Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

10069 results about "Access control" patented technology

In the fields of physical security and information security, access control (AC) is the selective restriction of access to a place or other resource while access management describes the process. The act of accessing may mean consuming, entering, or using. Permission to access a resource is called authorization.

Convergent Intelligence Fabric for Multi-Domain Orchestration of Distributed Agents with Hierarchical Memory Architecture and Quantum-Resistant Trust Mechanisms

A system and method for implementing a convergent intelligence fabric (CIF) for distributed artificial intelligence operations. The CIF architecture integrates tensor-theoretic foundations, probabilistic cache management, precision-aware memory operations, quantum-resistant security, and neural-based optimization within a unified framework. The system orchestrates asynchronous, multi-hop data flow among computational resources while maintaining data security through per-block encryption and identity-based access control. Key components include a universal multi-model KV cache subsystem, agent-parallel disaggregation pipelines, reinforcement learning-based orchestration, and neuromorphic memory integration. Advanced implementations incorporate graphon-enhanced memory for sparse graph sequences, multi-modal cognitive persistent memory, and quantum-resistant asynchronous multi-domain trust protocols. The system enables efficient cross-agent collaboration, sophisticated knowledge sharing, and secure cross-domain operations while optimizing computational resources and maintaining strict privacy guarantees across distributed AI deployments.
Owner:QOMPLX INC

Blockchain-based authentication system and method for authenticating electric vehicles or drones in a smart city

The present disclosure relates to a blockchain-based authentication system for electric vehicles and drones, and a method for authenticating electric vehicles or drones in a smart city. The proposed blockchain-based authentication system enhances security, privacy, and scalability for electric vehicles (EVs) and drones in smart city environments. It employs a consortium blockchain managed by city authorities and stakeholders, utilizing smart contracts for identity registration, credential issuance, and access control. Device nodes store cryptographic keys securely, while an optional authentication server facilitates off-chain integration. The authentication operation of the system includes, ensuring tamper-proof identity verification through on-chain validation. Authentication attempts are immutably recorded for auditing and anomaly detection. By eliminating single points of failure and strengthening data privacy, this decentralized authentication framework offers a scalable and secure solution for integrating EVs and drones into smart city infrastructures.
Owner:SHAQRA UNIV

Deep learning-based facial recognition system with privacy-preserving features

The present invention provides a facial recognition system using deep learning methodologies while integrating privacy-preserving capabilities. This system employs convolutional neural networks (CNNs) to extract and classify facial features, ensuring high accuracy in recognition tasks. Moreover, the system addresses privacy concerns by incorporating techniques such as facial feature encryption and anonymization, thereby enhancing user privacy and data security. This invention is applicable across various domains, including security, surveillance, access control, and personalized services, where facial recognition is utilized while preserving individual privacy.
Owner:TRIPATHI BHASKAR +11

Unmanned aerial vehicle multi-system navigation decoy system based on intelligent algorithm optimization

The invention provides an unmanned aerial vehicle multi-system navigation decoy system based on intelligent algorithm optimization, and relates to the technical field of unmanned aerial vehicle processing, a sensing module comprises a cognitive radar, a photoelectric / infrared sensor, a magnetic and acoustic sensor and an electromagnetic environment scanning device, and a digital twinning and countermeasure AI module comprises a digital twinning model module and a countermeasure AI engine; the cross-domain multi-source cheating module comprises a multi-system navigation signal synthesis module and a sensor-level cheating module; the reconfigurable intelligent antenna array comprises a metamaterial unit, a real-time beam controller and a biological heuristic intelligent algorithm module, and the system security hiding module comprises an encryption access control unit, a micro-power frequency expansion and hopping unit and a redundant backup and disaster recovery unit. The response time of the system from detection to interference can be remarkably shortened by performing high-fidelity simulation on the flight control logic of the unmanned aerial vehicle and the actual electromagnetic environment in the digital twin environment and combining the hybrid decoy strategy generated by the adversarial AI.
Owner:国网湖北省电力有限公司直流公司

Systems and methods for securing a data stream with attribute-based access control

Systems and methods for data streaming with attribute-based access control. A client apparatus in a data streaming system receives a message via a data stream, form a data stream provider. The message has a schema version of the schema associated therewith. The client apparatus processes the message to retrieve a record, the record including a data item and a data tag corresponding to the data item. The client apparatus, with reference to the schema version, determine whether an identifier (e.g., client ID) of with the client apparatus has permission to access the data item associated with the data tag. After detecting that the identifier does not have permission to access data associated with the data tag, the client apparatus masks the data item to produce a masked data record. The client apparatus releases the masked data record for further processing by the client apparatus.
Owner:THE TORONTO DOMINION BANK

Apparatuses, systems, and methods for managing metadata security and access

Apparatuses, systems, and methods for managing access to metadata stored at a memory. To manage access to metadata, a mode register is configured to receive a metadata enable setting and to provide a metadata enable signal based on the metadata enable setting. A metadata access control circuit configured to receive a column address identifying a particular column to be accessed within a memory array. The metadata access control circuit blocks access to a column corresponding to the column address when the column address matches one of a plurality of particular column addresses designated for storage of metadata and the metadata enable signal has a first value, and permits access to a column corresponding to the column address when the column address is different than every one of the a plurality of particular column addresses designated for storage of metadata or the metadata enable signal has a second value.
Owner:MICRON TECHNOLOGY INC

Medical image encryption and secure storage method and system based on block chain

The invention discloses a medical image encryption and secure storage method and system based on a block chain, and the method comprises the steps: obtaining the original data of a medical image, segmenting the original data of the medical image into a plurality of segments through a fragmentation technology, carrying out the encryption of each segment through a symmetric encryption algorithm, generating an encrypted segment set, and storing the encrypted segment set in a database; determining an integrity check value of the encrypted fragment set; according to the encrypted fragment set, adopting a distributed storage protocol to distribute each fragment to a plurality of storage nodes, recording a storage position and an integrity check value of each fragment to a block chain account book, and generating a storage index containing a storage path and check information; and establishing an access control strategy through the block chain smart contract, and if the obtained requester identity identifier and the authority level conform to the access control strategy, generating a dynamic authorization token including an access range and time limitation. According to the method, the privacy of the patient is protected, and meanwhile, the safety and availability of medical data are improved.
Owner:HUNAN INSTITUTE OF ENGINEERING

Methods for implementing artificial intelligence capabilities in software applications

The invention relates to methods and systems for integrating generative artificial intelligence (AI) capabilities into Software as a Service (SaaS) platforms. It comprises maintaining AI agents with varying credentials, enabling their interaction with alphanumeric data in table structures, and implementing a hierarchical access control scheme. The system displays table structures, provides interfaces for user inputs, and allows AI agents to be added as platform users. The generative AI agents can analyze data, identify actions, and perform tasks autonomously. The invention also includes methods for proactive information gathering, interactive analysis of AI outputs, and management of AI resources as limited assets. This approach enhances SaaS functionality by enabling AI-driven task completion, data analysis, and decision-making while maintaining data security and user-specific access controls.
Owner:MONDAY COM LTD

Cloud desktop security access control method based on zero-trust architecture

The invention discloses a cloud desktop security access control method based on a zero-trust architecture, belongs to the technical field of network security, and is used for solving the problems of difficulty in hidden attack detection, cross-cloud attack chain breakage and conflict between security control and service continuity in a multi-cloud environment. Firstly, user identity attributes, session metadata and service call logs are aggregated, an identity-resource-behavior triple dynamic graph is constructed, cross-session association features are extracted, and a multi-dimensional behavior baseline is generated. And quantifying the access deviation degree based on the behavior baseline, triggering sensitive operation traceability analysis, constructing a time sequence risk propagation model, identifying latent attack features, predicting a penetration path and outputting a risk propagation coefficient. And finally, dynamically generating a process-level micro-isolation strategy according to a risk result, gradually adjusting the authority through a nonlinear authority attenuation function, inserting a secondary authentication node when unexpected resource jump is detected, reconstructing a communication white list, and realizing collaborative optimization of security protection and service continuity.
Owner:SHENZHEN HUITUO INFORMATION TECH CO LTD

Human resource management method and system based on data security

The invention discloses a human resource management method and system based on data security. The method comprises the steps that multi-source human resource data are collected through a standardized interface, and sensitive levels are marked in a classified mode; calling a dynamic encryption engine based on the sensitive level and the data type, performing asymmetric encryption on the structured data, and performing hybrid encryption on the unstructured data; a dynamic hierarchical access control strategy is generated in combination with user roles and service scenes, and the permission range is adjusted in real time; laws and regulations such as GDPR and CCPA are analyzed through a compliance rule base, data operation legality is automatically verified, and illegal behaviors are blocked; k-anonymity and differential privacy technologies are adopted to desensitize sensitive data, and privacy protection and data availability balance are ensured; and recording a full-process operation log based on the block chain and generating a non-tampering audit report. The system comprises a data classification acquisition module, a dynamic encryption engine module, an access control engine module and the like. According to the method, the problems of data protection rigidness, compliance response lag and privacy-utility imbalance of a traditional HR system are solved.
Owner:HUNAN JUNKUN TECH CO LTD

Business data security protection method and system for digital enterprise management

The invention provides a service data security protection method and system for digital enterprise management, and the method comprises the steps: obtaining an access request sequence initiated by a target user at a service operation terminal, generating a dynamic access control strategy vector according to a historical behavior track associated with an access operation identifier, and carrying out the dynamic access control strategy vector; analyzing the dynamic access control strategy vector through a strategy decoder, and generating a real-time access permission instruction; based on the real-time access permission instruction, performing homomorphic encryption mapping on a sensitive data segment in the request context information to generate a ciphertext transmission channel, and performing security parameter synchronization on the ciphertext transmission channel and the cross-department conjoint analysis model; and calling a federated learning framework to carry out multi-modal feature fusion on the real-time operation flow of the service operation terminal, generating an abnormal operation confidence score, triggering a cross-level interception protocol when the abnormal operation confidence score exceeds a dynamic threshold, and rolling back the current session state to a security baseline version. According to the invention, the accuracy and response timeliness of anomaly detection can be improved.
Owner:BEIJING CHINASOFT LINKAGE TECHNOLOGY CO LTD

Data security and privacy management method and system based on block chain technology

The invention discloses a data security and privacy management method and system based on a block chain technology, and the method comprises the following steps: S1, collecting original data in a target system, and carrying out the preprocessing of the original data; s2, constructing an access control strategy set; s3, converting into a structured strategy configuration file, and deploying a smart contract; s4, matching and judging the access request and a preset strategy by the intelligent contract; s5, judging whether the access request is legal or not; s6, performing structured processing on the access log, and writing the access log into a block chain account book; s7, intelligently selecting an encryption mechanism, and providing access return data to the access party; and S8, carrying out modeling prediction on the access mode by adopting a federal gradient lifting tree algorithm. The block chain intelligent contract and the federal gradient boosting tree algorithm are fused, differential privacy, zero-knowledge proof and homomorphic encryption technologies are combined, data intelligence and refined privacy protection are realized, and the method has the advantages of high credibility, high intelligence and high traceability.
Owner:NANJING XINHONGBO EDUCATION TECH CO LTD

AI dynamic secure transmission system based on SASE framework

The invention relates to the technical field of integration of artificial intelligence security and network security, and discloses an AI dynamic security transmission system based on an SASE framework, which realizes security access control based on AI dynamic identity verification through an SASE integration access module, acquires and predicts network performance change in real time by using a network state sensing module, and transmits the network performance change to a network server. Equipment, environment and data content are subjected to multi-dimensional analysis by means of a security risk assessment module, a quantitative risk score is generated, and a transmission protocol, parameters and encryption strength are dynamically adjusted according to a network state and the risk score by means of a dynamic transmission optimization module and a self-adaptive encryption module; the problem that safety protection and transmission efficiency are difficult to cooperate in a traditional architecture is effectively solved, low-delay and high-reliability data transmission service can be provided for AI application in a complex network environment, meanwhile, self-adaptive dynamic protection of the whole data transmission process is achieved, and data safety is comprehensively guaranteed.
Owner:BEIJING XINDA WANGAN INFORMATION TECH CO LTD

Access control system based on face recognition and recognition method

The invention provides an access control system based on face recognition and a recognition method, and the system comprises a multi-modal image collection subsystem which integrates a visible light camera, a depth camera and an infrared thermal imaging camera and is used for synchronously collecting a visible light image, a depth image and an infrared thermal imaging image of a face; the image preprocessing unit is used for carrying out corresponding preprocessing on the image; the feature extraction network module is used for extracting image features; the multi-modal feature fusion and alignment module is used for calculating a mutual information matrix by adopting a feature fusion strategy based on mutual information maximization and adaptive weighting, determining an adaptive weight and performing weighted summation, and performing feature alignment by applying a method based on canonical correlation analysis; and the face recognition classification and verification module verifies the image by adopting a multi-level fusion strategy. According to the method, the false recognition rate and the rejection rate are effectively reduced, the strong anti-cheating capability is achieved, and cheating attacks of various fake face means can be accurately recognized and resisted.
Owner:SHENZHEN ANSWER TECH ELECTRONICS CO LTD

Smart park safety protection system and method based on intelligent video analysis and multi-mode integration

The invention discloses a smart park safety protection system and method based on smart video analysis and multi-mode integration, and relates to the technical field of smart park management. The system comprises a camera, an environment microphone and an access control terminal which are deployed in a park, an edge computing node is used for extracting structured video, audio and access control features, a central server realizes multi-modal space-time alignment through a self-calibration module, a multi-modal fusion module constructs a joint representation vector based on a low-rank tensor algorithm, and the joint representation vector is used for realizing multi-modal space-time alignment. And the security decision module identifies an abnormal event and triggers a response strategy in combination with a classification and anomaly detection model. According to the invention, multi-mode cooperative identification, high-robustness behavior analysis and intelligent response linkage are realized, and the real-time performance, accuracy and intelligent level of a park security system are improved.
Owner:SUQIAN NANYOU DIGITAL ECONOMY IND RES INST +1

Power edge cloud collaborative management method based on swan OS

The invention relates to a power edge cloud cooperative management method based on a swan OS, and the method comprises the following steps: S1, deploying intelligent edge nodes, setting an embedded AI acceleration unit, operating the swan OS on all the intelligent edge nodes, and achieving the seamless cooperation of equipment through the distributed characteristics of the swan OS; and S2, realizing self-organizing connection of edge devices by adopting a Mesh network technology, designing a direct communication path between the edge devices, and realizing rapid processing of local problems. S3, aiming at the real-time requirement of a power system, optimizing an MQTT / CoAP protocol stack, improving the efficiency and reliability of message transmission, and allocating special network resources for different types of power applications by utilizing the 5G network slice characteristics, S4, constructing a security architecture based on a zero-trust principle, enhancing the equipment access control and data transmission security, and S5, establishing a security architecture based on a zero-trust principle. And identity authentication and data integrity protection are performed by using a block chain technology, so that data tampering and counterfeiting are prevented. According to the method, the local distributed decision-making capability and the global cooperation capability are effectively improved.
Owner:FUJIAN YIRONG INFORMATION TECH

Cloud-edge collaborative intelligent storage node dynamic deployment method and system

The invention discloses a cloud-edge collaborative intelligent storage node dynamic deployment method and system. The method comprises the following steps: monitoring performance indexes such as edge node data traffic and storage resource state in real time; a deep learning algorithm combining time sequence analysis and an LSTM neural network is adopted to analyze traffic information, and a data access demand is predicted; edge nodes and cloud storage resource configuration are dynamically adjusted based on a prediction result, and an intelligent scheduling algorithm, a data cold and hot separation strategy and a self-adaptive fragmentation technology are introduced to allocate resources; the storage node layout is optimized in real time, and an optimal data distribution path is selected through a reinforcement learning strategy; data security and access control are realized by adopting end-to-end encryption, multi-level access control and block chain technologies. The system comprises a monitoring acquisition module, a prediction analysis module, a resource scheduling module, a path optimization module and a security control module. According to the method, the utilization efficiency of storage resources is improved, data delay is reduced, system stability and data security are enhanced, and the method is suitable for a cloud edge collaborative storage scene.
Owner:NANJING NANDA SIWEI TECHNOLOGY DEVELOPMENT CO LTD

Electronic certification management and supply chain quality tracing method and system based on block chain

The invention provides an electronic certificate management and supply chain quality tracing method and system based on a block chain, and belongs to the technical field of information. According to the method, encryption storage and tamper-proof protection are carried out on the electronic certificate information through the distributed account book of the block chain and the Hash algorithm, and verification, approval and data updating operations are automatically executed based on the intelligent contract. Fine-grained authority management and abnormal access detection of all parties of the supply chain are realized through a user access control module; and through a tracing query module, performing multi-condition combination query on the electronic certificate information stored in the block chain, and generating a quality tracing report meeting supervision requirements. According to the method, through tamper-proofing, distributed storage and intelligent contracts of the block chain, trusted storage, automatic verification and full-chain quality tracing of the electronic certification are realized, data security and supply chain transparency are improved, trust cost is reduced, and supervision and tracing efficiency is improved.
Owner:BEIHANG UNIV +1

Data asset sharing method and system based on square and circular cloud

The invention relates to the technical field of data asset sharing, in particular to a data asset sharing method and system based on square and circular clouds, and the method comprises the following steps: obtaining data structure information and establishing a standardized list, counting field matching and jumping conditions to construct a remapping list, extracting an idle path aggregation path group to generate a candidate list, and judging priority conflicts to generate a shunting mapping result, and performing sharing operation on the combined fields and the paths in a butt joint manner. According to the invention, through combination of field name coding and type expression, the unified field identification capability is enhanced, coding difference and type vector difference are adopted to synthesize a score and screen a remapping field pair, the field matching precision is improved, and a path state, service attribution and priority elements are fused to construct a path group; the alternative number and the distribution identifier are configured under the path conflict, and the field and the path number are combined and butted, so that the granularity collaborative sharing is realized, the correspondence between the data channel structure and the access control is enhanced, and the stability of data sharing under multiple environments is improved.
Owner:FANGYUANBIAOZHIRENZHENG GRP CO LTD

Multi-tenant zero-trust security system based on micro segmentation

The invention relates to the technical field of communication, in particular to a micro-segmentation-based multi-tenant zero-trust security system, which comprises a tenant network topology sensing module for acquiring network structures and service dependencies of tenants and generating a tenant-level network topology graph and a communication graph; a strategy rule automatic generation module generates a micro-segment access control strategy; the context-aware risk assessment module collects a user identity, an equipment state and a behavior track, and generates an access risk score; the strategy dynamic adjustment and application module updates the access control strategy; and the tenant isolation and zero-trust interaction module deploys a security sandbox to complete trust verification and isolation protection of cross-tenant requests. According to the method, the micro-segmentation strategy is generated by automatically identifying the service dependency boundary, the access control rule is dynamically adjusted based on the context, and refined isolation and risk-driven defense in a multi-tenant environment are realized in combination with the security sandbox and the zero-trust mechanism, so that the security and controllability of the system are remarkably improved.
Owner:中亿(深圳)信息科技有限公司

Block chain driven distributed private data storage and access control method and system

The invention provides a blockchain-driven distributed private data storage and access control method and system, and relates to the technical field of access control, and the method comprises the steps: carrying out the sensitivity scoring and fragmentation processing of private data, organizing a data fingerprint into a Bloom filter, and constructing an integrity proof tree, the data fragments are encrypted and then submitted to a distributed storage network, and an evidence storage record of the data fingerprints is generated in the block chain; during data access, a hierarchical access key is dynamically generated according to behavior characteristics of a visitor, and the hierarchical access key is distributed to an authorized node group after threshold segmentation; the authorization node group generates an authorization voucher by using a threshold signature scheme based on a lattice password, and writes the authorization voucher into the block chain; and the visitor obtains the data fingerprint and the encrypted data fragment by using the authorization certificate, and decrypts the data fragment of the corresponding authority level through the secure multi-party calculation recombination key component after verifying the integrity.
Owner:NOVNET COMPUTING SYST TECH CO LTD

Safety control method and system for remote control of Internet of Things

The invention relates to the technical field of management of the Internet of Things, and discloses a security control method and system for remote control of the Internet of Things, and the system comprises a security remote control platform, a zero-trust gateway, an authentication module, a security policy engine, edge proxy equipment and an encryption communication module. And the authentication module is used for performing identity authentication on the equipment and the user. The security policy engine dynamic access control table comprises access rule entries and associated signature information, and is issued to the edge proxy device through the zero-trust gateway. And the edge proxy device stores the dynamic access control table, verifies the signature information based on the platform public key, and performs matching and verification according to the access rule entry when receiving the control instruction. And the encryption communication module is used for performing encryption transmission on the access control table, the control instruction and the execution result. According to the invention, the whole process of remote control of the Internet of Things is dynamic, secure and credible, and the anti-attack capability and operation reliability of the system are effectively improved.
Owner:JINLANCHEN (BEIJING) TECHNOLOGY CO LTD

Tumor early screening data sharing platform construction method and system based on cloud computing

The invention relates to the technical field of big data, in particular to a cloud computing-based tumor early screening data sharing platform construction method and system. The sharing platform construction method comprises the following steps: carrying out association modeling on multi-dimensional early screening data by adopting a knowledge graph technology; encrypting the sensitive field of the metadata index database, and synchronously generating an irreversible anonymous identifier to replace the original identifier; partitioning and arranging the metadata index database in a distributed storage system corresponding to a cloud platform according to tumor types, and performing cross-region redundant backup by adopting an erasure code technology; and constructing an access control smart contract based on a block chain technology, verifying the qualification of a requester through a digital identity authentication module, and after verifying the validity of a digital certificate of the requester, dynamically decrypting and transmitting a data copy conforming to an authority level. Through organic fusion of the knowledge graph, the encryption technology, distributed storage and the block chain, a safe, efficient and reliable tumor early screening data sharing platform is constructed.
Owner:SHENZHEN RAPHA BIOTECHNOLOGY CO LTD

Method and platform for integrating and sharing health data of old people

The invention provides an integrated sharing method and platform for health data of old people, and relates to the technical field of data processing.The method comprises the steps that multi-source heterogeneous health data of the old people are accessed, a rule template in a historical grading preprocessing rule base is matched based on data source capacity and data features, and data cleaning and standardization are completed; further identifying a sensitive field based on a medical data standard and an industry privacy specification, generating a sensitive field vector, carrying out sensitive level scoring, and calling a data desensitization strategy library to execute desensitization operations such as de-identification and masking; an access control function is constructed based on user attributes, access context and field sensitivity levels, authorization levels are determined, differential encryption is performed, and authorization views and data tokens are generated for secure access. Through the method, the problems of heterogeneous sources, complex processing, insufficient privacy protection and lack of flexibility of a sharing mechanism of old-age health data in the prior art can be solved.
Owner:FENGTING TECH (DALIAN) CO LTD +1

Zero-trust network dynamic access control method based on AI behavior portrait

The invention discloses a zero-trust network dynamic access control method based on an AI behavior portrait, and the method comprises the following steps: 1, collecting multi-source real-time behavior data during an access request; 2, constructing an AI behavior portrait engine based on historical data, inputting the integrated multi-source behavior data, calculating a behavior deviation degree through the AI behavior portrait engine, and outputting a risk score; 3, dynamic strategy decision making, wherein a decision making engine executes hierarchical control according to the risk score; 4, continuous session monitoring and real-time adjustment are carried out; step 5, when risk upgrading is detected in the session, degrading the session authority, limiting high-risk operation, terminating the session, and retaining evidence obtaining data; step 6, audit event generation and portrait updating; and step 7, strategy optimization closed loop. According to the method, the risk score is calculated in real time based on the AI behavior portrait, transition from static authorization to dynamic permission adjustment is realized, and internal threats such as voucher stealing and the like are effectively blocked.
Owner:JINGDEZHEN SHANJIANG TECHNOLOGY CO LTD

Data security dynamic evaluation system and protection method

The invention discloses a data security dynamic evaluation system and a protection method, belongs to the technical field of information security, and is used for solving the problem of terminal equipment access control and behavior risk dynamic collaborative protection. The method comprises the following steps: generating fingerprints through terminal equipment features, verifying authorization, inputting access feature slices into a time sequence model by authorized terminal equipment, generating a trust score based on cosine similarity of a behavior sequence and a prediction sequence, and constructing a Markov model to dynamically select an authentication mode according to the trust score; calculating a risk index by combining network and geographic information, and distributing the risk index to a real or virtual environment; and the unauthorized terminal equipment distributes the virtual environment after registration. Differentiated monitoring is carried out, a time sequence library is established in the virtual environment, and doubt scores are generated through sequence matching; the state deviation of the real environment is calculated through a hidden Markov model, and the risk score is generated by fusing the multi-dimensional features. And based on the result management authority, the suspicion terminal equipment isolates and shrinks the authority, the compliance terminal equipment authenticates and migrates, and the access is regulated and controlled according to the minimum privilege principle and the time window mechanism.
Owner:TIBET YANRUI INFORMATION SECURITY TECHNOLOGY CO LTD

Risk management system and method based on multi-source data perception

The invention discloses a risk management system and method based on multi-source data perception, and relates to the technical field of cloud computing security, and the method comprises the steps: collecting historical multi-source data of a cloud host; constructing a cloud host risk portrait based on historical multi-source data of the cloud host; the method comprises the following steps: dividing a cloud host network into a plurality of security domains according to service functions and security requirements, and configuring a basic access control strategy; sensing the resource use condition of the cloud host in real time, and identifying the current service state of the cloud host in combination with the service log; and matching a preset security policy according to the current service state of the cloud host and the risk portrait of the cloud host, and dynamically adjusting a network segmentation policy and an access control policy in a security domain based on a micro-isolation technology. According to the method, a micro-isolation technology is used, a network segmentation strategy and an access control strategy in a security domain are dynamically adjusted according to the real-time service state and the risk portrait of the cloud host, and the security and the stability of the cloud host in different service scenes are improved.
Owner:上海市大数据中心

Fine-grained access control method and system based on risk identification

The invention discloses a fine-grained access control method and system based on risk identification, and belongs to the technical field of information security. According to the method, user subject attributes, behavior attributes and system environment attribute information are collected in real time, a standardized decision matrix is constructed, an interval type-2 fuzzy set (IT2FS) is used for conducting fuzzy modeling on the attributes, and an upper membership matrix and a lower membership matrix are generated. And calculating the dynamic weight of the attribute index in combination with a CRITIC method, introducing a time decay factor to dynamically correct a risk score through an improved TOPSIS method, calculating the Euclidean distance between an access request and a positive / negative ideal solution, and generating a normalized risk closeness degree. And based on the risk score and a preset threshold value, dynamically matching a hierarchical permission strategy, and adopting a static rule and a priority coverage mechanism to eliminate permission conflicts. According to the method, multi-dimensional risk assessment and dynamic weight adjustment are fused, the problems of insufficient real-time performance, subjective weight dependence and weak uncertainty processing capability in a traditional method are solved, the accuracy and security of access control are remarkably improved, and the method is suitable for scenes with high security requirements such as cloud computing and finance.
Owner:LINYI UNIVERSITY

Data security management system and method in smart power grid

The invention relates to the technical field of information security, and discloses a data security management system and method in an intelligent power grid, and the system comprises a dynamic encryption and key management module which is used for carrying out the encryption and key management of the data of the intelligent power grid, determining an encryption algorithm according to the sensitivity of the data, and generating a corresponding key, the dynamic encryption and key management module transmits encrypted data and key information to the adaptive access control module so as to ensure the security of data access; and the self-adaptive access control module is used for managing access permissions of the user and the equipment and performing dynamic authorization according to the attribute label and the context information. Through dynamic encryption and adaptive key management, an encryption algorithm and a key length are adjusted in real time according to data sensitivity and a network environment, a quantum key distribution technology is combined, high security and quantum attack resistance of a key are ensured, and then security and real-time performance of data transmission are ensured.
Owner:HUANENG FUXIN WIND POWER GENERATION CO LTD

Agricultural data security sharing method based on federal learning

The invention relates to the technical field of agricultural data security, and discloses an agricultural data security sharing method based on federated learning, through cooperative operation of a user terminal module, a data classification module, a federated learning module, an agricultural cloud database and a security protection module, a user terminal encrypts, uploads, decrypts and feeds back agricultural data through an edge computing device; the data classification module performs multi-level label labeling on data of planting industry, animal husbandry and the like by using a differential privacy technology; the federated learning module is combined with homomorphic encryption to realize local model training and parameter aggregation; the agricultural cloud database stores encrypted knowledge assets by using an IPFS technology; the security protection module integrates block chain evidence storage and a dynamic access control mechanism, the workflow comprises data encryption uploading, privacy protection classification, federated model training, solution generation and security feedback, and by adopting a federated normal form of a data immobile model, the security protection module can effectively protect the security of the original data on the premise of ensuring that the original data is not out of the domain. And value mining and safe sharing of cross-regional agricultural data are realized.
Owner:BEIJING TECH & BUSINESS UNIV