36results about How to "Avoid attack" patented technology

This invention relates to the field of new energy vehicle technology and discloses an encrypted communication system for communication between new energy vehicles and charging piles. The system includes: a vehicle gateway, used to generate an initial vehicle-to-charging pile communication key and a message authentication code, and to send the initial vehicle-to-charging pile communication key and the message authentication code to both communicating parties; and, upon receiving a message indicating successful communication between the battery management system and the charging pile, updating the current vehicle-to-charging pile communication key and regenerating the message authentication code to send to both communicating parties; the battery management system and the charging pile, i.e., the two communicating parties, verify each received message authentication code based on the code. If the verification is successful, they initiate the current round of communication using the current vehicle-to-charging pile communication key; after each message transmission, the current vehicle-to-charging pile communication key is updated, and a message indicating successful communication for the current round is sent to the vehicle gateway. This invention updates the key multiple times during vehicle-to-charging pile communication and verifies it in each round of communication, thus improving communication security.

This invention proposes a secure access method and system for low-power IoT terminals, comprising: collecting hardware state entropy values ​​and environmental awareness data when the terminal wakes up from sleep mode, generating a terminal trust fingerprint, and binding it with the terminal's unique identifier to obtain an identity credential; sending the identity credential to an access gateway; verifying the identity credential using a root of trust and returning a gateway authentication token to the terminal; generating a session key suite based on the authentication status and the terminal's remaining battery level; establishing an encrypted communication channel between the terminal and the access gateway based on the session key suite, with the service data sent by the terminal within the encrypted communication channel appended with a message authentication code; monitoring traffic characteristics and command patterns in the encrypted communication channel, and when abnormal behavior deviating from the terminal's trust fingerprint by more than a threshold is detected, triggering the terminal to re-execute the generation of the identity credential and two-way authentication, and revoking the session key suite. This invention can improve the access security and reliability of low-power terminals in complex network environments.

The application discloses a method for establishing end-to-end secure communication of unmanned aerial vehicle under cloud network architecture, and takes cloud server as a security service center to provide full-process authentication service for unmanned aerial vehicle end system; the cloud server only issues public authentication materials to unmanned aerial vehicles, and session key negotiation and establishment of end-to-end secure communication are realized between unmanned aerial vehicles; the unmanned aerial vehicle end system does not need to store authentication materials of other unmanned aerial vehicles in advance, the cloud server is driven by specific tasks, and specific authentication materials required for key negotiation are issued to unmanned aerial vehicles which need to be securely cooperated according to task requirements. The application only requires that the cloud server and any one of the unmanned aerial vehicles for key negotiation establish a communication connection, and the authentication materials issued by the cloud server can make the unmanned aerial vehicles realize key negotiation and establish an end-to-end secure channel in a specific range; different temporary public keys are used for each request message, which can effectively prevent the harm caused by long-term and short-term secret leakage.

The utility model discloses a clamping device for detecting animal epidemic diseases, which relates to the technical field of animal detection and comprises a head fixing frame and a limiting component, a bottom frame is mounted at the lower end of the head fixing frame, and the limiting component for limiting the heads of animals with different sizes is arranged in the head fixing frame. And the limiting assembly comprises a limiting rod, positive and negative tooth lead screws, turbines, a worm and a holding rod, the positive and negative tooth lead screws are arranged at the upper end and the lower end of the limiting rod, the turbines are installed at the ends of the positive and negative tooth lead screws, the worms are arranged on the side edges of the turbines, and the holding rod is installed in the middle of the worms. According to the clamping device for detecting the animal epidemic diseases, the two sides of the head and the neck of an animal are limited through the limiting rods, the situation that the head of the animal turns back to attack detection personnel is avoided, the positive and negative tooth lead screw rotates to drive the two limiting rods to be close to or away from each other, and the limiting rods can limit the heads of animals of different body types; the worm is rotated to drive the turbine to rotate to provide adjusting power for the positive and negative tooth lead screw.

This invention discloses a light-resistant biodegradable plastic, its preparation method, and its application in dustproof netting. The raw material composition of the light-resistant biodegradable plastic, by weight, includes: 60-70 parts polylactic acid (PLA), 10-15 parts lignin, 5-10 parts toughening agent, 5-8 parts UV-shielding agent, 3-5 parts compatibilizer, 1-2 parts composite nucleating agent, and 0-0.5 parts colorant. The UV-shielding agent is composed of sericite, glass microspheres, and fluorite powder. The layered structure of sericite and the spherical structure of glass microspheres reflect ultraviolet light from multiple angles, while the fluorite powder absorbs and converts the transmitted ultraviolet light, thereby shielding ultraviolet rays and increasing the light resistance of PLA. A compatibilizer is used to modify the nano-lignin, which absorbs ultraviolet light and converts the light energy into heat energy in a timely manner, preventing ultraviolet light from attacking the PLA chain segments. It has stable processability, low cost, and stable raw material supply, making it suitable for use in dustproof netting.

The invention provides an automobile internal wireless communication semiconductor module and method based on a Bluetooth low-power-consumption technology. The method belongs to the technical field of intelligent network connection automobiles and vehicle-mounted communication. The method comprises the following steps: performing dynamic topology modeling on communication nodes in an automobile to generate multi-connection topology network data; the method comprises the following steps: deploying Bluetooth low-power 5.4 multi-link equipment according to multi-connection topology network data, and constructing a dynamic networking architecture; by means of the automobile internal wireless communication method based on the Bluetooth low-power-consumption technology, the stability and reliability of automobile internal communication are improved, the dynamic topology modeling and the self-adaptive frequency hopping technology enable a communication link to flexibly cope with dynamic scenes such as seat movement and automobile door opening and closing, and it is ensured that data transmission is not interrupted. The whole vehicle weight and the wiring cost are reduced, a large number of wire harnesses are replaced by wireless communication, the vehicle body burden is relieved, the wiring process is simplified, and the production cost is saved.

The application discloses a wireless communication system data security transmission method, relates to the technical field of data security transmission, and covers three major steps of key generation and synchronization, physical layer subcarrier encryption and key enhancement and authentication. First, a dynamic initial key is generated by extracting multi-dimensional features through channel detection, and a trigger condition is set to realize key synchronization; then, the data subcarrier position is scrambled and encrypted by using a key generation permutation matrix, and after descrambling at the receiving end, CRC checking feedback is performed to guarantee data integrity; finally, quantum noise is introduced to enhance the randomness of the key, and zero-knowledge authentication is used to verify the identity, so that the security and attack resistance of wireless communication data transmission are effectively improved.

This application provides a face recognition method, electronic device, storage medium, and program product. The method includes: acquiring a first image in response to a face recognition operation; processing the first image to generate a first number of region images, the first number of region images having the same size but different dimensional information, the dimensional information representing the detection scale; inputting the first number of region images into a first model to generate multi-scale feature data, the multi-scale feature data representing the global features of the first image at different detection scales; processing the multi-scale feature data through a second model to generate deep feature data, the deep feature data representing the deep features of the first image at different detection scales; and obtaining a face recognition result based on the deep feature data. This method aims to improve the accuracy of real / fake face discrimination using a liveness detection model and prevent various liveness attacks.

The application discloses a system for safe clipboard synchronization between an isolated environment and a host computer, and belongs to the technical field of computer security and virtualization. The system comprises: a protocol proxy core module for intercepting clipboard protocol requests between the isolated environment and the host computer; a proxy entity module for creating a proxy entity on the host computer side to replace an application in the isolated environment holding clipboard ownership; a synchronization state manager module for maintaining internal and external time sequence identifiers for tracking the update sequence of the isolated environment and the host computer clipboard; and a loop check list. When the system initiates synchronization, the system records the synchronization operation in the loop check list; when a clipboard change is detected, the system identifies and filters loop events triggered by self-synchronization by comparing the loop check list; and when responding to a data request, the system determines the latest data source by comparing the internal and external time sequence identifiers. The application realizes safe, stable and reliable cross-environment clipboard synchronization.

The embodiment of the invention provides an identity authentication method and device, equipment, a storage medium and a program product, and relates to the field of information security. According to the method, after registration is completed, a client side responds to an initial identity authentication request triggered by a user, and primary identity authentication is carried out on the user based on a biological feature template in a trusted execution environment of a current terminal; if the first identity verification is passed, generating an authentication assertion in the trusted execution environment by using a private key in the encryption key pair and the environment certification; and submitting an identity authentication request comprising the terminal identifier and the authentication assertion to the server. And the server receives the identity authentication request and authenticates the identity of the user based on the information carried by the identity authentication request. According to the method, the whole authentication process is completed in the TEE, unauthorized access software can be effectively prevented from stealing biological characteristics or private keys, the accuracy and reliability of identity authentication are effectively improved, and user data privacy is comprehensively guaranteed.

The invention relates to the technical field of vehicles, in particular to a message verification method, device and system based on a timestamp and a serial number and a medium, and the method comprises the steps: obtaining a to-be-verified message which comprises the timestamp, the serial number, business data and a dynamic signature; verifying whether the timestamp is in an effective window of the current system time or not to obtain a timestamp verification result; verifying whether the serial number meets a preset uniqueness condition or not to obtain a serial number verification result; re-calculating a signature by using a preset dynamic alternate session key, the timestamp, the serial number and the service data, and comparing a calculation result with the dynamic signature to obtain a signature comparison result; when the timestamp verification is passed, the serial number verification is passed and the signature comparison is consistent, determining that the message verification is passed; otherwise, determining that the message verification fails and triggering an exception handling mechanism; according to the invention, the security and reliability of message transmission can be improved.

The invention discloses an agricultural informatization information security test system, which comprises a network communication module, a data acquisition module, a data analysis module, a data encryption module, a security audit module and a security evaluation module, and is characterized in that the network communication module is used for realizing communication between an agricultural informatization system and an external network; the data acquisition module is used for acquiring data in an agricultural informatization system, and the data analysis module is used for analyzing the acquired data; the invention discloses an agricultural informatization information security test method. The method comprises the following steps: step 1, establishing communication; step 2, data acquisition; step 3, data analysis; step 4, data encryption; step 5, safety auditing; step 6, performing safety assessment; according to the system, comprehensive information security testing can be carried out on the agricultural informatization system, high-speed network equipment and an encryption algorithm are adopted, the security of data transmission and storage is ensured, and the security condition is monitored and managed, so that the security operation of the system is ensured.

The invention provides a preparation method and application of a citric acid modified Cd-MOF material, and belongs to the technical field of metal organic framework materials. The citric acid modified beta-cyclodextrin metal organic framework (CA-beta-CD-MOF) is synthesized by adopting a chemical grafting and steam diffusion method, and the adsorption performance and the reusability of the citric acid modified beta-cyclodextrin metal organic framework (CA-beta-CD-MOF) are systematically researched. Parameters such as concentration, dosage, pH and the like of citric acid are associated, the adsorption effect of the citric acid on heavy elements in a portable solution is investigated, and the adsorption capacities of the citric acid on anionic dye Congo red (CR) and heavy metal ions (Cu < 2 + >) are as high as 900.9 and 287.4 mg.g <-1 > respectively. The citric acid modified beta-cyclodextrin metal organic framework (CA-beta-CD-MOF) obtained by the invention has the characteristics of being simple, green, environment-friendly and reusable, has excellent adsorption performance, and can be used for simultaneously removing organic dye and heavy metal ion pollution in water.

The invention provides an anti-cracking and operation traceability system and method for a commercial vehicle traveling data recorder. The system comprises a physical interface protection and auditing module, a remote protocol deep analysis and traceability module and an anti-tampering traceability log management module. The method comprises the following sub-steps: S1, carrying out physical interface security protection and intrusion detection; s2, performing session binding, message analysis verification and terminal registration authentication protection on the JT / T 808 protocol; s3, generating and managing a tamper-proof traceability log; according to the method, through a USB bus white list mechanism, data transmission and drive loading of unauthorized equipment are blocked, attacks such as malicious equipment injection and HID simulation keyboard are completely eradicated, and the core loophole that a universal USB drive lacks strict identity control is solved; the state of the case and a three-level interrupt response mechanism are monitored by means of a safe GPIO pin, so that an attacker is prevented from tampering records by disassembling a shell and short-circuiting a circuit, and the defect that a physical shell is not protected is overcome.

A method, system, and readable storage medium for handling intrusion by unknown users are disclosed. In this method, upon determining that an unknown user has intruded using a preset method, the following steps are taken: a target protected object is identified; path information of the target protected object is determined; the storage location of the target protected object is obtained based on the path information; attributes of the preset method are determined; if the attribute is determined to be a first attribute, a preset inducement object is stored in the storage location; and the target protected object is transferred from the storage location to a preset secure location. This reduces the success rate of user information theft when a computer is intruded by an unknown user, thereby improving the security of user information.

This invention discloses an individual identification and intent perception system based on multi-frequency bioimpedance spectrum. The system applies a broadband sweep signal to the human body through an excitation signal generation module, collects response signals via a core sensing module, and obtains complex impedance data through a signal processing module. The computational processing module uses a multi-frequency differential algorithm to extract unique physical fingerprint features characterizing the individual's deep tissue structure from the impedance spectrum, and introduces a psychological state perception algorithm based on a dynamic conductivity model. Through AI fusion decision-making, it simultaneously achieves high-precision identity authentication and real-time discrimination of abnormal physiological states, involuntary states such as sleep. Finally, the execution output module performs operations such as unlocking and silent alarm. This invention solves the shortcomings of traditional biometric technologies, such as ease of forgery and inability to perceive user intent, while possessing higher-level anti-counterfeiting capabilities, proactive security defense, and privacy protection.

This application relates to the field of biometric feature acquisition technology, specifically a biometric feature acquisition device, including an installation structure. The installation structure is equipped with a first biometric feature acquisition device and a second biometric feature acquisition device. The installation structure also includes a shielding mechanism, and a linkage component is provided between the second biometric feature acquisition device and the shielding mechanism. This biometric feature acquisition device, through its linkage design, ensures that the precision acquisition camera is always sealed and protected by the shielding plate when not in use, effectively preventing dust, moisture, fingerprint contamination, and physical scratches, significantly reducing maintenance frequency and failure rate. Furthermore, the entire authentication process must be completed through a real, continuous physical pressing action, achieving efficient liveness detection and effectively preventing attacks using photos, videos, or static molds. Simultaneously, the linkage mechanism increases the complexity and cost of fraud, achieving superior security and anti-counterfeiting advantages.

The embodiment of the invention provides a connection method and device of household equipment, electronic equipment and a medium, and the method comprises the steps that when a control device detects that the distance between the control device and the household equipment is smaller than a preset threshold value, bidirectional authentication processing is carried out between the control device and the household equipment; after the bidirectional authentication is passed, network distribution information is sent to the home equipment, so that the home equipment accesses a network access point connected with the control equipment based on the network distribution information; and determining second detection information, and connecting with the control equipment under the condition that the second detection information is matched with the first detection information. According to the embodiment of the invention, the security of the network distribution process is ensured through close-range triggering and bidirectional authentication, the directional transmission of the network distribution information is realized through network access point connection, the leakage of the network distribution information in an open environment is avoided, the identity of the home equipment can be verified by comparing the consistency of the first detection information and the second detection information, and the security of the home equipment is improved. Information tampering or man-in-the-middle attack is prevented, and the problem that in the prior art, security risks exist in the distribution network process is effectively solved.

The application discloses a distributed privacy protection frequent item set mining method and system based on differential privacy, and the method comprises the following steps: n+1 selecting a center node U i and participant nodes U i , setting a privacy budget ε and a privacy budget allocation scheme, setting parameters, U n+1 generating an ordered item set support degree set, U i collecting item sets and adding noise to the support degrees and performing post-processing, U n+1 constructing a global sub-frequent item set, U i performing item set screening and support degree noise adding based on the global sub-frequent item set, U n+1 constructing a global frequent item set and performing support degree distribution fitting update, and then screening to obtain a frequent item set mining result, and U i publishing the mining result to each node. The application is aimed at a distributed privacy protection frequent item set mining scene, realizes distributed frequent item set mining without the participation of a trusted third party, can effectively prevent attacks initiated by malicious mining parties by using part of background knowledge mastered by the malicious mining parties, and improves the security of user data privacy.

The application provides an operation circuit and a microprocessor architecture, which are applied to the technical field of computers, and the circuit comprises a gating circuit and a multiplier. The operation circuit is responsive to a switching control signal. In a first mode, the operation circuit controls the gating circuit to send a real operand pair (a, b) into the multiplier for operation. Alternatively, in a second mode, the operation circuit is responsive to the switching control signal to send a non-zero mask data pair into the multiplier for operation. In this way, the multiplier has data input and performs operation in any clock cycle, that is, the multiplier is continuously in a running state. The power consumption generated by the running of the multiplier is maintained stable, and differential power consumption characteristics are not generated. The side channel attack of an attacker to obtain sensitive information by analyzing the power consumption characteristics is prevented, the security of the password operation is improved, and security vulnerabilities are eliminated.

The invention relates to the field of electric digital data processing, and discloses an anti-fault-injection AI chip model encryption loading and execution method, which comprises the following steps of: latching a micro-architecture state vector in real time at a pipeline execution level of a calculation unit, initializing a hardware rolling hash accumulator, and performing loading and execution on the hardware rolling hash accumulator; forcing the numerical value and a state vector expected value of a previous data processing stage to participate in one-way hash operation together to generate a dynamic mask, and encrypting transmission data; according to the method, an internal immune mechanism based on micro-architecture state entanglement is constructed, the correctness of an instruction time sequence is converted into a mathematical necessary condition for data decryption, and the correctness of the instruction time sequence is converted into the mathematical necessary condition for data decryption. High-entropy noise self-destruction of a data level is directly caused by execution stream abnormity caused by any fault injection, the security vulnerability of orthogonality of a control stream and a data stream is avoided, and mathematical blocking of physical attacks is realized.

The present application relates to the field of model training, and discloses a model collaborative training method, system, device and storage medium. The method comprises the following steps: obtaining a steel process parameter sensitivity atlas deployed in a local computing center; based on the steel process parameter sensitivity atlas, assigning differentiated privacy budgets to a plurality of preset process parameters to add differential privacy noise to the corresponding process parameters; in a local execution environment of the local computing center, training and encrypting a local model by using the process parameters after adding the differential privacy noise, and uploading the obtained encrypted local model parameters to a server of a network end; receiving updated global model parameters issued by the network end; based on the global model parameters, updating and iterating the local model of each local computing center in the local execution environment until the local model converges, and obtaining a trained model. The method provided in the present application can avoid model data leakage and protect model security.

The application discloses a kind of based on unified port's SIP and RTP tunnel encryption forwarding method and system.The method is cooperated by tunnel client deployed in client side and tunnel server side of server side, including: based on unified port, establishing encrypted communication tunnel between the two;Tunnel client receives SIP signaling, modifies media connection information in it, and then sends to server side through tunnel encryption, and is forwarded to SIP server by server side;Tunnel client receives RTP media stream, and then sends to server side through tunnel encryption after additional header containing forwarding destination information is encapsulated, and is forwarded to SIP server according to header information by server side.The application tunnels and encrypts transmission of SIP signaling and RTP media stream through single port, effectively avoids network protocol ban, greatly simplifies firewall configuration, significantly improves NAT penetration success rate and communication security.

The application relates to a negative electrode sheet, a battery and an electric device. The negative electrode sheet comprises a negative electrode current collector layer and a negative electrode material layer which are arranged in a stack, the negative electrode material layer comprises a carbon-based negative electrode material, a negative electrode binder and a first additive, the negative electrode binder comprises lithium polyacrylate, and the structural formula of the first additive is

This invention discloses a countermeasure target key data acquisition system based on information gain value, including a monitoring module, a startup module, a capture module, an acquisition module, and a filtering module. The monitoring module monitors the information gain of the target data in real time. The startup module initiates subsequent programs to acquire target data information when the information gain value exceeds a threshold. The capture module is started by the startup module and then captures the target data. In the implementation of this invention, the information of the target data can be monitored in real time, and changes in the information gain value of the target data can be detected to capture key data, which helps prevent user equipment from attacks by unknown programs and allows for the capture of key information from the target data.

The invention relates to the technical field of identity verification, in particular to a user identity verification method and device, equipment and a storage medium, and the method comprises the steps: generating an original key value pair based on an obtained first login credential and recent access time; wherein the first login voucher is a login voucher obtained when the business system responds to a login request intercepted by an interceptor; in response to a second login voucher carried in the acquired service request, verifying whether a first login voucher consistent with the second login voucher exists in the original key value pair; and responding to a first login voucher consistent with the second login voucher in the original key value pair, and forwarding the service request to a third-party service. According to the invention, the security of the business system in butt joint with the third-party service can be improved.

The application relates to a data security management method and device, electronic equipment and a computer readable medium. The method comprises the following steps: constructing a data identity record library, the data identity record library accesses a cloud server in a local area; configuring identity tags for an access device in the local area, transmission data of the access device and storage data of the access device respectively through the data identity record library, obtaining a plurality of identity tags of the access device; and storing the plurality of identity tags of the access device and the storage data in the data identity record library. The application constructs a data identity record library for data management, and configures identity tags for device access, data transmission and data storage, which is more conducive to providing all-round information security protection and solving the personal information security problem of users in the local area.

This invention discloses a 5G private network deployment method based on the convergence of three networks in the steel industry, belonging to the field of communication networks. This invention decentralizes the entire 5G core network to the steel plant area, adopting an NFV virtualization architecture; the transmission network uses a dual-ring network of 2 aggregation devices + 14 access devices; the wireless network uses distributed coverage of macro and micro base stations; the core network adopts a slicing scheme with shared control plane and dedicated user plane, divided into four slices: industrial control, video surveillance, office, and public network; and secure integration of the 5G core network with the steel enterprise's information backbone network, production control network, and video private network is achieved through two sets of primary and backup firewalls, enabling NAT translation and port restriction policies. This invention ensures that private network data does not leave the plant area, with end-to-end latency ≤10ms, network reliability ≥99.99%, and plant area coverage ≥98%, effectively meeting the communication needs of smart manufacturing in the steel industry and providing strong support for the digital transformation of the steel industry.

The invention discloses a data key acquisition method and device for a quantum security device terminal and a storage medium, and the method comprises the steps: when the quantum security device terminal leaves a factory, the device ID of the quantum security device terminal is recorded into a seed key center, and the seed key center generates a corresponding initial seed key for storage; when communication with a root key operator is carried out for the first time, an initial seed key is obtained from a seed key center, authentication is carried out, and then the initial seed key is expanded; and the root key operator sends the hybrid key to the quantum security device terminal and carries out authentication, and finally, based on the hybrid key, the data key is obtained by carrying out hybrid in an XOR mode. According to the quantum security equipment terminal authentication method, after the quantum security equipment terminal passes authentication, the initial seed key is expanded to obtain the expanded key, the independent data key with a high security coefficient is safely and efficiently derived by utilizing the existing initial seed key resource, and the key supplementing and updating burden of a seed key center is reduced.

This invention belongs to the field of federated learning technology, specifically relating to a robust federated learning method based on client-side defense, including a personalized federated learning training method based on model discrepancies. Addressing the common weakness of poisoning attack defense algorithms in federated learning training scenarios where malicious clients with randomly varying proportions of poisoning attacks struggle, this invention designs a robust federated learning training algorithm. Each client assesses the poisoning level of the global model, ensuring that normal client models converge, effectively improving the robustness of the federated learning algorithm. To evaluate the discrepancy between the global model and client models, a discrepancy loss function and weights are constructed, and the discrepancy loss is embedded into the client training loss function, achieving personalized federated learning training based on model discrepancies. This invention ensures that federated learning defends against poisoning attacks even in environments where the aggregation server is untrusted and an arbitrary proportion of poisoned clients exist.