11results about How to "Ensure network security" patented technology

The invention discloses an intelligent security and protection management system based on 5G, AI and UWB positioning technologies. The intelligent security and protection management system comprises an image video acquisition device, an environmental factor acquisition device, a UWB positioning module, a 5G communication network module and an intelligent security and protection management platform, the intelligent security and protection management platform comprises an AI video identification subsystem, a cockpit subsystem, a virtual electronic fence subsystem, an operation risk security management and control subsystem, an operation ticket visa subsystem, a video linkage subsystem and a query statistics subsystem. The intelligent security and protection management system based on the 5G, AI and UWB positioning technologies has the advantages of high-precision positioning technology, intelligent video analysis, highly integrated system architecture, flexible expansibility and customizability, safe and reliable data transmission and storage and the like.

The invention provides a network security one-way isolation system and method of a communication satellite system and electronic equipment, and relates to the technical field of communication, the network security one-way isolation system of the communication satellite system comprises a first one-way firewall, an intranet host system, a one-way gatekeeper, an extranet host system and a second one-way firewall, the intranet host system receives service data transmitted by the communication service network through the first one-way firewall, and performs format conversion processing on the service data to obtain internal interface data in a preset format supported by the one-way gatekeeper, so as to send the internal interface data in the preset format to the one-way gatekeeper, and the one-way gatekeeper forwards the data to the extranet host system; and the external network host system recovers the internal interface data in the preset format into service data, and sends the recovered service data to the external network through the second one-way firewall. According to the system, a multi-stage deep security protection framework of a two-stage firewall and a one-stage one-way gatekeeper is adopted, so that the network security of a communication service network is ensured.

The invention discloses a multi-level control method based on Internet information security, and the method comprises the steps: constructing a community smart screen playing mode judgment model, and determining the playing modes of a community smart screen in a use peak period and a non-use peak period; the network module is used for cutting off the connection between the community smart screen and an external network in a non-use peak period, and obtaining a latest playlist of the community smart screen in a random networking mode; using a community smart screen playing mode judgment model to determine a playing mode of the community smart screen during holidays and festivals; determining an optimal playing mode in the current scene by using a community smart screen playing mode judgment model; and identifying abnormal activity information according to the network flow data and the access log, disconnecting the network connection of the community smart screen, and entering a physical isolation state. Through the multi-level control method, accurate content playing, dynamic adjustment and efficient safety management of the community smart screen are achieved, and the network safety and operation stability of the community smart screen are effectively guaranteed.

The invention provides a new energy station network intrusion intelligent detection and active defense system, and relates to the field, and the system comprises an operation parameter obtaining unit which is used for collecting the parameter information of new energy station equipment, and constructing a digital twin model of a new energy station; acquiring operation data of new energy station equipment through the digital twinborn model of the new energy station; the inversion model construction unit is used for extracting characteristic parameters based on a clustering algorithm and a contour coefficient method and constructing a parameter inversion model of the new energy station; the intrusion detection and defense unit is used for acquiring real-time operation parameters of the new energy station equipment, identifying abnormal modes in the operation parameters and detecting network intrusion behaviors; and simulating the defense strategy through the digital twin model, and determining and executing a final defense strategy according to a simulation result. Simulation verification is carried out through the digital twin model, the effectiveness and feasibility of the selected strategy are ensured, and the response speed and defense capability of the system are greatly improved.

The invention discloses an urban rail transit LTE-M interface monitoring data acquisition device based on an FPGA, and relates to the field of urban rail transit. The FPGA-based urban rail transit LTE-M interface monitoring data acquisition device comprises an FPGA data path module and an external interface module, and the FPGA data path module comprises an IP data packet capture unit, an IP data packet analysis unit, an IP data packet processing unit, a storage unit and a network transmission unit. The external interface module comprises a first network interface and a second network interface, the first network interface is used for connecting a mirror image port of the LTE core switch, and the second network interface is used for connecting a data analysis workstation. According to the FPGA-based urban rail transit LTE-M interface monitoring data acquisition device, a one-way data transmission path and a physical isolation mechanism are constructed through FPGA hardware logic, the risk that an external network invades an LTE-M core network through the acquisition device is completely eradicated, and the network security of a CBTC signal system is guaranteed.

The application belongs to the technical field of expressway management and control, and particularly relates to an expressway electromechanical terminal cooperative control system based on edge computing, which comprises a multi-source data sensing and fusion module, an edge intelligent analysis and decision module, a terminal cooperative control execution module, a safety protection management module and a remote monitoring center; the original data on the expressway are collected by the multi-source data sensing and fusion module and subjected to fusion processing, the fused data are subjected to real-time analysis and processing by means of edge computing, and an intelligent algorithm is used to generate corresponding control strategies and decision instructions; the control instructions are sent to corresponding electromechanical terminal equipment and the execution status thereof is monitored; the safety protection module safeguards the network security and data security of the system, effectively improves the operation efficiency and safety of the expressway, and provides strong support for intelligent management of the expressway.

The invention provides a network access method and device of a user terminal, equipment and a storage medium, and relates to the field of communication. The method is applied to private network core network equipment, the private network core network equipment is in communication connection with a private network user terminal through a base station with a wireless network sharing function, and the base station with the wireless network sharing function is further in communication connection with public network core network equipment and a public network user terminal. The method comprises the following steps: receiving a network access request sent by a base station; determining a target communication type corresponding to the target user terminal; determining whether the target user terminal is a private network user terminal; and in response to the fact that the target user terminal is the private network user terminal, accessing the target user terminal to the corresponding private network core network equipment based on the target communication type so as to realize that the target user terminal is accessed to the private network. According to the invention, the network security of private network users can be ensured.

This invention relates to the field of charging pile technology and discloses a self-organizing network charging pile communication module, including a communication unit, a control unit, a storage unit, and a security unit. This self-organizing network charging pile communication module provides efficient and stable communication even in complex environments. The radio frequency module and protocol conversion module of the communication unit work together to ensure stable communication. The radio frequency module can intelligently adjust the receiving sensitivity and transmitting power based on factors such as environmental interference and transmission distance, ensuring signal penetration through obstacles or reducing energy consumption. The protocol conversion module supports multiple mainstream communication protocols and can quickly adapt to external devices such as power grid management systems and payment platforms, breaking down communication barriers and achieving efficient interconnection between charging piles and different devices, thus improving communication compatibility. This invention constructs a security system from multiple aspects. Data transmission uses high-strength encryption algorithms and quantum key distribution technology to prevent data interception and cracking, and provides early warnings for known and unknown threats, ensuring data and network security.

A method, device and system for a virtual machine to access a physical server in a cloud computing system, wherein a service is deployed on the physical server, a cloud platform allocates a published IP address and a published port corresponding to the service to the service, publishes the service externally, and configures a NAT rule on an access network element of the virtual machine, wherein the NAT rule includes a correspondence between the published IP address and the published port and the IP address and port of the physical server running the service, and when the access network element receives a service access request from the virtual machine to access the service, the destination address of the service access request is modified to the IP address and port of the physical server according to the NAT rule, and the modified service access request is routed to the physical server, thereby enabling the virtual machine to access the service on the physical server without knowing the real IP address and port of the physical server.

The present invention discloses a method for intercepting illegal WEB requests based on artificial intelligence, which relates to the field of network security. The method comprises: obtaining a request log file of an application, obtaining a recognition model based on the request log file, and applying the recognition model to the application; if the application receives a request, identifying the characteristics of the request based on the recognition model, and judging whether the request is legal based on the characteristics, and if so, passing the request to a server for response processing; otherwise, intercepting the request. The method can quickly identify illegal requests and has a high recognition rate for illegal requests.

The present disclosure provides a method for processing user contract data, UDM-Proxy, system and storage medium, wherein the method comprises: the UDM-Proxy set in the 5G private network receives a first data configuration request, generates a second data configuration request and sends it to the IWF, so that the IWF forwards the second data configuration request to the operation management system for corresponding processing; the UDM-Proxy receives the user contract data sent by the IWF and stores it; wherein the UDR set in the 5G public network sends the user contract data to the IWF. The method, UDM-Proxy, system and storage medium of the present disclosure use UDM-Proxy to replace the UDM in the 5G private network, which can achieve the user data not leaving a specific area while meeting the demand for intensive management of user data, and can ensure the operator's supervision of user contract data; by using the IWF as an intermediate node to forward requests, the operator's network security can be guaranteed.