22 results about "Token passing" patented technology

The invention provides a multi-ring state sensing communication network optimization method, relates to the field of industrial network communication, and solves the technical problems of communication uncertainty and insufficient system reliability caused by message conflicts in the prior art. The method comprises the following steps of: when a communication system is initialized, logically dividing a plurality of nodes into a plurality of data transmission rings by a centralized management node on a single physical bus, and initializing an annular frame for controlling a sending permission for each transmission ring; each node transmits a token based on the ring frame, and after the nodes in the ring obtain the token of the ring, the nodes obtain the bus sending authority, construct a data frame containing a target node address and send the data frame to the bus to perform data communication between the nodes; each node continuously detects communication states of adjacent nodes and a transmission ring through a heartbeat mechanism and a ring frame timeout mechanism; and automatically triggering a data ring reconstruction process and updating a token transmission path when detecting that the node fails, the node is added or the centralized management node is disconnected.

The invention relates to a door lock bidirectional control method and system based on local verification and remote authorization, and the method comprises the steps: carrying out the local verification of user biological information collected by a door lock terminal, and generating an operation verification voucher; carrying out voucher association on the operation verification voucher and door lock identification information of the door lock terminal to obtain voucher request information, and sending the voucher request information to a remote authorization server; performing authority verification and dynamic authorization on the voucher request information through the remote authorization server, and generating a dynamic authorization token; and the dynamic authorization token is transmitted to the door lock terminal, unlocking operation is executed after verification is passed, and an operation log is recorded. According to the invention, the authority rule can be flexibly adjusted according to different application scenes, and the refined intelligent management of the access authority of the door lock is realized.

A building management system (BMS) includes building equipment operable to affect a physical state or condition of a building and a gateway device configured to couple to the building equipment via a wireless master slave / token passing (MS / TP) bus or a wired MS / TP bus. The gateway device is configured to communicate building data to a cloud-based platform including a hub configured to receive the building data, a plurality of cloud applications, wherein the plurality of cloud applications are configured to receive the building data from the hub and process the building data to provide a building data output. The cloud-based platform is configured to communicate the building data output to and receive a command based on the building data output from at least one of a control application, an analytic application, or a monitoring application. The gateway device is further configured to operate according to the command.

The device may queue the threads for execution by the thread pool, including configuring the environmental context with the cancel token. Based on the call of the thread to the synchronization method, the device may determine that the thread uses a green thread model and identify a cancel token from the environmental context. Based on the thread using the green thread model, the device may invoke an asynchronous method that performs tasks of the synchronization method using asynchronous operations, including passing a cancel token to the asynchronous method. Based on the state change identifying the cancel token, the device may terminate the asynchronous operation.

This invention provides a communication method, device, and system based on a CAN bus. The method includes: receiving a periodic start command broadcast by a master node; and, based on its topological position in the logical chain, executing the following transmission permission determination logic: if it is the first node in the logical chain, it determines that it has obtained bus transmission permission in response to the periodic start command; if it is not the first node, it listens in real time for token passing frames sent by predecessor nodes in the logical chain; within the communication period defined by the periodic start command, when it receives a token passing frame sent by a predecessor node, it determines that it has obtained bus transmission permission; within the obtained bus transmission permission, it sends service data to the CAN bus; after sending the service data, it broadcasts its own token passing frame containing the address of the next-hop successor node to pass the bus transmission permission to the successor nodes in the logical chain.

Methods provide device authentication for an intrusion detection system implementing building automation and control network (BACnet) Master-Slave / Token-Passing (MS / TP). An authentication protocol provides countermeasures to vulnerabilities in the BACnet MS / TP physical layer by utilizing an extended message format to cloak device identifiers (IDs). Adversaries are prevented from using known device IDs to gain access to the network. An authenticating device hashes a device identifier of a device to be authenticated combined with a random number. The authenticating device receives a hash of the random number plus the device identifier from the device. The authenticating device compares the hashes and authenticates the device if the hashes match. To transmit the hash, the BACnet MS / TP frame format includes an extended header cyclic redundancy check (CRC) field having bytes reallocated from the data field of the frame format. Another countermeasure utilizes a physical unclonable function (PUF) of the device in the extended header CRC.

An architecture has been designed that introduces a “bootstrap server” into the single sign-on flow to bootstrap a SSO context to a remote browsing session. The bootstrap server provides a session token to a client browser to establish and secure a session between the client browser and a remote browsing system. After the client browser obtains a SSO token and is redirected to the bootstrap server, the bootstrap server provides a session token for a remote browsing session. The bootstrap server also generates a response to the client browser to cause the client browser to connect to the remote browsing system to establish a remote browsing session with the session token provided by the bootstrap server. With the remote browsing session, the client browser conveys the SSO token for use by the remote browser.

A building management system (BMS) includes building equipment operable to affect a physical state or condition of a building and a gateway device configured to couple to the building equipment via a wireless master slave / token passing (MS / TP) bus or a wired MS / TP bus. The gateway device is configured to communicate building data to a cloud-based platform including a hub configured to receive the building data, a plurality of cloud applications, wherein the plurality of cloud applications are configured to receive the building data from the hub and process the building data to provide a building data output. The cloud-based platform is configured to communicate the building data output to and receive a command based on the building data output from at least one of a control application, an analytic application, or a monitoring application. The gateway device is further configured to operate according to the command.

The invention provides a dynamic distributed data structure management method and device based on token transfer, the method and device are applied to a multi-core processor system, the multi-core processor system comprises at least two cores, and the method comprises the following steps: receiving an operation instruction, and responding to the operation instruction to detect the holding state of a token of each core; determining a first kernel according to the holding state; determining a memory state of the first kernel; determining an operation type according to the operation instruction; the operation type comprises insertion operation and deletion operation; token dynamic information is determined based on the memory state and the operation type; determining a target kernel according to the token dynamic information; and enabling the target kernel to execute the operation instruction. According to the method, the storage space of the data structure in the multi-core system is dynamically distributed and managed through the token mechanism, efficient insertion, deletion and other operations are supported, remote memory access can be reduced, and the mechanism has good expandability so as to support efficient concurrent operation on the global data structure in the multi-core environment.

Methods, systems, and computer program products for managing code updates in computer clusters. Multiple components are operatively interconnected to carry out upgrade operations over nodes of a computer cluster. Specifically, in-place coordination of upgrades to a cluster (without requiring a temporary upgrade node) can be carried out by selecting a first node from the cluster, then enabling a protocol whereby operational elements of the cluster observe an upgrade token passing algorithm to ensure mutual exclusivity of a sequence of operations as between individual nodes of the cluster. Given such mutual exclusivity, the upgrading of the cluster can be carried out by applying code updates one node at a time. Migration of operational elements to and from nodes of the cluster (without requiring a temporary upgrade node) are facilitated by an intent processor. Computing clusters can be hyperconverged computer infrastructure clusters, and / or computing clusters can be Kubernetes or other computing clusters.

The invention specifically discloses a threshold anonymous token passing method, and relates to the technical field of identity authentication. The method comprises the following steps: establishing an identity authentication system and generating system parameters; generating a secret key of an issuer; generating a user key; an anonymous token is requested, the user interacts with an issuer, the anonymous token is requested to be acquired, and the user additionally generates a label about a unique private attribute and messages of the user to limit that each message of each user can only acquire one token; issuing the anonymous token, and generating a blind anonymous token after the issuer verifies the correctness of the tag; gathering blind anonymous passwords by the user; the user verifies the correctness of the aggregated anonymous token and de-blinding the aggregated anonymous token; and the verifier verifies the anonymous token. According to the method, decentralized issuing and verification of the anonymous token in a distributed environment are realized, and the problems that authority control and user anonymity are difficult to coordinate and privacy protection and access control are difficult to balance in a decentralized architecture are effectively solved.

A method of secure communication between a device and a computer program running on a server is disclosed. The method comprising the steps of: sending, from the device to the server, generic user identification information based on a current user account logged into on the device; identifying, by the server, the generic user identification information as corresponding to an allowed entity pre-registered with the server; sending, from the server to a remote management module, an identification token associated with the allowed entity, said remote management module having stored thereon a register of registered devices; running, by the remote management module, a remote action on the device using the stored register entry for that device, wherein the remote action passes the identification token to the device; sending, from the device to the server, the identification token; and allowing the device to access the computer program based at least in part on a match between the identification token sent by the server and the identification token received by the server from the device.

A computer system consists primarily of identical modular microcontroller units, interconnecting with one another in a three-dimensional lattice. During operation, each microcontroller communicates asynchronously by relying on token-passing between itself and its neighbors. Programming and construction of such microcontroller units occurs in one operation, through robotic pick-and-place operations that are configured through a graphical user interface. The graphical user interface includes simple drag and drop operations to facilitate a WYSIWYG depiction of the desired build and the final system. The design tools and automated assembly of the disclosed framework introduces system scalability and structural flexibility that are not available with existing supercomputing racks and chassis.

Aspects of the disclosure are directed to protecting individual privacy during a service transaction. The mobile device identity is separated from the individual's identity when the individual is consuming the provided services. One aspect enables the connection between the individual's identity and the mobile device identifiers to be broken by binding ownership of the physical device to a separate entity called the privacy provider service (PPS). With one aspect a computing platform supports communications between a PPS device and another computing device by supporting a communications token. When the PPS device transfers the communication token to the other device, the other device can submit the communications token to the computing platform. The platform subsequently establishes a communication channel among the devices and the platform so that the device identities are masked from each other. Other aspects support other service transaction types including payment transfers and consumption of internet application services.

A method of secure communication between a device and a computer program running on a server is disclosed. The method comprising the steps of: sending, from the device to the server, generic user identification information based on a current user account logged into on the device; identifying, by the server, the generic user identification information as corresponding to an allowed entity pre-registered with the server; sending, from the server to a remote management module, an identification token associated with the allowed entity, said remote management module having stored thereon a register of registered devices; running, by the remote management module, a remote action on the device using the stored register entry for that device, wherein the remote action passes the identification token to the device; sending, from the device to the server, the identification token; and allowing the device to access the computer program based at least in part on a match between the identification token sent by the server and the identification token received by the server from the device.

A login authorization method is applied to an authorization server, and includes: when a user logs in to a front-end application (app) installed on a user terminal, delivering an authorization credential to a background server of an H5 page in the front-end app in response to an authorization request sent on the H5 page; delivering a token to the background server in response to a token application request that carries the authorization credential and that is sent by the background server; and in response to user login information obtaining request that carries the token and that is sent by the background server, delivering user login information of the front-end app to the background server, wherein the background server completes login on the H5 page based on the user login information.

A device may queue a thread for execution by a thread pool, including configuring an ambient context with a cancellation token. Based on a call of a synchronous method by the thread, the device may determine that the thread uses a green threads model and identify the cancellation token from the ambient context. Based on the thread using the green threads model, the device may call an asynchronous method that uses an asynchronous operation to perform a task of the synchronous method, including passing the asynchronous method the cancellation token. Based on identifying a state change of the cancellation token, the device may terminate the asynchronous operation.

The application discloses a kind of multi-element flexible resource-oriented building direct current power distribution system flexible capacity dynamic evaluation method.System initialization constructs token transmission synchronization network based on serial communication, each node detects bus voltage and executes adaptive partition droop control and transient lockout, calculates local up-regulation and down-regulation capacity;Through the consistency iteration aggregation of Metropolis weight, the total flexible performance of the whole network is obtained, and the second-level evaluation result is output;Centralized optimization controller constructs mixed integer prediction model, and rolling optimization obtains optimal voltage reference value and minute-level flexible performance time sequence boundary;Voltage reference value is issued to translate droop threshold to complete closed-loop correction, and under large disturbance, three-layer cooperative protection is formed by physical layer lockout, distributed layer zero reset and centralized layer measurement update.The application realizes dynamic flexible performance evaluation of continuous and discrete heterogeneous resources, and improves system voltage stability and protection selectivity.

A method of secure communication between a device and a computer program running on a server is disclosed. The method comprises the steps of: transmitting generic user identification information based on a current user account logged in on the device from the device to the server; identifying, by the server, the generic user identification information as corresponding to an allowed entity pre-registered to the server; sending an identification token associated with the permission entity from the server to a remote management module, wherein a registry of registered equipment is stored on the remote management module; running, by the remote management module, a remote action on the device using registry entries stored for the device, where the remote action communicates the identification token to the device; sending the identification token from the device to the server; and allowing the device to access the computer program based at least in part on a match between the identification token sent by the server and the identification token received by the server from the device.

The invention discloses a half-duplex bus communication system based on a differential signal and an independent clock, and relates to the technical field of embedded control system communication. The system aims to solve the problems of high-speed, low-delay and low-cost communication during cooperative control of multiple actuators in scenes of robots and automation equipment. The system comprises physical layer hardware, a communication protocol and a star-bus hybrid network architecture. The physical layer adopts an LVDS (Low Voltage Differential Signaling) chip to realize differential signal transmission, and five wires form a bus; the protocol realizes half-duplex communication of a multi-node shared bus through dynamic role switching, implicit token transfer and an error recovery mechanism; the star-bus hybrid architecture is combined with a first-level cache mechanism, so that the overall bandwidth and communication efficiency are improved; the system can realize a transmission rate of 100 Mbps within a distance of 1 meter, supports a bus shared by more than or equal to 8 nodes, is low in cost and easy to realize, and is suitable for a multi-actuator high-frequency cooperative control scene.

Methods provide device authentication for an intrusion detection system implementing building automation and control network (BACnet) Master-Slave / Token-Passing (MS / TP). An authentication protocol provides countermeasures to vulnerabilities in the BACnet MS / TP physical layer by utilizing an extended message format to cloak device identifiers (IDs). Adversaries are prevented from using known device IDs to gain access to the network. An authenticating device hashes a device identifier of a device to be authenticated combined with a random number. The authenticating device receives a hash of the random number plus the device identifier from the device. The authenticating device compares the hashes and authenticates the device if the hashes match. To transmit the hash, the BACnet MS / TP frame format includes an extended header cyclic redundancy check (CRC) field having bytes reallocated from the data field of the frame format. Another countermeasure utilizes a physical unclonable function (PUF) of the device in the extended header CRC.

The invention discloses a network security management method, system and device based on an array server and a storage medium, and the method comprises the steps: enabling a client device to be connected to a corresponding computing node, obtaining the login information of a client through a BMC system, and constructing a protocol text token based on the login information, the format of the protocol text token comprises a function type, a timestamp, an IP address, an on-off state and a verification value, the IP address is the IP address of the client equipment, then the protocol text token is transmitted to a corresponding computing node, the computing node performs timing verification on the protocol text token, the client equipment after successful verification is allowed to be accessed, and the protocol text token is transmitted to the corresponding computing node. The black list and the white list of the client equipment ip are precisely controlled through the self-defined protocol text token, and the attack surface of the computing unit board card in an open network environment is effectively reduced, so that the security protection capability of the computing unit board card is remarkably improved.