10 results about "Resource policy" patented technology

An access control system is disclosed for controlling access to a resource. A request is received by a location attribute policy (LAP) server to access an encrypted resource. The LAP server accesses a resource policy that identifies requirements for granting access to the encrypted resource, such as a list of attributes of the requestor that are required and a dynamic attribute requirement of the requestor. The LAP server receives a cryptographic proof from the computing device that the requestor possesses the attributes and validates the proof based at least on information obtained from a trusted ledger. Once the proof is validated, the LAP server provides a shared secret associated with the dynamic attribute requirement to a decryption algorithm. The decryption algorithm uses the dynamic attribute shared secret in combination with one or more attribute shared secrets from the requestor to generate a decryption key for the encrypted resource.

The invention provides a computing network collaborative differentiated resource guarantee system based on a service type, and the system comprises a service type recognition module which is configured to perform service type recognition according to at least one service request, and obtain a target service type and / or a normalized service portrait corresponding to the service request; the differentiated resource strategy generation module is configured to generate a target unified strategy according to the target service type and / or the normalized service portrait, and the target unified strategy comprises computing power resource parameters and network resource parameters corresponding to the service request; and the computing network joint admission module is configured to judge whether the service request is admitted to a target resource domain or not according to the target unified strategy. Through the system, the problems of low resource management efficiency and lack of uniformity for differentiated services in the prior art are solved.

An access control system is disclosed for controlling access to a resource. A request is received by a location attribute policy (LAP) server to access an encrypted resource. The LAP server accesses a resource policy that identifies requirements for granting access to the encrypted resource, such as a list of attributes of the requestor that are required and a dynamic attribute requirement of the requestor. The LAP server receives a cryptographic proof from the computing device that the requestor possesses the attributes and validates the proof based at least on information obtained from a trusted ledger. Once the proof is validated, the LAP server provides a shared secret associated with the dynamic attribute requirement to a decryption algorithm. The decryption algorithm uses the dynamic attribute shared secret in combination with one or more attribute shared secrets from the requestor to generate a decryption key for the encrypted resource.

The disclosure relates to a 5th generation (5G) or pre-5G communication system for supporting a higher data rate after a 4th generation (4G) communication system such as long-term evolution (LTE). According to various embodiments of the disclosure, a method performed by a distributed unit (DU) may include: transmitting, to a near-real time (near-RT) radio access network (RAN) intelligent controller (RIC), an E2 report message including resource policy information related to a shared resource, a prioritized resource, and a dedicated resource of a radio resource for a rRMPolicyMemberList; receiving, from the RT RIC, an E2 control message generated based on the resource policy information; and performing a resource allocation based on the E2 control message, wherein the resource policy information includes an rRMPolicyMaxRatio, an rRMPolicyMinRatio an and rRMPolicyDedicatedRatio, wherein each of the rRMPolicyMaxRatio, the rRMPolicyMinRatio and the rRMPolicyDedicatedRatio are indicated with an integer between 0 and 100.

Embodiments of the present application provide a data authority processing method and device and a server, wherein the method comprises: obtaining a business role list of a current user account; determining a resource policy of the current user account according to the business role list; performing AND or NOT logic operation on resource data corresponding to the resource policy of the current user account to obtain authorized resource data of the current user account. In this way, the resource policy of the current user account is determined according to the business role list of the current user account, and then the AND or NOT logic operation is performed on the resource data corresponding to the resource policy of the current user account to obtain the authorized resource data of the current user account, without the need to splice SQL statements related to data authority and without the need to change the logic of calling data in the application layer, so that the data authority authorization can be realized in a non-intrusive manner, and the authorization processing efficiency of the data authority is improved.

Provided in the present application is a cloud computing technology-based instance management method. The method is applied to a cloud management platform. The cloud management platform is used to manage at least one computing node, at least one instance running on the first computing node. The method comprises: acquiring a first instance creation request input by a tenant, the first instance creation request comprising deployment information, specification information and priority information of a first instance; and, on the basis of the first instance creation request, creating the first instance on the first computing node, the priority of the first instance being different from the priority of the at least one instance, and the first instance running on a resource in the first computing node that satisfies a first priority. During the running process of the first instance, when the priority of the instance is dynamically adjusted, the cloud management platform directly adjusts a corresponding resource policy on the computing node, thereby, while ensuring high availability and high reliability of instances for tenants, improving the capability of dynamically adjusting sensitive services and improving the utilization rate of resources on computing nodes.

Systems, methods, and instrumentalities are disclosed herein for a wireless transmit / receive unit (WTRU) and / or a network. A WTRU may include a processor configured to detect a request to create a service association (SA). The request may indicate a coherent resource and / or indicate policy information associated with creating a coherent resource policy. The WTRU may generate the coherent resource policy based on the coherent resource and the policy information. The WTRU may generate an SA create message. The SA create message may include an indication of the coherent resource and the coherent resource policy. The WTRU may send the SA create message to a network node. The SA create message may indicate a request to create the SA based on the coherent resource and / or the coherent resource policy. The WTRU may receive an SA create response message from the network node.

Systems, methods, and instrumentalities are disclosed herein for a wireless transmit / receive unit (WTRU) and / or a network. A WTRU may include a processor configured to detect a request to create a service association (SA). The request may indicate a coherent resource and / or indicate policy information associated with creating a coherent resource policy. The WTRU may generate the coherent resource policy based on the coherent resource and the policy information. The WTRU may generate an SA create message. The SA create message may include an indication of the coherent resource and the coherent resource policy. The WTRU may send the SA create message to a network node. The SA create message may indicate a request to create the SA based on the coherent resource and / or the coherent resource policy. The WTRU may receive an SA create response message from the network node.

Embodiments of the present application disclose a permission determination method, device and equipment, and a readable storage medium, and relate to the blockchain technology. The method comprises the following steps: obtaining a transaction request sent by a first object, wherein the transaction request comprises public keys of N objects and a signature information set of the N objects, N is a positive integer; searching a resource policy corresponding to the transaction request from a blockchain; obtaining an identity information set of the N objects from the blockchain based on the public keys of the N objects; and determining a resource access permission of the first object based on the identity information set of the N objects, the signature information set of the N objects and the resource policy. By using the embodiments of the present application, the dependence on the CA service can be reduced, and the data processing efficiency can be improved.

The invention provides a computing resource allocation method and device, electronic equipment and a storage medium, and relates to the technical field of computers. Meanwhile, the resource quota is dynamically adjusted in different service period states based on the tenant identification and the resource strategy evaluation result, resource isolation control is implemented on the basis, and hardware limitation is carried out on the computing resources allocated to the tenants through a resource isolation mechanism; and executing a task allocation and load balancing strategy based on distributed scheduling to allocate the calculation tasks to corresponding calculation nodes. In the prior art, due to the lack of effective resource isolation and dynamic allocation in a completely concentrated mode, when a plurality of tenants synchronously initiate a calculation task, resource scrambling, calculation parameter errors and result errors occur; and idle waste is caused by the fact that resources cannot be shared in a complete dispersion or integration and division combined mode, and the requirements of multi-tenant same-station operation and resource collaborative allocation are difficult to meet are solved.