37 results about "Data in transit" patented technology

A system (100) for securing cloud-based large language models through cyber threat defense and compliance monitoring, comprising: (a) an access control and authentication module configured to authenticate users and applications using role-based access control (RBAC) and multi-factor authentication (MFA); (b) a data protection and encryption module configured to encrypt data in transit and at rest and to anonymize sensitive input / output data using cryptographic techniques; (c) a threat detection and behavior monitoring module employing machine learning algorithms to identify anomalies and detect potential cyber threats in real time;(d) a regulatory compliance monitoring module configured to continuously assess system operations against applicable regulatory frameworks and generate alerts in the event of deviations from the regulations; (e) an incident response and mitigation module configured to automatically execute predefined response actions upon detection of threats or regulatory violations; (f) a logging, auditing, and forensic analysis module configured to securely log system activities, interactions, and threat events with cryptographic integrity protection; and (g) a governance and policy management module configured to define, update, and enforce organizational AI usage and compliance policies via the cloud-based LLM infrastructure.

The invention discloses a user entity behavior anomaly analysis and processing method and device, equipment and a medium, the method comprises the steps that a user access link is constructed based on user behavior data acquired from multiple sources, and the user behavior data comprises data acquired from a service log, a security log and network traffic; obtaining a sensitive information feature library and a sensitive information identification rule library which are obtained by performing traceability analysis on leakage events in the report case library; using the sensitive information identification rule base to convert the user access link into a multi-dimensional behavior portrait; calculating a corresponding behavior deviation degree based on the user access link and the multi-dimensional behavior portrait through an attention mechanism network model; and according to the behavior deviation degree and the sensitive information feature library, context-aware real-time filtering is carried out on data in transmission based on a multi-level sensitive factor dynamic filtering strategy. By monitoring the user behavior access link, the capability of responding to the abnormal behavior is improved.

The invention discloses a PCIe (Peripheral Component Interconnect Express) switching chip for realizing calculation in transmission, a switch with the PCIe switching chip and a communication system with the PCIe switching chip, the switching chip comprises a physical layer, a data link layer, a transaction layer and a calculation module, and is used for responding to the condition that a specific prefix of a transaction layer data packet is analyzed by the transaction layer and carries a preset calculation instruction; if yes, the calculation module analyzes the calculation instruction analyzed by the transaction layer so as to extract a calculation parameter field in the calculation instruction; the calculation module generates and executes a task of calculating the data in transmission according to the calculation parameter field, and calculation does not need to be started after all the data to be calculated are in place; firstly, part of the currently received data to be calculated is calculated to obtain an intermediate calculation result; and aggregating the subsequent newly received data to be operated and the intermediate operation result. According to the invention, by inserting the programmable calculation path into the PCIe switch, an innovative mechanism of'transmission while calculation 'is realized, the system delay is reduced, and the bandwidth occupation is reduced.

The invention relates to the technical field of information processing and fault tolerance, and discloses a multi-channel redundant transmission cross-network synchronization control system, which comprises a data source module, a data processing module, a data synchronization module and a data synchronization module, and is characterized in that the data source module is used for generating to-be-synchronized data information; the first network transmission module, the second network transmission module and the third network transmission module are respectively connected with the data source module and are used for receiving the data information and transmitting the data information through different communication links; and the synchronous control module is respectively connected with the first network transmission module, the second network transmission module and the third network transmission module and is used for receiving the data information transmitted by each network transmission module. Through clock calibration, time sequence adjustment and Hash verification functions of the synchronous control module, the problems of data disorder and inconsistency in multi-channel transmission are accurately solved. The clock synchronization sub-module unifies the time reference of each channel, the data sequence adjustment sub-module arranges the data time sequence as required, and the data consistency verification sub-module quickly locates and corrects error data.

This disclosure provides systems, methods, and devices for a memory system that supports encryption of in-transit data for replaying protected memory blocks (RPMBs). In a first aspect, a method of processing data for a memory system includes receiving, from a host device, an authentication key for authenticating access to data stored in a portion of a memory module; deriving an encryption key based on the authentication key; and processing data transmitted over a first interface between the host device and the memory system based on the encryption key. Other aspects and features are also claimed and described.

The invention discloses a data error control method and system for high-speed data transmission of a camera, and relates to the technical field of satellite communication. The method comprises the following steps: quantitatively evaluating the state of a communication link based on the camera data throughput and the effective data receiving rate of a satellite-borne bus, and dynamically adjusting the working mode of the communication link based on the state of the communication link so as to ensure the stability of the data transmission process; dynamic credibility marking is carried out on the camera data based on the satellite-borne bus data error rate, and abnormal camera data can be accurately identified; and carrying out secondary state marking on the camera data marked by the credibility based on the state parameters of the processor. Dynamic intelligent fault-tolerant control over the mass high-speed data flow of the satellite-borne camera in the transmission process is achieved, and the integrity and reliability of data under bandwidth pressure and space interference are effectively guaranteed.

The purpose of the present invention is to obtain a communication device (3) which makes it possible to shorten a message non-delivery time by reducing a link switching time when re-selecting a link. The communication device (3) comprises: a reception unit (32) that receives data transferred from a preceding-stage communication device; a transfer unit (31) that transfers the data received by the reception unit (32) to a subsequent-stage communication device; and a control unit (33) that controls data relay, which uses the reception unit (32) and the transfer unit (31), in a multi-hop transmission, and when it is predicted that link quality among communication devices on a currently-used path will not satisfy required link quality in a wireless communication system allowing multi-hop transmission using a plurality of paths, performs control to cause the transfer unit (31) to transfer, to a communication device serving as the source of data transfer in the multi-hop transmission, a link re-selection recommendation message for recommending link re-selection in the multi-hop transmission.

This disclosure proposes a short packet communication method for UAV relay systems based on NOMA technology. The method includes the following steps: establishing a system model of the UAV relay system, which includes a control terminal, UAVs, and multiple target users; short packet communication transmission between the control terminal, UAVs, and multiple target users based on NOMA technology; and, based on the system model, jointly optimizing the total data packet length, UAV flight position, and UAV power allocation in the short packet communication transmission to obtain the minimum effective packet error rate for the target users. The method proposed in this disclosure can effectively reduce the communication latency of short packet transmission in UAV relay systems and the effective packet error rate at the target users.

The present invention relates to the field of network data security technology, and in particular to a distributed data security protection system based on Internet of Things nodes, comprising a security negotiation module, a dynamic encryption module, an identity authentication module, a data integrity detection module and an intrusion detection module; wherein: the security negotiation module is used to dynamically select an encryption algorithm, an authentication mechanism and a data transmission strategy; the dynamic encryption module is used to encrypt the transmitted data; the identity authentication module is used to perform identity authentication between nodes; the data integrity detection module is used to perform integrity verification on the data in transmission; the intrusion detection module is used to analyze and identify potential security threats in real time; the present invention improves the security of data transmission between Internet of Things nodes and the overall protection capability of the system by dynamically selecting an encryption algorithm, an authentication mechanism and a data transmission strategy, and combining real-time intrusion detection and threat identification.

The application discloses a data error control method and system for high-speed data transmission of a camera, and relates to the technical field of satellite communication.The method comprises the following steps: quantitatively evaluating the communication link state based on the camera data throughput and the effective data receiving rate of the satellite bus, and dynamically adjusting the working mode of the communication link based on the communication link state, so as to ensure the stability of the data transmission process; dynamically marking the camera data based on the data error rate of the satellite bus, which can accurately identify abnormal camera data; and marking the camera data marked with the reliability again based on the processor state parameters. The application realizes dynamic intelligent fault-tolerant control of the massive high-speed data stream of the satellite camera in the transmission process, and effectively guarantees the integrity and reliability of the data under the bandwidth pressure and space interference.

Energy aware data encryption operations are disclosed. An awareness engine includes models configured to generate a recommendation that includes an encryption time and / or an encryption model. When the encryption operation is a data at rest encryption operation, the data is encrypted in accordance with the recommendation and stored at the storage system. When the encryption operation is a data in motion encryption operation, the data is encrypted and transmitted to a target storage system in accordance with the recommendation. At the target storage system, the encrypted may be stored in an encrypted form or decrypted and stored. The recommendations are configured to account for energy considerations including energy cost and / or energy source.

A system and method securely and selectively provide visibility along a communication path in end-to-end communications, while ensuring security of the transmission, and while further ensuring that unauthorized persons cannot view network packets. A separate parallel channel is used to provide visibility into data in transit to authorized parties, without revealing such data to unauthorized parties. In at least one embodiment, the separate parallel channel is implemented using a secure group messaging platform. In addition, all needed equipment is integrated in the end-to-end connection across layers and protocols into the secure messaging group. Secure, scalable messaging groups can be based on a ratchet tree protocol so as to guarantee forward as well as post-compromise security.

A processing system can perform joint de-interleaving and rate recovery on data elements from a received transmission. A load engine can write new data elements for a portion of a received code block into a de-interleaving buffer in a column-wise order. A de-rate-matching engine can read the new data elements in row-wise order from the de-interleaving buffer and combine the new data elements with stored data elements from a code-block buffer according to the position of the data elements in a code block, writing the updated data elements back to the code block buffer. The DRM engine can include a cache that stores recently updated data elements. When an address collision occurs between two update operations, the DRM engine can retrieve the recently updated data elements from the cache rather than waiting for the code block buffer.

In a method for data transmission, a plurality of data packets is received from a user plane function (UPF) entity of a core network. Each of the plurality of data packets is associated with a same service flow identifier. The received plurality of data packets is transmitted to user equipment (UE). When the transmission to the UE of one of the plurality of data packets fails and the one of the plurality of data packets is identified as a first data packet type that affects recovery of at least one other data packet in the plurality of packets, the transmission of the at least one other data packet in the plurality of data packets is stopped.

An intermediate apparatus and method for relaying data from a remote wireless device to a base station with reduced latency is discussed. The method includes the steps of receiving a transmission having control information and data. Determining from the control information that the data is to be forwarded to a wireless communication node and that a future data transmission comprising data to be forwarded is scheduled. Estimating from the control information an amount of the data in the future data transmission. Generating a resource request comprising the estimated amount of data in the future data transmission and transmitting, the resource request towards the wireless communication node.

The present invention relates to the technical field of transparent file encryption, and in particular to a method for transparent shared file encryption, comprising: encrypting and saving basic data in a shared file, and establishing virtual data for the basic data; identifying data to be encrypted in the virtual data, and dividing the risk level of the data to be encrypted; determining the decryption area of ​​the data to be encrypted; screening abnormal data based on feature points in the data to be encrypted; transmitting the screened data to be encrypted; determining a transmission label in the transmission process; judging whether the security risk meets the requirements according to the packet loss rate of the data to be encrypted; if the security risk does not meet the requirements, adjusting the number of data packets in transmission, or adjusting the update and training ratio of the basic data log according to the number of abnormal accesses to the audited log. The present invention achieves the reduction of data security risks and log audit risks.

The present invention relates to the field of network communications technology, and more particularly to a method and system for protecting data from tampering in Ethernet data transmission. The method comprises: obtaining information about a data packet to be sent from a current host via a current switch, determining its transmission distance and current bit rate, and calculating an estimated transmission time; if the estimated time exceeds a preset threshold, obtaining the switch's network bandwidth parameters, determining a maximum bit rate as a target bit rate, and recalculating the transmission time; if the recalculated time is less than the threshold, sending the data packet to a target host via a target switch; otherwise, taking other security measures. This method shortens transmission time by dynamically adjusting the bit rate, reducing the risk of data interception and tampering, and simultaneously improving transmission efficiency.

Systems, methods, apparatuses, and computer program products for configured grant small data transmission reconfiguration without user equipment context in a distributed unit are provided. For example, a method can include receiving, at a first network element, data in a transmission from a user equipment. The method can also include storing a first indication of a first configuration used by the user equipment to perform the transmission. The method can further include sending, to a second network element, a resume request to set up communication context for the data transmission. The method can additionally include receiving, from the second network element, a second indication of a second configuration previously allocated to the user equipment. The method can also include comparing the first indication and the second indication. The method can further include proceeding with setting up the communication of the data based on the comparing.

Technical solutions provide a setup sequence for multiple access point (AP) coordinated beamforming (CBF). A system may include a first access point (AP) configured to transmit a first notification frame to a second AP capable of participating in a coordinated beamforming (CBF), the first notification frame including a first set of stations of the first AP participating in CBF transmissions. The first AP may be configured to receive a first response frame from the second AP in response to the first notification frame, the first response frame including a second set of stations of the second AP participating in the CBF transmission. The first AP may be configured to transmit data in the CBF transmission to at least one station of the first set of stations or the second set of stations in response to the first response frame.

A centralized financial data synchronization system for S / 4HANA environments, consisting of: A data ingestion module configured to capture financial transactions, master data records, journal entries, tax data, and intercompany postings from multiple enterprise modules and external third-party systems. a centralized synchronization engine that is operationally connected to the data ingestion module and configured to process and synchronize the collected financial data in real time or near real time; a validation and harmonization layer configured to standardize heterogeneous financial data structures into a unified data model, detect inconsistencies, duplicates and structural discrepancies, and apply predefined financial governance rules; a reconciliation processor configured to compare synchronized financial records with the records of the source system to identify discrepancies and automatically generate exception alerts or corrective workflows; a security framework that includes encryption mechanisms for data in transit and at rest, role-based access control, and activity logging to protect sensitive financial information; and a reporting interface configured to generate consolidated financial reports, audit trails, variance reports, and centralized dashboards for authorized users; the system ensures centralized, secure and scalable synchronization of financial data across cloud, on-premise or hybrid S / 4 HANA infrastructures.

The invention discloses an efficient storage synchronization system and method oriented to an active-active data center, and relates to the technical field of data synchronization. The efficient storage synchronization system comprises a data partitioning and labeling module, a data storage module and a data synchronization module, the data synchronization module is used for tracking all data updating in the logic partition and synchronously updating the data; the synchronous data transmission optimization module is used for preprocessing the data in the synchronization process and reducing the data volume needing to be transmitted; the conflict detection and processing module is used for detecting whether the synchronized data conflicts or not in the synchronization process, and if yes, processing the conflicts according to a preset priority processing strategy; and the synchronization state monitoring module is used for checking whether the synchronization state data of the two data centers are consistent or not after data synchronization is completed, and if the synchronization state data of the two data centers are inconsistent, triggering data recovery operation. By automatically triggering the data recovery operation, it is ensured that the data is rapidly recovered to the consistent state, and the self-healing capacity and reliability of the system are improved.

This disclosure provides a Layer 2 service forwarding method, system, electronic device, and storage medium, relating to the field of mobile communication technology. The method includes: receiving a first Layer 2 Ethernet frame message; determining a termination-type Layer 2 forwarding segment identifier corresponding to the first Layer 2 Ethernet frame message, the termination-type Layer 2 forwarding segment identifier indicating the corresponding ESP encryption / decryption method; encapsulating the first Layer 2 Ethernet frame message into a first target message, wherein the outermost header of the first target message includes the termination-type Layer 2 forwarding segment identifier; performing ESP encapsulation on the first target message to obtain a target data packet; and sending the target data packet to a second PE. This disclosure can implement ESP encapsulation based on the termination-type Layer 2 forwarding segment identifier, and then implement Layer 2 forwarding. Therefore, this disclosure can combine security mechanisms in SRv6 networks to ensure data security during transmission.

AI based ubiquitous online consultations method and system is disclosed. A computer-implemented method comprises receiving an electronic input from one or more service providers, wherein the electronic input includes a set of credentials associated with the one or more service providers worldwide. The method further comprises verifying the one or more service providers based on the set of credentials that are validated from one or more regulatory authorities including licensing authority, certification authority, and professional association; and preparing a database of service providers by including the verified one or more service providers. The method further comprises implementing an access control mechanism based on a user's role, permission, and authentication credentials to prevent unauthorized access from viewing or modifying the database. The method further comprises employing an encryption protocol to encrypt the database at rest and in transit.

This application discloses a data retransmission method, apparatus, device, and storage medium, belonging to the field of communications. The method is executed by a first device, which operates a first intermediate access control (MAC) entity and a first packet data aggregation protocol (PDCP) entity. The method includes: when the first MAC entity determines that data has been lost in a Hybrid Automatic Repeat Request (HARQ) transmission, the first MAC entity triggers the first PDCP entity to perform an Automatic Repeat Request (ARQ) retransmission on the data. This method, by having the first MAC entity trigger the first PDCP entity to perform ARQ retransmission, achieves fast data retransmission and reduces data retransmission latency.

This invention discloses a PCIe switching chip for in-transmission computation, and a switch and communication system incorporating the same. The switching chip includes a physical layer, a data link layer, a transaction layer, and a computation module. In response to the transaction layer parsing a specific prefix carrying a preset computation instruction in a data packet, the computation module parses the computation instruction to extract computation parameter fields. The computation module generates and executes a task to compute data in transmission based on these parameter fields, without waiting for all data to arrive before starting computation: it first performs computation on the currently received portion of the data to be computed to obtain intermediate computation results, and then aggregates the subsequently received data with the intermediate computation results. This invention achieves an innovative "computation while transmitting" mechanism by inserting a programmable computation path into the PCIe switch, reducing system latency and bandwidth consumption.

The invention relates to the technical field, and discloses a logistics transportation optimization method and system based on the Internet of Things, and the method comprises the steps: collecting data during transportation in real time through Internet of Things equipment; integrating the collected data by using a deep learning algorithm, constructing a multi-dimensional prediction model, and predicting future transportation demands; according to a data analysis result, optimizing a transportation route and arrangement in real time; an RFID tag and a sensor are used for tracking the whole transportation process of goods in real time, and a state report is automatically generated and fed back to a client and a management center in time; a collaborative distribution network based on the Internet of Things is established, information and resources are shared among logistics companies, and reasonable distribution of transportation tasks and efficient utilization of the resources are realized. According to the invention, the purposes of intelligence and comprehensive optimization can be realized in the logistics transportation industry, the problems of information islands and resource waste in traditional logistics management are effectively solved, and powerful support is provided for promoting sustainable development of the logistics industry.

This disclosure relates to, among other things, managing data communicated between systems, services, and / or devices using explicit private networking techniques that provide relatively robust end-to-end security. In some embodiments, explicit private networking techniques may protect data in transit and / or as at rest and / or in use in potentially hostile environments. In various embodiments, an explicit private networking techniques architecture may protect connected device data where and when it is generated by encrypting it and maintaining that protection until it is consumed in a trusted information platform and / or service that uses identity and access management services to identify, authenticate, and / or authorize permissions to read, modify, and / or collaborate with that data and / or control devices and / or issue associated device commands.

A real-time multi-cloud data synchronization system with built-in security controls that includes: a synchronization engine configured to detect and propagate data changes in real time across a variety of heterogeneous cloud environments; a set of security controls integrated into the synchronization engine, where the security controls include end-to-end encryption of data in transit and at rest, and identity and access management that enforces role-based permissions; a policy orchestration layer configured to dynamically manage synchronization rules, data transformation logic, and workload distribution based on operational parameters; a conflict resolution module configured to reconcile data discrepancies using source of truth hierarchies, timestamps, and version metadata and escalate unresolvable conflicts for manual intervention; a real-time monitoring dashboard that provides metrics on synchronization status, data throughput, latency, security events, and compliance status through a role-based web interface; a cloud-based storage subsystem that persistently stores source data, synchronized replicas, metadata, and audit logs on a scalable infrastructure.

AI based ubiquitous online consultations method and system is disclosed. A computer-implemented method comprises receiving an electronic input from one or more service providers, wherein the electronic input includes a set of credentials associated with the one or more service providers worldwide. The method further comprises verifying the one or more service providers based on the set of credentials that are validated from one or more regulatory authorities including licensing authority, certification authority, and professional association; and preparing a database of service providers by including the verified one or more service providers. The method further comprises implementing an access control mechanism based on a user's role, permission, and authentication credentials to prevent unauthorized access from viewing or modifying the database. The method further comprises employing an encryption protocol to encrypt the database at rest and in transit.

A memory subsystem includes link encryption for the system memory data bus. The memory controller can provide encryption for data at rest and link protection. The memory controller can optionally provide link encryption. Thus, the system can provide link protection for the data in transit. The memory module can include a link decryption engine that can decrypt link encryption if it is used, and performs a link integrity check with a link integrity tag associated with the link protection. The memory devices can then store the encrypted protected data and ECC data from the link decryption engine after link protection verification.