94results about How to "Protect data security" patented technology

A multi-network exchange system has a first type network (PSTN) and a second type network (Internet) and a multi-network exchange bridge in communication with the first and second type networks for the transfer of electronic information signals (telephone calls) between the first and second type networks. The multi-network exchange bridge apparatus facilitates transfer of electronic information signals to a portable access device or a gateway portal in communication with a node of one of second type networks from the first network. The multi-network exchange bridge has at least one multi-network instantiation device that enables the portable access device to function as a remote extension of the multi-network exchange bridge. A fixed address translation device provides conversion of a first address fixedly describing a node of the first type network to a second address or third address virtually describing nodes of the second type network

The invention discloses an intelligent household appliance remote control method based on a PKI system, which relates to the field of remote control of intelligent household appliances. The method comprises the steps that: firstly, a to-be-controlled intelligent household appliance is subjected to personalized setting; the intelligent household appliance decrypts ciphertext data sent by a control terminal and further accesses a wireless local area network; under coordination of a cloud server, and by taking a device certificate as a root of trust, a binding relation between the control terminal and the intelligent household appliance is established; and finally, the intelligent household appliance is controlled through the control terminal. In the intelligent household appliance remote control method based on the PKI system, functions, such as network identity recognition, network communication secrecy keeping, communication data tampering prevention and communication subject non-repudiation, are realized through a PKI key system technology, the data used in a communication process are all transmitted in a ciphertext mode, security of the data is guaranteed by strength of an encryption algorithm used, thus, problems, such as tampering of the communication data and information leakage, are avoided, and various security risks in the existing intelligent household appliance remote control method are solved.

The invention relates to the technical field of alliance chain technology and electronic medical data security sharing, and discloses a medical data security sharing system and method based on IPFS and alliance chains, and the system comprises a data owner terminal which is used for encrypting original medical data through employing a symmetric secret key to obtain a medical data ciphertext, storing the medical data ciphertext in the IPFS, and transmitting the medical data ciphertext to a server; the ciphertext corresponding to the keyword and the ciphertext corresponding to the symmetric keyare uploaded to an alliance chain, and an excitation mechanism and a data access permission are set in the smart contract; and a data visitor terminal is used for obtaining the symmetric key corresponding to the target medical data and decrypting the target medical data based on the symmetric key corresponding to the target medical data and the hash address stored in the target medical data when the data access permission set in the smart contract is satisfied and the incentive cost shown by the incentive mechanism is paid. According to the invention, safe storage and sharing of medical data are realized, privacy security of patients is protected, and fine-grained access control of the patients to the medical data is realized.

The invention relates to a method and a system for resisting ransomware attacks based on a host honeypot. The method comprises steps of: 1) building a host honeypot environment in a host group; 2) generating and deploying a honey bait file in the host honeypot, and recording the initial file type and the entropy value state thereof; 3) monitoring the remote login state of the host honeypot, and notifying the host honeypot to start a real-time monitoring behavior, when the system detects that a remote login operation occurs; 4) monitoring the file type and the entropy value information of the honey bait file, and determining ransomware attacks when both the file type and the entropy value have abnormal changes; 5) collecting the traceable information of an attacker host, when the host honeypot detects the ransomware attacks; and 6) sending traceable information of the collected attacker host to a secure host as a traceable clue. According to the method and the system for resisting ransomware attacks based on the host honeypot, the method and the system can protect the data and property security of users and enterprises, by deceiving attackers and defending against ransomware attacksunder conditions of a low consumption and a zero loss.

The embodiment of the invention provides a single sign-on method, server and client. In the embodiment of the invention, the method comprises the following steps: determining that application resources on which a user of a client requests to sign received by a server side exist in a list of bound single sign-on information recorded in a database; encrypting single sign-on information of the user by a first key through an SM4 algorithm to form a first ciphertext; encrypting the first key with a second key to form a second ciphertext; splicing the first ciphertext and the second ciphertext, and processing a spliced ciphertext through an SM3 algorithm to form a single sign-on ciphertext; and transmitting the application resources requested by the user of the client and the single sign-on ciphertext to the client. Through adoption of the single sign-on method, server and client, data security is protected through a GMB algorithm; the identity of the user is identified by taking a digital certificate as a carrier; uniform authentication is realized; a plurality of independent application systems can be used in single sign-on; and the user experience is improved.

The invention relates to the technical field of block chains, and discloses a medical data sharing system based on an IPFS (Internet Protocol File System) and an alliance chain, which comprises a block chain system configured with block chain core service modules and respectively used as peers to organize and form the block chain system, in hospitals and data service companies, ACC and ISC are configured; the patient client is used for sharing the medical data of the patient in the ACC and setting the access permission and incentive cost corresponding to the medical data when accessing the blockchain core service module configured in the hospital; and the data user client is used for querying the target medical data and the corresponding access permission through the ACC when accessing theblockchain core service module configured by the data service company. According to the invention, safe storage and sharing of medical data and authorization management in the sharing process are realized.

The invention discloses a ciphertext multi-keyword grading security retrieval method. A ciphertext file set and indexes uploaded by a data owner in a cloud storage server are subjected to grading retrieval. A data user sends a retrieval request to generate a trap door vector; the data owner enables the trap door vector to form a security trap door vector by using a homomorphic encryption algorithmand uploads the security trap door vector to the cloud storage server; the authorized data user can obtain a decryption key and calculate a ciphertext of a trap door and a security index inner product for the cloud storage server; an encrypted correlation score sequence is returned and is decrypted and sorted; first k file identifiers with highest correlation scores are selected to be sent to thecloud storage server; and finally most correlated files are returned to the data user through the cloud storage server. According to the method, the problem of user privacy and data security in a cloud environment is solved; the communication overhead is reduced; and the ciphertext retrieval problem is solved.

The invention provides an exception monitoring method and device for data access and a storage medium. The method comprises the steps of receiving a data access request for a target employee, whereinthe data access request is used for requesting to access target resource data corresponding to a target service in an enterprise management system; based on the data access request, access informationincluding an access permission bit is determined, and the access permission bit is used for identifying an access permission corresponding to the target resource data; predicting a job role of the target employee through a role classification model based on the access information; obtaining a job role of the target employee in the enterprise management system; matching the predicted job role withthe job role of the target employee in the enterprise management system to obtain a matching result; and when the matching result represents that the predicted job role is different from the job roleof the target employee in the enterprise management system, returning prompt information of refusing the data access request. According to the invention, the accuracy of exception monitoring of dataaccess can be improved.

The invention provides a method and device for controlling the application calls. The method includes that when call operation between at least two applications is monitored, whether the called applications are on the predetermined isolation application white list is judged. The predetermined isolation application white list is applied to stored applications required isolation. If the called applications are on the predetermined isolation application white list, authentication undergoes to the application that initiates calls in the call operation according to the predetermined verification list. If the application that initiates calls in the call operation fails the authentication, the call operations between at least two applications are prohibited. The technical scheme of the method and device for controlling the application calls prevents malicious applications from intercepting the call operation and coverage displays the self-designing malicious user interface on the top of the application's interface based on the call operation to cheat the user and therefore the purpose of stealing the user's property data and private data is achieved.

The invention relates to relates to the technical field of information safety, specifically to a method for completely removing original information on a smart phone. The method includes a control terminal, a server and a smart phone. The control terminal accesses the server to completely remove information on the smart phone. Through the method, a smart phone can quickly be located and searched to conveniently delete the user's information on the smart phone, thereby protecting the personal privacy and the data security, and preventing information leakage.

The disclosure provides a method and device for detecting an account usage behavior, wherein the method comprises the following steps: detecting whether a usage behavior of multiple login times of a target account belongs to a continuous login behavior; if the usage behavior does not belong to the continuous login behavior, acquiring login feature parameters corresponding to the usage behavior; and determining, according to the login feature parameters, whether the usage behavior belongs to a target usage behavior of multiple users using the same account at different time periods. The disclosure can more accurately and efficiently detect whether there is a target usage behavior of multiple target users in the data sharing exchange platform using the same account at different time periods,thereby better protecting account security and data security.

Belonging to the technical field of aircrafts, especially to the multi-rotor unmanned aerial vehicle field, the invention relates to a multi-rotor unmanned aerial vehicle carbon tube damping and shock absorption undercarriage, and aims to provide an undercarriage that can optimize multi-rotor unmanned aerial vehicle landing action by a pure mechanical way, correct abnormal landing state, protect whole vehicle and internal data security, and reduce the crash smashing risk. The undercarriage comprises a retracting mechanism, a shaft end, a damping shock absorber, a socket end, and a rubber protective pad. The damping shock absorber is mounted between the shaft end and the socket end, and is mounted in the socket end. The rubber protective pad is fixed at the socket end bottom, and the rubber protective pad can be directly mounted to and disassembled from the socket end in an interference fit way. And the damping shock absorber adopts pneumatic bumper. The undercarriage provided by the invention can absorb the moment pneumatic kinergety generated during unmanned aerial vehicle landing, realizes soft landing of each landing, and prolongs the service life of the whole vehicle.

The invention discloses a continuous authentication method and system based on biological characteristics and a system thereof. The method comprises the following steps: A, fingerprint information ofa user is collected through a fingerprint collector on a mouse every other first preset time; B, when the fingerprint information of the user is not collected, collecting user face information througha face collector at an interval of second preset time; and C, when the collected fingerprint information is invalid fingerprint information or the face information is not collected or the collected face information is invalid face information, locking the computer. Continuous authentication is carried out in a comprehensive authentication mode that fingerprint authentication is mainly carried outand fingerprint authentication and face authentication are combined, the computer is locked after authentication fails, safety can be achieved, and user privacy and data safety are protected.

The invention relates to a secret key level-to-level management method and device for federated learning and privacy calculation. In various applications in the technical fields of federated learning and privacy computing, the method and the device prevent the secret key from being leaked and overcome the problem of secret key loss caused by factors such as restart, meanwhile, various feasible external resources can be utilized, data security and privacy information can be protected, cost is reduced, and deployment time is shortened.

The invention relates to a multilevel locking and multilevel unlocking method for a mobile device. The method comprises the following specific steps: (1) multistage locking: a user presetting a locking level of a system, a system-level password, a starting password of each application and an application list requiring to use the starting password under each locking level, wherein the different locking levels are corresponding to different system-level passwords and the application list requiring using the starting password; (2) multilevel deciphering: 1) when the user inputs the password to power on the mobile device or unlock the screen, the system acquiring the password input by the user; 2) judging whether the input password is any one of the power-on password or the screen-locking password, if so, judging the locking level, and notifying all applications on the mobile device, judging whether the starting password requires to use. Through the adoption of the method provided by the invention, the data security of the mobile terminal under special scene can be protected, the specific scene is mainly the scenes that the mobile device is lent to friends and strangers or the mobile device is lost.

The invention discloses an image transmission method, device and terminal device. The method comprises: generating and outputting transmit confirmation requiry according to the image to be transmitted; attaching a lag to the image when detecting the user has made a transmit confirmation operation according to the transmit confirmation requiry; confirming the image; transmitting image via network from the terminal device on the premise of that the image is verified; wherein the transmit confirmation requiry is used for inquiring the user to confirm if the image can be transmitted, the transmit confirmation operation is executed by user, with predetermined style and on the terminal device, in response to transmit confirmation requiry. The image transmission method ,device and terminal device of the invention can ensure that the image transmitted from the terminal device is consented to transmit by the user, thereby preventing unauthorized photographing or stealing from the terminal device and invasion of privacy of the user, effectively protecting data safety of the user.

The invention relates to an application method for budget management software. The application method comprises the steps that (1) a software login program is started to enter a login interface, and login permissions are selected for login to enter the program, wherein the login permissions comprise the budgeter permissions, the budget dedicated permissions and the reading permissions; (2) after login is successful, a main page is entered, wherein the main page is divided into a static menu bar and a dynamic menu bar; (3) according to different execution tasks, a static menu is opened to enter a second-level menu, and according to different execution tasks, the static menu bar is opened to enter the second-level menu to further select execution tasks of a dynamic menu, wherein the static menu contains budge reporting, payment budgets, query printing and statements; (4) furthermore, according to different execution tasks, the second-level menu is opened to enter a three-level menu, wherein the three-level menu contains a budget application at the year beginning, a monthly budget application, a monthly budget payment, a viewing option and a printing option; (5) according to an option system of task execution, budget data are automatically budgeted and summarized.

The invention discloses a case uncovering detection system. The system comprises a case as well as a mainboard, a key destroying switch, a storage module and a power supply which are arranged in the case, wherein a control system for controlling the working state of the storage module is arranged on the mainboard, the case comprises a case body with an opening in the top and an upper cover detachably arranged at the opening, the mainboard is paved and fixed on the bottom surface of the case body, the key destroying switch is welded on the mainboard, a ball is butted against the bottom surface of the upper cover, and a leaf spring is pressed on a shift switch. The invention further provides an implementing method of the case uncovering detection system. Case information safety can be ensured, interior wiring of the case is reduced, and the mounting process of an information protecting structure is simplified.