16 results about "Resource policy" patented technology

The invention discloses a task-based resource scheduling method, electronic equipment and a computer readable medium. The method comprises the following steps: inserting a to-be-scheduled job into a starting queue corresponding to a task unique identifier, a user identifier and a group identifier which the to-be-scheduled job belongs to according to creation time first-in first-out; determining a concurrence upper limit of each starting queue, and scheduling jobs which are ranked in the front in the starting queues and have the number of the concurrence upper limit to be in a running state; inserting jobs in a running state in the starting queues into a plurality of gear queues according to job priorities and task priorities of the tasks to which the jobs belong; different gear queues correspond to different task priority intervals, and the job priority is determined according to a task priority of a task to which the job belongs, a user role to which the job belongs and a device role to which the job belongs; and scheduling life cycle states and resource occupation states of the jobs in the plurality of gear queues according to the job priorities and a pre-configured task binding resource strategy. And the system stability and the user experience are improved.

An access control system is disclosed for controlling access to a resource. A request is received by a location attribute policy (LAP) server to access an encrypted resource. The LAP server accesses a resource policy that identifies requirements for granting access to the encrypted resource, such as a list of attributes of the requestor that are required and a dynamic attribute requirement of the requestor. The LAP server receives a cryptographic proof from the computing device that the requestor possesses the attributes and validates the proof based at least on information obtained from a trusted ledger. Once the proof is validated, the LAP server provides a shared secret associated with the dynamic attribute requirement to a decryption algorithm. The decryption algorithm uses the dynamic attribute shared secret in combination with one or more attribute shared secrets from the requestor to generate a decryption key for the encrypted resource.

There is provided a method and apparatus for a connection management function (CMF) to select, using a network function profile, a network function (NF) available to a mobile network (MN). The CMF then provides a virtual mobile computer (VMC) policy request for the VMC to the NF type available to the MN. The CMF then receives a VMC policy response that specifies a computing resource policy for the VMC from the NF type available to the MN. The CMF then provides the computing resource policy to an access node (AN) coupled to an electronic device (ED). The AN then provides the computing resource policy to the ED and the AN then receives a VMC acknowledgment from the ED. The CMF then receives the VMC acknowledgment from the CMF.

The invention provides a computing network collaborative differentiated resource guarantee system based on a service type, and the system comprises a service type recognition module which is configured to perform service type recognition according to at least one service request, and obtain a target service type and / or a normalized service portrait corresponding to the service request; the differentiated resource strategy generation module is configured to generate a target unified strategy according to the target service type and / or the normalized service portrait, and the target unified strategy comprises computing power resource parameters and network resource parameters corresponding to the service request; and the computing network joint admission module is configured to judge whether the service request is admitted to a target resource domain or not according to the target unified strategy. Through the system, the problems of low resource management efficiency and lack of uniformity for differentiated services in the prior art are solved.

An access control system is disclosed for controlling access to a resource. A request is received by a location attribute policy (LAP) server to access an encrypted resource. The LAP server accesses a resource policy that identifies requirements for granting access to the encrypted resource, such as a list of attributes of the requestor that are required and a dynamic attribute requirement of the requestor. The LAP server receives a cryptographic proof from the computing device that the requestor possesses the attributes and validates the proof based at least on information obtained from a trusted ledger. Once the proof is validated, the LAP server provides a shared secret associated with the dynamic attribute requirement to a decryption algorithm. The decryption algorithm uses the dynamic attribute shared secret in combination with one or more attribute shared secrets from the requestor to generate a decryption key for the encrypted resource.

There is provided a method and apparatus for a connection management function (CMF) to select, using a network function profile, a network function (NF) available to a mobile network (MN). The CMF then provides a virtual mobile computer (VMC) policy request for the VMC to the NF type available to the MN. The CMF then receives a VMC policy response that specifies a computing resource policy for the VMC from the NF type available to the MN. The CMF then provides the computing resource policy to an access node (AN) coupled to an electronic device (ED). The AN then provides the computing resource policy to the ED and the AN then receives a VMC acknowledgment from the ED. The CMF then receives the VMC acknowledgment from the CMF.

The disclosure relates to a 5th generation (5G) or pre-5G communication system for supporting a higher data rate after a 4th generation (4G) communication system such as long-term evolution (LTE). According to various embodiments of the disclosure, a method performed by a distributed unit (DU) may include: transmitting, to a near-real time (near-RT) radio access network (RAN) intelligent controller (RIC), an E2 report message including resource policy information related to a shared resource, a prioritized resource, and a dedicated resource of a radio resource for a rRMPolicyMemberList; receiving, from the RT RIC, an E2 control message generated based on the resource policy information; and performing a resource allocation based on the E2 control message, wherein the resource policy information includes an rRMPolicyMaxRatio, an rRMPolicyMinRatio an and rRMPolicyDedicatedRatio, wherein each of the rRMPolicyMaxRatio, the rRMPolicyMinRatio and the rRMPolicyDedicatedRatio are indicated with an integer between 0 and 100.

Embodiments of the present application provide a data authority processing method and device and a server, wherein the method comprises: obtaining a business role list of a current user account; determining a resource policy of the current user account according to the business role list; performing AND or NOT logic operation on resource data corresponding to the resource policy of the current user account to obtain authorized resource data of the current user account. In this way, the resource policy of the current user account is determined according to the business role list of the current user account, and then the AND or NOT logic operation is performed on the resource data corresponding to the resource policy of the current user account to obtain the authorized resource data of the current user account, without the need to splice SQL statements related to data authority and without the need to change the logic of calling data in the application layer, so that the data authority authorization can be realized in a non-intrusive manner, and the authorization processing efficiency of the data authority is improved.

Provided in the present application is a cloud computing technology-based instance management method. The method is applied to a cloud management platform. The cloud management platform is used to manage at least one computing node, at least one instance running on the first computing node. The method comprises: acquiring a first instance creation request input by a tenant, the first instance creation request comprising deployment information, specification information and priority information of a first instance; and, on the basis of the first instance creation request, creating the first instance on the first computing node, the priority of the first instance being different from the priority of the at least one instance, and the first instance running on a resource in the first computing node that satisfies a first priority. During the running process of the first instance, when the priority of the instance is dynamically adjusted, the cloud management platform directly adjusts a corresponding resource policy on the computing node, thereby, while ensuring high availability and high reliability of instances for tenants, improving the capability of dynamically adjusting sensitive services and improving the utilization rate of resources on computing nodes.

This application discloses a task-based resource scheduling method, electronic device, and computer-readable medium. The method includes inserting to-be-scheduled jobs into a startup queue corresponding to the unique identifier of the task to which they belong, the user identifier to which they belong, and the group identifier to which they belong, in a first-in-first-out order based on their creation time. The method also determines the concurrency upper limit of each startup queue and schedules the jobs that are ranked first in the startup queue and whose number is equal to the concurrency upper limit into a running state. The running jobs in each startup queue are inserted into multiple gear queues based on their job priority and the task priority of their tasks. Different gear queues correspond to different task priority intervals, and the job priority is determined based on the task priority of the task to which the job belongs, the user role to which the job belongs, and the device role to which the job belongs. The method also schedules the lifecycle status and resource occupancy status of jobs in multiple gear queues based on the job priority and a pre-configured task-binding resource policy. This method improves system stability and user experience.

The present invention discloses a kernel task execution method, electronic device, readable storage medium and program product, and relates to the field of computer technology. The method includes creating a mapping table structure with at least three nested layers; the first layer mapping table stores the task identifier and its nested relationship with the lower layer, and the other layer mapping tables store the control rules and the corresponding nested relationship. The target task control rule information extracted from the resource policy file is divided into a corresponding number of task execution control rules, which are stored in the mapping table of the corresponding layer, and sent to the kernel state as a task execution control rule storage table. The kernel state controls the kernel task operation layer by layer according to the task execution control rule storage table. The present invention can solve the problem that the related technology eBPF Map cannot be nested in multiple layers, resulting in the inability to store the business needs of the access control rules in the container scenario, and can realize the control of container access in the container scenario.

Systems, methods, and instrumentalities are disclosed herein for a wireless transmit / receive unit (WTRU) and / or a network. A WTRU may include a processor configured to detect a request to create a service association (SA). The request may indicate a coherent resource and / or indicate policy information associated with creating a coherent resource policy. The WTRU may generate the coherent resource policy based on the coherent resource and the policy information. The WTRU may generate an SA create message. The SA create message may include an indication of the coherent resource and the coherent resource policy. The WTRU may send the SA create message to a network node. The SA create message may indicate a request to create the SA based on the coherent resource and / or the coherent resource policy. The WTRU may receive an SA create response message from the network node.

Systems, methods, and instrumentalities are disclosed herein for a wireless transmit / receive unit (WTRU) and / or a network. A WTRU may include a processor configured to detect a request to create a service association (SA). The request may indicate a coherent resource and / or indicate policy information associated with creating a coherent resource policy. The WTRU may generate the coherent resource policy based on the coherent resource and the policy information. The WTRU may generate an SA create message. The SA create message may include an indication of the coherent resource and the coherent resource policy. The WTRU may send the SA create message to a network node. The SA create message may indicate a request to create the SA based on the coherent resource and / or the coherent resource policy. The WTRU may receive an SA create response message from the network node.

The disclosure relates to a cluster management method and system and a storage medium, and belongs to the technical field of computers. The method comprises the following steps: in response to a user creating a first state set and a target resource under a policy, a master cluster controller creates first resource allocation parameters corresponding to the first state set and initial replica number allocation information; when it is monitored that the initial replica number allocation information is not allocated cluster information, the initial replica number allocation information is scheduled and filled according to the target resource policy and the first resource allocation parameters to obtain target replica number allocation information; each sub-cluster is traversed, and a sub-cluster controller tunes the replicas allocated to the sub-cluster according to the target replica number allocation information, a second state set and corresponding second resource allocation parameters, until each sub-cluster completes replica allocation according to the target resource policy. In this way, cross-cluster management resources can be realized without additional cost, and the flexibility of cross-cluster management is improved.

Embodiments of the present application disclose a permission determination method, device and equipment, and a readable storage medium, and relate to the blockchain technology. The method comprises the following steps: obtaining a transaction request sent by a first object, wherein the transaction request comprises public keys of N objects and a signature information set of the N objects, N is a positive integer; searching a resource policy corresponding to the transaction request from a blockchain; obtaining an identity information set of the N objects from the blockchain based on the public keys of the N objects; and determining a resource access permission of the first object based on the identity information set of the N objects, the signature information set of the N objects and the resource policy. By using the embodiments of the present application, the dependence on the CA service can be reduced, and the data processing efficiency can be improved.

The invention provides a computing resource allocation method and device, electronic equipment and a storage medium, and relates to the technical field of computers. Meanwhile, the resource quota is dynamically adjusted in different service period states based on the tenant identification and the resource strategy evaluation result, resource isolation control is implemented on the basis, and hardware limitation is carried out on the computing resources allocated to the tenants through a resource isolation mechanism; and executing a task allocation and load balancing strategy based on distributed scheduling to allocate the calculation tasks to corresponding calculation nodes. In the prior art, due to the lack of effective resource isolation and dynamic allocation in a completely concentrated mode, when a plurality of tenants synchronously initiate a calculation task, resource scrambling, calculation parameter errors and result errors occur; and idle waste is caused by the fact that resources cannot be shared in a complete dispersion or integration and division combined mode, and the requirements of multi-tenant same-station operation and resource collaborative allocation are difficult to meet are solved.