the testing efficiency is further improved, the coverage rate of fuzzy testing is increased, and finally the testing process can reveal vulnerabilities caused by memory errors of a kernel of the Linux operating system in different states.
Owner:INST OF COMPUTING TECH CHINESE ACAD OF SCI

File access control method and device for Linux kernel based on black and white lists

The invention provides a Linux kernel file access management and control method and device based on black and white lists, and the method comprises the steps: automatically recognizing a sensitive file, and adding a grading mark for the sensitive file according to a management and control strategy mode; the Linux kernel intercepts and checks whether a program accessing the sensitive file allocates a static permission mark or not; judging whether access is allowed or not according to the static permission mark of the program and the hierarchical mark of the sensitive file; extracting program information according to the management and control strategy mode, and matching black and white list features; judging whether access is allowed or not according to a matching result and a grading mark of the sensitive file; and switching a management and control strategy mode according to requirements in system operation, and modifying the grading marks of the sensitive files. According to the method, a blacklist and whitelist mechanism is realized in a Linux kernel, and operations such as access, modification and deletion of a program to a sensitive file are monitored and controlled in real time in combination with a configuration strategy, so that the security of a system is effectively improved, and risks caused by malicious programs or improper operations are prevented.
Owner:KYLIN CORP

Distributed training method and device for communication acceleration, equipment and storage medium

The invention discloses a distributed training method and device for communication acceleration, equipment and a storage medium, and relates to the technical field of distributed training, the method comprises the following steps: dividing gradient data of a current node into a plurality of gradient blocks, and storing each gradient block and corresponding metadata in a target cache region; receiving a gradient data packet sent by an upstream node; performing aggregation operation or overwriting operation on the gradient data packet and a corresponding gradient block in the target cache region according to the operation type of the gradient data packet, and writing an operation result back to a load of the gradient data packet; and modifying the destination IP address of the gradient data packet into the downstream node according to the metadata in the gradient data packet, and redirecting the gradient data packet to the downstream node. According to the method, the distributed training scheme can be realized through the eBPF program mounted on the Linux kernel, acceleration of gradient aggregation can be realized without depending on additional network equipment, the communication efficiency of distributed training can be improved, and the communication cost can be reduced.
Owner:SUN YAT SEN UNIV

Multi-container stacking method based on gateway

The invention relates to a container design technology of embedded gateway equipment, discloses a gateway-based multi-container stacking method, and solves the problems of high repeated space occupation and long container creation time when multiple containers are created by adopting a traditional LXC technology in gateway equipment. According to the scheme, the method comprises the steps that S1, a base container file system mirror image is manufactured, specifically, a minimum LXC container suitable for gateway equipment is created, a rootfs catalogue of the container is extracted and packaged, and a squashfs read-only file system format is adopted to construct the base container mirror image; s2, integration and mounting of a base container file system: splitting a framework partition from an existing partition of gateway equipment firmware, and writing a base container mirror image into a specified offset address of the partition; after the gateway system is started, mounting the framework partition to a preset directory, so that the rootfs directory of the base container can be accessed; and S3, creating an application container based on a stacking technology: starting an OverlayFS function of a Linux kernel of the gateway, rewriting container creation logic of the LXC, and configuring a hierarchical storage path of the OverlayFS when the application container is created.
Owner:CHENGDU CHANGHONG NETWORK TECH CO LTD

Red and black isolated IPSEC message processing method

The invention discloses a red and black isolated IPSEC message processing method, which relates to the technical field of network communication, and comprises the following steps: constructing a red area and a black area, and arranging an isolation unit between the red area and the black area; based on a netfilter mechanism of a LINUX kernel, registering a plurality of hook points in a message processing flow to realize message passing; and sending and receiving the message through the constructed message processing flow. The technical problem that logic isolation between the red area and the black area is not thorough in the prior art is solved, and the technical effect of improving the safety and reliability of data transmission between the red area and the black area is achieved by ensuring strict logic isolation between the red area and the black area.
Owner:联想长风科技(北京)有限公司

Deep reinforcement learning-based task difference-oriented congestion control scheduling method and system

The invention discloses a task difference-oriented congestion control scheduling method and system based on deep reinforcement learning. The method comprises the following steps: carrying out network topology configuration; generating an application layer task flow; performing network protocol stack operation configuration; a customized congestion control module is realized; carrying out data acquisition; performing reward construction; reinforcement learning training is carried out; an action space is designed according to the scheduling strategy difference of different task flows, and the congestion window is adjusted and mapped into an action set according to the focus of attention of each task on the performance index, so that the intelligent agent can output the corresponding scheduling strategy according to the task flow difference, and the task difference-oriented adaptive congestion control is realized. The method has high configurability and real mappability, and the designed modules can truly correspond to related network functions in a Linux kernel. A data structure and processing logic collected in the system are also realized based on a real operating system kernel, so that the method has relatively strong practical feasibility.
Owner:ZHEJIANG UNIV

Desktop environment-oriented interactive management and control method for Linux sandbox lightweight process auditing

The invention relates to the technical field of computer security, in particular to a desktop environment-oriented interactive management and control method for Linux sandbox lightweight process auditing. Comprising the following steps: constructing a dynamic hierarchical sandbox environment based on a namespace and a control group of a Linux kernel, and carrying out bidirectional binding on a specified directory of a host machine and a virtual directory in a sandbox through a preset environment variable mapping rule to realize isolation and dynamic adaptation of a process running environment; loading an intelligent file filter driver with context sensing capability, and performing multi-dimensional monitoring on file operation behaviors of processes in the sandbox in combination with a dynamic probe technology of a kernel mode; constructing a real-time auditing model based on the behavior feature vector, performing security level evaluation on the process operation behavior through the model, and triggering a corresponding management and control strategy according to an evaluation result; according to the method and the device, accurate auditing and dynamic management and control of process behaviors can be realized, so that the safety and the flexibility of the sandbox are improved.
Owner:ZHEJIANG ELECTRONIC INFORMATION PROD INSPECTION & RES INST (ZHEJIANG INFORMATIZATION & INDUSTRIALIZATION INTEGRATION PROMOTION CENT)

EtherCAT communication system and method based on dual-core architecture and robot control system

The invention relates to the technical field of communication, discloses an EtherCAT communication system and method based on a dual-kernel architecture and a robot control system, and aims to solve the problems of dispersed task scheduling and poor real-time performance of an existing scheme, and the scheme mainly comprises an NRT-APP, an RT-APP, a Linux kernel, a Xenomai kernel, an EtherCAT-APP-Manage module, an EtherCAT-Master module and an EtherCAT network card driving module. The NRT-APP runs in a Linux kernel and is used for receiving a non-real-time task, and the RT-APP runs in a Xenomai kernel and is used for receiving a real-time task; the EtherCAT-APP-Manage module runs in a Xenomai kernel and is used for receiving a non-real-time task and a real-time task through an NRT interface and an RT interface respectively, managing and configuring slave station equipment according to the non-real-time task, creating an RT-Task thread with the highest priority according to the real-time task and performing data interaction of the real-time task with the slave station equipment; the EtherCAT-Master module runs in a Xenomai kernel, the EtherCAT network card driving module runs in the Xenomai kernel and is isolated from a Linux kernel, and the EtherCAT-Master module is used for calling the EtherCAT network card driving module according to an RT-Task thread and carrying out real-time task data interaction with slave station equipment.
Owner:PANOVASIC TECHNOLOGY CO LTD

High-concurrency request processing method and device for reducing Linux kernel resource loss

The invention relates to a high-concurrency request processing method for reducing Linux kernel resource loss. The high-concurrency request processing method comprises the following steps: receiving a user request and extracting a routing key; the requests are distributed to one fragment in the fixed N fragments through a fragment event executor, each fragment is bound with a single thread and a bounded queue, and the same routing key requests are executed in the same fragment in a strongly sequenced mode according to the enqueue sequence; calling a coprogram state machine to push a business process in the fragment execution thread, and returning a state result of migrating to a next state, keeping a current state or terminating the process through a state processing function; dynamically triggering self-adaptive back pressure based on queue depth or waiting time delay, and adjusting a request submission strategy according to a queue filling rate and exponentially weighted moving average waiting time delay; and submitting the long blocking task to an asynchronous task subsystem, and performing isolated execution through an independent bounded queue and a small concurrent thread pool. The same-key sequence is guaranteed through fragmentation single-thread execution, and thread switching and lock contention are remarkably reduced.
Owner:BEIJING MICO WORLD TECH CO LTD

Method for preventing network behaviors based on ebpf and kernel kprobe / ftrace technology hook kernel function

The invention discloses a method for preventing network behaviors based on an ebpf and kernel kprobe / ftrace technology hook kernel function. The method comprises the following steps: compiling an ebpf program or a ko module; the method comprises the following steps: loading an ebpf program or a ko module into a kernel of a linux system, and hooking a linux kernel function; configuring a system interpreter library, a blocked application program library, a blocked domain name library and a blocked IP library in a kernel of the linux system; when an application program or software carries out a network behavior on the linux system, a linux kernel function of the hook point carries out interception, whether a program, a queried domain name, a destination IP address and a source IP address corresponding to the carried network behavior are in corresponding blocking libraries or not is judged, if yes, the carried network behavior is blocked; and if not, allowing the network behavior to be performed. According to the method, an ebpf program of a hook linux kernel function is written in an application layer of the linux system, or a ko module of the hook linux kernel function is written by utilizing a kernel kprobe / ftrace technology, so that the kernel function of the hook linux system is realized, and network behaviors are prevented in a kernel of the linux system.
Owner:HEFEI WEISHI INNOVATION INFORMATION TECH CO LTD

Heterogeneous task lock scheduling system and control method thereof

The invention provides a heterogeneous task lock scheduling system and a control method thereof.The heterogeneous task lock scheduling system comprises a task lock scheduling module, the task lock scheduling module calculates a lock weight actual value corresponding to a current task, compares the lock weight actual value with a lock weight threshold value, and sends the lock weight actual value to the current task; according to the task type and the comparison result, a task lock type matched with the current task is allocated to the current task; the core domain module comprises an RTOS core domain and a Linux core domain which communicate with each other, and can dynamically adjust a core domain type bound with a current task according to a processing stage; an emergency response channel through which an emergency stop signal can be sent into the RTOS core domain; the real lock weight value corresponding to the current task is calculated through the task lock scheduling module, the real lock weight value is compared with the lock weight threshold value, and therefore the task lock type matched with the current task is allocated to the current task according to the task type and the comparison result, and the problem of real-time performance instability caused by task lock competition of the CNC system under the AMP architecture is solved.
Owner:GUANGZHOU YIHUI INFORMATION TECH CO LTD

A multifunction controller based on SPI bus

The application relates to a multifunctional controller based on an SPI bus, which comprises a core control module for packaging an SPI communication protocol frame and a register read-write instruction based on a Linux kernel subsystem; a device class registration module for registering a special device class to manage corresponding special functions through the device class registration module; a first docking module for docking standard functions with the Linux kernel subsystem to drive the standard functions based on an SPI interface and the register read-write instruction; and a second docking module for abstracting non-standard functions into virtual SPI devices and docking the virtual SPI devices with an application layer. Through an innovative modular architecture and a unified management mechanism, the application effectively solves technical problems such as complex development of a multifunctional controller driver, lack of out-of-band management, difficulty in application layer development, and chaotic driver management, and provides an efficient, flexible and easily-extended solution for the development and management of multifunctional SPI peripherals.
Owner:HUNAN BOJIANG INFORMATION TECHNOLOGY CO LTD

Cryptographic module based on Linux kernel PCIe EP framework

The invention discloses a cryptographic module based on a Linux kernel PCIe EP framework, and relates to the technical field of safety communication, the cryptographic module is based on a PCIe IP module in a DM mode in an SOC chip, a cryptographic algorithm engine and other modules, in the mode, SOC PCIe can be set to be in an RC mode or an EP mode, and through designing the Linux kernel-based PCIe EP framework, a DMA controller drive, a cryptographic algorithm engine drive, a service daemon process and a host drive, the safety of the system is improved. The basic functions of password module authority management, key management, password operation and the like are completed, and the extended functions of password module state monitoring, accurate fault positioning, timely abnormality processing, hot upgrading and the like are achieved.
Owner:BEIJING SANSEC TECH DEV

Printer configuration webpage access method based on USB-to-network conversion

ActiveCN116723173BImprove user experienceSimplify the process of configuring web accessTransmissionEnergy efficient computingComputer printingIp address
The application discloses a printer configuration webpage access method based on a USB-to-network port and a printer device, and the method comprises the following steps: controlling a LINUX kernel to load a USB virtual network card driver, allocating an IP address and a subnet mask for a USB port, and generating a virtual network port according to the USB port; performing domain name system configuration processing on the virtual network port, and allocating a slave IP address for a terminal device connected to the USB port according to the IP address and the subnet mask, wherein, the USB port of the printer is simulated into a virtual network port through the USB virtual network card driver, so that the terminal device can obtain the slave IP address allocated by the virtual network port by connecting the USB port, access the network of the printer device through the slave IP address, and access the configuration webpage of the printer device, thereby simply and effectively realizing the printer configuration webpage access, not needing additional hardware devices, and further simplifying the configuration webpage access process and improving the use experience of users.
Owner:JIANGMEN DASCOM COMP PERIPHERAL +1