78results about How to "Prevent Data Leakage" patented technology

The present invention relates to an access authentication method of an internet-of-things fog device at a cloud platform based on a blockchain. An internet-of-things device initiates an agent request of accessing a cloud platform to an intelligent gateway with a blockchain module through the means of device authentication; the blockchain module of the intelligent gateway accesses a blockchain network and gives out device certificate of the internet-of-things device and the device certificate of the intelligent gateway to the blockchain network for requiring authentication, wherein the blockchain network determines whether the request link of the intelligent gateway is frequently changed in a short period or has safety risk or not, and then verifies the legality of the intelligent gateway certificate; the same mode is employed to verify the legality of the device certificate of the internet-of-things device; and if the internet-of-things device with the blockchain module also can initiate the agent request of accessing the cloud platform, the authentication access mode is the same as the authentication mode of the intelligent gateway. The dependence on the cloud platform and the usage frequency are reduced, and the risks of the cloud platform being sniffered and injected at the aspect of the device access are reduced.

The invention discloses a method for adjusting screen viewing angle dynamically and a device thereof. The method is applicable to adjust the screen visual range of a hand-hold electronic device dynamically; wherein the screen has adjustable viewing angles. The method comprises the following steps: detecting the offset of a target object deviating from the screen visual range, and then adjusting the screen visual range dynamically according to the offset so as to cause the target objects included in the screen visual range. Hereby, the method can prevent the contents of screen pictures from being peeped by others and is convenient for users to watch screen pictures.

The invention discloses an identity authentication based virtual terminal safety environment protection method and system. The system comprises an intelligent storage monitoring layer, a storage serving layer, and a core safety layer, wherein the intelligent storage monitoring layer comprises a storage access redirecting module, is in charge of monitoring and analyzing data access acts of application programs, and performs actions according to configuration rules, the storage access redirecting module transfers input/output access according to access control rules, the storage serving layer is in charge of encrypting and decrypting files or data and recording file mapping relations, and the core safety layer is the basis of the whole framework, provides a key management function, provides encryption and decryption support for the storage serving layer, and dispatches different algorithms as desired. By means of the identity authentication based virtual terminal safety environment protection method and system, safety of core application data can be protected, data leakage is prevented, and data inside and outside the environment are isolated without influence and do not influence user operation habits.

The invention relates to a general database transparent encryption system and belongs to the fields of information security and database encryption technologies. According to the system, first, an existing data table is subjected to encryption transformation, the table where an encrypted field P1 exists is recorded as T1, and a ciphertext index field I1 is established based on the encrypted field P1; and then, the content of a to-be-encrypted field is mapped to a Hash value based on an order-preserving Hash function, and the Hash value is used as an index value to be interposed into the field I1. The system comprises an SQL gateway module and an encryption plug-in module, wherein the SQL gateway module is used for receiving and rewriting an SQL statement sent by a client, sending the SQL statement to a database server and forwarding a result returned by the database server to the client; and the encryption plug-in module is located in a database, mainly comprises a series of user-defined functions (UDFs) and achieves encryption, decryption and ciphertext indexing functions according to the SQL statement obtained after rewriting. Compared with the prior art, the truly-general database encryption system is realized.

The invention discloses a secure storage device which comprises an interface module, a server module, an encryption algorithm module, an encryption strategy management module, a recognition module and a storage medium module. The server module is used for providing an operating system and file processing programs of the storage device, receiving file access requests from a local computer of a user, converting operation results into images, and transmitting the images to the local computer of the user through the interface module. The encryption algorithm module is used for extracting an encryption strategy from the encryption strategy management module, adopting the encryption strategy to carry out encryption on files according to random seeds formed by the recognition module and file characteristic information and then storing the files in the storage medium module and is also used for adopting the encryption strategy to carry out decryption on the files stored in the storage medium module according to encryption seeds formed by the recognition module and the file characteristic information. The recognition module is used for receiving information input by the user to generate the random seeds which are used as initial indexes of other secret keys.

The invention relates to a protection method and device for executable programs. The method comprises writing information of the executable programs in hidden areas of storage devices, generating mapped icons corresponding to the information of the executable programs; starting monitoring apparatuses automatically when the storage devices and hosts are connected, wherein the monitoring apparatuses monitor double click of icons in common areas or Enter key operations; reading program data information corresponding to the icons form the hidden areas according to mapping relations; executing executable files in a debugger mode. By the aid of the method, data leakage caused by program copying can be prevented, debugging and cracking difficulties are increased, and the security is improved.

The invention relates to a blockchain foundation-based three-dimensional (3D) printer for internet of things. The 3D printer comprises printers, a communication network and control computers, wherein the plurality of printers are respectively connected with the control computers by the communication network, and all the printers are connected in parallel; the plurality of control computers respectively form at least one control local area network by means of the communication network; the printers are respectively provided with a blockchain control device; the blockchain control devices are respectively connected with the printers and the communication network; each blockchain control device comprises a bearing shell, a backup power, a central data processor, a metal oxide semiconductor (MOS) drive circuit, a data storage secure digital (SD) card, a data caching module, an address coding module and an inter-process communication (IPC) interface. The blockchain foundation-based 3D printer for the internet of things is simple in structure and flexible and convenient to use, can effectively meet the need of carrying out file printing operation from a long distance through the network on one hand, and can effectively improve the safety and reliability of file transfer and response during file printing on the other hand so as to prevent the phenomenon of data leakage.

The invention provides an EPC engineering data processing system and method in complex network environment. The data processing system comprises an EPC data centre, an output Schema template calling module, an XML data file sending module, a network connecting a data transmitting terminal and a data receiving terminal, an XML data file receiving module and an input Schema template calling module, wherein the EPC data centre is used to accumulate data of all users; the output Schema template calling module is used to call an exported Schema module, establish an output Schema module and then generate an XML data file; the XML data file sending module is used to send the XML data file to a recipient through a network; the XML data file receiving module is used to receive the XML data file; and the input Schema template calling module is used to call an input Schema module, establish an input Schema module and then generate an XML data file. By using the system of the invention, good data safeguard is provided for the business integration among enterprises without changing the business process within the enterprises.

The invention discloses a method and a system for safely receiving and sending mails. Mail receiving and sending safety authentication and safety transmission of the mails are realized. The method includes the steps: connecting a mail client with a login platform to perform identity authentication; returning a token message to the mail client after authentication success; accessing a first address in the token message by the mail client; receiving a first message including a second address by the mail client; calling an interface of a safety management platform and transmitting the first message to the safety management platform by the mail client; generating a second message and transmitting the second message to the mail client and a mail gateway by the safety management platform; acquiring a user policy message from the safety management platform through the second message by the mail client; carrying the second message by the mail client and authenticating the second message at the mail gateway; connecting the mail gateway with a mail server and starting receiving and sending the mails after passing authentication.

The embodiment of the invention provides a data protection method and a data protection device of movable storage equipment and the movable storage equipment. The data protection device comprises a triggering unit, a power supply unit and a processing unit, wherein the triggering unit is used for emitting a power supply request signal and an elimination request signal when the movable storage equipment meets a preset data protection triggering condition; the power supply unit is used for receiving the power supply request signal emitted by the triggering unit and supplying power to the processing unit and a storage unit of the movable storage equipment; and the processing unit is used for receiving the elimination request signal emitted by the triggering unit and eliminating data stored in the storage unit. In the embodiment, a certain triggering condition is preset in the movable storage equipment; if the condition is met, the power is supplied to the movable storage equipment and the data stored in the movable storage equipment are eliminated, therefore, the problem of leaking the data after the movable storage equipment is filched is avoided and the safety of information stored in the movable storage equipment is ensured.

The invention discloses a port protection method of power sourcing equipment (PSE) and a PSE. The method comprises: the PSE detects port state information of a port; the PSE uses the port state information to determine a security level of the port; the PSE determines a port protection strategy corresponding to the security level; and the PSE uses the port protection strategy to carry out security protection on the port. According to the embodiment of the invention, the port data can be effectively protected; the port security is enhanced; and a phenomenon that an illegal user obtains legal powered device (PD) data can be prevented.

The invention discloses a commodity anti-counterfeiting traceability method based on a block chain technology. The method at least comprises the following steps of information acquisition, informationmarking, authentication ID generation, data storage, access instruction receiving and access frequency comparison. According to the method, commodity anti-counterfeiting traceability is innovativelycompleted through a block chain technology, so that a user using the method can store the content of data in situ, and hash values in one-to-one correspondence with the data, identity identification information of the user and basic attribute data of target file data are associated and stored in a trusted block chain; therefore, the original creation and attribution of the data can be proved whilethe data leakage is avoided, and meanwhile, the corresponding certificate storage certificate is generated, and therefore a way for proving and verifying the certificate is provided for other people.More importantly, decentralization is realized by using a block chain technology, so that the data is real, credible and tamper-resistant, the commercial privacy data protection is protected, and theauthority and credibility of the platform and the enterprise participation enthusiasm are guaranteed.

A media treatment device for an optical disc publisher, capable of efficiently disposing media such as defective CDs without using manpower. To produce a medium by an optical disc publisher (5), a blank medium (14) received in a feeding side stacker (13) is taken out by a media conveyance mechanism (12) and conveyed to a media drive (15), and predetermined data are written on the medium. A printing surface of the medium where the data are normally written is subjected to printing by a label printer (19). The medium after the production is stored in a storage side stacker (22). The recording surface of a defective medium having a write failure is mechanically destroyed by a media disposal mechanism (23) while the medium is moved on a medium tray (71) of the printer (19), thereby the data are not readable. The medium after the above process is discharged from a media discharge opening (25).

The invention discloses an Internet hosting website detection method and system based on network access behavior analysis and a readable storage medium. According to the method, Internet access behavior characteristics in network traffic are extracted regularly, the probability that each accessed Internet website is an enterprise trusteeship website is calculated by utilizing the extracted characteristics, and website trusteeship detection is realized so as to assist enterprise security technicians in judgment. According to the scheme, the general network topology characteristics of enterprises are deeply combined, the access behavior characteristics of the Internet hosting website are analyzed based on the network traffic, the method does not depend on an enterprise keyword library, keyword matching does not need to be carried out on the load of the network traffic packet, and the operation efficiency and accuracy are high.

The invention relates to an electronic document security management method based on big data. The method comprises the following steps of encryption protection of a document, local storage of the encrypted document, authority management of the encrypted document, output management and control of the encrypted document, automatic backup of the encrypted document and electronic evidence collection after a terminal screen is photographed. The encrypted document output control comprises output equipment control, file output auditing, operation log monitoring, outgoing document control, notebook computer management and decryption application and management. Besides, the invention further discloses a management system of the system. The system comprises a server side, a client side, a decryption side, a management side and a decryption assistant, the server side is installed on a server, and the client side, the decryption side, the management side and the decryption assistant are all installed on terminal computers of corresponding users. The confidentiality and safety management requirements of internal data assets of a company can be perfectly met, and various secret divulging channels are blocked.

The invention provides a security and secrecy method applied to financial transaction front-end projects, and belongs to the technical field of language programming. The method comprises the followingsteps: acquiring a secret key and data offset defined at a native end through js interaction between the native end and a webpage end, logging in the native end, and acquiring a user name and a password by using a jsbridge method at the webpage end; enabling the webpage end to use a uniformly packaged network request method, employing an AES256 encryption algorithm for encrypting parameters, andverifying an interface by using a token, thereby achieving the transmission purpose that data cannot be decoded by using several measures at the same time.

According to the MAC protection enhancement system for the object agent feature database provided by the invention, a database MAC model based on object agent features is designed, and a set of strictdatabase object access control rules and database object security level limiting rules are designed on the basis of the model; a security level management model of the database object is designed, and a strategy and a method for performing fusion unified management on the security level of the database object are provided; a method for subdividing virtual attribute security levels based on data sources is provided, and a fine-grained access control method of multi-data-source agent classes is designed; a protection enhancement system for providing an MAC function in an object proxy database is designed. The result shows that the method has a good effect in the object proxy database, safer and more flexible access control is provided for the objects in the object proxy database, and the safety performance of the object proxy is improved.

The invention discloses a security protection system of a computer information network, and relates to the technical field of information security. The system comprises a video module, a video analysis module, a database module, a hard disk self-destruction module and a processor, the video module is connected with the video analysis module, and the video analysis module, a password module, the hard disk self-destruction module and the database module are all connected with the processor; The video module is used for recording a video of a database module area and transmitting video data to the video analysis module in a recording manner; The video analysis module is used for analyzing the video data transmitted by the video module, the analysis result is that suspicious persons move in the area of the database module or no suspicious persons exist in the area of the data module, and the database module is in a safe state; The analysis data is sent to the processor; The system preventsa person from removing the hard disk in the database to prevent data leakage.

The invention discloses a distributed cloud security storage method and system and a storage medium, and the method comprises the steps: segmenting a target file into a plurality of data blocks, carrying out the block encryption of the data blocks through an SM4 or AES encryption algorithm, and obtaining encrypted data blocks; randomly scrambling the encrypted data block by using a preset scrambling algorithm; uploading the scrambled encrypted data blocks to different cloud hosts for distributed storage, and establishing a storage index in a local host; and according to the storage index, downloading the encrypted data block corresponding to the target file from the cloud host, performing inverse scrambling according to the scrambling key, performing decryption according to the encryption key, and recombining the target file. Block encryption and random scrambling of the target file are supported, distributed storage of a plurality of different cloud hosts at the cloud end is transmitted, an authorized user can open a system and download encrypted data blocks corresponding to the target file from the cloud hosts, the user is supported to browse and use the file without barriers, and the data leakage in the transmission process can be effectively avoided.