13 results about "Microkernel" patented technology

Disclosed are a capability management method and apparatus (100), and a computer device, wherein same relate to permission management of a kernel object (O) in an operating system, for example, the permission management of a kernel object (O) in a micro-kernel architecture. Specifically, in the method, two types of information are stored in a capability node (CNode) of a capability owner: information (M2) for indicating the capability to perform granting and information (M1) for indicating the capability to be granted; a correlation between the capability of a grantor and the capability of a grantee is established by means of recording the two types of information; the copying of a capability is prevented during a capability granting process; and the deletion of a capability is prevented during the process of the grantor giving up the capability, thereby ensuring a deterministic latency while realizing capability recovery and granting. The method can be applied to a smart mobile phone system, an unmanned driving system, etc.

The application discloses a power industrial control safety protection system and method based on a microkernel active defense, wherein the system takes a microkernel isolation base as a minimum trusted computing base, allocates revocable communication endpoints and controlled mapping permissions to each protection domain, and provides base support for the isolation domain boundary and permission recovery in the active defense; in the method, the system is uniformly formatted by an input module to process field data and service requests and generate a request identifier, a request distribution service distributes the same request to an odd number of online executors for parallel processing, a single decision output available externally is generated, an executor scheduling service selects a candidate executor from a candidate protection domain pool and reconstructs an online user mode service cluster according to a feedback index by adopting a periodic rotation and event triggering strategy, and if the request distribution service, the consistency arbitration service or the executor scheduling service fails, a minimum bottom-up cleaning is performed by an active defense kernel state support module and a reestablishable state is entered.

The application relates to the technical field of microkernel, in particular to a microkernel system testing method and device, computer equipment and a storage medium. The method comprises the following steps: obtaining source code of a microkernel system; performing compilation processing on the source code to obtain a target symbol table, wherein the target symbol table comprises attribute information of each static object in the source code; obtaining a test script of the microkernel system; updating the test script according to the target symbol table to obtain an updated test script; and testing the microkernel system according to the updated test script and the source code. The application can call the corresponding static objects in the microkernel system without modifying the source code of the microkernel system.

This disclosure provides a virtual machine runtime system, method, processor, and electronic device, relating to the field of virtual machine technology. The system includes: a virtual machine monitor, which runs at a first exception level and is used to create virtual machines using a virtualization environment provided by a microkernel, and to handle interrupt events associated with the virtual machines according to notifications from the microkernel; a virtual machine, which runs at a second exception level; and a microkernel, which runs at a third exception level and is used to provide the necessary virtualization environment for the virtual machine monitor to create the virtual machines, and to intercept interrupt events associated with the virtual machines and notify the virtual machine monitor to handle the interrupt events; the privilege levels of the first exception level, the second exception level, and the third exception level increase sequentially. This disclosure aims to solve the problems of centralized privileges and high resource consumption in existing virtual machine runtime systems.

The application provides a restart method of an operating system, a vehicle control device, a vehicle, a medium and a product, and relates to the technical field of vehicles. The method is applied to a vehicle control device, the vehicle control device comprises a virtual machine monitor, a first operating system and a second operating system running on the virtual machine monitor, the first operating system adopts a microkernel architecture, and the second operating system adopts a macrokernel architecture. The method comprises the following steps: in the process of running the first operating system and the second operating system on the virtual machine monitor, acquiring first to-be-tested information and second to-be-tested information; in response to the first to-be-tested information satisfying a corresponding restart condition, restarting the first operating system according to a first restart process; and in response to the second to-be-tested information satisfying a corresponding restart condition, restarting the first operating system according to a second restart process. The above-mentioned method can realize independent restart of the first operating system, does not affect the second operating system to continuously perform a control task, and improves the reliability of the operation of the vehicle control device.

The present application relates to the technical field of enterprise digitization service, in particular to a construction method of enterprise service application system based on Internet, which firstly constructs a minimum atomization system base, completes the standardized atomic encapsulation of the minimum granularity of business capability and the construction of full-dynamic microkernel architecture; secondly, the full-dimension operation carbon footprint of the user is collected without sensing and semantic analysis is completed, which is converted into structured business intent data; then a unified demand decision hub is built, two types of demands of function growth expansion and optimization contraction are synchronously identified and priority quantization sorting is completed; finally, double-line self-adaptive optimization is executed in parallel based on the atomization base, and all optimizations are completed in the way of hot deployment. The present application realizes the dynamic adaptation of enterprise service system and business development, and solves the problem of rigidity of traditional system architecture, disconnection between iteration and business demand.

A computer system having a multi-kernel architecture comprising multiple operating system microkernels is described. The computer system comprises multiple processing cores, a memory comprising multiple private memory regions and a shared memory region, and multiple compute nodes each comprising one or more processing cores and further comprising one of the multiple operating system microkernels and an associated user space for non-kernel operations, wherein only the operating system microkernels run at the highest privilege level of the one or more processing cores of the compute nodes. Each of the multiple compute nodes has an associated private memory region from the multiple private memory regions for use by the operating system microkernel of the each of the multiple compute nodes, and for non-kernel operations, each of the multiple compute nodes accesses the shared memory region. Associated methods and computer systems are also described.

This invention discloses an embedded microkernel iterative generation and graph rewriting method and system based on physical constraint feedback. The method establishes a reverse feedback loop from a deterministic backend to the LLM (Limited Language Management Module): First, the deterministic backend is used as a "physical verifier" to tentatively synthesize the initial task graph; when physical violations such as register overflow or volume exceeding limits are detected, a physical diagnostic report containing bottleneck node information is generated; then, the diagnostic report is converted into natural language prompts using feedback encoding technology; finally, the LLM is driven to execute graph rewriting strategies such as node splitting and input serialization to correct the task graph topology. This invention achieves a closed-loop iteration of "physical problem, semantic solution." Experiments show that this method can increase the generation success rate of complex embedded tasks on extremely constrained hardware from 32% to 94%, significantly enhancing the robustness and adaptability of the system.

The present disclosure provides a microkernel-based event handling method and apparatus. A virtual machine is embedded in a microkernel, and the method includes: in response to detecting a preset trigger event during running of a target application program in a user mode, switching from the user mode to a kernel mode and acquiring a bytecode associated with the preset trigger event, where the bytecode is a functional code pre-written into a shared code region in the user mode, and the functional code is a code corresponding to partial functions in the target application program; and controlling the virtual machine to execute the bytecode, and writing an execution result of the preset trigger event into a shared data region, to make the execution result be read from the shared data region in the user mode after switching to the user mode. The method may improve handling efficiency of a microkernel system

The application relates to a light storage and charging station edge computing security protection system and method. The system comprises a Hongmeng microkernel edge core subsystem, a hardware root of trust subsystem, a station equipment security access subsystem, an edge security management and control subsystem, a scenario-based traffic auditing subsystem and a secure communication and transmission data protection subsystem. The system realizes the effects of microkernel level attack surface minimization, full link hardware level trustworthiness, scenario-based traffic auditing accurate defense, lightweight high real-time security, zero trust in-depth closed loop defense and cross-device unified security management and control, constructs a lightweight, high real-time, in-depth defense, scenario-based traffic auditing, unified control edge security system, and becomes a key requirement for guaranteeing the independent controllability, safe and stable operation of an energy station.

The application relates to the technical field of business process dynamic arrangement, and discloses a business process dynamic arrangement method and system based on a microkernel, which comprises the following steps: collecting a runtime data mode and context behavior characteristics of a component, generating a double-layer associated execution record; comparing the runtime data mode with a static interface contract, generating an implicit mode drift detection result; grouping and establishing an independent behavior baseline according to a calling context, generating a context-based behavior anomaly detection result; tracing a drift field propagation path along a component link, generating a cross-layer causal association detection result; quantifying the correlation between a drift characteristic dimension and a behavior anomaly dimension, generating a refined cross-layer causal attribution result; hot-inserting a data preprocessing plug-in node based on a key drift factor, generating a runtime cross-layer repair scheme; monitoring a repair effect, updating an interface contract runtime label, and outputting a cross-layer association detection report.

The application provides a microkernel operating system and a process inter-message processing method. The microkernel operating system comprises a user process, a microkernel and a service process. The service process comprises a process intercommunication daemon thread and a message distribution daemon thread. The process intercommunication daemon thread is used for receiving a request message sent by the user process through the microkernel and setting a priority, analyzing the request message to determine an operation behavior type, and sending the request message to a request message list used by the message distribution daemon thread corresponding to the operation behavior type. The message distribution daemon thread is used for sequentially accessing a device corresponding to the service process according to the request message in the request message list according to the priority of the request message. The service process of the microkernel operating system in the prior art needs to be prepared with a large number of threads in advance to process the request message, and a mutual exclusion lock also needs to be set to solve the problem of multi-thread concurrent access to the device, resulting in the problems of large overhead and high development complexity of the microkernel operating system.