17results about How to "Implement access control" patented technology

The invention discloses an Internet of Things access control system and method based on an intelligent contract and trust evaluation. The system comprises IoT equipment, a resource data memory RDS, an attribute authority AA and a block chain network, the method comprises the steps of initiating a resource access request, searching and responding attributes, evaluating and calculating trust values, deciding access authorization, sending access authorization and tokens, verifying access tokens, judging strategy violation, and sending and accessing resource data. According to the method, trust evaluation is introduced as the basis of authorization decision, and the comprehensive trust value is dynamically evaluated to realize fine-grained and self-adaptive access authorization; and meanwhile, safe and credible access control of the Internet of Things is realized by utilizing the characteristics of traceability and non-tampering of the block chain and adopting an intelligent contract mode. In addition, the sensitive attribute information is separated from other access control data in a main chain and side chain mode, and privacy protection of the sensitive attribute information in the access control process of the Internet of Things is achieved.

The invention discloses a satellite communication system network control service access architecture system and method based on a software bus, and the architecture comprises a management application layer, a core service layer, an access adaptation layer, and a data service layer. The management application layer comprises management and control service software, network management and control business service software, data operation service software and synchronization service software; the core service layer controls information protocol format conversion software and manages information communication protocol conversion software, and provides an interactive interface of the data service layer and the core service layer; the access adaptation layer provides registration management and information input interfaces for software of the data service layer, and provides registration management and information output interfaces for application services for software of the management application layer; and the data service layer configures user operation and parameters and provides a human-computer interaction interface. According to the invention, unified planning and scheduling of network resources and management and access control of users are realized, visual presentation is provided for managers, and network control service experience is improved.

This invention discloses a method for congestion warning and access control of a satellite trunking common signaling channel. A State Service (STS) server uses statistical information on random satellite access and radio resource management (RRM) allocation from the terminal as a traffic status report, which is broadcast to users in real time via the common signaling channel. The satellite trunking terminal adjusts its access based on the user priority assigned at activation and the current system broadcast, forming a congestion warning and flow control mechanism. Based on the random access RACH information, users can obtain the uplink access traffic on the common channel of their respective beam within a unit of time. Based on the satellite resource management (RRM) information, users can obtain the probability of successfully requesting access beam resources within a unit of time. According to a predetermined access control strategy, the terminal initiates uplink traffic tiered restrictions before beam congestion, ensuring that users with different priorities receive corresponding communication connection rates. This provides users with better tiered satellite trunking access services and effectively prevents systemic traffic paralysis due to channel resource exhaustion.

The application relates to the technical field of distributed system data synchronization, and discloses a data synchronization processing method and system based on message driving, a terminal and a medium. In a producer service end, a data synchronization message is generated, a version identifier is injected into the data synchronization message before the data synchronization message is sent to a message middleware, and then the data synchronization message is published into a preset topic or queue through a client of the message middleware; in a consumer service end, the data synchronization message is received from the message middleware, the data synchronization message is intercepted before a business processing logic is executed, the version identifier is parsed and extracted; a corresponding target data source is determined based on a unique identifier of a data table, a current maximum timestamp of the synchronized data is queried from the target data source, the current maximum timestamp is compared with a data version timestamp, and according to a result, it is decided whether the data synchronization message is passed to the business processing logic or an automatic retry mechanism is triggered. The application improves the reliability, data consistency and operation efficiency of a distributed system.

The present application provides an information security level protection optimization method and system. The data provider performs system initialization, generates a public key and a master key, and generates a private key and an access control policy based on the public key, the master key and the access attributes corresponding to each authorized user, sends the private key to the corresponding authorized user, sends the data set and the encryption parameter to the data server, and sends the access control policy to the verification server; the user terminal generates a user access credential based on the private key and the public key, and sends an access request carrying the user access credential to the verification server; the verification server performs verification, and denies access if the verification fails, and sends the access request to the data server if the verification passes; the data server establishes a one-way channel with the user terminal, encrypts the data using the encryption parameters and transmits it to the user terminal in one direction; the user terminal decrypts the received encrypted data. Thus, fine-grained access control is achieved, scalability is improved, and data security is guaranteed at the same time.

The invention relates to the technical field of electric power internet of things, in particular to a dynamic access control method based on a local communication network, which realizes fine-grained access control and authority management, and allows authorized users or equipment to access specific electric power resources and functions. The method mainly comprises the steps of establishing a dynamic access control model, realizing a dynamic access control strategy, performing dynamic access control optimization based on an intelligent algorithm, and designing a security audit mechanism. According to the method, dynamic control over power terminal access is achieved, corresponding dynamic access control strategies are formulated according to various conditions such as identity authentication failure and insufficient authority in the power terminal access process, the safety and stability of a system are guaranteed, the efficiency and accuracy of dynamic access control are improved, a perfect safety audit mechanism is established, and the safety audit efficiency is improved. Various behaviors and events in the access process of the power terminal are monitored, potential safety risks are found and processed in time, and the safety of the system is ensured.

This application provides a component-centric isolation and sharing device and its operating method based on containerized encapsulation. The device includes a component encapsulation and registration center for building and registering container images; a containerized runtime scheduling engine for isolating environment instantiation of components and managing their lifecycle; a centralized access proxy gateway for verifying requests and routing them; and a unified configuration and policy management center for storing and managing various policies and providing query and update interfaces. The advantages of this application are: containerized encapsulation achieves environment decoupling and consistency, eliminating dependency conflicts; strong isolation policies ensure multi-tenant data security and system stability; centralized management enables fine-grained access control; intelligent elastic scaling optimizes resource utilization; and it supports centralized management of the entire component lifecycle, improving reusability, maintainability, and collaborative efficiency.

The application provides a device driver automatic verification and code access control method, comprising: in a code review system, establishing a code change event listening mechanism, when a code submission event is detected, sending a code change notification to a continuous integration platform; when the continuous integration platform receives the code change notification, triggering a corresponding pipeline task, and sequentially completing device driver automatic building, device driver pulling and deployment, test environment initialization of a test device, multi-dimensional automatic test execution, test result collection and analysis, and review result generation and feedback of the whole process; and performing access control on the submitted code according to the review feedback result. The application realizes full-process automatic execution of a device driver from code submission to building, deployment and running test, structures multi-dimensional test results and uses the same for code review decision-making, and finally realizes code access control based on running results.

The invention provides an intelligent substation system configuration description file-oriented access control implementation method, which relates to the technical field of data processing, and comprises the following steps of: analyzing a business process of an intelligent substation system, and determining various roles of a configuration description file SCD needing to be accessed; defining roles required in the intelligent substation system, and defining responsibilities and permissions for each role; determining mutually exclusive roles and setting cardinality constraints; determining the comprehensive authority of the user in a configuration description file SCD part; and judging whether the role has the authority of reading, writing, modifying or managing the configuration description file SCD or not according to the comprehensive authority of the user in the configuration description file SCD part. According to the invention, the problem that the traditional access control method cannot carry out fine access control on the configuration description file SCD is solved.

The embodiment of the invention discloses an equipment access control method and a related device, relates to the technical field of network communication, and can realize access control of access equipment on the basis of not modifying an original SLAAC configuration process. The method comprises the steps that an RS message sent by an access device is received, a first RA message is responded to the access device based on the RS message, and the first RA message is used for indicating the access device to configure an IPv6 address in a stateless address configuration mode and initiate a DHCPv6 request; and receiving a DHCPv6 request message sent by the access equipment, and performing access authentication on the access equipment according to the authentication information carried in the DHCPv6 request message.

The invention is suitable for the technical field of image security processing, and provides an image security processing method and system based on deep learning, and related equipment, and the method comprises the steps: obtaining image data information shot by a monitoring camera in real time through a server, and extracting a target feature region in the image data information through a convolutional neural network model; encrypting data of the target feature region through an AES encryption algorithm, and transmitting a generated first-level ciphertext to a cloud platform; the cloud platform encrypts the first-level ciphertext by using an ABE algorithm to obtain a second-level ciphertext; when an access request of the mobile terminal is received, the cloud platform judges whether the access request of the mobile terminal meets an access condition or not; if yes, selecting attribute information according to the access request, and determining a target data transmission protocol; and the cloud platform sends the second-level ciphertext to the mobile terminal according to the target data transmission protocol, so that the mobile terminal restores the image data information according to a preset layered decryption framework, and the experience feeling of image operation of a user is effectively improved.

The invention discloses a field programmable gate array-based Xintf bus interface controller, which comprises a dual-port RAM module, a DSP chip assembly, an FPGA chip, an Xintf interface control line management module, an Xintf interface data writing management module and an Xintf interface data reading management module, and is characterized in that the FPGA chip is connected with the Xintf interface control line management module, the FPGA chip is connected with a daughter card through an Xintf bus, and the daughter card is connected with the DSP chip assembly. The FPGA chip is used for releasing the daughter card bus to the authorized DSP chip according to the authority state of the DSP chip assembly to realize daughter card conduction connection; the system has the advantages of being high in flexibility, expandability, reconfigurability and parallel processing capacity, function expansion can be carried out on the Xintf asynchronous bus of the DSP chip through the FPGA chip, external expansion chip access control of various function types is achieved, external expansion interface access diversification is achieved, function expansion of external expansion chip access control logic is achieved through the FPGA, and the system is convenient to use and popularize. And the method has higher flexibility and expandability.

This invention discloses a method for transparent and secure sensitive data transmission based on white-box cryptography. The method involves: a user with appropriate permissions issuing a query request; an SQL agent deployed on a cloud service using a transparent protocol to parse and obtain the user's query request and send the proxy statement to the database, retrieving the corresponding query content from the database; for ordinary query requests, a random obfuscation encryption method based on white-box cryptography is used to encrypt and de-identify the query content, resulting in de-identified data being returned to the user; for advanced query requests, a sequence or format preservation encryption method based on white-box cryptography is used to encrypt and de-identify the query content; after obtaining the de-identified data, an external encoding module is used for external encoding to obtain de-identified data with external encoding, which is then input into an external decoding module and a white-box cryptography decryption module for decoding and decryption, resulting in the query content being returned to the user. This method enables transparent and secure data transmission, preventing the leakage of sensitive data.

The application provides a cross-network segment device communication method and a routing device under a whole-house intelligent scene. A control hub of an intelligent device is registered on any routing device in a whole-house intelligent network, the whole-house intelligent network is composed of a plurality of subnets established by a plurality of routing devices as subnet routes, device information of the control hub is synchronously registered in other routing devices in the whole-house intelligent network, the device information comprises network address information of the control hub after the control hub is registered in the whole-house intelligent network, a virtual device of the control hub is generated in each routing device in the whole-house intelligent network according to the device information of the control hub, the control hub communicates with the intelligent devices in the subnets accessed by each routing device through the virtual device, and the control hub and the intelligent devices can be accessed in any network segment to realize unified access control without changing network layout and network configuration.

The invention relates to the technical field of data security, and discloses a file permission management method, device and equipment, a storage medium and a program product, the method is executed by target equipment, and the method comprises the steps of obtaining first fingerprint data, calculating a hash feature value corresponding to the first fingerprint data, and according to the hash feature value, storing the first fingerprint data in a database; and judging whether a control protection area corresponding to the first fingerprint data exists or not, and if the control protection area corresponding to the first fingerprint data exists, displaying the control protected area so as to receive an operation aiming at the control protected area. According to the method, the unique fingerprint hash value is generated by utilizing the physiological characteristics of the fingerprints of the human body, and the fingerprint hash value is added into the metadata attribute characteristic value of the stored file, so that the aim of controlling the file access permission by utilizing the fingerprints is fulfilled.

The present application belongs to the field of material evidence management and data security technology, and discloses a material evidence storage, modification, upgrading and storage system for criminal investigation, which comprises a material evidence input module, a hash chain construction module, a material evidence modification module, a material evidence upgrading module, an integrity verification module, a permission management module and a storage medium. Through dynamic salt value generation and hash chain structure, each operation of the material evidence is linked to an unalterable node sequence, realizing full-process traceability and tamper resistance. Combined with digital signature and regular integrity verification, data tampering is automatically detected and an alarm is given. At the same time, based on digital signature verification, identity and permission strategy table control access, and hash chain protection of operation logs, fine access control and security audit are realized, solving the technical problems of traditional hash algorithm vulnerability, operation history loss, tampering difficulty and extensive permission management.

The application discloses an air-ground communication access control method and device, equipment and a storage medium, comprising: establishing an air-ground communication authentication link with an airborne client based on an RFC 6733 protocol; obtaining an authentication request carrying authentication information sent by the airborne client through the air-ground communication authentication link based on a preset air-ground authentication protocol, and authenticating the airborne client by using the authentication information; the preset air-ground authentication protocol is a protocol added in advance on the RFC 6733 protocol; if the authentication is successful, a corresponding authentication success notification is returned to the airborne client, and a target service data transmission link for sending service data messages is screened for the airborne client, so that the airborne client develops service communication between the air and the ground through the target service data transmission link. By using the authentication information to authenticate the airborne client, the access control of the air-ground communication of the airborne client can be realized, and the security of the air-ground communication is improved.