1511results about "Network connections" patented technology

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

The invention discloses an intelligent building equipment historical data storage method, and relates to the field of building equipment historical data storage, and the method comprises the following operation steps: S1, collecting and preprocessing global data; s2, intelligent storage strategy decision making; s3, designing a semantic storage structure; s4, constructing and managing a distributed storage cluster; s5, intelligently writing and indexing historical data; and S6, efficient query and deep analysis of an interface. According to the historical data storage method for the intelligent building equipment, provided by the invention, all-around improvement is realized in the aspects of data quality, storage efficiency, association capability, system reliability, operation convenience and the like through refined design of a data full link; and finally, the equipment data of the intelligent building really becomes a core asset which can be perceived, analyzed and utilized, and powerful support is provided for efficient operation, energy conservation, consumption reduction and safety guarantee of the building.

The invention discloses a gateway plug-in loading and optimizing method and device, equipment and a medium, and relates to the technical field of gateway plug-in management, and the method comprises the steps: collecting target information of a user request entering a gateway, so as to obtain corresponding collection data; the target information comprises a request source ip, a request path, parameter information, a request frequency, a user agent, a request method and a response state code; identifying the user request based on the collected data by using a pre-trained identification model so as to determine a request type of the user request according to a corresponding identification result; determining a target plug-in matched with the user request based on the request type, and loading the target plug-in to obtain a corresponding execution result; and optimizing a plug-in priority, a plug-in strategy parameter and an execution path of the target plug-in based on the execution result. Therefore, the gateway performance is improved, the maintenance cost is reduced, and the system stability is enhanced.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

The invention discloses a real-time state synchronization method and system, electronic equipment and a storage medium, and belongs to the technical field of network communication.The method comprises the steps that in response to a connection request from a client side, persistent connection with the client side is established, and a state subscription relation is recorded; performing semantic analysis on the state change event from the business service layer to determine a push priority; a corresponding target intelligent gateway is found according to the target object identifier of the state change event, a pushing strategy is executed by fusing the client network condition maintained by the target intelligent gateway and the pushing priority, and the state is updated and synchronized to the related client; and monitoring the health state of the persistent connection, and when the connection is abnormal and recovered, performing state synchronization with the client by the intelligent gateway based on the stored incremental state information. According to the invention, the problems of unreliable connection, redundant pushing and poor expansibility of a traditional SSE scheme are solved, and high-reliability, high-efficiency and horizontally-expandable real-time state synchronization is realized.

The invention discloses a smart park alarm method and system based on an intelligent gateway, and the method comprises the following steps: accessing a heterogeneous terminal through a multi-protocol southbound interface, generating a standardized event set, and building a spatial topology table; performing quality evaluation on the standardized event set to form a sequential cleaning event stream; target detection is carried out based on the sequential cleaning event flow, and a semantic event flow is output; performing space-time matching on the semantic event flow to obtain a fusion event set; according to a preset grading standard, a grading warning set is generated, and a linkage instruction set is generated; scheduling and executing the execution end according to the linkage instruction set to form a processing state feedback; integrating the grading warning set and the processing state feedback into an evidence packet, and reporting the evidence packet in parallel through the main and standby reporting links; and archiving and indexing the evidence packet and the reported result, generating an auditable record, and finishing synchronous updating with an upper platform. According to the invention, the smart park alarm method and system are realized.

The invention relates to the technical field of Internet of Things gateways, and discloses an Internet of Things gateway device and system based on edge computing, and the device comprises a hardware heterogeneous computing module and a multi-interface protocol adaptation module. The edge calculation local processing module is used for performing preprocessing, feature extraction and local decision on the acquired terminal data; the network redundancy and self-healing module is used for realizing accurate network disconnection detection, seamless switching of a main network and a standby network and equipment fault self-recovery through a multi-dimensional network health degree evaluation algorithm; the local autonomous storage module is used for realizing hierarchical storage of high-frequency data and network disconnection emergency data and seamless synchronization after network recovery through network disconnection data hierarchical caching and an incremental synchronization algorithm; and the cloud collaborative management module is used for realizing remote configuration, OTA upgrading and state monitoring. The method is high in integration, low in delay and fast in response, adapts to real-time scenes, saves bandwidth cost, improves cloud efficiency, is high in reliability, and realizes network disconnection and continuous operation.

The invention relates to the technical field of artificial intelligence, in particular to a method and system for achieving large model access authentication and flow control based on an APISIX gateway, and the method comprises the following steps: a client generates an HTTPS request containing an APIKey, and sends the HTTPS request to an APISIX gateway cluster; the gateway extracts the APIKey and forwards the APIKey to an authentication service, and the validity of the key is verified; after the verification is passed, the authentication service returns a user permission matrix, and the gateway verifies whether the request is within a permission range; after the permission verification is passed, the flow control plug-in detects a flow index according to a preset strategy; when the flow index does not exceed the limit, the gateway forwards the request to the large model service and returns a result; when the flow index exceeds the limit, the gateway executes flow limiting / fusing processing and returns a corresponding error response; the method has the beneficial effects that the gateway executes request forwarding or flow limiting control based on the preset strategy, the problems of illegal access risk and resource allocation imbalance faced by the large model service are effectively solved, the service stability and the resource utilization efficiency are improved, and the method is suitable for security operation and maintenance of the large model service in multiple scenes.

The invention discloses an intelligent authentication system based on a gateway, and relates to the technical field of intelligent authentication. The system comprises a strategy integration module, an intelligent analysis module, a strategy decision module, a dynamic signature module and an authentication execution module. According to the invention, heterogeneous authentication strategies are uniformly managed through the strategy integration module, the intelligent analysis module carries out real-time risk scoring on access requests, the strategy decision module dynamically generates authentication strategy identifiers according to the risk scoring, the client is driven to generate signatures containing algorithm identifiers through the dynamic signature module, and finally the authentication execution module verifies the signatures and routes according to the signatures. According to the method, the adaptive matching of the authentication logic and the risk context is realized, and the problems that the adaptive capacity of an authentication mechanism in a dynamic risk environment is insufficient and intelligent and gradient authentication response cannot be realized in the prior art are solved.

The invention discloses a downlink message control method of a star topology network and a server for executing the control method. The star topology network comprises a server, a plurality of gateways and a plurality of nodes. The nodes communicate with the server through the gateway, and the server allocates a timer for each of the gateways. The control method comprises the following steps: 1, judging whether a node is newly accessed to the star topology network; if so, entering the step 2; Step 2, establish a node-gateway topology relationship to determine a coverage area of each gateway and a coverage area of each node; 3, allocating one of a plurality of downlink frequency points to a newly access node; 4, requesting the gateway to send the message request when the frequency requiredfor the message request to be sent by the gateway is not used by the gateway in the coverage area of the destination node of the message request. The invention can more efficiently solve the problem of co-frequency interference of downlink communication of star topology network.

The invention discloses a data zero-copy processing method and system based on an eBPF zero-trust gateway, and belongs to the technical field of computer network security. According to the method, an XDP program is loaded on a network card driving layer, and an AFXDP technology is combined to construct a kernel mode and user mode shared memory pool UMEM; when an original message arrives, an eBPF unit mounted by an XDP program intercepts the message in real time, a tunnel packaging space is reserved in situ in an original memory, and if the head space is insufficient, a new memory page is logically mapped from a UMEM standby buffer pool to achieve extension. Identity fingerprints are generated by extracting message feature vectors, load in-situ encryption is completed in cooperation with a kernel kTLS module, and data are prevented from being returned to a user mode for processing. According to the method, multiple copying and context switching of a kernel-user mode of a traditional SSL VPN are eliminated, the throughput is improved by 2-3 times, the delay is reduced to the microsecond level, the CPU utilization rate is reduced by 40% or above, application layer DDoS attacks are effectively defended, and the method is suitable for 5G edge computing and cloud native zero-trust gateway scenes.

The invention provides a verification code acquisition system and method, an intelligent agent, a gateway, a platform and a storage medium, and relates to the technical field of artificial intelligence. The verification code acquisition system comprises an AI (artificial intelligence) agent, a short message gateway and a service platform associated with the AI agent, and is characterized in that the AI agent is connected with the short message gateway, and the service platform is connected with the short message gateway. And the AI agent sends an identity verification request carrying the first identifier to an application platform corresponding to the target application in response to an input calling operation for the target application. The first identifier is associated with the AI agent, and the identity verification request is used for requesting the application platform to send a verification code carrying the first identifier to the short message gateway. And the short message gateway sends the verification code carrying the first identifier to the service platform based on the first identifier. And the service platform sends the verification code to the AI agent based on the first identifier. And the AI agent executes an identity verification operation for the target application based on the verification code, so that the processing efficiency of the AI agent for processing the task associated with the target application is improved through dynamic identity verification of the application platform.

The invention relates to the technical field of state monitoring, in particular to a state monitoring method and system based on a power grid intelligent Internet of Things gateway device, and the method comprises the following steps: based on the Internet of Things gateway device, collecting and analyzing multiple types of sensor signals, carrying out the unified arrangement to form a multi-parameter cooperative monitoring sequence, and comparing the changes of current and voltage signals; and extracting a synchronous response ratio feature group, calculating a thermoelectric trend consistency index in combination with the temperature change trend and the current amplitude, screening an interference level section, and judging abnormal linkage. According to the method, cross-parameter trend extraction, collaborative response, difference comparison and section identification are realized, correlation characteristics of multi-source signals in a continuous time period can be converted into identification basis, an abnormal forming process, a response link and state evolution are discriminated by combined characteristics, and abnormal section, sequence attributes and synchronization factors are jointly applied, so that the accuracy of the multi-source signal identification is improved, and the reliability of the multi-source signal identification is improved. And the identifiability and the classification capability of abnormal events under complex working conditions are improved.

The invention discloses an abnormal data real-time filtering method and system based on edge computing in a dynamic environment system, the method is executed by an edge computing gateway, sliding window weighted average preprocessing is equivalently realized by adopting integer shift operation, and the single computing overhead is controlled within 50 clock cycles; dynamically and adaptively adjusting dynamic reference model parameters based on the ratio of the network load to the sensor sampling frequency; performing multi-stage anomaly filtering of a hard threshold value, a mutation rate and a statistical interval on the data through a three-stage pipeline judgment structure executed by atomization; an FPGA hardware queue manager independent of a main processor bypasses a TCP stack to push abnormal data at the highest priority, and redundant data is stored in a zero-copy annular buffer area managed by DMA. According to the invention, the problems of intranet congestion, server I / O bottleneck and alarm delay under the centralized architecture of the traditional dynamic loop system are solved, and the fault, fault, fault, fault, fault and fault are realized on resource-limited platforms such as Cortex-M4 and the like; the average alarm delay is 8 milliseconds; and the data compression rate is more than 90%.

The invention provides an integrated hospital intelligent monitoring system for cold-chain medicine temperature early warning, and relates to the technical field of medical monitoring. The integrated hospital intelligent monitoring system for cold-chain medicine temperature early warning comprises a sensing layer module which is deployed in a dual-mode temperature sensing unit in cold-chain equipment and comprises a main sensor and an auxiliary sensor, the main sensor is arranged in a central area in the cold-chain equipment, and the transmission layer module is arranged in a central area in the cold-chain equipment. The transmission layer module comprises a hybrid networking unit, the hybrid networking unit integrates a 433MHz wireless ad hoc network subunit and an NB-IoT / 4G remote transmission subunit, the platform layer module comprises a data processing unit and an intelligent early warning decision unit, and the execution layer module. When the box door is opened, the system can accurately identify non-fault temperature fluctuation by analyzing the temperature difference of the double sensors, the false alarm rate is reduced to 5.2% from the average industrial 38.7%, and the interference of invalid alarm to medical staff is greatly reduced.

The invention discloses a channel security transmission method for protecting data privacy of an edge gateway of the Internet of Things, and relates to the technical field of security and privacy protection of the Internet of Things, and the method comprises the steps: constructing an edge gateway security architecture, generating a quantum key through a QKD module based on the constructed edge gateway security architecture, and generating sensitivity data through an IPS vNSF; calculating noise based on the sensitivity data, generating disturbance data based on the noise, calculating a shared key, generating an encryption key in combination with the quantum key and the shared key, segmenting the encryption key through Shamir secret sharing, and encrypting and decrypting the key; encrypting the noise by using the decrypted key, generating global noise based on the encrypted noise, and calculating secondary disturbance data based on the global noise; and generating coded data based on the secondary disturbance data, and generating reconstruction data based on the coded data. According to the invention, the comprehensive security authority of the edge gateway in the aspects of key security and privacy protection intensity is improved.

The invention relates to the technical field of industrial communication and Internet of Things, in particular to an IO-Link gateway system and method for heterogeneous protocol unification and edge enabling. Comprising a hardware layer, a protocol adaptation layer, a data processing layer, an intelligent computing layer and a communication interaction layer which are connected in sequence to achieve standardized conversion and edge intelligent processing of heterogeneous industrial data, and data time sequence consistency and system operation stability are guaranteed in the whole process. According to the invention, a plurality of heterogeneous industrial protocols are downwards and uniformly mapped to a technical path of an IO-Link international standard, and heterogeneous data are converted into a standard IO-Link object dictionary at a gateway level, so that field devices of different manufacturers and different protocols can carry out data interaction with a uniform and semantic-rich information model; therefore, plug-and-play of data is realized in the equipment access layer, and a solid foundation is laid for constructing an integrated industrial Internet of Things system.

The invention relates to the technical field of computer network communication, and discloses a multi-protocol gateway system and method based on database driving and dynamic parameter mapping, and the system comprises a database core configuration center which is used for storing a routing rule containing data mapping and service orchestration logic; the dynamic route management module is used for loading rules from a database and realizing dynamic hot update; the unified access and routing module is used for receiving an external request and matching a unique routing rule; the parameter mapping engine is used for dynamically extracting and converting the request data according to rules; the protocol adaptation and execution module is used for communicating with a back-end service according to a specified protocol; and the response processing and chained routing module is used for processing the response and triggering a new round of routing process according to the chained instruction in the rule. Through database driving, dynamic parameter mapping and chained routing technologies, dynamic update of configuration and complex service arrangement are realized, and the flexibility and maintainability of the system are improved.

The invention discloses an equipment logic interlocking control method supporting edge collaboration and an intelligent gateway, and belongs to the field of industrial control and industrial Internet of Things. Reading a configuration center rule and generating a verification entry list; reading a local key value cache, sending a remote state query request and analyzing a state response message; obtaining an interlocking judgment result based on aging screening, numerical value comparison and Boolean operation of the collection timestamps; and executing physical bus message issuing or failure response output according to an interlocking judgment result. According to the method, a data access mode of combining configuration center rule management and local cache is adopted, so that the state of the dependent object can be uniformly verified, and the interlocking judgment traceability is improved.

The invention provides an on-off control method and device for a gateway port and a medium. The on-off control method comprises the steps of obtaining historical access log data and threat intelligence data of a target port in a gateway; based on the historical access log data and the threat intelligence data, performing time sequence analysis by using a pre-trained long-short-term memory network model to obtain a predicted security access time period of the target port in a future preset time period; generating a temporary port exposure preset rule of the target port according to the predicted security access time period; determining a traffic feature vector of the real-time traffic data packet of the target port; using a preset deep reinforcement learning agent to determine an on-off control instruction for the target port based on the traffic feature vector and a temporary port exposure preset rule; and executing the on-off control instruction to modify an access control list state of the gateway firewall to the target port. According to the method and the device, dynamic and refined gateway port on-off control can be realized, so that the service flexibility and security are considered.

The invention discloses a multi-platform customer information integration and unified management method and system, and relates to the technical field of customer relationship management, and the method comprises the steps: dynamically accessing multi-platform data through a distributed API gateway, and uniformly converting the multi-platform data into an Avro format data stream through a lightweight container; the method comprises the following steps: processing a data stream by adopting a three-stage cleaning assembly line, extracting multi-modal features in combination with a BERT micro model and a pruned MobileNetV3, and fusing the multi-modal features into 384-dimensional feature vectors according to a weight matrix; dynamically constructing a Transform-XL skeleton network based on the feature flow, and optimizing the model in real time through knowledge distillation and reinforcement learning regulators; constructing a customer portrait version tree by using a dual-channel full-connection layer to realize millisecond-level emergency update; personalized services are generated based on a multi-arm bandit algorithm, feedback is collected, and closed-loop optimization is completed through a preference offset degree driving model scalpel mechanism. According to the method, the problems of real-time fusion of multi-source heterogeneous data, dynamic portrait updating and model adaptive adjustment are solved.

A communication system (20) is disclosed comprising a plurality of surface communication partners (22, 24, 26, 28, 30), an underwater-surface communication partner (34), and a repeater (32). The surface communication partners of the plurality of surface communication partners (22, 24, 26, 28, 30), the repeater (32), and the underwater-surface communication partner (34) in the surface state are configured to establish radio data links (38) with each other. The repeater (32) is configured to establish an underwater data link (40') with the underwater-surface communication partner (34) and to transmit a data packet (40) received via the radio data link (38) to the underwater communication partner (34) via the underwater data link (40').Furthermore, the converter (32) is designed to send the incoming above-water data packet (40) to the underwater-to-above-water communication partner (34) only if the converter (32) receives corresponding converter information.

An anomaly detection device detects an anomaly in an in-vehicle network system including two or more electronic control units and one or more networks and includes: ECU attribute storage in which attributes of the two or more electronic control units each of which has been set for a corresponding one of the two or more electronic control units are stored; a communicator that transmits and receives a message on the one or more networks; and an anomaly detector that detects anomalous communication by using an attribute of a message source electronic control unit or an attribute of a message destination electronic control unit among the attributes stored in the ECU attribute storage. The attribute stored in the ECU attribute storage indicates the function of the electronic control unit including the attribute or the type of information that is handled by the electronic control unit including the attribute.

The invention discloses a self-calibration and drift compensation method for an automatic underground water monitoring station, and the method comprises the following steps: 1, transmitting a reference measurement starting instruction to an underground bubble method device by an edge calculation gateway, forming a reference data pair by a bubble method water level reference value and a reference acquisition moment, and writing the reference data pair into a reference data cache region; 2, the edge computing gateway creates a state storage structure and a covariance storage structure; and step 3, the edge computing gateway reads a drift amount estimation value from the state storage structure as a drift compensation amount, and when a drift estimation standard deviation exceeds a set threshold, bubble method hardware reference acquisition is triggered. According to the invention, the problems of high manual calibration cost and lack of independent reference support in pure software estimation in the prior art are solved, so that a monitoring station can stably operate for a long time under an unattended condition and continuously output high-precision underground water level monitoring data.

A method for configuring a network address translation NAT gateway based on a public cloud service including: a cloud management platform obtains NAT gateway creation information that is input by a tenant; The cloud management platform creates the NAT gateway in the first VPC based on the NAT gateway creation information; The cloud management platform obtains configuration information that is input by the tenant and applied to the NAT gateway; The cloud management platform sets, based on the identifier of the second VPC, the NAT gateway to be connected to the second VPC, and sends the first NAT rule to the NAT gateway, where the first NAT rule is used to indicate the NAT gateway to: bind a first network segment in the first VPC to a first elastic IP address EIP; and bind the first network segment in the first VPC to a first transit private IP address.

The invention relates to the technical field of computers, in particular to a flow limiting method and system based on an AI gateway and a micro-service gateway, a medium and equipment, and the method comprises the steps: receiving service flow data corresponding to the micro-service gateway, AI flow data corresponding to the AI gateway, and a system resource utilization rate, building a quota negotiation channel between the micro-service gateway and the AI gateway, and transmitting the quota negotiation channel to the micro-service gateway; constructing a data set; calculating the flow quota of the micro-service gateway and the AI gateway through a dynamic quota algorithm based on the data set; receiving and identifying a service scene priority corresponding to the target request, and reserving an elastic burst quota for the target request based on the service scene priority; and judging the relationship between the total number of the current effective requests and the traffic quota of the corresponding gateway, and triggering a corresponding process. By establishing a dynamic quota mechanism and constructing a double-gateway cooperation mode of an AI gateway and a micro-service gateway, insufficient overall resource utilization efficiency caused by local current limiting is avoided, optimal global resource allocation is realized, and system stability is improved through cascade backoff.

A network coupler connects a first network with primary network participants, which communicates using a first network protocol, to a subordinate second network with secondary network participants, which communicates using a second network protocol. The network coupler includes a protocol translator for translating between the first and second network protocols, a control unit communicating according to the second network protocol for controlling the subordinate second network, and multiple participant representatives communicating according to the first network protocol.The participant representatives comprise a secondary participant representative to represent at least one secondary network participant communicating according to the second network protocol according to the first network protocol, and a tertiary participant representative to represent at least one tertiary network participant of a third network communicating according to an Ethernet-based third network protocol according to the first network protocol, wherein the third network protocol differs from the first network protocol with respect to the specification of the layer of the ISO / OSI model, namely the physical layer, but agrees with the first network protocol with respect to the specification of at least one further layer of the ISO / OSI model.

Disclosed in the present invention are a method for precise transmission and parsing of a phase-cut transmission control signal, a control system, an apparatus and a gateway device. On the basis of a live wire alternating current sinusoidal signal, generation of a zero-crossing pulse signal is triggered every T / 2 cycle; a synchronization signal immediately follows the generation triggering of a current zero-crossing pulse; during a valid identification cycle Ta, a falling edge of an alternating current half wave is caused to generate a right notch corresponding to a time tR, or an original state is maintained until a next zero-crossing pulse is generated; the generation of a zero-crossing pulse represents a first digital signal, and the generation of a right notch represents a second digital signal, signals outside the cycle Ta being invalid. A midpoint between a rising edge and a falling edge of each zero-crossing pulse is used as a theoretical zero-crossing point to trigger timing, and the position of the theoretical zero-crossing point is corrected in real time for each zero-crossing pulse signal, thereby eliminating communication errors caused by alternating current interference; a synchronization signal and a valid identification cycle are used to mark the start and the end, thereby achieving precise parsing; and when there is no data transmission, only zero-crossing pulses are generated, thereby reducing energy consumption.

The invention provides a hybrid authentication method based on a gateway request, and relates to the technical field of computer science. Comprising the following steps: S1, receiving a client request and identifying a protocol type; s2, analyzing the request and extracting universal access elements to generate a unified tetrad; s3, querying and loading a corresponding hybrid authentication strategy; s4, dynamically injecting real-time risk control data; s5, authentication judgment is executed through an RBAC / ABAC / ReBAC combination engine; and S6, releasing or rejecting the request according to the result. According to the method, three permission models are fused, the problems of heterogeneous protocol strategy fragmentation, disjunction of authentication and real-time risk control, centralized architecture performance bottleneck and complex scene permission collaborative decision-making are solved, and the authentication flexibility, security and concurrent processing capability are improved.

A method implemented by a first cloud gateway (GW). The method includes receiving, from a first customer premises edge device (CPE) over a software defined wide area network (SD-WAN) path, a data packet including an outer layer internet protocol (IP) header and a generic network virtualization encapsulation (GENEVE) header. The GENEVE header includes one or more sub-type length values (TLVs). The method also includes extracting a destination address from the one or more sub TLVs within the GENEVE header. And the method further comprises the steps of updating the destination IP address in the outer-layer IP header to the extracted destination address, and forwarding the data packet to a second CPE according to the updated destination IP address.