539 results about "Proxy service" patented technology

Described herein are techniques for secure orchestration and publication control among agents (e.g., distributed agents), such as non-human identities (NHI), using cryptographic certificates, trust rules, and / or an Information-Centric Networking (ICN) architecture. In an example, a framework establishes identity for human and non-human identities-such as AI agents, services, and autonomous workloads—via cryptographically signed publications and / or collections. Trust policies can be defined and enforced through signed, verifiable trust rules, enabling access control, provenance validation, and / or policy delegation across federated domains. The disclosed techniques can enable multi-agent systems (MAS), zero-trust enforcement, and / or secure cross-domain communication using ICN-named role-based certificates and programmable trust shims. The disclosed techniques can also enable decentralized validation and selective replication of data while maintaining traceability and fine-grained control of agent behavior.

A robot fleet management platform includes a job configuration system that determines tasks to be performed by robots of a robot fleet based on a job request and a first fleet objective. A proxy service applies fleet configuration services to the tasks to produce a data structure. An intelligence layer activates intelligence services to produce a robot task and associated contextual information that facilitates robot selection and task ordering. A job workflow system generates a workflow defining a performance order of the tasks. A workflow simulation system simulates performance of the job request based on the workflow to recursively redefine the tasks, the data structure, or the workflow until the simulation result satisfies a second fleet objective. In response to the simulation result satisfying the set of fleet objectives, a plan generator generates a job execution plan based on the set of robot tasks, the data structure, and the workflow.

The invention discloses a power proxy service system and method based on artificial intelligence, and the method comprises the steps: collecting power data in real time through an intelligent electric meter and a sensor, and uploading the power data to a cloud platform through the Internet of Things for preprocessing and marking; predicting the power load by using time sequence analysis, regression, SVM and LSTM methods in combination with weather, season and holiday factors; power grid load dispatching is optimized through reinforcement learning or a genetic algorithm, and automatic allocation is achieved; the sensor monitors the state of the power equipment in real time, predicts the fault risk and gives an alarm in advance; the system provides energy-saving suggestions according to historical power consumption data of a user, and adjusts an equipment operation mode in real time; the intelligent customer service server pushes personalized electricity consumption suggestions based on natural language processing; an encryption technology and multiple identity authentication are adopted to guarantee data security, regular security audit and vulnerability repair; according to the electric power proxy service system and method based on artificial intelligence, integration with an AI system and construction and optimization of an intelligent power grid and renewable energy technology are promoted.

A dynamic experience curation platform utilizing AI and ML techniques, including neural networks and generative models, to enhance user interactions with content on the Internet. The platform employs an Experience Broker (EB) service to disintermediate user devices from the internet (or other content / information sources), improving security and user experience. It processes content requests, extracts relevant information, filters out unwanted content like ads, transforms, combines, and / or mutates existing content, and generates curated content consistent with user preferences and other constraints. The platform's generative AI process renders content into a user interface consistent with user preferences. It allows for personalized content delivery across devices, including virtual and augmented reality environments. The platform supports a spectrum of personalization, allowing users to fine-tune their content consumption experience. Additionally, it manages user sessions across devices and integrates various databases for storing user profiles, preferences, and other relevant information.

Methods are provided for a proxy infrastructure that serves as a bridge between an enterprise network and a computing machine of a user ensuring a chain of trust. The methods involve obtaining, from a client device, a request to navigate to one or more target devices of a remote enterprise network and locally authenticating the client device based on at least one of an identity of the client device and user credentials. The methods further involve generating a connection request for the client device to navigate to the one or more target devices based on the client device being locally authenticated and providing the connection request to a proxy service executing in the remote enterprise network. The proxy service authenticates an access to the one or more target devices based on device credentials while hiding the device credentials from the client device.

The invention provides a load balancing method and device for inference service, electronic equipment and a storage medium, and relates to the technical field of computers, and the method comprises the steps: obtaining the load state information of any inference service node in an inference service node set in a process that the inference service node set processes a session request; under the condition that the load state information indicates that the node pressure of any reasoning service node is greater than a pressure threshold value, creating proxy service corresponding to any reasoning service node; creating a copy set of the proxy service according to the node pressure; according to a request distribution strategy, distributing a session request corresponding to any reasoning service node to each copy in a copy set for processing, and executing a load balancing operation between the proxy service and each copy; and under the condition that the pressure information corresponding to the copy set meets the pressure requirement, determining a first copy in the copy set, releasing copies except the first copy in the copy set, and replacing the proxy service with the first copy.

The embodiments of the present disclosure relate to a permission management method and apparatus, and a device and a storage medium. The method provided herein comprises: receiving an application request from a proxy service, wherein the application request indicates permission information of a target application regarding a set of resources; sending to the proxy service an access token corresponding to the permission information; receiving from the target application an access request for a target resource, wherein the access request comprises the access token; determining whether the access request matches the permission information corresponding to the access token; and in response to the access request matching the permission information, authorizing the target application to access the target resource. In this way, the embodiments of the present disclosure can improve the security and flexibility of resource access.

The present application relates to a method, device, storage medium and electronic device for the financial audit of a database. The method includes: obtaining a financial audit rule base through a management node, and loading the financial audit rule base to all data nodes in real time; receiving a first SQL statement sent from a client through a computing node of the database, and sending the first SQL statement to a target data node of the database; determining whether the first SQL statement is a high-risk operation according to the financial audit rule base through the target data node, and reviewing the first SQL statement if it is determined that the first SQL statement is a high-risk operation and the corresponding processing method is a review process; terminating the first SQL statement if the review result of the first SQL statement is that execution is not allowed, and returning the processing result of the first SQL statement to the client. The present application solves the technical problems of insufficient security of financial audit implemented by database proxy services and insufficient flexibility of built-in interception based on databases.

The invention relates to a configuration data processing method and device, computer equipment, a storage medium and a computer program product. The method can be realized through a container technology, and comprises the following steps: obtaining service flow, and determining an application instance used for responding to the service flow; determining a target version label corresponding to the service flow based on a version release strategy issued in the version release process of the configuration data by the proxy service related to the application instance; requesting target configuration data matched with the target version label by the proxy service; and loading the target configuration data through the application instance, and responding to the service flow after the loading is completed. By adopting the method, the version control for the configuration data can be realized under the condition that the original business code of the application instance is not invaded.

Techniques for URL handling in Retrieval-Augmented Generation (RAG) systems are disclosed. A RAG system uses a generative AI response in the selection of links to include in a modified output from a RAG system. The links are based on URLs that are extracted from ingested documents. In response to a query, the system generates a response and then performs a matching operation to match a portion of the generated response to a URL in a URL-keyword mapping. The system finds a match between a portion of the generated response and a keyword that is associated with a URL, generates a hyperlink using the matched URL, and adds the hyperlink to the response.

A container mirror image generation system based on an agency-free service grid framework comprises a multi-dimensional rule configuration module, a full-link gray level isolation module, a micro-service strategy injection module, a byte enhancement module and a link unvarnished transmission implementation module. The advantages of a software toolkit (core tools and libraries required for developing, compiling, debugging and running application programs) and a service grid are combined, and non-invasive treatment logic injection, flexible expansibility and efficient performance optimization are provided. The service management in the micro-service architecture is simplified, the observability and safety of the system are improved, and the method has important significance for the modern micro-service environment.

A method and arrangement for commissioning an updated application for an industrial automation arrangement, wherein a first, existing application on a first controller and the updated application on a test device are executed in parallel, where local software (in particular a proxy service (proxy)) writes sensor data to the process image of a separate test device, where memory cells (e.g., I / O values, variables or registers) not yet belonging to the local process image of the test device are applied or allocated there, such that the “external” data and values of the productive system (first controller) are available in the local process image of the test device, without needing to change the production version of the application or the version of the application to be tested, and where the output values of the updated application are tested; if successful, the updated application is cleared for operation.

The invention discloses a test method and system for starting and stopping trusted proxy services of DCS (Distributed Control System) upper computers in batches, belonging to the technical field of industrial control, comprising the following steps: running a pre-configured executable program by using a multi-thread mechanism, reading a protocol file in the pre-configured executable program, and remotely connecting to each DCS upper computer in batches based on the protocol file; printing a process of connecting to each DCS upper computer and executing a command at a terminal in real time, and if a failure occurs, immediately returning failure reasons such as connection timeout and incorrect reply of a connected target host; after the operation of the pre-configured executable program is finished, returning the number of threads and a prompt that the operation of the threads is finished; and based on the real-time printing result and the returned prompt, checking the online state of each DCS upper computer, and verifying whether the batch online and offline functions take effect or not. According to the method, the trusted proxy service of the DCS upper computer is started and stopped in batches by one key, so that a large batch of equipment can be online and offline at the same time at one time.

The invention relates to the technical field of cross-machine-room data synchronization, and discloses a method for realizing data synchronization in a cross-machine-room distributed scene, which comprises the following steps of: S1, defining a synchronization target, and determining the type of data needing to be synchronized and the real-time requirement of synchronization; s2, message queues are established, and a message queue cluster is deployed in each machine room and used for temporarily storing data change messages to be synchronized; s3, data change capture: capturing a data change request sent to a local Redis cluster or a database by a source end application by utilizing a cache proxy service or database trigger technology; and S4, message publishing: converting the captured data change request into a message format, and publishing the data change request to a local message queue cluster. The invention provides a data synchronization implementation method in a cross-machine-room distributed scene, and solves the problems of high network delay, data inconsistency and low synchronization efficiency in cross-machine-room data synchronization.

The invention relates to the field of artificial intelligence, in particular to a heterogeneous GPU-oriented large model reasoning platform adaptation method and system. The method comprises the following steps: continuously and dynamically collecting and maintaining all available GPU resources in a server cluster and attribute and state information of a deployed reasoning acceleration framework instance through proxy service deployed in each server node; providing a single entry point to receive a reasoning service request, and analyzing the request to determine a large model needing reasoning; according to the analyzed large model needing reasoning and the currently aggregated resource information, selecting a reasoning acceleration framework instance which is optimal in load state and compatible for the request through a decision algorithm, and routing the task to the reasoning acceleration framework instance; heterogeneous response formats returned by different inference acceleration framework instances are converted and packaged into a unified standardized format, and then the unified standardized format is returned to a requester. Scattered and diversified computing resources are effectively utilized, and dependence on a single hardware manufacturer is reduced.

Techniques for leveraging the MASQUE protocol to provide remote clients with full application access to private enterprise resources are described herein. One or more network nodes may be configured to execute a MASQUE proxy service to provide a remote client device with full access to an enterprise / private application resource executing on an application node and hosted in an enterprise / application network, behind the MASQUE proxy service. In some examples, the MASQUE proxy service may execute on a single proxy node hosted at an edge of a cloud network or at an edge of an enterprise network. Additionally, or alternatively, a first instance of the MASQUE proxy service may execute on a first proxy node hosted at an edge of a cloud network (e.g., an ingress proxy node) and a second instance of the MASQUE proxy service may execute on a second proxy node hosted at an edge of the enterprise network.

The invention provides a simulation deduction method and system based on distributed parallel scheduling and a storage medium, and is applied to the technical field of data processing.The method comprises the steps that proxy services are deployed at a plurality of preset computing nodes, resource state information of all the nodes is dynamically collected, and a computing resource pool is obtained; arranging a pre-registered plug-in based on the data dependency relationship to obtain a simulation task process; in response to simulation scene configuration submitted by a user, generating a distributed scheduling task containing a fragmentation strategy; determining a plurality of sub-tasks corresponding to the distributed scheduling task based on the simulation task process; and based on the real-time load of the computing resource pool and the task priorities of the plurality of sub-tasks, respectively distributing the plurality of sub-tasks to a plurality of target computing nodes for task execution, and obtaining task execution result information. According to the method and the device, the time delay performance of distributed scheduling and the high availability performance of scheduling simulation tasks can be improved.

The invention provides a disaster recovery system, method and device for a large model service based on an AI agency, and the system comprises a large model service module which comprises a plurality of GPU servers, and is used for responding to the configuration request information of a user, and correspondingly configuring the service end points of the GPU servers; the detection state service module is used for monitoring the state information of the service end points of the large model service module and regularly updating the state information of the service end points of the large model service module stored in the state cache pool; and the AI proxy service module is used for sending a state query request of the large model service module to the detection state service module, receiving the returned state information of the service endpoints and analyzing the state information so as to determine the service endpoint of the abnormal GPU server, and automatically switching to the service endpoint of the normal GPU server. According to the invention, real-time monitoring, state analysis and automatic switching of the service endpoints of the large model service module are realized, and the disaster recovery capability of the system is improved.

The invention discloses an Android Service plug-in implementation method, an Android Service plug-in implementation system, Android Service plug-in implementation equipment and a medium. The Android Service plug-in implementation method specifically comprises the following steps: deploying proxy service in a host application, creating a standard interface IServiceInterface, and fusing host and plug-in resources by rewriting a context loading method of Android Service; constructing a service life cycle prediction model through a federated learning framework based on multi-device service behavior data collected during proxy service operation; generating a dynamic scheduling strategy based on an output result of the service life cycle prediction model in combination with the equipment electric quantity, the network type and the CPU load; and based on a dynamic scheduling strategy, writing the plug-in metadata hash, the federated model fingerprint and the device state snapshot into a block chain smart contract, and verifying the integrity of the plug-in through a light node on the chain to obtain a block chain verification result. According to the method, the stability and the reliability of the Service plug-in are improved, and powerful support is provided for the hot update function of the Android application.

The invention provides a data sharing method based on SM9 attribute-based proxy re-encryption. The method comprises the steps that a trusted center generates an attribute private key of a data owner and an attribute private key of a data user; the data owner encrypts the data by using the system main public key and a predefined access strategy to generate an original ciphertext and sends the original ciphertext to the proxy service provider; the proxy service provider re-encrypts the original ciphertext to generate a re-encrypted ciphertext and sends the re-encrypted ciphertext to the data user; and the data user decrypts the re-encrypted ciphertext according to the own attribute private key to obtain the plaintext. According to the method, the security and privacy of the user data are guaranteed, the updating of the access strategy is supported, cross-domain and cross-mechanism efficient data sharing is realized, the policy trend of password localization is catered, the data security of the user can be effectively guaranteed, the data value flow is promoted, and the method has a wide application scene and very high economic benefits.

A WEB end real-time remote connection monitoring method based on an RDP protocol comprises the following steps that a gateway server is maintained between an RDP client and a server, a firewall is configured, a routing rule is added, and RDP flow is forwarded to a local loopback address; the rear end of the gateway server starts an RDP proxy service, receives the RDP traffic forwarded by the firewall, and creates an independent thread to run a Flask application; after the RDP proxy service receives the RDP data packet, an RDP protocol data unit is analyzed according to a protocol format; establishing connection between the RDP proxy service and the Web front end through WebSocket, defining a corresponding event according to the analyzed PDU data type, and transmitting the event to the Web browser end in real time; and the Web end creates a bitmap cache and canvas cache canvas, and displays a remote picture and key data connected with the RDP on a Web page in real time. The scheme not only can effectively monitor the remote desktop session, but also has the advantages of high bandwidth utilization rate, low resource consumption, convenience in cross-platform deployment and the like.

The described technology is generally directed towards adaptive spectrum as a service, in which spectrum can be dynamically allocated to adapt to demand for wireless capacity. The demand for wireless capacity can be based on monitoring system state, and / or proactively predicted based on other system state such as time of day. Reallocated spectrum can be monitored for performance, to converge spectrum allocation to a more optimal state. Allocated spectrum can be relocated, increased or decreased, including by the use of citizens band radio service spectrum or other spectrum. Currently allocated spectrum can be adapted into modified allocated spectrum by an application program (xApp) coupled to a radio access network intelligent controller (RIC), a citizens broadband radio service device, a domain proxy service, and / or a user device. A user device can determine and request bandwidth, with spectrum allocated in response.

Methods and systems for managing secure IoT data are described. A docker container system for managing secure Internet of Things (IoT) device data includes a machine control container configured to collect IoT device data from device data producing machines, a translation container configured to translate collected IoT device data into a common semantic format, client-specific container applications configured to aggregate, filter, and process translated IoT device data to generate processed IoT device data, and send the processed IoT device data to at least one of client applications and data storage, and a secure container proxy service configured to apply security-based protocols to the processed IoT device data. The client-specific container applications deployed absent the security-based protocols.

A computer-implemented method of providing web security control integration in a system that utilizes at least one vendor proxy service for securely accessing the Internet. The method comprises receiving an instruction to update a web control policy or exception, generating a web control and exception update request, using a vendor agnostic API, wherein the web control and exception update request includes policy objects and content data, delivering the web control and exception data to a policy sync worker associated with a particular vendor proxy service, converting the web control and exception update request, via the policy sync worker into a format suited to the particular vendor proxy service, and delivering the converted web control and exception update request to the particular vendor proxy service associated with the policy sync worker to update the web control policy at the particular vendor proxy service.

The invention discloses an electric power forward gatekeeper reverse penetration method and device, a server, a medium and a product. The method comprises the following steps: splitting target unit data of a production control region into a plurality of byte segments when allowed, and generating a corresponding redundant code for each byte segment; creating a first user-defined header field for each byte segment, and correspondingly creating a second user-defined header field for each redundant code; encoding the byte segments and the redundant codes by using a preset encoding mode, putting the encoded byte segment data into a corresponding first user-defined header field, and putting the encoded redundant code data into a corresponding second user-defined header field, and constructing an HTTP request corresponding to each byte segment, and reversely transmitting the HTTP request to the management information large area proxy service through the forward gatekeeper. Therefore, the sequence and the integrity of the data packets can be ensured, the security risk introduced through a third-party proxy is reduced, meanwhile, a reverse proxy server does not need to be configured and managed, the intermediate links of data transmission are reduced, and the delay is reduced.

The present invention discloses a method and system of an internet proxy service, configuring the service in an ingress proxy—a virtual single access point receiving requests from a user's device. Users' requests to connect to a target web service on the internet may be directed through a plurality of different proxy service nodes being managed by the ingress proxy node with specific efficient functionalities. The ingress node routes the requests to the target web service through one of the remote proxies (outbound nodes), according to metadata in the user's request. The invention enables more easily / efficiently to select outbound nodes randomly or stick to a selected outbound node. These special functionalities are useful when scraping web data, e.g., it appears technically efficient to use TCP / IP ports. Furthermore, the invention enables one to add other important configurations and functionalities to proxy services using the SOCKS5 protocol.

A computing services environment may include application servers providing computing services including access to a database system, a unified metadata framework including autonomous agent definitions referencing action definitions defining a plurality of actions capable of being performed within the computing services environment, an agent service configured to instantiate an autonomous agent instance based on an autonomous agent definition, and an orchestration layer configured to determine an orchestration plan based on novel planning text generated by a generative language model. The orchestration plan may include a subset of the plurality of actions identified in the novel planning text. The computing services environment may execute the subset of the plurality of actions within the computing services environment.

The invention provides an asset information acquisition method and device, a server, a controller and a medium, and relates to the technical field of servers, and the method comprises the steps: transmitting a command frame in a predetermined protocol format to a switch supporting a management endpoint function through a side link; wherein the command frame is used for indicating a lightweight proxy service module solidified in switch firmware to execute the following operations: analyzing the command frame, and directly accessing a configuration space of downstream target peripheral component interconnection high-speed equipment according to an analysis result to obtain original asset information, converting the original asset information into asset information conforming to a predetermined protocol format, packaging the asset information in the predetermined protocol format in a response frame, and returning the response frame to the baseboard management controller; and receiving a response frame returned by the lightweight proxy service module, wherein the response frame comprises the asset information in the predetermined protocol format. According to the method and the device, the asset information is independently obtained based on the substrate management controller, and the dependence on a BIOS (Basic Input / Output System) and burning is avoided.

The invention provides a system for analyzing potential safety hazards of a transformer substation perimeter based on video images. The system is provided with a monitoring client, an Nginx agency service, a potential safety hazard monitoring application service, an intelligent algorithm analysis service, a video downloading service, a Mysql database, a casting time sequence database, a cache database Redis and supporting hardware. According to the system, intelligent algorithm service is deployed and operated, algorithm analysis service is started, and video downloading and analyzing service and potential safety hazard monitoring alarm are deployed and operated; real-time capturing is carried out on camera monitoring images of the transformer substation perimeter, algorithm analysis is carried out on environmental elements on the captured images, the purpose of automatically detecting potential safety hazard events or potential perimeter safety risks of the transformer substation perimeter is achieved, the detection accuracy and the intelligent level are continuously improved, and the detection efficiency is improved. The method provides more reliable guarantee for safe operation of the transformer substation, and has wide application prospects and important practical significance.

The invention discloses a system cross-network deployment method and device based on an intranet penetration technology and a medium, and the method comprises the steps: deploying an intermediate proxy service on a public network server, and configuring a port mapping rule; deploying a penetrating agent client at an intranet server side, and establishing persistent encryption connection between the penetrating agent client and a public network server; receiving an external network request initiated by an external access device based on the intermediate proxy service, and mapping the external network request to a corresponding service port of an intranet server through a port mapping rule; and responding to an external network request through the intranet server side, and returning an encrypted request response result to the external access equipment through the intermediate proxy service.