1801 results about "Confidentiality" patented technology

A federated distributed computational system enables secure collaboration across multiple institutions for biological data analysis. The system consists of interconnected computational nodes managed by a centralized or decentralized federation manager, depending on the deployment model. Each node contains specialized components that work together to process biological data while preserving privacy. These components include a local computational engine that handles data processing, a privacy preservation module that protects sensitive information, a knowledge integration component that manages biological data relationships by connecting various data sources, and a communication interface that enables secure information exchange between nodes. The federation manager coordinates all computational activities across the network while ensuring data privacy is maintained throughout the process. This architecture allows research institutions to collaborate on complex biological analysis tasks without compromising their sensitive data, enabling breakthrough discoveries through shared computational resources and expertise while maintaining the security, compliance, and confidentiality required in biological research.

A federated distributed computational system enables secure collaboration across multiple institutions for multi-species biological data analysis. The system consists of interconnected computational nodes managed by a central federation manager. Each node contains specialized components that work together to process multi-species biological data while preserving privacy. These components include a local computational engine that handles data processing, a physics-information integration subsystem that combines physical state calculations with information-theoretic optimization, a privacy preservation module that protects sensitive information, a knowledge integration component that manages biological data relationships, and a communication interface that enables secure information exchange between nodes. The federation manager coordinates all computational activities and manages resource allocations across the network while ensuring data privacy is maintained throughout the process. This architecture allows research institutions to collaboratively analyze complex, multi-species biological systems through integrated physics-based modeling and information-theoretic approaches while maintaining security and confidentiality.

The invention relates to the technical field of data encryption, and discloses a data encryption protection system and method for intelligent controller hardware, and the method comprises the steps: generating a random confusion factor based on a real-time operation state through constructing a dynamic confusion algorithm, and carrying out the nonlinear transformation of original data; implementing a fragment encryption strategy, dividing fragments according to data sensitivity levels, and adopting a heterogeneous encryption algorithm; generating a dynamic binding key in combination with the environment parameters and the hardware unique identifier; hardware-level integrity check is executed, and data and hardware are verified through cyclic redundancy check codes and hardware fingerprints; establishing a self-adaptive key updating mechanism; performing multi-layer defense linkage; and implementing anti-side channel protection, and constructing a security audit log. According to the method, the hardware data security of the intelligent controller is comprehensively guaranteed, various security threats are effectively resisted, and the data confidentiality, integrity and availability are improved.

A system and method for a federated deep learning platform utilizing homomorphically-compressed and encrypted data. The system comprises multiple client devices, each with a local dataset, and a central server hosting a deep learning core. Client devices convert local data into codewords, which are also homomorphically encrypted. The central server processes these encrypted codewords without decryption, preserving data privacy. The platform supports at least two architectural variants: a conventional Transformer trained on codewords, and a Latent Transformer operating on latent space vectors. Both variants eliminate the need for embedding and positional encoding layers. The system aggregates encrypted model updates from clients, enabling collaborative learning while maintaining data confidentiality. Additional features comprise differential privacy implementation and adaptive federated optimization techniques. This innovative approach allows for efficient, privacy-preserving distributed learning across diverse datasets, addressing key challenges in federated learning such as data heterogeneity, non-IID distributions, and communication efficiency.

The invention provides a multi-feature information hidden document integrity verification and tampering positioning method, and relates to the field of network security and digital document protection. The multi-feature information hidden document integrity verification and tampering positioning method comprises the following steps: S1, document multi-dimensional feature extraction and encryption: based on an original Word document, adopting an SHA-3 algorithm to calculate a full-text hash value as a content feature, and extracting document object model features such as paragraph hierarchy, table structure and the like through a DOM tree analyzer; after the two types of features are combined into a feature matrix, a dynamic secret key is generated through Logistic chaotic mapping for XOR encryption, and an encrypted document feature matrix is generated. A dynamic key is generated by combining Logistic chaotic mapping encryption through a multi-dimensional extraction technology fusing document content hash values and structural features, so that the anti-cracking capability of a feature matrix is remarkably improved, the confidentiality of document features in open network transmission is ensured, the block information retention rate is simulated and predicted by adopting Monte Carlo, and the watermark embedding weight is dynamically allocated.

A federated distributed computational system enables secure collaboration across institutions for unified biological and multiomics data analysis. It comprises interconnected computational nodes managed by a central federation manager. Each node includes specialized components: a local computational engine for biological data processing, a privacy-preservation system, a knowledge integration component leveraging dynamic knowledge graphs, and a secure communication interface. The federation manager coordinates computational activities while ensuring security, privacy, legality, and contractual adherence. This architecture allows institutions, citizen scientists, and patients to collaborate on complex biological analyses without compromising sensitive data. By enabling shared computational resources and expertise, the system facilitates breakthrough discoveries while maintaining confidentiality. Additionally, it supports pro-rata or contractually defined participation in resultant benefits or knowledge, ensuring equitable collaboration.

The invention discloses an unmanned inspection and intelligent fault judgment method. A security threat model is constructed through deep learning, potential risks are identified, a strategy is made, security analysis modeling based on a comparison technology is utilized, and system state abnormity is detected. In data transmission, confidentiality and integrity are guaranteed by integrating a plurality of security means, a multi-level protection framework is designed, and all-round defense is carried out from a network boundary, a host terminal and an application system. By means of anomaly detection monitoring index data, anomaly and risk are subjected to correlation analysis, and a basis is provided for decision making. And regularly carrying out security assessment and penetration testing, repairing vulnerabilities, and carrying out optimization and reinforcement. The method covers multiple aspects such as threat modeling, safety analysis, data protection, protection framework construction, anomaly detection and evaluation reinforcement, the safety and reliability of the unmanned inspection system are effectively improved, network attacks and illegal access are resisted, and stable operation of the system is guaranteed.

The present invention discloses a system and method for secure artificial intelligence-based financial technology governance and risk management, designed to provide real-time, autonomous, and verifiable compliance assurance within digital financial ecosystems. The invention integrates a secure artificial intelligence processing unit, a governance control processor, a cryptographically anchored storage unit, a federated learning coordination processor, and a quantum-resistant communication interface enclosed within a tamper-proof hardware structure. The system performs encrypted machine learning computations on financial transaction data using homomorphic encryption and trusted execution environments to preserve confidentiality during analysis. It computes a governance risk index based on probabilistic inference and anomaly detection to identify regulatory deviations, applies adaptive compliance reasoning across multi-jurisdictional frameworks, and automatically enforces governance actions through secure decision logic.

The invention discloses an information encryption method for wireless electronic countermeasure, and relates to the technical field of wireless transmission. According to the method, the wireless channel state is monitored in real time, the channel quality evaluation model is established, and the adaptive frequency adjustment algorithm and the cognitive radio technology are combined, so that whether the channel meets the communication quality requirement or not can be accurately judged, the influence of interference and attack on communication is effectively avoided, the continuity and stability of the communication process are ensured, and the communication quality is improved. The adaptability and the reliability of a communication system in a complex electromagnetic environment are remarkably improved, the quantum key is generated based on an encryption communication protocol of quantum key distribution, extremely high security of the key is ensured, communication data are difficult to crack in the encryption transmission process, security threats such as eavesdropping and tampering are effectively resisted, and the security of the communication system is improved. And through a secret key pre-distribution mechanism and a secret key updating process, the insufficient secret key distribution rate and the potential security risk are dealt with, the security of communication is further enhanced, and the confidentiality and integrity of information transmission are ensured.

The invention discloses a charging facility data security protection method and system, electronic equipment and a storage medium, and relates to the technical field of information security. The method comprises the following steps: verifying the identity of a vehicle based on a charging request to obtain a verification result; when the verification result is successful, obtaining a charging parameter of a control layer of the target charging pile and a billing parameter of a service layer based on the charging request; generating a first key of a control layer and a second key of a service layer based on the vehicle information of the vehicle and the charging request; performing first encryption processing on the charging parameter based on the first key to obtain first encrypted data, and performing second encryption processing on the charging parameter based on the second key to obtain second encrypted data; and the first encrypted data and the second encrypted data are transmitted to a vehicle terminal of the vehicle after time sequence identifiers are added to the first encrypted data and the second encrypted data. By implementing the technical scheme provided by the invention, the confidentiality of the charging parameter and the billing parameter can be improved, the risks of data leakage, tampering and the like are reduced, and the data security of the charging station is further improved.

The invention relates to the technical field of project management, in particular to a project cost data calculation management system and method.The project cost data calculation management system comprises a data acquisition module, a data modeling module, a data fusion and optimization module, a dynamic analysis and early warning module, a cost analysis module and a data storage module; a global cost prediction model is established through standardized processing of acquired multi-dimensional data, and real-time data is dynamically analyzed in a project implementation process to generate a cost control report and an adjustment suggestion. And after the project is completed, the system comprehensively analyzes all cost data and generates a multi-dimensional cost analysis report. The security and expandability of data are guaranteed by adopting a distributed storage technology, and the confidentiality and integrity of the data are ensured through a multi-user authority management function. According to the invention, the accuracy, real-time performance and safety of engineering cost management can be effectively improved, and comprehensive support is provided for cost control and optimization of an engineering project.

The invention belongs to the technical field of network security, and discloses an encrypted enterprise network data security access method and system, and the method comprises the steps: constructing a biological recognition unit and an equipment binding unit, recognizing multi-dimensional biological data through the biological recognition unit, and carrying out the identity authentication of a user through the combination of a dynamic token generation time binding mechanism; the equipment binding unit associates the identity authentication result with the hardware fingerprint of the security access terminal to generate a digital identity certificate; a basic key is generated and updated in a rolling mode through a quantum random number generator; dual protection is carried out on the multi-dimensional biological data through a hierarchical encryption unit, the hierarchical encryption unit comprises an application layer and a transmission layer, the application layer adopts an SM4 algorithm to encrypt service content data in the multi-dimensional biological data, and the transmission layer adopts an SM2 algorithm to generate a session key to carry out forward secrecy; the security access of enterprise network data is ensured, and the security protection capability of the enterprise network is comprehensively enhanced.

The invention relates to the technical field of data security, in particular to a big data security storage method and system based on cloud computing, and the method comprises the following steps: initializing a cloud service node, selecting data blocks needing security storage, distributing an identifier for each data block, sorting and classifying the data blocks by adopting a batch processing mode, and storing the sorted data blocks into a database; and obtaining an initialized data block. According to the method, the security of the data in the cloud environment is greatly improved through key segmentation and storage of part of keys in a plurality of security cloud service nodes, the decryption rule is constructed by using the threshold cryptography model, the data can be decrypted only when a sufficient number of key parts are collected, unauthorized access and data leakage are effectively prevented, and the security of the data in the cloud environment is improved. The strategy of dynamically adjusting the secret key replacement period adapts to the access frequency and the change dynamic state of the storage data block, and the confidentiality, the integrity and the availability of the data are improved, especially in a sensitive service scene with a large data volume.

The invention relates to a QUIC protocol-based distributed node unified identity authentication method and system, belongs to the technical field of network security, is applied to a client, and comprises the following steps: registering a client domain name identity through a certificate authority, obtaining a client certificate, and pre-storing a server certificate chain; generating a QUIC initial data packet according to the target server domain name identifier and the client certificate, and sending the QUIC initial data packet to the server; receiving a QUIC handshake data packet returned by the server; verifying the legality of the server certificate based on the server certificate chain, and if the server certificate is legal, calculating a pre-master key according to the client DH private key and the server DH public key; deriving a 1-RTT session key based on the pre-master key; generating a signature verification message, and sending the client certificate and the signature verification message to a server; and synchronously using the 1-RTT session key to encrypt the application layer data with the server, and transmitting the data to the server in the 1-RTT encryption space of the QUIC protocol. According to the invention, the reliability of node identities and the confidentiality of data are ensured.

The invention belongs to the technical field of communication, and discloses a network transmission management method and system, and the method comprises the steps that a data collection module collects multi-dimensional data in real time; the decision planning module optimizes a network route; the decision planning module performs protocol and encryption switching; the execution module dynamically adjusts the transmission strategy; the safety protection module performs four-dimensional dynamic protection on the data; the hybrid cloud deployment module guarantees the confidentiality of core data; the multi-active data center module realizes data synchronization among a plurality of data centers; the cross-domain collaborative module realizes privacy protection collaborative training between edge nodes through federated learning; and the block chain auditing traceability module records the key operation log. According to the method, routing and flow prediction are optimized through a mixed quantum classical calculation engine, multi-protocol heterogeneous scheduling and neural mimicry congestion control are combined, the network transmission efficiency is greatly improved, the data transmission speed is improved, and the data leakage risk is reduced through application of a zero-trust security matrix and a quantum key distribution technology.

The invention discloses a quantum secret communication application security test method, system and device and a medium, and belongs to the technical field of communication security. According to the quantum secret communication application security test method, an attack detection model, a receiving and transmitting end detection model, a security performance index test model and a security result analysis model are constructed, and a security test process and a test process index are provided for the security problem of a classical communication process in quantum secret key distribution practical application; according to the method, the anti-attack capability and the security performance of a tested system are evaluated, so that the security of the quantum key distribution network is evaluated, and a corresponding test result is generated, so that the integrity and the confidentiality of a key in a transmission process are ensured, and a security evaluation reference can be provided for a power wireless public network; a communication security test verification scheme is provided for the quantum key distribution network, and the security operation of the key infrastructure is ensured.

The invention relates to the technical field of quantum computers, in particular to an anti-quantum signature method and system used between two terminals and electronic equipment. The initial to-be-verified commitment value of each terminal is obtained by homomorphic Hash commitment operation of the signature calculation result of the public key information stored in the terminal private key and encryption based on the commitment key, so that the confidentiality and randomness of the public commitment value are effectively ensured, and only two terminals need to interact and share the initial to-be-verified commitment value in the process. Compared with conventional data encryption, transmission and decryption operations, the data transmission frequency is reduced, and the signature verification effect is improved.

The invention is applied to the technical field of data storage, and particularly discloses a multilevel data encryption storage and access control method based on cloud computing, which comprises the following steps of: 1, data classification and multilevel encryption; step 2, constructing a layered secret key; step 3, data access control; and 4, constructing and dynamically updating the data access authority. According to the multi-level data encryption storage and access control method based on cloud computing, encryption grade division is performed on data according to the data confidentiality degree, and algorithm encryption with different intensities is performed on the data according to different encryption grades, so that encryption can be performed for different types of data, and compared with traditional single algorithm encryption, the encryption efficiency is improved. According to the technical scheme, the adaptability of data encryption can be improved, meanwhile, three levels of key structures are arranged to be matched with one another, the main key protects the middle key, the middle key isolates direct association of the main key, the working key and the data, and the exposure risk of the main key is reduced.

The invention discloses a mobile communication method based on anti-quantum and national cryptographic algorithm mixing and a mobile terminal. The method comprises the steps that the mobile terminal generates a first mixed verification public key and a first mixed signature private key; obtaining a mixed signature certificate; the mobile terminal obtains the mixed ciphertext and the first symmetric key, and the mobile terminal signs the mixed ciphertext to obtain a mixed signature; the validity of the hybrid signature certificate is verified by the server side by using a second hybrid verification public key, the validity of the hybrid signature is verified by a first hybrid verification public key built in the hybrid signature certificate, and the hybrid signature is decrypted by the server side by using a second hybrid decryption private key to obtain a first symmetric key; and the mobile terminal and the server side perform encryption communication by using the first symmetric key. Compared with the prior art, the mobile communication method based on the anti-quantum and national cryptographic algorithm mixture provided by the invention ensures the secure communication between the client and the server, and can maintain the confidentiality and integrity of data even under the threat of quantum computing.

The invention discloses a data security transmission method and system for hemodialysis equipment, and belongs to the technical field of data transmission. The method solves the problems that an existing method lacks fine management on data sensitivity, high-sensitivity data is prone to being leaked in the data transmission process, and the data transmission efficiency is affected, sensitivity classification standards are established, and the weight and the weight value of each class of standards are defined in multiple dimensions according to privacy, importance and the influence degree; the data is divided into high-sensitivity data, medium-sensitivity data and low-sensitivity data by performing scoring and sensitivity score calculation on various types of data. Various data are encrypted in different modes according to different sensitivity levels, and data transmission is carried out through different transmission channels and security protocols; the safety and confidentiality of the hemodialysis data in the transmission process can be effectively improved, and high-sensitivity data leakage is prevented; meanwhile, the transmission efficiency of the hemodialysis data is improved, and the flexibility of data transmission is enhanced.

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.

The invention provides a user travel data safety management system and method based on cloud computing, and the system comprises a multi-source data collection and adaption module which is used for collecting user travel data from various types of travel equipment; the hybrid encryption transmission channel module is used for establishing a safe transmission link between the data acquisition terminal and the cloud computing platform; the privacy screening and desensitization module is used for identifying and processing privacy sensitive contents in the data received by the cloud computing platform; the distributed storage architecture module is used for reliably storing user travel data on the cloud computing platform; the authority control and auditing module is used for controlling the calling authority of the external main body to the user travel data and auditing the data access condition; the data backup and recovery scheduling module recovers data when data risks exist; and the data visualization and analysis auxiliary module is used for presenting the data in a visualization mode. According to the invention, confidentiality, integrity and availability of travel data transmission and transparency and traceability of data access are ensured.

The invention discloses an encryption method and device for industrial internet data exchange, equipment and a medium, and relates to the technical field of industrial information security, and the encryption method comprises the following steps: generating a pair of public key and private key for industrial equipment or nodes preliminarily participating in data exchange by using an elliptic curve ECDH protocol, and carrying out initialized key exchange; generating a temporary additional key, and calculating a temporary session key; encrypting the temporary session key by using a public key of a receiver to obtain a session key, and processing data according to different stages of data exchange; and when each session ends or a preset time / data volume threshold is reached, automatically discarding the old key and renewedly negotiating a new session key. According to the method, resource consumption in the key exchange process is reduced, potential safety hazards possibly caused by key reuse or long-term key fixation are reduced, the attack resistance of the data exchange process is improved, the confidentiality and integrity of data exchange are guaranteed, and a continuous and safe environment is constructed for data exchange of the industrial internet.

A system and method for a federated deep learning platform utilizing homomorphically-compressed and encrypted data. The system comprises multiple client devices, each with a local dataset, and a central server hosting a deep learning core. Client devices convert local data into codewords, which are also homomorphically encrypted. The central server processes these encrypted codewords without decryption, preserving data privacy. The platform supports at least two architectural variants: a conventional Transformer trained on codewords, and a Latent Transformer operating on latent space vectors. Both variants eliminate the need for embedding and positional encoding layers. The system aggregates encrypted model updates from clients, enabling collaborative learning while maintaining data confidentiality. Additional features comprise differential privacy implementation and adaptive federated optimization techniques. This innovative approach allows for efficient, privacy-preserving distributed learning across diverse datasets, addressing key challenges in federated learning such as data heterogeneity, non-IID distributions, and communication efficiency.

The invention relates to the technical field of data management, in particular to a safety management method for financial data synchronization, which comprises the following steps: acquiring an original financial data stream, and performing data fragmentation processing on the original financial data stream to obtain fragmented data packets and data fingerprints; performing storage node mapping on the redundant coded data packet according to the storage network to obtain a storage node address chain; and performing abnormal access behavior identification on the storage node address chain according to the security threshold model to obtain a security policy instruction, and deploying the financial scheduling model to a cloud edge collaboration platform to realize security management of financial data synchronization. According to the method, data fragmentation processing, encryption and identity binding are performed on the original financial data, so that the confidentiality of the data can be effectively protected, the data is prevented from being accessed or tampered by an unauthorized third party in a transmission process, and the encrypted data packet ensures secure transmission of the data.

The invention provides a trusted traffic data distributed storage system based on a main side chain, and the system comprises a traffic collection module which is used for carrying out the real-time collection of encrypted traffic data generated in a network, and carrying out the preliminary standardization processing of the encrypted traffic data, and obtaining the standardized encrypted traffic data; the traffic side chain certification module is used for carrying out integrity verification and authenticity construction on the standardized encrypted traffic data to prevent the data from being tampered or forged, so as to form verified encrypted traffic data; the traffic side chain data module is used for carrying out structured storage on the verified encrypted traffic data and reserving queriable records in a side chain; and the trusted main chain module is used for recording data abstracts, verification records, access behaviors and model voting result information on the side chain. According to the method, a block chain decentration trust mechanism and an encryption index mechanism are combined, encryption state organization and rapid retrieval of the data are achieved, and confidentiality and controllability of the data in the storage and circulation process are guaranteed.

The invention relates to the technical field of government affair information management, in particular to a cloud-based government affair information management method, which comprises the following steps of: S1, adding a sensitivity label for each piece of government affair data in a cloud storage layer; s2, extracting data from the government affair database and generating a dynamic data view with an authority mark; s3, establishing a mapping relation table between routing keys and data source addresses; s4, acquiring a requester department function code, a business scene code and a target data identifier; s5, matching a target data source, and based on the authority mark in the dynamic data view, executing a desensitization operation on the sensitive field; and S6, if the genetic marker bit of the original data is true, superposing the data security classification in the original tag and the current security classification to form a new tag. According to the method, by constructing the sensitivity label and the dynamic authority control mechanism, safe inheritance and accurate access of government affair data in cross-department circulation are achieved, and the safety and compliance of data management are remarkably improved.

The invention relates to the field of power transaction security, in particular to a data security protection method for power transaction. Comprising the following steps: a registration authentication stage: completing identity registration through triple authentication of a physical token, biological feature recognition and a dynamic password and GPS positioning white list verification; in the key initialization stage, an SM2 asymmetric key pair and an SM4 symmetric communication key are dynamically generated according to a transaction time window and main body attributes, and are issued through a point-to-point encryption channel and updated in time; in the data encryption and binding stage, a transaction instruction is encrypted, signed and subjected to double-layer integrity verification; a matching and on-chain registration stage: executing matching after verifying the signature, encrypting a result, writing the result into the block chain, and generating a zero-knowledge proof; and in the settlement and supervision stage, settlement or alarm responsibility investigation is started after decryption verification. According to the invention, the problems of single identity authentication, static key, easy data tampering and the like in the prior art are solved, full-flow security protection of power transaction is realized, and data confidentiality, integrity and traceability are improved.

The invention relates to the technical field of Internet of Things terminals, and discloses an Internet of Things equipment security access method based on a mobile communication network, which specifically comprises the steps of Internet of Things equipment identity authentication, Internet of Things equipment permission setting, encryption of data transmitted by Internet of Things equipment, and encryption of the process of data transmission of the Internet of Things equipment. A data backup and recovery system is established through a safety auditing system and auditing log management of the system, and the operation state, network communication quality and the like of the Internet of Things equipment are monitored and analyzed in real time through a performance monitoring system and then optimized. The method can enhance the security of equipment identity authentication, improve the confidentiality and integrity of data transmission, reduce the security risk and vulnerability utilization, improve the flexibility and expandability of the system, enhance the defense capability and emergency response speed of the system, and improve the user experience and data reliability. And the security and the reliability of the Internet of Things equipment when the Internet of Things equipment accesses the mobile communication network are ensured.

The invention discloses a data management method and device, electronic equipment and a medium, and the method comprises the steps: responding to obtained transmission data of first equipment, extracting the transmission data, and obtaining a check code and equipment information; when it is confirmed that the transmission data is qualified according to the check code, desensitizing the transmission data, and determining an encryption confidentiality level mode corresponding to the transmission data according to the equipment type indicated by the equipment information; according to an encryption method corresponding to the confidentiality level, encrypting the desensitized transmission data by adopting an encryption mode to obtain encrypted data; performing desensitization processing and identification processing on the encrypted data to obtain encrypted identification data after desensitization processing; and storing the encrypted data identification data after the desensitization processing to a target storage area. The method can be applied to the business fields of financial science and technology, medical health, old-age care and the like, the overall data safety is improved, privacy protection of sensitive information is increased, meanwhile, the data management and tracing capacity is improved, and balance between safety and performance is achieved.