34 results about "Virtual file system" patented technology

The embodiment of the invention provides a process interception method and device and electronic equipment. The method comprises the following steps: a kernel space receives a process protection list sent by a user space by utilizing a virtual file system interface; wherein the process protection list comprises a process identifier of at least one to-be-protected process; the kernel space obtains a process termination request; wherein the process termination request is used for requesting to terminate a target process, and the target process is a process entity scheduled by an operating system; under the condition that the kernel space determines that the request type of the process termination request is a preset request, determining a matching relationship between the target process and a process protection list based on a target process identifier of the target process; and when the matching relationship indicates that the process identifier of the at least one to-be-protected process in the process protection list comprises the target process identifier, the kernel space intercepts the process termination request. By the adoption of the method, the important process can be effectively prevented from being terminated due to malicious or misoperation, and the safety and stability of the system are improved.

The invention discloses a data security protection method and system for large model training. The core of the method is that a data safe box trusted application (TA application) is deployed in a trusted execution environment (TEE) and cooperatively works with a user-defined virtual file system driver at a host machine side, so that an end-to-end secret state data access control link is constructed. Before encryption protection of sensitive data, a measurement value (including code hash, configuration parameters and a runtime state) of a current TEE instance is submitted to a remote verification service through a data safe box TA application, and the verification service only sends the measurement value (including code hash, configuration parameters and a runtime state) of the current TEE instance to the remote verification service after confirming that the TEE environment meets a preset security policy (such as a kernel version, a software version and configuration parameter compliance). And generating a secret key encrypted by a custom virtual file system on a host machine side through derivation. And malicious copying of a system memory and a storage medium is prevented, so that the traditional attack defense capability is effectively improved.

The invention belongs to the field of end-cloud collaborative computing and lightweight virtualization, and provides an end-cloud collaborative lightweight application distribution and isolated operation method and system, which adopts a WASM byte code as a unique format for application distribution, compiles an application into a WASM module at a cloud and then distributes the WASM module to an end side device; the end side equipment combines read-only configuration data of a host with a temporary file system Tmpfs of a memory by utilizing OverlayFS on a file level, and maps the data into a virtual file system in a WASM sandbox; on the symbol level, a dynamic WASI bridge is introduced, according to the requirement of an import section in a WASM module, the native capacity of a host system is injected into WASM operation in a host function mode in real time, and the heterogeneous hardware characteristics of end-side equipment are adapted. The method is suitable for an end-side environment with an immutable operating system as a base, and is compatible with a cloud containerization deployment scene.

Systems for fast views of items in file directories or file folders when interacting with a cloud-based service platform. A server in a cloud-based environment interfaces with one or more storage devices to provide storage of shared content accessible by two or more user devices. A file tree request to view the file directory or file folder of a particular sought after item is issued from an application operating on one of the user devices. Additional file tree items in a file tree hierarchy are prefetched by the cloud-based service platform. The application closes the file tree metadata stream after receiving the portion of the file tree that pertains to the particular item and before receiving the entirety of the metadata pertaining to all of the file tree metadata of all of the items in the directory or folder that contains the particular sought after item.

The invention provides a multi-protocol image file processing method, a program product, a system and a related device. The method comprises the following steps: receiving a file input request, wherein the request comprises a file path or a URL (Uniform Resource Locator); executing automatic identification based on a multi-stage identification mechanism on the received file input request through a protocol identification engine so as to identify a protocol type; an adapter corresponding to the identified protocol type is called from a protocol adapter cluster to obtain image file data, the protocol adapter cluster comprises a plurality of independently packaged protocol adapters, and each protocol adapter is independently packaged and configured to process communication of a specified protocol; mapping the file path into a unique logic path through a unified virtual file system; performing metadata extraction, format conversion or batch processing on the image file based on the logic path through a core processing engine; and storing the processed file in a target storage system through an output and storage module according to a predefined rule.

The invention discloses a concentrator-based container creation and management method, and solves the problems of complex application program operation environment, non-uniform resource allocation, poor isolation between modules and difficult monitoring and maintenance in a smart power grid concentrator. According to the method, a container is automatically created through a configuration file, an independent virtual file system is created for each application in combination with a fixed-size file and a loop mounting mode, and FLASH use limitation is achieved; the container management module provides an API interface to monitor resource occupation in real time, the state is reported through an MQTT heartbeat mechanism, and the system automatically restarts the container when the state is abnormal, so that self-healing management is realized.

The invention provides a data management method which can be applied to the technical field of big data. The data management method is executed in a user space file system and comprises the steps that an operation request for a first logic path file is received through a virtual file system, and the operation request is from a user program; the operation request is routed to a kernel driver, a callback function corresponding to the operation request is called, and the callback function is registered by a user program; on the basis of the callback function, a pre-established metadatabase is inquired, metadata corresponding to the first logic path is obtained, and the metadata at least comprises the mapping relation between the logic path and the physical path; and executing an operation corresponding to the operation request based on the metadata. The invention further provides a data management device and equipment, a storage medium and a program product.

The invention discloses a file caching performance improvement method and system based on distributed storage, and the method comprises the steps: firstly obtaining first file caching information of a to-be-cached file in a local caching node, the information comprises at least one of IO mode information generated through an improved virtual file system read-write function, cache page IO type marks and memory state information collected through a memory monitoring thread; inputting the first file cache information into a pre-trained first cache strategy model to obtain a file cache feature vector; the feature vector is sent to a remote storage node, the remote node inputs the feature vector and second file cache information of the to-be-cached file into a pre-trained second cache strategy model together, and a final cache instruction is obtained; and the local node executes cache strategy adjustment according to the instruction. According to the method, global collaborative intelligent optimization of the cache strategy is realized, and the cache hit rate and the system response performance are remarkably improved.

The application discloses a kind of incremental semantic analysis integrated development environment systems for SystemVerilog hardware design language, comprising: workspace discovery component, for automatically identifying project list and constructing project boundary;Virtual file system component, for maintaining source path and file identification mapping and tracking file status;Incremental semantic database component, for performing local failure and incremental recalculation after source code changes;Semantic capability component, for providing completion, jump, reference, renaming, semantic highlighting, formatting and other capabilities;Protocol scheduling component, for unified scheduling and returning results to requests, notifications, background tasks.The application can perform real-time semantic processing on Verilog / SystemVerilog code in a continuous editing scenario, reduce the delay caused by full recalculation, and improve hardware design and development efficiency.

The application discloses a system and method for accelerating reading compressed files based on A Virtual File System, and belongs to the technical field of time series databases; the technical problem to be solved by the application is how to realize column format compressed storage and reading of time series data types, reduce IO, memory and CPU consumption caused by decompression, and improve the ability of the system to process time series data; the technical scheme adopted is as follows: in the time series engine of the open database ZNBase, an execution engine generates an execution plan according to SQL semantic analysis, calls a storage layer interface of ZNBase, and queries accurate time series history partition compressed data; the storage layer completes fast execution of the query in the storage layer based on various compressed query interfaces provided by AVFS, and accelerates the query of the database; the specific steps are as follows: pre-analysis; compressed file pre-reading; reading compressed data.

The application discloses a file operation method of a user space file system and the user space file system, and the method comprises the following steps: a virtual file system receives a file operation request for a target file in the user space file system sent by an application program, and sends the file operation request to a target drive module corresponding to the user space file system; the target drive module starts an extended filter, so as to call a plug-in function corresponding to the file operation request to perform corresponding file operation on an underlying file system, and update shared data areas in a kernel according to an operation result; and a user space daemon obtains a data update result from the shared data areas, and sends the data update result to the application program. According to the technical scheme of the application, the data interaction frequency between the user space and the kernel can be effectively reduced, and the system overhead is reduced.

The invention belongs to the technical field of computers, and particularly relates to a data processing method of an application program, a data processing device of the application program, a computer readable medium, electronic equipment and a computer program product. The method comprises the steps that in response to a data processing request triggered on an application program, a virtual file system established in a memory space of the application program is obtained, and the virtual file system comprises a root node and a non-root node used for representing a file or a directory; the data processing request is analyzed, processing logic and data content carried in the data processing request are obtained, and the data processing request is used for indicating execution of the processing logic on the data content; searching a target node associated with the data content in the virtual file system, and executing processing logic on the target node; and when a preset system storage condition is met, updating the file system body in the permanent storage medium according to the virtual file system. The data processing efficiency of the application program can be improved, and occupation of storage resources is reduced.

Provided is an apparatus for protecting data in a Linux-based operating system, the apparatus including: a physical storage device; and a processor provided with a user application, a user library, a virtual file system (VFS), a kernel-based file system, a Filesystem in Userspace (FUSE) kernel driver, and a FUSE user daemon as software modules.A file containing protection target data may be safely protected by being stored in a FUSE storage area that is accessible only in a FUSE mount state.

One or more human users can collaborate with an LLM to create, read, and edit files for every step of computer game / software development, from initial brainstorming to a running web application. Advantageously collaboration is not limited to a single file or a single folder, but rather employs a full virtual file system that facilitates easy and intuitive collaboration across multiple files, provides a more traditional, recognizable code development experience, and affords ideation, building, testing, and deploying the applications within a single web-based environment.

The invention provides a virtual file system, a binlog-in-redo implementation method, electronic equipment and a readable medium, and relates to the technical field of databases. According to the scheme, a file management service responds to a redo log persistence request transparently transmitted by a database service layer through a virtual redo log service, and persistence operation is executed on physical files which are written into a redo log file block and a binlog file block in a staggered mode; the file management service also manages a shared memory, and the shared memory comprises a redo log cache and a binlog cache; the virtual redo log service provides an access path of the redo log cache, and the virtual binlog service provides an access path of the binlog cache. According to the scheme, writing of the redo log file block and writing of the binlog file block are combined into writing of the physical file, the transaction submission operation efficiency is improved, when it is confirmed that persistence of the binlog file block is completed, master-slave synchronization is triggered in an asynchronous notification mode, and the risk of master-slave inconsistency is avoided; the original storage format can be displayed to the outside through the virtual service, seamless transparent compatibility is achieved, the customization requirement is lowered, and the deployment cost is reduced.

This application discloses an access request processing method and electronic device under centralized storage, relating to the field of centralized storage technology. The method includes: setting up a virtual file system in nodes and using the virtual file system to synchronize cache mirrors between nodes. When any node receives an access request, it first determines whether the request is a read or write request, and then uses the cache mirror to process the request. This solves the problems of data corruption due to the lack of memory consistency protection when using a local file system to provide read / write services to multiple nodes, and the reliance on a single node for protocol processing. This method introduces a virtual file system into the nodes, enabling nodes to mount the same volume and use the virtual file system for inter-node cache synchronization, thus achieving unified cache mirroring between nodes. Through inter-node cache mirroring, the ability for multiple nodes to provide services to the outside world is realized.

A method comprises: determining a container directory entry in a container virtual file system corresponding to a container, where the container virtual file system is configured to manage at least one file corresponding to the container, and has a container directory entry that reflects a hierarchical relationship between the at least one file; and tagging the container directory entry in the container virtual file system as a first control level, to make a distinction from a control level of a directory entry that is different from that in the container virtual file system and that is in a host virtual file system of a processing device, where the host virtual file system is configured to manage files in the processing device, and has a directory entry that reflects a hierarchical relationship between the files in the processing device.

The embodiment of the application relates to the computer or network technology application field, and discloses a loading method, system, host and storage medium of an operating system, the loading method of the operating system uses the mode of a pre-boot execution environment to load a system image file into a host memory, then loads the system image file to a read-only file system of a virtual file system, and hangs a storage device of the host to a writable file system of the virtual file system, so that the writable file system is automatically loaded when next power-on starting, thereby solving the problem that the mode of the pre-boot execution environment cannot save system data, and improving the loading flexibility of the operating system.

The application discloses a kind of data management methods of multi-user encrypted mobile storage medium.The method is by using hierarchical key management mechanism, set up a main encryption key and carry out unified encryption to entire storage partition, simultaneously generate independent user key for each client user, for encrypting the copy of main encryption key.At the time of client login, mobile storage medium first authenticates its identity, and derives the corresponding user key by user password, then decrypts the pre-stored copy of main encryption key using the user key, to obtain the main encryption key.Mobile storage medium then decrypts the storage partition in real time using the main encryption key, and constructs the corresponding virtual file system and exclusive directory for the user, to realize the isolation and management of user data.The application can solve the technical problem that traditional encrypted mobile storage medium does not support multi-user access permission management.

The invention discloses a file operation behavior monitoring method and device, equipment and a storage medium, and relates to the technical field of computer software, and the method comprises the steps: determining a target file operation initiated by an application program for a target file, and determining a target process corresponding to the target file operation; generating a first target notification event corresponding to the target process through a virtual file system layer of a kernel space; generating target operation information corresponding to the target file operation based on the first target notification event, and generating a target virus analysis result of the target file operation based on the target operation information; and controlling the execution of the target file operation based on the target virus analysis result through the virtual file system layer of the kernel space. It can be seen from the above that management and control can be intervened in real time in the file operation process, execution and diffusion of virus files are effectively avoided, the timeliness of virus discovery and disposal is remarkably improved, and system resource occupation is reduced.

The invention discloses a fine-grained geometric desensitization and virtual file system transparent reconstruction method which can be directly applied to a trusted data space, a smart city digital twin platform and a cross-enterprise design cooperation system. According to the technical scheme disclosed by the invention, fine-grained concealment and hierarchical authorization of component-level geometric data can be realized on the premise of not damaging an IFC standard file analysis structure, and meanwhile, the security risk caused by the fact that encrypted data must be decrypted when being used at a client can be avoided, so that on-demand streaming loading and transparent reconstruction of the data are realized.

This application relates to a distributed erasure coding virtual file system. A plurality of computing devices are communicatively coupled to each other via a network, and each of the plurality of computing devices includes one or more of a plurality of storage devices. A plurality of failure resilient address spaces are distributed across the plurality of storage devices such that each of the plurality of failure resilient address spaces spans the plurality of storage devices. Each of the plurality of failure resilient address spaces is organized as a plurality of stripes. Each of the plurality of stripes or a plurality of stripes is part of a respective one of a plurality of forward error correction (FEC) protection domains. Each of the plurality of stripes can include a plurality of storage blocks. Each block of a particular stripe of the plurality of stripes can reside on a different storage device of the plurality of storage devices.

The invention discloses a large-scale data set increment synchronization method based on cloud storage. The method comprises the following steps: designing a cloud object storage intermediary transmission architecture, designing an offset mapping file system realized based on a user mode file system FUSE, and designing a sampling type file digest algorithm; comprises: generating a data description file; establishing connection with cloud storage, namely a transit hub; generating a transmission task list; performing task management and state maintenance; mounting the offset mapping file system, mapping the file into an independent virtual file in the virtual file system from a specified position, and reading and transmitting the virtual file; executing data transmission; and carrying out increment merging and data verification. The invention provides an efficient, low-cost and reliable large-scale data set cross-ocean synchronization solution, and can solve the problems of high flow cost, limited cross-border bandwidth, unstable network delay and the like in cross-ocean data synchronization in an international network environment.

The application belongs to the field of end-cloud collaborative computing and lightweight virtualization, and proposes a lightweight application distribution and isolation running method and system for end-cloud collaboration. WASM bytecode is used as the only format for application distribution, and the application is compiled into a WASM module on the cloud side and distributed to the end-side device. The end-side device uses OverlayFS to merge the host read-only configuration data and the memory temporary file system Tmpfs into a virtual file system in the WASM sandbox at the file level. At the symbol level, a dynamic WASI bridge is introduced, and according to the requirements of the import section in the WASM module, the native capabilities of the host system are injected into the WASM runtime in the form of a host function (HostFunction) in real time, adapting to the heterogeneous hardware characteristics of the end-side device. The application is suitable for end-side environments with immutable operating systems as the base, and is compatible with cloud container deployment scenarios.

The application discloses a data processing method and device, and a virtual file system is connected to a container. When a container interface layer receives a data processor request, the data processing request is analyzed and sent to the virtual file system. The virtual file system determines target operation corresponding to the data processing request and target file index information, so that the virtual file system executes the target operation on a storage disk based on the target file index information. The virtual file system can map the processing operation to the storage disk corresponding to the container, full-user-mode access can be realized, kernel overhead is avoided in the data processing request process, and resource overhead and processing delay are reduced.

The invention discloses a method for converting code-free low-code metadata into a source code, and relates to the technical field of data processing, in particular to the method for converting the code-free low-code metadata into the source code, a metadata generation source code system comprises a project type structure library, a project type component code generation library, a project type optimizer and a virtual file system, the virtual file system comprises a basic composition unit, a module and a tool unit. According to the method for converting the code-free low-code metadata into the source code, the business logic metadata of the code-free / low-code project is converted into any project type through the business logic generated by dragging the business logic metadata, so that the method is not limited to the field of micro-services, can also be used for micro-service development and chip program development, and even can be used for the field of PC end program development and chip design; moreover, multiple sets of source codes containing business logic can be directly generated through an application which is established without codes and low codes, instead of only data addition, deletion, modification and checking.

This application provides a method and system for collecting and processing NVMe / TCP protocol end-to-end performance data. The method includes: a user-space control module parsing a configuration file to generate monitoring configuration parameters, and sending the monitoring configuration parameters to a kernel-space monitoring module through a character device interface; the kernel-space monitoring module registering kernel tracepoint hooks corresponding to the NVMe / TCP protocol end-to-end, collecting end-to-end event data of the corresponding I / O stream through the tracepoint hooks, writing the collected event data into a pre-allocated per-CPU circular buffer, performing anomaly detection based on the event data, and generating anomaly events; the kernel-space monitoring module exporting statistical data and anomaly events to the user-space control module through a virtual file system, whereby the user-space control module performs anomaly root cause localization. This application reduces the overhead of monitoring operations while achieving end-to-end performance collection and anomaly diagnosis.

Embodiments of the present application provide a file processing method, device and equipment based on a one-way optical gate system and a medium. The method comprises: in the case that a host on an external network side receives service data, the host caches the service data in the form of a cache file into a first virtual file system (VFS), and adds a first event message corresponding to the service data and a read priority corresponding to the first event message into a priority message queue of the host on the external network side; the host on the external network side reads the first event message from the priority message queue in turn according to the read priority, reads service data corresponding to each first event message from the first VFS in the case that each first event message is read, and imports the service data into a host on an internal network side through the one-way optical gate. Embodiments of the present application can effectively improve the reliability of one-way optical gate transmission files.

A system includes a data management server and a data store. The data store uses an external file system to store the data of a client virtual machine (VM) which uses an internal file system. The server comprises an agent VM. Responsive to receiving a request to retrieve a file from a filesystem snapshot, the agent VM determines a path of the internal files system of the client VM and mounts a virtual file system at the agent VM based on the determined path. The virtual file system represents the internal file system of the client virtual machine. The agent VM uses a block device protocol to translate the internal file address to an external file address of the external file system. The agent VM retrieves the file stored in the data store based on the external file address and provides the retrieved file to the target device.