2118results about "Network connections" patented technology

The invention discloses a time sequence data management method of an edge computing gateway, which relates to the technical field of edge computing and industrial Internet of Things, and comprises the following steps of: respectively recording a communication bandwidth occupancy rate, a buffer area residual rate and a scheduling thread occupancy rate of the edge computing gateway in a preset fixed time period; and constructing a resource use original data matrix covering all time points in the fixed time period. According to the method, by periodically monitoring the resource use state and fusing the high-priority task scheduling performance, the scheduling resource abnormal occupancy index is dynamically generated, and intelligent sensing and scheduling optimization of the edge computing gateway on the resource pressure are achieved. When the abnormal index is increased, the system automatically triggers buffer area redistribution and low-optimal task data compression, data writing and scheduling real-time performance of key tasks are guaranteed preferentially, the problems of task starvation and data loss are effectively avoided, and the stability and the response capability of the system in a high-pressure environment are improved.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

The invention discloses an intelligent building equipment historical data storage method, and relates to the field of building equipment historical data storage, and the method comprises the following operation steps: S1, collecting and preprocessing global data; s2, intelligent storage strategy decision making; s3, designing a semantic storage structure; s4, constructing and managing a distributed storage cluster; s5, intelligently writing and indexing historical data; and S6, efficient query and deep analysis of an interface. According to the historical data storage method for the intelligent building equipment, provided by the invention, all-around improvement is realized in the aspects of data quality, storage efficiency, association capability, system reliability, operation convenience and the like through refined design of a data full link; and finally, the equipment data of the intelligent building really becomes a core asset which can be perceived, analyzed and utilized, and powerful support is provided for efficient operation, energy conservation, consumption reduction and safety guarantee of the building.

The invention belongs to the technical field of information interaction, and relates to a device information interaction method, a slave device gateway and a master device. An active frame transmission mechanism is realized through the slave device gateway, so that the slave device actively reports information to the master device when the state changes or the trigger condition is met, and the master device can analyze and issue a configuration instruction in real time to complete dynamic management of the slave device. The method supports centralized monitoring and configuration of slave devices in the parallel operation energy storage system, ensures the consistency of device identifiers, addresses, groups and states, realizes real-time, accurate and extensible management, does not interfere with the original Modbus master-slave communication process, and effectively solves the problems of poor expansibility, state update lagging, communication conflict risk and the like in the traditional one-master one-slave mode.

The invention discloses a portable operation and maintenance gateway management and control method and system based on dynamic monitoring feedback, and relates to the field of portable operation and maintenance gateway management and control, and the method comprises the steps: enabling a portable operation and maintenance gateway to be connected between an operation and maintenance terminal and a power control system in series, and carrying out the dual authentication of personnel and equipment; after authentication is passed, operation and maintenance are started, identity, time, position and gateway state of operation and maintenance personnel are collected and monitored in real time, reference information is matched to obtain a matching result, operation and maintenance behaviors are monitored in real time, multi-source data are collected, a management and control strategy is dynamically generated based on risk assessment, and a safety response is triggered; when the equipment is abnormal, an emergency repair mode is switched, non-core authority is relaxed, and whole-course auditing is carried out; the data in the whole operation and maintenance process is uploaded to a remote management platform after structured arrangement, and multi-channel synchronization and delayed uploading are supported when the network is abnormal. The system comprises an authentication module, a risk assessment module, a strategy execution module and a data synchronization module, power operation and maintenance whole-process safety management and control are achieved, efficiency and safety are both considered, and operation traceability is guaranteed.

The invention discloses a data encryption method for multilevel key stream control in an industrial gateway, and particularly relates to the technical field of data encryption and network security. The method comprises the steps of obtaining a session identification code and communication context information; generating a first-level basic key based on the session identification code, and generating a multi-level key stream control matrix in combination with communication context information and a multi-source dynamic random factor; according to the hierarchical relationship of the matrix, key stream sequences of corresponding levels are distributed to data packets of different priorities, and the key stream sequences are switched or combined in real time according to data packet types, transmission paths and security policies in the encryption process, and time fragmentation processing and disturbance coding are executed; the encrypted data packet is sent through a multi-protocol forwarding module of the industrial gateway, and the receiving end carries out decryption by using the key stream control matrix; according to the invention, dynamic generation, hierarchical calling and safe switching of the key stream can be realized, and the data confidentiality, integrity and anti-attack capability of the industrial gateway in a complex network environment are remarkably improved.

The invention relates to the technical field of intelligent gateways, and discloses a multi-mode industrial Internet of Things intelligent gateway based on edge computing and an implementation method thereof, and the method comprises the steps: obtaining sensor data streams of a door magnetic sensor, a human body sensor, a temperature and humidity sensor and a smoke detector in an intelligent region; constructing a space-time fusion data matrix based on the sensor data stream; inputting the space-time fusion data matrix into an edge layer quantization neural network, a fog layer recurrent neural network and a cloud layer large model for distributed reasoning to obtain a reasoning result set; and performing priority queue scheduling and zero-copy transmission on emergency events, important events and conventional events in combination with the reasoning result set to generate a control instruction sequence, so that parallel operation of data acquisition and processing is realized, and the intelligent level, the response performance and the operation reliability of an intelligent regional Internet of Things system are improved.

The invention discloses a gateway plug-in loading and optimizing method and device, equipment and a medium, and relates to the technical field of gateway plug-in management, and the method comprises the steps: collecting target information of a user request entering a gateway, so as to obtain corresponding collection data; the target information comprises a request source ip, a request path, parameter information, a request frequency, a user agent, a request method and a response state code; identifying the user request based on the collected data by using a pre-trained identification model so as to determine a request type of the user request according to a corresponding identification result; determining a target plug-in matched with the user request based on the request type, and loading the target plug-in to obtain a corresponding execution result; and optimizing a plug-in priority, a plug-in strategy parameter and an execution path of the target plug-in based on the execution result. Therefore, the gateway performance is improved, the maintenance cost is reduced, and the system stability is enhanced.

Some embodiments provide a method for a first data compute node (DCN) operating in a public datacenter. The method receives an encryption rule from a centralized network controller. The method determines that the network encryption rule requires encryption of packets between second and third DCNs operating in the public datacenter. The method requests a first key from a secure key storage. Upon receipt of the first key, the method uses the first key and additional parameters to generate second and third keys. The method distributes the second key to the second DCN and the third key to the third DCN in the public datacenter.

The invention relates to the technical field of network communication, in particular to a logistics equipment unified access method based on multi-protocol conversion. The specific implementation process comprises: establishing a model comprising a source logistics device, a target logistics device, a protocol conversion gateway and a time-sensitive network, wherein the time-sensitive network comprises a network master clock; the protocol conversion gateway and the network master clock are periodically synchronized, an original data packet of the source logistics equipment is analyzed, and data content and a source identifier containing a time sequence relation are extracted; through an adaptive mapping rule, mapping the data content and the source identifier into a time-sensitive network traffic category containing predetermined traffic, and obtaining a gating scheduling strategy of the time-sensitive network traffic category; and the data content is converted and packaged into a time-sensitive network data frame, and the time-sensitive network data frame is sent to the target logistics equipment according to a gating scheduling strategy. According to the invention, the access accuracy and stability of the logistics equipment are realized by fusing protocol conversion and the time-sensitive network.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

Disclosed are various embodiments that extend customer premises networks onto a cloud provider network. In one embodiment, a layer-3 virtual private network is established between a tunneling agent and a virtual private network server on a cloud provider network. The tunneling agent is executed on an edge customer premises equipment (CPE) device on a customer premises network. A layer-2 virtual interface is established for an edge application on the cloud provider network using a tunnel to encapsulate layer-2 traffic between the customer premises network and the edge application over the layer-3 virtual private network.

Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and / or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment, where the second cloud environment is different than the first cloud environment. The multi-cloud infrastructure enables a user associated with an account with a second cloud services provider to use, from the second cloud infrastructure, a first service from the set of one or more cloud services. The multi-cloud infrastructure creates a link between the account with the second cloud service provider and a tenancy created in the first cloud infrastructure for enabling using the first service by the user.

The invention provides a dam safety monitoring system lightweight construction method and device, and the method comprises the steps: deploying a protocol conversion gateway, carrying out the protocol analysis and data standardization processing of an existing heterogeneous sensor, generating data in a unified format, and supporting the network disconnection caching and automatic supplementary transmission; deploying a data processing module on a local server or an industrial personal computer based on an edge computing architecture, performing feature extraction and multi-scale fusion analysis on acquired data, and performing data compression by adopting an improved revolving door algorithm; constructing a lightweight anomaly detection model, training by using historical data to generate a normal mode template library, calculating a dynamic time warping distance between new data and a template in real time, and triggering early warning when the distance of a plurality of continuous cycles exceeds a preset threshold value; the sampling frequency of the sensor is dynamically adjusted according to the real-time data analysis result, key parameters are collected in a high-frequency mode, non-key parameters are collected in a low-frequency or intermittent mode according to the change rate prediction result, and therefore the system resource use efficiency is optimized.

The invention discloses a real-time state synchronization method and system, electronic equipment and a storage medium, and belongs to the technical field of network communication.The method comprises the steps that in response to a connection request from a client side, persistent connection with the client side is established, and a state subscription relation is recorded; performing semantic analysis on the state change event from the business service layer to determine a push priority; a corresponding target intelligent gateway is found according to the target object identifier of the state change event, a pushing strategy is executed by fusing the client network condition maintained by the target intelligent gateway and the pushing priority, and the state is updated and synchronized to the related client; and monitoring the health state of the persistent connection, and when the connection is abnormal and recovered, performing state synchronization with the client by the intelligent gateway based on the stored incremental state information. According to the invention, the problems of unreliable connection, redundant pushing and poor expansibility of a traditional SSE scheme are solved, and high-reliability, high-efficiency and horizontally-expandable real-time state synchronization is realized.

The invention discloses a smart park alarm method and system based on an intelligent gateway, and the method comprises the following steps: accessing a heterogeneous terminal through a multi-protocol southbound interface, generating a standardized event set, and building a spatial topology table; performing quality evaluation on the standardized event set to form a sequential cleaning event stream; target detection is carried out based on the sequential cleaning event flow, and a semantic event flow is output; performing space-time matching on the semantic event flow to obtain a fusion event set; according to a preset grading standard, a grading warning set is generated, and a linkage instruction set is generated; scheduling and executing the execution end according to the linkage instruction set to form a processing state feedback; integrating the grading warning set and the processing state feedback into an evidence packet, and reporting the evidence packet in parallel through the main and standby reporting links; and archiving and indexing the evidence packet and the reported result, generating an auditable record, and finishing synchronous updating with an upper platform. According to the invention, the smart park alarm method and system are realized.

The invention relates to the technical field of Internet of Things gateways, and discloses an Internet of Things gateway device and system based on edge computing, and the device comprises a hardware heterogeneous computing module and a multi-interface protocol adaptation module. The edge calculation local processing module is used for performing preprocessing, feature extraction and local decision on the acquired terminal data; the network redundancy and self-healing module is used for realizing accurate network disconnection detection, seamless switching of a main network and a standby network and equipment fault self-recovery through a multi-dimensional network health degree evaluation algorithm; the local autonomous storage module is used for realizing hierarchical storage of high-frequency data and network disconnection emergency data and seamless synchronization after network recovery through network disconnection data hierarchical caching and an incremental synchronization algorithm; and the cloud collaborative management module is used for realizing remote configuration, OTA upgrading and state monitoring. The method is high in integration, low in delay and fast in response, adapts to real-time scenes, saves bandwidth cost, improves cloud efficiency, is high in reliability, and realizes network disconnection and continuous operation.

An electronic device is provided. The electronic device includes a communication module, and a processor connected thereto. The processor is configured to identify at least one of a plurality of parameters of traffic of data transmitted and received in a specific executing application, by using first short-range wireless communication, detect a data traffic pattern based on the identified parameter, and execute, based on the detected pattern, a communication mode including at least one configuration value related to the first short-range wireless communication. Executing the communication mode includes at least one of being capable of operating in a same frequency band as the first short-range wireless communication, and adjusting a scanning cycle between the first short-range wireless communication and second short-range wireless communication including another short-range wireless communication, setting a priority order of a transport packet, adjusting a channel scanning ratio of the first short-range wireless communication, or establishing boosting for operations of the traffic of the data.

The invention relates to the technical field of artificial intelligence, in particular to a method and system for achieving large model access authentication and flow control based on an APISIX gateway, and the method comprises the following steps: a client generates an HTTPS request containing an APIKey, and sends the HTTPS request to an APISIX gateway cluster; the gateway extracts the APIKey and forwards the APIKey to an authentication service, and the validity of the key is verified; after the verification is passed, the authentication service returns a user permission matrix, and the gateway verifies whether the request is within a permission range; after the permission verification is passed, the flow control plug-in detects a flow index according to a preset strategy; when the flow index does not exceed the limit, the gateway forwards the request to the large model service and returns a result; when the flow index exceeds the limit, the gateway executes flow limiting / fusing processing and returns a corresponding error response; the method has the beneficial effects that the gateway executes request forwarding or flow limiting control based on the preset strategy, the problems of illegal access risk and resource allocation imbalance faced by the large model service are effectively solved, the service stability and the resource utilization efficiency are improved, and the method is suitable for security operation and maintenance of the large model service in multiple scenes.

The invention discloses a business travel user real-time feedback and suggestion system, which relates to the technical field of mobile application development and multi-terminal adaptation, and is characterized in that an edge layer guarantees the completeness of offline scene data through a dynamic load adapter, starting a structured compression protocol in a weak network, switching a multi-mode enhancement protocol in a strong network and matching with a priority cache queue; the decision-making layer adopts a parallel processing unit accelerated by an FPGA (Field Programmable Gate Array), and a real-time stream filtering unit adopts SimHash fingerprints to remove duplication; the scene understanding unit fuses the spatio-temporal data to generate event tags; the grading response unit automatically triggers AI compensation and manual work orders according to risk grades; and the collaboration layer verifies the responsible party of the travel system on the premise of hiding the user ID based on the zero-knowledge proof gateway so as to realize cross-platform secure data exchange. According to the system, a three-layer intelligent architecture is innovatively constructed, and full-link real-time response of travel service is realized.

The invention discloses a bridge main cable intelligent monitoring system. The core of the system is composed of a gateway host, an industrial control module and a data transmission module. The industrial control module realizes millisecond-level instruction response and cooperates with the data transmission module to complete data lossless transmission from the sensor module to the cloud, and the sensor module integrates temperature, humidity, inclination angle, acceleration and displacement sensors through an RS485 converter to realize full-dimensional state sensing of a main cable. The data acquisition module guarantees sampling synchronism with high resolution, the data preprocessing module completes 70% bandwidth compression at the edge end, the cloud load is greatly reduced, intelligent access and management are carried out on a sensor, management of intelligent equipment is achieved, and collection, processing, analysis and storage of sensor data are involved. The gateway development considers the preprocessing of the received sensor data, the extraction of key information, and the transmission of the data to the cloud for analysis and storage, and achieves the high-reliability monitoring through the edge intelligent closed loop and redundancy design.

The invention discloses an intelligent authentication system based on a gateway, and relates to the technical field of intelligent authentication. The system comprises a strategy integration module, an intelligent analysis module, a strategy decision module, a dynamic signature module and an authentication execution module. According to the invention, heterogeneous authentication strategies are uniformly managed through the strategy integration module, the intelligent analysis module carries out real-time risk scoring on access requests, the strategy decision module dynamically generates authentication strategy identifiers according to the risk scoring, the client is driven to generate signatures containing algorithm identifiers through the dynamic signature module, and finally the authentication execution module verifies the signatures and routes according to the signatures. According to the method, the adaptive matching of the authentication logic and the risk context is realized, and the problems that the adaptive capacity of an authentication mechanism in a dynamic risk environment is insufficient and intelligent and gradient authentication response cannot be realized in the prior art are solved.

The invention discloses a downlink message control method of a star topology network and a server for executing the control method. The star topology network comprises a server, a plurality of gateways and a plurality of nodes. The nodes communicate with the server through the gateway, and the server allocates a timer for each of the gateways. The control method comprises the following steps: 1, judging whether a node is newly accessed to the star topology network; if so, entering the step 2; Step 2, establish a node-gateway topology relationship to determine a coverage area of each gateway and a coverage area of each node; 3, allocating one of a plurality of downlink frequency points to a newly access node; 4, requesting the gateway to send the message request when the frequency requiredfor the message request to be sent by the gateway is not used by the gateway in the coverage area of the destination node of the message request. The invention can more efficiently solve the problem of co-frequency interference of downlink communication of star topology network.

The invention discloses an IPSec VPN security gateway communication method based on a post quantum cryptography technology, and the method comprises the following steps: S1, replacing a conventional SM2 algorithm and a certificate with a PQC algorithm and a digital certificate in a first-stage main mode of IKE key negotiation; s2, the initiator and the responder respectively use the PQC key pair to complete key exchange and signature; s3, in the message 1, the initiator sends a security alliance load containing a PQC public key algorithm attribute to the responder; s4, in the message 2, the responder sends an SA load containing a PQC signature certificate and an encryption certificate, and a received SA proposal sent by the initiator is marked; s5, in the message 3 and the message 4, the initiator and the responder complete key exchange and verification; and S6, in the message 5 and the message 6, the initiator and the responder encrypt the transmitted information by using a symmetric cryptographic algorithm, and identify the previous exchange process. According to the invention, the security of the IPSec VPN security gateway is improved, and quantum computing attacks can be resisted.

The invention discloses a data zero-copy processing method and system based on an eBPF zero-trust gateway, and belongs to the technical field of computer network security. According to the method, an XDP program is loaded on a network card driving layer, and an AFXDP technology is combined to construct a kernel mode and user mode shared memory pool UMEM; when an original message arrives, an eBPF unit mounted by an XDP program intercepts the message in real time, a tunnel packaging space is reserved in situ in an original memory, and if the head space is insufficient, a new memory page is logically mapped from a UMEM standby buffer pool to achieve extension. Identity fingerprints are generated by extracting message feature vectors, load in-situ encryption is completed in cooperation with a kernel kTLS module, and data are prevented from being returned to a user mode for processing. According to the method, multiple copying and context switching of a kernel-user mode of a traditional SSL VPN are eliminated, the throughput is improved by 2-3 times, the delay is reduced to the microsecond level, the CPU utilization rate is reduced by 40% or above, application layer DDoS attacks are effectively defended, and the method is suitable for 5G edge computing and cloud native zero-trust gateway scenes.

The invention provides a verification code acquisition system and method, an intelligent agent, a gateway, a platform and a storage medium, and relates to the technical field of artificial intelligence. The verification code acquisition system comprises an AI (artificial intelligence) agent, a short message gateway and a service platform associated with the AI agent, and is characterized in that the AI agent is connected with the short message gateway, and the service platform is connected with the short message gateway. And the AI agent sends an identity verification request carrying the first identifier to an application platform corresponding to the target application in response to an input calling operation for the target application. The first identifier is associated with the AI agent, and the identity verification request is used for requesting the application platform to send a verification code carrying the first identifier to the short message gateway. And the short message gateway sends the verification code carrying the first identifier to the service platform based on the first identifier. And the service platform sends the verification code to the AI agent based on the first identifier. And the AI agent executes an identity verification operation for the target application based on the verification code, so that the processing efficiency of the AI agent for processing the task associated with the target application is improved through dynamic identity verification of the application platform.

The invention relates to the technical field of state monitoring, in particular to a state monitoring method and system based on a power grid intelligent Internet of Things gateway device, and the method comprises the following steps: based on the Internet of Things gateway device, collecting and analyzing multiple types of sensor signals, carrying out the unified arrangement to form a multi-parameter cooperative monitoring sequence, and comparing the changes of current and voltage signals; and extracting a synchronous response ratio feature group, calculating a thermoelectric trend consistency index in combination with the temperature change trend and the current amplitude, screening an interference level section, and judging abnormal linkage. According to the method, cross-parameter trend extraction, collaborative response, difference comparison and section identification are realized, correlation characteristics of multi-source signals in a continuous time period can be converted into identification basis, an abnormal forming process, a response link and state evolution are discriminated by combined characteristics, and abnormal section, sequence attributes and synchronization factors are jointly applied, so that the accuracy of the multi-source signal identification is improved, and the reliability of the multi-source signal identification is improved. And the identifiability and the classification capability of abnormal events under complex working conditions are improved.

The invention discloses an abnormal data real-time filtering method and system based on edge computing in a dynamic environment system, the method is executed by an edge computing gateway, sliding window weighted average preprocessing is equivalently realized by adopting integer shift operation, and the single computing overhead is controlled within 50 clock cycles; dynamically and adaptively adjusting dynamic reference model parameters based on the ratio of the network load to the sensor sampling frequency; performing multi-stage anomaly filtering of a hard threshold value, a mutation rate and a statistical interval on the data through a three-stage pipeline judgment structure executed by atomization; an FPGA hardware queue manager independent of a main processor bypasses a TCP stack to push abnormal data at the highest priority, and redundant data is stored in a zero-copy annular buffer area managed by DMA. According to the invention, the problems of intranet congestion, server I / O bottleneck and alarm delay under the centralized architecture of the traditional dynamic loop system are solved, and the fault, fault, fault, fault, fault and fault are realized on resource-limited platforms such as Cortex-M4 and the like; the average alarm delay is 8 milliseconds; and the data compression rate is more than 90%.

The invention provides an integrated hospital intelligent monitoring system for cold-chain medicine temperature early warning, and relates to the technical field of medical monitoring. The integrated hospital intelligent monitoring system for cold-chain medicine temperature early warning comprises a sensing layer module which is deployed in a dual-mode temperature sensing unit in cold-chain equipment and comprises a main sensor and an auxiliary sensor, the main sensor is arranged in a central area in the cold-chain equipment, and the transmission layer module is arranged in a central area in the cold-chain equipment. The transmission layer module comprises a hybrid networking unit, the hybrid networking unit integrates a 433MHz wireless ad hoc network subunit and an NB-IoT / 4G remote transmission subunit, the platform layer module comprises a data processing unit and an intelligent early warning decision unit, and the execution layer module. When the box door is opened, the system can accurately identify non-fault temperature fluctuation by analyzing the temperature difference of the double sensors, the false alarm rate is reduced to 5.2% from the average industrial 38.7%, and the interference of invalid alarm to medical staff is greatly reduced.

The invention discloses a channel security transmission method for protecting data privacy of an edge gateway of the Internet of Things, and relates to the technical field of security and privacy protection of the Internet of Things, and the method comprises the steps: constructing an edge gateway security architecture, generating a quantum key through a QKD module based on the constructed edge gateway security architecture, and generating sensitivity data through an IPS vNSF; calculating noise based on the sensitivity data, generating disturbance data based on the noise, calculating a shared key, generating an encryption key in combination with the quantum key and the shared key, segmenting the encryption key through Shamir secret sharing, and encrypting and decrypting the key; encrypting the noise by using the decrypted key, generating global noise based on the encrypted noise, and calculating secondary disturbance data based on the global noise; and generating coded data based on the secondary disturbance data, and generating reconstruction data based on the coded data. According to the invention, the comprehensive security authority of the edge gateway in the aspects of key security and privacy protection intensity is improved.