8results about How to "Implement access control" patented technology

This invention discloses a method for congestion warning and access control of a satellite trunking common signaling channel. A State Service (STS) server uses statistical information on random satellite access and radio resource management (RRM) allocation from the terminal as a traffic status report, which is broadcast to users in real time via the common signaling channel. The satellite trunking terminal adjusts its access based on the user priority assigned at activation and the current system broadcast, forming a congestion warning and flow control mechanism. Based on the random access RACH information, users can obtain the uplink access traffic on the common channel of their respective beam within a unit of time. Based on the satellite resource management (RRM) information, users can obtain the probability of successfully requesting access beam resources within a unit of time. According to a predetermined access control strategy, the terminal initiates uplink traffic tiered restrictions before beam congestion, ensuring that users with different priorities receive corresponding communication connection rates. This provides users with better tiered satellite trunking access services and effectively prevents systemic traffic paralysis due to channel resource exhaustion.

The application relates to the technical field of distributed system data synchronization, and discloses a data synchronization processing method and system based on message driving, a terminal and a medium. In a producer service end, a data synchronization message is generated, a version identifier is injected into the data synchronization message before the data synchronization message is sent to a message middleware, and then the data synchronization message is published into a preset topic or queue through a client of the message middleware; in a consumer service end, the data synchronization message is received from the message middleware, the data synchronization message is intercepted before a business processing logic is executed, the version identifier is parsed and extracted; a corresponding target data source is determined based on a unique identifier of a data table, a current maximum timestamp of the synchronized data is queried from the target data source, the current maximum timestamp is compared with a data version timestamp, and according to a result, it is decided whether the data synchronization message is passed to the business processing logic or an automatic retry mechanism is triggered. The application improves the reliability, data consistency and operation efficiency of a distributed system.

This application provides a component-centric isolation and sharing device and its operating method based on containerized encapsulation. The device includes a component encapsulation and registration center for building and registering container images; a containerized runtime scheduling engine for isolating environment instantiation of components and managing their lifecycle; a centralized access proxy gateway for verifying requests and routing them; and a unified configuration and policy management center for storing and managing various policies and providing query and update interfaces. The advantages of this application are: containerized encapsulation achieves environment decoupling and consistency, eliminating dependency conflicts; strong isolation policies ensure multi-tenant data security and system stability; centralized management enables fine-grained access control; intelligent elastic scaling optimizes resource utilization; and it supports centralized management of the entire component lifecycle, improving reusability, maintainability, and collaborative efficiency.

The application provides a device driver automatic verification and code access control method, comprising: in a code review system, establishing a code change event listening mechanism, when a code submission event is detected, sending a code change notification to a continuous integration platform; when the continuous integration platform receives the code change notification, triggering a corresponding pipeline task, and sequentially completing device driver automatic building, device driver pulling and deployment, test environment initialization of a test device, multi-dimensional automatic test execution, test result collection and analysis, and review result generation and feedback of the whole process; and performing access control on the submitted code according to the review feedback result. The application realizes full-process automatic execution of a device driver from code submission to building, deployment and running test, structures multi-dimensional test results and uses the same for code review decision-making, and finally realizes code access control based on running results.

This invention discloses a method for transparent and secure sensitive data transmission based on white-box cryptography. The method involves: a user with appropriate permissions issuing a query request; an SQL agent deployed on a cloud service using a transparent protocol to parse and obtain the user's query request and send the proxy statement to the database, retrieving the corresponding query content from the database; for ordinary query requests, a random obfuscation encryption method based on white-box cryptography is used to encrypt and de-identify the query content, resulting in de-identified data being returned to the user; for advanced query requests, a sequence or format preservation encryption method based on white-box cryptography is used to encrypt and de-identify the query content; after obtaining the de-identified data, an external encoding module is used for external encoding to obtain de-identified data with external encoding, which is then input into an external decoding module and a white-box cryptography decryption module for decoding and decryption, resulting in the query content being returned to the user. This method enables transparent and secure data transmission, preventing the leakage of sensitive data.

The application provides a cross-network segment device communication method and a routing device under a whole-house intelligent scene. A control hub of an intelligent device is registered on any routing device in a whole-house intelligent network, the whole-house intelligent network is composed of a plurality of subnets established by a plurality of routing devices as subnet routes, device information of the control hub is synchronously registered in other routing devices in the whole-house intelligent network, the device information comprises network address information of the control hub after the control hub is registered in the whole-house intelligent network, a virtual device of the control hub is generated in each routing device in the whole-house intelligent network according to the device information of the control hub, the control hub communicates with the intelligent devices in the subnets accessed by each routing device through the virtual device, and the control hub and the intelligent devices can be accessed in any network segment to realize unified access control without changing network layout and network configuration.

The present application belongs to the field of material evidence management and data security technology, and discloses a material evidence storage, modification, upgrading and storage system for criminal investigation, which comprises a material evidence input module, a hash chain construction module, a material evidence modification module, a material evidence upgrading module, an integrity verification module, a permission management module and a storage medium. Through dynamic salt value generation and hash chain structure, each operation of the material evidence is linked to an unalterable node sequence, realizing full-process traceability and tamper resistance. Combined with digital signature and regular integrity verification, data tampering is automatically detected and an alarm is given. At the same time, based on digital signature verification, identity and permission strategy table control access, and hash chain protection of operation logs, fine access control and security audit are realized, solving the technical problems of traditional hash algorithm vulnerability, operation history loss, tampering difficulty and extensive permission management.

The application discloses an air-ground communication access control method and device, equipment and a storage medium, comprising: establishing an air-ground communication authentication link with an airborne client based on an RFC 6733 protocol; obtaining an authentication request carrying authentication information sent by the airborne client through the air-ground communication authentication link based on a preset air-ground authentication protocol, and authenticating the airborne client by using the authentication information; the preset air-ground authentication protocol is a protocol added in advance on the RFC 6733 protocol; if the authentication is successful, a corresponding authentication success notification is returned to the airborne client, and a target service data transmission link for sending service data messages is screened for the airborne client, so that the airborne client develops service communication between the air and the ground through the target service data transmission link. By using the authentication information to authenticate the airborne client, the access control of the air-ground communication of the airborne client can be realized, and the security of the air-ground communication is improved.