356 results about "Resource isolation" patented technology

The invention discloses an industrial scene-oriented data acquisition system and an industrial scene-oriented data acquisition method. According to the invention, through the multi-level dynamic optimization design, the data acquisition efficiency and the system reliability in a complex environment are significantly improved. The system dynamically allocates thread resources based on the real-time communication state of the equipment, realizes stable throughput under a high-concurrency scene in combination with core binding and polling scheduling strategies, and ensures that millisecond-level response is still maintained when 10000-level equipment is accessed. The memory preloading and protocol template technology eliminates jitter during operation, the hierarchical resource isolation mechanism provides deterministic guarantee for key control instructions, and interruption of the production process due to data delay or resource competition is avoided. The data flow delay is further reduced through multi-protocol efficient analysis and intelligent cache management, seamless compatibility of heterogeneous equipment in a hybrid networking scene is supported, and the strict requirements of continuous production industries such as steel and chemical engineering for real-time performance and stability are met.

The invention discloses a data space multi-tenant isolation method and system based on a zero-trust architecture, particularly relates to the technical field of multi-tenant authority control, and is used for solving the problems of cross-tenant authority conflict and insufficient resource isolation caused by frequent strategy adjustment in the prior art. The method comprises the following steps: constructing a strategy dependence topological structure by acquiring a dynamic access strategy change request in real time so as to model a dependency relationship among a tenant permission node, a resource access path node and a time sequence connection edge; dynamically marking a resource sensitivity weight based on a historical access behavior, and analyzing and screening high-sensitivity conflict nodes in combination with a logic coupling degree; separating an independent resource access chain which directly depends on through reverse backtracking, and generating a hierarchical permission correction rule; finally, rules are injected, and blocking conditions are triggered to execute hierarchical verification and risk marking on the cross-tenant operation requests; the influence of strategy execution on a global system is reduced, and the permission boundary clearness and resource security of a multi-tenant data space are ensured.

The invention relates to the technical field of computing power resources, and discloses a flexible allocation monitoring system for computing power resources, which defines a clear resource use boundary for different types of tasks through a container-level QoS strategy of a resource isolation unit, and adjusts resource allocation in real time in combination with a dynamic partition management module, thereby avoiding resource waste in a traditional fixed allocation mode, and improving the resource allocation efficiency. The dynamic preemption unit accurately screens low-priority tasks for resource recovery through a multi-factor decision engine and a preemption cost evaluation algorithm, in 50 concurrent task scenes, the resource preemption response time is shortened to 20-35 ms and is improved by 50%-70% compared with 70-100 ms of Docker / K8s, the blocking duration of high-priority tasks is reduced to 15-25 ms from 80-120 ms, and the core service interruption risk is greatly reduced.

The invention relates to a DevOps-oriented containerized test environment deployment system and method, and belongs to the technical field of Internet. A multi-service test environment is defined through a YAML file, environment variables are managed in combination with an. Env configuration file, dependency is optimized through dependency layering and a cache library, a container mirror image is constructed, and a container cluster is started; managing multiple tasks through a centralized scheduling architecture, and realizing resource isolation of a container cluster by using Cgroup; adjusting the number of container instances in real time based on a capacity expansion and contraction mechanism; a bridging network is used for automatically distributing a container IP, a built-in domain name system analyzes a service name dynamic discovery service, and rapid reconstruction of a containerized test environment is achieved. According to the method, a YAML and environment variable separation mechanism is adopted, real-time loading of development, testing and production environment configuration is supported, the deployment time is shortened to the second level, the resource utilization rate is increased to 90% from 60%, the multi-service communication difference is eliminated, and efficient interconnection between containers is ensured.

The invention belongs to the technical field of resource management and scheduling, and particularly relates to an intelligent AI platform resource management and scheduling system based on K8s. Comprising a dynamic resource prediction module, a K8s cluster management and resource scheduling module, a resource monitoring and analysis module, a resource isolation and sharing module, a computing power resource allocation module, a security enhanced mirror image warehouse and a reasoning early warning system. Through the synergistic effect of the modules, the technical problems of inflexible resource scheduling, insufficient resource monitoring, incomplete user resource isolation, limited computing power distribution, complex mirror image management and incomplete operation and maintenance management of an AI platform in the prior art are solved.

The invention provides a distributed computing platform which is oriented to a big data scene and is based on a Serverless framework. The platform comprises an elastic computing resource pool composed of multiple nodes, and computing power resources can be supplied as required by combining a dual capacity expansion and contraction mechanism and intelligent resource analysis scheduling. The platform adopts a Serverless task operation model, simplifies big data application deployment, and realizes performance isolation in a multi-tenant scene through uniform resource management. In addition, the visual monitoring platform is assisted by intelligent analysis, and decision support is provided for operation and maintenance management. Compared with traditional static resource scheduling, the method has the advantages that the resource utilization rate can be remarkably increased, the operation and maintenance complexity is reduced, powerful resource isolation and fairness guarantee are provided in a multi-tenant environment, and technical innovation and application expansion of distributed computing in the big data era are effectively supported.

The invention discloses a low-code platform and Wasm high-performance computing integration system and method, and relates to the technical field of front-end development. In order to solve the problems that an existing low-code platform is limited in calculation performance and poor in security isolation performance, the scheme adopted by the invention comprises five modules: a description and registration module establishes a metadata structure for a Wasm module; the dynamic loading and asynchronous compiling module realizes loading as required and compiling during operation, and supports caching, version verification and hot replacement; the authority sandbox and resource isolation module constructs a security environment based on authority configuration to prevent illegal operation; the parameter binding and safety bridging module encapsulates a uniform interface to realize standardized interaction; the packaging and life cycle management module packages the module into a visual component, and supports full life cycle management. According to the method, high-performance, high-safety and visual integration of the Wasm module in a low-code platform is realized.

The present disclosure provides a resilient (radio) access network ((R)AN) slicing framework encompassing a resource planning engine and distributed dynamic slice-aware scheduling modules at one or more network access nodes, edge compute nodes, or cloud computing service. The resilient (R)AN slicing framework includes resource planning and slice-aware scheduling, as well as signaling exchanges for provisioning resilient (R)AN slicing. The intelligent (R)AN slicing framework can realize resource isolation in a more efficient and agile manner than existing network slicing technologies. Other embodiments may be described and / or claimed.

The invention discloses a K8s-based cluster computing power resource isolation and scheduling method and system. The method comprises the following steps: when creating a cluster account, dividing the cluster account according to resource groups; node Selector directional scheduling is combined to realize tenant cluster resource isolation; the custom controller monitors a cluster user binding resource group event; and the user-defined controller monitors the cluster node update event to modify the resource group. According to the method, the resource group can effectively divide the resources in the current cluster, corresponding tenants are provided according to different computing power requirements, and nodes, accounts, labels and the like in the resource group are effectively managed by relying on a K8s CRD self-defined resource mechanism; the characteristic that a daemon process set ensures that a Pod runs on all nodes under a cluster is utilized, a service runs on the Pod to execute a GPU script to read the card number, and a K8s API is called to create a tag marked by the card number, so that subsequent resource group division is facilitated.

The invention discloses a multi-user-oriented smart home resource conflict negotiation and allocation method, which comprises the following steps of: detecting equipment use conflicts caused by at least two users by constructing a structural causal model for representing a causal relationship of a plurality of variables in a smart home environment, generating a candidate decision strategy set comprising resource isolation and alternative compensation, and allocating the candidate decision strategy set to the smart home environment; carrying out anti-fact inference by utilizing a causal model, quantifying the causal effect of each strategy on the user state, and selecting an optimal strategy for execution based on a minimum negative effect and a Pareto optimal principle; besides, the method ensures that the system dynamically adapts to user habit changes through online monitoring of prediction errors and correction of the causal model, and compared with the prior art, the method improves the decision accuracy through causal reasoning, realizes fair and personalized user resource allocation, and improves the user experience and long-term effectiveness of the smart home system.

The invention discloses a cache partition resource scheduling method and device, electronic equipment, a medium and a product, and relates to the technical field of computer storage, and the method comprises the following steps: firstly obtaining a multi-cache partition resource use condition, and providing a basis for resource adjustment; the to-be-expanded partition accurately meets the resource requirements, and the target partition determines the partition capable of deploying the idle resources, so that the traditional situation that the idle resources are difficult to use is changed; and then migrating part of resources of the target partition to the partition to be expanded to realize cache resource redistribution. Compared with a traditional scheme that reserved resources of all partitions are isolated, the method supports cross-region dynamic circulation of the resources, loads are scheduled and matched according to actual use conditions, and limitation is avoided; and dynamic balance and efficient utilization of cache resources are realized through pre-allocation of predictive scheduling.

The invention discloses a fine-grained slice isolation method in an air-sea cross-domain network, which belongs to the technical field of network communication, and comprises the following steps: firstly collecting resource data to construct a cross-domain heterogeneous resource map; selecting an optimal slice deployment scheme through K shortest path screening and node matching decision; then realizing slice hard isolation by means of a resource data isolation technology, a network resource isolation technology and a wireless link resource isolation technology; and finally, monitoring the operation state, and triggering dynamic adjustment of the scheme when the operation state is abnormal. The system comprises three modules, and seamless switching of slices is guaranteed. Through a deterministic optimization algorithm and a multi-level isolation mechanism, accurate and efficient allocation and strict isolation of heterogeneous resources are realized, and the QoS guarantee capability of services in a high-dynamic cross-domain network and the system stability are remarkably improved.

The invention provides a system abnormity intelligent diagnosis and recovery method and system fusing time sequence logs, and relates to the field of distributed system operation and maintaining.The method comprises the steps that operation logs are collected from a plurality of service nodes of a distributed system, time sequence alignment is conducted, and calling relation and performance measurement data are extracted; time sequence change features are calculated in the sliding time window, dynamic feature vectors are generated through fusion coding, and a cross-service time sequence association graph is constructed; identifying an abnormal service node and matching the abnormal service node with historical fault data to obtain a historical propagation path and a feature vector; calculating a propagation convergence coefficient and a characteristic deviation degree based on a historical propagation path to obtain a causal intensity score; and identifying a fault influence degree according to the score, and adaptively adjusting a resource isolation and flow scheduling strategy. According to the invention, accurate diagnosis and efficient recovery of distributed system faults are realized.

The invention relates to the technical field of edge computing, electric automobile testing and the like, and provides an electric automobile instrument testing method based on end-cloud collaboration, which comprises the following steps of: constructing a lightweight virtualized resource isolation environment at an edge computing node, loading signal generation, communication agency and state monitoring micro-service; a test platform with elastic capacity expansion and contraction and fault self-recovery capability is formed; historical test data are collected at a cloud end, and an equipment health degree prediction model is trained and deployed to an edge node to support a local intelligent test; constructing a dynamic test service chain, generating and pre-distorting and compensating an enhanced test signal, and then acting the enhanced test signal on the instrument; through multi-modal signal acquisition and unified preprocessing, in combination with wavelet packet decomposition and a deep neural network, high-dimensional feature extraction is realized, a test report containing a health trend is finally output, and a test process is actively intervened based on a trend prediction result. According to the method, the authenticity of test signals, the health assessment precision and the safety and efficiency of the test process are effectively improved.

The invention relates to the technical field of network security awareness, in particular to a security awareness method and system for a GPU cluster, and the method comprises the steps: collecting multi-source security situation data, and providing basic information for subsequent security analysis; by constructing and updating a cluster security situation map in real time, information timeliness is updated and ensured in real time, and powerful support is provided for risk assessment; a dynamic risk assessment model is utilized to calculate vertex and edge scores, high-risk vertexes and key risk conduction paths are identified, and a basis is provided for resource isolation and scheduling; the targeted instruction is generated according to the security risk score and the preset security policy library, different security risks are effectively handled, and safe and stable operation of the cluster is guaranteed; by converting the instruction into a specific control command and distributing and executing the specific control command, effective implementation of security measures is ensured, and the cluster security protection capability is improved; by setting a finite-state machine monitoring instruction execution state, a recovery mechanism is automatically triggered, and continuous and safe operation of the cluster is guaranteed.

The invention discloses a method, a system and equipment for carrying out resource management on a database and a medium. The method comprises the following steps: creating at least one resource group in a database, and defining configuration information of each resource group; based on the binding relation table of each resource group, binding each resource group, and determining the binding type of each resource group; based on the binding type of each resource group, updating the configuration information of each resource group through a resource group operation interface to obtain target configuration information of each resource group; executing a corresponding query operation based on the target configuration information of each resource group and the state of each resource group; monitoring whether the state of each resource group is changed or not, triggering a corresponding resource adjustment strategy when the state of each resource group is changed, and recording change information; according to the method, resources of different tenants are isolated through a resource group mechanism, so that database-level resource isolation and fine management are realized, and the stability of a multi-tenant environment is improved.

The invention relates to a method for realizing NAT on a core network UPF network element, and the method comprises the steps: when a user terminal establishes a 5G session, the UPF pre-allocates a public network IPv4 address and a continuous source port set for the session, the number of ports is dynamically adjusted according to a user package, and resources are bound to a session data structure; receiving a downlink packet of which a destination address is a public network IP based on a private network-to-public network mapping relation, positioning a session level hash table through a flow label direct index mechanism, adding a GTP-U packet header after reverse NAT conversion, and forwarding the packet to a mobile phone through service processing; on the basis of a stream label direct index mechanism, each session exclusively occupies an IP port pool and a hash table through a session-level resource isolation architecture, and is used for avoiding global lock competition in combination with multi-core CPU parallel processing; based on a DPI function switching strategy, an NAT mapping table is synchronized through a UPF cluster session mirroring mechanism for node fault switching zero packet loss.

The invention provides a document adaptive conversion method and device based on a multi-modal large model and a medium, and belongs to the technical field of data processing. The method comprises the following steps: inputting a multi-modal document into a pre-constructed multi-modal large model, wherein the multi-modal large model comprises a multi-modal joint framework fusing a ViT visual model and an LLM model; using a ViT visual model and an LLM model to respectively extract multi-scale visual features corresponding to non-text content and semantic features corresponding to text content, and using a cross-modal attention mechanism to bidirectionally align the multi-scale visual features and the semantic features to obtain a multi-modal document; carrying out self-adaptive blocking on the multi-modal document by using a self-adaptive blocking strategy, and modeling a relative position relationship between blocks; establishing a dynamic mapping rule from a document element to an HTML tag, and mapping the multi-modal document into a front-end interaction component in combination with a natural language instruction of a user; and dynamically rendering the front-end interaction component in an on-demand mounting and resource isolation mode. The problem of insufficient document restoration capability in the prior art can be solved.

The invention relates to the technical field of distributed computing and deep learning, and discloses a computing power pool intelligent integration and elastic scheduling method based on deep learning, and the method comprises the steps: constructing a multi-level graph convolution network, and carrying out the modeling of a dynamic interaction relation between micro-services; constructing a multi-dimensional scoring model based on the computing power state index and the network state index; dynamically adjusting the micro-service granularity according to the task characteristics and the resource state; predicting a service interaction mode and a resource demand change by utilizing graph reinforcement learning; searching an optimal service deployment scheme by adopting a multi-objective optimization algorithm; according to the method, the resource utilization rate is improved through dynamic service granularity adjustment and computing power aware routing, predictive resource isolation and service capacity expansion are realized based on graph reinforcement learning, dynamic balance of delay, throughput and resource efficiency is realized by adopting multi-objective optimization, the problems of resource fragmentation and performance interference are effectively solved, and the resource utilization rate is improved. And the stability and the reliability of the system are obviously improved.

The invention relates to the technical field of computers, and discloses an equipment protocol adaptive analysis and instruction scheduling method for an intelligent central control system, and the method comprises the steps: obtaining an original communication data flow of heterogeneous equipment, and extracting a protocol feature fingerprint to recognize a protocol type; calling a corresponding pluggable protocol parser to generate a standardized instruction object; analyzing instruction semantics and dynamically calculating priorities in combination with a system load; and performing non-blocking scheduling and execution monitoring on the instruction based on a resource token bucket mechanism. The system comprises a data acquisition module, a protocol identification module, a self-adaptive analysis module, a semantic analysis module, a priority calculation module, an instruction sorting module, a token management module, a scheduling execution module, an execution monitoring module and a response generation module. According to the method, through protocol self-learning, dynamic priority quantification and multi-dimensional resource isolation scheduling, the response certainty, expansibility and operation stability of the system in a high-concurrency scene are remarkably improved.

The invention belongs to the technical field of cache prefetching optimization of a firmware layer of a computer storage system, and particularly provides a memory control method, a storage device, a medium and equipment.The instantaneous flow is effectively filtered and persistent hotspot data is accurately recognized through a three-layer structure of combining a first-stage hotspot filtering module with a window cache, a view queue and a protection queue; the second-stage continuous access filtering module dynamically judges a continuous access mode by means of mean-variance statistics of an annular buffer area, and accidental continuous triggering of prefetching is avoided; and the third-stage random access judgment module prohibits invalid prefetching and effectively distinguishes access modes. The pre-fetching bandwidth is limited through the token bucket algorithm, the global priority queue of the skip list is combined, it is ensured that the priority of the write task is higher than that of the pre-fetching task, pre-fetching and foreground I / O resources are isolated, delay jitter control over foreground key I / O can be achieved during full-load pre-fetching, and the problem that delay soaring is caused when pre-fetching preempts the resources is solved.

The invention relates to the technical field of block chain smart contracts, and provides a smart contract automatic execution system and method based on a block chain technology. In order to solve the problems that in the prior art, out-of-chain event verification is fragile, cross-contract atomicity is lacked, and resource management and control are insufficient, the system comprises a multi-mode under-chain event verification module, and a tamper-proof data channel is established through an Internet of Things hardware anchor point and an anti-collusion oracle; the autonomous execution engine is integrated with a resource awareness scheduler and an out-of-chain computing adapter; the transaction atomicity guarantee module is used for realizing cross-contract rollback by adopting a global snapshot tree and an intelligent compensation contract; the governance arbitration interface supports anonymous dispute resolution. The method comprises the steps of out-of-chain event multi-level verification, voucher execution queue management and sandbox resource isolation control. Credible collaboration inside and outside the chain is realized, the execution reliability is improved by more than 90%, and the contract development cost is reduced by 40%.

The invention discloses an automatic application management and control method and device, resource isolation is carried out on each middleware WebLogic instance, each middleware WebLogic instance runs on different physical servers and shares respective state information, through transverse expansion and longitudinal expansion, optimization deployment is carried out on each middleware WebLogic instance set after resource isolation, and the management and control efficiency of each middleware WebLogic instance set after resource isolation is improved. The transverse extension is used for sharing loads by increasing the node servers, and when any node server breaks down, other node servers normally provide services; longitudinal expansion is used for ensuring consistency of node servers in load balancing of transverse expansion.

The invention discloses a cloud data server mixed training method and system, which are applied to a cloud data server cluster comprising a plurality of computing resources. According to the method, a model structure, a data set, a time delay constraint and an isolation constraint of a training task are analyzed to generate a task portrait, resource configuration, an operation state and an isolation capability of a calculation node are collected to generate a resource portrait, and a co-located interference degree index table of a task and resource combination is constructed based on historical monitoring data. During scheduling, a heterogeneous computing power utilization rate, an estimated training time delay deviation and a co-located interference degree are taken as indexes, a candidate resource allocation scheme is subjected to weighted evaluation to generate a mixed training scheduling strategy, and resource isolation is implemented through container and accelerator multi-instance division. In the operation process, the training time delay and the actual co-located interference degree are continuously monitored, the scheduling weight and the co-located interference degree index are dynamically adjusted according to the deviation, closed-loop optimization of multi-task mixed training is achieved, the heterogeneous resource utilization rate is increased, and time delay default and co-located interference are reduced.

The invention discloses a development board Linux system security authentication multi-start method, which comprises the steps of 1, hardware trust root initialization and storage area division, 2, hardware trust root self-inspection and measurement, 3, starting item dynamic loading and multi-stage authentication, 4, security context establishment and system switching, and 5, multi-system isolation and collaboration. Step 6, performing security audit and exception handling; full-link authentication is realized by taking a hardware trust root as an anchor point, malicious mirror startup and inter-system data leakage are effectively resisted in combination with a storage and resource isolation mechanism, scenes such as on-demand dynamic switching, flexible adaptation debugging, upgrading and fault recovery of multiple systems can be realized, and the system reliability is improved by optimizing the lightweight design of an authentication algorithm and resource management. Limited computing power of the development board is adapted, the starting process and abnormal events can be completely recorded, and illegal operation can be traced conveniently.

The invention discloses a GPU (Graphics Processing Unit) resource isolation method and system, a medium and a product. The method comprises the following steps: acquiring attribute information of each GPU; formatting the attribute information of each GPU into a bitmap table in the form of a bitmap containing a computing resource allocation state, and storing the bitmap table; waiting for a GPU resource request from an application in the virtual machine, after the GPU resource request is received, accessing the bitmap in an atomic operation form to allocate available computing resources for the GPU resource request, submitting the GPU resource request to a corresponding GPU, and updating a corresponding computing resource allocation state value; and after GPU execution is completed, the computing resources allocated to the application are recycled in an atomic operation mode after GPU execution is completed, and the corresponding computing resource allocation state value is updated. The invention aims at solving the isolation of GPU hardware resources in a heterogeneous computing scene and realizing the maximum utilization of the computing resources of the GPU.

The invention discloses a multi-tenant API key authentication and resource isolation system in a containerized environment, and relates to the field of containerized multi-tenant authentication. Comprising an authentication authorization layer, a resource management and control layer and a security isolation layer. The authentication authorization layer comprises a multi-tenant authentication engine, an API key verification sub-module, a tenant identity recognition sub-module, an authority cascade verification sub-module and a dynamic authority calculation sub-module. And the resource management and control layer comprises a resource quota manager, a dynamic quota allocation sub-module, a real-time use monitoring sub-module, a threshold alarm control sub-module and an elastic capacity expansion and contraction sub-module. The security isolation layer comprises a multi-dimensional isolation engine, a container network isolation sub-module, a storage space isolation sub-module, a process permission isolation sub-module and a system call filtering sub-module; deep fusion of API authentication and container resource control is realized, a dynamic resource quota management mechanism based on tenant identities is established, and fine-grained API authority control and resource use limitation are provided.

The invention provides an online interactive programming education system based on a micro-service architecture, and the system comprises an infrastructure layer which serves as a bottom layer computing power and provides an elastic computing power through a cross-cloud deployment technology and a dynamic resource scheduling technology; the platform core layer constructs a stateless micro-service cluster through a service registration discovery module, a load balancing module and a fusing mechanism module depending on elastic resources of the infrastructure layer, and the infrastructure layer provides physical resource guarantee for operation of the micro-service cluster of the platform core layer; the platform support layer is used for integrating an authority management component, a workflow engine component and a general service component based on a stateless micro-service cluster constructed on the platform core layer, and providing resource isolation and high-concurrency task scheduling support in a multi-tenant environment for the programming education system; the platform core layer is combined with distributed transaction management to provide stable service scheduling and communication capability for an authority management component, a workflow engine component and a general service component of the platform support layer; and the platform application layer combines service scheduling and communication capabilities, realizes teaching functions such as multi-language development, code debugging visualization, AI personalized suggestion and collaborative learning, and directly serves programming learning of students and teaching management requirements of teachers.

The invention relates to the field of network security, in particular to a multipurpose network port access control system. The system comprises an electronic key (18), and further comprises a communication data line, an in-use network port access control system, a finished product network port access control system and an idle network port access control system which are used in cooperation. A CPU + ESAM hardware encryption mechanism and a hardware resource isolation and protection technology are adopted, and an inherent serial number of equipment is used as a unique identification code; before effective unlocking is carried out, mutual trust identification is carried out firstly, and effective unlocking can be carried out only after mutual trust identification is completed; meanwhile, the unlocking unit can store unlocking state information for tracing.

The present disclosure provides a resilient (radio) access network ((R)AN) slicing framework encompassing a resource planning engine and distributed dynamic slice-aware scheduling modules at one or more network access nodes, edge compute nodes, or cloud computing service. The resilient (R)AN slicing framework includes resource planning and slice-aware scheduling, as well as signaling exchanges for provisioning resilient (R)AN slicing. The intelligent (R)AN slicing framework can realize resource isolation in a more efficient and agile manner than existing network slicing technologies. Other embodiments may be described.