25 results about "Method access" patented technology

Disclosed embodiments provide systems and methods for analyzing and optimizing access policies. Access policies are analyzed by an access policy optimization system. In cases where large numbers of users have similar access privileges, the number of overall policies can be significantly reduced. An access control health metric is computed on an original set of access data as a measure of the current state of the access policies. It can be used as an indication that optimization of the access policies is warranted. The access data can include access policies and / or access groups. A policy subgroup mapping process is performed to identify subgroups of access policies. Subgroups with a number of entries exceeding a predetermined value are converted to access groups, the users that have those policies are added to the corresponding access groups, and the individual access policies are deleted. Duplicative and / or redundant policies are identified and removed.

The invention is notably directed to a computer-implemented method of clustering anomalies detected in a computerized system. The proposed method makes use of an unsupervised cognitive model, executed based on input datasets to obtain clusters of anomalies. The method accesses input datasets, which correspond to detected anomalies of the computerized system. These anomalies span respective time windows. Each input dataset comprises a set of timeseries of key performance indicators. The key performance indicators of each input dataset extend over a respective time window. That is, each anomaly corresponds to a respective time window. This model includes a first stage, which includes an encoder designed to learn fixed-size representations of input datasets, and a second stage, which is a clustering stage. The model is executed based on the input datasets accessed, the first stage learning fixed-size representations of the input datasets and the second stage clustering the learned representations.

This application discloses a method for detecting virtual devices, an access control method, and a computer device. The detection method determines a second score that characterizes the degree to which a target device conforms to a real device, and uses the second score to reduce a first score that characterizes the probability that the target device belongs to a virtual device to a fusion score. This can reduce false positives on the target device, improve the accuracy of virtual device detection, and enhance the user experience.

The application provides an access control method, an access control system, an electronic device and a storage medium. The electronic device has a first interaction space and a second interaction space, the desktops of the first interaction space and the second interaction space can be displayed simultaneously, and the first interaction space is the main interaction space of the electronic device. An access control method applied to the electronic device is as follows: after switching from the first desktop of the first interaction space to the second desktop of the second interaction space, when an access subject has an access operation on a first target object in the second interaction space, an access control decision is generated according to the access control information related to the first target object, and the corresponding access processing is performed on the first target object according to the access control decision. It can be seen that the present application realizes access control of resources (such as the first target object) in the second interaction space, which helps to avoid the leakage of private resources or the random use of application programs in the second interaction space.

A computer-implemented system and method for managing and executing activities for uninterrupted processing. At least one process definition representing a plurality of activities to be executed by computing devices located outside of at least one firewall associated with a data communications network is accessed. Respective ones of the plurality of activities are identified and, for each: input representing details associated with the respective one of the plurality of activities is accessed and at least one computing device is determined to execute steps associated with the respective one of the plurality of activities. Information associated with the respective one of the plurality of activities is transmitted to the computing device(s). A response representing output from the executed steps associated with the respective one of the plurality of activities is received and stored.

The present application relates to the field of cloud technology, and discloses a metadata access method and apparatus, a device, and a storage medium. According to the method, a global metadata cache scheme is used, and relates to a three-layer architecture, i.e., a global cache file, a cache description array, and a memory block; storage areas can be divided according to the data length of metadata in a shared memory; and when target metadata needs to be acquired for a target process, metadata can be queried layer by layer according to the three-layer architecture until target address information of target metadata that has been cached is obtained, and the target address information is returned to the target process for realizing the access of the target metadata. In this way, the metadata required by all the working processes can be accessed by means of the method, so that metadata caches of the working processes do not need to be respectively maintained by the working processes, thereby reducing the repeated metadata cache between the working processes, reducing the occupied memory resources, reducing the transmission resource occupation of the repeated metadata, and improving the resource utilization rate.

Systems and methods for a multi-tenant parser generation platform. A human-readable document of a data provider system is accessed. The document includes a data dictionary table for opaque data of the data provider system that has a first type. Data dictionary information of the data dictionary table is extracted, and a schema file is generated from the extracted information. The schema file defines a parsing process for parsing an opaque data record of the first. The first schema file specifies each field of the opaque data record of the first type. Parsing instructions are generated based on the schema file. The parsing instructions are for parsing an opaque data record of the first type provided by the data provider system into a set of data fields. The parsing instructions are provided to an entity system external to the platform. The first entity system is associated with a first platform account.

One or more embodiments of the present disclosure provide an access control method, an access credential generation method, and an access control system, capable of being applied to a cloud platform. Specifically, an internal trusted network range of a platform corresponding to a target account can be acquired to generate an address whitelist for the target account; and an access credential is generated for the target account on the basis of the address whitelist. A cloud platform gateway receives an access request sent by the target account, and then extracts the address whitelist of the target account from the access credential carried in the access request; and in response to a source address of the access request not matching the address whitelist, the cloud platform gateway determines that the access request does not pass address authentication, and intercepts the access request. The solution can effectively prevent an attacker from accessing a cloud platform via an unauthorized network after the leakage of an access credential, thereby improving the security of the cloud platform, and achieving platform-level access credential security management.

The present specification relates to the technical field of distributed database, and provides a syntax parser generation method, a SQL access control method, a device and equipment, the method comprising: before an application program executes a SQL statement, intercepting the SQL statement based on a filter chain integrated in the application program; calling a filter in the filter chain to perform corresponding filtering processing on the SQL statement; wherein one of the filters is a syntax analyzer configured with a custom access control rule; when the SQL statement fails to pass the audit of the syntax analyzer, the application program is prohibited from executing the SQL statement. The embodiments of the present specification can reduce or avoid the database performance decline caused by the non-standard SQL statement accessing the distributed database.

Automated batch generation and subsequent submission and monitoring of batches processed by a system is disclosed. A plurality of records to be submitted to a system for processing is accessed. A plurality of record groups is generated, each record group corresponding to a different subset of records. A plurality of batch transaction records is generated. Each batch transaction record corresponds to one of the plurality of record groups, and includes a subset identifier that references a subset of records of a record group to which the batch transaction record corresponds, and a status field. A first batch transaction record that identifies a first subset of records is accessed. The status field of the first batch transaction record is set to a submitted value, and instructions are sent to the system to process the first subset of records.

The invention provides a right confirmation information generation method, an access method, electronic equipment and a storage medium, relates to the technical field of computers, and is used for improving the verifiability of a right confirmation path. The method comprises the following steps: calling a target content generation model to generate target content data through user interaction information sent by a client; acquiring right confirmation identification information of the target content generation model, and acquiring signature information of the data providing end on the right confirmation identification information; and the right confirmation information of the target content data is generated based on the signature information and the user interaction information, so that the verifiability of the right confirmation path is improved.

The application provides a heterogeneous data synchronization method, device and medium for a database, and belongs to the technical field of database data processing. The method accesses a source database through a preset database connection interface, and obtains corresponding to-be-synchronized business data and source table metadata; a target table of a target database is generated according to the source table metadata and a preset type mapping rule; a binary assembler corresponding to the target table is constructed based on a set of underlying storage structures obtained by pre-parsing the target database; wherein the binary assembler is used to convert the to-be-synchronized business data into a binary stream containing a first data segment and a second data segment; the first data segment at least includes type identification and storage format information corresponding to the target database. According to the to-be-synchronized business data and the corresponding binary assembler, a corresponding binary input stream is generated, and the binary input stream is written into the target table, so as to complete the heterogeneous data synchronization between the source database and the target database.

The invention discloses a data processing method and device, terminal equipment and a computer readable storage medium. The method comprises the steps that a plug-in data access request for a target plug-in is received; in response to the plug-in data access request, determining a target access path marked with a plug-in identifier of a target plug-in; and accessing plug-in data of the target plug-in based on the target access path. When the method is adopted to access the plug-in data, the independent access path of each plug-in can be found based on the name of the plug-in, the data of different plug-ins can be distinguished, the data of other plug-ins or the data of a host application cannot be influenced when the plug-in data is modified, and the data isolation of each plug-in is realized.

The invention discloses a network protocol address updating method and device, an access processing method and device and a computer readable storage medium. The method comprises the following steps: monitoring a response message, and acquiring first network protocol address information for accessing a target domain name under the condition that the target domain name belongs to a target domain name group; and updating the network protocol address information corresponding to the target domain name in the target domain name group according to the first network protocol address information. Thus, the first network protocol address information is automatically extracted by monitoring the response message, and the mapping relationship in the target domain name group can be updated without manual intervention, so that access processing of the data packet can dynamically adapt to network changes, the problem of data packet processing misjudgment caused by mapping failure can be effectively avoided, and the user experience is improved. Therefore, the processing of the data packet can be always matched with the actual network condition to a certain extent, the processing efficiency of the data packet is improved, and the processing delay is reduced.

The embodiment of the application provides an access control method, an access control system, a terminal and a storage medium, and belongs to the technical field of zero trust. The method comprises the following steps: when initiating access to a target server, a single packet authorization authentication message is sent to a policy controller, so that the policy controller informs a network firewall to generate a first access control rule for exposing a service port of the terminal according to a verification result of the single packet authorization authentication message; a session connection is established with the target server based on the first access control rule, and a connection establishment notification message is sent to the policy controller, so that the policy controller informs the network firewall to generate a second access control rule for access management of an application of the terminal and deletes the first access control rule. The embodiment of the application synchronously adjusts the access control of the network firewall according to the access state by monitoring the remote access of the terminal, so that the protection of the network firewall for the remote access can strictly run through the whole life cycle of the access.

The embodiment of the present specification provides a method for determining the office area to which a device belongs, an access control method, a system, an apparatus and a device. The correspondence relationship between the device identifier of the network device and the office area range can be preconfigured. In the process of network authentication of the user device, the device identifier of the network device is sent to the server through the network device, so that the server determines the office area range to which the user device belongs based on the preconfigured correspondence relationship and the device identifier of the network device. Since the device identifier of the network device does not need to be manually configured by the user and will not change, misidentification can be reduced. Moreover, by realizing the identification of the office area range in the network authentication process, the development process can be reduced and the processing efficiency can be improved.

The invention discloses a data uploading method, an access method, an updating method, a destroying method and devices. The data uploading method comprises the following steps: receiving an identity label of a parsed data provider, held data and a first data label corresponding to the held data; obtaining a first prefix result according to the first data identifier, carrying out first encryption processing on the identity identifier to obtain first identity identifier encrypted data, and respectively carrying out second encryption processing on the first data identifier and the held data to obtain first data identifier encrypted data and held data encrypted data; and forming a first mapping table from the first prefix result, the first identity identifier encrypted data, the first data identifier encrypted data and the held data encrypted data, and uploading the first mapping table to an encrypted database for storage. Through the method and the device provided by the embodiment of the invention, the storage and calculation potentials of the server can be better utilized and released, so that the calculation pressure of a data provider in an interaction process is reduced, and application scenes are enriched.

The embodiment of the present application discloses a kind of white list-based access control method and white list updating method.The access control method includes: authentication module accesses multiple user modules, obtains terminal information;For any user module, if white list version 1 is greater than white list version 2, then allow the user module to access;Otherwise, compare offline valid information 1 and offline valid information 2;If they are consistent, then allow the user module to access.Implement white list access control scheme of the embodiment of the present application, and authentication module realizes access control to user module based on white list version and offline valid period of terminal information, which provides a kind of quick, convenient and effective access control means.Implement white list updating scheme of the embodiment of the present application, and white list data is updated by user module in the authentication process, without pre-installing white list data, without needing to maintain white list data specially.

The invention provides an address mapping method, an access method, a corresponding device, electronic equipment and a medium, and belongs to the technical field of communication. The method comprises the following steps: dividing system storage spaces corresponding to a plurality of memories in a target system into a plurality of mapping areas; under the condition that a target memory access request is received, determining a target mapping area corresponding to the target memory access request from the plurality of mapping areas; and mapping a target access address corresponding to the target memory access request based on a memory channel corresponding to the target mapping area to obtain a memory address corresponding to the target access address in the target mapping area, and executing corresponding memory access processing based on the memory address. According to the embodiment of the invention, bandwidth resources and power consumption overhead can be saved while memory access requirements are met.

A storage management method accesses a storage apparatus including multiple blocks by a file system. The file system includes multiple logical blocks mapped to the blocks, and each of the logical blocks has a logical block number. The storage management method includes: receiving a first storage request to store first data of a first type; dividing a first logical block of the logical blocks into multiple logical sub-blocks in response to the first storage request; allocating a first logical sub-block of the logical sub-blocks to the first data; and generating a first logical identification code mapped to the first logical sub-block so as to record in the first logical identification code a status flag of the first type corresponding to a first value, a logical sub-block number of the first logical sub-block, and a logical block number of the first logical block.

This invention relates to the field of computer data processing technology and discloses a dynamic regularization and collaborative scheduling method for time-series information data. The method accesses asynchronous multi-source time-series data streams, initializes a regularization pool based on a global tracking identifier, and sets a basic survival time window. It scans the regularization pool to calculate the associated state feedback factor and collects execution layer load data to calculate the resource water level. When the feedback factor reaches the high readiness state locking threshold and the resource water level is below the congestion threshold, the regularization pool is locked, a dedicated thread is allocated, and a data block access descriptor is generated for reading and computation. If the regularization pool approaches the time window and the data is not fully ready, the execution state dimensionality reduction or time window compensation operation is dynamically selected based on the resource water level status. This invention avoids memory accumulation and effective data truncation problems caused by fixed time windows by establishing a joint determination mechanism of data readiness and underlying resources, thereby improving the utilization and throughput of computing resources in concurrent scenarios.

This invention relates to the field of computer data processing technology and discloses a dynamic regularization and collaborative scheduling method for time-series information data. This method accesses asynchronous multi-source time-series data streams, initializes a regularization pool based on a global tracking identifier, and sets a basic survival time window. It scans the regularization pool to calculate the associated state feedback factor and collects execution layer load data to calculate the resource water level. When the feedback factor reaches the high readiness state locking threshold and the resource water level is below the congestion threshold, the regularization pool is locked, a dedicated thread is allocated, and a data block access descriptor is generated for reading and computation. If the regularization pool approaches the time window and the data is not fully ready, the execution state dimensionality reduction or time window compensation operation is dynamically selected based on the resource water level status. This invention avoids memory accumulation and effective data truncation problems caused by fixed time windows by establishing a joint determination mechanism of data readiness and underlying resources, thereby improving the utilization and throughput of computing resources in concurrent scenarios.

A method of detecting the onset of a ransomware attack is presented. In an example embodiment, file backup metadata for each of a plurality of computing devices is accessed and analyzed to detect anomalous file backup activity of individual ones of the computing devices. A determination is made as to whether the detected anomalous file backup activity of at least some of the computing devices is correlated in time. File description metadata for each of the computing devices is also accessed and analyzed to identify files in the computing devices that are anomalous to other files in the computing devices. A determination whether a ransomware attack has begun is based on a determination that the detected anomalous file backup activity of at least some of the computing devices is correlated in time, as well as on the identified anomalous files.

This application discloses a method, apparatus, terminal, and computer-readable storage medium for accessing web resources. The method includes obtaining a web resource access request from a target browser and determining the target Uniform Resource Locator (URL) corresponding to the web resource access request. If a redirect URL exists for the target URL, the method accesses the target web resource corresponding to the web resource access request based on the redirect URL. The method further specifies that the first server associated with the redirect URL is different from the second server associated with the target URL. This solves the technical problem that when a server needs to replace some resource files, it must stop providing resource access services to users to update the resources.

The application provides a network port-based full-flow identification analysis method and system, and belongs to the flow identification field. The method accesses full-flow original data packets and presets a configuration file; the original data packets are determined and shunted according to IP layer protocol numbers; when the original data packets are determined as TCP flow or UDP flow, the TCP or UDP flow is determined to be defined, transformable undefined or finally undefined by the preset configuration file and active identification, the transformable undefined flow is transformed into defined flow; the defined TCP and / or UDP flow is unpacked, index data is analyzed, and the name in the configuration file is associated to display the defined TCP and / or UDP flow; if the TCP and / or UDP flow is finally undefined, protocol flow characteristics are extracted, index data is analyzed, and corresponding TCP and / or UDP flow information is displayed. The application improves the comprehensiveness, accuracy, universality and individuality of flow identification.