48 results about "Distributed security" patented technology

The invention discloses a multi-cascade network security risk dynamic assessment and protection system, and relates to the technical field of network security. Comprising a multi-cascade data acquisition and preprocessing module, a dynamic data traceability graph construction module, a distributed security knowledge graph collaboration module, a multi-cascade risk causal evaluation module and a dynamic protection and closed-loop optimization module. According to the method, a collaborative architecture of multi-cascade data acquisition and preprocessing, dynamic data traceability graph construction, distributed security knowledge graph collaboration, multi-cascade risk causal evaluation and dynamic protection and closed-loop optimization is constructed, and system operation parameters are continuously optimized through a closed-loop feedback link. The dynamic adaptation capability of network security risk assessment to the multi-cascade architecture and the comprehensiveness of assessment results are remarkably improved, and the problems that in the prior art, network security assessment mostly depends on single-dimension data, cross-module deep collaboration is lacked, and dynamic changes of the multi-cascade architecture are difficult to adapt can be solved.

The invention provides a time mark event triggering reinforcement learning multi-agent consistency control method and system, and relates to the technical field of multi-agent cooperative control. Establishing a multi-agent system dynamics model comprising a leader and a plurality of followers on the time mark; based on the state information of the leader and the follower, constructing a tracking error and consistency error dynamic equation between the intelligent agents; a reinforcement learning controller based on a neural network is constructed, and an optimal control strategy and a performance index function are approached; an event triggering mechanism is designed, and the controller is triggered to update only when the local error of the intelligent agent exceeds a dynamic threshold value; by constructing a Lyapunov function on a time scale and solving a linear matrix inequality condition, bounded consistency of the system is ensured, and a Zeno phenomenon is eliminated. Unified modeling and distributed safety control of the time scale multi-agent system in the non-ideal environment are achieved, communication resources are saved, the convergence speed is increased, and the robustness and practicability of the system are enhanced.

The invention relates to the technical field of secret-related electronic file transmission and management, and discloses a secret-related electronic file secret transmission safety management system which comprises a safety management system. The security management system comprises a hardware security support layer, a distributed security storage layer, a file full life cycle security management layer, a user identity authentication and behavior auditing layer, a security auditing layer and an emergency response layer. The confidential electronic file secret transmission security management system integrates a trusted computing chip, security boot firmware, a physical unclonable function (PUF) and an optical isolation technology through a hardware security support layer, is different from a traditional system which only depends on software protection, constructs a trusted execution environment from a hardware bottom layer, guarantees the operation credibility by using the trusted computing chip, and improves the security of the confidential electronic file. The secure boot firmware blocks illegal program loading, the PUF endows the hardware with a unique uncounterfeited identity, and the optical isolation realizes physical level network isolation, so that threats such as hardware tampering and physical attacks are radically defended.

The invention discloses a computing power network resource credible scheduling method based on cloud network security fusion, and relates to the technical field of cloud computing and network security. Aiming at the problems of low resource utilization rate, insufficient security isolation, lack of credibility evaluation and the like in the existing computing power scheduling, a computing power network architecture containing a distributed security resource pool is constructed, and various security services are deployed through security nodes and serve as trust agents to provide security resource support and credibility evaluation basis for computing power task scheduling. According to the method, node state information is collected through state monitoring modules deployed at all nodes; the node credibility is calculated through a credibility evaluation module on the dispatching center and the security node; and the task scheduling module is used for realizing target node optimization and security service link optimization by utilizing a hierarchical deep Q network (Hierarchical Deep Q-Network) model on the basis of the node state information and the credibility result. According to the method, efficient task scheduling can be guaranteed, meanwhile, a user-defined security policy is supported, malicious nodes are effectively identified, and the security of a computing power network is improved.

The present application relates to the field of data processing, more particularly, the present application relates to a kind of based on distributed financial data storage method and system, method includes: obtaining the financial transaction data stream to be stored and is divided to obtain multiple data blocks;For single data block, the distribution variation degree of the data block is calculated, based on distribution variation degree, respectively determine the weighted probability for constructing compression encoding table, encryption round of encryption algorithm and replication factor in distributed storage system, and based on the three key parameters determined in sequence, data block is compressed, encrypted and stored;Compression, encryption and storage are carried out to all data blocks, thus complete the distributed security storage of the financial transaction data stream.The present application controls compression, encryption and storage link by unified index linkage, while improving the anti-statistical analysis ability of encrypted data, realizes the adaptive balance of storage security and resource cost.

Techniques for federated distributed security analytics using a swarm node framework to provide a scalable way to improve efficiency and accuracy of determining and remediating security threats, while reducing computational complexity and resource usage of a system. A system may comprise node(s) executing a first engine and a second engine. The first engine may operate in a data plane and receive event data associated with security events, perform a specialized type of function, and generate two classes of output(s): (1) transformed event data output to other first engine(s) of other node(s) and (2) security signal(s) output to the second engine. The second engine may be configured to operate in a control plane. The second engine may receive input(s), including the security signal(s) and determine action(s) to perform with regard to security event(s). The second engine may output instruction(s) to other node(s) and / or derived security signal(s) to other second engine(s).

The application discloses a kind of water conservancy video monitoring safety protection method, system and equipment, and wherein method includes: the smart contract management equipment authentication of alliance block chain architecture, the distributed security access control of decentralization;According to the space-time feature and information entropy analysis of video content Selection adaptive compression algorithm, real-time adjustment compression parameter;Based on the dynamic key derivation algorithm of block chain consensus mechanism and high-precision timestamp, construct double-layer encrypted video transmission mechanism;Based on the distributed hierarchical storage strategy of block chain, execute the hybrid mechanism of local cache and block chain distributed storage;Build timeliness cloud edge collaborative control mechanism.The application realizes the safe access, efficient processing, encrypted transmission, anomaly detection and reliable storage of video monitoring data through the deep integration of edge computing and block chain technology, significantly improves the data credibility, tamper resistance and overall system security of reservoir safety monitoring.

The application provides a distributed security outsourcing computing processing method based on sparse matrix transformation, and relates to the technical field of computers, and the method comprises the following steps: acquiring a first matrix and a second matrix; randomly generating a key set comprising a binary permutation matrix, a sparse triangular matrix and a random vector; performing primary encryption on the first matrix and the second matrix based on the binary permutation matrix; performing secondary encryption on the primary encrypted matrix based on the sparse triangular matrix; distributing the secondary encrypted first secondary encrypted matrix to each edge end in an integrated manner, distributing the second secondary encrypted matrix to each edge end in an even manner after dividing the second secondary encrypted matrix into column vectors according to columns, and enabling the edge end to perform a subtask calculation operation by using the received matrix and return the result to the user end; receiving the calculation results of the edge ends, and aggregating the results; verifying the reliability of the aggregated results by using the random vector, and decrypting the final calculation result. The scheme can improve the security and timeliness of outsourcing computing.

The invention discloses a distributed secret key generation method, device and system based on SM9, and belongs to the technical field of cryptography, firstly, the distributed secret key generation method combines identity password characteristics of an SM9 algorithm and a distributed cooperation mechanism to improve the safety and decentration degree of a secret key generation process. Secondly, a distributed key generation system architecture with multi-node cooperative participation realizes common generation, distribution and reconstruction of keys, and avoids central trust risks. Then, a tamper-resistant and share verification mechanism is introduced, the resistance of the system to malicious nodes is enhanced, and the correctness and confidentiality of the key generation process are guaranteed; and finally, the method also supports a transverse expansion capability, has good expandability and platform independence, and is suitable for construction of various distributed security infrastructures. Therefore, the method can meet the application requirements of high concurrency, low delay and high security of the block chain system.

This invention discloses a distributed safety learning control method for mobile robot swarms, relating to the field of robot cooperative control technology. The method includes: calculating the future short-term motion position based on a nominal control quantity, and calculating the predicted neighborhood distance by combining it with a neighborhood state set to form multiple sets of safety constraints; combining these multiple sets of safety constraints with environmental boundary information to form obstacle avoidance constraints, and establishing constraint priority rules with actuator limits; obtaining a hierarchical safety constraint set by adding constraint level identifiers; using the nominal control quantity as the optimization objective and the hierarchical safety constraint set as the constraint conditions to construct a local optimization subproblem, and performing a distributed solution using the alternating direction multiplier method to generate a safe and feasible control quantity. This invention achieves the output of safe and feasible control quantities without centralized computation, thereby improving the real-time performance and reliability of swarm cooperative control.

The invention discloses a distributed secure communication method and device based on quantum key distribution, equipment and a medium, and the method comprises the steps: receiving a communication request from a first user terminal in the same management domain, and the request comprises the identification of a second user terminal in other management domains; determining a second key management node of other management domains according to the identifier of the second user terminal; sending a negotiation key request to a second key management node through a quantum key distribution protocol, so that the second key management node returns a request response according to the negotiation key request; determining a session key through a quantum key distribution network according to the request response; and the session key is issued to the first user terminal, so that the first user terminal encrypts the communication message according to the session key, thereby effectively overcoming the system performance bottleneck under the high-concurrency request, and meeting the communication requirements with relatively high requirements on real-time performance and security.

Techniques for federated distributed security analytics using a swann node framework to provide a scalable way to improve efficiency and accuracy of determining and remediating security threats, while reducing computational complexity and resource usage of a system. A system may comprise node(s) executing a first engine and a second engine. The first engine may operate in a data plane and receive event data associated with security events, perform a specialized type of function, and generate two classes of output(s): (1) transformed event data output to other first engine(s) of other node(s) and (2) security signal(s) output to the second engine. The second engine may be configured to operate in a control plane. The second engine may receive input(s), including the security signal(s) and determine action(s) to perform with regard to security event(s). The second engine may output instruction(s) to other node(s) and / or derived security signal(s) to other second engine(s).

Techniques for network-on-chip (NoC) memory addressable encryption and authentication. In an embodiment, NoC circuitry includes NoC routing circuitry, memory circuitry that stores a security parameter, and security circuitry that secures (e.g., encrypts and / or authenticates) a payload based on the security parameter. The security circuitry may secure the payload before the payload is packetized for transmission through the NoC, after the payload is de-packetized for output to an endpoint, or as the payload transits the NoC. The security circuitry may be centralized or distributed amongst access points of the NoC. Distributed security circuitry may exchange a security parameter over a secure link of the NoC circuitry. The security circuitry may include decryption circuitry that decrypts a response from a first endpoint before the response is packetized for transmission through the NoC, after the response is de-packetized for output to a second endpoint, or as the response transits the NoC.

The invention discloses an industrial Internet of Things data security unloading method based on deep migration reinforcement learning. The method comprises the following specific steps: step 1, setting parameters of an IIOT system model; and step 2, providing a distributed security unloading algorithm based on reviewer migration to make a distributed security unloading decision for each IIOT device. A newly added IIOT device adopts a Bregman ball in manifold learning to select an IIOT device with the highest similarity from neighbor devices to serve as a source agent, and knowledge extracted from the source agent and an experience sample collected from a target environment are utilized to quickly train a strategy model adapting to the target environment. And the model reconstruction speed and quality of the distributed security unloading strategy in the unsteady state environment are improved. According to the method, data processing delay and energy consumption in the IIOT system can be effectively reduced while multi-dimensional domain intrusion behaviors are resisted, real-time, safe and reliable industrial data transmission and processing are achieved, and the method is suitable for the IIOT system with high unstability and time-varying characteristics.

A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and / or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

The invention discloses a federated learning privacy protection and fair incentive method and system based on grey wolf optimization, and relates to the technical field of federated learning and distributed security computing, and the method comprises the steps: receiving multi-dimensional attribute parameters and preset initial global model parameters of candidate clients; based on the multi-dimensional attribute parameters of the candidate clients, screening the candidate clients by using a grey wolf optimization algorithm to obtain an optimal client; inputting a preset initial global model parameter into the optimal client for training, and performing gradient encryption based on a decentralized threshold function encryption method to obtain encrypted gradient data; performing security aggregation to obtain a security aggregation result, updating a preset initial global model parameter based on the security aggregation result, and performing quality evaluation on the updated global model to obtain a global model quality voucher; and performing consensus verification on the global model quality voucher, and triggering an intelligent contract by the verified global model quality voucher to generate an incentive distribution result.

The invention provides a distributed security authentication method and device for an equipment identity, equipment and a storage medium, and the method comprises the steps: determining that a first manufacturer to which the own equipment belongs and a second manufacturer to which the to-be-authenticated equipment belong have accessed the same decentralized identity platform in response to an instruction that the own equipment performs identity authentication on the to-be-authenticated equipment; obtaining a to-be-authenticated device certificate corresponding to a to-be-authenticated device and a root decentration identifier registered in the decentration identity platform by a second manufacturer in advance; and based on the root decentration identifier and the decentration identity platform, authenticating the certificate of the to-be-authenticated device. According to the method and the device, the corresponding root decentration identifier is only registered for the root certificate issuing mechanism of the second manufacturer corresponding to the to-be-authenticated device, and the decentration identifier does not need to be issued to each device, so that the complexity of device identity operation and maintenance is reduced.

The invention relates to the technical field of electric power data processing, and discloses an electric power market data security sharing privacy computing system, which performs secret sharing on declaration prices through a hybrid encryption module to obtain price fragments, performs homomorphic encryption on declaration electric quantity, and distributes processed data to a first service party and a second service party. Then, the security sorting module cooperatively executes distributed security sorting based on the price fragments, and a quotation index sequence is obtained in a privacy protection mode; and the privacy positioning module and the ciphertext aggregation module utilize the index sequence to determine a marginal unit in a ciphertext domain and complete aggregation calculation of clearing price and electric quantity. And finally, the decryption evidence storage module performs collaborative decryption and block chain evidence storage on the encryption result, and outputs a public and credible clearing result. Therefore, secret sharing and homomorphic encryption are deeply fused, accurate and traceable safe clearing is realized on the premise of not leaking original quotation, and data privacy and result credibility are both considered.

The invention provides a commercial vehicle air-space-ground integrated communication full-chain safety protection method and system, and the method comprises the steps: generating a communication demand parameter through multi-source perception and intention recognition, carrying out the quality evaluation and optimization of a heterogeneous network through taking the communication demand parameter as a guide, and generating a multi-mode network access strategy; based on the policy, guiding physical layer authentication, and realizing security access and policy binding; reliable transmission and reconstruction of data on multiple links are realized according to a strategy by adopting a security packaging and fountain code coding technology; data distributed security storage is implemented based on threshold cryptography, and continuous authentication is carried out in combination with behavior characteristics; and finally, predicting and triggering network switching based on the service intention, and realizing security channel pre-establishment and session synchronization. According to the method, full-chain closed-loop protection from intention perception, strategy execution to dynamic optimization is formed, and the reliability, safety and adaptive capacity of communication in a complex environment are effectively improved.

The invention provides a vehicle safety monitoring method and system, a vehicle and a storage medium. The method comprises the following steps: determining a plurality of controllers participating in vehicle safety monitoring; any controller generates challenge data, and broadcasts the challenge data to other controllers except the any controller; each controller generates a verification parameter based on a locally stored vehicle identification code, and performs cryptographic operation on the challenge data by using the verification parameter to obtain respective operation results; and executing a corresponding vehicle control strategy based on a consistency comparison result of the operation result. According to the vehicle safety monitoring method and system, the vehicle and the storage medium provided by the invention, the adaptive capacity to a multi-controller cooperation scene is remarkably improved, and the real-time performance and reliability requirements of an intelligent network connection vehicle on distributed safety monitoring are met.

A kind of security data transmission method suitable for open source Hongmeng terminal equipment between, this method deeply integrates the distributed architecture of open source Hongmeng.1, by HMAC-SM3 two-way authentication to build "super terminal" trust domain, and the authentication system is integrated into the distributed identity authentication of Hongmeng.2, the data to be transmitted is encapsulated as Hongmeng atomization service, which is uniformly distributed by the distributed task scheduling center, and the encryption and authentication are completed in the distributed security sandbox using SM4-CCM block cipher mode.3, the present application utilizes the trusted device group mechanism and distributed database / file system to perform security hierarchical management on the keys and data throughout their life cycle. Finally, based on the device capability perception, the transmission strategy is dynamically adjusted, and the seamless networking of heterogeneous network devices is realized through the distributed soft bus. This scheme forms a native security transmission system deeply coupled with the underlying capabilities of Hongmeng system, effectively solving the security and efficiency problems of cross-device data flow.

The invention discloses a deterministic time delay cellular-free resource allocation method based on hierarchical distributed security reinforcement learning. A layered and distributed security reinforcement learning framework under the constraint of a time delay satisfaction rate is provided, a joint time-frequency resource allocation and beam optimization problem is decomposed into an upper layer sub-task and a lower layer sub-task, and modeling is performed as a constraint Markov decision process (CMDP) and a Markov decision process (MDP). An upper layer central processing unit (CU) realizes time-frequency resource block allocation oriented to time delay satisfaction rate determinacy guarantee by introducing time delay cost and security constraints; and a plurality of intelligent agents at the lower-layer distributed access unit (DU) side cooperatively execute beam selection to ensure the transmission reliability. According to the method, the calculation complexity is remarkably reduced through hierarchical decoupling, the system resource utilization rate is remarkably improved while the time delay determinacy constraint is ensured by introducing a safety reinforcement learning mechanism, and the method has good system expandability and engineering application value.

This invention discloses a method, apparatus, and medium for allocating business data of securities institutions based on directed links, relating to the field of data storage technology. By acquiring directed links, this invention transforms the complex flow of historical processed data within the securities institution's business data platform into structured information, simplifying the information representation. Simultaneously, it acquires the data to be processed and constructs incremental links based on the data processing procedure of the data to be processed, enabling the use of the directed link update process to reflect the pre-storage process of the data. An incremental evaluation score is obtained by weighted fusion of a first evaluation score and a second evaluation score. By fully considering the changes in complexity and information completeness of the directed links, the impact of the data to be processed on historical processed data is fully considered, thereby making the judgment process of the incremental evaluation score more accurate. Finally, the data is allocated to storage space suitable for the data reading and retrieval method, thus improving the accuracy of the securities institution's business data allocation process.

The present disclosure relates to systems, methods, and non-transitory computer-readable media that implements a secure distributed data collaboration architecture for generating synthetic datasets. For example, the disclosed system sends a request to perform a data collaboration with a first dataset of a first local node and a second dataset of a second local node. The disclosed system receives intermediate feature maps from the local nodes that correspond with the datasets and generates a combined feature map. Further, the disclosed system generates a synthetic dataset from the combined feature map by utilizing a central generative model. Moreover, the synthetic dataset generated by the disclosed system is statistically representative of the first dataset and the second dataset.

The application discloses a kind of multi-agent formation generation and control method based on distributed security affine transformation, to solve the problem that multi-agent system is difficult to consider formation geometry maintenance and safety obstacle avoidance in complex obstacle environment. First, introduce parameter level control barrier function, directly impose safety constraints in affine parameter space, to ensure that the generated reference formation is theoretically collision-free;Second, construct a distributed optimization problem based on safety constraints and consistency constraints, use distributed algorithm to make all agents reach consensus on public affine parameters, so as to produce coordinated and consistent formation deformation;Finally, use the quadratic programming controller of agent-level CBF as the bottom controller, track the generated safety reference trajectory. Through double-layer safety architecture, the application realizes online safety generation of reference formation and accurate tracking of actual motion, effectively improves the formation keeping ability and task execution efficiency of multi-agent system in chaotic environment.

The invention relates to an office official document viewing and processing method based on a swan gap system. The method comprises the following steps: collecting metadata of a file from each application and equipment through a file index service; when a user clicks the virtual file, the terminal A initiates a distributed security access request to the terminal B; an encrypted point-to-point data transmission channel is established between the two terminals through a distributed soft bus, and file data is transmitted in a streaming manner after the terminal A obtains the security access token; and the terminal A sends the file data stream into the memory sandbox, calls a file rendering engine to read the data in the memory sandbox for analysis and rendering, and presents the data to a user. The method has the advantages that point-to-point transmission is achieved through the distributed soft bus, the transmission efficiency is improved, point-to-view is achieved, the memory sandbox is used for caching data, and the situation that the shared storage space is occupied for temporary view is thoroughly avoided.

A computer-implemented method for creating and distributing security tokens representing a resource source. The method includes: receiving instructions for creating a first resource source on a platform; receiving variables associated with the first resource source as input; creating a set of protocols based on the variables; generating one or more tokens based on the received variables and protocols; wherein generating the one or more tokens includes: generating and recording a first transaction in a token transaction ledger; and distributing a portion of the one or more tokens to a third party, the distribution further including: receiving a request to purchase a portion of the one or more tokens; verifying payment for a portion of the one or more tokens; minting a set of tokens; transferring the set of tokens to the third party; and destroying a portion of the one or more tokens from the platform.

Disclosed are systems and methods for providing distributed security event monitoring. The system can include a central monitoring system and sensor devices positioned throughout a premises that passively detect conditions and emit signals guiding people on the premises when a security event is detected. The sensor devices can include suites of sensors and can transmit detected conditions to the central monitoring system. The central monitoring system can combine the detected conditions to generate a collective of detected conditions, determine whether the collective of detected conditions exceeds expected threshold conditions, identify a security event on the premises based on the collective of detected conditions, classify the security event using machine learning models, generate instructions to produce audio or visual output at the sensor devices that notifies people on the premises about the security event, and transmit the instructions to the sensor devices to emit signals indicating information about the security event.

The application discloses a network security risk dynamic evaluation and protection system based on a multi-cascade type, relates to the technical field of network security, and comprises a multi-cascade data acquisition and preprocessing module, a dynamic data traceability graph construction module, a distributed security knowledge graph cooperation module, a multi-cascade risk cause-effect evaluation module and a dynamic protection and closed-loop optimization module. The application constructs a cooperative architecture of multi-cascade data acquisition and preprocessing, dynamic data traceability graph construction, distributed security knowledge graph cooperation, multi-cascade risk cause-effect evaluation and dynamic protection and closed-loop optimization, and continuously optimizes system operation parameters through a closed-loop feedback link, compared with the prior art, significantly improves the dynamic adaptation capability of network security risk evaluation to the multi-cascade architecture and the comprehensiveness of evaluation results, and can solve the problems in the prior art that network security evaluation mostly depends on single-dimensional data, lacks cross-module deep cooperation, and is difficult to adapt to dynamic changes of the multi-cascade architecture.