16152results about "Security arrangement" patented technology

The invention discloses a mobile phone anti-theft system and method based on a camera and a GPS (Global Position System) of a mobile phone. The mobile phone anti-theft system comprises a mobile phone CPU (Central Processing Unit), a microprocessor, a camera driving module, an input module and an unlocking detection module, wherein the input module is connected with the unlocking detection module; the unlocking detection module is connected with the mobile phone CPU; and the mobile phone CPU is connected with the camera driving module through the microprocessor. Compared with the prior art, the mobile phone anti-theft system and method provided by the invention have the advantages as follows: an unlocking operation is carried out when the mobile phone is used after the mobile phone is lost or stolen, and a background operation program which is installed in the mobile phone is triggered and started when the unlocking operation is inaccurate; and a user who currently uses the mobile phone is positioned and photographed through a GPS module and the camera of the mobile phone; meanwhile, obtained information is sent to a mailbox or other addresses which are specified by the user in time, so that the user is convenient to alarm and can find the mobile phone back accurately in time, and the problems of the mobile phone loss and personnel information release of the user can be solved.

The invention relates to a wireless communication test method and system based on a portable frequency spectrograph and a medium, and belongs to the technical field of radio frequency spectrum analysis, and the wireless communication test method comprises the steps: collecting electromagnetic signal original data of a target area; constructing a dynamic electromagnetic environment baseline model; performing filtering and background subtraction processing on the original data of the electromagnetic signal; carrying out modulation mode identification, protocol analysis and terminal identification extraction on the preprocessed signal matrix, generating a multi-dimensional feature vector, carrying out convolution similarity matching on the multi-dimensional feature vector and a legal signal feature template, and distributing a threat level label; dynamically reconstructing scanning parameters of the portable spectrum analyzer according to the threat level label, generating an equipment parameter adjustment record and updating the electromagnetic fingerprint database; and generating a spectrum optimization control instruction based on the threat level label and the equipment parameter adjustment record, and issuing the spectrum optimization control instruction to the target base station or the terminal equipment. According to the application, the identification precision of the threat signal and the control closed-loop linkage capability in a complex electromagnetic environment are improved.

This disclosure describes systems, methods, and devices for quality of service (QOS)-level security configuration in a packet data unit (PDU) session. A device may identify a first user plane security indication received from an application function of a wireless network; identify a second user plane security indication received from the application function; generate, based on the first user plane security indication, a first security configuration for a first QoS flow of a PDU session; generate, based on the second user plane security indication, a second security configuration for a second QoS flow of the PDU session, the first security configuration different than the second security configuration; decode a first packet received, from the UE, in the first QoS flow using the first security configuration; and decode a second packet received, from the UE, in the second QoS flow using the second security configuration.

The invention discloses a reliable communication system based on a publishing and subscribing mode in a satellite-ground weak network environment, and aims to solve the problems of high round-trip delay, limited link bandwidth, high instantaneous packet loss rate, easiness in blocking and switching influence of links and the like in a data transmission process between a low-orbit satellite and a ground station. A publishing and subscribing model is introduced into an application layer to realize service logic decoupling, deep fusion with an underlying enhanced QUIC transmission protocol is realized, and mechanisms such as message persistence, breakpoint resume, forward error correction and connection migration are combined, so that stable, orderly, complete and safe transmission of service data can still be ensured under the conditions of link instability, quality fluctuation and communication interruption, and the service data transmission efficiency is improved. And high availability and continuity of a satellite-ground communication task under a weak network condition are realized.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein provide methods for handling disaster roaming service in network by UE. The method includes determining whether the UE receives a NAS message without integrity protection from a combination of first PLMN and second PLMN upon sending a registration request message to combination of first PLMN and second PLMN after expiry of a timer. In an embodiment, the method includes determining a count of attempt to combination of first PLMN and second PLMN meets a predefined threshold and determining that first PLMN is genuine network in which UE is not allowed to get disaster roaming service and blocking to retry on combination of first PLMN and second PLMN in response to receiving NAS message without integrity protection from combination of first PLMN and second PLMN upon sending a registration request message to the combination of first PLMN and second PLMN after expiry of timer.

The invention relates to the technical field of Bluetooth communication, and discloses an optimization method for secure communication of Bluetooth chip equipment. The method comprises the following steps: identifying a device type identifier and a protocol version feature, extracting a hardware capability parameter and generating an initial security policy set; collecting channel data, and calculating a stability index and a dynamic noise baseline; then, screening and sorting security policies to generate an execution queue, adjusting an encryption strength threshold according to a noise baseline to perform iterative optimization, and outputting final policy configuration; and when the target Bluetooth chip establishes the communication connection, loading the final security policy configuration and monitoring the channel state in real time, and triggering a policy dynamic switching mechanism when the channel state change exceeds the preset tolerance so as to optimize the security communication effect of the Bluetooth chip equipment. According to the method, the security policy can be accurately matched with the device and the channel state, the policy is dynamically adjusted, and the security and the stability of communication of the Bluetooth chip device are effectively improved.

The invention relates to the technical field of warehouse-in and warehouse-out management, in particular to a second-hand car warehouse-in and warehouse-out management system and method. The system comprises a vehicle RFID tag module, an intelligent electronic price tag module, a warehouse-in management module, a warehouse-out management module, an inventory monitoring and alarming module, a multi-point RFID positioning network module and an inventory map visualization module, and a unique encrypted RFID tag can be configured for each second-hand vehicle; binding an intelligent electronic price tag for each second-hand vehicle, and receiving verification to generate a verification result; collecting label information when the vehicle enters the parking lot; the label information is verified when the vehicle leaves; receiving the verification result of the intelligent electronic price tag and the vehicle in-library data of the database to lock the position of the abnormal vehicle; dense RFID reader nodes are arranged in the market to collect and output positioning data; and receiving the positioning data and the vehicle state information, generating a real-time inventory distribution map, and providing a scheduling and site planning decision basis for a manager. The scheduling and planning efficiency of managers can be improved.

A system for self-executing enhanced interaction with a node-based logistics receptacle. The system includes a wireless accessory sensor node disposed on the node-based logistics receptacle to monitor storage receptacle components of the node-based logistics receptacle to generate sensor data. The system includes a bridge node disposed on the node-based logistics receptacle that uploads information related the sensor data, detects an external device separate from the node-based logistics receptacle, communicates with the external device to establish a smart contract based connection that provides an interaction privilege, interfaces with the external device according to the interaction privilege, and transmits an update message to the backend server that corresponds to at least a portion of the uploaded information related to the sensor data and information related to interfacing with the external device.

The invention provides a rail transit vehicle-ground security encryption control method based on a national cryptographic algorithm. The method comprises the following steps: realizing rail transit vehicle-ground security encryption control enabled by the national cryptographic algorithm by adopting a layered and segmented three-level security encryption architecture of a vehicle-mounted terminal layer-a network transmission layer-a core network layer; cooperative control of a national cryptographic algorithm is realized through three stages of terminal authentication, data encryption and tunnel encapsulation; in order to solve the problem of encryption interruption caused by wireless link switching such as 5G signal attenuation, the technical scheme of the patent realizes lossless switching through a three-layer linkage mechanism of signal monitoring, switching decision and key synchronization; self-adaptive intelligent adjustment of a key strategy is realized through a three-layer closed-loop architecture of environmental perception, intelligent evaluation and dynamic regulation and control; and the self-adaptive intelligent adjustment of the key strategy is realized through a three-layer closed-loop architecture of environmental perception, intelligent evaluation and dynamic regulation and control. And the national secret algorithm is combined with the block chain evidence storage technology to realize data tampering prevention, and the speed is high.

A dynamic learning server-based logistics system includes a node-based logistics receptacle operative to receive a delivery item as part of a logistics transaction and also includes a backend server maintaining a management profile related to operation of the node-based logistics receptacle. The node-based logistics receptacle includes a plurality of monitored receptacle components, a wireless accessory sensor node having a plurality of sensors, and a bridge node operative to retrieve event information from the wireless accessory sensor node. The backend server receives the retrieved event information, compares the retrieved event information with the management profile, identifies a threshold change condition from the comparison, dynamically revises the management profile when the threshold change condition is identified, and transmits an adjustment message to the bridge node. The adjustment message is based upon the revised management profile, and the adjustment message initiates a timing change to operation of the bridge node.

The present disclosure provides for technology that addresses technological challenges arising in the field of identity verification. In particular, the present disclosure provides for out-of-band identity verification workflows that allow a first user to issue a verification challenge to a second user to confirm the identity of the second user. For example, the first user may receive a communication claiming to be from the second user. Rather than attempting to confirm the identity of the second user in-band, the first user initiates an out-of-band verification challenge to the second user.

A method for secure onboarding to a closed mesh network in which a camera-equipped device scans a QR code embedded in a durable physical carrier (e.g., adhesive bandages, photographs, ID cards) to extract an access credential, configuration profile, or secure URL that automatically configures the device for network access, authenticates the device to the mesh without manual credential entry or transmission of plaintext credentials over insecure channels, and establishes end-to-end encrypted communications between network nodes; the method supports cryptographically random, single-use or time-limited credentials with periodic refresh to prevent replay, encoding of VPN / WireGuard or proprietary configuration profiles, substantially real-time onboarding (e.g., under five seconds), optional multi-factor verification (biometric or PIN), immediate initiation of secure messaging, voice / video or data sessions upon onboarding, audit logging for compliance and revocation based on detected unauthorized activity, and covert or overt embedding of QR codes in environment-resistant carriers for emergency, disaster response, first responder, or covert deployment, with the QR code rendered unreadable or deactivated after successful onboarding to prevent credential reuse.

The invention belongs to the technical field of intelligent electric power internet of things, and particularly relates to an unmanned aerial vehicle heterogeneous terminal self-adaptive security access method for electric power edge computing, which comprises the following specific steps: terminal registration and credible anchoring: binding a hardware-level identity, collecting a multi-mode fingerprint and constructing a security behavior portrait; self-adaptive access authentication is carried out; dynamic behavior monitoring and baseline adjustment: establishing an identity authentication and management system, synchronously carrying out multi-dimensional real-time monitoring, carrying out linkage treatment on abnormal behaviors, and adopting a baseline evolution mechanism to avoid misjudgment; the multi-dimensional real-time monitoring comprises terminal service trend monitoring and flow situation analysis; and performing safe closed loop and cooperative response. According to the invention, unified risk detection of the unmanned aerial vehicle can be realized, real-time monitoring of vulnerabilities, access authority and operation states of the unmanned aerial vehicle is carried out, a dynamic behavior monitoring model is constructed in combination with unmanned aerial vehicle terminal information, business data, environment data and the like, and real-time monitoring and early warning of the unmanned aerial vehicle terminal are realized.

The invention relates to the technical field of network capability scheduling, in particular to a 5G network dynamic security capability scheduling method based on deep learning. The method comprises the following steps: in a 5G network operation process, continuously collecting state parameters of network slices, and constructing a security situation data sequence; performing feature correlation analysis on the security situation data sequence, extracting security feature factors reflecting security situation changes, and generating a security risk judgment signal according to the security feature factors; when the safety risk judgment signal reaches a preset triggering condition, determining the scheduling priority and the distribution proportion of the safety protection unit according to the risk intensity and the resource occupation distribution; according to the invention, through 5G network dynamic security capability scheduling, security capability adaptive scheduling based on dynamic situation awareness is realized, and risk determination precision and resource allocation coordination are significantly improved.

Methods, apparatus, systems, and articles of manufacture are disclosed for device authentication in a dedicated private network. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to utilize the machine readable instructions to generate first credentials associated with a first network based on second credentials associated with a second network, the first credentials including first location data corresponding to a dedicated private network (DPN), cause a mobile device to program a programmable subscriber identity module (SIM) of the mobile device based on the first credentials, and permit the mobile device to access the DPN based on a determination that second location data corresponding to the mobile device and included with the programmable SIM corresponds to the first location data.

The invention discloses an Internet of Vehicles intrusion detection method based on hierarchical feature enhancement and a dynamic sparse attention mechanism, and the method comprises the steps: firstly obtaining an original CAN bus message data stream, and carrying out the multi-modal data preprocessing and hierarchical feature construction; secondly, for hierarchical features, performing message-level depth feature compression and space-time statistical feature enhancement by adopting a dual-channel feature compression mechanism to form an enhanced mixed feature vector, and then constructing a neural network model of a dynamic sparse attention mechanism based on content awareness to perform feature extraction; and inputting a sparse attention calculation result into a hierarchical classifier, and predicting and outputting a detection result. And training the network model, and deploying the trained network model in a vehicle-mounted embedded device to realize real-time message monitoring and intrusion detection. According to the method, the calculation complexity and parameter quantity of the model are greatly reduced, the real-time performance in a vehicle-mounted environment is remarkably improved, and the detection capability on complex hidden attacks is effectively improved.

The invention belongs to the technical field of base station equipment management, and discloses a base station equipment management method and system based on big data. The method comprises the following steps: firstly, collecting security situation data of a physical layer, a network layer and an application layer, extracting time sequence behavior characteristics, performing cross-layer correlation analysis, and constructing an equipment security credibility dynamic evaluation model; then, identifying vulnerability indexes of control nodes according to the trust attenuation curve, and constructing a cascade risk conduction model in combination with a topological connection relationship; dynamically dividing a security isolation domain based on the model and generating protection parameters and control rules; further, a differentiated security policy is configured, and a cross-domain collaborative response channel is established; and finally, dynamically adjusting the isolation domain boundary and the security policy by monitoring the security event frequency and the interception success rate in real time. According to the invention, the conversion from passive defense to active prediction is realized, and the safety protection capability and operation stability of the base station equipment are improved.

The invention discloses a face recognition and encryption verification multi-grid article distribution control method and a distribution vehicle, and relates to the technical field of recognition and verification safety, and the method comprises the steps: fusing three-dimensional environment information through employing a vehicle-mounted edge calculation terminal and a navigation positioning terminal, and constructing a dynamic safety response strategy; the warehouse is analyzed through the vehicle-mounted warehouse control unified management terminal and the dynamic safety response strategy, and an edge intelligent control mechanism is obtained; processing based on a vehicle control and monitoring terminal and an edge intelligent control mechanism to obtain a real-time state; a vehicle interaction terminal and an intelligent operation terminal are utilized to obtain a face image and a visual dynamic feature, and a multi-modal detection strategy is utilized to analyze the face image and the visual dynamic feature to obtain a final authorized face image and a final authorized visual dynamic feature; and a dual-mode intelligent redundant unlocking technology is constructed, and face recognition and encryption verification are performed on the distribution vehicle based on the dual-mode intelligent redundant unlocking technology. According to the invention, compliance, high-efficiency and safe distribution of high-value materials is realized in an unmanned environment.

The invention relates to the technical field of network security and data processing, and discloses a violation short message recognition method and system based on deep semantic understanding, and the method comprises the steps: firstly cleaning an original short message, generating a mixed embedding vector through characters, sub-words and pinyin, and carrying out the recognition of the violation short message; then processing through a double-layer detection engine, wherein the first layer utilizes rules and a lightweight model for rapid preliminary screening; in the second layer, for suspected samples, a double-tower fusion neural network architecture is adopted, local and global features are combined, fusion is carried out through a gating unit, and a large language model is input to carry out deep semantic reasoning. The system executes strategies such as interception or flow limiting according to the risk score, and realizes model iteration through a dynamic knowledge base and incremental learning. According to the method, the resource consumption and the detection precision are balanced through the layered architecture, the antagonistic variants are effectively identified by utilizing multi-dimensional feature fusion, and the method has the adaptive evolution capability for a novel violation mode.

A node-enabled logistics receptacle system with a deployable storage element for receiving and temporarily maintaining a delivery item. The system includes a storage receptacle with an entrance opening for receiving the delivery item and a deployable autonomous mobile container as the deployable storage element. A first node is mounted to the storage receptacle and includes a first node processor, a first node memory, a communication interface, and a plurality of sensors including an interaction sensor and a storage sensor. The first node detects a change in the state of the entrance opening, determines a current condition of what is presently maintained within the deployable autonomous mobile container, generates a deploy activation signal, and transmits the deploy activation signal to the deployable autonomous mobile container to initiate movement by the deployable autonomous mobile container from the host position within the storage receptacle to a position external to the storage receptacle.

A system for micro-segmented networking is provided. A system controller is programmed to a) store a plurality of micro-segmented network accounts and a plurality of subscriber accounts, b) receive a request from a user device to activate a first micro-segmented network associated with a first subscriber account, c) authenticate the first subscriber account based on the subscriber information, d) activate the first micro-segmented network, including a plurality of device slots for a plurality of devices, e) transmit, to the user device, first device slot authentication information for a first device slot of the plurality of device slots; f) receive, from a first device connecting to the wireless network, the first device slot authentication information; g) authenticate the first device slot authentication information; and h) in response to authenticating the first device slot authentication information, connect the first device to the first micro-segmented network.

Methods, systems, and machine-readable mediums that enhance transaction authentication of a transaction of a first application by checking that a state of one or more other applications matches prespecified states or that one or more of those applications transition states within a prespecified period of time. For example, the prespecified states may correspond to the application being installed on a specified device (e.g., of the user) and having an authenticated session with a specified user.

The current 3GPP specification(s) does not provide solution for a problem such as an unauthorized use of network slice by the UE.An aspect of this disclosure includes a method of a communication apparatus. The method includes changing status of Single Network Slice Selection Assistance Information (S-NSSAI) included in Allowed Network Slice Selection Assistance Information (NSSAI). The method includes sending Pending NSSAI including the S-NSSAI in a case of changing the status.

A wireless transmit / receive unit (WTRU) may be configured to process first downlink data from a source cell using a first security context. The WTRU may receive, from the source cell, configuration information indicating one or more candidate cells for Layer 1 or Layer 2 (L1 / L2) triggered mobility (LTM). The WTRU may receive, from the source cell, a LTM indication to perform a handover (HO) to a candidate cell among the one or more candidate cells. The WTRU may determine a second security context associated with the candidate cell. The WTRU may process second downlink data based on the first security context. The WTRU may process third downlink data from the candidate cell using the second security context upon a determination that one or more of the conditions are met.

Methods, systems, and devices for wireless communications are described. A first network entity of a first service provider may obtain, from a first user equipment (UE), an invite message for initiating a call between with a second UE that includes an identity associated with the first UE and an authorization server. Based on whether the first UE is subscribed to a third-party information service, the first network entity may obtain third-party information from the authorization server. The first network entity may output the invite message to a second network entity of a second service provider, where the invite message output by the first network entity includes the third-party information in accordance with whether the third-party information is obtained. Based on whether the second UE is subscribed to a third-party information verification service, the second network entity may verify the third-party information and output the invite message to the second UE.

The present disclosure generally relates to user interfaces for sharing and / or re-sharing an electronic key that is provisioned onto an electronic wallet of a computer system.

The invention belongs to the technical field of network security, and particularly relates to a network security protection system and method based on an electric power emergency communication environment, and the system comprises a quantum-classical hybrid encryption system which is used for generating a dynamic key in real time; the biological characteristic driven dynamic trust ring is used for equipment identity authentication; the unmanned aerial vehicle relay network protocol is used for data transmission; the secret key after-reading burn-down protocol is used for information secret key after-reading burn-down; a key output by the quantum-classical hybrid encryption system is used for authentication encryption of a biological characteristic driven dynamic trust ring, an unmanned aerial vehicle relay network protocol transmits data encrypted by the quantum key, and a key burn-down protocol is used for reading encrypted data to trigger a key burn-down mechanism. According to the method, the key security is improved, the network attack difficulty is increased, the communication delay in a disaster is reduced, man-in-the-middle capture and attack can be immunized, and the problem of contradiction between the encryption strength and the real-time performance is solved.

The invention discloses an unmanned aerial vehicle communication data feature extraction method and an unknown type intrusion detection method. Physical layer information and network layer information of an unmanned aerial vehicle are acquired; wherein the physical layer information comprises the position, attitude, height and command type of the unmanned aerial vehicle, and the network layer information comprises an IP address, a port number, a protocol type and packet metadata; constructing an unmanned aerial vehicle state feature vector according to the physical layer information and the network layer information of the unmanned aerial vehicle; based on the trained CNN branch network, extracting communication data features used for intrusion detection in the unmanned aerial vehicle state feature vectors; a double-branch network structure of the convolutional neural network and the time sequence convolutional network is provided, a loss function is improved, an information entropy regularization item is introduced, efficient detection and distinguishing of unknown attack samples are achieved, the network structure has the advantages of being high in calculation efficiency and light in weight, and the method is suitable for large-scale popularization and application. The method is suitable for being deployed in resource-limited edge computing scenes such as unmanned aerial vehicles.

The invention discloses a data security transmission method based on an ML-KEM algorithm and a PUF, and the method comprises the steps: in a registration stage, mobile equipment generates an anti-quantum key through employing a PUF technology, and a CA issues an anti-quantum digital certificate based on a Falcon algorithm and a cryptographic accumulator; in an identity authentication stage, a mobile device and an edge gateway complete bidirectional identity authentication by exchanging identity labels, anti-quantum certificates and authentication key parameters in combination with a Falcon algorithm and PUF challenge-response, and negotiate to generate a shared key by using an ML-KEM algorithm, thereby effectively defending threats such as man-in-the-middle attack, replay attack and identity counterfeiting; in a data transmission stage, two communication parties realize data encryption transmission by adopting a symmetric encryption algorithm, and data integrity and source credibility are guaranteed in combination with a Falcon digital signature; the whole scheme has the advantages of quantum security resistance, efficient authentication, dynamic key updating, lightweight encryption and the like.

A social media platform provides a map-based graphical user interface (GUI) for accessing social media content submitted for public accessibility via the social media platform supported by the map-based GUI. The GUI includes a map providing interactive location-based searching functionality in that selection of a target location by the user in the GUI, such as by tapping or clicking at the target location, triggers a search for social media content having geo-tag data indicating geographic locations within a geographical search area centered on the target location. A search period for which content is returned is dynamically variable based on the duration for which the tap or click is held.