101 results about "Virtual file system" patented technology

The invention discloses a file system protection method and device, equipment, a storage medium and a product. The method comprises the steps that in a kernel mode operation mode, a file isolator responds to hook triggering indication information, and feature information of a process is acquired; based on the feature information and an isolation strategy library, an isolation strategy of the process is determined, the isolation strategy library comprises a corresponding relation between each piece of feature information and each isolation strategy, and the isolation strategy comprises a redirection rule; based on a redirection rule, redirecting the file operation request of the process to the virtual file system; wherein the isolation strategy library is generated and issued to the file isolator by the isolation controller when the file system is in a user mode operation mode, and the hook trigger indication information is generated in response to a call request of the process for the file system. Therefore, by introducing a file protection mechanism of the isolation controller in the user mode and the file isolator in the kernel mode, not only is highly accurate access control allowed to be realized, but also better performance is achieved.

The embodiment of the invention provides a process interception method and device and electronic equipment. The method comprises the following steps: a kernel space receives a process protection list sent by a user space by utilizing a virtual file system interface; wherein the process protection list comprises a process identifier of at least one to-be-protected process; the kernel space obtains a process termination request; wherein the process termination request is used for requesting to terminate a target process, and the target process is a process entity scheduled by an operating system; under the condition that the kernel space determines that the request type of the process termination request is a preset request, determining a matching relationship between the target process and a process protection list based on a target process identifier of the target process; and when the matching relationship indicates that the process identifier of the at least one to-be-protected process in the process protection list comprises the target process identifier, the kernel space intercepts the process termination request. By the adoption of the method, the important process can be effectively prevented from being terminated due to malicious or misoperation, and the safety and stability of the system are improved.

The invention discloses a data security protection method and system for large model training. The core of the method is that a data safe box trusted application (TA application) is deployed in a trusted execution environment (TEE) and cooperatively works with a user-defined virtual file system driver at a host machine side, so that an end-to-end secret state data access control link is constructed. Before encryption protection of sensitive data, a measurement value (including code hash, configuration parameters and a runtime state) of a current TEE instance is submitted to a remote verification service through a data safe box TA application, and the verification service only sends the measurement value (including code hash, configuration parameters and a runtime state) of the current TEE instance to the remote verification service after confirming that the TEE environment meets a preset security policy (such as a kernel version, a software version and configuration parameter compliance). And generating a secret key encrypted by a custom virtual file system on a host machine side through derivation. And malicious copying of a system memory and a storage medium is prevented, so that the traditional attack defense capability is effectively improved.

The invention discloses an access request processing method under centralized storage and electronic equipment, and relates to the technical field of centralized storage, and the method comprises the following steps: setting a virtual file system in a node, and carrying out cache mirror image synchronization among the nodes by utilizing the virtual file system. After any node receives an access request, the node firstly determines whether the access request is a read request or a write-in request, and then processes the read request or the write-in request by using the cache mirror image. The problems that when multiple nodes of a local file system are used for providing read-write services to the outside, data are damaged easily due to the fact that a memory structure has no consistency protection, and protocol processing is conducted depending on one node can be solved. According to the method, the virtual file system is introduced into the nodes, so that the nodes are mounted on the same volume, cache synchronization between the nodes is performed by using the virtual file system, and unification of cache mirror images between the nodes is realized. Through the cache mirror image between the nodes, the capability of providing services to the outside by the multiple nodes is realized.

The invention belongs to the field of end-cloud collaborative computing and lightweight virtualization, and provides an end-cloud collaborative lightweight application distribution and isolated operation method and system, which adopts a WASM byte code as a unique format for application distribution, compiles an application into a WASM module at a cloud and then distributes the WASM module to an end side device; the end side equipment combines read-only configuration data of a host with a temporary file system Tmpfs of a memory by utilizing OverlayFS on a file level, and maps the data into a virtual file system in a WASM sandbox; on the symbol level, a dynamic WASI bridge is introduced, according to the requirement of an import section in a WASM module, the native capacity of a host system is injected into WASM operation in a host function mode in real time, and the heterogeneous hardware characteristics of end-side equipment are adapted. The method is suitable for an end-side environment with an immutable operating system as a base, and is compatible with a cloud containerization deployment scene.

The invention belongs to the technical field of computers, and particularly relates to a memory management method and system based on a Linux system, electronic equipment and a readable storage medium, and the method comprises the steps that a routing function obtains a first call instruction of a first target process; calling a virtual file system VFS by the routing function, and creating a first MMFS corresponding to the first target process in a default memory management file system MMFS directory; the routing function routes the first target process to the first MMFS; the first MMFS executes memory allocation for the first target process; wherein the first calling instruction is an instruction used for mapping the memory, and different MMFSs respectively map different memory managers. By using the VFS as the memory management scheme of the file system, the application program is allowed to request the memory through the file operation, and the expandability of kernel memory management is improved.

A data storage management method includes detecting a data change to data in a data repository, identifying metadata of the data change, and storing the metadata in a virtual file, the virtual file being in a data storage format that is compatible with one or more data analysis tools. In response to a subsequent user request to access metadata of the data in the data repository, the method may transmit one or more virtual files containing metadata identified in the user request.

The invention provides a transparent encryption virtual file system implementation method based on a hardware key, and aims to solve the problems of poor user experience, complex key management, insufficient security and the like of an existing file system encryption scheme. Hardware-level key isolation is realized to ensure that the key never leaves the USB KEY; transparent user experience is provided, and after a hardware key is inserted and a password is input, an encrypted file can be operated like accessing a common file; file-level fine-grained access control is supported, real-time encryption is performed during writing, and real-time decryption is performed during reading; and when the USB KEY is pulled out, the virtual file system cannot be accessed immediately, only the encrypted ciphertext is stored in the physical storage, and meanwhile, the stability of the system is ensured based on the mature FUSE technology, so that the defects in the prior art are effectively solved.

The invention relates to the technical field of computer file system IO, in particular to a request processing method, device, equipment, system, medium and product, and the method comprises the steps that a virtual file system layer introduces special processing logic for nonvolatile memory host controller interface specification equipment; the IO request is converted into a nonvolatile memory host controller interface specification command, the command is transmitted to the nonvolatile memory host controller interface specification device in the submission queue of the target nonvolatile memory host controller interface specification device to execute the command, and then the result is put into the completion queue and fed back to the host, so that a block layer is bypassed; the overhead caused by multiple times of memory copying in the traditional process is also avoided, the acceleration of the file system data input and output request is realized, and the data input and output performance under the nonvolatile memory host controller interface specification equipment scene is improved.

A data storage management method includes detecting a data change to data in a data repository, identifying metadata of the data change, and storing the metadata in a virtual file, the virtual file being in a data storage format that is compatible with one or more data analysis tools. In response to a subsequent user request to access metadata of the data in the data repository, the method may transmit one or more virtual files containing metadata identified in the user request.

A data storage management method includes detecting a data change to data in a data repository, identifying metadata of the data change, and storing the metadata in a virtual file, the virtual file being in a data storage format that is compatible with one or more data analysis tools. In response to a subsequent user request to access metadata of the data in the data repository, the method may transmit one or more virtual files containing metadata identified in the user request.

Systems for fast views of items in file directories or file folders when interacting with a cloud-based service platform. A server in a cloud-based environment interfaces with one or more storage devices to provide storage of shared content accessible by two or more user devices. A file tree request to view the file directory or file folder of a particular sought after item is issued from an application operating on one of the user devices. Additional file tree items in a file tree hierarchy are prefetched by the cloud-based service platform. The application closes the file tree metadata stream after receiving the portion of the file tree that pertains to the particular item and before receiving the entirety of the metadata pertaining to all of the file tree metadata of all of the items in the directory or folder that contains the particular sought after item.

The application provides a font processing method, device and equipment and a storage medium, including: obtaining an interface function code file of a target application program of a desktop version, the interface function code file including a desktop font file; determining a packaging mode and a target path mapping relationship between a target source storage path of a local file system and a target virtual storage path of a virtual file system; compiling the interface function code file according to the packaging mode to generate a webpage other code file and a webpage font file stored in the target source storage path; loading the webpage font file to the virtual file system according to the webpage other code file and the target path mapping relationship; and in response to an access request for the target application program of the webpage version, accessing and rendering a user interface of the target application program of the webpage version based on the webpage font file in the virtual file system. The same application of the desktop version and the webpage version can load consistent fonts, and the interface display effect is improved.

Embodiments of the present disclosure relate to a traffic detection method, device, equipment and medium, wherein the method comprises: in response to a call request for a preset traffic statistics function in a kernel space, obtaining a first process identifier and corresponding current consumed traffic of the traffic statistics function; calling a query interface of a preset network packet filtering eBPF module, and querying whether the first process identifier is contained according to a preset correspondence relationship in a preset virtual file system; if the first process identifier is contained, querying and obtaining the historical total consumed traffic corresponding to the first process identifier in the correspondence relationship through the query interface; calculating the sum of the historical total consumed traffic and the current consumed traffic to obtain the current total consumed traffic, and calling a write interface of the eBPF module to write the historical total consumed traffic of the correspondence relationship as the current total consumed traffic. In the embodiments of the present disclosure, the current total consumed traffic can be counted with process as granularity, thereby the accuracy of traffic statistics can be improved.

The invention provides a multi-protocol image file processing method, a program product, a system and a related device. The method comprises the following steps: receiving a file input request, wherein the request comprises a file path or a URL (Uniform Resource Locator); executing automatic identification based on a multi-stage identification mechanism on the received file input request through a protocol identification engine so as to identify a protocol type; an adapter corresponding to the identified protocol type is called from a protocol adapter cluster to obtain image file data, the protocol adapter cluster comprises a plurality of independently packaged protocol adapters, and each protocol adapter is independently packaged and configured to process communication of a specified protocol; mapping the file path into a unique logic path through a unified virtual file system; performing metadata extraction, format conversion or batch processing on the image file based on the logic path through a core processing engine; and storing the processed file in a target storage system through an output and storage module according to a predefined rule.

The invention discloses a media asset library content exchange method and system based on a virtual file system, and belongs to the technical field of media asset management, and the system comprises a virtual disk creation module which is used for creating a virtual disk driver in a non-editing software client and mapping a file directory in the media asset system; the file dynamic acquisition and data real-time transmission module is used for calling an interface dynamic acquisition file path and abstracting the interface dynamic acquisition file path into a uniform access model; the data real-time transmission is used for transmitting file data from a media asset system server to a non-editing software client in real time when an access request for a file in a virtual disk is initiated through the non-editing software, and loading file content as required; and the access token management module is used for carrying out identity verification and authority management on the user through an access token mechanism. According to the method, the access efficiency of the media asset materials is improved, and the access security problem of traditional direct mounting media asset storage is solved.

A method comprises: determining a container directory entry in a container virtual file system corresponding to a container, where the container virtual file system is configured to manage at least one file corresponding to the container, and has a container directory entry that reflects a hierarchical relationship between the at least one file; and tagging the container directory entry in the container virtual file system as a first control level, to make a distinction from a control level of a directory entry that is different from that in the container virtual file system and that is in a host virtual file system of a processing device, where the host virtual file system is configured to manage files in the processing device, and has a directory entry that reflects a hierarchical relationship between the files in the processing device.

The present application discloses an optical fiber network unit and a configuration method, belonging to the field of optical network technology. The optical fiber network unit includes a processing module and a physical layer transmission module. The processing module is used to query the management and maintenance data of the physical layer transmission module based on the pre-created PROC virtual file system node, send the management and maintenance data to the user through the WEB browser, and configure the physical layer transmission module in response to the user's configuration information. The processing module is also used to receive electrical signals, process the electrical signals to obtain Ethernet data, and send the Ethernet data to the physical layer transmission module; the physical layer transmission module is used to receive Ethernet data and send Ethernet data to the user-side terminal device. By adding and configuring a physical layer transmission module, the transmission rate of the user-side electrical port of the optical fiber network unit can be greatly improved compared with the existing gigabit transmission rate, solving the problem that the user-side gigabit electrical port of the existing ONU device becomes a bottleneck restricting the high-speed transmission of data in the entire system.

The invention provides a file access method and device.The method comprises the steps that when a cloud application running in a container accesses files under a cloud application directory in the container, if a virtual file system in a host receives a first file access request, whether a first directory in the host has a first identifier or not is judged; if the first directory has the first identifier, judging whether the first directory has a second identifier; if the first directory has the second identifier, the virtual file system sends the second file access request to the first file system for processing; or if the first directory does not have the second identifier, the virtual file system notifies the second file system to mount the remote directory to the first directory through the first file system, and sends the second file access request to the first file system for processing after mounting is completed, at least one of the two problems of low file access response speed and large storage space occupation in the existing scheme can be solved.

The invention discloses a concentrator-based container creation and management method, and solves the problems of complex application program operation environment, non-uniform resource allocation, poor isolation between modules and difficult monitoring and maintenance in a smart power grid concentrator. According to the method, a container is automatically created through a configuration file, an independent virtual file system is created for each application in combination with a fixed-size file and a loop mounting mode, and FLASH use limitation is achieved; the container management module provides an API interface to monitor resource occupation in real time, the state is reported through an MQTT heartbeat mechanism, and the system automatically restarts the container when the state is abnormal, so that self-healing management is realized.

The invention discloses an optical fiber network unit and a configuration method, and belongs to the technical field of optical networks, the optical fiber network unit comprises a processing module and a physical layer transmission module, the processing module is used for querying management and maintenance data of the physical layer transmission module based on pre-created PROC virtual file system nodes, the processing module is used for sending management and maintenance data to a user through a WEB browser, configuring the physical layer transmission module in response to configuration information of the user, receiving the electric signal, processing the electric signal to obtain Ethernet data and sending the Ethernet data to the physical layer transmission module; and the physical layer transmission module is used for receiving the Ethernet data and sending the Ethernet data to the user side terminal equipment. By adding and configuring the physical layer transmission module, the transmission rate of the user side electric port of the optical fiber network unit can be greatly improved compared with the existing gigabit transmission rate, and the problem that the user side gigabit electric port of the existing ONU equipment becomes the bottleneck restricting the high-speed transmission of the data of the whole system is solved.

The invention provides a data management method which can be applied to the technical field of big data. The data management method is executed in a user space file system and comprises the steps that an operation request for a first logic path file is received through a virtual file system, and the operation request is from a user program; the operation request is routed to a kernel driver, a callback function corresponding to the operation request is called, and the callback function is registered by a user program; on the basis of the callback function, a pre-established metadatabase is inquired, metadata corresponding to the first logic path is obtained, and the metadata at least comprises the mapping relation between the logic path and the physical path; and executing an operation corresponding to the operation request based on the metadata. The invention further provides a data management device and equipment, a storage medium and a program product.

The invention discloses a file caching performance improvement method and system based on distributed storage, and the method comprises the steps: firstly obtaining first file caching information of a to-be-cached file in a local caching node, the information comprises at least one of IO mode information generated through an improved virtual file system read-write function, cache page IO type marks and memory state information collected through a memory monitoring thread; inputting the first file cache information into a pre-trained first cache strategy model to obtain a file cache feature vector; the feature vector is sent to a remote storage node, the remote node inputs the feature vector and second file cache information of the to-be-cached file into a pre-trained second cache strategy model together, and a final cache instruction is obtained; and the local node executes cache strategy adjustment according to the instruction. According to the method, global collaborative intelligent optimization of the cache strategy is realized, and the cache hit rate and the system response performance are remarkably improved.

The present application provides a method, device, and storage medium for shared access to a file system. The shared access method is applied to a host machine corresponding to a virtual machine, wherein the virtual machine includes a file system and a shared file driver. The host machine pre-mounts a virtual file system consistent with the file system of the virtual machine. The shared access method includes: receiving a file operation through the virtual file system; generating an operation command for the file system of the virtual machine based on the file operation; and sending the operation command to the shared file driver so that the shared file driver executes the operation command, thereby completing the file operation on the file system of the virtual machine. The shared access method is used to realize file sharing of virtual machines on the basis of reducing virtual machine resource overhead and ensuring the security of virtual machines.

The application discloses a kind of incremental semantic analysis integrated development environment systems for SystemVerilog hardware design language, comprising: workspace discovery component, for automatically identifying project list and constructing project boundary;Virtual file system component, for maintaining source path and file identification mapping and tracking file status;Incremental semantic database component, for performing local failure and incremental recalculation after source code changes;Semantic capability component, for providing completion, jump, reference, renaming, semantic highlighting, formatting and other capabilities;Protocol scheduling component, for unified scheduling and returning results to requests, notifications, background tasks.The application can perform real-time semantic processing on Verilog / SystemVerilog code in a continuous editing scenario, reduce the delay caused by full recalculation, and improve hardware design and development efficiency.

The application discloses a system and method for accelerating reading compressed files based on A Virtual File System, and belongs to the technical field of time series databases; the technical problem to be solved by the application is how to realize column format compressed storage and reading of time series data types, reduce IO, memory and CPU consumption caused by decompression, and improve the ability of the system to process time series data; the technical scheme adopted is as follows: in the time series engine of the open database ZNBase, an execution engine generates an execution plan according to SQL semantic analysis, calls a storage layer interface of ZNBase, and queries accurate time series history partition compressed data; the storage layer completes fast execution of the query in the storage layer based on various compressed query interfaces provided by AVFS, and accelerates the query of the database; the specific steps are as follows: pre-analysis; compressed file pre-reading; reading compressed data.

The application discloses a file operation method of a user space file system and the user space file system, and the method comprises the following steps: a virtual file system receives a file operation request for a target file in the user space file system sent by an application program, and sends the file operation request to a target drive module corresponding to the user space file system; the target drive module starts an extended filter, so as to call a plug-in function corresponding to the file operation request to perform corresponding file operation on an underlying file system, and update shared data areas in a kernel according to an operation result; and a user space daemon obtains a data update result from the shared data areas, and sends the data update result to the application program. According to the technical scheme of the application, the data interaction frequency between the user space and the kernel can be effectively reduced, and the system overhead is reduced.

The embodiment of the invention discloses a memory management method and device for a secure container. The specific implementation mode of the method comprises the steps that a mounting point of the virtual file system is created according to preset mounting parameters, and the mounting parameters comprise an identifier used for indicating whether a large-page memory is started or not; creating a security container, and setting the virtual file system as a memory rear-end carrier of the security container through the virtual machine simulator; detecting mounting parameters through the virtual machine simulator to determine whether a large page memory is started or not; in response to determining to enable the large page memory, allocation of the large page memory is requested. According to the implementation mode, refined application of a transparent large page technology in a secure container environment is realized, and performance benefits close to static large pages are obtained while dynamic memory management advantages are kept.

The invention belongs to the technical field of computers, and particularly relates to a data processing method of an application program, a data processing device of the application program, a computer readable medium, electronic equipment and a computer program product. The method comprises the steps that in response to a data processing request triggered on an application program, a virtual file system established in a memory space of the application program is obtained, and the virtual file system comprises a root node and a non-root node used for representing a file or a directory; the data processing request is analyzed, processing logic and data content carried in the data processing request are obtained, and the data processing request is used for indicating execution of the processing logic on the data content; searching a target node associated with the data content in the virtual file system, and executing processing logic on the target node; and when a preset system storage condition is met, updating the file system body in the permanent storage medium according to the virtual file system. The data processing efficiency of the application program can be improved, and occupation of storage resources is reduced.

Provided is an apparatus for protecting data in a Linux-based operating system, the apparatus including: a physical storage device; and a processor provided with a user application, a user library, a virtual file system (VFS), a kernel-based file system, a Filesystem in Userspace (FUSE) kernel driver, and a FUSE user daemon as software modules.A file containing protection target data may be safely protected by being stored in a FUSE storage area that is accessible only in a FUSE mount state.