29results about How to "Prevent unauthorized access" patented technology

The invention discloses a remote data management platform for security operation and maintenance service, and belongs to the technical field of computer network security and data operation and maintenance management. The platform comprises a data acquisition module, an access control module, a remote operation and maintenance control module, a data isolation and encryption module, a security auditing and tracing module, an intelligent risk identification module, a strategy decision engine and a visual management interface module. The system adopts a layered deployment architecture, and realizes multi-layer protection, dynamic strategy adjustment and traceable auditing of the whole remote operation and maintenance process through encryption transmission, block chain type log chain, deep learning risk identification and knowledge graph strategy optimization. The platform has the functions of multi-factor authentication, log chain tampering prevention, intelligent risk early warning and strategy self-learning, can effectively prevent unauthorized access and data leakage, improves the safety, intelligence and verifiability of remote operation and maintenance, and is suitable for multi-scene safety operation and maintenance management of medical treatment, energy, government affairs, industrial control and the like.

The invention relates to a structured query statement generation method and device, equipment, a medium and a product. The method comprises the following steps: receiving a data query demand described by a natural language and user permission information associated with the data query demand; generating a first security constraint condition based on the data query demand; the first security constraint condition is used for constraining field selection and structural integrity in a structured query statement to be generated; generating a second security constraint condition based on the user permission information; the second security constraint condition is used for constraining a data query range in the to-be-generated structured query statement; calling a trained large language model, and generating an original structured query statement based on the data query demand; and generating a target structured query statement in combination with the first security constraint condition, the second security constraint condition and the original structured query statement. By adopting the method, the data security can be improved.

The invention discloses a dual-core heterogeneous isolation anti-cheating system oriented to a metering task and an implementation method. The system comprises a trusted processing core which is responsible for functions of hardware trust root management, program legality authentication, peripheral management and control, resource access authorization and the like and is completely isolated from a metering service core; all external interactions are carried out through the trusted processing core, so that the security is ensured; the metering service core focuses on executing specific tasks and efficiently processing data; the secure storage area is only accessed by the trusted processing core to protect the security of key information; the business storage area is used for storing an operation program and temporary data of the metering business core and supporting update after verification; the lightweight interaction mechanism ensures that the metering service core interacts with the trusted processing core through the trusted channel via the information carrying the specific identifier when the peripheral needs to be accessed or the interrupt needs to be processed. By implementing the method provided by the invention, not only can comprehensive management and control on peripherals, whole-process encryption on data and whole-process recording on operation behaviors be realized, but also the metering safety and the system efficiency can be effectively balanced.

The application provides a railway track traffic control management method and system, and relates to the technical field of railway track traffic control.The method comprises the following steps: establishing a time synchronization network based on a railway NTP protocol; using a colored Petri net model to perform vulnerability state reachability analysis on an NTP protocol authentication process based on a trusted certificate, and judging whether the current protocol has vulnerability; determining a first dynamic key and a second dynamic key according to key parameters of the NTP protocol authentication process; performing verification according to the first dynamic key and the second dynamic key; if the verification is passed, correcting a synchronization time signal; generating a synchronization timestamp for a target train; collecting real-time running parameters; determining a tracking interval time; and generating and issuing a control instruction.According to the application, the running state of the train can be controlled according to the communication security state and the tracking interval time, and the reliability of the real-time running parameters in time and the line utilization rate of the train are improved.

This invention provides a multi-Bot compliant routing method and system based on organizational permission graph constraints, relating to the field of artificial intelligence technology. This invention quantifies the permission association between user identity, current role, and Bot into a comprehensive permission strength, and ensures, through a permission threshold pre-screening mechanism, that only Bots within the user's permission range participate in intent matching. This effectively avoids the risks of unauthorized access and data leakage caused by not considering user role permission boundaries. Furthermore, through a two-stage routing strategy of first filtering permissions and then matching intent, it achieves secure, compliant, and efficient Bot routing decisions without exposing the underlying permission configuration details.

This invention discloses a multi-tenant end-to-end data security isolation and control system and method, belonging to the field of vehicle network data security. It aims to solve the problems of easy data crosstalk, discontinuous isolation, unreliable trust benchmarks, and difficulty in compliance traceability in multi-tenant scenarios. The system generates a tenant root identifier (TID) for vehicle enterprise tenants, which, together with the device sub-identifier (DID), forms a tenant identifier chain. This chain is synchronized with a trusted authentication center to establish a vehicle-cloud hardware-level trust root. When the vehicle terminal accesses the system, it completes two-way identity authentication and allocates a dedicated message queue telemetry transmission MQTT topic partition and access permissions according to the TID. The terminal collects time-series vehicle control data and generates encrypted data frames with intrinsic identifiers and checksums for uploading. The access gateway performs dual isolation verification before transparent transmission. Data is forwarded to an independent logical storage partition for isolated storage according to the TID. This invention achieves strong hardware-level isolation, real-time verification, and full traceability throughout the entire end-to-cloud chain, effectively preventing cross-tenant data leakage.

The invention provides an AI identity identification and access control method and system, and the method comprises the steps: obtaining an AI identity identification of a current process which initiates a system call as a first AI identity identification in response to the system call received by an operating system kernel; determining a target entity and an AI identity label of the target entity according to the type of the system call, wherein the AI identity label of the target entity is used as a second AI identity label; based on the first AI identity identifier and the second AI identity identifier, executing access control check in a kernel event processing path to judge the permission of executing the system call on the target entity by the current process, and generating an access control check result; when the access control check result is that the system call is passed, the system call is allowed to continue to be executed, and when the access control check result is that the system call is not passed, the system call is prevented from being executed.

This invention relates to a vehicle-mounted adaptive communication method and system. The method includes: after the vehicle starts, searching for an ad hoc network via the vehicle's in-vehicle communication terminal, sending an access request and accepting authentication, and accessing the ad hoc network after successful authentication; during voice communication via the ad hoc network, collecting environmental data of the vehicle in real time, and predicting the optimal communication channel and transmission power parameters based on the environmental data; using the optimal communication channel and applying the transmission power parameters for voice communication, and monitoring the channel quality of the optimal communication channel during voice communication; when the channel quality does not meet a preset quality threshold, re-determining a new optimal communication channel, switching to the new optimal communication channel, and updating the transmission power parameters to continue voice communication. Using this invention can improve the reliability of in-vehicle communication terminal communication and the clarity of voice calls.

The invention discloses a multi-level access control and crowd search method and system based on trusted hardware, and relates to the technical field of energy power. According to the invention, a multi-level access control mechanism based on trusted hardware is constructed, so that authority isolation between different levels of data such as power generation, power transmission and power utilization and personnel is realized, and unauthorized access to core power data is prevented; the security of a query mode and an access mode is protected through a hidden search technology, and an attacker is prevented from deducing sensitive information such as a power grid operation state and load characteristics by analyzing search behaviors; dynamic authority management is used for blocking the search authority of revoked personnel to the data of the power monitoring system, so that the non-repudiation of data operation and the anonymity of user identity are ensured; mode leakage in a storage access process is eliminated through an ORAM mechanism, a cloud malicious agent is prevented from obtaining key data flow tracks such as a power equipment state and a fault record through flow analysis, and the data protection strength and the privacy guarantee capability of the energy power cloud storage system are comprehensively improved.

The invention provides a memory partitioning method and device, equipment and a storage medium, and relates to the technical field of memories. The memory comprises an irreversible programming storage unit and a main storage unit, and the method comprises the following steps: obtaining user partition configurations respectively corresponding to a plurality of preset user partitions in the irreversible programming storage unit; calculating physical address boundaries of a plurality of storage blocks respectively corresponding to the plurality of user partitions in the main storage unit according to the user partition configuration; acquiring a storage access address; and comparing the storage access address with the physical address boundaries of the plurality of storage blocks, and generating access signals of the plurality of storage blocks. According to the embodiment of the invention, flexible configuration of memory partitions can be realized.

The application provides a data leak prevention method and system, applied to the technical field of data processing, and the method comprises the following steps: obtaining accounts receivable data in static data; obtaining a collection action track corresponding to a collection record in the accounts receivable data; generating a current arrears state corresponding to the accounts receivable data based on the collection action track and a repayment record corresponding to the accounts receivable data; generating to-be-encrypted data corresponding to the accounts receivable data based on the accounts receivable data, the current arrears state corresponding to the accounts receivable data and an effective track in the collection action track; and performing encryption processing on the to-be-encrypted data corresponding to the accounts receivable data to generate encrypted data of the accounts receivable data. The method can guarantee the availability of the accounts receivable data, effectively prevent data tampering, denial and unauthorized access, and significantly improve the confidentiality, integrity and compliance control ability of sensitive information of the accounts receivable.

A 3D digital transfer management cloud platform, management method, equipment, and medium include: a project management module for creating new projects and using a directory template to allocate project data uploaded by each participant at each stage to the corresponding directory structure; a deliverables transfer module for performing data quality review and optimization processing on the digital deliverables to be transferred selected in the project management module, and transferring the reviewed and optimized digital deliverables to the digital asset management module; a digital asset management module for receiving digital deliverables from the deliverables transfer module, performing asset coding, classification, and attribute information entry, and storing them in a 3D design general model library; and a data display module for obtaining the transferred models from the digital asset management module, performing 3D model browsing, and model-image linkage. The deliverables transfer module of this application supports data transfer, quality review, and optimization processing to ensure the accuracy, completeness, and usability of the transferred data.

The invention relates to a multi-role data access control system for industrial collaboration, and discloses a strategy generation mechanism driven by a main body relation collaboration graph and a collaboration contract, a joint judgment model and a unified executable constraint packet and multi-execution-point forcing mechanism. And the multi-role data access control system realizes fine control on business data, report data, process data, interface calling and log data. The system is characterized by comprising a main body and identity module, a resource registration and object modeling module, a collaborative contract and strategy instance module, a strategy and control module, a process linkage and life cycle module and a full-link audit and evidence storage module, and a collaborative relation graph between the main body and the resource entity is constructed, and the resource registration and object modeling module outputs a structured resource object.

The application provides a structured information layered digital content access management method, and relates to the technical field of data processing.The method comprises the following steps: step 1, scanning a media file directory, identifying an index file carrying a preset brand logo, extracting a storage path attribute and a logo visual feature of the index file, and obtaining an entry identification data set; step 2, based on the entry identification data set, combining a user permission level and a device display parameter, calculating a content level weight distribution value, and storing layered metadata containing the weight distribution value through a blockchain to obtain an initial content tree structure.The application realizes the accurate, safe and standardized management of digital content access through the whole-process structured layered management and the combination of the blockchain storage, and improves the efficiency of digital content management and the copyright protection strength.

This invention discloses a cross-domain data security interaction protection method integrating trusted computing, belonging to the field of data security technology. The method includes: S1, each node participating in cross-domain data interaction deploys a trusted execution environment (TEA). When the initiating node requests data interaction from the target node, the TEA of the initiating node generates an authentication request. After receiving the authentication request, the target node verifies its validity through its TEA; S2, a secure communication link is constructed through the TEA. For transmitted data, a hybrid encryption strategy is used to encrypt it in the TEA before data interaction; S3, during data usage, data access and operation behaviors are monitored in real time, and an audit log system is established. The audit logs are analyzed periodically to assess the security of cross-domain data interaction. The cross-domain data security interaction protection method integrating trusted computing provided by this invention can better meet the needs of cross-domain data security interaction.

The present application relates to a kind of attribute access control methods of supporting time-limited access, attribute dynamic management and strategy update, belong to information security technical field.The method includes: setting attribute authorization center, cloud server, data owner and data user four entities;Attribute authorization center generates data user key using system public key, master key and the attribute list of data user, then introduces timestamp coding parameter, chameleon hash parameter and attribute list associated random parameter;Data owner encrypts plaintext data, obtains intermediate ciphertext and embeds chameleon hash value, and cloud server re-encrypts intermediate ciphertext, obtains final ciphertext;Data user that meets decryption condition executes decryption operation to final ciphertext using data user key, obtains plaintext data.The purpose is to solve the technical problems that technology cannot support flexible addition, revocation, dynamic adjustment of access strategy and time-limited access control of attribute and key.

The application discloses a UAV chip sensitive data access control method based on a trusted execution environment, relates to the technical field of UAV safety, and comprises the following steps: after a trusted execution environment is configured for a UAV, it is detected whether data encryption is performed on the UAV chip; if data encryption is performed, real-time confusion processing is performed on the power consumption, electromagnetic signals and execution time of the UAV chip; the trusted execution environment isolates the processing space of sensitive data from a logical level to prevent unauthorized access; the real-time confusion processing dynamically interferes with the core physical features of side channel attacks, so that an attacker cannot deduce an encryption key or algorithm logic by monitoring the physical signals of the chip; and the synergistic effect of the power consumption, electromagnetic signals and execution time makes the chip present highly unpredictable physical features in the encryption process, significantly improves the difficulty of side channel attacks, and provides multi-level protection for the safe processing of sensitive data of the UAV.

The invention provides a railway track traffic control management method and system, and relates to the technical field of railway track traffic control. The method comprises the following steps: establishing a time synchronization network based on an NTP protocol of a railway; carrying out vulnerability state reachability analysis on the NTP protocol authentication process based on the credible certificate by adopting a coloring Petri network model, and judging whether the current protocol has vulnerability or not; determining a first dynamic key and a second dynamic key according to key parameters of an NTP protocol authentication process; performing verification according to the first dynamic key and the second dynamic key; if the verification is passed, correcting a synchronization time signal; generating a synchronization timestamp for the target train; collecting real-time operation parameters; determining a tracking interval time; and generating and issuing a control instruction. According to the invention, the operation condition of the train can be controlled according to the communication safety condition and the tracking interval time, and the reliability of real-time operation parameters in time and the line utilization rate of the train are improved.

Embodiments of the present disclosure disclose a data processing method and device, electronic equipment, storage medium and program product. The method comprises: receiving a data processing text input by a first user; performing parameter analysis on the data processing text to obtain a processing logic parameter and a business scope parameter; constructing a target prompt word according to the processing logic parameter, inputting the target prompt word into a data processing model to obtain a tool calling instruction; generating an executable target query statement according to the tool calling instruction and the business scope parameter, executing the target query statement to determine a target processing result corresponding to the data processing text, and returning the target processing result as feedback information. The technical solution realizes accurate analysis and structured conversion of user data processing requirements; and by isolating sensitive data and accurately controlling data access permissions, data leakage and unauthorized access are effectively prevented, resource consumption is reduced, and the accuracy, security and compliance of data processing are ensured.

This invention discloses a method, apparatus, program product, and electronic device for processing financial transactions, relating to the field of fintech or other related fields. The method includes: when a user initiates and authorizes a financial transaction on a client, collecting the user's behavioral data; processing the behavioral data using a preset long short-term memory model to obtain a risk level; determining an encryption strategy based on the risk level; encrypting the transaction information using the encryption strategy; retrieving response data from a preset database corresponding to the transaction type in the preset database based on the encrypted transaction information; processing the response data using the encryption strategy; and displaying the processed response data on the client. This invention solves the technical problem of information security in related technologies during financial transaction processing.

The utility model belongs to self -service equipment technical field discloses a kind of self-service coin changer, including machine body, coin receiving module, coin identification module, coin classification module, paper money exchange module and control module. Coin receiving module is used to receive the coin that user inputs, coin identification module is used to identify denomination and authenticity of coin in real time, coin classification module is used to store the coin after identification according to denomination, paper money exchange module is used to exchange coin into paper money according to user demand, and control module is used to coordinate the work of each module and provide user interactive interface. The utility model realizes the quick, accurate exchange of coin by integrating high-precision identification technology and automatic exchange mechanism, compact structure, easy operation, applicable to bank, shopping mall and other places, significantly improve the efficiency and user experience of coin processing.

This invention discloses a method for transparent and secure sensitive data transmission based on white-box cryptography. The method involves: a user with appropriate permissions issuing a query request; an SQL agent deployed on a cloud service using a transparent protocol to parse and obtain the user's query request and send the proxy statement to the database, retrieving the corresponding query content from the database; for ordinary query requests, a random obfuscation encryption method based on white-box cryptography is used to encrypt and de-identify the query content, resulting in de-identified data being returned to the user; for advanced query requests, a sequence or format preservation encryption method based on white-box cryptography is used to encrypt and de-identify the query content; after obtaining the de-identified data, an external encoding module is used for external encoding to obtain de-identified data with external encoding, which is then input into an external decoding module and a white-box cryptography decryption module for decoding and decryption, resulting in the query content being returned to the user. This method enables transparent and secure data transmission, preventing the leakage of sensitive data.

This invention proposes an access authentication method that binds switch ports to hosts, addressing the challenges of server-side port verification and high management complexity when multiple clients access the network. This method aggregates switch port information (switch identifier + port number) into logical users and binds them to client certificates for unified authentication. Clients can obtain current port information via a link-layer discovery protocol and submit authentication requests in the form of "switch identifier - port number." The authentication server verifies the connection based on stored port information, logical users, and certificate public keys. If the connection port does not match the binding relationship, access is rejected. The authentication request includes the MAC address of the first connected switch to prevent switch spoofing. This technology effectively improves authentication security and flexibility. When network configuration changes, only the binding relationship needs to be updated on the server side, without modifying client configurations, thus significantly reducing the management burden.

The invention relates to the technical field of electric power communication security, and discloses a security data transmission system and method for an unmanned aerial vehicle nest and an electric power intranet, and the system comprises an unmanned aerial vehicle terminal, an unmanned aerial vehicle nest with a built-in electric power security Internet of Things card, a security access platform constructed based on a national secret algorithm, and an electric power intranet unmanned aerial vehicle management and control platform. The method comprises the steps that the unmanned aerial vehicle terminal collects data and uploads the data to the unmanned aerial vehicle nest, the unmanned aerial vehicle nest triggers the electric power security Internet of Things card to encrypt the data and transmits the data to the security access platform through the special APN, and after identity authentication, decryption, abnormity monitoring and permission verification, the data are securely accessed to the intranet management and control platform. According to the invention, the special APN isolation public network is adopted, and the national cryptographic algorithm full-process encryption and the main and standby dual-card redundancy design are combined, so that the security risk of the public network is blocked, the transmission stability is ensured, the power intranet access specification is adapted, and the inspection efficiency is improved.

The present application relates to the technical field of privacy computing, and specifically provides a distributed multi-party asynchronous isolated secure retrieval method and device, wherein a shared network is formed by a data retrieval initiator and a data owner using a front-end machine cluster node, retrieval business is completed based on a front-end machine TEE (Trusted Execution Environment) and a hidden query method; a permission control unit is configured on remote authentication permission control of the TEE, permission monitoring at an instruction level is realized, and through sensitive data desensitization, open data and ciphertext query data confusion, query initiator anonymization and query condition fuzzification, query intention request collection, it is ensured that the entire life cycle of data query and statistical operation is carried out in a trusted isolated environment, and the security and privacy protection of data are strengthened. Compared with the prior art, the present application effectively prevents malicious operation and illegal access, thereby ensuring the security and privacy protection of data.

The invention discloses a cluster file downloading management method and device, a storage medium and electronic equipment. The method comprises the steps that when it is detected that a user has a corresponding file downloading permission, a target cluster and a namespace selected by the user are determined, and path information of a file in a target container is inquired and returned based on the target cluster and the namespace; generating a file display list according to the path information of the files in the target container; detecting the permission level of the user and the file size of the target file under the condition that the downloading instruction is detected, and executing the downloading operation under the condition that the permission level of the user meets the permission level limiting condition set by the target file and the file size of the target file does not exceed the upper limit threshold value of the external file. And downloading the target file from the target cluster according to the file path corresponding to the target file and forwarding the target file to the browser. The technical problems of low information security and poor interactivity when a user downloads a file from a cluster in the prior art are solved.

The invention is suitable for the technical field of data synchronization, and provides a cross-terminal collaborative paperless conference office document real-time synchronization system, which comprises a host end, conference participating ends and an authority management end, the host end comprises a key dynamic generation module, a document segmentation encryption module and a data packet distribution module; the conference participating end comprises a permission dynamic generation module and a document decryption and reading module; and the authority management end is used for monitoring the authority level change event of the conference participating end in real time, and updating the dynamic session key packet and the authority token in real time according to the authority level change event of the conference participating end. According to the invention, through a dual encryption binding mechanism and content fragmentation encryption transmission, the transmission and storage security of document synchronization is obviously improved; according to the method, the authority token is generated in combination with the identity information of the current participating end user, dynamic binding of the user identity and document access is achieved, and unauthorized access behaviors such as equipment borrowing, account sharing or login state hijacking of the participating end can be effectively prevented.

A multimedia audio source box supporting multiple network connection methods includes a main control chip, a wired network interface, a wireless network module, a memory storage module, a multimedia processing unit, and a power management module. The main control chip is connected to the wired network interface, the wireless network module, the memory storage module, the multimedia processing unit, and the power management module. It also includes a network connection management module, a network configuration protocol processing module, a security authentication module, and a network configuration state machine, all connected to the main control chip. These modules synchronize information with each other. This multimedia audio source box enables intelligent switching between multiple network configuration modes, improving network configuration success rate and efficiency. Its network configuration method simplifies the configuration process, enhancing the convenience and user experience of configuring equipment.

The utility model relates to an automatic change-over switch remote monitoring system, comprising a plurality of automatic change-over switches used for automatically switching between a main power supply and a standby power supply and providing two paths of power supply state signals; the plurality of acquisition devices are used for acquiring and uploading the power supply state of the automatic change-over switch; the remote server comprises a data analysis module, a data storage module, a data analysis module, an alarm processing module and a data calling API (Application Program Interface) module, and is used for analyzing, analyzing and storing the data uploaded by the acquisition equipment, and sending an alarm notice and providing a data calling API when monitoring that the state of the automatic change-over switch is abnormal; and the display equipment is used for displaying the monitoring data of the automatic change-over switch provided by the remote server to operation and maintenance personnel. The automatic change-over switch remote monitoring system provided by the utility model can realize remote centralized monitoring management of multiple devices and multiple stations with low cost and low risk.