23results about How to "Prevent malicious attacks" patented technology

The invention provides an expandable block chain identity authentication method and system for a distributed resource aggregation scene, and relates to the technical field of block chain identity authentication, and the method comprises the steps: receiving a user identity authentication request, generating an identity identification string through a distributed Hash algorithm, and selecting a verification node cluster to deploy a smart contract; each verification node executes the smart contract to verify the identity identification string, constructs an access authority control strategy and generates an authentication block; and when the number of the blocks reaches a preset threshold value, selecting a newly added verification node based on the terminal equipment information, deploying an intelligent contract, and realizing distributed storage through the verification node cluster broadcast authentication blocks. According to the invention, the expandability of identity authentication is improved, the dynamic expansion of the verification node is realized, and the reliable storage and efficient propagation of the authentication information are ensured.

The invention relates to the technical field of communication data inspection, solves the technical problem of lack of safety in the data transmission and processing process in the traditional technology, and particularly relates to a data consistency inspection method and system for intelligent ship sailing credible decision of an inland ship. The method specifically comprises five parts: zero-trust identity verification and access control, data encryption and communication security, time synchronization and verification mechanism, redundancy check and fusion of multi-source data, and multi-ship trust degree dynamic evaluation based on a consistency check result. According to the invention, each data interaction between the ship and the shore base, between the ships and between the ship and the environment is subjected to identity verification and safety examination. And in combination with time synchronization, multi-source data fusion, redundancy check, anomaly detection and the like, the data consistency and credibility of the navigation decision are ensured, and the navigation safety of the inland ship and the anti-attack ability of the system are remarkably improved.

The invention provides a constellation software batch automatic upgrading method and system based on a laser link. Firstly, a ground control center generates a plurality of reconstruction packets, and the reconstruction packets are sequentially sent to a low-orbit earth satellite through a high-bandwidth microwave communication channel. Then, after the satellite receives the reconstructed packets, the correct reconstructed packets are reserved, and data increment packets are extracted at the same time; after the database receives the information that the satellite completes reconstruction, other satellites with software version numbers lower than those of the satellites in the constellation network to which the satellites belong are counted immediately, and the models of the satellites are transmitted to the satellites. And the satellite divides the incremental packet into a plurality of small packets, and after forward error correction coding and numbering processing, the small packets are multiplexed by using a DVB-S2 protocol and transmitted to a target satellite through an optimal laser link. The target satellite restores the complete incremental package, software updating is carried out in the dynamically determined idle time period, meanwhile, unified updating of ground database configuration is carried out, and therefore efficient and reliable batch upgrading is achieved.

The embodiment of the invention relates to the technical field of password security, and provides a password guessing method and device, electronic equipment and a medium, and the method comprises the steps: obtaining a to-be-guessed target password; guessing a target position where the target password may have character transformation through a password language model of a self-attention mechanism; and replacing the characters at the target position based on a plurality of character replacement rules learned by the password language model of the self-attention mechanism in a training process to obtain a guess password data set. Therefore, password guessing and rule extraction are carried out based on password analysis, the obtained guessed password can effectively simulate conversion of a user on the password, meanwhile, character and structure distribution of the password can be effectively learned, and the accuracy and the coverage rate of the guessed password are improved.

The present invention proposes a bidirectional source address verification device, which belongs to the field of network communication technology. The device adopts a layered design method of the data plane and the control plane to realize the mutual cooperation of inter-layer functions; the bidirectional source address verification device includes a bidirectional source address verification engine and a classification module of the data plane, a hash summary generator of the control plane, and a bidirectional source address verification information database. The bidirectional source address verification engine is used to realize the extraction of five-tuple information of the data packet and the source address verification function; the classification module is used to realize message classification; the hash summary generator selects a suitable hash function to generate a unique hash summary from the five-tuple information; the bidirectional source address verification information database stores the hash summary, and sets the life cycle of different types of message information to realize hash summary life cycle management. By saving and comparing the information of the request message, the message performs source address verification, which can realize bidirectional verification of the source address, avoid malicious attacks, and help improve network security.

The invention belongs to the field of security in a multi-core system chip, and discloses a security bus architecture for a multi-core Chiplet chip system, which comprises five parts, namely an active intermediate layer, a functional chip, a storage chip, a Core chip and a security chiplet, and is characterized in that the Core chip comprises a CPU core of the chip system; the storage chip comprises a memory for storing data and codes; the functional chip comprises most peripherals and functional IPs; the active interposer is used for connecting all the chiplets and realizing access control of each chiplet, and the security chiplet is used for managing and controlling security configuration of the whole chip system. When a chiplet provided by a supplier cannot be trusted, the secure bus architecture can isolate and restrict access to non-secure chiplets. A bus architecture is realized in a secure active interposer, and the access authority of each small chip in a chip system is configured by a secure small chip, so that the data access of other small chips can be ensured to be controlled, and the system security is enhanced.

The invention relates to a security mode command transmission method and device, electronic equipment, a chip and a medium, and the method comprises the steps: receiving a 5G system non-access layer 5GS NAS message transmitted by network equipment, and the 5GS NAS message carries a security mode command; the initiation purpose of the security mode command is distinguished by combining the security header type of the 5GS NAS message; the security header type comprises integrity protection and encryption; wherein the partial security mode command is subjected to integrity protection and encryption, so that the security of the partial security mode command can be improved, the partial security mode command is prevented from being maliciously attacked, and the security of the NAS message is improved.

The application is a kind of automation testing and application fluency testing method based on control matching, relating to the field of Android end automation testing.The application method comprises: setting a test script containing behavior simulation and fluency determination in advance, reading the corresponding test script after the Android end receives a test command; acquiring interface control structure positioning target control, executing simulation operation; starting timing after each simulation operation, and acquiring all control elements of the current interface when reaching the set time threshold, judging whether the interface is loaded or not in combination with the interface structure information recorded in the fluency determination script; obtaining application fluency determination result according to the interface loading condition at different time thresholds and returning to the server end.The application does not need to acquire ROOT permission, does not need to connect PC end for testing, is safer, is more convenient to use, reduces the adaptation cost, and is higher in testing accuracy and testing speed.

The invention relates to a website data security protection system based on a block chain. The system comprises an access verification module used for verifying a data access request initiated by a user terminal at a proxy re-encryption node based on a distributed account book and an intelligent contract of a block chain to obtain a verification result; the data acquisition module is used for acquiring encrypted website data corresponding to the data access request when the verification result meets a preset condition; the data processing module is used for re-encrypting the encrypted website data through a proxy re-encryption algorithm based on the data access request to obtain new ciphertext data; and the data sending module is used for sending the new ciphertext data to the user terminal, and the data is decrypted based on the user private key to obtain the original website data. According to the system, by utilizing the block chain and proxy re-encryption, the potential safety hazard of a traditional centralized authentication system is avoided, the security of data can be guaranteed, and the transparency and credibility of data access are improved at the same time.

The application provides a railway track traffic control management method and system, and relates to the technical field of railway track traffic control.The method comprises the following steps: establishing a time synchronization network based on a railway NTP protocol; using a colored Petri net model to perform vulnerability state reachability analysis on an NTP protocol authentication process based on a trusted certificate, and judging whether the current protocol has vulnerability; determining a first dynamic key and a second dynamic key according to key parameters of the NTP protocol authentication process; performing verification according to the first dynamic key and the second dynamic key; if the verification is passed, correcting a synchronization time signal; generating a synchronization timestamp for a target train; collecting real-time running parameters; determining a tracking interval time; and generating and issuing a control instruction.According to the application, the running state of the train can be controlled according to the communication security state and the tracking interval time, and the reliability of the real-time running parameters in time and the line utilization rate of the train are improved.

The application discloses a code updating method and device of firmware and electronic equipment. The method comprises the following steps: obtaining a target code package from a first cache area, wherein the first cache area is an area obtained by dividing a storage area of a controller; determining a first position of firmware original code in the first area and a second position corresponding to the first position in a second area; updating the firmware original code in the second area corresponding to the second position based on the target code package; in the case that the firmware original code in the second area is updated, switching to the second position of the second area to continue running and updating the firmware original code in the first area; and in the case that the firmware original code in the first area is updated, switching back to the first area to continue running according to the corresponding position. The application solves the technical problem of low updating reliability when updating the code of the firmware in the related art.

The application discloses a method for verifying a Fabric complex endorsement strategy in cross-chain, wherein the Fabric blockchain first registers an MSP list, a chain code ID and an endorsement strategy description into a cross-chain network, transmits a generated cross-chain transaction to a relay chain, then the relay chain analyzes a transaction execution result and a set of endorsement node signatures, generates an endorsement strategy interpreter, and confirms that the transaction execution result is consistent with the chain code ID registered in the cross-chain network, and if not, the verification fails, and finally the endorsement strategy interpreter verifies the set of signatures. The application can verify a complex endorsement strategy customized by a user, is friendly to a user of the Fabric network, does not need to write a verification strategy by itself, and only needs to submit an endorsement strategy description, and can prevent a user from performing malicious attacks through different chain codes.

One or more embodiments of the present specification provide an identity authentication method and device, the method comprising: obtaining an encryption instruction issued by a server; encrypting the intermediate data obtained in at least one target processing stage of collecting identity authentication images according to the encryption instruction; and sending the collected encrypted identity authentication images to the server so that the server performs identity authentication based on the identity authentication images. During the process of collecting identity authentication images, the generated intermediate data is encrypted according to the encryption instruction issued by the server, and the identity authentication image embedded with the encryption information is sent to the server so that the server extracts the encryption information from the received identity authentication image and performs identity authentication based on the encryption information, thereby preventing malicious attacks on the identity authentication data by illegal elements, thereby ensuring the real-time, authenticity and effectiveness of identity authentication data collection, and improving the security of user account use.

This invention relates to the field of communication technology, specifically providing a data acquisition method, a data receiving method, an apparatus, and a data communication system. The data acquisition method is applied to a data acquisition device in a data communication system. The data acquisition device and the data receiving device in the data communication system are connected through a forward isolation gateway. The data acquisition method includes the following steps: sending a key message to the data receiving device so that the data receiving device can verify the key message; in response to receiving a key verification success byte sent by the data receiving device, acquiring the data to be transmitted; encrypting the data to be transmitted to generate an encrypted data message, and sending it to the data receiving device. Through the above methods, this application can improve the security of data acquisition through a forward isolation gateway.

The invention relates to the technical field of gyroscopes, and discloses an MEMS frequency modulation single-axis gyroscope which comprises a driving mass block and a detection mass block, and further comprises at least one electrostatic frequency modulation assembly, each electrostatic frequency modulation assembly comprises an electrostatic abutting piece, an electrostatic movable pole block and an electrostatic fixed pole plate, the static abutting piece is connected with the driving mass block or the detection mass block, the static movable pole block and the static fixed pole plate are arranged at an interval, and the static fixed pole plate is configured to be selectively electrified so as to change the static attraction force between the static movable pole block and the static fixed pole plate to enable the static movable pole block to abut against the static abutting piece. Therefore, the driving frequency of the MEMS frequency modulation single-axis gyroscope in the driving direction or the detection frequency of the MEMS frequency modulation single-axis gyroscope in the detection direction is changed. According to the MEMS frequency modulation single-axis gyroscope disclosed by the invention, the effect that the working frequency of the gyroscope chip is adjustable is realized, and the problems of poor anti-interference performance and weak safety caused by fixed frequency of the existing gyroscope chip are solved.

The invention discloses a detection and remote control system for AR glasses, and the system comprises an identity recognition module, a remote communication module, a behavior analysis module, an environment monitoring module, a visual enhancement module, an emotion recognition module, a threat recognition and defense module, a flight control module, and an energy management module. Determining whether the personnel in the field are internal personnel authorized by the system or not; the remote communication module is used for completing real-time communication and control between personnel and the system; according to the system, only authorized personnel can access the system through the identity recognition module and the threat recognition and defense module, potential threats can be recognized and dealt with in time, the behavior analysis module can monitor and early warn abnormal behaviors, safety awareness and emergency response capability are improved, encrypted data transmission guarantees information safety, data leakage and hostile attacks are prevented, and the system is safe and reliable. The energy management module prolongs the service time of the equipment through intelligent management and environmental energy collection, and improves the operation efficiency and reliability.

The invention relates to a hybrid cloud platform software version release method, system and device and computer equipment. The method is applied to a block chain network, the block chain network comprises a version issuing master node, version issuing slave nodes, deployment nodes and redundant nodes, and the method comprises the following steps: the version issuing master node receives a to-be-issued version software package sent by a version issuing party; the version issuing main node proposes a software version issuing proposal carrying the version software package based on the version software package to be issued; and the version issuing master node notifies the version issuing slave node, the deployment node and the redundant node to perform consensus verification on the software version issuing proposal, so that the deployment node updates the installed version. By adopting the method, the reliability of hybrid cloud platform software version release can be improved.

The invention provides a railway track traffic control management method and system, and relates to the technical field of railway track traffic control. The method comprises the following steps: establishing a time synchronization network based on an NTP protocol of a railway; carrying out vulnerability state reachability analysis on the NTP protocol authentication process based on the credible certificate by adopting a coloring Petri network model, and judging whether the current protocol has vulnerability or not; determining a first dynamic key and a second dynamic key according to key parameters of an NTP protocol authentication process; performing verification according to the first dynamic key and the second dynamic key; if the verification is passed, correcting a synchronization time signal; generating a synchronization timestamp for the target train; collecting real-time operation parameters; determining a tracking interval time; and generating and issuing a control instruction. According to the invention, the operation condition of the train can be controlled according to the communication safety condition and the tracking interval time, and the reliability of real-time operation parameters in time and the line utilization rate of the train are improved.

The invention discloses an order number generation method based on a user, a commodity, a timestamp and a random four-digit number. The method comprises the following steps: defining input parameters: a user ID; a commodity ID; the timestamp is millisecond-level; four digits are random; an order number generation step: converting the user ID into a character string with a fixed length, and if the length of the user ID is less than a preset length, performing zero padding to the preset length; if the length of the user ID is larger than the preset length, truncation or error reporting processing is carried out; the commodity ID is converted into a character string with a fixed length, and the processing mode is the same as that of the user ID; and acquiring a millisecond-level timestamp of the current system time, and converting the millisecond-level timestamp into a character string format. According to the order number generation method based on the user, the commodity, the timestamp and the random four-digit number, each order number is ensured to be unique in the global range by combining the user ID, the commodity ID, the timestamp accurate to the millisecond level and the random four-digit number.

The present invention relates to an HTTP short message gateway processing method, device, equipment and storage medium. The method: firstly, a short message sending request is verified in multiple dimensions, and then the short message content is reviewed and template matched. Based on the review result, the best sending channel is selected considering multiple factors. Short messages are assigned priorities according to user characteristics and system status, and are placed in a multi-level feedback queue. Billing and quota control are performed based on the short message type, selected channel and user package. Short message information is stored in a distributed cache system, and the sending task is processed through an asynchronous processing queue and a working thread pool, and a failover and intelligent retry mechanism are implemented to ensure efficient and reliable short message sending. The implementation of the present invention can efficiently process a large number of concurrent requests, intelligently select sending channels, flexibly control sending priorities, accurately bill, and has a failover capability HTTP short message gateway processing solution.

The application provides a hybrid blockchain method, system, device and medium based on PoW for distinguishing between large and small transactions, comprising setting a traditional blockchain as a main chain and a DAG type distributed ledger as a DAG auxiliary chain in the system, both of which together constitute a hybrid chain; a preset transaction value threshold; a node selects a main chain consensus or a DAG auxiliary chain to stabilize, publishes a new block or transaction, and lets all nodes accept and reach a consensus with it; the preset weight of each transaction is 1, and two parts including epoch sorting and unit sorting are obtained, the strict sorting of epochs and blocks is obtained through epoch sorting, the strict unit sorting of each epoch is obtained by sorting the units in each epoch according to the height, forward cumulative weight and backward cumulative weight of the units, and the full sorting of transactions of the hybrid blockchain is obtained by integrating the results of unit sorting and epoch sorting; and an efficient and safe payment platform is provided for system users.

The invention provides a service access method, device and system, electronic equipment, a computer readable storage medium and a computer program product, and relates to the technical field of computers. The method comprises the following steps: in response to obtaining a first service request comprising service address information, obtaining a first public route and a first service port matched with the service address information; obtaining a first service provider mapped by the first public route and the first service port; sending a second service request comprising the service address information to the first service providing end; and receiving service data from the first service provider. According to the method, the service acquisition security can be improved.