203results about How to "Achieve physical isolation" patented technology

The invention discloses a dynamic trusted measurement method and a safe embedded system. The method comprises the following steps that: S1. a hardware layer redesigns a trusted BIOS (Basic Input Output System) by a TPM (Trusted Platform Module) chip and traditional hardware, a trust chain is transferred to an application program from the TPM security chip, trusted BISO, a trusted OS (Operating System) kernel and an embedded software stack to realize the trusted starting of a dynamic trusted measurement module (DTM); S2. an application layer measurement request module generates measurement request information according to a suspicious event from safety equipment and a local security strategy requirement, the measurement request information is formatted, and the measurement request is sent to the DTM of a kernel layer to activate the DTM; and S3. the DTM carries out trusted measurement to a system progress or module and responds. According to the dynamic trusted measurement method, the complex real-time attack can be effectively detected and defended, the attack on an internal physical layer can be actively detected and defended, and a safe embedded system platform can be realized.

The embodiment of the invention provides a virtual machine creating method and system and a host. Each host identity in a binding relationship between tenant identities and host identities only corresponds to one tenant identity; for any one tenant having a physical isolation requirement on the host, the virtual machine creating system can only create a virtual machine of the tenant in the host having the host identity corresponding to the tenant identity of the tenant but cannot create the virtual machine of the tenant in the hosts having the host identities corresponding to the tenant identities of other tenants, that is to say, the host having the host identity corresponding to the tenant identity of the tenant can only contain the virtual machine of the tenant but cannot contain the virtual machines of the other tenants; therefore, physical isolation among the virtual machines of different tenants is achieved, and then the data security among the virtual machines of different tenants is improved.

A device for transmitting telemetric and telecontrolled data between a 1553B bus and a satellite interior equipment bus comprises a 1553B bus module, a singlechip module and a satellite equipment bus management module. The satellite interior equipment bus management module is not used in the traditional design method, and telemetric and telecontrolled management of satellite interior equipment is realized by using a singlechip only; along with increasing of the number of satellite-borne equipment, the complexity of control logic of the singlechip is increased, and the reliability of a system is affected; and moreover, because the singlechip works in a serial mode, the singlechip only can acquire and process one telemetric parameter every time, the updating period of the telemetric parameters of the whole satellite is longer and longer, and detection and isolation of faults are affected. The device can overcome the shortcomings; the design of a singlechip system is simplified by the satellite interior equipment bus management module, and the control and management capability of the system on telemetry and telecontrol to the satellite equipment is improved.

The invention relates to system and method for multi-approach self-help appointment making. The system comprises an online appointment system, a telephone appointment system, a mobile phone appointment system, a short message appointment system, a self-help number-obtaining system and a self-help appointment making system. A patient can carry out self-help appointment by a website or be in contact with a field customer service representative by a telephone to make an appointment; the patient can carry out self-help appointment in a hospital on site by an HATM machine. The appointment patient using the approaches can obtain an appointed number by swiping an identity card, a medical visiting card and a medicare card through the HATM machine when coming to the hospital on an appointed date. The patients who do not make an appointment can also carry out self-help appointment directly by the HATM machine. The invention is fast and convenient, the appointment making difficulty of the patients is lightened, and the inconvenience that the patients get up early for queuing is avoided.

The invention discloses a system and a method for carrying out information interaction between a complete vehicle network and a peripheral. The system used for carrying out information interaction between the complete vehicle network and the peripheral comprises a gateway control module, wherein the gateway control module is connected with the complete vehicle network, and the gateway control module is configured to be suitable for receiving request information of the peripheral, determining whether the request information is legal based on whether the request information can pass encryption authentication, sending first request illegal information to the peripheral if the request information is illegal, and sending feedback information corresponding to the request information if the request information is legal. The system and the method for carrying out information interaction between the complete vehicle network and the peripheral can improve data security of the complete vehicle network.

The invention relates to the field of CD juke-boxes, and discloses a physical isolation type compact disc read-write device. The physical isolation type compact disc read-write device comprises an intranet controller, an extranet server, a switch, a sensor, a blank CD cassette, a recordable CD driver, a CD-ROM, a recycled CD cassette, a CD extractor and a CD catcher, wherein CD extraction of the CD extractor, CD catching of the CD catcher and CD writing of the recordable CD driver are finished under the control of the intranet controller; the intranet controller controls a read-only tray to be popped up or closed through the switch; the extranet server controls the CD-ROM to carry out CD reading and pop up the read-only tray after reading; the sensor sends the detected information of popping up of the read-only tray, namely the information of finishing of CD reading to the intranet controller; the intranet controller controls a manipulator to put a read CD to the recycled CD cassette. The physical isolation type compact disc read-write device is compact in structure, can achieve unidirectional transmission of data and improves the information safety.

The invention provides a service management system based on an OSGI framework. The system comprises a basic function module and an extension interface module, wherein the basic function module is used for providing a cache service, a log service, an exception prompt service and a metadata service of the service management system; the extension interface module is connected to the basic function module. An extension interface component comprises a service component interface and a data interactive interface, wherein the service component interface can identify an external service component, and the service component interface is a first type of expansion interface created by the service management system and used for accessing the external service component; the data interactive interface is a second type of expansion interface created by the service management system according to the external service component. The data interaction can be performed between the second type of the expansion interface and a database of the service management system; the external service component invokes the service of the basic function through the extension interface module, and acquires data of a client end through a data interaction interface and processes the data. According to the technical scheme, the interface expansion effect of the service management system is improved, and the difficulty and cost of maintenance are reduced.

The embodiment of the invention discloses a method and device for physically isolating services of a wireless private network, and the method comprises the steps: configuring subscription data for a terminal of the private network in advance, wherein the subscription data stipulates the corresponding gateway equipment when the terminal processes the private network service and establishes the communication connection with a private network server; based on this, after request information for establishing the communication connection of the private network service sent by a target terminal is received, directly finding the corresponding subscription data according to the identifier of the target terminal, and establishing the communication connection between the target terminal and the private network server according to the gateway specified in the subscription data. According to the method, when the communication connection of the private network is established through the subscription data, the gateways of different services for establishing the communication connection of the private network are physically isolated, so that the communication connection with the private network is established, the physical isolation of different services in the private network communication process is realized, and the security of data transmission is ensured.

The invention discloses a chip integrating with a fingerprint interface, a fingerprint algorithm, security algorithms and correlated accelerators. The chip comprises a fingerprint module, a storage module, a security module and a communication interface, the fingerprint module comprises a sensor interface and a fingerprint algorithm accelerator and is internally cured with the fingerprint algorithm, and the sensor interface is used for attaching various fingerprint sensors known on the market. The security module comprises the security algorithms and a hardware accelerator used for optimization of various security algorithms. The storage module comprises a Ram (random access memory) and a Flash. The chip has the advantages that a general application is physically isolated from data of security and fingerprint programs, exposure of security and fingerprint data and codes is completely eradicated, and attacks launched from the general application are completely prevented; by random combination with a general and universal chip of a mobile terminal, fingerprint authentication and security application are realized; the problem about authentication relation between a digital certificate and human is solved, and privacy protection is realized in the true sense.

The embodiment of the invention discloses a data interaction method, comprising the following steps: when a mobile terminal receives a target plot confirming instruction, the survey data of the target plot is obtained, and the target plot confirming instruction is generated by a user according to the current survey task; the mobile terminal selects short message type according to the survey data; the mobile terminal judges that whether a survey task identification corresponding to the current survey task is locally stored or not; if so, the mobile terminal generates a survey data short message according to the short message type, the task identification and the survey data; if not, the mobile terminal obtains the current time information and built-in GPS number, generates a survey task identification according to the time information and the GPS number, and then generates a survey data short message according to the short message type, the survey task identification and the survey data; and the mobile terminal transmits the survey data short message to a monitoring center. The embodiment of the invention also discloses a data interaction system. By adopting the data interaction method and the data interaction system, the safety of data interaction is greatly improved.

The invention discloses an isolation passive high-voltage electrified indication device, comprising am energy emitting end and an energy receiving end; the energy emitting end comprises a high-voltage polar plate, a middle polar plate, a first rectifying voltage stabilizing circuit and an emission circuit; the high-voltage polar plate is connected with a high-voltage lead in a switch cabinet; the middle polar plate and the high-voltage polar plate are correspondingly arranged in parallel to form a capacitor structure. The energy receiving end comprises a receiving circuit, a second rectifying voltage stabilizing circuit, a control module and an alarm circuit; the first rectifying voltage stabilizing circuit performs rectifying and voltage stabilizing on the current from the high-voltage polar plate and the middle polar plate and outputs the current to the emission circuit; the emission circuit transmits the energy to the receiving circuit in a wireless electromagnetic wave coupling mode; the second rectifying and voltage stabilizing circuit performs rectifying and voltage stabilizing on the energy received by the receiving circuit and provides the energy to the subsequent control module and the alarm circuit. Air isolation is adopted between the emission circuit and the receiving circuit. The safety is good. The scheme is suitable for the electrified detection on a high-voltage switch cabinet.

The invention discloses a magnetic-field-enhanced permanent-magnetic switching flux linkage motor with high fault tolerance. The motor comprises a rotor, a stator, three-phase armature windings and a casing, wherein the casing is made of magnetic conductive material; the rotor consists of toothspace-type core laminations; the stator fixed in the casing comprises first permanent magnets, a first U-shaped iron core, reluctance sheets and a second U-shaped iron core arranged one by one; N poles and S poles of the first permanent magnets are alternately arranged; armature teeth consist of the first permanent magnets and U-shaped iron core edges clinging to two sides of the first permanent magnets respectively; auxiliary teeth consist of the reluctance sheets and the U-shaped iron core edges clinging to two sides of the reluctance sheets respectively; the three-phase armature concentrated windings are wound round the armature teeth; second permanent magnets are arranged between the casing and the stator; and the first permanent magnets and the second permanent magnets in contact with the U-shaped iron cores have the same polarity on contact surface. The motor is simple in structure. Compared with the prior permanent-magnetic switching flux linkage motor, the motor has the advantages of improving anti-electromagnetic interference capability and electromagnetic compatibility and raising the rate of utilizing the permanent magnets, along with higher output power density and capability of avoiding magnetic leakage on the outer edge of the casing.

The invention discloses a stator modular hybrid excitation consequent pole flux reverse motor. The motor comprises a plurality of modular stators and an inner rotor, the plurality of modular stators are tightly attached in sequence to form a complete outer stator; an independent air gap is formed between the outer stator and the inner rotor; a plurality of stator grooves are formed in the outer stator; and stator teeth are formed between adjacent stator grooves. The stator teeth are divided into large stator teeth and small stator teeth according to the size; the large stator teeth and the small stator teeth are arranged adjacently; permanent magnets are attached to the surface of each large stator tooth and the surface of each small stator tooth, the width of each permanent magnet is smaller than that of the surface of the corresponding stator tooth, the polarity of the permanent magnet on each large stator tooth is opposite to that of the permanent magnet on the adjacent small statortooth, and an armature winding and a direct-current excitation winding are wound on each large stator tooth. According to the invention, the problems of low torque density and permanent magnet demagnetization of the flux reversal motor are solved, the electromagnetic performance and the operation reliability of the motor are improved, and the processing cost of the motor is reduced.

The invention provides an intelligent material dispatching system based on large data in sugar factory, whose system structure adopts a three-tier system of lower computer -> the server-> the client, and uses a real-time communication network formed by the field bussing technology, the local area network and the wide area network communication technology to form a distributed monitoring system.The intelligent dispatching system can establish an operation strategy model for material dispatching according to the theory of sugar production and the experience data provided by the skilled workers, and collect the parameters of the production process, the laboratory analysis data and the manual instruction in real time, which will transmitted to the operator's smart phone, tablet computer and computer for reference through the conditions judgment system, automatic generation of operational instructions, and the computer network. The system can complete single dispatching task, develop a batch of dispatching plans, and achieve tracing management of dispatching instruction, thereby greatly the processing efficiency of production management personnel is improved and control of the overall production becomes easier.

The invention discloses a method for realizing security login. The method is applied in a piece of security equipment. The security equipment receives standard fingerprint information and account information sent by a client, randomly generates a random sequence corresponding to the account information and stores corresponding relationships among the standard fingerprint information, the account information and the random sequence. The account information comprises website information and a user name. The method comprises following steps of receiving the fingerprint information and the to-be-logged-in account information sent by the client; verifying whether the fingerprint information is the standard fingerprint information corresponding to the to-be-logged-in account information; if the fingerprint information is the standard fingerprint information, sending the random sequence corresponding to the to-be-logged-in account information to the client, thus enabling the client to fill in the random sequence as a password corresponding to the account information. The invention also discloses a device and system for realizing security login and the security equipment. According to the method, the device, the system and the equipment, a user can realize security login without memorizing the password; and the security of the user account is sufficiently ensured.

A full-duplex and half-duplex converter and a conversion method relate to full-duplex and half-duplex communication compatibility technology. The method aims at solving the problems of data loss or high error rate caused by the fact that a data processing card adopting RS422 serial port communication and a signal collection card adopting RS485 serial port communication conduct communication directly. A three-state door integrated circuit is arranged between a half-duplex signal collection module and a full-duplex data processing module, and physical isolation of the transmitting end and the receiving end of a data processing card 422 serial port is achieved. The full-duplex and half-duplex port communication compatibility problem is solved in the way that function modules receive data feedback marks through an inquiry receiving module, and the way is achieved through software. Data loss and error codes do not exist, and data receiving and transmitting accuracy is ensured. The full-duplex and half-duplex converter is applicable to communication between the data processing card adopting the RS422 serial port communication and the signal collection card adopting the RS485 serial port communication.

The invention provides a privacy model training method based on a small amount of public data and an electronic device. The privacy model training method comprises steps of obtaining N neural networkteacher models by using a plurality of trainings; respectively inputting a small amount of public data xi into the N neural network teacher models to obtain a statistical voting result of each publicdata xi for each label k; noise being added to all statistical voting results, and public data xi and corresponding labels meeting the differential privacy principle being obtained; optimizing an adversarial generative network through a large number of random noise vectors and a pre-trained discriminant neural network, and generating a large number of label-free data; and jointly training a student model through the public data xi meeting the differential privacy principle, the corresponding label and a large amount of unlabeled data pair pre-trained auto-encoders to obtain a private student model. According to the method, only a small amount of public data is needed to train one private student model, physical isolation and network isolation of sensitive data are realized, and a problem of low accuracy of the private student model is solved.

The invention discloses a safety isolation control computer system. The system comprises an external network device used for being in communication connection with an external network, an internal network device used for being in communication connection with an internal network, a processor device used for being electrically connected to the external network device or the internal network deviceto form an external network computer or an internal network computer, and a switching device used for switching an electric connection between the external network device and the processor device andan electric connection between the internal network device and the processor device, wherein the switching device is electrically connected to the external network device, the internal network deviceand the processor device respectively. According to the safety isolation control computer system, the electric connection between the external network device and the processor device and the electricconnection between the internal network device and the processor device are switched through the switching device, the physical isolation of the internal network and the external network can be achieved, and the safe isolation of working modes of the internal network and the external network is achieved.

The invention consists of MCUú¼IDE control circuit, network card circuit and relay control circuit. Multi connecting ports are configured to the network card, and they are used to connect to different networks. The invention also includes a computer system containing the physical isolation circuit, by which the data in private network and public network is separately transmitted.

The invention discloses a method and a device for physical isolation of a distributed cluster based on lucene. The method comprises an index creation process, and the index creation process comprisesthe steps of querying a current cluster resource list and a current index relationship list stored in a distributed memory according to an index creation request of a service, and obtaining a use range of a server to which the service is pre-allocated in a cluster; obtaining a server list which can be used by the service according to the inquired use range of the server; and according to the current running state of each server in the server list, allocating the fragments of the index to be created to each server, the fragments including a main fragment and / or an auxiliary fragment. Accordingto the invention, by pre-allocating the server range in the cluster to the service (i.e., dividing cluster resources for the service), physical isolation of different services in the cluster is realized, and the response rates of all services (the response rate of the cluster is at a second level) are significantly improved.

The invention provides a communication method between double controls. The method comprises carrying out address translation between a first host and a second host based on PCI Express NTB, the NTB comprising a doorbell register; and sending interrupt between the first host and the second host through the doorbell register to realize communication between the first host and the second host. The communication method and system are suitable to be used between the first host of a local system and the second host of a far-end system, can simplify protocols, and can guarantee safety and reliability of data.

The embodiment of the invention relates to the technical field of testing and discloses a prewarning method, electronic equipment and a testing system. The prewarning method is applied to an operationdevice of the testing system, and the testing system also comprises a controller and a high-voltage frequency converter connected with the controller. The method comprises the following steps of receiving current operation data of the high-voltage frequency converter from the controller; according to the current operation data and preset prewarning data, determining whether or not the high-voltage frequency converter may break down; if yes, sending out a preset prewarning signal. According to the prewarning method, the electronic equipment and the testing system, whether or not the high-voltage frequency converter may break down can be pre-judged in advance, and the prewarning signal is sent out before the high-voltage frequency converter generates a fault alarm.

The invention provides a VPN security gateway, comprising an internal network communication unit, an external network communication unit, an encryption and decryption unit and a management unit, wherein the internal network communication unit is used for transmitting internal network data to the encryption and decryption unit and transmitting decrypted data that is transmitted from the encryption and decryption unit to an internal network; the external network communication unit is used for transmitting external network data to the encryption and decryption unit and transmitting encrypted data that is transmitted from the encryption and decryption unit to an external network; the encryption and decryption unit is used for correspondingly processing the corresponding data information transmitted from the internal network communication unit and the external network communication unit; and the management unit is used for uniformly managing the internal network communication unit, the external network communication unit and the encryption and decryption unit, and is used for monitoring the working states of the internal network communication unit, the external network communication unit and the encryption and decryption unit. According to the VPN security gateway provided by the invention, the isolation performance of the VPN security gateway can be improved.

The invention provides a data exchange device between an internal network and an external network, comprising an input terminal, a ferry device and an output terminal, wherein the ferry device comprises an intermediate server, a transfer server, a record optical drive, a read-only optical drive, an intermediate manipulator, a transfer manipulator, a first disc warehouse, a second disc warehouse, athird disc warehouse, and a controller; the output terminal comprises an output manipulator, an output record optical drive, a fourth optical disc warehouse, an output controller, and an output disctray; the input terminal comprises an input manipulator, an input disc tray, an input read-only optical drive, an input controller, and a fifth disc warehouse; the input terminal and the intermediateserver are connected by a network cable, the relay server is connected to the internal network for data transmission, the internal network is connected to the output terminal for data transmission, and the intermediate server is provided with a virus killing module. The invention enables a real "physical isolation" between the external network and the internal network.

The invention provides an isolated gateway, which is mainly applied to information systems of industrial enterprises. The isolated gateway comprises a control end linking module, a client linking module and an isolation module, wherein the control end linking module and the client linking module are electrically connected with the isolation module respectively; the control end linking module is electrically connected with a control end, and the client linking module is connected with a client; a control module controls the control end linking module and the client linking module; when the control end is connected with the isolation module through the control end linking module, the client is disconnected with the isolation module; and when the client is connected with the isolation module through the client linking module, the control end is disconnected with the isolation module. The isolated gateway can effectively block network direct connections to ensure that the control end and the client cannot be connected to the isolation module at the same time.

The invention discloses a layer-three switch, a wide area network connection system comprising the layer-three switch, a network based on the layer-three switch and the wide area network connection system, and a wide area network control method. An upper link port of the layer-three switch is closed by default, and is only opened when a lower link port receives an outer network connection command, and is connected with a wide area network; and the upper link port is disconnected from the wide area network and is closed when the lower link port receives an outer network disconnection command. According to the layer-three switch, the wide area network connection system, the network and the wide area network connection control method of the invention, the upper link port of the layer-three switch is set to be in a normally-closed state, such that, local area network equipment connected with an internal port of the layer-three switch and the wide area network can be physically isolated, and the security of a local area network can be improved.

The invention discloses a human resource management system, which relates to the field of management systems and comprises a user terminal, a scheduling server, a service server, a token server and anemployee database, Wherein the user terminal is connected with the scheduling server; wherein the user terminal is connected with the service server; wherein the scheduling server communicates with the service server through a first local area network, the service server communicates with the token server through a second local area network, the service server communicates with the employee database through a second local area network, and the token server communicates with the employee database through a second local area network; The two layers of physical networks are adopted, namely the terminal, the scheduling server and the business server adopt the same physical network, and the business server, the token server and the employee database adopt the same physical network, so that thephysical isolation between the terminal and the employee database is realized, and the information security of the database is ensured.

The present invention discloses a multi-system terminal device control method. The method comprises: after a first operating system that currently runs receives a switching signal of switching to a second operating system, determining a physical disk number of a storage device where the second operating system is located; according to the physical disk number, starting a corresponding storage device controller, so as to start a corresponding storage device driver and load the second operating system; and when it is determined that the second operating system does not have a corresponding network power supply module, applying a storage device power supply module of the first operating system to supply power for a network communication module of the second operating system. The present invention further discloses a multi-system terminal device control apparatus and a computer readable storage medium, By independently setting the storage device power supply module and the network power supply module corresponding to the operating system, mutual and independent access of multiple storage devices and systems in the same terminal device is realized, so that independent access of network communication is ensured, and physical isolation of classified data is completely achieved.

The invention relates to the technical field of communication, and specifically discloses a non-contact and non-destructive optical fiber patch cord and a manufacturing method thereof. The non-contactand non-destructive optical fiber patch cord comprises a ceramic ferrule, an adapter metal shell, a ceramic sleeve, an adapter segment ferrule and an optical fiber, wherein an optical fiber is buriedin the ceramic ferrule and the adapter segment ferrule in advance, one end of the ceramic ferrule is in butt joint with one end of the adapter segment ferrule, the ceramic sleeve is arranged at the outside of the butt joint site of the ceramic ferrule and the adapter segment ferrule, the ceramic sleeve is arranged in the adapter metal shell, the non-contact and non-destructive optical fiber patchcord is characterized in that an annular groove is formed in an end face of the ceramic ferrule along the periphery of the optical fiber. The non-contact and non-destructive optical fiber patch cordprovided by the invention has the advantages of realizing non-contact alignment of a jumper and a jumper, and of the jumper and an end face of the optical fiber in an adapter, and avoiding butt jointdamage to the end face of the optical fiber.

The invention discloses a double-winding permanent-magnet fault-tolerant motor comprising a stator and a rotor, wherein the stator comprises a stator core and a stator winding; the stator winding comprises a main tooth winding and an auxiliary tooth winding; the rotor comprises a rotor core and magnetic steel; the stator iron is in an annular shape, and has an inner ring surface on which a plurality of main teeth and a plurality of auxiliary teeth are circumferentially disposed; the main teeth and the auxiliary teeth are alternately distributed; the main tooth winding is wound around the mainteeth; the auxiliary tooth winding is wound around the auxiliary teeth; the rotor core and the stator core are coaxially arranged; and the magnetic steel is disposed in the rotor core. In the double-winding permanent-magnet fault-tolerant motor provided by the invention, the alternately distributed main and auxiliary teeth can realize effective physical isolation, and the two windings having unequal number of pole pairs have zero mutual inductance and can realize electromagnetic isolation. Finally, magneto-motive force having two numbers of pole pairs is generated by the magnetic steel havingdifferent polarities and different widths, and achieves electromechanical energy conversion in cooperation with the two windings of the stator. Thus, the motor can output torque both in a normal working condition and a fault condition.