107results about How to "Avoid visiting" patented technology

The invention discloses a data isolation and privacy protection method and system for a data security large model, and relates to the technical field of artificial intelligence, the method comprises the following steps: setting an independent storage area for each enterprise in an external knowledge base in advance, and transmitting encrypted data to the corresponding storage area based on an enterprise identifier, setting corresponding access authority for the encrypted data of each storage area; judging whether the user identity information and the user access permission information are compliant or not, extracting a keyword corresponding to the user demand information under the compliant condition, and performing similarity retrieval in an external knowledge base based on the keyword to obtain corpus data with the highest similarity with the keyword; the corpus data and the user requirements are jointly input into the large data security model to generate the data security document, and the problems that in the prior art, data security isolation and privacy protection cannot be achieved, and security and compliance use of data in the whole process cannot be guaranteed are solved.

The invention relates to the technical field of block chains, in particular to a distributed Internet of Things management method and system based on edge cloud computing. The system comprises an intelligent data acquisition module, a self-adaptive data synchronization module, an access control module, a block chain optimization module and a security authentication module. The intelligent data acquisition module collects equipment data in real time, and the adaptive data synchronization module realizes cross-regional synchronization based on a HyperSync technology. The access control module intelligently distributes user and equipment requests by using a HyperAgent technology and transmits the user and equipment requests to the block chain optimization module, and the block chain optimization module optimizes the data processing performance of block chain nodes through a Hyper I O technology. And the security authentication module is combined with a dynamic key and a zero-trust authentication mechanism to realize multi-level application and equipment security authentication. According to the invention, the real-time performance of Internet of Things management, the stability of cross-regional synchronization, the intelligence of request processing, the efficiency of block chain operation and the overall security of the system are improved.

The invention discloses an interpretable medical big data dynamic security protection method. The method relates to the technical field of security technology digital processing, and comprises the following steps: collecting and processing infectious disease patient data; performing classification and encryption processing; monitoring the encrypted data in real time; obtaining an infectious disease patient identity information data encryption security assessment index, an infectious disease patient movement path key management security assessment index and an infectious disease patient electronic medical record data leakage risk assessment index; and comprehensively analyzing, evaluating and adjusting. According to the method, medical big data dynamic safety protection performance evaluation analysis is performed on the encrypted data of the infectious disease patient, and the medical big data dynamic safety is adjusted according to the comprehensive evaluation result, so that the interpretable medical big data dynamic safety protection dynamic capability is improved; the problem that in the prior art, the explainable medical big data dynamic security protection dynamic capability is insufficient is solved.

The invention relates to the technical field of government affair Internet of Things, and discloses an Internet of Things service data encryption and privacy protection method and device, and the method comprises the steps: collecting real-time data items from government affair Internet of Things equipment through a wireless sensor network through the Internet of Things technology to form a government affair data set, and carrying out the encryption processing; calculating and evaluating the sensitivity delta f of each data item in the government affair data set and a query result corresponding to the data item through a differential privacy algorithm, and adding random noise according to the sensitivity delta f and a privacy budget epsilon, and performing government affair service efficiency, government affair anomaly monitoring, government affair demand prediction and government affair complaint risk prediction analysis on the government affair data set added with the random noise by adopting a machine learning algorithm, providing data service for an analysis result through an API (Application Program Interface), and dynamically adjusting the sensitivity delta f, the privacy budget epsilon and the adding degree of the random noise according to an evaluation result. While data security and government affair privacy are guaranteed, data analysis efficiency and accuracy are improved, government affair management is optimized, and adaptability and expandability are achieved.

The invention provides a BMS upper computer system, and relates to the technical field of upper computer control, the BMS upper computer system comprises a BMS upper computer and a BMS, the BMS upper computer determines key data of the BMS according to a connection instruction, and sends a request seed message to the BMS; the BMS receives the request seed message; based on the request seed message, determining seed data according to the random factor, and sending the seed data; the BMS upper computer receives seed data returned by the BMS; based on a preset encryption algorithm, determining a first encryption seed result according to the key data and the seed data; the BMS determines a second encryption seed result based on a preset encryption algorithm according to the key data and the seed data, and verifies the first encryption seed result and the second encryption seed result; and when the first encryption seed result and the second encryption seed result are the same, connecting a BMS upper computer, and sending an identification binding success message to the BMS. According to the invention, the safety can be improved.

The invention discloses an encryption circuit, an encryption method and a server, and the encryption circuit generates a dynamic encryption key through introducing a physical unclonable function, carries out the secondary encryption of initial encryption data through the key, can effectively improve the identity authentication and access control safety of a to-be-accessed module in the server, and improves the safety of the to-be-accessed module. Different from a traditional static password or secret key authentication mode, the dynamic encryption secret key generated based on the physical unclonable function is unpredictable, unique and difficult to clone, and the secret key does not need to provide a storage space for storage, so that even if a malicious device forges an identity or steals the secret key, the secret key can be stored in the storage space. Effective authentication information cannot be obtained through brute force cracking or phishing attack; besides, the verification process is further enhanced by a mechanism of comparing secondary encryption with reference encrypted data, and only a legal user can access the system, so that access of untrusted equipment is effectively prevented, and the security of the server and the integrity of the system are protected.

The invention discloses a browser authentication method and system based on user behaviors, and the method comprises the steps: collecting the historical use information of a user, and constructing a data operation library of the user based on the historical use information; obtaining current use information of the browser, and determining an identification state of a current user based on the current use information and the data operation library; marking the operation behavior related to the privacy of the user as a confidential operation, and setting a confidential level according to the importance of the confidential operation on the privacy of the user; setting a security level for the confidential operation according to the recognition state, and setting a security verification problem corresponding to the security level according to the user identity information; and performing security verification on the operation information in the current use information in combination with the security verification problem and the confidential operation to obtain a verification result of the user. According to the method, the privacy of the original user can be better guaranteed, unauthorized access is effectively prevented, the security of the system is improved, the possibility of invasion of malicious attackers is effectively reduced, and the level of protecting the privacy of the user is improved.

The invention discloses a power grid marketing data penetration analysis and operation management method and system, and relates to the technical field of power system operation management, and the method comprises the steps: constructing a data label and index library, and carrying out the layered collection and unified arrangement of electricity charge data; developing a penetration analysis model, and realizing business whole-process visualization based on micro-service; a multi-service system is integrated, and a dynamic security policy is deployed to guarantee data and application operation. The method improves the accuracy and efficiency of data processing, enhances the transparency of a business process, optimizes the use of data storage and computing resources, improves the safety and stability of the system, achieves the efficient utilization of power grid marketing data and the optimization of operation management, improves the operation management level of a power enterprise, and also improves the safety of the power enterprise. And reliable data support is provided for enterprise decision making, so that sustainable development of enterprises and improvement of market competitiveness are promoted.

The invention discloses a rapid batch switching authentication method for predictability and aggregation promise proof, which realizes batch authentication of a plurality of user terminals by generating system parameters and secret keys through a trust mechanism and combining predictability promise and aggregation signature technologies. In the authentication process, the edge base station to be switched exchanges with the current communication edge base station through an encrypted message, verification information such as a pre-authentication certificate and a signature is generated through the user terminal, and identity authentication is completed step by step. The method comprises the following specific steps: a trust mechanism generates a private key, a public key, a pseudo identity and an expiration timestamp for each device; through multiple rounds of message exchange, the edge base station and the user terminal perform identity verification by using a shared key and a hash function; and finally carrying out efficient verification on a plurality of users through batch signature and aggregation commitment. According to the method, on the basis of ensuring the security, the speed of switching the authentication process is greatly improved, and the method is suitable for a large-scale network environment, especially in edge computing and mobile communication networks.

The invention discloses a client information intelligent management platform and method based on cloud computing, and the platform comprises an identity verification and dynamic authority control module which is used for carrying out the safe and efficient identity verification of a user, and dynamically adjusting the authority level of the user in real time according to the behavior and context information of the user; the encryption storage module adopts an encryption algorithm based on a lattice password and is used for performing encryption storage on customer information and enhancing the capability of resisting quantum computing attack; the data recording module is used for recording data changes by utilizing a block chain technology in the operation process of the customer information; the intelligent federation learning module is used for cooperatively training a machine learning model among the modules; the artificial intelligence safety monitoring module is used for monitoring abnormal behaviors in the system in real time; and the user interface and interaction module is used for providing a friendly user interface based on augmented reality. The client information management platform has the beneficial effect of improving the safety, reliability and intelligent degree of the client information management platform.

The invention relates to a cross-Kubernetes cluster service access method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: respectively setting an Ingress Nginx controller in a service providing cluster and a service consumption cluster; using a NodePort mode to set an access path used for providing use permission of an Ingress Nginx controller for an external cluster of the service providing cluster or the service consuming cluster; a Kube-apiserver is used to monitor a service updating state with an annotation mark in the service providing cluster; when it is determined that the new service appears in the service providing cluster, an Ingress access rule is created in the service providing cluster, and the Ingress access rule is used for determining a target service consumption cluster with the access permission; and starting an IP address resolution plug-in in the target service consumption cluster, and accessing the new service through a domain name access mode. By adopting the method, the new service limitation can be exposed to the specified cluster, and the cross-cluster service access efficiency and reliability are improved.

The invention provides a data row and column permission control and desensitization method based on a Spark engine, and relates to the technical field of data processing, and the method comprises the steps: receiving a user data processing request, obtaining a data access permission rule of a user from a permission management server, analyzing the permission rule into a Spark SQL syntax tree, and injecting a row-level filtering condition and a column-level field for filtering; and constructing a Spark distributed processing task including data scanning, filtering, projection and desensitization nodes, and submitting and executing the task. According to the method, refined data access control can be realized in the distributed data processing process, the data security is ensured, the data processing efficiency is improved, and the method is suitable for a large-scale data processing scene.

According to the elevator automatic permission opening method and system, after one-time registration of a mobile device APP, automatic permission opening of an elevator can be achieved, extra physical media do not need to be carried, the use convenience is greatly improved, a cloud server and a property background management system jointly check user information, authenticity and accuracy are ensured, and the user experience is improved. Meanwhile, specific secret key identity verification is adopted, the system safety is enhanced, a data encryption and verification mechanism in the Bluetooth communication process is adopted, safe transmission of user information is further guaranteed, a property background management system can manage the user information and authority in real time, the traditional process is simplified, and an elevator main control system automatically records and updates the use condition of a user; according to the method, the mobile device APP, the cloud server and the elevator master control system are integrated, intelligence and automation of elevator control are achieved, invalid operation and waiting time are shortened, energy consumption and emission are reduced, and intelligent development of buildings is promoted.

The invention discloses an encryption, decryption and desensitization method and system for private data of an e-commerce platform, and relates to the technical field of data security, and the encryption of the private data of the e-commerce platform comprises the following steps: receiving an encryption request initiated by a client, randomly generating a key pair comprising an encryption key and a decryption key, and storing the secret key pair in a local database, setting a secret key identifier for the secret key pair, encrypting the private data according to the data type identifier of the private data by using the encryption secret key according to fields, generating encrypted private data, and storing the secret key identifier and the encrypted private data in the local database. According to the data type identifier of the privacy data, the ciphertext identifier is set for the encrypted privacy data, and the ciphertext identifier is associated with the secret key identifier and the encrypted privacy data, so that the security of the privacy data of the user in the transmission and storage process is ensured.

The invention relates to a traceable encryption method and device based on file hierarchical attribute-based encryption and key entrustment, equipment and a medium. The method comprises the following steps: a data owner selects an attribute and constructs a polynomial to encrypt data, calculates and determines an encrypted ciphertext of each node, and calculates and determines an encrypted ciphertext of a threshold node in child nodes of a transmission node; the data user randomly selects symmetric keys and encrypts corresponding messages, performs hierarchical encryption on the symmetric keys, and associates each symmetric key with a level node to calculate and determine a level ciphertext; the data user decrypts the data by using the key SK and checks whether the attributes are matched or not; for non-leaf nodes, recursively decrypting the child nodes; if the attributes of the users are matched, recovering and decrypting the information of the specific-level nodes; and recursively calculating decryption information of other level nodes to recover the symmetric key. According to the invention, a plurality of users are prevented from combining their existing keys to access unauthorized data, and the key collusion between the user and other users is inhibited.

The invention relates to a video data protection method and device, computer equipment, a storage medium and a computer program product. The method comprises the steps of generating a verification instruction for a to-be-received user, and sending the verification instruction to a verification platform; sending a video playing request of a to-be-received user to the video monitoring system, and sending a verification request to the verification platform; sending a verification instruction to the to-be-received user to obtain a verification result; and when the verification result is successful, sending the video stream of the video transmission platform to the user to receive the video stream. In combination with a dynamic verification instruction generated based on user network channel information and a verification action, it is ensured that only a target user authorized by a main user can pass verification and obtain a video stream, a to-be-received user is limited to share a video link for the second time, it is ensured that the sharing range is completely controlled by the main user, and the risks of video diffusion and sensitive data abuse are avoided.

The invention discloses a memory data access method and device. The method comprises the steps that in response to an access instruction that a target application program accesses a target memory unit in a target chip, the type of a target memory area to which the target memory unit belongs is determined, and the type of the target memory area comprises one of a secure memory area used for storing first data set according to security requirements and a second memory area used for storing second data set according to security requirements; the public memory area is used for storing second data without security requirement setting; a target program identifier of the target application program is obtained, the authorization state of the target application program is determined according to the target program identifier, and the authorization state is used for reflecting whether the target application program has the permission to access the secure memory area or not; and determining a response strategy for the access instruction according to the type of the target memory area and the authorization state of the target application program, and executing the response strategy. The technical problem that chip memory data is easy to be illegally carried in related technologies is solved.

The invention provides a block chain data credible interaction method based on multi-permission attribute-based encryption. The method comprises the following steps: step 1, initializing a system; the whole system generates initial parameters, including generation and uplink of public parameters and generation of public keys and private keys. And step 2, data encryption. A data owner in the system needs to organize and encrypt data and upload ciphertext information to a block chain. And step 3, generating a secret key. When a data user wants to access data of other data owners, the data user sends an access request to the block chain. After the access request of the data user is monitored, the block chain notifies the attribute authority to provide the access key. And 4, data decryption. And the data user who needs to access the encrypted data obtains the access key and then downloads the corresponding ciphertext. And the data user decrypts the ciphertext according to the system parameters and the attribute token to obtain the data.

The invention provides a financial management data processing method and system, and relates to the field of financial data processing, and the method comprises the steps: traversing elements in a category data set, and dividing the category data set into at least one representation data chain according to the feature similarity between the elements; calculating data granularity of data items in the representation data chain, and obtaining a mother chain and sub-chain group according to the data granularity; performing hierarchical storage on the mother chain and the sub-chain, constructing an associated index map, and calculating a shortest query path from a mother chain layer to a sub-chain layer; and obtaining the user activeness of each access permission level corresponding to the shortest query path, and comparing the user activeness with the user activeness of each access permission level at the current moment to obtain a target query path at the current moment. According to the method, the activity degree of the user is monitored and the query path is dynamically adjusted, so that the change of user behaviors can be flexibly adapted, and the optimal data search path is found according to the current user request condition.

The invention provides a data processing method and system for an industrial internet of things, and the method comprises the steps: S1, collecting the data of various industrial internet, carrying out the preprocessing of the data of the industrial internet, and obtaining an industrial internet data set; s2, training a sensitive database based on the industrial internet data set, extracting sensitive data of the industrial internet data set, storing the sensitive data in the sensitive database, and storing residual non-sensitive data in a non-sensitive database; s3, encrypting the sensitive database through an encryption device, and creating a fast channel for each network through a data exchange center of the industrial internet to realize data exchange and sharing of the industrial internet; s4, the monitoring center monitors the data of the industrial internet in real time, and the integrity of the data is kept. The method is relatively high in practicability and relatively good in accuracy and flexibility, and can be used for identification and access control of sensitive data in data leakage prevention.

The invention discloses a VRM communication security encryption method, apparatus and device, and a medium. The method comprises the following steps: obtaining a read-write operation command sent by a BMC to a VRM through an FPGA; the FPGA identifies the received read-write operation command; if the command identified by the FPGA is a read operation command, the BMC executes a read operation on the VRM; and if the command identified by the FPGA is a write operation command, the FPGA judges whether write operation is executed on the VRM according to whether the key input by the BMC is correct or not. Compared with the prior art, the method has the advantages that the FPGA is introduced to serve as an intermediary and a key verification mechanism, when the BMC performs writing operation on the VRM, key checking needs to be performed with the FPGA, the writing mode can be switched after the key checking is correct, and if the key checking is incorrect, the BMC can only perform reading operation on the VRM. Through the method, unauthorized access can be prevented and potential security risks can be solved, so that the communication security encryption of the BMC to the VRM is enhanced.

The invention discloses a payment transaction data processing method, and belongs to the technical field of data processing, and the method comprises the following steps: S1, obtaining payment transaction information of a user, and carrying out the data cleaning of the payment transaction information, and obtaining updated payment transaction information; s2, the updated payment transaction information is imported into a MySQL database; s3, constructing an engine index statement for updating the payment transaction information; s4, generating an encryption key for the updated payment transaction information according to the engine index statement corresponding to the updated payment transaction information; and S5, completing encryption by using the encryption key for updating the payment transaction information. The encryption key is generated according to the feature parameters of the payment transaction information, sensitive data can be protected more effectively, and unauthorized access and leakage are prevented.

The present invention discloses a private domain knowledge protection method and system, which belongs to the field of text data processing technology, including document collection, document parsing, document encryption, document analysis, vectorization processing, document classification, key point summarization, guiding question generation, expansion and cleaning, model training, model encryption, authentication control and dynamic permission adjustment, which solves the technical problems of ensuring the accuracy of knowledge protection through strict isolation of different LoRA models, using symmetric encryption technology and trusted key encryption of models in the data preprocessing stage to protect data privacy. The present invention ensures the privacy and security of original data in the entire processing flow, effectively prevents unauthorized access or leakage of data during the preprocessing process, and ensures the security of data. A hybrid encryption strategy is adopted to ensure the efficiency of data processing; the phased encryption strategy can give full play to the advantages of different encryption technologies and achieve a balance between efficiency and security.

The invention relates to an intelligent orthodontic image management method and system, and relates to the technical field of data management, and the system comprises an image obtaining module which is used for obtaining orthodontic data of historical patients; the image storage module is used for encrypting and storing the orthodontic data of historical patients; the feature acquisition module is used for acquiring the orthodontic image of the patient to be subjected to orthodontic treatment from the image generation terminal and extracting the oral features of the patient to be subjected to orthodontic treatment from the orthodontic image of the patient to be subjected to orthodontic treatment; the image searching module is used for determining a target historical patient based on the oral features of the to-be-orthodontic patient; the image sharing module is used for calling the orthodontic data of the target historical patient and sending the called orthodontic data of the target historical patient to the doctor terminal; and the scheme generation module is used for generating an auxiliary orthodontic scheme based on the oral features of the patient to be orthodontic and the orthodontic data of the target historical patient, and the method has the advantage of improving the quality of orthodontic image management.

This application provides a data access method, a data lake, and related devices for use in a data lake. For a data lake comprising a client, a metadata management node, and an object storage system, the client can request the metadata management node to locate the object path of a data block in a file and generate and encrypt corresponding access tokens at the data block level. Access control for each data block can be achieved through these access tokens. After the client sends an object access request, including the object path of the data block and the encrypted access token, to the object storage system, the object storage system performs strict security authentication on the object access request using the information in the decrypted access token before performing read / write operations based on the object path of the data block. This significantly reduces the risk of data leakage, effectively prevents unauthorized access, enhances data security, and ensures secure data access between the object storage system and the metadata management node in the data lake.

The present invention discloses a communication method for standardizing a communication machine interface, and relates to the field of communication technology. The present invention integrates edge computing and blockchain technology, reduces the burden on a central server through data smoothing and filtering, adopts blockchain technology to record the exchange history of communication data, and realizes decentralized and secure storage of data. Encryption and signature mechanisms are added to the standardized protocol to provide confidentiality and integrity of communication data. The entire communication process consists of edge computing, data filtering, blockchain recording and encrypted signature. Compared with traditional communication methods, instant processing on the device side reduces transmission delay and improves the real-time and responsiveness of communication. Blockchain technology provides the exchange history of communication data and records it on an unalterable blockchain, thereby realizing secure storage and historical tracing of data, preventing data from being tampered with and accessed without authorization, and making identity authentication and authority management of communication equipment safer and more reliable.

The invention belongs to the technical field of registry security protection, and discloses a registry protection method and system based on software, and the method comprises the steps: capturing an operation request of a registry, and transmitting the identification information of the operation request to registry protection software; performing security rule judgment on the identification information to obtain a rule judgment result; if the identification information accords with the security rule, the registry protection software permits execution of the operation request, otherwise, the registry protection software does not permit execution of the operation request and generates response information; and the registry protection software sends the response information to the operation end, and the operation end executes corresponding protection operation according to the response information. According to the method and the device, the operation request for the registry can be effectively monitored and filtered, the safety is greatly enhanced, and the operation request can be finely judged and controlled based on the preset rule by preventing potential harmful operation, so that an administrator can more flexibly and accurately manage the access and operation of the registry.

The embodiment of the invention provides a data transmission method and device based on a container network, and the method comprises the steps: receiving a data packet transmitted by a transmitting end container node, the data packet being configured to carry a target container node network address and first mapping information of an expected receiving end container identifier; the data packet is analyzed to obtain first mapping information of a target container node network address and an expected receiving end container identifier, second mapping information corresponding to the target container node network address is inquired from a locally maintained mapping relation table, and the second mapping information is used for representing a mapping relation between the target container node network address and the current container identifier; if the first mapping information is inconsistent with the second mapping information, discarding the data packet; and if the first mapping information is consistent with the second mapping information, allowing to process the data packet. The method can improve the security of data transmission and reduce resource overhead.

The present invention discloses an interpretable medical big data dynamic security protection method. The method relates to the field of security technology digital processing technology, and includes the following steps: collecting and processing infectious disease patient data; performing classification and encryption processing; real-time monitoring of encrypted data; obtaining an encryption security assessment index for infectious disease patient identity information data, an infectious disease patient mobile path key management security assessment index, and an infectious disease patient electronic medical record data leakage risk assessment index; comprehensive analysis, evaluation, and adjustment. The present invention improves the dynamic security protection dynamic capability of interpretable medical big data by evaluating and analyzing the encrypted data of infectious disease patients, and adjusts the dynamic security of medical big data according to the comprehensive evaluation results, thereby solving the problem of insufficient dynamic security protection dynamic capability of interpretable medical big data in the prior art.