65results about How to "Avoid attack" patented technology

The invention provides a tumor cell exosome, an anti-tumor immune drug delivery system and a preparation method and application of the anti-tumor immune drug delivery system, the tumor cell exosome is derived from starved and stimulated tumor cells, the tumor cell exosome is coated with nano drug particles for delivery, and the exosome has the effects of enhancing immune cell infiltration and remodeling an immune microenvironment; due to the homing effect of the exosome, the medicine and the exosome are more easily accumulated in the tumor, and the targeting property is improved; due to coating and camouflage of the biological membrane of the exosome membrane, the exosome membrane is prevented from being recognized, attacked and removed by an organism, and the biological safety is improved, so that the exosome and the nano-drug act on the tumor together to achieve a synergistic effect.

The invention relates to the technical field of communication security, in particular to a communication security management method and device based on block chain nodes. Based on the block chain technology, the public key encryption algorithm is used to ensure that the identities of both communication parties are real and reliable. Each node records the public key, the registration time and the identity information of the known node through the storage block chain, so that the security and the consistency of identity authentication are ensured, and the credibility and the security of the network are improved; the behavior of each node is regularly evaluated through a behavior analysis and statistical method in combination with request frequency, behavior consistency and tampering data detection, and malicious nodes are expelled from the network through a consensus protocol, so that the malicious node detection accuracy is enhanced, attack and damage are effectively prevented, and the malicious node detection efficiency is improved. And the stability and the reliability of the network are improved.

The invention discloses a router EasyMesh fast networking method and system, and the method comprises the steps: obtaining the equipment information and connection relation of an EasyMesh router through a network topology discovery protocol, and generating a global network topology view. And according to the global network topology view, performing comprehensive scoring on each router by adopting a multi-dimensional index to obtain an equipment capability score of each router. And performing a link quality test on links between the routers in the global network topology view to generate a link quality test result. And taking the global network topology view, the equipment capability score and the link quality test result as input, and calculating an optimal role scheme of each router through a role decision algorithm. Therefore, the router role can be quickly determined through an automatic process, the networking efficiency is optimized, the network compatibility and safety are improved, and management and maintenance are simplified.

The invention relates to the technical field of communication, and discloses a data signal transmission method based on a network switch, which comprises the following steps: establishing a network flow table rule of a target network switch; deploying a virtualization component and a virtual network function thereof in a server corresponding to the target network switch, defining a high-speed Ethernet port of the target network switch, and establishing an aggregation link of the target network switch; acquiring a data frame of a sending device corresponding to the target network switch by using the virtualization component, analyzing a safety coefficient of the data frame through a virtual network function, analyzing a fragment value of the data frame, and determining a target data frame in the data frame; the forwarding behavior of the target data frame is analyzed, forwarding of the target data frame is executed, forwarding traffic is obtained, forwarding abnormity of the target data frame is analyzed through an AI forwarding traffic algorithm, forwarding optimization parameters of the target data frame are defined through an SDN controller, and efficient transmission of the target data frame is executed based on the forwarding optimization parameters. According to the invention, the high efficiency of data signal transmission can be improved.

The invention relates to the field of protocol detection, in particular to an industrial control protocol content anomaly detection method based on artificial intelligence, which comprises the following steps: capturing data packets of industrial control protocols corresponding to interactive terminal groups; performing feature extraction on the data packet, and analyzing transmission features of each interactive terminal group in different dimensions; performing simulated tampering on the transmission characteristics, determining sensitivity values of the interaction terminal groups corresponding to the transmission characteristics of different dimensions, determining corresponding sensitive dimensions, and classifying the interaction terminal groups based on the number of the sensitive dimensions and the sensitivity values; calculating the sensitive dimensions and the sensitivity values of the interactive terminal groups of the same type to obtain dimension correlation values; performing transmission analysis on each interaction terminal group based on the transmission characteristics and the dimension association values; sending corresponding early warning information according to a data packet transmission analysis result; according to the invention, the efficiency of industrial control protocol content anomaly detection is effectively improved, and the accuracy of industrial control protocol content anomaly detection is improved.

This invention relates to the field of new energy vehicle technology and discloses an encrypted communication system for communication between new energy vehicles and charging piles. The system includes: a vehicle gateway, used to generate an initial vehicle-to-charging pile communication key and a message authentication code, and to send the initial vehicle-to-charging pile communication key and the message authentication code to both communicating parties; and, upon receiving a message indicating successful communication between the battery management system and the charging pile, updating the current vehicle-to-charging pile communication key and regenerating the message authentication code to send to both communicating parties; the battery management system and the charging pile, i.e., the two communicating parties, verify each received message authentication code based on the code. If the verification is successful, they initiate the current round of communication using the current vehicle-to-charging pile communication key; after each message transmission, the current vehicle-to-charging pile communication key is updated, and a message indicating successful communication for the current round is sent to the vehicle gateway. This invention updates the key multiple times during vehicle-to-charging pile communication and verifies it in each round of communication, thus improving communication security.

This invention proposes a secure access method and system for low-power IoT terminals, comprising: collecting hardware state entropy values ​​and environmental awareness data when the terminal wakes up from sleep mode, generating a terminal trust fingerprint, and binding it with the terminal's unique identifier to obtain an identity credential; sending the identity credential to an access gateway; verifying the identity credential using a root of trust and returning a gateway authentication token to the terminal; generating a session key suite based on the authentication status and the terminal's remaining battery level; establishing an encrypted communication channel between the terminal and the access gateway based on the session key suite, with the service data sent by the terminal within the encrypted communication channel appended with a message authentication code; monitoring traffic characteristics and command patterns in the encrypted communication channel, and when abnormal behavior deviating from the terminal's trust fingerprint by more than a threshold is detected, triggering the terminal to re-execute the generation of the identity credential and two-way authentication, and revoking the session key suite. This invention can improve the access security and reliability of low-power terminals in complex network environments.

The application discloses a method for establishing end-to-end secure communication of unmanned aerial vehicle under cloud network architecture, and takes cloud server as a security service center to provide full-process authentication service for unmanned aerial vehicle end system; the cloud server only issues public authentication materials to unmanned aerial vehicles, and session key negotiation and establishment of end-to-end secure communication are realized between unmanned aerial vehicles; the unmanned aerial vehicle end system does not need to store authentication materials of other unmanned aerial vehicles in advance, the cloud server is driven by specific tasks, and specific authentication materials required for key negotiation are issued to unmanned aerial vehicles which need to be securely cooperated according to task requirements. The application only requires that the cloud server and any one of the unmanned aerial vehicles for key negotiation establish a communication connection, and the authentication materials issued by the cloud server can make the unmanned aerial vehicles realize key negotiation and establish an end-to-end secure channel in a specific range; different temporary public keys are used for each request message, which can effectively prevent the harm caused by long-term and short-term secret leakage.

The invention relates to the technical field of instant messaging, in particular to a doctor-patient platform instant messaging method and system, and the method comprises the steps: starting a doctor-patient instant messaging application, carrying out the identity verification, obtaining a verification parameter, judging whether the identity verification succeeds or not according to the verification parameter, and if the identity verification succeeds, defining an identification content field and a message content field, and pulling historical data; the method comprises the following steps of: constructing a display format set, updating data, obtaining updated data, sending real-time data, encrypting the data, generating a signature, obtaining encrypted data, verifying a signature packet, sending the data, calculating transmission delay, judging whether the transmission delay is in a delay range or not, and if the transmission delay is not in the delay range, sending the signature packet. If the transmission delay is within the delay range, self-adaptive adjustment is carried out, verification is carried out according to the verification signature packet to obtain verification data, and if the transmission delay is within the delay range, verification is carried out according to the verification signature packet to obtain verification data to complete communication. According to the invention, the security and privacy of doctor-patient communication can be improved.

The utility model discloses a clamping device for detecting animal epidemic diseases, which relates to the technical field of animal detection and comprises a head fixing frame and a limiting component, a bottom frame is mounted at the lower end of the head fixing frame, and the limiting component for limiting the heads of animals with different sizes is arranged in the head fixing frame. And the limiting assembly comprises a limiting rod, positive and negative tooth lead screws, turbines, a worm and a holding rod, the positive and negative tooth lead screws are arranged at the upper end and the lower end of the limiting rod, the turbines are installed at the ends of the positive and negative tooth lead screws, the worms are arranged on the side edges of the turbines, and the holding rod is installed in the middle of the worms. According to the clamping device for detecting the animal epidemic diseases, the two sides of the head and the neck of an animal are limited through the limiting rods, the situation that the head of the animal turns back to attack detection personnel is avoided, the positive and negative tooth lead screw rotates to drive the two limiting rods to be close to or away from each other, and the limiting rods can limit the heads of animals of different body types; the worm is rotated to drive the turbine to rotate to provide adjusting power for the positive and negative tooth lead screw.

This invention discloses a light-resistant biodegradable plastic, its preparation method, and its application in dustproof netting. The raw material composition of the light-resistant biodegradable plastic, by weight, includes: 60-70 parts polylactic acid (PLA), 10-15 parts lignin, 5-10 parts toughening agent, 5-8 parts UV-shielding agent, 3-5 parts compatibilizer, 1-2 parts composite nucleating agent, and 0-0.5 parts colorant. The UV-shielding agent is composed of sericite, glass microspheres, and fluorite powder. The layered structure of sericite and the spherical structure of glass microspheres reflect ultraviolet light from multiple angles, while the fluorite powder absorbs and converts the transmitted ultraviolet light, thereby shielding ultraviolet rays and increasing the light resistance of PLA. A compatibilizer is used to modify the nano-lignin, which absorbs ultraviolet light and converts the light energy into heat energy in a timely manner, preventing ultraviolet light from attacking the PLA chain segments. It has stable processability, low cost, and stable raw material supply, making it suitable for use in dustproof netting.

The invention provides a security vulnerability detection system based on an API interface, and relates to the technical field of security vulnerability detection.The system firstly analyzes the API interface through an analysis module to obtain calling information, and then analyzes calling of the API interface through a static analysis module and a dynamic analysis module to obtain calling information; according to the method, a calling graph capable of representing calling relations among different APIs is generated, a detection queue is generated according to the calling graph, and test parameters of the APIs are generated according to the calling graph, so that the generation efficiency of the test parameters is improved, the security vulnerability detection efficiency is improved, and finally, the method calling when the APIs process the test parameters is analyzed, so that the security vulnerability detection efficiency is improved. The API interface with the recursive structure with vulnerability suspicion is marked as possible security vulnerabilities, so that the system can more efficiently and accurately help testers to find related types of security vulnerabilities in the API interface, and then can timely optimize the API interface to defend attacks against the vulnerabilities.

The invention provides an automobile internal wireless communication semiconductor module and method based on a Bluetooth low-power-consumption technology. The method belongs to the technical field of intelligent network connection automobiles and vehicle-mounted communication. The method comprises the following steps: performing dynamic topology modeling on communication nodes in an automobile to generate multi-connection topology network data; the method comprises the following steps: deploying Bluetooth low-power 5.4 multi-link equipment according to multi-connection topology network data, and constructing a dynamic networking architecture; by means of the automobile internal wireless communication method based on the Bluetooth low-power-consumption technology, the stability and reliability of automobile internal communication are improved, the dynamic topology modeling and the self-adaptive frequency hopping technology enable a communication link to flexibly cope with dynamic scenes such as seat movement and automobile door opening and closing, and it is ensured that data transmission is not interrupted. The whole vehicle weight and the wiring cost are reduced, a large number of wire harnesses are replaced by wireless communication, the vehicle body burden is relieved, the wiring process is simplified, and the production cost is saved.

The invention relates to the technical field of wireless communication, and discloses an NFC (Near Field Communication) equipment quick pairing method based on neural network optimization, which comprises the following steps: S101, when a transmitting end and a receiving end of NFC equipment are started, respectively initializing and respectively loading unique identification information of the transmitting end and the receiving end; s102, the receiving end scans a wireless radio frequency identification tag signal of the transmitting end through a built-in NFC module, extracts second candidate unique identification information and environment signal features of the transmitting end, and predicts a signal distance and a signal stability score of the target equipment based on a preset signal feature prediction model for determining whether the target equipment is the transmitting end; and S103, carrying out bidirectional verification and exchange on the unique identification information of the transmitting end and the receiving end through an NFC protocol, confirming whether the unique identification information of the transmitting end is matched with target equipment by the receiving end, and if the matching is successful, writing the unique identification information into a pairing data area of the receiving end. According to the invention, efficient, accurate and safe pairing of the NFC equipment in a complex environment is realized.

The present invention provides low immunogenic retinal pigment epithelial cells and methods of producing the cells. The present invention contains a step of obtaining a pluripotent stem cell that does not express major histocompatibility complex (MHC) class II protein or lacks the function thereof (step 1), and a step of inducing a retinal pigment epithelial cell from the pluripotent stem cell obtained in step 1 (step 2).

The present invention proposes an information management method and system for access card chips, the method comprising: providing an anonymous identifier, initializing the authentication process, laying the foundation for privacy protection and data chain; completing mutual trust authentication between the access card and the device, and providing authentication challenge data for subsequent behavior recording and tracing; based on the results and challenge data generated after the authentication is completed, generating a complete encrypted behavior record and establishing a chain hash structure; storing the encrypted behavior record and the chain hash value locally or synchronizing them to a server to ensure the reliability and traceability of the behavior record; using the complete behavior chain data, detecting abnormal behavior and supporting traceability verification. The present invention significantly improves the privacy protection capability, security and tracing efficiency of the access control system by integrating dynamic identity generation, encrypted behavior chain storage and a two-way authentication mechanism in the access card chip.

The application discloses a wireless communication system data security transmission method, relates to the technical field of data security transmission, and covers three major steps of key generation and synchronization, physical layer subcarrier encryption and key enhancement and authentication. First, a dynamic initial key is generated by extracting multi-dimensional features through channel detection, and a trigger condition is set to realize key synchronization; then, the data subcarrier position is scrambled and encrypted by using a key generation permutation matrix, and after descrambling at the receiving end, CRC checking feedback is performed to guarantee data integrity; finally, quantum noise is introduced to enhance the randomness of the key, and zero-knowledge authentication is used to verify the identity, so that the security and attack resistance of wireless communication data transmission are effectively improved.

The present disclosure provides a switch control method, a receiving terminal control method, a self-generating switch, and a receiving terminal, the switch control method comprising: the processor generating and sending a corresponding current control message to a receiving terminal by the wireless communication module, such that the receiving terminal verifies whether a relationship between a current verification identifier in the current control message and a stored historical verification identifier matches a pre-set transformation rule of the current verification identifier, and executing a control event corresponding to current manipulation information when the relationship matches the transformation rule; in one depression manipulation action and one rebound manipulation action which occur successively, for at least one of the manipulation actions, the current verification identifier being also read from the memory, and the current verification identifier being transformed and updated from a first numerical value to a second numerical value with a preset transformation rule, the first numerical value being different from the second numerical value.

The invention discloses an industrial control instruction issuing method and system of a DCS (Distributed Control System) based on trusted computing. The method comprises the following steps: correspondingly configuring identity information and verification certificates in a first trusted platform module and a second trusted platform module corresponding to an upper computer and a lower computer; performing digital signature on the industrial control instruction of the upper computer by using the identity information of the first trusted platform module and the verification certificate; the second trusted platform module verifies the received industrial control instruction and digital signature; when the industrial control instruction passes the signature verification, the lower computer executes the industrial control instruction; according to the method, unauthorized industrial control instruction execution and man-in-the-middle attack are effectively prevented, and the security of the system is greatly improved; and the TPM is used as a hardware-level security chip, and the built-in functions of encryption, decryption, digital signature, signature verification and the like of the TPM are difficult to be cracked by attacks of a software level, so that a solid hardware foundation is provided for secure transmission and execution of industrial control instructions.

The invention belongs to the technical field of network security and machine learning, and discloses an APT (Advanced Persistent Threat) network attack detection method and device based on a genetic map and machine learning. Calculating a preliminary evaluation score of the gene segment according to the word frequency of the word in the gene segment, obtaining a complexity factor based on the code line number of the gene segment, and weighting the preliminary evaluation score by using the complexity factor to obtain a final evaluation score; taking a gene segment with a high final evaluation score as a feature gene; vectorizing the feature genes by using a global word vector representation algorithm; performing clustering and dimension reduction on all the gene vectors to obtain a plurality of gene clusters; and respectively sending the gene clusters into an attack detection model formed by a three-layer CNN-LSTM neural network to obtain a prediction result corresponding to each gene cluster output by the attack detection model, and aggregating all the prediction results to train and update the attack detection model. According to the method, the APT attack detection accuracy is effectively improved.

This application provides a face recognition method, electronic device, storage medium, and program product. The method includes: acquiring a first image in response to a face recognition operation; processing the first image to generate a first number of region images, the first number of region images having the same size but different dimensional information, the dimensional information representing the detection scale; inputting the first number of region images into a first model to generate multi-scale feature data, the multi-scale feature data representing the global features of the first image at different detection scales; processing the multi-scale feature data through a second model to generate deep feature data, the deep feature data representing the deep features of the first image at different detection scales; and obtaining a face recognition result based on the deep feature data. This method aims to improve the accuracy of real / fake face discrimination using a liveness detection model and prevent various liveness attacks.

The application discloses a system for safe clipboard synchronization between an isolated environment and a host computer, and belongs to the technical field of computer security and virtualization. The system comprises: a protocol proxy core module for intercepting clipboard protocol requests between the isolated environment and the host computer; a proxy entity module for creating a proxy entity on the host computer side to replace an application in the isolated environment holding clipboard ownership; a synchronization state manager module for maintaining internal and external time sequence identifiers for tracking the update sequence of the isolated environment and the host computer clipboard; and a loop check list. When the system initiates synchronization, the system records the synchronization operation in the loop check list; when a clipboard change is detected, the system identifies and filters loop events triggered by self-synchronization by comparing the loop check list; and when responding to a data request, the system determines the latest data source by comparing the internal and external time sequence identifiers. The application realizes safe, stable and reliable cross-environment clipboard synchronization.

The present application relates to the technical field of data transmission, and in particular to a method and device for designing a security system for a drone mapping remote sensing sensor main control system. The method includes: based on a preset encryption method, encrypting the collected mapping remote sensing sensor data to determine the encrypted data; based on a predetermined transmission channel that is unidirectionally connected to the data receiving end, transmitting the encrypted data to the data receiving end; and verifying the receiving end to be detected to determine the data receiving end. The present application reduces the risk of leakage of mapping remote sensing sensor data, prevents unencrypted mapping remote sensing sensor data from being attacked, further improves the security of the mapping remote sensing sensor main control system, prevents data acquisition and sensor control environment, and the storage environment of mapping remote sensing sensor data from being threatened, and effectively isolates external attacks.

The embodiment of the invention provides an identity authentication method and device, equipment, a storage medium and a program product, and relates to the field of information security. According to the method, after registration is completed, a client side responds to an initial identity authentication request triggered by a user, and primary identity authentication is carried out on the user based on a biological feature template in a trusted execution environment of a current terminal; if the first identity verification is passed, generating an authentication assertion in the trusted execution environment by using a private key in the encryption key pair and the environment certification; and submitting an identity authentication request comprising the terminal identifier and the authentication assertion to the server. And the server receives the identity authentication request and authenticates the identity of the user based on the information carried by the identity authentication request. According to the method, the whole authentication process is completed in the TEE, unauthorized access software can be effectively prevented from stealing biological characteristics or private keys, the accuracy and reliability of identity authentication are effectively improved, and user data privacy is comprehensively guaranteed.

The invention relates to the technical field of vehicles, in particular to a message verification method, device and system based on a timestamp and a serial number and a medium, and the method comprises the steps: obtaining a to-be-verified message which comprises the timestamp, the serial number, business data and a dynamic signature; verifying whether the timestamp is in an effective window of the current system time or not to obtain a timestamp verification result; verifying whether the serial number meets a preset uniqueness condition or not to obtain a serial number verification result; re-calculating a signature by using a preset dynamic alternate session key, the timestamp, the serial number and the service data, and comparing a calculation result with the dynamic signature to obtain a signature comparison result; when the timestamp verification is passed, the serial number verification is passed and the signature comparison is consistent, determining that the message verification is passed; otherwise, determining that the message verification fails and triggering an exception handling mechanism; according to the invention, the security and reliability of message transmission can be improved.

The invention discloses an agricultural informatization information security test system, which comprises a network communication module, a data acquisition module, a data analysis module, a data encryption module, a security audit module and a security evaluation module, and is characterized in that the network communication module is used for realizing communication between an agricultural informatization system and an external network; the data acquisition module is used for acquiring data in an agricultural informatization system, and the data analysis module is used for analyzing the acquired data; the invention discloses an agricultural informatization information security test method. The method comprises the following steps: step 1, establishing communication; step 2, data acquisition; step 3, data analysis; step 4, data encryption; step 5, safety auditing; step 6, performing safety assessment; according to the system, comprehensive information security testing can be carried out on the agricultural informatization system, high-speed network equipment and an encryption algorithm are adopted, the security of data transmission and storage is ensured, and the security condition is monitored and managed, so that the security operation of the system is ensured.

The present invention discloses a method and system for managing and allocating agency resources based on cloud computing, including: configuring a cloud server based on the agency resource type and structure, encoding and compressing resource data and aggregating the data, storing the data in the cloud server, performing association analysis to establish a topological relationship network, allocating an edge cloud server to a terminal user, configuring a program for adding, deleting, modifying, and checking to obtain a terminal user entity, building a key for the terminal user entity, encrypting the data and index of the terminal user, outsourcing the encrypted data to the cloud server, obtaining a hybrid private cloud, obtaining a resource request, calculating the request priority of the resource index in the hybrid private cloud, setting the index order based on the request priority, and designing a coordination algorithm based on the index order to manage and allocate resources. The method utilizes cloud computing to achieve efficient management and allocation of agency resources, improve security and resource utilization, and has good interpretability.

The invention provides a preparation method and application of a citric acid modified Cd-MOF material, and belongs to the technical field of metal organic framework materials. The citric acid modified beta-cyclodextrin metal organic framework (CA-beta-CD-MOF) is synthesized by adopting a chemical grafting and steam diffusion method, and the adsorption performance and the reusability of the citric acid modified beta-cyclodextrin metal organic framework (CA-beta-CD-MOF) are systematically researched. Parameters such as concentration, dosage, pH and the like of citric acid are associated, the adsorption effect of the citric acid on heavy elements in a portable solution is investigated, and the adsorption capacities of the citric acid on anionic dye Congo red (CR) and heavy metal ions (Cu < 2 + >) are as high as 900.9 and 287.4 mg.g <-1 > respectively. The citric acid modified beta-cyclodextrin metal organic framework (CA-beta-CD-MOF) obtained by the invention has the characteristics of being simple, green, environment-friendly and reusable, has excellent adsorption performance, and can be used for simultaneously removing organic dye and heavy metal ion pollution in water.

The invention provides an anti-cracking and operation traceability system and method for a commercial vehicle traveling data recorder. The system comprises a physical interface protection and auditing module, a remote protocol deep analysis and traceability module and an anti-tampering traceability log management module. The method comprises the following sub-steps: S1, carrying out physical interface security protection and intrusion detection; s2, performing session binding, message analysis verification and terminal registration authentication protection on the JT / T 808 protocol; s3, generating and managing a tamper-proof traceability log; according to the method, through a USB bus white list mechanism, data transmission and drive loading of unauthorized equipment are blocked, attacks such as malicious equipment injection and HID simulation keyboard are completely eradicated, and the core loophole that a universal USB drive lacks strict identity control is solved; the state of the case and a three-level interrupt response mechanism are monitored by means of a safe GPIO pin, so that an attacker is prevented from tampering records by disassembling a shell and short-circuiting a circuit, and the defect that a physical shell is not protected is overcome.

A method, system, and readable storage medium for handling intrusion by unknown users are disclosed. In this method, upon determining that an unknown user has intruded using a preset method, the following steps are taken: a target protected object is identified; path information of the target protected object is determined; the storage location of the target protected object is obtained based on the path information; attributes of the preset method are determined; if the attribute is determined to be a first attribute, a preset inducement object is stored in the storage location; and the target protected object is transferred from the storage location to a preset secure location. This reduces the success rate of user information theft when a computer is intruded by an unknown user, thereby improving the security of user information.