7 results about "Process isolation" patented technology

This invention discloses a microscopic interactive teaching terminal and its control method based on dual-process isolation, specifically relating to the fields of educational informatization and embedded systems technology. It includes a hardware layer and a software layer: the hardware layer includes a main control chip, an image sensor, a display screen, a wireless communication module, a storage module, and a power management module. The main control chip is configured as a Hisilicon Hi3516DV300 / 500. This invention completely decouples display and upload processes, resulting in high system stability. The two processes run independently; the crash of one process does not affect the other, and the daemon process can automatically recover, ensuring continuous system availability. This invention features rapid switching response, optimized network resources, and an independent upload process that can be flexibly scheduled according to teacher instructions, supporting multi-channel concurrency without affecting the reception and display of broadcast streams. This invention has strong applicability and can be widely applied to various interactive teaching terminals based on embedded platforms, especially suitable for microscopic teaching scenarios with high real-time requirements.

Process isolation for a PIM device includes: receiving, from a process, a call to allocate a virtual address space where the process stores a PIM configuration context; allocating the virtual address space including mapping a physical address space including PIM device configuration registers to the virtual address space only if the physical address space is not mapped to another process's virtual address space; and programming the PIM device configuration space according to the configuration context. When a PIM command is executed, a translation mechanism determines whether there is a valid mapping of a virtual address of the PIM command to a physical address of a PIM resource, such as a LIS entry. If a valid mapping exists, the translation is completed and the resource is accessed, but if there is not a valid mapping, the translation fails and the process is blocked from accessing the PIM resource.

The application discloses a kind of digital target mechanism construction method and system, the method includes: for each digital target machine instance Independent root file system directory is assigned, the root directory of target machine running process is switched to directory, to realize file system level isolation;For each digital target machine instance Independent network namespace is assigned, and the network namespace of digital target machine instance is connected with the virtual network of target range by virtual Ethernet, to realize network isolation;Custom pseudo-terminal daemon process is started on host side, and is bound to specified communication interface, and the bidirectional forwarding of terminal input and output is carried out through pseudo-terminal daemon process, to realize process isolation;The life cycle of digital target machine instance is uniformly managed.This scheme is based on the kernel capability of host operating system, and the combination mode of process level isolation, file system isolation and network isolation is used to realize the high-density, multi-instance, low-resource consumption digital target machine instance running environment.

The application discloses a beam plate storage full-process intelligent monitoring management system, which comprises a transaction request receiving module, an operation execution monitoring module, a transaction state judging module and a transaction compensation processing module. The application adopts the mode of combining the initial state snapshot with the asynchronous compensation workflow, automatically executes the rollback instruction when the operation fails, and effectively avoids the data state confusion problem. Through multi-source sensor data fusion and real-time comparison and judgment, the accurate monitoring and rapid response of the operation process are realized. Further, through the resource locking mechanism, the concurrent conflict is prevented, the automation level and the abnormal processing capability of the beam plate storage management are improved, and the problems of low operation efficiency and difficult state consistency guarantee caused by the process isolation, data update lag and insufficient abnormal response in the prior art are solved.

The invention discloses a cross-application content display decoupling method and system based on Activity View, and relates to the technical field of computer software and mobile terminals.The method comprises the steps that an Activity View container is instantiated by a host application program, and virtual display equipment associated with a graph buffer area is created through a management subsystem; requesting to run an export component of the client application on the virtual display device; the window manager draws a client interface to a graph buffer area; the graphic synthesizer reads data in the buffer area and remaps and synthesizes the data to a container area of a physical screen, the host intercepts an input event, coordinate transformation is carried out based on the geometric mapping relation, and a target event is generated and injected into a client input channel. Through the virtual display and texture synthesis technology, process isolation and UI seamless integration of the host and the client are achieved, cross-process interaction and life cycle synchronization are supported, and the decoupling performance and safety of the system are improved.

The invention discloses an intelligent edge security threat real-time interception and early warning method, which relates to the technical field of edge computing, and comprises the following steps: collecting operation data of process behavior logs, network flow characteristics and hardware state parameters through a built-in lightweight sensor interface of edge equipment; redundant information is removed through feature screening, and the data scale is simplified through dimension compression; deploying a lightweight neural network model optimized by channel pruning and knowledge distillation at edge equipment, reasoning the preprocessed data in real time and outputting a threat probability value; differential response is realized based on at least two levels of threat judgment thresholds, high-risk threats trigger local process isolation, network blocking and other rapid interception, and suspicious threats start early warning and directionally upload data to a cloud; and the cloud collaboration system utilizes a high-precision deep neural network to secondarily verify suspicious data, generates a threat feature update package, encrypts and distributes the threat feature update package to each edge device through federal learning, and realizes incremental update of an edge model.

The invention provides a map service system for a vehicle, and the system comprises a UI layer application unit which operates in a first process and is configured to provide a map display and user interaction interface; the map service layer application unit runs in a second process independent of the first process and comprises a general service interface, and the general service interface is configured to package a plurality of different map engine services into a unified map business logic service; the UI layer application unit and the map service layer application unit carry out cross-process communication through an AIDL interface, so that the map service layer application unit provides the unified map business logic service for the UI layer application unit. The map service is divided into the UI layer application unit and the map service layer application unit, process isolation is achieved through the AIDL, decoupling of the user interface and the underlying map service is achieved, and a user does not need to perceive the difference of different map engines.