131 results about "Microkernel" patented technology

A system and method for real-time or near real-time multilingual language transformation in telecommunications environments using distributed artificial intelligence (Al). The system includes at least one processor configured to instantiate a plurality of Al agents, each corresponding to a user in a communication session, and to manage their operation via an Al-agent runtime adapter comprising a microkernel agent manager and a virtual machine layer. A language model abstraction layer enables access to language models and Al algorithm libraries through publish-subscribe interfaces. The system supports contextual transformation of speech based on user profile data such as sentiment, emotional tone, and cultural background. Execution can occur on telecommunication-class switches, edge devices, or general-purpose computing hardware. Al agents operate asynchronously, access shared or private memory, and produce personalized, bidirectional linguistic output. The architecture supports secure, scalable deployment across heterogeneous devices and networks.

The invention relates to the technical field of artificial intelligence compilers, in particular to an AI compiler and compiling method based on a multi-level intermediate representation framework, and the compiler comprises a high-level semantic retention layer which converts models of different AI frameworks into Lalg-on-Tensor IR intermediate representations; the hardware perception optimization layer comprises a tensor packaging and propagation module which is used for performing block packaging, layout propagation and folding of redundant packaging / unpackaging operation on the input tensor; the dynamic partitioning module is used for automatically selecting the partitioning size based on the cache capacity and the core number of the target hardware; the microkernel fusion module is used for fusing matrix multiplication, bias addition and an activation function into a single composite operator; and the microkernel collaboration layer is in butt joint with the hardware acceleration library through the XSMM dialect to generate a target hardware code. The hardware perception optimization layer can perform optimization according to different hardware characteristics, so that codes generated by the compiler can better adapt to target hardware, and the hardware utilization rate is improved.

The invention provides a universal control system for a body-equipped robot and the body-equipped robot. The system comprises an elastic microkernel, a time-sensitive bus network and hardware components which are deployed in the body-equipped robot, the elastic microkernel is in communication connection with each hardware component through a time-sensitive bus network; the elastic microkernel deploys a basic industrial operating system, virtualizes a plurality of virtual domains in the industrial operating system according to an application scene of the robot with the body, and constructs a real-time communication framework based on deterministic communication middleware in the industrial operating system; the elastic microkernel is further provided with a hardware abstraction layer, a mainstream hardware instruction set is integrated in the hardware abstraction layer, and cross-platform support is provided for functional software in the virtual domain through a standardized interface. According to the method, the problems of scattered computing resources, complex communication and the like in the prior art are solved, and a highly-integrated, flexible, extensible and cross-platform compatible control scheme is provided for the robot with the body.

The invention discloses a method for communication between a user program and a virtual machine on a microkernel Hypervisor, the microkernel Hypervisor is provided with two shared memory areas, the shared memory area 1 is accessed by the user program and a root service Rootserver, the shared memory area 2 is accessed by the Rootserver and the virtual machine, the user program writes communication request data with the virtual machine into the shared memory area 1, and the user program writes communication request data with the virtual machine into the shared memory area 2. The method comprises the following steps that a VMM sub-thread is used as a shared memory area 1, a Rootserver is notified through inter-process communication, the Rootserver reads communication request data from the shared memory area 1, the communication request data is written into a shared memory area 2 after being analyzed by the VMM sub-thread, a system calls a syscale to transmit a communication request to a kernel, the kernel injects virtual interrupt into a virtual machine, and the virtual machine sends the communication request to the Rootserver. And an interrupt processing program of the virtual machine processes the communication request and writes a processing result into the shared memory area 2, then the processing result is returned to the Hypervisor through the Hypercall, and a Rootserver of the Hypervisor feeds back the processing result to a user program through the IPC. The method is designed for the microkernel Hypervisor environment, and the overall performance and efficiency of the embedded virtualization system are improved.

The invention relates to an electric power mobile application security protection method based on a swan gap microkernel, which comprises the following steps of: S1, establishing a hardware trust root, and storing a device root key and a certificate chain by utilizing a non-tampering storage area built in a chip; s2, establishing a complete trusted boot chain based on a hardware root of trust, and verifying the integrity and credibility of the next layer by each layer from Bootloader to a swan microkernel and then to an application program; s3, constructing a triple authentication system based on user identity, equipment identity and biological characteristics, and performing user authentication; s4, according to a user authentication result, realizing fine-grained authority control based on an RBAC model and ABAC, and ensuring that authority check can be executed during resource access every time by utilizing an IPC security mechanism of a swan micro kernel; and S5, creating an independent execution environment for each power application according to the process isolation capability of the swan microkernel, and ensuring that memories among the applications cannot be mutually accessed through virtual address space isolation. The reliability of power mobile application safety protection is effectively improved.

According to embodiments of the present disclosure, a system includes: a microkernel having a low-level application programming interface (API) and providing memory protection domains to user-level processes; and an abstraction layer running on top of the microkernel and comprising a plurality of service extensions to the microkernel and configured to provide a high-level operating system (OS) API for use by one or more application processes running in user space, wherein different ones of the service extensions are configured to run within different ones of the memory protection domains provided by the microkernel.

The invention belongs to the technical field of information security, and relates to an endogenous security OS construction method and device based on intelligent agent and control computing, and the method comprises the steps: constructing an underlying security base based on a hardware trusted root and a microkernel; based on the bottom-layer security base, defining and deploying a hierarchical multi-intelligent agent with a specific function; establishing a multi-agent communication and interaction protocol stack for the multi-intelligent agent; based on a multi-agent communication and interaction protocol stack, an intelligent collaborative scheduling algorithm oriented to multi-objective optimization is developed; an endogenous security mechanism integrating active defense and passive response; and carrying out full-life-cycle security situation assessment on the endogenous security operation system. Dynamic intrusion detection can be carried out, an intrusion detection system (IDS) based on machine learning is deployed, a normal behavior mode of an intelligent agent is learned, and abnormal tampering behaviors, DoS attacks, communication anomalies and the like are identified.

The invention discloses a mobile storage security access control system and method based on a microkernel architecture, and relates to the technical field of data storage security. The system comprises a host end and a mobile storage device end. And the host end is provided with a special device driver and is used for sending the generated authentication data and the storage access instruction to the mobile storage device end through the virtual storage front-end device created by the special device driver. And the mobile storage device end is deployed with an operating system based on a microkernel architecture, creates a virtual storage rear-end device corresponding to the virtual storage front-end device, and is used for performing host identity and capability verification on the authentication data received by the virtual storage rear-end device, and receiving and executing a storage access instruction from the host end after the verification is passed. Communication connection is established between the virtual storage front-end device and the virtual storage rear-end device through a USB bus. According to the system, active and fine-grained power control of access to the mobile storage equipment end is realized.

Embodiments of the present application provide a distributed scheduling method, apparatus and system for a deterministic task, for use in scheduling an on-cloud task. A cloud comprises a management node and computing nodes. The method comprises: on the basis of a configuration of a received task and resources of the computing nodes, the management node schedules the task to a computing node meeting the configuration, the configuration comprising resource demands meeting a deterministic constraint of the task, and the resource demands comprising a computing resource demand and a transmission resource demand; and on the computing node to which the task is scheduled, the management node schedules the task to a corresponding running capsule on the basis of the configuration, the resource of the running capsule meeting the configuration, and an elastic microkernel of each computing node being used for allocating a resource to the running capsule on the computing node. The technical solution of the embodiments of the present application achieves the scheduling of an on-cloud deterministic task, and supports the deterministic scheduling of the task in various scenarios, such as virtual machines, containers, processes and threads.

The invention relates to the technical field of industrial automatic control, and discloses an industrial configuration software cross-platform cooperative control method and system based on a swan gap, which realize flexible initialization and dynamic task distribution of a control terminal by fully utilizing distributed communication and microkernel characteristics of a swan gap system. Through structured analysis and task graph construction of a configuration control model, granularity recombination and task parallel execution of a control process are supported; a task terminal recommendation mapping table is further generated in combination with the execution requirement of the control task and the terminal capability label information, and the adaptation matching degree of the control task and the execution terminal is effectively improved; and meanwhile, a distributed cooperative channel is constructed, a communication binding channel between the master control terminal and the slave control terminal is established, and a guarantee is provided for rapid scheduling and execution of tasks. Compared with the prior art, the heterogeneous compatibility, the task scheduling efficiency and the protocol adaptation flexibility can be remarkably improved, and the method is suitable for high-complexity and multi-terminal collaborative industrial automation control scenes.

The invention discloses a whole-body collaborative voice control system and method for a humanoid robot, relates to the technical field of robots, and aims to solve the problems of semantic understanding superficial layer, action planning localization and safety control lagging in existing humanoid robot voice control. Through closed-loop cooperation of the multi-mode intention understanding module, the whole-body action planning module, the dynamic balance security arbiter and the microkernel security scheduler, a unified control architecture is constructed. According to the system, natural language instructions are deeply analyzed into whole-body motion constraints through a semantic-action mapping knowledge base, anthropomorphic collaborative motion trails are generated, pre-security verification is conducted through a boundary model based on Lyapunov stability, and finally hard real-time execution and full-cycle security guarding are achieved through a microkernel security scheduler. According to the method, direct conversion from natural language to safe, stable and anthropomorphic whole-body motion is realized, and the task execution capability and the interaction naturalness of the humanoid robot in a complex scene are remarkably improved.

The invention relates to a hot update control method and system for an industrial PLC (Programmable Logic Controller) of a microkernel operating system, belonging to the field of industrial controllers. A shadow instance is created by an isolated address space and is bound with a shadow I / O (Input / Output) mirror image and a shadow communication stack; capturing a containment point in the scanning period, wherein the containment point is located between input sampling completion and output submission; acquiring running state information from the current network instance, converting the running state information, and transmitting the converted running state information to the shadow instance; pre-operating the shadow instance in the isolation channel in an accelerated or constant-speed manner, and switching the I / O channel from the current network instance to a shadow I / O mirror image of the shadow instance at the next restraint point if the verification is passed; and continuing to run in parallel for a certain period, unloading the old instance if the continuous running is qualified, and executing rollback if an exception occurs. Depending on a microkernel operating system, shadow instances are drilled and switched under the controlled priority, the real-time performance and certainty are met, the time delay defect of periodic gap switching is overcome, and updating and switching are completed in a single scanning period or a plurality of scanning periods in an atomic mode.

The invention belongs to the field of network security, and relates to a method and a device for constructing a network security operating system, electronic equipment and a storage medium, and the method comprises the following steps: constructing an autonomously controllable improved microkernel infrastructure; based on the microkernel infrastructure, constructing a full-stack layered security control computing architecture base; constructing intelligent agent components, and deploying a multi-intelligent agent collaborative protection component system; integrating trusted computing and an integrity measurement verification system; performing dynamic adaptation and execution of multiple security policies; and a standardized safety evaluation and adaptive optimization closed loop is established. A trusted computing base is cut from a design source, so that the probability of occurrence of high-risk vulnerabilities is reduced; the real-time defense that the threat is changed and the strategy is changed is realized, and the blind area of the static strategy in resisting the unknown threat is made up; the malicious codes can be blocked before running, and the post passive situation that traditional security software only depends on a feature library for searching and killing is broken; and the contradiction between security capability solidification and threat dynamic evolution is fundamentally solved.

A method for managing a microvisor includes: issuing an API call to a microvisor agent to obtain a configuration template (CT) required to provision an LCS on an IHS; upon obtaining the CT, sending the CT to a microvisor kernel via the microvisor API; provisioning the LCS based on the CT; upon provisioning of the LCS and based on the microvisor kernel's request, initiating a guest BIOS of the LCS; notifying, via a GUI, an administrator about the provisioned LCS; after notifying the administrator: monitoring communication traffic of the LCS; analyzing the communication traffic to generate an analysis output; making, based on the analysis output, a determination that the activity is a malicious activity; and implementing, based on the determination, a security policy to disrupt a malicious user of the LCS.

The invention relates to an operating system environment construction technology, and discloses an ARM (Advanced RISC Machines) processor-oriented micro-kernel operating system confidential computing environment construction method, which is characterized in that a hierarchical system architecture is constructed, a virtual machine monitor and a confidential domain management monitor are decoupled at an ARM exception level EL2, and the virtual machine monitor and the confidential domain management monitor run in mutually isolated address spaces. The RMM is used as an independent module for dynamic loading, a management mechanism of a confidential computing domain is specially used, and the Hypervisor is only responsible for strategy scheduling, so that the defect that the Hypervisor is bloated in function in a traditional scheme is overcome. According to the method, the RMM is loaded through the security startup process during startup, the confidential virtual machine is dynamically created during running, mirror image security verification, memory encryption and other mechanisms are integrated, and finally the security domain is destroyed after the application is finished. The method has the advantages that a flexible and safe confidential computing environment conforming to the minimum privilege principle is provided for the microkernel system, and the method is particularly suitable for embedded scenes with high safety requirements such as the Internet of Things and industrial control.

The invention discloses a matrix multiplication optimization method and system for a matrix acceleration unit, and the method comprises the steps: jointly constructing a microkernel generation frame through a matrix multiplication instruction set provided by the matrix acceleration unit by adopting a thread rearrangement and address mapping strategy and a multi-stage pipeline mechanism, and generating a candidate microkernel set; feature extraction is carried out on an input matrix, a search space formed by a dynamic block and a scheduling strategy is constructed according to the features of the input matrix, an optimal microkernel is dynamically selected, and the scheduling strategy is dynamically adjusted; and constructing a performance prediction model, performing modeling and pruning on the candidate microkernel set, and preferentially selecting an optimal scheduling strategy combination in a search space to realize optimization of matrix multiplication oriented to the matrix acceleration unit. According to the method, the automation degree and adaptability of matrix multiplication optimization are remarkably improved, and the method is a universal high-performance optimization scheme which can be applied to various matrix multiplication architectures and supports a dynamic input scene.

The embodiment of the invention provides an operating system and a signal system cloud platform, and the operating system comprises an abstraction layer which is used for packaging the architecture-level drive of a computing node, architecture-level virtualization and the core of a CPU, and providing a packaging interface irrelevant to a hardware system for other layers; the microkernel layer is used for constructing various components of the microkernel by using the interface provided by the abstraction layer; and the application layer comprises a plurality of virtual machines running on a micro kernel, the virtual machines comprise real-time virtual machines and non-real-time virtual machines, and each real-time virtual machine is configured with resources isolated from other virtual machines. According to the technical scheme of the embodiment of the invention, the computing node hardware is abstracted, and the microkernel constructed based on the abstraction supports real-time and non-real-time virtual machines, so that applications with different security levels run in parallel on the same physical computer, and the utilization efficiency of hardware resources is improved.

The invention discloses an EtherCAT master station synchronous control method and system based on a microkernel operating system, and belongs to the technical field of industrial automation field bus control. According to the system, a microkernel architecture is adopted, an EtherCAT protocol stack and a universal network protocol stack are deployed as two independent user mode processes, and data interaction is carried out through an inter-process communication and shared memory mechanism provided by a microkernel. According to the method, through a bidirectional dynamic clock compensation mechanism, static compensation in an initialization stage and dynamic compensation in an operation stage of a system are combined; a dynamic task scheduling strategy based on load awareness is adopted, and the task execution sequence is dynamically adjusted according to the CPU utilization rate and the task priority monitored in real time; a hardware redundancy design of double clock sources and double communication links is introduced, and a progressive synchronous recovery strategy is adopted during switching. According to the invention, nanosecond-level synchronization precision and microsecond-level fault switching can be realized, and the method is suitable for industrial control scenes with extremely high requirements on real-time performance and reliability.

The invention discloses an industrial edge application dynamic updating method based on a microkernel, and relates to the field of industrial automation. Designing an industrial edge application based on the microkernel; and constructing a function block as a thread, and dynamically updating the industrial edge application by reconfiguring a thread entry point address. The microkernel architecture is mainly used for designing an operating system, the most basic core functions (scheduling, inter-process communication and address space management) in the operating system are realized, and all other functions such as a file system and a device driver are operated in a user layer as independent services. All services run in different address spaces in the form of threads, different services can be strictly isolated by combining access control based on Capability, and other services and kernels cannot be affected by collapse of any service. The micro-kernel architecture also adopts a modular design, and any independent module can realize thread-level loading and updating, so that dynamic updating and expansion are facilitated.

The invention relates to the technical field of computers, and provides a data transmission method and device in a microkernel operating system and electronic equipment. According to the method, in a microkernel operating system, after to-be-transmitted data is determined by a user mode, a data transmission address is determined in the user mode, the to-be-transmitted data is written into the data transmission address, and the data transmission address is sent to a kernel mode by using an IPC message; meanwhile, the user mode also utilizes a management mode command to enable the microkernel operating system to enter a management mode, so that the kernel mode can obtain the data to be transmitted from the data transmission address in the user mode, and high-efficiency transmission of large-capacity data in the user mode and the kernel mode is realized; the technical problem that the real-time performance of the operating system is reduced due to the fact that only a plurality of IPC messages can be used for transmitting large-capacity messages in the user mode and the kernel mode in the related technology is solved, the data transmission efficiency in the microkernel operating system is improved, and the user experience is improved.

The invention relates to the technical field of vehicle-mounted operating systems, and discloses a QNX-based vehicle-mounted operating system and an operating method.The system comprises a kernel architecture module used for providing a QNX microkernel architecture and reserving underlying functions in the microkernel architecture, and the underlying functions comprise a real-time task scheduling mechanism, a dynamic content distribution mechanism and an inter-process communication mechanism; the system service library module is used for packaging a bottom layer function and providing the bottom layer function to the upper layer function module through an API (Application Program Interface); and the upper layer function module is used for calling an API interface and realizing corresponding external service based on the bottom layer function. A QNX microkernel architecture is adopted in the vehicle-mounted operation system of the QNX, so that task scheduling can accurately and efficiently respond to various real-time requirements, and the real-time response capability of the vehicle-mounted operation system is improved.

The invention discloses a cluster computing resource allocation method. The method comprises the following steps: constructing a heterogeneous computing resource pool comprising an MT CPU, an FT CPU and an MTDSP cluster; an intelligent algorithm basic calculation library is deployed, hardware mapping of a deep learning algorithm is realized through an irregular matrix multiplication optimization module, and the irregular matrix multiplication optimization module comprises a microkernel automatic generation unit which dynamically generates an assembly instruction assembly line supporting three FMAC units according to matrix dimensions; the multi-core parallel strategy unit is used for providing M-dimensional and K-dimensional parallel calculation strategies and a dynamic scheduling mechanism; dynamically selecting a row block size parameter # imgabs0 # and a column block size parameter # imgabs1 # based on the matrix shape to carry out self-adaptive adjustment on the block size; physical resources are abstracted into containers or virtual machine instances through resource virtualization, and computing resources are dynamically allocated according to matrix dimension characteristics of the intelligent training module. According to the method, automatic resource deployment strategy generation and flexible computing resource scheduling are realized, and high-performance cluster computing resource allocation and deployment services are provided for users.

The invention discloses a virtual machine cross-operating system communication method, which comprises the following steps of: creating virtual machines by a microkernel hypervisor, distributing static physical resources for each virtual machine, setting a shared memory area for any two virtual machines, binding the shared memory area with the corresponding virtual machine, initiating communication by a sender virtual machine to write data into the shared memory area, and sending the data into the shared memory area. And the receiver virtual machine reads the data from the shared memory, so that cross-operating system communication of the virtual machine is realized. According to the method, the unique characteristics of a microkernel operating system are utilized, a reliable event notification mechanism is achieved by establishing an efficient communication channel between the virtual machines, meanwhile, a shared memory area between the virtual machines is strictly protected by utilizing a permission protection mechanism of a microkernel, and the service life of the virtual machines is prolonged. Only the virtual machine which is authorized and maps the memory area can be accessed, so that the problems of performance overhead and safety of communication between the virtual machines in the prior art are solved.

Provided in the embodiments of the present application are a chip resource elastic allocation method and apparatus based on an elastic microkernel. The method comprises: configuring a data structure of a partition scheduler of each adaptive partition and a budgeted CPU running time of each adaptive partition; on the basis of the data structure of each adaptive partition, scheduling a corresponding budgeted CPU running time for a task in each adaptive partition; and when the CPU running time actually used by any adaptive partition is less than the budgeted CPU running time thereof, allocating the remaining CPU running time of the adaptive partition to other adaptive partitions that have tasks waiting for scheduling. In the technical solution of the embodiments of the present application, chip resources are dynamically and elastically allocated by means of an elastic microkernel, and on the basis of demand changes of a computing task in each adaptive partition, computing resources are dynamically allocated and adjusted, thereby ensuring bursty CPU demands, and thus meeting computing power demands of different tasks.

The invention discloses a mine multi-robot adaptive cooperative control method based on a microkernel operating system, and belongs to the technical field of mine automation and robot cooperative control. The method is cooperatively realized by running a plurality of independent service processes on a microkernel operating system: a multi-modal perception fusion process dynamically adjusts the weight of a sensor according to environmental dust and illumination, and constructs a global semantic map; in the dynamic task allocation process, multi-agent deep reinforcement learning embedded with an attention mechanism is adopted, and task allocation is modeled as a partial observable Markov decision process for solving; the hybrid path planning process constructs a hierarchical cost model based on historical traffic data, and generates a path through a three-layer planning system; the dynamic conflict resolution process utilizes STCN to predict a trajectory, and realizes prospective conflict resolution in combination with a distributed negotiation auction mechanism; and the state synchronization process adopts a lightweight practical Byzantine fault-tolerant consensus to ensure that the states of the whole system are consistent. The real-time performance, the reliability and the intelligent level of the system are remarkably improved.

The embodiment of the invention provides a chip resource elastic allocation method and device based on an elastic microkernel. The method comprises the steps that a data structure of a partition scheduler of each self-adaptive partition and CPU running time estimated by each self-adaptive partition are configured; according to the data structure of each self-adaptive partition, scheduling the corresponding budget CPU running time for the task of each self-adaptive partition; and when the CPU running time actually used by any self-adaptive partition is lower than the estimated CPU running time, the remaining CPU running time of the self-adaptive partition is allocated to other self-adaptive partitions with tasks waiting for scheduling. According to the technical scheme, the chip resources are dynamically and elastically allocated through the elastic microkernel, the computing resources are dynamically allocated and adjusted according to the demand change of the computing task of each self-adaptive partition, the sudden CPU demand is guaranteed, and the demand of different tasks for computing power is met.

The embodiment of the invention discloses a dynamic configuration and hot update method and system for an ultramicro kernel operating system. The method comprises the following steps: if system state parameters exceed a preset parameter threshold value, acquiring target system state parameters exceeding the preset parameter threshold value, and adding timestamps to obtain a system state parameter data set; calculating a moving average value and a standard deviation, and determining an abnormal system state parameter according to the target system state parameter, the moving average value and the standard deviation; and determining the configuration parameter adjustment amount of the system module corresponding to the abnormal system state parameter, and adjusting the configuration parameter of the system module based on the configuration parameter adjustment amount. According to the scheme, dynamic updating of the configuration in the ultramicro kernel operating system is realized, the system performance is optimized, the resource utilization rate is improved, and optimization and upgrading are carried out under the condition of ensuring that the service is not interrupted.

The present invention relates to computer operating systems and proposes a novel OS architecture to provide compatibility between different generations of user applications and operating systems. In addition, the OS also implements a refined module-based structure for customization and full access to hardware functions. The OS and its kernel can be developed for new functions and hardware without damaging and rewriting existing software components and applications. This architecture is represented as ACOM - an evolving COM component architecture with invariant interfaces and their specifications, allowing components to freely program code implementations. It includes: the modular microkernel itself, the possibility for the OS to run containers of microkernels of different generations simultaneously, including / delegating or aggregating other required components; a special marshaling mechanism that reduces the size of headers by allowing executable files to have address pointers for a single system interface instance for dynamic function imports, without the need to recompile earlier executable files in an application according to the latest version of the OS system library.

Disclosed are a capability management method and apparatus (100), and a computer device, wherein same relate to permission management of a kernel object (O) in an operating system, for example, the permission management of a kernel object (O) in a micro-kernel architecture. Specifically, in the method, two types of information are stored in a capability node (CNode) of a capability owner: information (M2) for indicating the capability to perform granting and information (M1) for indicating the capability to be granted; a correlation between the capability of a grantor and the capability of a grantee is established by means of recording the two types of information; the copying of a capability is prevented during a capability granting process; and the deletion of a capability is prevented during the process of the grantor giving up the capability, thereby ensuring a deterministic latency while realizing capability recovery and granting. The method can be applied to a smart mobile phone system, an unmanned driving system, etc.

The application discloses a power industrial control safety protection system and method based on a microkernel active defense, wherein the system takes a microkernel isolation base as a minimum trusted computing base, allocates revocable communication endpoints and controlled mapping permissions to each protection domain, and provides base support for the isolation domain boundary and permission recovery in the active defense; in the method, the system is uniformly formatted by an input module to process field data and service requests and generate a request identifier, a request distribution service distributes the same request to an odd number of online executors for parallel processing, a single decision output available externally is generated, an executor scheduling service selects a candidate executor from a candidate protection domain pool and reconstructs an online user mode service cluster according to a feedback index by adopting a periodic rotation and event triggering strategy, and if the request distribution service, the consistency arbitration service or the executor scheduling service fails, a minimum bottom-up cleaning is performed by an active defense kernel state support module and a reestablishable state is entered.