26 results about "Data masking" patented technology

The invention belongs to the technical field of deep space exploration, and particularly relates to a multispectral image displacement depth adaptive mapping method and system based on radiometric calibration, and the method comprises the steps: obtaining original black field data with the input bit depth being N and original flat field data with the input bit depth being N; after bad pixels are shielded according to the original black field data and the original flat field data, row offset and row response are calculated; sequentially determining a global scale according to the row offset and the row response, calculating an integration slope, and generating a lookup table according to the integration slope; and acquiring real-time monitoring input, reading the M-bit output value corresponding to the real-time monitoring input according to the lookup table, and correcting and updating the lookup table according to the M-bit output value. Based on a parameterized calculation process (derivation from row bias and row response to a global scale and an integrated slope), different input bit depth and output bit depth requirements can be met by modifying input parameters, inherent limitation caused by hard coding is avoided, and the configurability of cross-platform tasks is improved.

The present disclosure is related to systems and methods for data masking. The method includes obtaining at least one original file and a hierarchical relationship that is associated with data in the at least one original file. The method includes obtaining a masking template for the data in the at least one original file. The method includes masking the data in the at least one original file based on the masking template, to generate at least one target file. The method includes storing the at least one target file based on the hierarchical relationship.

Systems, methods, and computer program products for protecting a database against malicious activity are disclosed. A computer implemented method for protecting a database includes neutralizing an identified malicious activity performed with respect to the database during the occurrence of the malicious activity. The database may include a data masking mechanism where the neutralization of the malicious activity may utilize the data masking mechanism.

Disclosed is an array substrate, a method for manufacturing an array substrate, and a display panel. The array substrate includes a substrate layer, a common electrode layer, and a color resistance layer. A first groove and a second groove are formed on a side surface of the color resistance layer away from the substrate layer. A data masking line layer and a pixel electrode layer are formed on the color resistance layer. A part of the data masking line layer is located in the first groove, and another part of the pixel electrode layer is located in the second groove to form a first capacitance with the data masking line layer in the first groove.

A specialized computing environment that includes hardware and data security features to enable competitive organizations to co-analyze proprietary data without revealing the underlying proprietary data to unauthorized users. Proprietary data are stored in volatile memory, which may be automatically erased according to pre-stored criteria. The analysis is performed automatically by a processing unit without human intervention. Analytical results are sanitized (e.g., using data masking) to prevent the analytical result from being tracible to any particular data source. Sanitized analytical results are output without outputting the underlying proprietary data (except to users authorized to validate analytical results). The computing environment is enclosed within a secure enclosure (e.g., a steel box with a lock), does not include any peripheral devices outside the secure enclosure, does not communicate wirelessly, and does not have hardware ports accessible from outside the secure enclosure (except, in some embodiments, a wired connection for a web server).

The present disclosure provides a chip output characteristic parameter adjustment method, and relates to the technical field of semiconductors. The method comprises the following steps: writing a first test data group into a chip to be adjusted according to a data write mode corresponding to data masking, wherein at least part of the data in the first test data group is masked; reading a first read data group from the chip to be adjusted according to a data read mode corresponding to data masking; and in the case where it is determined that the chip to be adjusted has a data read-write error according to the first test data group and the first read data group, adjusting a timing parameter of a test machine to adjust the output characteristic parameter of the chip to be adjusted through the adjustment of the timing parameter. According to the embodiment of the present disclosure, the yield of the chip can be improved.

This invention provides a data processing unit, relating to the field of high-performance computing technology. The data processing unit includes a first-precision data masking processing module, a first-precision arithmetic module, and a second-precision arithmetic module. The first-precision data masking processing module is connected to both the first-precision arithmetic module and the second-precision arithmetic module. The first-precision data masking processing module includes a logic operation processing unit and a first multiplexer, with the logic operation processing unit connected to the first multiplexer. The data processing unit provided in this embodiment of the invention reduces module power consumption by using a forced mask to prevent abrupt changes in the input data of the first-precision arithmetic module.

A metadata-driven enterprise data architecture system for automated data collection, processing, and reporting, consisting of: a centralized metadata control repository configured to store canonical enterprise data models and business semantic definitions, source-destination mapping rules and transformation logic, data quality thresholds and matching parameters, governance policies and compliance controls, data provenance relationships and audit tracking rules, security and access control configurations, planning instructions and reporting specifications; an execution and orchestration engine that is operationally connected to the metadata control repository and configured to dynamically interpret metadata definitions, automatically implements data ingestion pipelines to extract data from legacy systems, cloud platforms, application interfaces, files, and streaming sources, performs transformation operations such as normalization, enrichment, deduplication, aggregation, and format harmonization to align the ingested data with the canonical enterprise data model, applies metadata-driven data quality validation, exception handling, and reconciliation processes to ensure accuracy and consistency, and enforces metadata-defined security policies, including role-based access control, encryption, and data masking.Automatic capture of complete data provenance and audit records across all processing stages and creation of standardized operational, analytical, and regulatory reports based on metadata-defined reporting structures and business metrics; where changes to metadata definitions automatically modify the collection, processing, governance, security, and reporting behavior without requiring manual redesign of data pipelines or application code.

The application provides a data shielding method and device and a computer readable storage medium, and relates to the technical field of terminals, and the method comprises the following steps: after detecting that a first data partition mounted in a first directory is abnormal, at least one blank folder corresponding to at least one first folder in the first data partition is mounted into at least one second directory, the first data partition supports starting an operating system of an electronic device, the blank folder is created in a second data partition, and the at least one second directory is a subdirectory of the first directory for mounting the at least one first folder; and the operating system is started by using the first directory. The technical scheme provided by the application can shield the data in the first folder in the first data partition by using the blank folder in the second data partition, so that the abnormal starting of the operating system caused by the file damage or data abnormality in the first folder is avoided, and the electronic device cannot be normally used.

The present disclosure relates to methods and systems for contextual data masking and registration. A data masking process may include classifying ingested data, processing the data, and tokenizing the data while maintaining security / privacy of the ingested data. The data masking process may include data configuration that comprises generating anonymized labels of the ingested data, validating an attribute of the ingested data, standardizing the attribute into a standardized format, and processing the data via one or more rules engines. One rules engine can include an address standardization that generates a list of standard addresses that can provide insights into columns of the ingested data without externally transmitting the client data. The masked data can be tokenized as part of the data masking process to securely maintain an impression of the ingested data and generate insights into the ingested data.

The present disclosure is related to systems and methods for data masking. The method includes obtaining data associated with coincidence events related to intrinsic background radiations of a plurality of crystals of the PET device. Each of the coincidence events may be detected by two crystals of the plurality of crystals of the PET device. The data associated with the each coincidence event may include first time information and second time information. The method includes determining a first time of fight (TOF) difference corresponding to the each coincidence event based on the first time information and the second time information. The method includes determining a second TOF difference corresponding to the each coincidence event based on locations of the two crystals that detect the each coincidence event. The method includes correcting the PET device based on the first TOF difference and the second TOF difference.

Hardware security modules (HSM) may be implemented at distributed edge devices to provide faster and dynamic processing of data. HSM-implemented edge devices may be used to process data to enhance data security. For example, HSM edge devices may provide encryption, decryption, data masking, tokenization, or anonymization. The HSM edge devices may interface with one or more blockchains to invoke smart contracts, and to record data transaction events. In some examples, smart contracts may be used to provide uniform policies and functions across multiple edge devices and their corresponding end user devices.

Systems and methods for providing interaction recordings with removed personally identifiable information (PII) are disclosed, the systems and methods involving: extracting, from an interaction recording, using an automatic speech recognition engine, a timestamped recording transcript; identifying, using an artificial intelligence (AI) engine, time periods of the timestamped recording transcript which disclose PII; and removing, from the interaction recording, data present during the time periods which disclose PII, to produce a secure interaction recording.

The invention discloses a personal sensitive information data masking method applied to a driving training public service platform, and belongs to the technical field of data security. The method comprises the following steps: constructing a service scene sensing layer; constructing a dynamic strategy decision-making layer based on context information output by the service scene perception layer; constructing a strategy execution and consistency guarantee layer; establishing a closed-loop feedback and optimization mechanism; and when abnormal interruption or frequent retry of service operation caused by excessive masking is detected, the event is used as a negative feedback log, and when the service is smoothly completed and no security event exists, the event is used as a positive feedback log. According to the invention, through the cooperative effect of constructing the service scene perception layer, the dynamic strategy decision layer and the strategy execution and consistency guarantee layer, the problems of low service efficiency and unauthorized data access risk caused by the fact that a fixed mask rule cannot adapt to multi-service scene requirements in the prior art are solved.

This invention relates to a dynamic data masking strategy allocation method and system based on data usage paths. The method acquires the data usage path from the data source to the data output end, inputs the data usage path into a pre-configured strategy allocation engine, performs structured parsing based on the key characteristics of the data usage path, and dynamically matches the corresponding data masking strategy based on the parsing results to perform data masking processing. The system includes a path acquisition module, a strategy allocation module, and a strategy execution module, with the strategy execution module decoupled from the business logic. This invention ensures data availability while meeting compliance requirements, significantly improves system adaptability and scalability, reduces operating costs, and has strong scenario adaptability, especially for closed-source tasks. It enables centralized reuse and simplified configuration of masking logic, facilitates maintenance, and reduces the degree of intrusion into existing business system code; it also improves data security and usage compliance, meeting the masking needs of diverse usage scenarios.

A method of controlling access to a digital resource of a group of digital resources, the method comprising: receiving a request from a user via a computer browser for access to a digital resource of a group of digital resources; determining if the user has authorization to access a first portion of the resource but not a second portion of the resource; and configuring the browser to redact the resource by locally masking or deleting the second portion at a user interface of the computer which presents the resource to the user without affecting data defining the resource at a source from which the resource is downloaded to provide the requested access.

This invention relates to the field of financial service data security technology, specifically a financial service data security management method and system. The method includes: constructing a knowledge graph of financial service business data and labeling risks, then inputting this knowledge graph into a security policy evolution engine to generate a dynamic and targeted set of security policies. Based on these policies, dynamic and differentiated data masking and access path reconstruction are performed on data entities and relationships in the knowledge graph to generate a controlled access view. The system parses external access requests in real time, performs matching analysis based on the knowledge graph and policies, calculates real-time risk scores, and dynamically adjusts the granularity of access control accordingly, executing authorization or blocking. Full-process audit logs are fed back to the rule base and policy engine, driving adaptive optimization of policies and rules. This method achieves dynamic evolution and generation of security policies and context-aware fine-grained control of data access, improving the automation and intelligence level of security protection.

Systems, methods, and computer program products for protecting a database against malicious activity are disclosed. A computer implemented method for protecting a database includes neutralizing an identified malicious activity performed with respect to the database during the occurrence of the malicious activity. The database may include a data masking mechanism where the neutralization of the malicious activity may utilize the data masking mechanism.

We provide an analytical platform system that utilizes data from local government infrastructure cloud systems. [Solution] The system provides an analysis platform that receives standardized data from a municipal infrastructure cloud system on a closed network via interconnection, stores replicated data synchronized with the received standardized data, processes the replicated data through a predetermined data masking process to physically separate it from the replicated data and re-store it, reads the processed data upon request from a municipal terminal, generates visualization data on a dashboard, and manages the generation of replicated data, data masking process, re-storage of processed data, and generation of visualization data in a multi-tenant manner, separating each municipality individually. The data masking process performs anonymization processing corresponding to different levels of anonymization depending on the nature of the data being analyzed.

A system, method and computer-readable medium for generating a data masking syntactic definition for a data element of an unknown data type, including generating one or more alphabets corresponding to one or more element member positions of the data element based at least in part on element members occurring at each element member position in a plurality of data elements of the unknown type, each alphabet comprising a set of one or more sequential element members that have occurred in the plurality of data elements at an element member position and generating a positional map describing a syntactic structure of the data element by mapping at least one of the one or more alphabets to each element member position of the data element.

A method includes receiving a request designating an endpoint and triggering a function of a kernel extension. The function includes determining a permission of the endpoint to receive unmodified data and modifying at least part of the request based on the determined permission. The method also includes routing the request to a third computing system associated with the endpoint designated by the request.

A system and method for a document processing module to identify a compliance standard that needs to be associated with a displayed document or image on an electronic device. The compliance standard sourced from a regulatory body via an associated application program interface (API). This API, aligned with specific standards such as PCI-DSS, HIPPA, and other compliance bodies, facilitates compliance-driven dynamic scanning of a displayed document or image. The system and method utilizing an artificial intelligence (AI) module to automatically and dynamically apply the compliance standard to a shared or displayed document or image. The AI module automatically or dynamically masking relevant data during real-time screen sharing. The masked data is presented as placeholder characters (e.g., “****” or blurring) to unauthorized viewers, effectively mitigating the risks associated with shoulder surfing or unintended exposure. This is done based on the unique FIDO authentication required a / an individual(s) viewing the displayed information.

A data masking method includes: displaying one or more groups of relational data, where the relational data includes a data subject, privacy data, and a relationship that the data subject and the privacy data meet; obtaining selection of a user for target relational data in the one or more groups of relational data; and performing masking processing on the target relational data in a data source.

Hardware security modules (HSM) may be implemented at distributed edge devices to provide faster and dynamic processing of data. HSM-implemented edge devices may be used to process data to enhance data security. For example, HSM edge devices may provide encryption, decryption, data masking, tokenization, or anonymization. The HSM edge devices may interface with one or more blockchains to invoke smart contracts, and to record data transaction events. In some examples, smart contracts may be used to provide uniform policies and functions across multiple edge devices and their corresponding end user devices.

The application provides a hardened cement paste multi-scale direct coupling calculation method and device, the method comprises the following steps: in-situ loading and computer tomography are carried out on hardened cement paste, multi-scale volume data at different stages are generated, and multi-phase segmentation is carried out to obtain multi-valued volume data mask; a damage path prediction deep learning model is used to predict the damage path of the multi-valued volume data mask and divide the multi-scale grid, a finite element software is used to directly simulate and calculate the multi-scale grid structure, a multi-scale damage result is generated, a deep learning model is used to predict the potential damage path based on the high information density data obtained from the image, and modeling is carried out on the basis, the calculation complexity is simplified, the microstructure evolution characteristics and the macro mechanical property response of the cement paste in the hydration process are considered on the premise of ensuring the simulation accuracy, the numerical calculation cost of the multi-scale structure is effectively reduced, and an efficient and expandable technical path is provided for the modeling of the evolution process of complex multi-phase materials.