94results about How to "Easy to audit" patented technology

The invention discloses a block chain authority management method and system. The method comprises the following steps of identifying an authority change transaction sent by a user, wherein the content of the authority change transaction comprises an initiator, an authority change user, authorities which need to be changed and corresponding change authority values; judging whether the initiator inthe authority change transaction has an authority change authority or not; if the initiator has the authority change authority, modifying an authority value of each authority which needs to be changed of the authority change user into the corresponding authority change value, and recording the executed authority change transaction into a block; and carrying out consensus on the transaction in theblock, and when the consensus passes, making the corresponding authority change transaction in the block take effect. According to the method, the authority management is directly carried out in a block chain without an external facility, and is deeply integrated into the block chain, so that all-directional permission control can be carried out on the block chain, and the authority change needsto pass through the consensus of the whole network and is recorded in the block chain, and thus the change records cannot be tampered and are convenient for auditing.

The invention discloses a database auditing monitoring system and a database auditing monitoring method. The database auditing monitoring system comprises a hardware part and a module part, wherein the hardware part comprises a switchboard, a local area network and a database auditing server, the switchboard is respectively connected into the local area network at the two ends through a duplicated port, and is connected with the database auditing server through a mirror port, the local area network at the two ends is respectively communicated with a database accessing client and a database server, and the module part comprises a WEB management module, a local database module, a data collecting module and a data analysis and processing module. The database auditing monitoring system and the database auditing monitoring method have the advantages that various kinds of operation behaviors on the database server are monitored and recorded through a monitoring module arranged in the data analysis and processing module, through the analysis on network data, various kinds of operation and hostile attack event information on the database server can be analyzed intelligently in real time and is recorded into an auditing database so that inquiry and analysis can be realized in future, and the monitoring and the auditing on the operation of a target database system are realized.

The invention discloses a distributed container cluster mirror image management master node, slave nodes, a system and a method, wherein the main node comprises a mirror image database which is a distributed database and is used for storing node information of all nodes in the system; the request input module is used for receiving request content including a request target and command execution content; mirror image management module, the verification module is used for communicating the password and verifying whether the request content acquired by the request record input module is legal; ifit is judged that a request target in the request content is a specified single slave node or grouped slave nodes, sending a communication password and command execution content including a pulling operation, an updating operation, a deleting operation and a cleaning operation to IP addresses corresponding to the slave nodes; and receiving the state feedback content sent by the slave node. According to the invention, the flattening management of the container cluster mirror image is realized, the management efficiency of the cluster container mirror image in a distributed system is improved,and the high reliability and safety of the whole cluster are improved.

Methods and computer-readable mediums structure an electronic document for identification and use of document parts. A method involves organizing parts of the electronic document as separate parts. The separate parts include resources internal and/or external to where the document is located. The method also involves representing a link between any of the parts as a relationship to be processed listed in a relationship part associated with a source part of the relationship. This relationship part contains a list of relationships for the source part and processing a relationship returns content of a target part of the relationship. Each relationship is also associated with a relationship type. Still further, the method involves representing via the relationship part how one or more parts relate to other separate parts, tracking internal resources, and tracking external resources. Thus, applications can infer the structure of the document by traversing the relationships.

The invention discloses a method for classifying network equipment by utilizing machine learning. The method establishes a classifying model for the network equipment by utilizing a supervised machine learning technology or a non-supervised machine learning technology, so as to classify known or newly added equipment in a network. The method has the technical advantages of analyzing behavior of the equipment through data packets transmitted and received by industrial control network equipment, and further classifying the equipment automatically. The understanding of types of the equipment is conducive to auditing network communication data. Unlike the traditional security specification for individual equipment, the security specification for equipment types is simpler and easy to manage, and the user can define corresponding security specifications for newly added equipment nodes easily.

A method and system of processing medical records includes providing an image of a medical record on a screen and inputting a code associated with a portion of the medical record. A region of the medical record is selected that supports the code and the selected region of said medical record is visibly marked and associated with the code. The code and associated selected region of the medical record are stored for subsequent retrieval. The method and system can also enable opening the medical record and displaying at least one code associated with the medical record and displaying the stored selected region of the medical record associated with the code. Plural codes may be selected for a medical record with each code being associated with at least one of a plurality of selected regions of the medical record.

The invention discloses a three-network convergence oriented digital home network architecture. In the architecture, the network is partitioned into different application domains according to the digital home service requirements, information terminal devices with similar home services and similar function requirements are connected in the same application domain, and all terminal devices in the domain and services provided by the all terminal devices are managed by an application domain management center, thereby lightening the burden of a home gateway in managing specific services, and simultaneously being favorable for effective unified management of resources in the application domains. The digital home network architecture is composed of information terminal devices and intelligent home appliances, a network connection device, a digital home application domain management center and a home gateway. Based on the network architecture, the invention provides an addressing scheme and a communication method for a three-network convergence based digital home network architecture layering device, and realizes interconnection and intercommunication among digital home devices.

The invention relates to a block chain member management method and system based on an identification cryptographic algorithm. The method of the invention comprises the following steps: (1) registering a user of a block chain network through a block chain client, and generating a signature private key according to the user identity information by using an identification cryptographic algorithm; (2) loging in the block chain network through the block chain client by a user; 3) initiating a block chain network transaction by the user, and using an identification cryptographic algorithm to sign adigital summary of the transaction calculated by the user's block chain client end to generate signature information; (4) verifying the block chain network transaction initiated by the user, and verifying the correctness of the signature of the block chain network transaction by using the identification cryptography algorithm. The method and the system of the invention can reduce the complexityof the management of the members in the block chain network and facilitate the audit of the transaction.

Methods, computer-readable media, and systems are provided to facilitate the storage, retrieval, and display of rejected data objects. Even when a data object is accepted on a user system, the data object may be rejected before reaching a backend repository if the user system and backend repository are asynchronously connected. In one implementation, a rejected data object is collected, converted into a storage format, and stored on a storage medium. Information relating the rejected data object in the storage format to a first data model is also stored. At some future time, a request is received and utilized to locate the rejected data object. Then, the rejected data object is translated from a storage format into the first object format by using the relational information. A value from the translated rejected data object can then be displayed contemporaneously with a second data value from an accepted data object. This may allow a user to see transactions and data that might otherwise be lost. Further, this may allow a system analyst to correct system problems when abnormal trends in the rejected data are observed.

The present invention is a system and method that facilitates audits of network device (e.g., an optical network concentrator) characteristics and operations and presents results in a convenient and user friendly format. The present invention automated network communication device audit tool system and method gathers network communication device information automatically, parses the gathered information automatically, determines if additional information is required, analyzes the characteristic and operations of said network communications device; and reports network communication device information in convenient format including identification of problems and potential problems.

The invention discloses a scanning device and a scanning method for a bar code invoice, which are used for scanning a bar code of the bar code invoice. The scanning device comprises a scanning module, a signal shaping module and a decode outputting module, wherein the scanning module is used for optically scanning a bar code sign of the bar code invoice and converting an optical signal of a bar code and bar blank pattern into an electric signal; the signal shaping module is used for amplifying the electric signal generated by the scanning module through a circuit to generate an analog signal and filtering and shaping the analog signal to form a square wave signal corresponding to the analog signal; the decode outputting module is used for interpreting the square wave signal formed by the signal shaping module into a digital signal which can be directly accepted by a computer. According to the scanning device and the scanning method disclosed by the invention, the scanning for bar codes in notes such as various bar code invoices, air tickets, train tickets and bus tickets is realized, the authenticity of the invoices can be detected, financial reimbursement, accounting and auditing of users are facilitated, financial management of the users is enabled to become efficient and accurate and the consumption of labor force and financial resources is reduced.

The invention discloses a real person identity verification method. The method comprises the following steps: acquiring human face picture information provided by an operator; simultaneously acquiring the human face characteristic information of the operator and the mouth shape characteristic information of the operator during reading of preset content; and comparing the human face characteristic information with the human face picture information, comparing the mouth shape characteristic information with preset standard mouth shape characteristic information, if comparison succeeds, confirming that the operator is a real person on the human face picture information, and otherwise, confirming that the operator is not the real person on the human face picture information. According to the method, the identity of the real person is judged by simultaneously acquiring the human face characteristic information and the mouth shape characteristic information without making contact with the operator, so that the popularization of the method is facilitated; comparison of the human face characteristic information is adopted, so that confirmation and auditing on whether the operator is the real person or not are facilitated, the identification accuracy is high, and the accuracy is increased; and comparison of the mouth shape characteristic information is adopted, so that others can be prevented from cracking a human face identification comparison technology by using non-real-person objects, and the security is enhanced. On-site pictures can be stored, and a monitoring function is realized.

The invention relates to a network security system under a mobile Internet environment, comprising a security isolation gap, an extranet application server, a gap external server, a gap internal server, and an interface server which is connected with a specific application service system and provides interface service. The extranet application server receives an access request of a user, transmits the access request among the gap external server, the gap internal server and the interface server through an inter-gap asynchronization and synchronization function, and gets returned data through the interface server. The returned data is transmitted among the gap internal server, the gap external server and the extranet application server the inter-gap asynchronization and synchronization function, and is returned to the user. The application service system is deployed through the security isolation gap to establish a perfect access control mechanism, and cross-operation-platform, cross-platform and cross-service-platform security access management strategies can be provided.

The invention relates to a distributed access control method based on a block chain, and belongs to the field of information security. The method comprises the following steps: designing a distributed access authorization process: designing the distributed access authorization process according to the functions of each component in a distributed access control model B-ABAC based on a block chain; meanwhile, in the authorization process, recording generated authorization access records on the block chain; S2, designing an attribute and strategy intelligent contract: separating functions of attribute authority and strategy authority, and dispersing the functions into an intelligent contract and a block chain account book in the B-ABAC model; and S3, designing consensus algorithm: using the distributed decision network to replace original decision points, and designing and using the improved consensus algorithm to carry out consensus maintenance on the distributed decision network. In an untrusted environment, fine-grained and dynamic access authorization can be provided, meanwhile, the security and auditability of an access model are improved, and human intervention in the authorization process is reduced.

A cabinet access control system based on a dynamic password comprises a cloud platform, a communication controller, an intelligent lock and a mobile device, the communication controller and the mobiledevice are both in wireless connection with the cloud platform, the communication controller is in wired or wireless connection with the intelligent lock, and the mobile device is in wired or wireless connection with the intelligent lock. The invention further discloses a control method of the cabinet access control system based on the dynamic password. According to the invention, the unlocking modes of a contact type or non-contact type IC card and the like of the existing lock are abandoned, and a user does not need to carry the unlocked IC card or user card and the like at any time. Password verification is carried out in the intelligent lock, a secret key is stored in an exclusive area of the intelligent lock, and when an operator inputs a dynamic password through a key or a touch screen of the intelligent lock, the dynamic password is effective once and needs to be input within the effective duration of the password, leakage does not need to be worried about, and safety performance is high.

The invention discloses a shared content supervision method based on threshold key sharing and a block chain. The entity involved in the invention comprises a supervision department, a content provider, a block chain and a miner. The method specifically comprises the following steps: step 1, content permission snapshot; step 2, secret key distribution and recovery based on Shamir (t, n); step 3, content review based on transactions. according to the method and the system, the Shamir (t, n) threshold secret sharing is utilized, so that multiple parties can participate in content review together, the accuracy and fairness of content review executed by a supervision department are ensured, and collusion in the supervision department is effectively prevented. Besides, the whole review process is carried out in a block chain transaction mode, so that the defect of content supervision in a content sharing scheme based on a block chain at present is overcome, absolute disclosure and accuracy of the review records are ensured, and the public can conveniently audit and check the review records.

The present invention relates to apparatus and methods for reducing water runoff pollution. An apparatus for distributing pollution related information, comprises a demographic data store, a television ratings data store, a governmental mandate data store, broadcast media related to the pollution abatement program, wherein the viewing of the broadcast media is used to meet at least a first pollution abatement program mandate and a computer system coupled to the demographic data store, the television ratings data store, governmental mandate data store, wherein the computer system is configured to identify a local government body that is to adhere to a water runoff pollution abatement program and to identify at least a first show as a potential candidate with which the broadcast media related to the pollution abatement program is to be televised in conjunction with.

The invention provides a system and a method for defending against mobile storage medium virus in island-like Ethernet which comprises a client side and a server. When a user inserts a mobile storage media, the client side monitors read-write operations on the mobile storage media of each process, prevents other processes outside the monitoring processes from reading data, sends prompt messages to prompt users to upload files in the mobile storage media to the server, and prevents the files from being accessed when users refuse to upload the files. The server records information of users uploading files and determines safety of the received files. Files being successfully indentified are sent back to users. The system and the method are capable of improving the effectiveness and practicality of defending mobile storage medium virus with no cost increased.

The invention discloses a segmentation method for a trust domain of a virtual machine monitor. The original control virtual machine is divided into nine service virtual machines according to different previous functions; each service virtual machine comprises a single-use control logic, and the control logic is deleted from the original control virtual machine. Each service virtual machine only has the authority of finishing the function per se, and each component is limited to access to Hypervisor with the required minimum authority, so the risk is clear. The method has the positive effects that vulnerability location can be effectively performed after attack accidents occur so as to perform remediation, the problem that the control power of the whole system can be obtained by breaking one component originally is solved, and the safety of the virtual machine is improved.