74results about How to "Avoid attack" patented technology

The invention provides a tumor cell exosome, an anti-tumor immune drug delivery system and a preparation method and application of the anti-tumor immune drug delivery system, the tumor cell exosome is derived from starved and stimulated tumor cells, the tumor cell exosome is coated with nano drug particles for delivery, and the exosome has the effects of enhancing immune cell infiltration and remodeling an immune microenvironment; due to the homing effect of the exosome, the medicine and the exosome are more easily accumulated in the tumor, and the targeting property is improved; due to coating and camouflage of the biological membrane of the exosome membrane, the exosome membrane is prevented from being recognized, attacked and removed by an organism, and the biological safety is improved, so that the exosome and the nano-drug act on the tumor together to achieve a synergistic effect.

The invention relates to the technical field of power industrial control network asset management, in particular to a power industrial control network security-oriented asset dynamic digital fingerprint construction system, which comprises a data acquisition module, a first determination module, a second determination module, an identification module, an adjustment module and a construction module. Through accurate multi-level data acquisition, behavior analysis and threshold adjustment, the security of an electric power industrial control network is remarkably improved, the system can acquire key behavior data of equipment in real time, such as the number of bytes of a data packet, the memory utilization rate and the number of login failures, and normal equipment and abnormal equipment are accurately identified through multi-stage screening, so that the security of the electric power industrial control network is improved. The system flexibly deals with the dynamic change of the equipment behavior by adjusting the byte number fluctuation threshold value, ensures the high efficiency and accuracy of the safety detection, and effectively solves the problems that the system cannot adapt to the network asset change and cannot identify the abnormal equipment in real time due to the dependence on a static fingerprint database and a fixed similarity threshold value.

The invention discloses an electric power WLAN security reinforcement method, system and device based on trusted computing, and relates to the technical field of electric power WLAN security, the method comprises the following steps: respectively presetting a trusted platform control module TPCM and corresponding components on an electric power wireless terminal, an electric power wireless access point and an electric power authentication server to form a ternary three-layer architecture; certificate application and distribution of equipment are carried out according to the three-element three-layer architecture, the equipment is managed and controlled in a unified mode through an electric power authentication server, and the equipment comprises an electric power wireless terminal and an electric power wireless access point; and carrying out trusted access authentication on the equipment which obtains the certificate, including bidirectional identity authentication based on a ternary three-layer architecture, platform identity and integrity evaluation based on attributes and key negotiation based on a national cryptographic algorithm, so as to realize access of the trusted power wireless terminal to the trusted power wireless access point. According to the method, collusion attacks can be prevented, platform configuration information cannot be leaked, and sensitive information can be effectively prevented from being intercepted by attackers or untrusted intermediate equipment.

The invention relates to the technical field of communication security, in particular to a communication security management method and device based on block chain nodes. Based on the block chain technology, the public key encryption algorithm is used to ensure that the identities of both communication parties are real and reliable. Each node records the public key, the registration time and the identity information of the known node through the storage block chain, so that the security and the consistency of identity authentication are ensured, and the credibility and the security of the network are improved; the behavior of each node is regularly evaluated through a behavior analysis and statistical method in combination with request frequency, behavior consistency and tampering data detection, and malicious nodes are expelled from the network through a consensus protocol, so that the malicious node detection accuracy is enhanced, attack and damage are effectively prevented, and the malicious node detection efficiency is improved. And the stability and the reliability of the network are improved.

The invention discloses a router EasyMesh fast networking method and system, and the method comprises the steps: obtaining the equipment information and connection relation of an EasyMesh router through a network topology discovery protocol, and generating a global network topology view. And according to the global network topology view, performing comprehensive scoring on each router by adopting a multi-dimensional index to obtain an equipment capability score of each router. And performing a link quality test on links between the routers in the global network topology view to generate a link quality test result. And taking the global network topology view, the equipment capability score and the link quality test result as input, and calculating an optimal role scheme of each router through a role decision algorithm. Therefore, the router role can be quickly determined through an automatic process, the networking efficiency is optimized, the network compatibility and safety are improved, and management and maintenance are simplified.

The invention relates to the technical field of communication, and discloses a data signal transmission method based on a network switch, which comprises the following steps: establishing a network flow table rule of a target network switch; deploying a virtualization component and a virtual network function thereof in a server corresponding to the target network switch, defining a high-speed Ethernet port of the target network switch, and establishing an aggregation link of the target network switch; acquiring a data frame of a sending device corresponding to the target network switch by using the virtualization component, analyzing a safety coefficient of the data frame through a virtual network function, analyzing a fragment value of the data frame, and determining a target data frame in the data frame; the forwarding behavior of the target data frame is analyzed, forwarding of the target data frame is executed, forwarding traffic is obtained, forwarding abnormity of the target data frame is analyzed through an AI forwarding traffic algorithm, forwarding optimization parameters of the target data frame are defined through an SDN controller, and efficient transmission of the target data frame is executed based on the forwarding optimization parameters. According to the invention, the high efficiency of data signal transmission can be improved.

The invention relates to the field of protocol detection, in particular to an industrial control protocol content anomaly detection method based on artificial intelligence, which comprises the following steps: capturing data packets of industrial control protocols corresponding to interactive terminal groups; performing feature extraction on the data packet, and analyzing transmission features of each interactive terminal group in different dimensions; performing simulated tampering on the transmission characteristics, determining sensitivity values of the interaction terminal groups corresponding to the transmission characteristics of different dimensions, determining corresponding sensitive dimensions, and classifying the interaction terminal groups based on the number of the sensitive dimensions and the sensitivity values; calculating the sensitive dimensions and the sensitivity values of the interactive terminal groups of the same type to obtain dimension correlation values; performing transmission analysis on each interaction terminal group based on the transmission characteristics and the dimension association values; sending corresponding early warning information according to a data packet transmission analysis result; according to the invention, the efficiency of industrial control protocol content anomaly detection is effectively improved, and the accuracy of industrial control protocol content anomaly detection is improved.

This invention relates to the field of new energy vehicle technology and discloses an encrypted communication system for communication between new energy vehicles and charging piles. The system includes: a vehicle gateway, used to generate an initial vehicle-to-charging pile communication key and a message authentication code, and to send the initial vehicle-to-charging pile communication key and the message authentication code to both communicating parties; and, upon receiving a message indicating successful communication between the battery management system and the charging pile, updating the current vehicle-to-charging pile communication key and regenerating the message authentication code to send to both communicating parties; the battery management system and the charging pile, i.e., the two communicating parties, verify each received message authentication code based on the code. If the verification is successful, they initiate the current round of communication using the current vehicle-to-charging pile communication key; after each message transmission, the current vehicle-to-charging pile communication key is updated, and a message indicating successful communication for the current round is sent to the vehicle gateway. This invention updates the key multiple times during vehicle-to-charging pile communication and verifies it in each round of communication, thus improving communication security.

This invention proposes a secure access method and system for low-power IoT terminals, comprising: collecting hardware state entropy values ​​and environmental awareness data when the terminal wakes up from sleep mode, generating a terminal trust fingerprint, and binding it with the terminal's unique identifier to obtain an identity credential; sending the identity credential to an access gateway; verifying the identity credential using a root of trust and returning a gateway authentication token to the terminal; generating a session key suite based on the authentication status and the terminal's remaining battery level; establishing an encrypted communication channel between the terminal and the access gateway based on the session key suite, with the service data sent by the terminal within the encrypted communication channel appended with a message authentication code; monitoring traffic characteristics and command patterns in the encrypted communication channel, and when abnormal behavior deviating from the terminal's trust fingerprint by more than a threshold is detected, triggering the terminal to re-execute the generation of the identity credential and two-way authentication, and revoking the session key suite. This invention can improve the access security and reliability of low-power terminals in complex network environments.

The application discloses a method for establishing end-to-end secure communication of unmanned aerial vehicle under cloud network architecture, and takes cloud server as a security service center to provide full-process authentication service for unmanned aerial vehicle end system; the cloud server only issues public authentication materials to unmanned aerial vehicles, and session key negotiation and establishment of end-to-end secure communication are realized between unmanned aerial vehicles; the unmanned aerial vehicle end system does not need to store authentication materials of other unmanned aerial vehicles in advance, the cloud server is driven by specific tasks, and specific authentication materials required for key negotiation are issued to unmanned aerial vehicles which need to be securely cooperated according to task requirements. The application only requires that the cloud server and any one of the unmanned aerial vehicles for key negotiation establish a communication connection, and the authentication materials issued by the cloud server can make the unmanned aerial vehicles realize key negotiation and establish an end-to-end secure channel in a specific range; different temporary public keys are used for each request message, which can effectively prevent the harm caused by long-term and short-term secret leakage.

The invention relates to the technical field of instant messaging, in particular to a doctor-patient platform instant messaging method and system, and the method comprises the steps: starting a doctor-patient instant messaging application, carrying out the identity verification, obtaining a verification parameter, judging whether the identity verification succeeds or not according to the verification parameter, and if the identity verification succeeds, defining an identification content field and a message content field, and pulling historical data; the method comprises the following steps of: constructing a display format set, updating data, obtaining updated data, sending real-time data, encrypting the data, generating a signature, obtaining encrypted data, verifying a signature packet, sending the data, calculating transmission delay, judging whether the transmission delay is in a delay range or not, and if the transmission delay is not in the delay range, sending the signature packet. If the transmission delay is within the delay range, self-adaptive adjustment is carried out, verification is carried out according to the verification signature packet to obtain verification data, and if the transmission delay is within the delay range, verification is carried out according to the verification signature packet to obtain verification data to complete communication. According to the invention, the security and privacy of doctor-patient communication can be improved.

The invention discloses a safety electricity terminal gateway for an intelligent power grid and a signal acquisition and transmission method thereof, and belongs to the technical field of power system automation. According to the technical scheme, a central processing unit is respectively connected with a communication interface, a sensor interface relay, a contactor, a card reader interface, a communication module and a power supply module; and the power supply module is respectively connected with the communication interface, the sensor interface, the relay, the contactor, the card reader interface and the communication module. The safety electricity terminal gateway equipment for the intelligent power grid and the signal acquisition and transmission method thereof have the beneficial effects that the obvious beneficial effects are shown, the accuracy and the processing capability of data acquisition are improved, the stability and the reliability of communication are also ensured, the safety of a system is improved, and the safety electricity terminal gateway equipment is suitable for popularization and application. The structural design and the connection relation of the equipment are optimized, and visual equipment state feedback and remote control functions are provided. The beneficial effects are beneficial for promoting the development and application of an intelligent power grid technology and improving the intelligent level and the operation efficiency of a power system.

The utility model discloses a clamping device for detecting animal epidemic diseases, which relates to the technical field of animal detection and comprises a head fixing frame and a limiting component, a bottom frame is mounted at the lower end of the head fixing frame, and the limiting component for limiting the heads of animals with different sizes is arranged in the head fixing frame. And the limiting assembly comprises a limiting rod, positive and negative tooth lead screws, turbines, a worm and a holding rod, the positive and negative tooth lead screws are arranged at the upper end and the lower end of the limiting rod, the turbines are installed at the ends of the positive and negative tooth lead screws, the worms are arranged on the side edges of the turbines, and the holding rod is installed in the middle of the worms. According to the clamping device for detecting the animal epidemic diseases, the two sides of the head and the neck of an animal are limited through the limiting rods, the situation that the head of the animal turns back to attack detection personnel is avoided, the positive and negative tooth lead screw rotates to drive the two limiting rods to be close to or away from each other, and the limiting rods can limit the heads of animals of different body types; the worm is rotated to drive the turbine to rotate to provide adjusting power for the positive and negative tooth lead screw.

The present invention relates to the field of network protection technology, and in particular to a device network protection method and system based on a system management bus; firstly, a preset address white list is obtained through a relay controller and stored; when a master device obtains access request information from an external device, corresponding serial data is generated based on the access request information, and the serial data includes a device address of a slave device requested to be accessed, and a register address of the slave device requested to be accessed; through the serial data, it is possible to know which slave device the external device wants to access, and the business data in which register of the slave device is to be accessed; then, the relay controller determines whether the register in the slave device that the external device wants to access is allowed to be accessed by the external device based on the preset address white list, and if the access is not allowed, the serial data is intercepted, that is, the sending of serial data to the corresponding slave device is prohibited; thereby realizing network protection for the slave device and avoiding malicious traffic attacks.

This invention discloses a light-resistant biodegradable plastic, its preparation method, and its application in dustproof netting. The raw material composition of the light-resistant biodegradable plastic, by weight, includes: 60-70 parts polylactic acid (PLA), 10-15 parts lignin, 5-10 parts toughening agent, 5-8 parts UV-shielding agent, 3-5 parts compatibilizer, 1-2 parts composite nucleating agent, and 0-0.5 parts colorant. The UV-shielding agent is composed of sericite, glass microspheres, and fluorite powder. The layered structure of sericite and the spherical structure of glass microspheres reflect ultraviolet light from multiple angles, while the fluorite powder absorbs and converts the transmitted ultraviolet light, thereby shielding ultraviolet rays and increasing the light resistance of PLA. A compatibilizer is used to modify the nano-lignin, which absorbs ultraviolet light and converts the light energy into heat energy in a timely manner, preventing ultraviolet light from attacking the PLA chain segments. It has stable processability, low cost, and stable raw material supply, making it suitable for use in dustproof netting.

The invention provides a security vulnerability detection system based on an API interface, and relates to the technical field of security vulnerability detection.The system firstly analyzes the API interface through an analysis module to obtain calling information, and then analyzes calling of the API interface through a static analysis module and a dynamic analysis module to obtain calling information; according to the method, a calling graph capable of representing calling relations among different APIs is generated, a detection queue is generated according to the calling graph, and test parameters of the APIs are generated according to the calling graph, so that the generation efficiency of the test parameters is improved, the security vulnerability detection efficiency is improved, and finally, the method calling when the APIs process the test parameters is analyzed, so that the security vulnerability detection efficiency is improved. The API interface with the recursive structure with vulnerability suspicion is marked as possible security vulnerabilities, so that the system can more efficiently and accurately help testers to find related types of security vulnerabilities in the API interface, and then can timely optimize the API interface to defend attacks against the vulnerabilities.

The invention provides an automobile internal wireless communication semiconductor module and method based on a Bluetooth low-power-consumption technology. The method belongs to the technical field of intelligent network connection automobiles and vehicle-mounted communication. The method comprises the following steps: performing dynamic topology modeling on communication nodes in an automobile to generate multi-connection topology network data; the method comprises the following steps: deploying Bluetooth low-power 5.4 multi-link equipment according to multi-connection topology network data, and constructing a dynamic networking architecture; by means of the automobile internal wireless communication method based on the Bluetooth low-power-consumption technology, the stability and reliability of automobile internal communication are improved, the dynamic topology modeling and the self-adaptive frequency hopping technology enable a communication link to flexibly cope with dynamic scenes such as seat movement and automobile door opening and closing, and it is ensured that data transmission is not interrupted. The whole vehicle weight and the wiring cost are reduced, a large number of wire harnesses are replaced by wireless communication, the vehicle body burden is relieved, the wiring process is simplified, and the production cost is saved.

The invention relates to the technical field of wireless communication, and discloses an NFC (Near Field Communication) equipment quick pairing method based on neural network optimization, which comprises the following steps: S101, when a transmitting end and a receiving end of NFC equipment are started, respectively initializing and respectively loading unique identification information of the transmitting end and the receiving end; s102, the receiving end scans a wireless radio frequency identification tag signal of the transmitting end through a built-in NFC module, extracts second candidate unique identification information and environment signal features of the transmitting end, and predicts a signal distance and a signal stability score of the target equipment based on a preset signal feature prediction model for determining whether the target equipment is the transmitting end; and S103, carrying out bidirectional verification and exchange on the unique identification information of the transmitting end and the receiving end through an NFC protocol, confirming whether the unique identification information of the transmitting end is matched with target equipment by the receiving end, and if the matching is successful, writing the unique identification information into a pairing data area of the receiving end. According to the invention, efficient, accurate and safe pairing of the NFC equipment in a complex environment is realized.

The present invention provides low immunogenic retinal pigment epithelial cells and methods of producing the cells. The present invention contains a step of obtaining a pluripotent stem cell that does not express major histocompatibility complex (MHC) class II protein or lacks the function thereof (step 1), and a step of inducing a retinal pigment epithelial cell from the pluripotent stem cell obtained in step 1 (step 2).

The invention discloses a Shell command encryption remote transmission method and system, and relates to the technical field of Shell command transmission, a random number is used to carry out XOR operation bit by bit to generate a session key, a socket long connection is established at the same time, an encrypted Shell command of a client is decrypted, then the Shell command is decrypted into a ciphertext, the session key is used to carry out AES encryption on the ciphertext, and the encrypted Shell command is transmitted to the client. And after the encrypted Shell command named ciphertext is received through the socket, AES decryption is carried out by using the session key, whether the decrypted Shell command is legal is verified, and the decrypted Shell command is sent to the local to execute the Shell command after the verification is passed. The transmission system realizes secure remote communication of Shell commands, performs secure encrypted transmission under the condition of not influencing the user experience, is suitable for units and individuals with high information security requirements, can effectively prevent network data attack, data analysis and the like, and ensures the security when a host is remotely controlled.

The present invention proposes an information management method and system for access card chips, the method comprising: providing an anonymous identifier, initializing the authentication process, laying the foundation for privacy protection and data chain; completing mutual trust authentication between the access card and the device, and providing authentication challenge data for subsequent behavior recording and tracing; based on the results and challenge data generated after the authentication is completed, generating a complete encrypted behavior record and establishing a chain hash structure; storing the encrypted behavior record and the chain hash value locally or synchronizing them to a server to ensure the reliability and traceability of the behavior record; using the complete behavior chain data, detecting abnormal behavior and supporting traceability verification. The present invention significantly improves the privacy protection capability, security and tracing efficiency of the access control system by integrating dynamic identity generation, encrypted behavior chain storage and a two-way authentication mechanism in the access card chip.

The application discloses a wireless communication system data security transmission method, relates to the technical field of data security transmission, and covers three major steps of key generation and synchronization, physical layer subcarrier encryption and key enhancement and authentication. First, a dynamic initial key is generated by extracting multi-dimensional features through channel detection, and a trigger condition is set to realize key synchronization; then, the data subcarrier position is scrambled and encrypted by using a key generation permutation matrix, and after descrambling at the receiving end, CRC checking feedback is performed to guarantee data integrity; finally, quantum noise is introduced to enhance the randomness of the key, and zero-knowledge authentication is used to verify the identity, so that the security and attack resistance of wireless communication data transmission are effectively improved.

The present disclosure provides a switch control method, a receiving terminal control method, a self-generating switch, and a receiving terminal, the switch control method comprising: the processor generating and sending a corresponding current control message to a receiving terminal by the wireless communication module, such that the receiving terminal verifies whether a relationship between a current verification identifier in the current control message and a stored historical verification identifier matches a pre-set transformation rule of the current verification identifier, and executing a control event corresponding to current manipulation information when the relationship matches the transformation rule; in one depression manipulation action and one rebound manipulation action which occur successively, for at least one of the manipulation actions, the current verification identifier being also read from the memory, and the current verification identifier being transformed and updated from a first numerical value to a second numerical value with a preset transformation rule, the first numerical value being different from the second numerical value.

The invention discloses an industrial control instruction issuing method and system of a DCS (Distributed Control System) based on trusted computing. The method comprises the following steps: correspondingly configuring identity information and verification certificates in a first trusted platform module and a second trusted platform module corresponding to an upper computer and a lower computer; performing digital signature on the industrial control instruction of the upper computer by using the identity information of the first trusted platform module and the verification certificate; the second trusted platform module verifies the received industrial control instruction and digital signature; when the industrial control instruction passes the signature verification, the lower computer executes the industrial control instruction; according to the method, unauthorized industrial control instruction execution and man-in-the-middle attack are effectively prevented, and the security of the system is greatly improved; and the TPM is used as a hardware-level security chip, and the built-in functions of encryption, decryption, digital signature, signature verification and the like of the TPM are difficult to be cracked by attacks of a software level, so that a solid hardware foundation is provided for secure transmission and execution of industrial control instructions.

The invention belongs to the technical field of network security and machine learning, and discloses an APT (Advanced Persistent Threat) network attack detection method and device based on a genetic map and machine learning. Calculating a preliminary evaluation score of the gene segment according to the word frequency of the word in the gene segment, obtaining a complexity factor based on the code line number of the gene segment, and weighting the preliminary evaluation score by using the complexity factor to obtain a final evaluation score; taking a gene segment with a high final evaluation score as a feature gene; vectorizing the feature genes by using a global word vector representation algorithm; performing clustering and dimension reduction on all the gene vectors to obtain a plurality of gene clusters; and respectively sending the gene clusters into an attack detection model formed by a three-layer CNN-LSTM neural network to obtain a prediction result corresponding to each gene cluster output by the attack detection model, and aggregating all the prediction results to train and update the attack detection model. According to the method, the APT attack detection accuracy is effectively improved.

This application provides a face recognition method, electronic device, storage medium, and program product. The method includes: acquiring a first image in response to a face recognition operation; processing the first image to generate a first number of region images, the first number of region images having the same size but different dimensional information, the dimensional information representing the detection scale; inputting the first number of region images into a first model to generate multi-scale feature data, the multi-scale feature data representing the global features of the first image at different detection scales; processing the multi-scale feature data through a second model to generate deep feature data, the deep feature data representing the deep features of the first image at different detection scales; and obtaining a face recognition result based on the deep feature data. This method aims to improve the accuracy of real / fake face discrimination using a liveness detection model and prevent various liveness attacks.

The application discloses a system for safe clipboard synchronization between an isolated environment and a host computer, and belongs to the technical field of computer security and virtualization. The system comprises: a protocol proxy core module for intercepting clipboard protocol requests between the isolated environment and the host computer; a proxy entity module for creating a proxy entity on the host computer side to replace an application in the isolated environment holding clipboard ownership; a synchronization state manager module for maintaining internal and external time sequence identifiers for tracking the update sequence of the isolated environment and the host computer clipboard; and a loop check list. When the system initiates synchronization, the system records the synchronization operation in the loop check list; when a clipboard change is detected, the system identifies and filters loop events triggered by self-synchronization by comparing the loop check list; and when responding to a data request, the system determines the latest data source by comparing the internal and external time sequence identifiers. The application realizes safe, stable and reliable cross-environment clipboard synchronization.

The present application relates to the technical field of data transmission, and in particular to a method and device for designing a security system for a drone mapping remote sensing sensor main control system. The method includes: based on a preset encryption method, encrypting the collected mapping remote sensing sensor data to determine the encrypted data; based on a predetermined transmission channel that is unidirectionally connected to the data receiving end, transmitting the encrypted data to the data receiving end; and verifying the receiving end to be detected to determine the data receiving end. The present application reduces the risk of leakage of mapping remote sensing sensor data, prevents unencrypted mapping remote sensing sensor data from being attacked, further improves the security of the mapping remote sensing sensor main control system, prevents data acquisition and sensor control environment, and the storage environment of mapping remote sensing sensor data from being threatened, and effectively isolates external attacks.

The embodiment of the invention provides an identity authentication method and device, equipment, a storage medium and a program product, and relates to the field of information security. According to the method, after registration is completed, a client side responds to an initial identity authentication request triggered by a user, and primary identity authentication is carried out on the user based on a biological feature template in a trusted execution environment of a current terminal; if the first identity verification is passed, generating an authentication assertion in the trusted execution environment by using a private key in the encryption key pair and the environment certification; and submitting an identity authentication request comprising the terminal identifier and the authentication assertion to the server. And the server receives the identity authentication request and authenticates the identity of the user based on the information carried by the identity authentication request. According to the method, the whole authentication process is completed in the TEE, unauthorized access software can be effectively prevented from stealing biological characteristics or private keys, the accuracy and reliability of identity authentication are effectively improved, and user data privacy is comprehensively guaranteed.

The invention relates to the technical field of vehicles, in particular to a message verification method, device and system based on a timestamp and a serial number and a medium, and the method comprises the steps: obtaining a to-be-verified message which comprises the timestamp, the serial number, business data and a dynamic signature; verifying whether the timestamp is in an effective window of the current system time or not to obtain a timestamp verification result; verifying whether the serial number meets a preset uniqueness condition or not to obtain a serial number verification result; re-calculating a signature by using a preset dynamic alternate session key, the timestamp, the serial number and the service data, and comparing a calculation result with the dynamic signature to obtain a signature comparison result; when the timestamp verification is passed, the serial number verification is passed and the signature comparison is consistent, determining that the message verification is passed; otherwise, determining that the message verification fails and triggering an exception handling mechanism; according to the invention, the security and reliability of message transmission can be improved.