12results about How to "Achieve security isolation" patented technology

The invention relates to the technical field of electric power systems, in particular to an electric power service hard isolation fusion transmission system and method based on a TSN module, an electric power monitoring system and an electric power monitoring center. The power monitoring system comprises a first network slice and mapping module, a plurality of security areas, and a plurality of service units and first TSN modules arranged in the security areas. The power monitoring center comprises a second network slice and mapping module, a plurality of second TSN modules, and a plurality of storage areas connected with the second TSN modules. According to the invention, a complex and redundant switch deployment mode in a traditional power system is abandoned, and only one TSN module is deployed in each security area, so that hard isolation between power services is realized. Besides, in combination with the application of a network slice and a mapping module, not only is the security isolation of the service ensured, but also the fusion transmission of the service is realized, and the overall structure of the system is greatly simplified.

This invention discloses a thermal energy storage system for pumping large-flow-rate high-temperature molten salt, relating to the fields of solar thermal power generation, nuclear power, and thermal power energy storage. It includes a main molten salt storage tank, a stabilizing tank, a horizontal storage tank, a main circulating molten salt pump, and a salt-reducing temperature-regulating pump. The main molten salt storage tank is connected to the stabilizing tank via multiple pipelines. The outlet of the stabilizing tank is directly connected to the suction inlet of the main circulating molten salt pump via a pipeline equipped with an isolation valve and an air cooler, stabilizing the pump suction flow and enabling large-flow-rate molten salt pumping. The arrangement of one or more pipelines between the main molten salt storage tank and the stabilizing tank reduces the height of unusable molten salt in the main molten salt storage tank, saving costs. An air cooler is installed after the stabilizing tank to ensure safe isolation during isolation valve maintenance. This invention addresses the need for pumping large-flow-rate high-temperature molten salt in solar thermal power plants or nuclear power plants of 350MW or above, while also adapting to the requirements of long-term, uninterrupted low-speed pump operation.

This invention provides a network system, a network worker node, network management and control, and a network isolation method. The network system includes: a container network server interface deployed within the network worker node; the container network server interface is used to: create a corresponding identifier for the container when a container is created within the network worker node, request network management to create a virtual network interface card (NIC) corresponding to the container, and send a virtual port creation request generated based on the virtual NIC and identifier to network management; the first communication port of the virtual NIC is associated with the main namespace of the network system's operating system, and the second communication port of the virtual NIC is associated with the container's namespace; network management is used to create virtual ports according to the virtual port creation request, assign IP addresses to the virtual ports, and feed back the IP addresses to the container network server interface; and a virtual infrastructure network is used to process network data based on the identifier information and IP address of the virtual NIC. This invention can achieve network security isolation.

The present application discloses a networking method and system for a global quantum secure virtual private network, the networking method comprising the following steps: a first boundary base station establishes a connection with a second boundary base station via the Internet, and synchronizes the original key file; the first boundary base station establishes a connection with at least one access base station via a local area network, and the second boundary base station establishes a connection with at least one access base station via a local area network; the access base station receives an access request from at least one client, determines whether the client meets the networking access conditions based on the access request, and agrees to the access request in response to determining that the client meets the networking access conditions; the access base station establishes a connection with the client via the Internet based on an indication of agreeing to the access request; the access base station distributes communication keys to the accessed client. The networking method and networking system involved in the present invention provide a secure virtual private network to solve communication security and communication isolation problems.

The invention discloses a key processing method and device, a terminal, network equipment, a storage medium and a computer program product. The method comprises: in a random access process, a terminal generates a first key by using first information associated with a first channel between the terminal and a network device, the first information representing channel characteristics of the first channel; and deriving by using the first key to obtain one or more second keys, the one or more second keys being used for protecting transmission of access layer data and / or signaling.

The present invention provides a multi-tenant database isolation method, device and electronic device, the method comprising: if a user's business request is received, determining the target tenant corresponding to the tenant according to a preset multi-tenant management module; wherein the multi-tenant management module runs on a designated operating system, and the designated operating system is connected to a first database in communication; the multi-tenant management module is used to manage the logical relationship between multiple databases, each database corresponding to a tenant; determining the second database corresponding to the target tenant according to the multi-tenant management module; switching the designated operating system from the first database to the second database. An embodiment of the present invention provides a multi-tenant database isolation method, which isolates databases and manages the logical relationship between databases to provide a multi-tenant database isolation method that can take into account tenants' security requirements for data isolation and convenience of data maintenance.

This invention relates to the field of information security technology, and discloses a secure processing method, system, terminal, and storage medium for verification codes. The method includes: a server generating a first verification code based on a received operation request from a target account, and encrypting the first verification code using an encryption key associated with the target account to obtain ciphertext; the server sending the ciphertext to a client device associated with the target account; the client device decrypting the ciphertext using a decryption key corresponding to the encryption key to obtain a second verification code, and submitting the second verification code to the server; and the server verifying the operation request based on the second verification code. This invention sets the transmission state of the verification code to ciphertext, improving security, and ensures that the verification code can only be decrypted and used by authorized client devices, achieving application-level security isolation.

The invention particularly relates to a nuclear power industrial network quantum key distribution method. The method comprises the following steps: step 1, deploying a nuclear power industrial network quantum key distribution architecture; and step 2, quantum key generation and distribution. According to the invention, the quantum cryptographic technology is combined with the existing classical cryptographic algorithm, the high-security quantum key is generated through the quantum random number generator, and a secure key distribution mechanism is designed and realized based on the characteristics of the nuclear power industrial network. And the security of the communication channel, the reliability of the key distribution process and the long-term security of the key are ensured.

This invention discloses a PCIe switch with an NTB port supporting multicast. The switch includes at least one NTB port for communicating with root federations or other PCIe switches. Each NTB port includes an address translation module and a multicast management module. The address translation module translates addresses in read / write data packets to a specified PCIe bus domain. The multicast management module is communicatively connected to the address translation module and determines whether to multicast based on the translated address, and then performs data transmission. This PCIe switch can both connect to one or more root federations to achieve secure isolation of PCIe domains and leverage the advantages of multicast to improve bandwidth utilization.

The invention belongs to the field of specialized robots in the nuclear industry, and relates to a remotely-driven long-distance high-radioactivity micro pipeline blockage dredging robot which comprises a pushing and pulling device, a conveying mechanism and a dredging device. The tail end of the carrying mechanism is connected with an execution tail end tool, and the head end of the carrying mechanism sequentially penetrates through the dirt removing device and the push-pull device and then is connected with the storage device; the tail end of the decontamination device is detachably clamped at a pipe opening of the pipeline, and the decontamination device is used for decontaminating and collecting waste on the surface of the carrying mechanism when the carrying mechanism is pulled out; the storage device is used for storing the carrying mechanism pulled out of the pipeline; the driving equipment is used for providing power for the push-pull device, the decontamination device and the storage device; and the remote control system is electrically connected with each electric component through a cable and is used for remotely controlling each electric component. According to the invention, the long-distance dredging of the spent fuel post-treatment micro pipeline blockages is realized, and the safety and the production efficiency of spent fuel post-treatment are ensured.

This invention relates to the field of communication terminal equipment management technology, and discloses a method and system for automatic deployment of telephones based on intermediate server authentication isolation. The method includes: upon receiving an access request from a target telephone, generating an associated address pair for the target telephone; generating a dedicated configuration file based on the target telephone's identification information and configuration parameters, and writing a unified automatic deployment address into the dedicated configuration file; obtaining and caching authentication information from the RPS platform through an intermediate authentication server independent of the business system; registering a redirection service address and binding the target telephone's identification information by calling the RPS platform's interface based on the authentication information; receiving a configuration file retrieval request, and pushing the dedicated configuration file to the target telephone after successful authentication; and also includes a global automatic address update and reverse filling mechanism. This invention solves the problems of authentication credential leakage risk, high integration complexity, and RPS exclusivity conflict in existing solutions.