12results about How to "Prevent unauthorized access" patented technology

The application provides a railway track traffic control management method and system, and relates to the technical field of railway track traffic control.The method comprises the following steps: establishing a time synchronization network based on a railway NTP protocol; using a colored Petri net model to perform vulnerability state reachability analysis on an NTP protocol authentication process based on a trusted certificate, and judging whether the current protocol has vulnerability; determining a first dynamic key and a second dynamic key according to key parameters of the NTP protocol authentication process; performing verification according to the first dynamic key and the second dynamic key; if the verification is passed, correcting a synchronization time signal; generating a synchronization timestamp for a target train; collecting real-time running parameters; determining a tracking interval time; and generating and issuing a control instruction.According to the application, the running state of the train can be controlled according to the communication security state and the tracking interval time, and the reliability of the real-time running parameters in time and the line utilization rate of the train are improved.

This invention discloses a multi-tenant end-to-end data security isolation and control system and method, belonging to the field of vehicle network data security. It aims to solve the problems of easy data crosstalk, discontinuous isolation, unreliable trust benchmarks, and difficulty in compliance traceability in multi-tenant scenarios. The system generates a tenant root identifier (TID) for vehicle enterprise tenants, which, together with the device sub-identifier (DID), forms a tenant identifier chain. This chain is synchronized with a trusted authentication center to establish a vehicle-cloud hardware-level trust root. When the vehicle terminal accesses the system, it completes two-way identity authentication and allocates a dedicated message queue telemetry transmission MQTT topic partition and access permissions according to the TID. The terminal collects time-series vehicle control data and generates encrypted data frames with intrinsic identifiers and checksums for uploading. The access gateway performs dual isolation verification before transparent transmission. Data is forwarded to an independent logical storage partition for isolated storage according to the TID. This invention achieves strong hardware-level isolation, real-time verification, and full traceability throughout the entire end-to-cloud chain, effectively preventing cross-tenant data leakage.

This invention relates to a vehicle-mounted adaptive communication method and system. The method includes: after the vehicle starts, searching for an ad hoc network via the vehicle's in-vehicle communication terminal, sending an access request and accepting authentication, and accessing the ad hoc network after successful authentication; during voice communication via the ad hoc network, collecting environmental data of the vehicle in real time, and predicting the optimal communication channel and transmission power parameters based on the environmental data; using the optimal communication channel and applying the transmission power parameters for voice communication, and monitoring the channel quality of the optimal communication channel during voice communication; when the channel quality does not meet a preset quality threshold, re-determining a new optimal communication channel, switching to the new optimal communication channel, and updating the transmission power parameters to continue voice communication. Using this invention can improve the reliability of in-vehicle communication terminal communication and the clarity of voice calls.

The invention discloses a multi-level access control and crowd search method and system based on trusted hardware, and relates to the technical field of energy power. According to the invention, a multi-level access control mechanism based on trusted hardware is constructed, so that authority isolation between different levels of data such as power generation, power transmission and power utilization and personnel is realized, and unauthorized access to core power data is prevented; the security of a query mode and an access mode is protected through a hidden search technology, and an attacker is prevented from deducing sensitive information such as a power grid operation state and load characteristics by analyzing search behaviors; dynamic authority management is used for blocking the search authority of revoked personnel to the data of the power monitoring system, so that the non-repudiation of data operation and the anonymity of user identity are ensured; mode leakage in a storage access process is eliminated through an ORAM mechanism, a cloud malicious agent is prevented from obtaining key data flow tracks such as a power equipment state and a fault record through flow analysis, and the data protection strength and the privacy guarantee capability of the energy power cloud storage system are comprehensively improved.

The invention provides a memory partitioning method and device, equipment and a storage medium, and relates to the technical field of memories. The memory comprises an irreversible programming storage unit and a main storage unit, and the method comprises the following steps: obtaining user partition configurations respectively corresponding to a plurality of preset user partitions in the irreversible programming storage unit; calculating physical address boundaries of a plurality of storage blocks respectively corresponding to the plurality of user partitions in the main storage unit according to the user partition configuration; acquiring a storage access address; and comparing the storage access address with the physical address boundaries of the plurality of storage blocks, and generating access signals of the plurality of storage blocks. According to the embodiment of the invention, flexible configuration of memory partitions can be realized.

A 3D digital transfer management cloud platform, management method, equipment, and medium include: a project management module for creating new projects and using a directory template to allocate project data uploaded by each participant at each stage to the corresponding directory structure; a deliverables transfer module for performing data quality review and optimization processing on the digital deliverables to be transferred selected in the project management module, and transferring the reviewed and optimized digital deliverables to the digital asset management module; a digital asset management module for receiving digital deliverables from the deliverables transfer module, performing asset coding, classification, and attribute information entry, and storing them in a 3D design general model library; and a data display module for obtaining the transferred models from the digital asset management module, performing 3D model browsing, and model-image linkage. The deliverables transfer module of this application supports data transfer, quality review, and optimization processing to ensure the accuracy, completeness, and usability of the transferred data.

This invention discloses a cross-domain data security interaction protection method integrating trusted computing, belonging to the field of data security technology. The method includes: S1, each node participating in cross-domain data interaction deploys a trusted execution environment (TEA). When the initiating node requests data interaction from the target node, the TEA of the initiating node generates an authentication request. After receiving the authentication request, the target node verifies its validity through its TEA; S2, a secure communication link is constructed through the TEA. For transmitted data, a hybrid encryption strategy is used to encrypt it in the TEA before data interaction; S3, during data usage, data access and operation behaviors are monitored in real time, and an audit log system is established. The audit logs are analyzed periodically to assess the security of cross-domain data interaction. The cross-domain data security interaction protection method integrating trusted computing provided by this invention can better meet the needs of cross-domain data security interaction.

This invention discloses a method, apparatus, program product, and electronic device for processing financial transactions, relating to the field of fintech or other related fields. The method includes: when a user initiates and authorizes a financial transaction on a client, collecting the user's behavioral data; processing the behavioral data using a preset long short-term memory model to obtain a risk level; determining an encryption strategy based on the risk level; encrypting the transaction information using the encryption strategy; retrieving response data from a preset database corresponding to the transaction type in the preset database based on the encrypted transaction information; processing the response data using the encryption strategy; and displaying the processed response data on the client. This invention solves the technical problem of information security in related technologies during financial transaction processing.

The utility model belongs to self -service equipment technical field discloses a kind of self-service coin changer, including machine body, coin receiving module, coin identification module, coin classification module, paper money exchange module and control module. Coin receiving module is used to receive the coin that user inputs, coin identification module is used to identify denomination and authenticity of coin in real time, coin classification module is used to store the coin after identification according to denomination, paper money exchange module is used to exchange coin into paper money according to user demand, and control module is used to coordinate the work of each module and provide user interactive interface. The utility model realizes the quick, accurate exchange of coin by integrating high-precision identification technology and automatic exchange mechanism, compact structure, easy operation, applicable to bank, shopping mall and other places, significantly improve the efficiency and user experience of coin processing.

The present application relates to the technical field of privacy computing, and specifically provides a distributed multi-party asynchronous isolated secure retrieval method and device, wherein a shared network is formed by a data retrieval initiator and a data owner using a front-end machine cluster node, retrieval business is completed based on a front-end machine TEE (Trusted Execution Environment) and a hidden query method; a permission control unit is configured on remote authentication permission control of the TEE, permission monitoring at an instruction level is realized, and through sensitive data desensitization, open data and ciphertext query data confusion, query initiator anonymization and query condition fuzzification, query intention request collection, it is ensured that the entire life cycle of data query and statistical operation is carried out in a trusted isolated environment, and the security and privacy protection of data are strengthened. Compared with the prior art, the present application effectively prevents malicious operation and illegal access, thereby ensuring the security and privacy protection of data.

A multimedia audio source box supporting multiple network connection methods includes a main control chip, a wired network interface, a wireless network module, a memory storage module, a multimedia processing unit, and a power management module. The main control chip is connected to the wired network interface, the wireless network module, the memory storage module, the multimedia processing unit, and the power management module. It also includes a network connection management module, a network configuration protocol processing module, a security authentication module, and a network configuration state machine, all connected to the main control chip. These modules synchronize information with each other. This multimedia audio source box enables intelligent switching between multiple network configuration modes, improving network configuration success rate and efficiency. Its network configuration method simplifies the configuration process, enhancing the convenience and user experience of configuring equipment.

The utility model relates to an automatic change-over switch remote monitoring system, comprising a plurality of automatic change-over switches used for automatically switching between a main power supply and a standby power supply and providing two paths of power supply state signals; the plurality of acquisition devices are used for acquiring and uploading the power supply state of the automatic change-over switch; the remote server comprises a data analysis module, a data storage module, a data analysis module, an alarm processing module and a data calling API (Application Program Interface) module, and is used for analyzing, analyzing and storing the data uploaded by the acquisition equipment, and sending an alarm notice and providing a data calling API when monitoring that the state of the automatic change-over switch is abnormal; and the display equipment is used for displaying the monitoring data of the automatic change-over switch provided by the remote server to operation and maintenance personnel. The automatic change-over switch remote monitoring system provided by the utility model can realize remote centralized monitoring management of multiple devices and multiple stations with low cost and low risk.