CN111736960B

CN111736960B - Service providing method, device and storage medium based on software isolation

Info

Publication number: CN111736960B
Application number: CN202010792767.8A
Authority: CN
Inventors: 焦靖伟
Original assignee: Beijing Infosec Technologies Co Ltd
Current assignee: Beijing Infosec Technologies Co Ltd
Priority date: 2020-08-10
Filing date: 2020-08-10
Publication date: 2020-12-22
Anticipated expiration: 2040-08-10
Also published as: CN111736960A

Abstract

The embodiment of the application provides a service providing method, equipment and storage medium based on software isolation. In the embodiment of the application, JVMs are adopted to realize isolation among services, a main JVM is used as an interface for interaction between computing services and users, a sub JVM with independent operating environments can be created for different users according to the requirements of the users, the sub JVM is used for providing computing services for the users, and the sub JVM returns the computing results to the users through the main JVM. The mutual isolation of the operating environments between the sub JVMs can realize the isolation between different user computing services, so that the user data is safer.

Description

Service providing method, device and storage medium based on software isolation

Technical Field

The present application relates to the field of internet technologies, and in particular, to a service providing method and device based on software isolation, and a storage medium.

Background

In order to deploy a service to a server, we need to configure a runtime environment for the service. In the prior art, in order to ensure safety, an isolation technology is generally required to isolate an operating environment. The hardware isolation performance is good, but the migration is not easy, and the method is not suitable for the scenes of cloud computing and the like which depend on the hardware weakly. Therefore, how to implement the isolation technology is one of the problems that needs to be solved urgently.

Disclosure of Invention

Aspects of the present disclosure provide a service providing method, device, and storage medium based on software isolation, so as to implement an isolation technique.

The embodiment of the application provides a service providing method based on software isolation, which comprises the following steps: creating a main JVM facing a demand user of computing service; the main JVM establishes a sub JVM with an independent operation environment for a user according to a computing resource application initiated by the user, and establishes a communication connection with the sub JVM according to a computing service use application of the user; and the main JVM forwards the computing service requirements of the user to the sub JVM based on the communication connection so that the sub JVM can provide computing services for the user, and the computing results of the sub JVM are returned to the user.

An embodiment of the present application further provides a server device, including: a memory and a processor; a memory for storing a computer program corresponding to the main JVM; a processor, coupled to the memory, for executing a computer program corresponding to the host JVM, for: according to a computing resource application initiated by a user, a sub JVM with an independent operation environment is created for the user, and according to the computing service application of the user, a communication connection with the sub JVM is established; based on the communication connection, the computing service requirement of the user is forwarded to the sub JVM so that the sub JVM can provide computing service for the user, and the computing result of the sub JVM is returned to the user.

Embodiments of the present application further provide a computer-readable storage medium storing a computer program, which, when executed by a processor, causes the processor to implement the steps in the software isolation-based service providing method in the embodiments of the present application.

In the embodiment of the application, JVMs are adopted to realize isolation among services, a main JVM is used as an interface for interaction between computing services and users, a sub JVM with independent operating environments can be created for different users according to the requirements of the users, the sub JVM is used for providing computing services for the users, and the sub JVM returns the computing results to the users through the main JVM. The mutual isolation of the operating environments between the sub JVMs can realize the isolation between different user computing services, so that the user data is safer.

Drawings

The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:

fig. 1 is a schematic structural diagram of a service system provided in an exemplary embodiment of the present application;

FIG. 2 is a flowchart illustrating a user interaction with a service system to provide computing services according to an exemplary embodiment of the present application;

fig. 3 is a schematic flowchart of a service providing method based on software isolation according to an exemplary embodiment of the present application;

fig. 4 is a schematic structural diagram of a server device according to an exemplary embodiment of the present application.

Detailed Description

In order to make the objects, technical solutions and advantages of the present application more apparent, the technical solutions of the present application will be described in detail and completely with reference to the following specific embodiments of the present application and the accompanying drawings. It should be apparent that the described embodiments are only some of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

The technical solutions provided by the embodiments of the present application are described in detail below with reference to the accompanying drawings.

FIG. 1 is a schematic diagram of a service system according to an exemplary embodiment of the present application; as shown in fig. 1, the service system 100 includes: a main Java Virtual Machine (JVM) 101 and at least one sub-JVM 102.

In this embodiment, the service system 100 may provide computing services to the outside, and the computing services may be, but are not limited to: an online education service, an online video service, an online live broadcast service, or the like. A user may initiate a computing resource application to the host JVM 101, where the computing resource application refers to a request from the user to create a child JVM 102. Based on this, the user, who needs the computing service, of the main JVM 101 can serve as an interactive interface between the service system and the user, and can create the sub JVM 102 with an independent operating environment for the user according to the computing resource application initiated by the user, so as to provide the computing service for the user by using the sub JVM 102, and return the computing result of the sub JVM 102 to the user. Different sub-JVMs 102 have independent operating environments, that is, different sub-JVMs 102 are isolated from each other and cannot communicate with each other, and the communication between the user and the sub-JVM 102 is realized through the main JVM 101, so that not only can the isolation between different user computing services be realized, but also the data of the user can be more secure. In addition, the execution environment of the sub-JVM 102 is purer (e.g., only provides computing services, not providing management services), and the function is single, so that the sub-JVM 102 can concentrate on providing computing services, and the efficiency is higher. Further, a just-in-time compiler (JIT) overlaying the child JVM 102 may provide better performance using optimizations such as inlining, pre-heating, etc. In-line is to embed logic of other methods called internally by a method into its own method in the sub JVM 102, and then to change the method to itself, thereby saving the extra expense of calling a function. Pre-warming refers to pre-caching all classes in the child JVM 102 so as to be immediately available when the child JVM 102 is running.

In this embodiment, after creating the child JVM 102, the user may send a computing service usage application to the host JVM 101, where the computing service usage application is used to apply for providing computing services using the created child JVM 102. The computing service use application can carry the computing service requirements of the user. Based on this, the main JVM 101 can establish a communication connection with the sub JVM 102 according to the computing service use application of the user, and lay a foundation for providing computing service using the sub JVM 102. Further, based on the communication connection, the computing service requirements of the user are forwarded to the sub-JVM 102 for the sub-JVM 102 to provide computing services for the user, and the computing results of the sub-JVM 102 are returned to the user.

As shown in fig. 2, an embodiment of the present application further provides an interaction flowchart of a user providing computing services through a service system, and as shown in fig. 2, the flowchart includes the following steps:

21a, the service manager creates a main JVM.

22a, the user initiates a computing resource application to the main JVM to apply for the sub JVM.

23a, the main JVM creates a sub JVM with an independent operation environment according to the computing resource application.

And 24a, initiating a computing service use application to the main JVM by the user to request to use the sub JVM to provide services for the user.

25a, the main JVM establishes communication connection with the sub JVM according to the computing service use application of the user.

Based on the communication connection, the master JVM forwards the user's computing service requirements to the child JVM 26 a.

27a, the sub JVM provides calculation service for the user, and returns the calculation result to the main JVM.

28a, the main JVM returns the calculation result returned by the sub JVM to the user.

In step 21a, an embodiment of creating a host JVM for providing services to the outside includes: receiving an instruction for creating a main JVM (JVM) input by a service manager through a command line; executing an executable file corresponding to the main JVM according to the instruction, creating the main JVM and distributing a name and a main process number to the main JVM; and establishing a binding relation between the name of the main JVM and the number of the main process. Wherein the master JVM may provide its name to the child JVM for the child JVM to establish a communication connection with the master JVM. In addition, the service manager can destroy the main JVM through the main process number.

In step 23a, an embodiment of a host JVM creating a child JVM with an independent operating environment for a user according to a computing resource application initiated by the user, includes: receiving a computing resource application initiated by a user, wherein the computing resource application is used for requesting to establish a sub JVM providing computing service; executing the executable file corresponding to the child JVM to create the child JVM for a user and allocate a child process number and a child process name to the child JVM; and establishing a binding relationship between the name of the child JVM and the child process number. In this embodiment, the main JVM may establish a communication connection with the sub JVM according to the name of the sub JVM, and may destroy the sub JVM by the process number.

In an optional embodiment, the method of this embodiment further includes: the main JVM allocates a user identifier to a user; and establishing a mapping relation between the user identifier and the name of the sub JVM, and storing the mapping relation into a mapping relation table. In this embodiment, the host JVM may assign a user identifier to the user according to the information such as the MAC address, IP address or name of the user, where the user identifier refers to identification information that can uniquely identify a user, and may be, for example, an alphabet, a number, a numeric string or a character string, such as "aaa", or "111", or "aabb" or "11 aa".

In step 24a, a user identifier of the user may be obtained according to the computing service use application of the user; the computing service use application of the user comprises information such as an MAC address, an IP address or a user name of the user, a user identifier of the user can be obtained based on the information, and further, a mapping relation table is inquired according to the user identifier to judge whether the name of the sub JVM corresponding to the user identifier exists or not; if the child JVM exists, according to the name of the child JVM, a Socket service is started between the main JVM and the child JVM identified by the name of the child JVM so as to establish communication connection with the child JVM; if the sub-JVM does not exist, the main JVM is not used for creating the sub-JVM for the user or the sub-JVM corresponding to the user is recycled and destroyed, the executable file is executed, the sub-JVM is created for the user, and the sub-process number and the corresponding name are distributed to the sub-JVM; and according to the name of the child JVM, starting a Socket service between the main JVM and the child JVM to establish communication connection with the child JVM. Wherein the master JVM may provide its name to the child JVM to enable establishing a communication connection with the child JVM.

The Socket is an intermediate software abstraction layer for communication between an application layer and a Transmission Control Protocol/Internet Protocol (TCP/IP) family, and is a group of interfaces. The main JVM and the sub JVM can establish connection based on Socket service, the main JVM sends a calculation service requirement, the sub JVM receives a request and processes the calculation service requirement, then a calculation result is sent to the main JVM, and the main JVM returns the calculation result to a user.

In an optional embodiment, the method of this embodiment further includes: after the main JVM creates the sub JVM, if a computing service use application initiated by a user for the sub JVM is not received within the time exceeding a set first threshold value, the sub JVM is recovered; or the main JVM recovers the sub JVM after returning the calculation result of the sub JVM to the user. Wherein, recycling the child JVM means that the child JVM is destroyed by the main JVM through the process number of the child JVM.

Fig. 3 is a schematic flowchart of a service providing method based on software isolation according to an exemplary embodiment of the present application; as shown in fig. 3, the method includes:

31. creating a main JVM facing a demand user of computing service;

32. the main JVM establishes a sub JVM with an independent operation environment for a user according to a computing resource application initiated by the user, and establishes a communication connection with the sub JVM according to a computing service use application of the user;

33. and the main JVM forwards the computing service requirements of the user to the sub JVM based on the communication connection so that the sub JVM can provide computing services for the user, and the computing results of the sub JVM are returned to the user.

In this embodiment, the main JVM may provide a computing service to a demand user on one hand, and may control the creation and destruction of the sub JVM on the other hand, and provide the computing service demand of the user to the sub JVM. The sub-JVM is a Java virtual machine providing computing services for a user, different sub-JVMs have independent operating environments, i.e., different sub-JVMs are isolated from each other and cannot communicate with each other, and communication between the user and the sub-JVM is realized through the main JVM.

Among these, computing services may be, but are not limited to: an online education service, an online video service, an online live broadcast service, or the like. Computing service requirements refer to user requirements for computing services, and the user may submit the computing service requirements in the form of a Software Development Kit (SDK) or an Application Programming Interface (API).

In this embodiment, a user may initiate a computing resource application to a host JVM, where the computing resource application refers to a request for the user to apply for creating a child JVM. Based on this, the main JVM can create a sub-JVM with an independent operating environment for the user according to the computing resource application initiated by the user. One user may have multiple sub JVMs, or one computing unit may be shared by one group (including multiple users), which is not limited herein.

In this embodiment, after creating the child JVM, the user may send a computing service use application to the host JVM, where the computing service use application is used to apply for the created child JVM to the host JVM. The computing service use application can carry the computing service requirements of the user. Based on this, the main JVM can establish a communication connection with the sub JVM according to the computing service use application of the user. Further, based on the communication connection, the computing service requirement of the user is forwarded to the sub JVM to provide the computing service for the user by the sub JVM, and the computing result of the sub JVM is returned to the user.

In an alternative embodiment, an implementation of creating a host JVM for providing services to the outside includes: receiving an instruction for creating a main JVM (JVM) input by a service manager through a command line; executing an executable file corresponding to the main JVM according to the instruction, creating the main JVM and distributing a name and a main process number to the main JVM; and establishing a binding relation between the name of the main JVM and the number of the main process. Wherein the master JVM may provide its name to the child JVM for the child JVM to establish a communication connection with the master JVM. In addition, the service manager can destroy the main JVM through the main process number.

In an alternative embodiment, an implementation of a master JVM creating a child JVM with an independent operating environment for a user according to a computing resource application initiated by the user includes: receiving a computing resource application initiated by a user, wherein the computing resource application is used for requesting to establish a sub JVM providing computing service; executing the executable file corresponding to the child JVM to create the child JVM for a user and allocate a child process number and a child process name to the child JVM; and establishing a binding relationship between the name of the child JVM and the child process number. In this embodiment, the main JVM may establish a communication connection with the sub JVM according to the name of the sub JVM, and may destroy the sub JVM by the process number.

Further optionally, the user identifier of the user may be obtained according to the computing service use application of the user; the computing service use application of the user comprises information such as an MAC address, an IP address or a user name of the user, a user identifier of the user can be obtained based on the information, and further, a mapping relation table is inquired according to the user identifier to judge whether the name of the sub JVM corresponding to the user identifier exists or not; if the child JVM exists, according to the name of the child JVM, a Socket service is started between the main JVM and the child JVM identified by the name of the child JVM so as to establish communication connection with the child JVM; if the sub-JVM does not exist, the main JVM is not used for creating the sub-JVM for the user or the sub-JVM corresponding to the user is recycled and destroyed, the executable file is executed, the sub-JVM is created for the user, and the sub-process number and the corresponding name are distributed to the sub-JVM; and according to the name of the child JVM, starting a Socket service between the main JVM and the child JVM to establish communication connection with the child JVM. Wherein the master JVM may provide its name to the child JVM to enable establishing a communication connection with the child JVM.

It should be noted that the execution subjects of the steps of the methods provided in the above embodiments may be the same device, or different devices may be used as the execution subjects of the methods. For example, the execution subjects of steps 31 to 33 may be device a; for another example, the execution subject of steps 31 and 32 may be device a, and the execution subject of step 33 may be device B; and so on.

In addition, in some of the flows described in the above embodiments and the drawings, a plurality of operations are included in a specific order, but it should be clearly understood that the operations may be executed out of the order presented herein or in parallel, and the sequence numbers of the operations, such as 31, 32, etc., are merely used for distinguishing different operations, and the sequence numbers do not represent any execution order per se. Additionally, the flows may include more or fewer operations, and the operations may be performed sequentially or in parallel. It should be noted that, the descriptions of "first", "second", etc. in this document are used for distinguishing different messages, devices, modules, etc., and do not represent a sequential order, nor limit the types of "first" and "second" to be different.

Fig. 4 is a schematic structural diagram of a server device according to an exemplary embodiment of the present application; as shown in fig. 4, the server device includes: a memory 401 and a processor 402.

The memory 401 is used for storing a computer program corresponding to the host JVM, and may be configured to store other various data to support operations on the server device. Examples of such data include instructions for any application or method operating on the server device, contact data, phonebook data, messages, pictures, videos, and so forth.

The memory 401 may be implemented by any type or combination of volatile or non-volatile memory devices such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disks.

A processor 402, coupled to the memory 401, for running a computer program corresponding to the host JVM, for: according to a computing resource application initiated by a user, a sub JVM with an independent operation environment is created for the user, and according to the computing service application of the user, a communication connection with the sub JVM is established; based on the communication connection, the computing service requirement of the user is forwarded to the sub JVM so that the sub JVM can provide computing service for the user, and the computing result of the sub JVM is returned to the user.

In an alternative embodiment, the processor 402 is further configured to: receiving an instruction for creating a main JVM (JVM) input by a service manager through a command line; executing an executable file corresponding to the main JVM according to the instruction, creating the main JVM and distributing a name and a main process number to the main JVM; and establishing a binding relation between the name of the main JVM and the number of the main process.

In an optional embodiment, when the main JVM creates a sub JVM with an independent running environment for a user according to a computing resource application initiated by the user, the processor 402 is specifically configured to: receiving a computing resource application initiated by a user, wherein the computing resource application is used for requesting to establish a sub JVM providing computing service; executing an executable file corresponding to the child JVM to create the child JVM for a user and allocate a child process number and a child process name to the child JVM; and establishing a binding relationship between the name of the child JVM and the child process number.

In an alternative embodiment, the processor 402 is further configured to: allocating user identification for a user; and establishing a mapping relation between the user identifier and the name of the sub JVM, and storing the mapping relation into a mapping relation table.

In an alternative embodiment, the processor 402, when establishing a communication connection with the sub JVM according to the computing service usage application of the user, is specifically configured to: acquiring a user identifier of a user according to a computing service use application of the user; inquiring a mapping relation table according to the user identifier to judge whether the name of the sub JVM corresponding to the user identifier exists or not; if the child JVM exists, according to the name of the child JVM, a Socket service is started between the main JVM and the child JVM identified by the name of the child JVM so as to establish communication connection with the child JVM; if not, executing the executable file to create a child JVM for the user and allocate a child process number and a corresponding name to the child JVM; and according to the name of the child JVM, starting a Socket service between the main JVM and the child JVM to establish communication connection with the child JVM.

In an alternative embodiment, the processor 402 is further configured to: after the main JVM creates the sub JVM, if a computing service use application initiated by a user for the sub JVM is not received within the time exceeding a set first threshold value, the sub JVM is recovered; or the main JVM recovers the sub JVM after returning the calculation result of the sub JVM to the user.

Further, as shown in fig. 4, the server device further includes: communication components 406, power components 408, and the like. Only some of the components are schematically shown in fig. 4, and the server device is not meant to include only the components shown in fig. 4. If the server device of this embodiment is implemented as a conventional server, a cloud server, or a server array.

Accordingly, an embodiment of the present application further provides a computer-readable storage medium storing a computer program, where the computer program can implement the steps that can be executed by the server device in the software isolation-based service providing method embodiment.

The communication component of fig. 4 described above is configured to facilitate communication between the device in which the communication component is located and other devices in a wired or wireless manner. The device in which the communication component is located may access a wireless network based on a communication standard, such as WiFi, 2G or 3G, or a combination thereof. In an exemplary embodiment, the communication component receives a broadcast signal or broadcast related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component may further include a Near Field Communication (NFC) module, Radio Frequency Identification (RFID) technology, infrared data association (IrDA) technology, Ultra Wideband (UWB) technology, Bluetooth (BT) technology, and the like.

The power supply assembly of fig. 4 described above provides power to the various components of the device in which the power supply assembly is located. The power components may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the device in which the power component is located.

As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.

Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.

It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

The above description is only an example of the present application and is not intended to limit the present application. Various modifications and changes may occur to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A service providing method based on software isolation is characterized by comprising the following steps:

creating a main JVM facing a demand user of a computing service;

the main JVM establishes a sub JVM with an independent operation environment for a user according to a computing resource application initiated by the user, and establishes a communication connection with the sub JVM according to a computing service use application of the user;

the main JVM forwards the computing service requirement of the user to the sub JVM based on the communication connection so that the sub JVM can provide computing service for the user, and the computing result of the sub JVM is returned to the user;

wherein, creating a main JVM providing computing service to the outside comprises:

receiving an instruction for creating a main JVM (JVM) input by a service manager through a command line;

executing an executable file corresponding to the main JVM according to the instruction, creating the main JVM and distributing a name and a main process number to the main JVM;

establishing a binding relationship between the name of the main JVM and the number of the main process;

the main JVM establishes a sub JVM with an independent operation environment for a user according to a computing resource application initiated by the user, and the method comprises the following steps:

receiving a computing resource application initiated by a user, wherein the computing resource application is used for requesting to establish a sub JVM providing the computing service;

executing an executable file corresponding to the child JVM to create the child JVM for the user and allocate a child process number and a child process name to the child JVM;

establishing a binding relationship between the name of the child JVM and the child process number;

the method further comprises the following steps: allocating a user identifier for the user;

establishing a mapping relation between the user identifier and the name of the sub JVM, and storing the mapping relation into a mapping relation table;

establishing a communication connection with the sub JVM according to the computing service use application of the user, comprising:

acquiring a user identifier of the user according to the computing service application of the user;

inquiring the mapping relation table according to the user identifier to judge whether the name of the sub JVM corresponding to the user identifier exists or not;

if the sub-JVM exists, according to the name of the sub-JVM, starting Socket service between the main JVM and the sub-JVM identified by the name of the sub-JVM to establish communication connection with the sub-JVM;

if not, executing the executable file to create the child JVM for the user and allocate a child process number and a corresponding name to the child JVM; and according to the name of the sub JVM, starting Socket service between the main JVM and the sub JVM to establish communication connection with the sub JVM.

2. The method of claim 1, further comprising:

after the main JVM creates the sub JVM, if a computing service use application initiated by a user for the sub JVM is not received within a first set threshold time, recovering the sub JVM;

or

And after the main JVM returns the calculation result of the sub JVM to the user, the main JVM recycles the sub JVM.

3. A server-side device, comprising: a memory and a processor;

the memory is used for storing a computer program corresponding to the main JVM;

the processor, coupled to the memory, is configured to run a computer program corresponding to the host JVM, and is configured to: according to a computing resource application initiated by a user, a sub JVM with an independent operating environment is created for the user, and according to a computing service application of the user, a communication connection with the sub JVM is established; based on the communication connection, forwarding the computing service requirement of the user to the sub JVM to provide computing service for the user by the sub JVM, and returning the computing result of the sub JVM to the user;

the processor is further configured to:

the processor, when the main JVM applies for a computing resource initiated by a user and creates a sub JVM with an independent operating environment for the user, is specifically configured to:

the processor is further configured to: allocating a user identifier for the user;

when the processor establishes a communication connection with the sub JVM according to the computing service use application of the user, the processor is specifically configured to:

4. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, causes the processor to carry out the steps of the method of any one of claims 1-2.