9364results about "Internal/peripheral component protection" patented technology

Apparatuses, systems, and methods for managing access to metadata stored at a memory. To manage access to metadata, a mode register is configured to receive a metadata enable setting and to provide a metadata enable signal based on the metadata enable setting. A metadata access control circuit configured to receive a column address identifying a particular column to be accessed within a memory array. The metadata access control circuit blocks access to a column corresponding to the column address when the column address matches one of a plurality of particular column addresses designated for storage of metadata and the metadata enable signal has a first value, and permits access to a column corresponding to the column address when the column address is different than every one of the a plurality of particular column addresses designated for storage of metadata or the metadata enable signal has a second value.

The invention discloses an electronic signature generation and anti-counterfeiting system based on multi-source information fusion, and the system comprises a multi-source information collection module which is used for synchronously obtaining the fingerprint / iris characteristics of a user, the hardware fingerprint of terminal equipment, and the timestamp and geographical location information during operation; the information fusion processing module is used for encrypting and compressing the multi-source information and generating a unique feature vector by adopting a weighted feature fusion algorithm and a block chain encryption anchoring technology; the electronic signature generation module is used for generating a visual signature graph containing a dynamic digital watermark and a multi-layer nested timestamp based on the feature vector, and writing a feature vector hash value into a block chain for evidence storage; and the anti-counterfeiting verification module performs authenticity verification on the signature through a dynamic decryption protocol distributed by a quantum key, and supports reverse feature matching verification based on block chain traceability. According to the invention, the limitation of a traditional single encryption mode is broken through through the cross binding of the multi-mode biological characteristics and the hardware fingerprints in combination with the quantum key and block chain fragmentation technology.

The invention discloses an industrial data security storage method and system based on a block chain, and the method comprises the steps: carrying out the clustering based on the type of a department, distributing a block chain network and a server for each cluster, carrying out the hash of a key field of industrial data needing to be operated, carrying out the partitioning of a hash groove, and mapping the key field to a hash ring, obtaining an operation sequence, and carrying out the operation of the operation sequence. The method comprises the steps of setting a life cycle for an operation sequence, eliminating invalid historical operation in the operation sequence, designing an intelligent contract algorithm, utilizing hash value information in an operation record to automatically trace back to a historical version when data is missing, then setting permission updating frequency, and then applying a distributed coordination algorithm to a block chain network server to update the permission of the block chain network server. Forming a block chain network server cluster, and finally setting a dynamic key updating mechanism. According to the method, the full-life-cycle safety of the industrial data is guaranteed through multi-link cooperation, the safety, integrity and availability of the data are improved, various potential risks are effectively coped with, and meanwhile good interpretability is achieved.

The invention relates to the technical field of microprocessors, and discloses a safety debugging method of an embedded microprocessor and the embedded microprocessor, the method comprises the following steps: implanting a random module in the microprocessor, constructing a resistance network array through random distribution of silicon substrate lattice defects to generate a disordered sequence, and if microprocessor data access is carried out, starting the random module; if physical intrusion is detected, a debugging session is established, three types of physical characteristics are synchronously generated to construct a composite key, a triple dynamic confusion layer is constructed in the microprocessor, the dynamic confusion layer and the composite key construct physical logic linkage protection, a probe access instruction logic address is called, if physical intrusion is detected, a probe triggers an invisible check point, and the probe accesses the invisible check point. The integrity of an execution environment is verified, if abnormal debugging is detected, a hardware defense mechanism is triggered, an access attack model is established, confusion parameters are trained and optimized, and a module interconnection mode is changed, so that the learning cycle of an attacker is broken, and the risk of attacking a processor in a machine learning mode is reduced.

The invention discloses a data processing system and method, electronic equipment and a storage medium, and relates to the technical field of computers.Original input data are preprocessed into multiple sets of target input data through a data input module, and the multiple sets of target input data are input into multiple iterative calculation units to obtain data to be calculated and code identifiers; when the code identifier represents that the to-be-calculated data needs to be overturned in advance, the to-be-calculated data is overturned in advance to obtain the to-be-calculated inverted data, and a subsequent iterative calculation unit only needs to perform target calculation on the to-be-calculated inverted data to obtain a data processing result; that is, the iterative calculation unit can obtain the data processing result only by performing a small amount of data bit flipping on the to-be-calculated inverted data through the target calculation, the number of data bit flipping in the target calculation is reduced, the dynamic flipping power consumption is reduced, and compared with a power consumption reduction mode in the related technology, the efficiency is improved. High-difficulty chip rear end layout wiring is not needed, and the performance and the power consumption reduction effect of the chip can be ensured.

The invention discloses a BMC intrusion protection method and device, a BMC and computer equipment. The method is applied to the BMC in the computer equipment. The BMC comprises a service module and a security detection module which are in communication isolation, and storage media accessed by the service module and the security detection module are isolated. The business module is used for providing a management function for parts in the computer equipment, and the security detection module is used for implementing security detection on the BMC. The method comprises the steps that the security detection module obtains data stored in the storage medium associated with the service module, analyzes the security situation of the data sensing service module, and obtains a security detection result. And when the security detection result indicates that the BMC suffers from the APT attack, restarting the BMC in a degraded starting mode. Through a deep defense scheme, namely on the basis of defense, intrusion detection capability is added to the BMC, a dynamic defense chain of defense, detection, degradation and recovery is formed, the APT attack resisting capability of the BMC is improved, and the BMC is ensured to be safe and credible.

Techniques for secure cryptographic secret bootstrapping balance the need to quickly and conveniently restore cryptographic secrets to server computers in the event of an outage with the need for security. Before the outage, a server computer uses a trusted platform module of the server computer to seal an encryption key used to encrypt a secret stored at the server computer. In response to the outage, the server computer restores the secret by using the trusted platform module to unseal the encryption key and then using the unsealed encryption key to decrypt the encrypted secret. The techniques can be used to restore cryptographic secrets rapidly and securely to a cluster of server computers used for cryptographic operations in a provider network without the overhead of safe room procedures.

The invention relates to the technical field of cores, and discloses a method and a system for realizing USB flash disk equipment interaction based on a flash memory encryption technology, which comprises the following steps of: dividing an encryptable data block of a flash memory controller, and determining a dynamic entropy weight of the encryptable data block by utilizing an equipment interaction instruction and a random noise characteristic signal; generating a self-adaptive key generation sequence capable of encrypting data blocks through an address allocation mode and a dynamic entropy weight of a flash memory controller; calculating a side channel leakage risk index of the flash memory controller, and setting a security level label of an encryptable data block in combination with a self-adaptive key generation sequence; the method comprises the following steps: setting a differentiated security protection mechanism of an encipherable data block by constructing an access control matrix of the encipherable data block and an encryption risk area of a flash memory controller; and generating a secure interaction scheme of the USB flash disk equipment based on the self-adaptive key generation sequence in combination with the differential security protection mechanism and the access control matrix. According to the invention, the interaction safety and reliability of the USB flash disk equipment can be improved.

The invention relates to the technical field of data analysis, and provides a power network data-driven optimization method and system based on dynamic authority modeling, which are used for improving the self-adaptability and anti-risk capability of a power network in a complex operation environment. The method comprises the steps of obtaining a power network operation data set, performing dynamic permission modeling processing on the power network operation data set, generating a user permission feature set and an equipment permission feature set, and generating a power resource dynamic allocation strategy according to the user permission feature set and the equipment permission feature set, and feeding back the power resource dynamic allocation strategy to the power network control system to activate a permission configuration updating operation. Therefore, through deep coupling of the permission model and resource scheduling, a technical path giving consideration to both elasticity and reliability is provided for intelligent upgrading of a power system, so that the self-adaptability and anti-risk capability of a power network in a complex operation environment can be improved.

A method of authorizing a computer mouse to perform a particular action may include receiving, by a network device, a request associated with a particular action to be performed by a computer mouse. The request may be digitally signed using a private device key of the computer mouse. The method may include validating, by the network device, the digitally signed request using a public device key previously provided by the computer mouse. The method may include generating a response to the request. The response may indicate whether the computer mouse is authorized to perform the particular action associated with the trusted request. The method may include sending the response to a client device associated with the computer mouse.

Methods and systems for managing data processing systems are disclosed. The data processing systems may be managed by verifying the integrity of the data processing systems. The integrity may be verified as a prerequisite to use of the data processing systems. The integrity may be verified, at least in part, by verifying that the hardware component loadout of a data processing system is as expected. If the actual hardware component loadout diverges from an expected hardware component loadout, then remedial activity may be performed to address the differences between the actual and expected hardware component loadout.

An electronic hardware wallet for conducting cryptocurrency transactions, blockchain transactions, or other secure communications is embodied on a monolithic integrated circuit (IC) die supported on a single substrate. The monolithic semiconductor device can include a non-volatile data store for storing application software executable by the multi-core processor, and the secure element can include a secure data store for storing secret data (e.g., a private key) for use in a secure electronic transaction. In some embodiments, the secure element can include hardware logic embodying a cryptocurrency algorithm associated with executing the secure electronic transaction and can have a limited and selective communication bus between the secure element and the multi-core processor. The electronic hardware wallet can communicatively couple with one or more other devices to facilitate a multi-party computation (MPC) algorithm for authenticating the cryptocurrency algorithm and validating the secure electronic transaction.

Systems, methods, and apparatus are disclosed for omnimodal sensing, data fusion, and autonomous decision-making across physical and digital domains and further integrates a Multimodal Diagnostic System (MDS) and Impairment Recognition and Intervention System (IRIS) with defense architecture or a system architecture that can be compliant with the Modular Open Systems Approach (MOSA) and Sensor Open Systems Architecture (SOSA) to ensure interoperability. The system can utilize real-time multisensory fusion, cryptographic provenance via blockchain, and resilient magnetoelectric communication to support mission-critical decision-making across manned and unmanned platforms in denied or contested environments.

An electronic device can be validated at a circuit-level or device-level to provide supply chain verification of an integrated circuit (IC) product. A modern integrated circuit package can comprise multiple dies, systems and circuitry built from a variety of device-level structures. Device-level verification disclosed herein can confirm that a device-level (sub-) component of an integrated circuit product is sourced by a known or otherwise valid manufacturer. This serves to mitigate or avoid a hacking attempt involving illicit replacement of a component of an IC product by an intermediate handler of the IC product within a supply chain.

A method for managing a storage system includes initiating, by a hardware resource manager, a boot-up of a storage controller managing the storage system comprising a plurality of storage devices, making a determination, by the storage controller, that the storage controller is in a secured mode, based on the determination: identifying a security state of each of the plurality of storage devices, determining that a storage device of the plurality of storage devices is in an unsecured state, and based on the unsecured state, sending, by the storage controller, a security operation request for securing the storage device, obtaining a secure state response from the hardware resource manager corresponding to securing the storage device, and based on the secure state response, resuming operation of the storage controller based on the secure mode.

The invention relates to the technical field of screen control, in particular to a computer screen control method and system. The method comprises the following steps: collecting a computer lens image to carry out scene modeling, generating a three-dimensional usage scene model, carrying out scene privacy evaluation and generating a privacy degree parameter, analyzing a peep-proof demand according to the privacy degree parameter, generating a screen peep-proof demand, carrying out portrait positioning when peep-proof is needed, generating a portrait positioning set, and carrying out image processing according to the portrait positioning set. And calculating a virtual contact distance based on the portrait positioning set, performing contact sight simulation to obtain a figure sight track, analyzing a screen visible range according to the sight track and the virtual contact distance, and dynamically adjusting the screen brightness to realize the peep-proof control method. According to the invention, a safer computer screen control method is realized.

The invention provides a firmware encryption method and system based on a device unique identifier and dynamic key verification, and relates to the technical field of firmware protection, and the method comprises the steps: obtaining a unique identifier of a device, the unique identifier being hardware feature information which cannot be modified; a dynamic key is generated based on the unique identifier and the random number, and the dynamic key is realized through an encryption algorithm and is regenerated every time the device is started or firmware is updated; the dynamic key is stored in a storage area protected by hardware, and the storage area is subjected to double protection of hardware isolation and logic encryption; and when the device is started, the dynamic key is regenerated, the unique identifier of the dynamic key and the unique identifier of the dynamic key stored in the storage area are compared and verified, if the dynamic key and the unique identifier are consistent, firmware operation is allowed, and otherwise, a safety response mechanism is triggered. According to the invention, the security and reliability of firmware protection can be improved.

Provided are an apparatus and method for accelerating computation, and a chip. The apparatus for accelerating computation comprises: an instruction decoding module, a bit width selection module, a small bit width processing module, and a large bit width processing module. The instruction decoding module is configured to decode an inputted instruction, determine the bit width of the instruction on the basis of a decoding result, generate a control signal comprising bit width information of the instruction, and send the control signal to the bit width selection module. The bit width selection module is configured to forward the control signal to the small bit width processing module when the bit width of the instruction is a small bit width, and forward the control signal to the large bit width processing module when the bit width of the instruction is a large bit width. The small bit width processing module is configured to process the instruction by using a register file having a small bit width and a corresponding arithmetic logic unit. The large bit width processing module is configured to process the instruction by using a register file having a large bit width and a corresponding arithmetic logic unit.

The invention discloses a bar code and RFID dual-mode fused tamper-proof data storage system, and relates to the field of data security storage, which comprises the following steps: uploading complete data to be stored into a scanning monitoring platform, splitting the data into static data and dynamic data, writing the static data into a bar code module, and writing the dynamic data into the bar code module; randomly distributed initial fluorescent particles are generated on the surface of the bar code data label through a scanning monitoring platform, a unique initial optical fingerprint is generated, if a bar code module is tried to be written or modified, the distribution position of the initial fluorescent particles is modified, an abnormal optical fingerprint is obtained, and an alarm is given; and writing the dynamic data into the RFID module, generating a dynamic key in each communication, and performing cross validation on the hash value based on the static data and the dynamic data. The method has the advantages that a three-dimensional protection system is constructed through a dual tamper-proof mechanism of a physical layer of fluorescent particle displacement and a password layer of a dynamic key in combination with cross validation of a hash tree, and the tamper-proof capability is improved.

The invention relates to the technical field of power data analysis, and provides a power network user permission anomaly detection method and system based on time sequence behavior mining, which are used for improving the security situation awareness capability of a power network. The method comprises the steps of obtaining an authority operation log data set of a target power network user, performing time sequence behavior pattern extraction processing on the authority operation log data set, and generating a time sequence behavior feature set of the target power network user, and inputting the time sequence behavior feature set into a debugged permission anomaly detection model to perform multi-dimensional deviation analysis, generating a permission operation anomaly detection result of the target power network user, and triggering a permission risk early warning signal according to the permission operation anomaly detection result. And the authority risk early warning signal is sent to the power network authority management terminal so as to execute authority rechecking operation.

Examples include techniques to implement mutual authentication for confidential computing. Examples are described of implementing mutual authentication for confidential computing that includes use of local attestation.

The invention discloses a remote proving method for a trusted data space, which relates to the technical field of computer and data security, and comprises the following steps: initializing a trusted environment and generating a dynamic identity key for a heterogeneous terminal containing a CPU (Central Processing Unit), a GPU (Graphic Processing Unit) and an FPGA (Field Programmable Gate Array) based on a hardware security module and a physical unclonable function, and generating a challenge value by a verifier by using a quantum random number; the method comprises the following steps of: firstly, transmitting to a proving party through quantum encryption and a neuromorphic photonic network, constructing proving by the proving party by adopting a tensor decomposition zero-knowledge proving protocol, finishing multi-stage verification on a verification party in combination with a space-time cause and effect graph and quantum signature aggregation, and finally realizing dynamic trust evaluation and adaptive strategy adjustment through a quantum Bayesian network, reinforcement learning and biological feedback. According to the method, the remote attestation performance of the trusted data space is improved, dynamic trust evaluation is realized by means of the quantum Bayesian network and biological feedback, attacks are effectively resisted, real-time requirements are met, trust is accurately evaluated, and the development of the trusted data space is promoted.

The invention belongs to the technical field of logistics information, and discloses a multimodal transport trusted data space construction method based on privacy calculation and a block chain. The method comprises the following steps: deploying a modular intelligent data gateway at a core node of a multimodal transport line, unifying the format of multi-source heterogeneous original data, and chaining a hash value; after the multi-source heterogeneous data is subjected to customization processing, key metadata attributes of all the data are registered and linked in real time; constructing a core ontology model, and establishing a cross-domain semantic interoperation capability; establishing a privacy calculation and block chain collaborative dual-channel architecture, and cooperatively training an ETA prediction model in a local data isolation environment by adopting transverse federal learning to ensure that original trajectory data is not out of a domain; constructing a dispute arbitration and credible verification system, and realizing an arbitration process of judicial verification when a transportation dispute occurs; data minimization disclosure and compliance sharing are achieved through dynamic access control. According to the method, multimodal transport data can be available and invisible, and the whole operation process can be audited.

The invention relates to a distributed data security storage and encryption system based on an AI technology. The system comprises a data acquisition and preprocessing layer used for acquiring original data and preprocessing the original data to obtain an identifiable data object; the AI identification and strategy decision layer is used for identifying data features of identifiable data objects based on an interpretable AI model to obtain an encrypted instruction packet; the encryption execution and distributed storage layer is used for performing encryption storage processing on the original data content according to an encryption instruction packet to obtain data access interface information; and the dynamic access control layer is used for obtaining user information in response to a data access request instruction of a user, recombining and decrypting the data by using the data distribution mapping index based on the access control strategy table, and returning a plaintext data fragment. By adopting the system, a high-strength, differentiated and multi-level security mechanism can be realized through the AI, intelligent encryption strategy decision is carried out, and the security requirements of multiple scenes and multiple types of data are met.

The invention relates to the technical field of data security, in particular to a block chain-based big data security data storage method, which comprises the following steps of acquiring a write-in request, analyzing a field path and a label, matching a structure number and state information, sorting a conflict path, compressing a number sequence, distributing a compression path, positioning a writable area and updating a path pointer. And writing data and recording index and verification information to obtain a safe chain-entering data set. According to the method, a clear mapping relation is formed through binding of field paths and label numbers, path conflicts are subjected to number rearrangement and hierarchical compression processing, the structural coherence of field distribution is enhanced, field write-in positioning is completed in combination with node capacity, position indexes and verification identifiers are generated, and unified binding of field contents, the path numbers and access positions is achieved; the writing accuracy and the structure traceability are guaranteed, and the regularity of chain segment storage and the orderliness of operation are improved.

In an example, a computing device is described. The computing device comprises a component to perform a crypto-graphic operation and store an indication of a measured state of the computing device obtained during booting of the computing device. The computing device further comprises a processor to obtain a secret for use by the component, install an administration credential in a firmware of the computing device and transmit the secret to the component via the firmware.

The invention relates to the field of data security, in particular to a hard disk data protection and secure transmission system. Comprising a Bluetooth module, a hard disk and a storage channel security encryption chip, the storage channel security encryption chip is in wireless communication with mobile phone end application software through the Bluetooth module for identity authentication, and hard disk access authority unlocking and sensitive data releasing are achieved according to an identity authentication result; the storage channel security encryption chip is connected between the host and the hard disk to realize data encryption and decryption transmission and partition control of the hard disk; the hard disk is divided into a public area, a private area and a hidden area, the public area stores open resources in a plaintext form, the private area stores personal data in a ciphertext form, the hidden area stores sensitive data in a ciphertext form, and the sensitive data are accessed by adopting a private protocol through a special tool. According to the invention, access control, hierarchical management, virus protection and secure transmission functions of hard disk data are realized, and the problem of data leakage caused by loss or theft of storage equipment is solved.

The invention relates to the technical field of microcontrollers, and provides an MCU information protection method and device, electronic equipment and a readable storage medium, and the method comprises the steps: checking a storage access request according to an access control list; wherein the access control list comprises an authorized storage area and an authorized operation type corresponding to the authorized storage area; the storage access request is used for accessing a target storage area of the MCU; according to the debugging secret key, an interface debugging request is checked, and the interface debugging request is used for debugging a target debugging interface of the MCU; identifying a target code instruction of the MCU, and performing pre-execution verification and dynamic monitoring on the target code instruction; adjusting the clock frequency and the clock phase of the MCU according to the load change information and the power consumption change information of the MCU; and implementing encryption measures on the target data transmission channel of the MCU by using the encryption algorithm. According to the technical scheme provided by one or more embodiments of the invention, the data security and the anti-attack capability of the MCU can be improved.

Secure communication provided with secure and non-secure root ports. One embodiment comprises: a plurality of cores; a memory controller to couple to a memory; an interconnect fabric coupled to the plurality of cores and the memory controller; and a root complex to support end-to-end encrypted channels between devices, the root complex comprising: a root port to receive non-posted requests from a requestor device, the root port to associate a first tag value with a non-posted request to indicate whether the non-posted request is received over an end-to-end encrypted channel; and a bridge device to transmit the non-posted request with the first tag value and to subsequently receive a completion message including the first tag value, wherein the root port is to determine whether the completion message is to be encrypted in accordance with the end-to-end encrypted channel based on the first tag value.

The invention provides a water affair informatization safety monitoring system, method and device based on the Internet of Things and machine learning, and belongs to the technical field of water affair monitoring. Through real-time data collection, intelligent early warning of abnormal operation of a water affair system, device health assessment and water volume scheduling optimization are carried out; through combination of multi-source data fusion analysis and a machine learning model, water resource optimization scheduling and equipment energy efficiency management and control are realized. Through a multi-level early warning threshold setting mechanism, an intelligent matching emergency plan library, a multi-mode notification unit and an emergency command decision support unit, and in combination with a historical early warning event tracing analysis interface, identification and response of abnormal events of a water affair system are realized. Classification statistics according to departments, personnel or equipment is supported to generate a visual chart; a machine learning algorithm is utilized to predict future trend change, and hydrological data distribution conditions are displayed on a map based on GIS integration. And the level and efficiency of water affair management are improved.