436 results about "Proxy service" patented technology

Described herein are techniques for secure orchestration and publication control among agents (e.g., distributed agents), such as non-human identities (NHI), using cryptographic certificates, trust rules, and / or an Information-Centric Networking (ICN) architecture. In an example, a framework establishes identity for human and non-human identities-such as AI agents, services, and autonomous workloads—via cryptographically signed publications and / or collections. Trust policies can be defined and enforced through signed, verifiable trust rules, enabling access control, provenance validation, and / or policy delegation across federated domains. The disclosed techniques can enable multi-agent systems (MAS), zero-trust enforcement, and / or secure cross-domain communication using ICN-named role-based certificates and programmable trust shims. The disclosed techniques can also enable decentralized validation and selective replication of data while maintaining traceability and fine-grained control of agent behavior.

A dynamic experience curation platform utilizing AI and ML techniques, including neural networks and generative models, to enhance user interactions with content on the Internet. The platform employs an Experience Broker (EB) service to disintermediate user devices from the internet (or other content / information sources), improving security and user experience. It processes content requests, extracts relevant information, filters out unwanted content like ads, transforms, combines, and / or mutates existing content, and generates curated content consistent with user preferences and other constraints. The platform's generative AI process renders content into a user interface consistent with user preferences. It allows for personalized content delivery across devices, including virtual and augmented reality environments. The platform supports a spectrum of personalization, allowing users to fine-tune their content consumption experience. Additionally, it manages user sessions across devices and integrates various databases for storing user profiles, preferences, and other relevant information.

The invention provides a load balancing method and device for inference service, electronic equipment and a storage medium, and relates to the technical field of computers, and the method comprises the steps: obtaining the load state information of any inference service node in an inference service node set in a process that the inference service node set processes a session request; under the condition that the load state information indicates that the node pressure of any reasoning service node is greater than a pressure threshold value, creating proxy service corresponding to any reasoning service node; creating a copy set of the proxy service according to the node pressure; according to a request distribution strategy, distributing a session request corresponding to any reasoning service node to each copy in a copy set for processing, and executing a load balancing operation between the proxy service and each copy; and under the condition that the pressure information corresponding to the copy set meets the pressure requirement, determining a first copy in the copy set, releasing copies except the first copy in the copy set, and replacing the proxy service with the first copy.

The embodiments of the present disclosure relate to a permission management method and apparatus, and a device and a storage medium. The method provided herein comprises: receiving an application request from a proxy service, wherein the application request indicates permission information of a target application regarding a set of resources; sending to the proxy service an access token corresponding to the permission information; receiving from the target application an access request for a target resource, wherein the access request comprises the access token; determining whether the access request matches the permission information corresponding to the access token; and in response to the access request matching the permission information, authorizing the target application to access the target resource. In this way, the embodiments of the present disclosure can improve the security and flexibility of resource access.

The invention relates to a configuration data processing method and device, computer equipment, a storage medium and a computer program product. The method can be realized through a container technology, and comprises the following steps: obtaining service flow, and determining an application instance used for responding to the service flow; determining a target version label corresponding to the service flow based on a version release strategy issued in the version release process of the configuration data by the proxy service related to the application instance; requesting target configuration data matched with the target version label by the proxy service; and loading the target configuration data through the application instance, and responding to the service flow after the loading is completed. By adopting the method, the version control for the configuration data can be realized under the condition that the original business code of the application instance is not invaded.

Techniques for URL handling in Retrieval-Augmented Generation (RAG) systems are disclosed. A RAG system uses a generative AI response in the selection of links to include in a modified output from a RAG system. The links are based on URLs that are extracted from ingested documents. In response to a query, the system generates a response and then performs a matching operation to match a portion of the generated response to a URL in a URL-keyword mapping. The system finds a match between a portion of the generated response and a keyword that is associated with a URL, generates a hyperlink using the matched URL, and adds the hyperlink to the response.

A method and arrangement for commissioning an updated application for an industrial automation arrangement, wherein a first, existing application on a first controller and the updated application on a test device are executed in parallel, where local software (in particular a proxy service (proxy)) writes sensor data to the process image of a separate test device, where memory cells (e.g., I / O values, variables or registers) not yet belonging to the local process image of the test device are applied or allocated there, such that the “external” data and values of the productive system (first controller) are available in the local process image of the test device, without needing to change the production version of the application or the version of the application to be tested, and where the output values of the updated application are tested; if successful, the updated application is cleared for operation.

The invention discloses a test method and system for starting and stopping trusted proxy services of DCS (Distributed Control System) upper computers in batches, belonging to the technical field of industrial control, comprising the following steps: running a pre-configured executable program by using a multi-thread mechanism, reading a protocol file in the pre-configured executable program, and remotely connecting to each DCS upper computer in batches based on the protocol file; printing a process of connecting to each DCS upper computer and executing a command at a terminal in real time, and if a failure occurs, immediately returning failure reasons such as connection timeout and incorrect reply of a connected target host; after the operation of the pre-configured executable program is finished, returning the number of threads and a prompt that the operation of the threads is finished; and based on the real-time printing result and the returned prompt, checking the online state of each DCS upper computer, and verifying whether the batch online and offline functions take effect or not. According to the method, the trusted proxy service of the DCS upper computer is started and stopped in batches by one key, so that a large batch of equipment can be online and offline at the same time at one time.

The invention relates to the technical field of cross-machine-room data synchronization, and discloses a method for realizing data synchronization in a cross-machine-room distributed scene, which comprises the following steps of: S1, defining a synchronization target, and determining the type of data needing to be synchronized and the real-time requirement of synchronization; s2, message queues are established, and a message queue cluster is deployed in each machine room and used for temporarily storing data change messages to be synchronized; s3, data change capture: capturing a data change request sent to a local Redis cluster or a database by a source end application by utilizing a cache proxy service or database trigger technology; and S4, message publishing: converting the captured data change request into a message format, and publishing the data change request to a local message queue cluster. The invention provides a data synchronization implementation method in a cross-machine-room distributed scene, and solves the problems of high network delay, data inconsistency and low synchronization efficiency in cross-machine-room data synchronization.

The invention relates to the field of artificial intelligence, in particular to a heterogeneous GPU-oriented large model reasoning platform adaptation method and system. The method comprises the following steps: continuously and dynamically collecting and maintaining all available GPU resources in a server cluster and attribute and state information of a deployed reasoning acceleration framework instance through proxy service deployed in each server node; providing a single entry point to receive a reasoning service request, and analyzing the request to determine a large model needing reasoning; according to the analyzed large model needing reasoning and the currently aggregated resource information, selecting a reasoning acceleration framework instance which is optimal in load state and compatible for the request through a decision algorithm, and routing the task to the reasoning acceleration framework instance; heterogeneous response formats returned by different inference acceleration framework instances are converted and packaged into a unified standardized format, and then the unified standardized format is returned to a requester. Scattered and diversified computing resources are effectively utilized, and dependence on a single hardware manufacturer is reduced.

Techniques for leveraging the MASQUE protocol to provide remote clients with full application access to private enterprise resources are described herein. One or more network nodes may be configured to execute a MASQUE proxy service to provide a remote client device with full access to an enterprise / private application resource executing on an application node and hosted in an enterprise / application network, behind the MASQUE proxy service. In some examples, the MASQUE proxy service may execute on a single proxy node hosted at an edge of a cloud network or at an edge of an enterprise network. Additionally, or alternatively, a first instance of the MASQUE proxy service may execute on a first proxy node hosted at an edge of a cloud network (e.g., an ingress proxy node) and a second instance of the MASQUE proxy service may execute on a second proxy node hosted at an edge of the enterprise network.

The invention provides a simulation deduction method and system based on distributed parallel scheduling and a storage medium, and is applied to the technical field of data processing.The method comprises the steps that proxy services are deployed at a plurality of preset computing nodes, resource state information of all the nodes is dynamically collected, and a computing resource pool is obtained; arranging a pre-registered plug-in based on the data dependency relationship to obtain a simulation task process; in response to simulation scene configuration submitted by a user, generating a distributed scheduling task containing a fragmentation strategy; determining a plurality of sub-tasks corresponding to the distributed scheduling task based on the simulation task process; and based on the real-time load of the computing resource pool and the task priorities of the plurality of sub-tasks, respectively distributing the plurality of sub-tasks to a plurality of target computing nodes for task execution, and obtaining task execution result information. According to the method and the device, the time delay performance of distributed scheduling and the high availability performance of scheduling simulation tasks can be improved.

The invention provides a disaster recovery system, method and device for a large model service based on an AI agency, and the system comprises a large model service module which comprises a plurality of GPU servers, and is used for responding to the configuration request information of a user, and correspondingly configuring the service end points of the GPU servers; the detection state service module is used for monitoring the state information of the service end points of the large model service module and regularly updating the state information of the service end points of the large model service module stored in the state cache pool; and the AI proxy service module is used for sending a state query request of the large model service module to the detection state service module, receiving the returned state information of the service endpoints and analyzing the state information so as to determine the service endpoint of the abnormal GPU server, and automatically switching to the service endpoint of the normal GPU server. According to the invention, real-time monitoring, state analysis and automatic switching of the service endpoints of the large model service module are realized, and the disaster recovery capability of the system is improved.

The invention discloses an Android Service plug-in implementation method, an Android Service plug-in implementation system, Android Service plug-in implementation equipment and a medium. The Android Service plug-in implementation method specifically comprises the following steps: deploying proxy service in a host application, creating a standard interface IServiceInterface, and fusing host and plug-in resources by rewriting a context loading method of Android Service; constructing a service life cycle prediction model through a federated learning framework based on multi-device service behavior data collected during proxy service operation; generating a dynamic scheduling strategy based on an output result of the service life cycle prediction model in combination with the equipment electric quantity, the network type and the CPU load; and based on a dynamic scheduling strategy, writing the plug-in metadata hash, the federated model fingerprint and the device state snapshot into a block chain smart contract, and verifying the integrity of the plug-in through a light node on the chain to obtain a block chain verification result. According to the method, the stability and the reliability of the Service plug-in are improved, and powerful support is provided for the hot update function of the Android application.

A WEB end real-time remote connection monitoring method based on an RDP protocol comprises the following steps that a gateway server is maintained between an RDP client and a server, a firewall is configured, a routing rule is added, and RDP flow is forwarded to a local loopback address; the rear end of the gateway server starts an RDP proxy service, receives the RDP traffic forwarded by the firewall, and creates an independent thread to run a Flask application; after the RDP proxy service receives the RDP data packet, an RDP protocol data unit is analyzed according to a protocol format; establishing connection between the RDP proxy service and the Web front end through WebSocket, defining a corresponding event according to the analyzed PDU data type, and transmitting the event to the Web browser end in real time; and the Web end creates a bitmap cache and canvas cache canvas, and displays a remote picture and key data connected with the RDP on a Web page in real time. The scheme not only can effectively monitor the remote desktop session, but also has the advantages of high bandwidth utilization rate, low resource consumption, convenience in cross-platform deployment and the like.

Methods and systems for managing secure IoT data are described. A docker container system for managing secure Internet of Things (IoT) device data includes a machine control container configured to collect IoT device data from device data producing machines, a translation container configured to translate collected IoT device data into a common semantic format, client-specific container applications configured to aggregate, filter, and process translated IoT device data to generate processed IoT device data, and send the processed IoT device data to at least one of client applications and data storage, and a secure container proxy service configured to apply security-based protocols to the processed IoT device data. The client-specific container applications deployed absent the security-based protocols.

The present invention discloses a method and system of an internet proxy service, configuring the service in an ingress proxy—a virtual single access point receiving requests from a user's device. Users' requests to connect to a target web service on the internet may be directed through a plurality of different proxy service nodes being managed by the ingress proxy node with specific efficient functionalities. The ingress node routes the requests to the target web service through one of the remote proxies (outbound nodes), according to metadata in the user's request. The invention enables more easily / efficiently to select outbound nodes randomly or stick to a selected outbound node. These special functionalities are useful when scraping web data, e.g., it appears technically efficient to use TCP / IP ports. Furthermore, the invention enables one to add other important configurations and functionalities to proxy services using the SOCKS5 protocol.

A computing services environment may include application servers providing computing services including access to a database system, a unified metadata framework including autonomous agent definitions referencing action definitions defining a plurality of actions capable of being performed within the computing services environment, an agent service configured to instantiate an autonomous agent instance based on an autonomous agent definition, and an orchestration layer configured to determine an orchestration plan based on novel planning text generated by a generative language model. The orchestration plan may include a subset of the plurality of actions identified in the novel planning text. The computing services environment may execute the subset of the plurality of actions within the computing services environment.

The invention provides an asset information acquisition method and device, a server, a controller and a medium, and relates to the technical field of servers, and the method comprises the steps: transmitting a command frame in a predetermined protocol format to a switch supporting a management endpoint function through a side link; wherein the command frame is used for indicating a lightweight proxy service module solidified in switch firmware to execute the following operations: analyzing the command frame, and directly accessing a configuration space of downstream target peripheral component interconnection high-speed equipment according to an analysis result to obtain original asset information, converting the original asset information into asset information conforming to a predetermined protocol format, packaging the asset information in the predetermined protocol format in a response frame, and returning the response frame to the baseboard management controller; and receiving a response frame returned by the lightweight proxy service module, wherein the response frame comprises the asset information in the predetermined protocol format. According to the method and the device, the asset information is independently obtained based on the substrate management controller, and the dependence on a BIOS (Basic Input / Output System) and burning is avoided.

A system for cross-domain identity management (SCIM) proxy service is described. A first SCIM endpoint receives, from a first SCIM client, a first message that includes a SCIM resource. The first SCIM endpoint is associated with a customer of the SCIM proxy service. The SCIM proxy service is configured as a first SCIM service provider for the first SCIM client. The first message is validated. The first SCIM proxy service determines that a third-party application is in scope for the SCIM resource, where the SCIM proxy service is configured as a second SCIM client for the third-party application. The SCIM proxy service transmits a second message to a second SCIM endpoint of the third-party application, the second message including the SCIM resource.

A computing services environment may include application servers providing computing services including access to a database system, a unified metadata framework including autonomous agent definitions referencing action definitions defining a plurality of actions capable of being performed within the computing services environment, an agent service configured to instantiate an autonomous agent instance based on an autonomous agent definition, and an orchestration layer configured to determine an orchestration plan based on novel planning text generated by a generative language model. The orchestration plan may include a subset of the plurality of actions identified in the novel planning text. The computing services environment may execute the subset of the plurality of actions within the computing services environment.

The invention provides an interface proxy system and method based on Web visual configuration. The interface proxy system comprises a Web management platform, a proxy service engine and a data storage and synchronization module, the Web management platform is used for providing a visual Web interface for a user, so that the user performs function operation through the visual Web interface; wherein the function operation at least comprises configuration of a Mock rule, Mock interface preview, flow analysis, and use case recording and playback; the proxy service engine is used for carrying out request forwarding, Mock response and flow recording according to a Mock rule configured by the Web management platform; and the data storage and synchronization module is used for storing user information, project information, Mock rules, flow data and test cases through a MongoDB database. According to the invention, the interface Mock and traffic proxy requirements in a complex service scene can be covered, and the adaptability and expansibility of the system are improved.

A computing services environment may include application servers providing computing services including access to a database system, a unified metadata framework including autonomous agent definitions referencing action definitions defining a plurality of actions capable of being performed within the computing services environment, an agent service configured to instantiate an autonomous agent instance based on an autonomous agent definition, and an orchestration layer configured to determine an orchestration plan based on novel planning text generated by a generative language model. The orchestration plan may include a subset of the plurality of actions identified in the novel planning text. The computing services environment may execute the subset of the plurality of actions within the computing services environment.

This document describes systems and techniques directed at exposing application functionality using system-level large language model (LLM) agent services. An electronic device accesses one or more LLMs. An input prompt is received, the input prompt including a plurality of words in a natural-language format. The input prompt is used as an input for the one or more LLMs, which generates an inference output indicative of an intent of the input prompt. An action output is performed based on the intent of the input prompt. An application agent instantiated within an application interface generates the input prompt, parses the input prompt, receives the input prompt, or limits the action output.

The invention provides a request processing method, system and device based on configuration driving and a medium, and belongs to the technical field of network request processing.The method comprises the steps that a configuration template for client request processing is constructed in advance, the configuration template is filled in according to project requirements, the corresponding relation between a matching rule and modification operation is constructed, and a configuration file is generated; establishing client request processing logic: intercepting a client request, comparing the client request with a matching rule in the configuration file, and if the matching rule is met, executing a corresponding modification operation to modify the client request; client request processing logic is added in the new client request processing code; and for the existing client request processing code, establishing an agency service for importing the client request processing logic, and providing an agency service address for a client request processing code route. Unified management and dynamic adjustment of client requests are achieved through the configuration file, the requirement change can be rapidly adapted without modifying client codes, and the development and operation and maintenance efficiency is improved.

Techniques are disclosed for enabling cross-realm communications using a virtual bootstrap environment. A computing system can deploy a cross-realm proxy service in a virtual bootstrap environment. The cross-realm proxy service can receive, from a first service in a target region data center, a first request that includes a first credential of the first service. The first credential can be associated with a first namespace of the target region data center. The cross-realm proxy service can authenticate the first credential and, based at least in part on the authentication of the first credential, send a second request to a second service in a host region data center. The second request can include a second credential of the cross-realm proxy service. The second credential can be associated with a second namespace of the host region data center.

The invention discloses a method and a system for identifying general overseas VPN (Virtual Private Network) proxy traffic based on a TCP (Transmission Control Protocol). The method comprises the following steps: S1, carrying out switch TCP traffic mirroring and session SYN related time delay calculation; s2, performing hash table interaction and time delay calculation under downlink message load distinguishing; s3, on the basis of judgment of the time delay # imgabs0 # and a threshold value D, counting and logic insertion are carried out on the HashVPS hash table; s4, periodically triggering HashVPS traversal and VPS proxy service affirmation in a timing manner; the system is suitable for the general overseas VPN proxy traffic identification method based on the TCP protocol. Aiming at various TCP transmission VPN protocols, the method breaks through conventional identification limitation, is not afraid of encryption, disguising and mining proxy traffic characteristic differences, constructs a complete identification closed loop, accurately screens out proxy traffic, and builds a network security defense line.

A computing services environment may include application servers providing computing services including access to a database system, a unified metadata framework including autonomous agent definitions referencing action definitions defining a plurality of actions capable of being performed within the computing services environment, an agent service configured to instantiate an autonomous agent instance based on an autonomous agent definition, and an orchestration layer configured to determine an orchestration plan based on novel planning text generated by a generative language model. The orchestration plan may include a subset of the plurality of actions identified in the novel planning text. The computing services environment may execute the subset of the plurality of actions within the computing services environment.

The invention discloses a cross-network domain HTTP proxy method and device based on a message queue and a storage medium, and the method comprises the steps: serializing an HTTP request of a client into a request message in a ProtoBuf format through a local proxy server, and transmitting the request message to a message queue system, so that the message queue system forwards the request message to a remote proxy server; the remote proxy server deserializes a request message into an HTTP request and sends the HTTP request to the server, and then serializes an HTTP response returned by the server into a response message in a ProtoBuf format and sends the response message to the message queue system, so that the message queue system forwards the response message to the local proxy server; and deserializing the response message into an HTTP response through the local proxy service and returning the HTTP response to the client. The method improves the efficiency and reliability of cross-network domain communication, and can be widely applied to the technical field of computer networks.

The invention discloses a zero-contact identity transfer and login-free verification method and system based on a dynamic token, and the method comprises the steps: a platform obtains and audits the related information of a to-be-audited application submitted by a three-party system, issues the corresponding related information of the application, generates a key pair based on a random number and a current timestamp, and transmits the key pair to a server; the platform holds the private key and sends the public key to the DNS server; the platform obtains and analyzes a login request of a user, generates token related information, signs based on a private key, encrypts and updates a dynamic token, obtains an encrypted dynamic token, and sends the encrypted dynamic token to a DNS server; constructing an intelligent proxy service module, intercepting the login request, obtaining the encrypted dynamic token, and decrypting the encrypted dynamic token to obtain token related information; the token related information is verified, a bidirectional TLS channel is constructed, and a temporary session key is generated; and the information is transmitted to a three-party system through a TLS channel so as to complete login-free access. According to the invention, login-free access can be realized.