73results about How to "Reduce time to discovery" patented technology

The invention relates to a multi-step attack detection method based on multi-source abnormal event correlation analysis. The multi-step attack detection method comprises the following steps: firstly, calculating a safety event score based on an attach chain through feature extraction and abnormal event definition and identification, identifying an abnormal host and clustering various types of events by taking an attacked host as a clue; secondly, carrying out correlated recombination on a suspected attack progress by utilizing means including intra-chain correlation, inter-chain correlation, feature clustering and the like; finally, reconstructing a multi-source attack scene and outputting a predicated attack event. According to the multi-step attack detection method provided by the invention, dispersed and isolated safety events are subjected to the correlation analysis to generate the relative complete multi-step attack scene; a safety analysis capability of safety managers can be improved and a safety view angle is expanded; distributed and scattered multi-step attack threats are effectively coped and the finding time of attack behaviors is shortened; an effective predication and defending solution is provided for high-grade attack means including APT (Advanced Persistent Threat) and the like; the safety risks of a system are reduced and the network information safety is effectively protected.

In a wireless network discovery method according to an exemplary embodiment of the present invention, a) a propagation environment information message generated by using signal information received from the heterogeneous wireless networks is transmitted to the common core network, b) a wireless network discovery range generated by using the propagation environment information message is received from the common core network, c) it is determined if signal information received from a serving wireless network at a current location corresponds to the wireless network discovery range, and d) when the signal information corresponds to the wireless network discovery range in c), a network within the wireless network discovery range is discovered, when the signal information does not correspond to the wireless network discovery range in c), c) is periodically performed.

The invention relates to a medical emergency treatment method and system. The emergency treatment system is composed of a distress part and an emergency treatment apparatus receiving part, wherein the distress part comprises an accident triggering module, an accident judging and information processing module, an on-site distress module, a remote communication module and the like; the emergency treatment apparatus receiving part comprises a remote communication module, an information processing and on-site alarming module and the like. When emergent disease accidents such as entricular fibrillation, myocardial infarction and the like happen, a promoting message lasting for a fixed period of time is generated by the accident judging and information processing module and a patient determines whether to ask for help or not during the period; if the patient loses the disposing capacity, the emergency treatment system gives an alarm to an on-site and / or nearest and available emergency treatment apparatus or / and an emergency treatment center through the on-site distress module and the remote communication module in a wire or / and wireless communication way after the promoting period runs out, so that medical care personnel can obtain the accurate medical treatment information and rush to the scene to treat relative affairs and can recoup losses of medical accidents as much as possible.

The disclosed automatic detection method for wireless interconnection device comprises: adding field for device source independently for Beacon frame, Probe response frame, Association Request frame and Reassociation Request frame, all in MAC layer of BSS network; AP builds and maintains said source information, broadcasts periodically the source through Beacon frame; when scanning network, the new device analyzes information field of Beacon frame and Probe response frame to obtain the source condition and decide whether detecting device and provide basis for register; according to scan result, the new device selects AP and sends Association Request frame to the AP, joins network, and registers device or source. This invention improves system search performance, and reduces the implementation cost.

The invention relates to a vehicle abnormal deceleration region detecting method and a vehicle abnormal deceleration region detecting system based on trajectory data. The vehicle abnormal decelerationregion detecting method refers to an image differential anomaly detection method commonly used in machine vision, performs analysis and clustering on historical trajectory data, constructs an ''imagebackground'' of a road section deceleration region, compares a deceleration confidence region with a deceleration region based on real-time data clustering, and highlighting an abnormal decelerationregion of the road section. The vehicle abnormal deceleration region detecting method and the vehicle abnormal deceleration region detecting system overcome the problems of low patrol efficiency and high delay of the traditional road network traffic events, can provide data support for the traffic department to maintain normal operation of the traffic system, shorten the discovery time of the roadabnormal event, reduce the labor cost, can push anomaly information to drivers near the abnormal deceleration region by means of communication software, realize the timely induction of vehicles and avoid the occurrence of large-scale congestion.

The invention discloses a real-time DMS of a B / S framework and a method thereof. The method comprises steps of real-time device status acquisition and statistics, device condition based maintenance and modeling, real-time overhaul process triggering by a device status fault, and on-line monitoring of real-time status, real-time index and overhaul process of the device. The system has real-time device status acquisition and real-time index statistic functions, has a flexible device status modeling method, can trigger the overhaul process dynamically according to current status change of the device, and can display the real-time status, the real-time index, the overhaul process and device management in a B / S manner. The invention designs and realizes the real-time DMS of the B / S framework. By means of the real-time DMS, device data and statuses from different manufacturers can be obtained through various modes and routes, the overhaul process can be triggered dynamically according to defined status modeling method, system information can be browsed conveniently through various mainstream desktop terminals and mobile terminals, discovery time of device failure and hidden failure danger is shortened greatly, the equipment failure rate can be reduced to a large extent, and influence on production caused by device problems is reduced.

A method for realizing switch ¿C over between optical channel and radio channel includes setting up correlation of radio channel and optical channel between setting up terminal and switching in point, judging whether optical channel is blocked or not, sending switch over data of optical channel to radio channel, executing switch over of optical channel to radio channel, carrying out detection on switch over of radio channel to optical channel, sending switch over data of radio channel to optical channel and executing switch over of radio channel to optical channel.

The invention provides a method for discovering neighbor nodes in a wireless ad hoc network of a switchable beam antenna, and aims to solve the problem of low neighbor node discovery efficiency in the prior art. The method comprises the following steps: calculating a quantity of probable neighbor nodes in different directions of a certain node; judging whether finding is finished or not in different directions of the certain node; selecting discovery directions of the neighbor nodes of the certain node; judging whether discovery of the neighbor nodes in the directions is finished or not; selecting a mode for the certain node to execute neighbor node discovery; if a first mode is selected, transmitting information firstly and receiving information secondly by the certain node; if a second mode is selected, receiving information firstly and transmitting information secondly by the certain node; and judging the neighbor node information by the certain node according to the received information, and preparing for next neighbor node discovery. According to the method, next execution of the neighbor node discovery in the different directions is adjusted according to the information of the neighbor nodes discovered by the certain node in the different directions; and meanwhile, direction change of the neighbor node discovery is driven, and the information transmission power of the neighbor node discovery is adjusted according to events. Thus, the neighbor node discovery time and the informational conflict probability are reduced.

The present invention provides a search log-based event discovery method and apparatus. The method comprises: obtaining newly added search terms and corresponding search results that are not used forevent discovery in a search log; querying a preset entity dictionary according to the newly added search terms, and obtaining entities included in the newly added search terms; collecting statistics of newly added search terms including the entities to determine whether there is a sudden search term; if so, determining a feature of a sudden search term according to the sudden search term and the search result thereof; and matching the feature of the sudden search term with the feature of each search term in the at least one event corresponding to the entity included in the sudden search term to determine whether there is a new event, wherein the event comprises: each search term in the clusters, the feature of each search term, and description information of the clusters. According to themethod provided by the present invention, event discovery can be performed timely when new data is generated, so that the event discovery efficiency is improved and the event discovery time is shortened.

The invention discloses a routing method and a device of a self-organizing network, and relates to a network communication technique. The routing method of the self-organizing network comprises the following steps of: when grouped data is transmitted from a source node to a target node, establishing a coordinate system taking the source node as an origin; determining the coordinate of each node in the coordinate system; determining two tangent lines which pass through the source node and are tangential with a circular transmission range of the target node, and taking an area, which is enclosed by the two tangent lines and the circular transmission range of the target node and comprises the source node and the target node, as a forwarding domain; and selecting a routing line in the forwarding domain to perform the transmission of the grouped data from the source node to the target node. In the method, the relative position of each node is determined first, then the forwarding domain is determined, and the data forwarding from the source node to the target node is performed through the routing in the forwarding domain, so compared with flooding routing, a lot of routing discovery time and the data grouping quantity are reduced,, and the routing efficiency of the self-organizing network is improved.

The invention discloses an automatic firefighting control system of a wind turbine generator system. The automatic firefighting control system is characterized by comprising an air-breathing type smoke-sensitive fire hazard detection alarm device, a firefighting monitoring device, an automatic fire extinguishing device and a shared fireproof plugging device, wherein the air-breathing type smoke-sensitive fire hazard detection alarm device comprises an air-breathing type smoke-sensitive fire hazard detector and a sampling pipeline in match; the firefighting monitoring device is arranged in a central control center of a wind power plant; the automatic fire extinguishing device comprises an automatic pulse type dry powder fire extinguishing device and an automatic aerosol fire extinguishing device for achieving total flooding fire extinguishment protection; the special firefighting plugging device is arranged at the connection part of a wind turbine generator system cabin and a tower cylinder. The automatic firefighting control system of the wind turbine generator system can sample at real time, analyze by self and determine the alarm grade automatically, so that working personnel can master the fire hazard progress at real time, accurate and reliable firefighting measures can be taken according to the alarm grade, and due to complete information self-provision and self-analysis capability, the firefighting management can be correctly and orderly executed.

The invention discloses an enhanced stable routing protocol for the vehicle Ad Hoc network. A source node finds a target node and obtains multiple effective routes to the target node; and in the route selection phase, a mechanism of the longest route effective time is introduced to select a route longest in effective time and more stable in performance for data transmission. In the route maintenance phase, if the main route is in failure, the source node directly uses the multipath standby route to repair the route, and the route repairing efficiency is improved. The enhanced stable routing protocol can improve the delivery rate of data packets, reduce the average end-to-end time delay, reduce the routing cost, and improve the performance of the vehicle Ad Hoc network.

The invention discloses a long-distance acid conveying pipeline leakage automatic monitoring system and method based on a wireless network, and belongs to the technical field of acid conveying pipelines. The system involves a severe leakage detection part, a slight leakage detection part, a monitoring control center and at least one wireless gateway, wherein the severe leakage detection part is configured to monitor whether the acid conveying pipeline leaks or not and obtain a first detection signal, the slight leakage detection part is configured to monitor whether the acid conveying pipelineleaks or not and obtain a second detection signal, the monitoring control center is configured to judge whether the acid conveying pipeline has first leakage or not according to a first detection signal and is configured to judge whether the acid conveying pipeline has second leakage or not according to a second detection signal, and the severe leakage detection part and the slight leakage detection part are wirelessly connected with the monitoring control center through the at least one wireless gateway. According to the long-distance acid conveying pipeline leakage automatic monitoring system and method based on the wireless network, serious leakage and slight leakage can be automatically monitored in time, and conventional materials such as cables and bridges and laying cost are greatly saved.

The invention relates to a smart substation control remote operation modeling and monitoring method and a monitoring system. A smart substation control remote operation flow is divided to seven links of 104 remote control, MMS remote control, GOOSE tripping and closing, GOOSE feedback, GOOSE displacement, MMS remote communication and 104 remote communication. Based on an RCD file and an SCD file of the smart substation, a characteristic value index corresponding to each link in the operation flow of each control remote operation control point and the correlation between the characteristic value indexes corresponding to the links can be recognized, and multi-protocol correlation modeling for smart substation control remote operation is realized. Based on the multi-protocol correlation modeling method, a control remote operation model for each control point of the smart substation is generated, the multi-protocol message of the smart substation control remote operation is monitored, acquired and analyzed based on the model, a smart substation control remote operation report is generated, and monitoring on the smart substation control remote operation process is realized.

The invention provides a monitoring method for 230M power load control communication base stations. The method is implemented by a monitoring system formed by monitoring front-end processors, a background server and monitoring terminals, wherein one monitoring front-end processor is arranged on each 230M power load control communication base station; the method mainly comprises the following stepsthat each monitoring front-end processor samples working voltage and current and temperature and humidity information of the corresponding 230M power load control communication base station in real time and sends the working voltage and current and the temperature and humidity information to the background server; the background server compares the sampling voltage / current and the temperature information with a built-in empirical value criterion to judge a working state of the base station, and gives an alarm to the monitoring terminals and pushing a judged fault type when the working state is abnormal; and monitoring personnel correspondingly make a fault processing decision according to data and a judgment result which are pushed by the background server. According to the method, the cost is low, the implementation is convenient, the fault discovery and judgment time can be greatly shortened, the manpower and material resources are saved, and the management efficiency of the base stations is improved.

The invention particularly discloses an improved biphase blood culture bottle which belongs to the technical field of an in-vitro diagnosis reagent. A solid phase of the culture bottle is prepared by mixing brain heart infusion broth, agar powder, yeast extract, nucleic acid and sodium glutamate at a certain weight ratio, and mixing with deionized water. A liquid phase of the culture bottle is prepared by mixing brain heart infusion broth, yeast extract, sodium polyanetholesulfonate (SPS), coenzyme I, vitamin B6, vitamin B1, vitamin B12, L-glutamine, L-cystine, L-cysteine hydrochloride, adenine sulfate, guanine hydrochloride, ferric nitrate and p-aminobenzoic acid at certain weight ratio, and mixing with deionized water. The culture bottle with reasonable formulation and complete nutrition components ensures rapid propagation of common bacteria in blood; is more favorable for growth of various fastidious bacteria; greatly improves a positive detection rate and shortens detection time; obtains an accurate and timely culture result; and has great significance for clinical diagnosis and treatment.

The invention discloses a data fusion method of millimeter-wave radar anti-intrusion, comprising a radar signal module, a comprehensive processing module, a photoelectric module, a positioning and timing module, and a terminal display module. Radar point-track sequential fusion based on data stream is adopted. Steps of the data fusion method comprise point-track preprocessing, rough correlation offusion, fine correlation of fusion, target output and isolated point processing. The invention further discloses a data fusion system of millimeter-wave radar anti-intrusion. The data fusion method of the invention is equipped with an advanced algorithm, such that it is suitable for distributed millimeter-wave radar coordination for anti-intrusion for a large-area scene and advantageous for its application in key security systems of multiple industries.

The invention discloses a data transmission method comprising the steps that sound wave signals are received and the sound wave signals are demodulated so that demodulation information is acquired, and the demodulation information includes the bluetooth address of target bluetooth equipment; a bluetooth transmission link with the target bluetooth equipment is established according to the bluetooth address; and target data transmitted by the target bluetooth equipment are received through the bluetooth transmission link. Correspondingly, the invention also discloses a data transmission device. With application of the data transmission method and device, discovery time of the bluetooth equipment can be shortened so that time required for bluetooth connection can be shortened.

The invention discloses a power transmission line mountain fire monitoring method integrating smoke and infrared identification linkage. The method comprises the steps of: collecting a video image ofan area to be monitored in real time, obtaining a daytime mountain fire pre-detection result based on a Gaussian hybrid model or obtaining a night mountain fire pre-detection result based on an adaptive threshold algorithm according to the current collection time, obtaining an infrared fire discrimination result of the area to be monitored according to an collected infrared image of the area to bemonitored, collecting an onsite mountain fire image in the case of fire, and then performing area marking by using an image communication area marking algorithm to obtain an accurate location of a smoke and fire area. By adopting the power transmission line mountain fire monitoring method, the discovery time of the mountain fire can be shortened, and the mountain fire monitoring accuracy can be improved.

The invention belongs to the technical field of intelligent management and control, and particularly relates to an intelligent Internet of Things management and control system based on big data. The intelligent Internet of Things management and control system comprises a server side, a management module and monitoring modules, wherein the server side comprises an analysis unit and a storage unit;each monitoring module comprises a detection unit and an Internet of Things unit; the server side can be connected with the management module and the monitoring modules through a communication unit and exchange data; and the plurality of monitoring modules are arranged in the system and are all mounted on a municipal water supply pipeline. According to the system, the leakage degree of a water supply pipe network can be effectively controlled and reduced for a long time, meanwhile, the leakage position can be found and detected in time when leakage occurs, the maintenance time is shortened, and the management and control effect and the management and control efficiency of the water supply pipe network are improved.

The invention discloses a multi-channel chain tight joint and missing part detection machine, which comprises a detection bench, a driving motor and a PLC control system, wherein a plurality of detection channels for allowing to-be-detected chains of different specifications to pass through for detection are arranged on the table surface of the detection bench in parallel. A dragging chain wheel used for dragging the to-be-detected chains to move, a tight joint detection mechanism, a missing roller sleeve detection mechanism and a chain sheet missing detection mechanism are correspondingly arranged on each detection channel, and the driving motor drives the dragging chain wheel to move. The method is used for highly integrated detection of missing parts and tight joints of a plurality of specifications of chains, the detection sensitivity is high, and the missing part, the tight joint and the rotation block are accurately displayed.

The invention provides an xPON multicast service monitoring method, an xPON multicast service monitoring device and OLT equipment. The method comprises the following steps: detecting whether the multicast service of a port in an optical line terminal OLT is normal based on the multicast service traffic of the port; and when detecting that the multicast service is abnormal, sending an alarm signal corresponding to the port, wherein the port can be a source port or a forwarding port. Through the detection process, a fault point in an OLT can be found in a timely manner, so that a fault can be found and corresponding treatment and repair work can be conducted before user complaints. The time of fault detection and handling is reduced, the overall performance of the network is improved, and the degree of satisfaction of users is improved.

The embodiment of the invention discloses a fault processing method and device. A specific embodiment of the method comprises the steps of obtaining a target fault event; executing the following faultprocessing steps: in response to the obtained target fault event, determining whether a fault occurs or not, the fault events corresponding to different faults being different; if it is confirmed that the fault occurs, sending a fault notification corresponding to the target fault event to terminal equipment of the target user; and executing loss stopping processing operation corresponding to thetarget fault event. According to the embodiment of the invention, the fault event can be obtained, so that the fault discovery and processing steps are automated, and the manpower consumption is reduced. Meanwhile, according to the embodiment of the invention, the fault can be discovered in real time by acquiring the fault event, and the fault discovery time is effectively shortened, so that thenormal operation of the cloud service can be ensured.

The invention relates to the core network technical field and provides a crosstalk detecting method and a crosstalk detecting device. The objective of the invention is to solve the problem of incapability of a crosstalk detecting method to detect crosstalk faults in an IP network, wherein the crosstalk detecting method adopts a relay dial testing mode. According to the embodiment of the invention, under a crosstalk situation in which one party of a calling party and a called party hear voice communication of other people while the other party cannot hear any sound in voice communication, after it is determined that voice signal energy received by one party of a calling terminal and a called terminal is zero, whether crosstalk occurs is determined through judging whether voice features of voice signals received by the other party of the a calling terminal and the called terminal change or not, and therefore, crosstalk in the IP network can be automatically detected, and either crosstalk generated on a wireless channel between a user terminal and a wireless network or crosstalk which is generated between the wireless network and a core network and is generated by equipment of the core network itself can be detected.

The invention relates to the technical field of electric energy meters, and concretely relates to an RFID key management method and system for operating an electric energy metering device. The systemcomprises an electric energy meter junction box with an RFID key function, a control decision module, a sensor group, an RFID read-write device and a remote communication module, the RFID read-write device reads RFID on the electric energy meter junction box with the RFID key function for identity authentication, the control decision module is in data communication with the electric energy meter with the RFID secret key function so as to monitor whether the electric energy meter with the RFID secret key function is illegally operated or not, the sensor set receives a command, sent by the control decision module, for starting working and transmits collected data to the control decision module, and the control decision module encrypts the collected data of the sensor group and transmits theencrypted data to a remote terminal through the remote communication module.

A method for establishing a network connection includes determining a list of access networks detectable by a user equipment, and reducing the list of access networks to a list of preferred networks in accordance with supplemental information associated with the user equipment. The method also includes selecting a first candidate network from the list of preferred networks, and attempting to connect to the first candidate network.

The invention provides a maintenance scheme obtaining method, device and system, and relates to the technical field of equipment detection. The method is executed by a server. The server is connectedwith at least one piece of detection equipment. The method comprises the following steps: receiving operation parameters of a detected platform collected by the detection equipment; wherein the detected platform is provided with a platform identity label; generating maintenance reminding information of the detected platform based on the operation parameters, and sending the maintenance reminding information to a mobile terminal; and receiving maintenance scheme request information corresponding to the platform identity identifier sent by the mobile terminal, and obtaining a maintenance schemecorresponding to the detected platform according to the maintenance scheme request information. The labor and time of the detection platform can be saved, and the maintenance efficiency of the platform is effectively improved.

The embodiment of the invention provides intelligent operation and maintenance equipment for an energy storage power station, and relates to the technical field of equipment state monitoring and maintenance of the energy storage power station. The equipment comprises a data processing server, and an equipment data acquisition system, an application server, a mobile operation inspection terminal and fire-fighting equipment which are connected with the data processing server. The equipment data acquisition system is used for acquiring operating parameters of the energy storage power station andtransmitting the operating parameters to the data processing server; the data processing server is used for storing and processing the operation parameters and transmitting the operation parameters tothe application server and the mobile operation inspection terminal; the application server is used for being installed in a control room; intelligent operation and inspection control software is installed on the application server and the mobile operation inspection terminal; operation parameters are processed according to the intelligent operation and inspection control software to obtain an equipment fault state; and the application server is further used for sending out a reminding signal and sending a fire-fighting instruction to the fire-fighting equipment according to the equipment fault state. The equipment can reduce the operation and maintenance time and reduce the difficulty of equipment fault analysis.

The invention relates to a real-time monitoring vacuum instrument. A real-time and high-reliability feedback transmission channel between the vacuum instrument and control equipment is established through an independent remote data transmission module, so that the equipment fault discovery and processing time is shortened, the timeliness of equipment accident rescue is improved, and the safety ofmonitored high-vacuum equipment can be effectively improved; on the other hand, the invention relates to a vacuum detection control method, the authenticity and effectiveness of the acquired data canbe verified in real time by flexibly comparing the vacuum degree data from different transmission paths, so that the reliability of the vacuum degree monitoring data is ensured, the manual checking steps are reduced, and the equipment operation problem can be found in time.

The invention discloses a dry type air-core reactor turn-to-turn short circuit protection method, and relates to a short circuit protection method. There is a big dead zone in dry type air-core reactor two-stage overcurrent protection, and a reactor is already serious in burning loss when a reactor protection action is carried out. The dry type air-core reactor turn-to-turn short circuit protection method comprises the steps of collecting phase current and line voltage of a dry type air-core reactor; calculating the real-time remaining reactance ratio according to rated phase current, rated line voltage and the acquired phase current and line voltage of the dry type air-core reactor; and judging whether the dry type air-core reactor has a turn-to-turn short circuit or not and the seriousness of the turn-to-turn short circuit according to the real-time remaining reactance ratio. Compared with overcurrent protection at present, the technical scheme can greatly reduce the protection dead zone, shorten the discovery time of the turn-to-turn short circuit of the dry type air-core reactor and improve the safe operation capability of the dry type air-core reactor and neighboring equipment.