72 results about "Microkernel" patented technology

A system and method for real-time or near real-time multilingual language transformation in telecommunications environments using distributed artificial intelligence (Al). The system includes at least one processor configured to instantiate a plurality of Al agents, each corresponding to a user in a communication session, and to manage their operation via an Al-agent runtime adapter comprising a microkernel agent manager and a virtual machine layer. A language model abstraction layer enables access to language models and Al algorithm libraries through publish-subscribe interfaces. The system supports contextual transformation of speech based on user profile data such as sentiment, emotional tone, and cultural background. Execution can occur on telecommunication-class switches, edge devices, or general-purpose computing hardware. Al agents operate asynchronously, access shared or private memory, and produce personalized, bidirectional linguistic output. The architecture supports secure, scalable deployment across heterogeneous devices and networks.

The invention relates to an electric power mobile application security protection method based on a swan gap microkernel, which comprises the following steps of: S1, establishing a hardware trust root, and storing a device root key and a certificate chain by utilizing a non-tampering storage area built in a chip; s2, establishing a complete trusted boot chain based on a hardware root of trust, and verifying the integrity and credibility of the next layer by each layer from Bootloader to a swan microkernel and then to an application program; s3, constructing a triple authentication system based on user identity, equipment identity and biological characteristics, and performing user authentication; s4, according to a user authentication result, realizing fine-grained authority control based on an RBAC model and ABAC, and ensuring that authority check can be executed during resource access every time by utilizing an IPC security mechanism of a swan micro kernel; and S5, creating an independent execution environment for each power application according to the process isolation capability of the swan microkernel, and ensuring that memories among the applications cannot be mutually accessed through virtual address space isolation. The reliability of power mobile application safety protection is effectively improved.

The invention belongs to the technical field of information security, and relates to an endogenous security OS construction method and device based on intelligent agent and control computing, and the method comprises the steps: constructing an underlying security base based on a hardware trusted root and a microkernel; based on the bottom-layer security base, defining and deploying a hierarchical multi-intelligent agent with a specific function; establishing a multi-agent communication and interaction protocol stack for the multi-intelligent agent; based on a multi-agent communication and interaction protocol stack, an intelligent collaborative scheduling algorithm oriented to multi-objective optimization is developed; an endogenous security mechanism integrating active defense and passive response; and carrying out full-life-cycle security situation assessment on the endogenous security operation system. Dynamic intrusion detection can be carried out, an intrusion detection system (IDS) based on machine learning is deployed, a normal behavior mode of an intelligent agent is learned, and abnormal tampering behaviors, DoS attacks, communication anomalies and the like are identified.

The invention discloses a mobile storage security access control system and method based on a microkernel architecture, and relates to the technical field of data storage security. The system comprises a host end and a mobile storage device end. And the host end is provided with a special device driver and is used for sending the generated authentication data and the storage access instruction to the mobile storage device end through the virtual storage front-end device created by the special device driver. And the mobile storage device end is deployed with an operating system based on a microkernel architecture, creates a virtual storage rear-end device corresponding to the virtual storage front-end device, and is used for performing host identity and capability verification on the authentication data received by the virtual storage rear-end device, and receiving and executing a storage access instruction from the host end after the verification is passed. Communication connection is established between the virtual storage front-end device and the virtual storage rear-end device through a USB bus. According to the system, active and fine-grained power control of access to the mobile storage equipment end is realized.

The invention discloses a whole-body collaborative voice control system and method for a humanoid robot, relates to the technical field of robots, and aims to solve the problems of semantic understanding superficial layer, action planning localization and safety control lagging in existing humanoid robot voice control. Through closed-loop cooperation of the multi-mode intention understanding module, the whole-body action planning module, the dynamic balance security arbiter and the microkernel security scheduler, a unified control architecture is constructed. According to the system, natural language instructions are deeply analyzed into whole-body motion constraints through a semantic-action mapping knowledge base, anthropomorphic collaborative motion trails are generated, pre-security verification is conducted through a boundary model based on Lyapunov stability, and finally hard real-time execution and full-cycle security guarding are achieved through a microkernel security scheduler. According to the method, direct conversion from natural language to safe, stable and anthropomorphic whole-body motion is realized, and the task execution capability and the interaction naturalness of the humanoid robot in a complex scene are remarkably improved.

The invention relates to a hot update control method and system for an industrial PLC (Programmable Logic Controller) of a microkernel operating system, belonging to the field of industrial controllers. A shadow instance is created by an isolated address space and is bound with a shadow I / O (Input / Output) mirror image and a shadow communication stack; capturing a containment point in the scanning period, wherein the containment point is located between input sampling completion and output submission; acquiring running state information from the current network instance, converting the running state information, and transmitting the converted running state information to the shadow instance; pre-operating the shadow instance in the isolation channel in an accelerated or constant-speed manner, and switching the I / O channel from the current network instance to a shadow I / O mirror image of the shadow instance at the next restraint point if the verification is passed; and continuing to run in parallel for a certain period, unloading the old instance if the continuous running is qualified, and executing rollback if an exception occurs. Depending on a microkernel operating system, shadow instances are drilled and switched under the controlled priority, the real-time performance and certainty are met, the time delay defect of periodic gap switching is overcome, and updating and switching are completed in a single scanning period or a plurality of scanning periods in an atomic mode.

The invention belongs to the field of network security, and relates to a method and a device for constructing a network security operating system, electronic equipment and a storage medium, and the method comprises the following steps: constructing an autonomously controllable improved microkernel infrastructure; based on the microkernel infrastructure, constructing a full-stack layered security control computing architecture base; constructing intelligent agent components, and deploying a multi-intelligent agent collaborative protection component system; integrating trusted computing and an integrity measurement verification system; performing dynamic adaptation and execution of multiple security policies; and a standardized safety evaluation and adaptive optimization closed loop is established. A trusted computing base is cut from a design source, so that the probability of occurrence of high-risk vulnerabilities is reduced; the real-time defense that the threat is changed and the strategy is changed is realized, and the blind area of the static strategy in resisting the unknown threat is made up; the malicious codes can be blocked before running, and the post passive situation that traditional security software only depends on a feature library for searching and killing is broken; and the contradiction between security capability solidification and threat dynamic evolution is fundamentally solved.

The invention relates to an operating system environment construction technology, and discloses an ARM (Advanced RISC Machines) processor-oriented micro-kernel operating system confidential computing environment construction method, which is characterized in that a hierarchical system architecture is constructed, a virtual machine monitor and a confidential domain management monitor are decoupled at an ARM exception level EL2, and the virtual machine monitor and the confidential domain management monitor run in mutually isolated address spaces. The RMM is used as an independent module for dynamic loading, a management mechanism of a confidential computing domain is specially used, and the Hypervisor is only responsible for strategy scheduling, so that the defect that the Hypervisor is bloated in function in a traditional scheme is overcome. According to the method, the RMM is loaded through the security startup process during startup, the confidential virtual machine is dynamically created during running, mirror image security verification, memory encryption and other mechanisms are integrated, and finally the security domain is destroyed after the application is finished. The method has the advantages that a flexible and safe confidential computing environment conforming to the minimum privilege principle is provided for the microkernel system, and the method is particularly suitable for embedded scenes with high safety requirements such as the Internet of Things and industrial control.

The invention discloses an EtherCAT master station synchronous control method and system based on a microkernel operating system, and belongs to the technical field of industrial automation field bus control. According to the system, a microkernel architecture is adopted, an EtherCAT protocol stack and a universal network protocol stack are deployed as two independent user mode processes, and data interaction is carried out through an inter-process communication and shared memory mechanism provided by a microkernel. According to the method, through a bidirectional dynamic clock compensation mechanism, static compensation in an initialization stage and dynamic compensation in an operation stage of a system are combined; a dynamic task scheduling strategy based on load awareness is adopted, and the task execution sequence is dynamically adjusted according to the CPU utilization rate and the task priority monitored in real time; a hardware redundancy design of double clock sources and double communication links is introduced, and a progressive synchronous recovery strategy is adopted during switching. According to the invention, nanosecond-level synchronization precision and microsecond-level fault switching can be realized, and the method is suitable for industrial control scenes with extremely high requirements on real-time performance and reliability.

The invention discloses a mine multi-robot adaptive cooperative control method based on a microkernel operating system, and belongs to the technical field of mine automation and robot cooperative control. The method is cooperatively realized by running a plurality of independent service processes on a microkernel operating system: a multi-modal perception fusion process dynamically adjusts the weight of a sensor according to environmental dust and illumination, and constructs a global semantic map; in the dynamic task allocation process, multi-agent deep reinforcement learning embedded with an attention mechanism is adopted, and task allocation is modeled as a partial observable Markov decision process for solving; the hybrid path planning process constructs a hierarchical cost model based on historical traffic data, and generates a path through a three-layer planning system; the dynamic conflict resolution process utilizes STCN to predict a trajectory, and realizes prospective conflict resolution in combination with a distributed negotiation auction mechanism; and the state synchronization process adopts a lightweight practical Byzantine fault-tolerant consensus to ensure that the states of the whole system are consistent. The real-time performance, the reliability and the intelligent level of the system are remarkably improved.

Disclosed are a capability management method and apparatus (100), and a computer device, wherein same relate to permission management of a kernel object (O) in an operating system, for example, the permission management of a kernel object (O) in a micro-kernel architecture. Specifically, in the method, two types of information are stored in a capability node (CNode) of a capability owner: information (M2) for indicating the capability to perform granting and information (M1) for indicating the capability to be granted; a correlation between the capability of a grantor and the capability of a grantee is established by means of recording the two types of information; the copying of a capability is prevented during a capability granting process; and the deletion of a capability is prevented during the process of the grantor giving up the capability, thereby ensuring a deterministic latency while realizing capability recovery and granting. The method can be applied to a smart mobile phone system, an unmanned driving system, etc.

The application discloses a power industrial control safety protection system and method based on a microkernel active defense, wherein the system takes a microkernel isolation base as a minimum trusted computing base, allocates revocable communication endpoints and controlled mapping permissions to each protection domain, and provides base support for the isolation domain boundary and permission recovery in the active defense; in the method, the system is uniformly formatted by an input module to process field data and service requests and generate a request identifier, a request distribution service distributes the same request to an odd number of online executors for parallel processing, a single decision output available externally is generated, an executor scheduling service selects a candidate executor from a candidate protection domain pool and reconstructs an online user mode service cluster according to a feedback index by adopting a periodic rotation and event triggering strategy, and if the request distribution service, the consistency arbitration service or the executor scheduling service fails, a minimum bottom-up cleaning is performed by an active defense kernel state support module and a reestablishable state is entered.

The application discloses a mine multi-robot adaptive cooperative control method based on a microkernel operating system and belongs to the technical field of mine automation and robot cooperative control. The method cooperatively realizes the following processes by running multiple independent service processes on the microkernel operating system: a multi-modal perception fusion process dynamically adjusts sensor weights according to environmental dust and light, and constructs a global semantic map; a dynamic task allocation process models task allocation as a partially observable Markov decision process for solution by using a multi-agent deep reinforcement learning embedded with an attention mechanism; a hybrid path planning process constructs a hierarchical cost model based on historical traffic data, and generates a path through a three-layer planning system; a dynamic conflict resolution process uses an STCN to predict a trajectory, and realizes forward-looking conflict resolution in combination with a distributed negotiation auction mechanism; and a state synchronization process uses a lightweight practical Byzantine fault tolerance consensus to ensure that the states of the whole system are consistent. The application significantly improves the real-time performance, reliability and intelligence level of the system.

The application discloses an EtherCAT master station synchronization control method and system based on a microkernel operating system, and belongs to the technical field of industrial automation fieldbus control. The system adopts a microkernel architecture, deploys an EtherCAT protocol stack and a general network protocol stack as two independent user state processes, and carries out data interaction through an inter-process communication and shared memory mechanism provided by the microkernel. The method combines static compensation in the system initialization stage and dynamic compensation in the running stage through a bidirectional dynamic clock compensation mechanism, adopts a dynamic task scheduling strategy based on load sensing, dynamically adjusts the task execution order according to the real-time monitored CPU usage and task priority, introduces a hardware redundancy design of double clock sources and double communication links, and adopts a gradual synchronization recovery strategy during switching. The application can realize nanosecond-level synchronization accuracy and microsecond-level fault switching, and is suitable for industrial control scenes with extremely high real-time and reliability requirements.

Embodiments of the present disclosure relate to a device driver method and device based on a microkernel architecture, an electronic device and a storage medium. In at least one embodiment of the present disclosure, a master-slave thread architecture mode of a driver master thread and a device slave thread is adopted, at the time of starting an operating system, only the driver master thread is started, and the device slave thread is not started, so as to reduce the consumption of system resources by the device slave thread; and the driver master thread and the device slave thread provide device driver services through an RPC mode, specifically, after the driver master thread receives a first RPC message which is a device start request, the driver master thread starts the device slave thread of the device node, and then after the device slave thread determines that a second RPC message received is a device operation request, the device node is operated correspondingly, so as to solve the problem that in the current microkernel architecture, an application cannot directly call a device driver.

The invention provides a system service calling method which is applied to a kernel under a microkernel architecture. In the system service calling method, when a kernel obtains a request of calling a certain system service for the first time by a thread, the kernel establishes connection with an execution entity of the system service and calls the execution entity to process the request, and after the execution entity finishes processing of the request, the execution entity calls the execution entity to process the request. The kernel does not clean the connection with the execution entity, but updates the state of the execution entity to a hosted state, thereby retaining the correspondence between the thread and the execution entity. Thus, when the thread continues to call the system service next time, the kernel can quickly call the execution entity in the hosting state to process the request of the thread based on the reserved corresponding relation and the connection between the kernel and the execution entity, and therefore the efficiency of calling the system service by the thread is improved.

The invention provides an inter-process communication method and device for a microkernel operating system, and the method comprises the steps: registering a key instruction page and a stack page in an initialization stage of a service process; constructing a process prefetching set according to the registered key instruction page and stack page; and in an inter-process communication initiating stage, loading the target page table items in the process prefetching set to the user process fast table so as to perform inter-process communication. According to the invention, the efficiency of inter-process communication of the system can be improved, and communication delay is reduced.

The invention discloses a numerical simulation program design method based on a microkernel architecture and related equipment, and relates to the technical field of numerical program development, and the key points of the technical scheme are as follows: packaging at least one basic component which is not related to a numerical simulation service in a nuclear reactor numerical simulation program to obtain at least one base class; constructing a microkernel based on the base class; setting at least one service expansion point for a corresponding base class in the microkernel according to business logic in different numerical simulation businesses, and abstracting each service expansion point into a virtual function interface; configuring a plug-in for the virtual function interface; calling a plug-in registration macro function to register each plug-in, and storing registration information into a plug-in registry; parameters input by a user are read from the file blocks, and entity plug-in class objects are constructed in combination with registration information in the plug-in registry; and according to the entity plug-in class object, loading the plug-in to a base class corresponding to the microkernel for assembly, and forming numerical simulation programs corresponding to different numerical simulation services.

The invention belongs to the related technical field of large-scale graph matching, and particularly relates to a suspicious transaction sub-graph matching calculation method based on UPMEM storage and calculation integrated equipment, which comprises the following steps: generating sub-tasks according to the granularity of candidate vertex-neighbor vertex sub-segments, estimating the cost of the sub-tasks by using a recursive price expansion model, and executing logic segmentation on high-out-degree candidates; and then statically distributing the fine-grained subtasks to a plurality of DPUs by adopting a greedy method. In a single DPU, threads are specially divided into a loading type and a computing type, and asynchronous data flow is achieved through DMA prefetching and lockless annular FIFO; and in the set intersection stage, distributing to microkernels such as bitmap parallelism, bipartite detection and double-pointer merging according to vertex degree topology. Through strict evaluation, the scheme effectively relieves load unevenness and access delay, reduces control divergence, is suitable for multi-seed graph mode query, and has the advantages of high throughput, expandability and stability.

The application relates to the technical field of microkernel, in particular to a microkernel system testing method and device, computer equipment and a storage medium. The method comprises the following steps: obtaining source code of a microkernel system; performing compilation processing on the source code to obtain a target symbol table, wherein the target symbol table comprises attribute information of each static object in the source code; obtaining a test script of the microkernel system; updating the test script according to the target symbol table to obtain an updated test script; and testing the microkernel system according to the updated test script and the source code. The application can call the corresponding static objects in the microkernel system without modifying the source code of the microkernel system.

This disclosure provides a virtual machine runtime system, method, processor, and electronic device, relating to the field of virtual machine technology. The system includes: a virtual machine monitor, which runs at a first exception level and is used to create virtual machines using a virtualization environment provided by a microkernel, and to handle interrupt events associated with the virtual machines according to notifications from the microkernel; a virtual machine, which runs at a second exception level; and a microkernel, which runs at a third exception level and is used to provide the necessary virtualization environment for the virtual machine monitor to create the virtual machines, and to intercept interrupt events associated with the virtual machines and notify the virtual machine monitor to handle the interrupt events; the privilege levels of the first exception level, the second exception level, and the third exception level increase sequentially. This disclosure aims to solve the problems of centralized privileges and high resource consumption in existing virtual machine runtime systems.

The invention discloses a hardware equipment control method and device, equipment and a computer storage medium. The method comprises the following steps: under the condition of detecting that target equipment is opened, calling a target interface in a uniform interface through a user process, and sending operation information corresponding to the target interface to a driving process. And under the condition that the driving process receives the operation information, executing a corresponding operation on the target equipment based on the operation information to obtain an operation result. And returning an operation result to the user process through the driving process. According to the embodiment of the invention, the user process sends the operation information corresponding to the target interface to the driving process by calling the uniform interface of the microkernel operating system, so that the driving process executes the corresponding operation on the target equipment based on the operation information to obtain the operation result, and the hardware equipment is controlled based on the microkernel operating system.

The invention provides a user-defined embedded control system, which comprises a hardware layer and a software layer, and is characterized in that the hardware layer comprises a core processing unit and a dynamic interface module; wherein the core processing unit comprises an RISC-V MCU main control module used for executing general tasks, an FPGA co-processing module used for realizing hardware reconstruction and an NPU acceleration module used for processing machine learning reasoning, the dynamic interface module comprises a programmable GPIO matrix and a multi-protocol communication controller, and the multi-protocol communication controller supports CAN / EtherCAT switching. Compared with the prior art, the method has the advantages that the detachable function package is arranged and allows a user to load / unload function modules (such as an EtherCAT protocol stack) according to needs, the microkernel architecture provides a highly customizable operation environment for upper-layer applications by minimizing core functions, the NPU load threshold value can be configured (default is 70%), and the user experience is improved. And the system is allowed to adjust a load strategy according to an application scene.

The invention relates to the technical field of automobile micro-service architectures, and discloses a three-layer forward service architecture based on a micro-kernel Hypervisor, which constructs a three-layer SOA architecture based on the micro-kernel Hypervisor, particularly provides a uniform interface and protocol for cross-virtual-machine service calling by using an SOAL2 logic bus, and improves the service performance of the micro-kernel Hypervisor, so that the service performance of the micro-kernel Hypervisor is improved, and the service performance of the micro-kernel Hypervisor is improved. Bus communication depends on bottom-layer security support of a microkernel Hypervisor, and services of different domains can be freely combined and cooperatively work on the premise of ensuring traffic safety, so that the technical problem that SOA (Service Oriented Architecture) cannot be fully coordinated in a virtualized environment is thoroughly solved, and the service security of the SOA in the virtualized environment is improved. And the function integration capability and the response real-time performance of the system are improved.

The application provides a restart method of an operating system, a vehicle control device, a vehicle, a medium and a product, and relates to the technical field of vehicles. The method is applied to a vehicle control device, the vehicle control device comprises a virtual machine monitor, a first operating system and a second operating system running on the virtual machine monitor, the first operating system adopts a microkernel architecture, and the second operating system adopts a macrokernel architecture. The method comprises the following steps: in the process of running the first operating system and the second operating system on the virtual machine monitor, acquiring first to-be-tested information and second to-be-tested information; in response to the first to-be-tested information satisfying a corresponding restart condition, restarting the first operating system according to a first restart process; and in response to the second to-be-tested information satisfying a corresponding restart condition, restarting the first operating system according to a second restart process. The above-mentioned method can realize independent restart of the first operating system, does not affect the second operating system to continuously perform a control task, and improves the reliability of the operation of the vehicle control device.

The application discloses a method for remotely capturing process information, related equipment and a storage medium, and the method comprises the following steps: receiving a stack capture instruction issued by a server for a target process, wherein the target process runs in a microkernel operating system; in response to the stack capture instruction, determining a target task object associated with the target process in the microkernel; determining the call stack corresponding to each thread and the thread attribute according to the thread list in the target task object, wherein the thread attribute comprises thread CPU occupancy; generating the stack capture information of the target process according to the call stack and the thread attribute of each thread; and uploading the stack capture information to a content distribution network, so that the server obtains the stack capture information from the content distribution network. The application realizes remote real-time acquisition of the CPU occupancy and the call stack of all threads of a process in a terminal, which is beneficial to developers to solve the problem of excessively high CPU occupancy of a front-end application program in a timely manner.

The application discloses a kind of audio virtualization methods based on microkernel, it is related to audio virtualization technical field, to solve the problem of slow response speed, insufficient real-time of existing virtualization audio technology under macrokernel architecture, by significantly improving the efficiency and real-time of virtual audio device processing audio signal.DMA technology is used to make the audio signal in the virtual machine bypass the traditional virtual audio processing flow, directly and quickly transmit to the hardware audio device through the virtual machine controller for playing, significantly reduce the processing delay of audio signal, guarantee the purity and coherence of sound quality.Stronger interrupt mechanism is used to realize the control and communication between virtualization audio device and hardware audio device, to ensure that the system can respond quickly when emergency or high-priority audio event occurs, realize the instant playback of audio signal.

The application discloses a humanoid robot full-body cooperative voice control system and method, relates to the technical field of robots, and aims at the problems of semantic understanding of the existing humanoid robot voice control being shallow, action planning being localized, and safety control being lagged. The application constructs a unified control architecture through the closed-loop cooperation of a multi-modal intention understanding module, a full-body action planning module, a dynamic balance safety arbitrator and a microkernel safety scheduler. The system deeply analyzes natural language instructions into full-body movement constraints through a semantic-action mapping knowledge base, generates a personified cooperative movement trajectory, carries out prior safety checking by using a boundary model based on Lyapunov stability, and finally realizes hard real-time execution and full-cycle safety guardianship through the microkernel safety scheduler. The application realizes direct conversion from natural language to safe, stable and personified full-body movement, and significantly improves the task execution capability and interactive naturalness of the humanoid robot in a complex scene.

This invention relates to the field of mine hoist control technology, and particularly to a mine hoist control system and method based on a microkernel controller. The system includes a main controller, a microkernel operating system, a communication protocol stack, a distributed I / O module, a human-machine interface unit, a redundancy management module, and a control command generation unit. The main controller acquires the operating status of the mine hoist in real time through sensors installed on the hoist. After processing by algorithms within the microkernel operating system, control commands are generated by the control command generation unit to drive the motor and brakes to execute precise actions, achieving safe and efficient hoisting operation. This invention achieves full-chain autonomous control from hardware and real-time operating system to control algorithms and logic. The system possesses high reliability, strong real-time performance, and comprehensive safety protection capabilities, ensuring the safe and efficient operation of mine hoisting operations. Compared to existing technologies, it has excellent market prospects and development potential.

The application belongs to the technical field of information security, and relates to an endogenous security OS construction method and device based on intelligent agents and control computing, which comprises the following steps: constructing a bottom-layer security base based on a hardware trusted root and a microkernel; defining and deploying hierarchical and function-specific multi-intelligent agent bodies based on the bottom-layer security base; establishing a multi-agent communication and interaction protocol stack for the multi-intelligent agent bodies; developing an intelligent collaborative scheduling algorithm for multi-objective optimization based on the multi-agent communication and interaction protocol stack; fusing an endogenous security mechanism of active defense and passive response; and performing a full-life-cycle security situation assessment on the endogenous security operating system. Dynamic intrusion detection can be performed, an intrusion detection system (IDS) based on machine learning is deployed, normal behavior patterns of intelligent agents are learned, and abnormal tampering behaviors, DoS attacks, communication abnormalities and the like are identified.