192 results about "Microkernel" patented technology

A page table entry management method and apparatus provide the Microkernel System with the capability to program the memory management unit on the PowerPC family of processors. The PowerPC processors define a limited set of page table entries (PTEs) to maintain virtual to physical mappings. The page table entry management method and apparatus solves the problem of a limited number of PTEs by segment aliasing when two or more user processes share a segment of memory. The segments are aliased rather than duplicating the PTES. This significantly reduces the number of PTEs. In addition, the method provides for caching existing PTEs when the system actually runs out of PTEs. A cache of recently discarded PTEs provides a fast fault resolution when a recently used page is accessed again.

A computer system employing a microkernel executes two different tasks, e.g., operating systems, yet uses common shared libraries. Rather than each task setting up its own libraries, during compile a global offset table is set up for each task so that the tasks can use common shared libraries. An abstractions layer is established to allow the tasks to share the global offset table, and thus to use common shared libraries. Threading package related services are resolved via the abstractions mechanism. This abstractions mechanism includes services implemented as operating system abstractions, and include thread creation, exit from a thread, etc. Abstracted functions utilize pointers to runtime environment-specific functions, and are utilized by the task's runtime environment.

The embodiment of the invention discloses an encryption method and an encryption system based on ARM TrustZone. The encryption method is used in a mobile device which is provided with an ARM processor. The encryption method includes the steps that a security microkernel is preset in the mobile device, wherein the security microkernel is used for dividing a security zone internal storage into a plurality of task internal storage spaces to support the simultaneous operation of a plurality of independent secure application programs which are dependable without the need for mutual detection; secure startup is carried out to enable the mobile device to run in a security zone when a system kernel is started up; when encryption and decryption need to be carried out on an upper-layer application, the security microkernel is called through TrustZone API to finish the encryption and decryption. On the technical basis of the ARM TrustZone, the security microkernel is built to enable the security zone to be separated from a common zone, and all applications relevant to security on the mobile device are placed in the security zone, so the security of the mobile device is greatly improved.

The invention discloses a method for realizing hardware mirror startup optimization for embedded operating system, not directly ending running of embedded operating system but saving state of the running operating system together with microkernel of the operating system into the in-chip memory of a processor, directly loading at the time of startup and restoring to the running state saved. And it can remarkably speed up system booting and restart so as to remarkably raise startup speed of the embedded system and reduce the time for user to wait.

According to the invention, a motor vehicle control device is provided, comprising: a microkernel; several entities; and a software bus, via which the entities can communicate with each other and with the kernel, wherein one or more of the entities represent respectively one or more modules of the AUTOSAR base software. The present invention is based inter alia on the idea of representing the AUTOSAR architecture on a microkernel-based architecture. Thereby, the motor vehicle control device according to the invention makes it possible for example to link infotainment applications with AUTOSAR-based applications.

The invention discloses an application program dynamic loading method based on a micronucleus operating system, which comprises the following steps: analyzing the format of an object program, calculating and distributing the size of memory which is needed by a code segment and a data segment in a module, coping the code segment and the data segment to the memory, determining a symbol which needs to modify an address according to relocation information of an object file, finding out an original migration of the symbol which needs to modify from a symbol table and a string table, calculating a practical operation address of the symbol, and filling the practical operation address of the symbol to the object program. The application program dynamic loading method greatly reduces the demands of the system for the memory, and does not need the supporting of the operating system which is based on the virtual memory technology. Furthermore, each application program also just pays attention to the development and the testing itself, and the application program after upgrading can be put into service through being directly covered on an original file. Different application programs are coupled through an interface, thereby effectively increasing the development efficiency, and reducing the development complexity.

A security enhanced network device includes a processor, a memory, and a communication controller operably connected to form a processing device. A microkernel provides a partitioning between a communication address space, a security enforcement address space, and a protected operations address space. The communication address space contains communications threads for interacting with a network. The protected operations address space contains protected operations threads for performing protected operations. The security enforcement address space contains security threads for providing secure isolation of the protected operations address space from the communication address space. A method of secure operation of the network device includes: partitioning the network device into the communication address space, the security enforcement address space, and the protected operations address space; interacting with the network; providing secure isolation of the protected operations address space from the communication address space; and performing protected operations.

The invention relates to a complete network middleware operation support platform which can be used for integrating a plurality of conventional mainstream middleware technologies, and a method for integrating a heterogeneous middleware member on the platform. The platform disclosed by the invention comprises a microkernel integration frame, a communication service layer, a public service layer, a member container layer and a service engine layer, wherein the microkernel integration frame provides upper-level service integration interface specifications of a life cycle management and command interface, an interoperation interface and a deployer interface needed for deploying specific components, for the four categories of service layers. According to the invention, deep integration of mainstream middleware technologies, such as JEE (Java Enterprise Edition), Web service, CORBA (Common Object Request Broker Architecture), COM/DCOM (Component Object Model/Distributed Component Object Model), and the like, is realized. The complete network middleware operation support platform and the integration method of the heterogeneous middleware can be widely applied to integration of different application service technology systems.

The invention belongs to the field of information security, and in particular relates to a method for performing login authentication and safely guiding another operating system by using a microkernel. The method comprises the following steps of: running the microkernel after starting a computer; by using security environment provided by the microkernel, performing authentication on a microkernel local computer and performing authentication on a network server or a USB key; and performing secondary authentication on a user account and a password input by a user. After two-time authentication is successful, the microkernel guides the operating system of the user, so that the information security of the user is protected and the safety and confidentiality of computer user information are improved.

A method of operation of an computing system includes: providing a microkernel; controlling a reconfigurable hardware device by the microkernel; configuring an event scoreboard module for monitoring the reconfigurable hardware device; and implementing an application configured in the reconfigurable hardware device including receiving a machine identifier for the reconfigurable hardware device.

An operating system includes a non-preemptive microkernel executing one or more processes in accordance with a predetermined priority; and one or more kernels adapted to be executed as one or more processes by the non-preemptive microkernel.

The invention discloses an encryption system and an encryption method based on TrustZone, belonging to the field of encryption of mobile devices. According to the invention, a mobile device system builds a normal mode and a safe mode, in the safe mode, a safe microkernel is preset, and the safe microkernel divides a safe zone memory into a plurality of task memory spaces and supports simultaneous running of independent safe applications; when upper applications need to be encrypted or decrypted, the mobile device system enters in a system monitor mode, context of the normal mode is backed up in the monitor mode, and then, the system enters in a safe mode, a driver layer calls the safe microkernel through a TrustZone API after receiving a call command of the upper applications, the system enters in a user running mode of the safe mode to execute corresponding safe services, and the safe microkernel returns back a key to a server for verification after encryption and decryption; and after the key passes the verification of the server, a user program and the server start normal data exchange, and restore the context of the normal mode.

The invention relates to a cloud computing-oriented comprehensive emergency management platform architecture. The platform architecture adopts a three-layer structure comprising a system service layer at the uppermost layer, a platform service layer at the middle layer and a data layer at the lowermost layer, wherein the system service layer comprises independent subsystems and provides system-level service support for PC (personal computer) terminal, WEB terminal and mobile terminal applications; the platform service layer adopts microkernel group technology and is divided into a plurality of microkernel groups each of which comprises a group of microkernels; one microkernel group provides a group of functions; the data service layer uniformly provides service for all the microkernels; and the data provided by the data service layer are stored in a physical storage device of a cloud platform by adopting the storage virtualization technology, and the data service layer provides an data service engine including data operation, data processing and the like for each database. The platform architecture effectively solves the problem of multi-user demand of the platform and can be widely applied to the design of the comprehensive emergency management platform architecture.

The invention discloses a software architecture method based on a microkernel and a plug-in, which comprises the following steps: on the basis of establishing a dynamic plug-in model, firstly, constructing a basic framework application program for loading a plug-in and providing a necessary execution environment for the operation of the plug-in; secondly, formulating naming rules of the plug-ins,and ensuring uniqueness of plug-in naming of different developers; secondly, sequentially formulating a physical organization rule of the plug-in, constructing a plug-in life cycle layer, constructinga plug-in service layer and constructing a theme event service layer; and finally, constructing a plug-in container, adding a cross-process message forwarding function in the plug-in container and the main frame, and providing a cross-process unified message interaction service. According to the method, software framework core service functions such as theme event interaction and cross-process unified interaction are realized, and the method has the characteristics of high reusability, high expansibility, dynamic plug-in loading and the like of an OSGI technology, and also has cross-platform,high-efficiency and cross-process capabilities.

The invention discloses a subprogram running method and device based on a microkernel system and electronic equipment. The method relates to routing forwarding in the field of computer networks, and comprises the following steps: acquiring a subprogram calling request for a target subprogram of a front-end host through a front-end system management module of a microkernel system; loading a targetsubprogram based on the front-end access path information in the subprogram calling request; calling the target subprogram, determining access information of a target back-end subprogram correspondingto the target subprogram in the server, and sending a service processing request for the target back-end subprogram to the server; receiving service processing result information sent by the server;and processing the service processing result information based on the target subprogram to obtain an application page of the target subprogram. According to the embodiment of the invention, code isolation between the application programs is realized through a plug-in mode of the application programs, the coupling degree between the application programs is reduced, and the development efficiency ofan application system is improved.

The invention relates a method which can realize reference monitors of high level secure operating system, mainly comprising: (1) the structure of a reference monitor; (2) the realization of the controlling of microkernel IPC communications; (3) the initiated process according to the security services needed by the reference monitor. The structure of the reference monitor comprises that the structure reference monitor bases on a microkernel with enhanced security while all service procedures and user applications are out of the microkernel; the inter-process communication (IPC) is the only way for applications to acquire service and access resources and for the interactions between servers. Making use of the structure of the reference monitor to limit the communications between users and acquire system service, the invention enforces of the security verification strategy of access control to avoid authentification bypass, having guaranteed the validity of the utilization and protection of the system resources by the reference monitor and thus improved the safety and service ability of the system. The invention satisfies the security requirements of high-level operating system.

A method of enabling multiple different operating systems to run concurrently on the same RISC (e.g. ARM) computer, comprising selecting a first operating system to have a relatively high priority (the realtime operating system, such as C5); selecting at least one secondary operating system to have a relatively lower priority (the general purpose operating system, such as Linux); providing a common program (a hardware resource dispatcher similar to a nanokernel) arranged to switch between said operating systems under predetermined conditions; and providing modifications to said first and second operating systems to allow them to be controlled by said common program.

The invention provides an analysis and detection method for in vivo micronuclei of a mouse for judging the toxicity of cigarette smokes; the invention is characterized in that the invention adopts the in vivo micronucleus detection mode, and can directly measure the micronucleus rate by the antibody fluorescence labeling method after processes of the stomach filling and toxicity contaminating of the mouse, the cell culture, the fixing and the dyeing. The steps of the invention are as follows: (a) the mouse is selected; (b) agglutinators of the cigarette smokes are prepared; (c) the mouse is contaminated with the toxicity of cigarette smoke condensates (CSC); (d) the mouse is bled for culturing, fixing, dyeing and counting; (e) test results are processed and analyzed so as to judge the toxicity of the cigarette smokes. Compared with the prior art, the invention has the advantages of high sensibility and reliable result, and provides a novel detection method for judging the toxicity of the cigarette smokes.

The invention provides a cooperative concurrent message bus, a driving member assembly model and a member disassembly method. The cooperative concurrent message bus comprises an information acquisition module, a parallel ring distributor, a linear memory block, a message filling module, parallel queue equipment, a message queue pool, a queue sequential manager, an entry mapping table and a system stack. According to the cooperative concurrent message bus, the driving member assembly model and the member disassembly method provided by the invention, the weakness of the existing concurrence implementation technology can be effectively overcome, and the concurrence technology and parallel programming is efficiently and reliably realized. The cooperative concurrent message bus, the driving member assembly model and the member disassembly method have the advantages of universality, low cost, high efficiency, energy saving, reusability, transparent distribution, microkernel, inherent object-supported technology and the like.

A method of enabling multiple different operating systems to run concurrently on the same RISC computer, comprising selecting a first operating system to have a relatively high priority (the realtime operating system, such as C5); selecting at least one secondary operating system to have a relatively lower priority (the general purpose operating system, such as Linux); providing a common program (a hardware resource dispatcher similar to a nanokernel) arranged to switch between said operating systems under predetermined conditions; and providing modifications to said first and second operating systems to allow them to be controlled by said common program.

An embodiment of the invention discloses a method for providing trusted services by utilizing a trusted execution environment system based on a microkernel architecture. The method comprises the following steps of: starting a trusted operation system, creating a first process for running a root task by the trusted operation system, verifying the integrity of a mirror image of the root task, and executing the root task by the first process; in response to a service request from the common world, creating and running a trusted application process corresponding to a service identifier by the roottask, verifying the integrity of a trusted application mirror image corresponding to the service identifier, and creating a trusted application process based on the trusted application mirror image after the verification is completed; after the trusted application completes processing of the related data, switching a processor to a monitor mode by calling a preset switching instruction through the root task; and storing context data of the trusted operating system by using the monitor component in the monitor mode, and switching to a general operating system in the common world.