104 results about "Distributed security" patented technology

The invention relates to the technical field of data security management, and discloses a blockchain-based forestry data security management system and method, and the system comprises a data collection unit which is used for comprehensively obtaining a multi-dimensional information flow of forest ecology and resource states; the data processing unit is used for carrying out deep cleaning, standardized regulation and feature value extraction on the originally collected mass heterogeneous data; the block chain storage unit is used for constructing a permanent, tamper-proof and distributed secure storage infrastructure platform of the forestry core data; a verification unit; the safety control unit is used for constructing a covering data transmission, storage and access full-chain depth defense system structure model; a user interface unit; an auditing unit; and a network communication unit. The method is reasonable in design, and the intelligent analysis module is used for processing to form a forest interannual growth trend prediction function distribution map state visual output result set.

The embodiment of the invention provides a test case sample cutting method, device and system and a storage medium, and relates to the technical field of network security testing. The method comprises the following steps: constructing an industrial control system attack tactical library; wherein the tactical library comprises classified and arranged attack techniques and corresponding security attributes; performing information analysis and semantic analysis on the test case sample to generate structured data of the test case sample and / or function points in the test case sample; and cutting the test case sample according to the security attribute and / or the structured data and / or the function point to obtain a test fragment corresponding to the security attribute and / or the function point. According to the method, classification-based attack techniques and security attributes are cut by constructing a tactical library, key information can be accurately extracted and test intentions can be understood through information analysis and semantic analysis, redundant tests are avoided, cut test fragments can concentrate on specific security attributes or function points, the test coverage range is more accurate, and the test efficiency is improved. And the distributed security test effect is improved.

The invention discloses a ground-to-ground heterogeneous cluster formation control method and system based on an adjustable funnel algorithm, and relates to the technical field of distributed formation maneuvering control, and the method comprises the steps: building a dynamic model of a ground-to-ground heterogeneous cluster, and building an undirected graph representing an interaction topological structure of the ground-to-ground heterogeneous cluster; modeling a distributed safety critical formation maneuvering control problem of the air-ground heterogeneous cluster; a fully distributed dynamic compensator facing each follower and a formation maneuvering controller based on an adjustable funnel algorithm are designed, and then a safety-critical control framework based on a disturbance observer is adopted to construct a composite controller; and acquiring a virtual navigator signal and inputting the virtual navigator signal to the constructed various controllers to obtain an actual formation control signal of each follower, and executing distributed safety-critical formation maneuvering control on the followers. Through a distributed safety critical formation maneuvering strategy based on an adjustable funnel method, collision / obstacle avoidance and disturbance suppression of an air-ground heterogeneous cluster can be realized.

The invention discloses an intelligent inspection optimization method for power equipment, and belongs to the technical field of intelligent operation and maintenance of a power system, and the method comprises the steps: firstly obtaining multi-source original data of substation equipment, and fusing the multi-source original data to form fused data; then an alliance chain network is constructed, each transformer substation serves as a node, a plurality of transformer substation nodes, an operation and maintenance center node and a supervision mechanism node jointly form the alliance chain network, and fusion data are stored and shared; federal learning adaptive model optimization is adopted, an edge computing MEC server is deployed at each substation node, and each substation node trains an AI model on the edge computing MEC server based on local data; according to the method, distributed security storage, cross-station credible sharing and distributed model training optimization of the substation inspection data are realized, the model generalization ability is improved while data privacy is protected, the problems of data islands, privacy leakage, response delay and the like in a traditional scheme are solved, and the operation and maintenance efficiency and security of the substation are remarkably improved.

This disclosure describes techniques for distributing security service by performing security policy-based routing among network devices. The techniques include determining a security function to be applied to a packet of a data traffic flow. The security function may be determined based on a security policy and an intended destination of the packet. The techniques may also include determining whether a network device is capable of performing the security function. A route for the packet to the destination may be determined based on whether the network device is capable of performing the security function. As such, distributing security service techniques may improve efficiency in data traffic routing, and may reduce cost and / or prevent redundancy in security service application.

The invention discloses a multi-cascade network security risk dynamic assessment and protection system, and relates to the technical field of network security. Comprising a multi-cascade data acquisition and preprocessing module, a dynamic data traceability graph construction module, a distributed security knowledge graph collaboration module, a multi-cascade risk causal evaluation module and a dynamic protection and closed-loop optimization module. According to the method, a collaborative architecture of multi-cascade data acquisition and preprocessing, dynamic data traceability graph construction, distributed security knowledge graph collaboration, multi-cascade risk causal evaluation and dynamic protection and closed-loop optimization is constructed, and system operation parameters are continuously optimized through a closed-loop feedback link. The dynamic adaptation capability of network security risk assessment to the multi-cascade architecture and the comprehensiveness of assessment results are remarkably improved, and the problems that in the prior art, network security assessment mostly depends on single-dimension data, cross-module deep collaboration is lacked, and dynamic changes of the multi-cascade architecture are difficult to adapt can be solved.

The invention relates to the technical field of risk management and control, in particular to a distributed security risk management and control platform fusing situation awareness and an intelligent contract, and the platform comprises an acquisition module, a situation awareness module, a prediction module, an identification module, and an intelligent contract execution module. Multi-dimensional dynamic parameters related to a port cold chain are comprehensively collected and calculated, temperature difference fluctuation is used for reflecting environment stability, frequency jitter is used for reflecting equipment operation states, queue density and emergency brake behaviors are used for reflecting operation intensity and operation risks, trend judgment is carried out based on different situation index occurrence frequencies in a prediction module, and a prediction result is obtained. And in combination with the time continuity and the space aggregation of the abnormal nodes, the transportation speed is finally automatically adjusted through the intelligent contract, so that the problems of risk early warning lagging and difficulty in effective implementation of field control caused by response delay and insufficient prediction timeliness due to dependence on centralized processing are effectively solved.

The invention discloses a wheeled robot distributed safety control method based on a control barrier function, and the method comprises the following steps: S1, building multi-robot communication, so as to enable each robot to exchange state information with a neighbor robot in a limited communication range; the state information comprises position information and speed information; s2, designing a distributed formation controller according to the formation control target; s3, constructing a distributed control obstacle function; s4, constructing a distributed safety controller for each robot according to the distributed control barrier function; s5, constructing an overall safety barrier function for verifying the overall safety of the robot; and S6, deploying the distributed security controller obtained in the step S4. According to the invention, basic topological obstacle avoidance can be realized, self-constraint of each agent is practically ensured, and internal and external consistent security is realized.

The invention provides a time mark event triggering reinforcement learning multi-agent consistency control method and system, and relates to the technical field of multi-agent cooperative control. Establishing a multi-agent system dynamics model comprising a leader and a plurality of followers on the time mark; based on the state information of the leader and the follower, constructing a tracking error and consistency error dynamic equation between the intelligent agents; a reinforcement learning controller based on a neural network is constructed, and an optimal control strategy and a performance index function are approached; an event triggering mechanism is designed, and the controller is triggered to update only when the local error of the intelligent agent exceeds a dynamic threshold value; by constructing a Lyapunov function on a time scale and solving a linear matrix inequality condition, bounded consistency of the system is ensured, and a Zeno phenomenon is eliminated. Unified modeling and distributed safety control of the time scale multi-agent system in the non-ideal environment are achieved, communication resources are saved, the convergence speed is increased, and the robustness and practicability of the system are enhanced.

The invention provides a distributed security camera network data secure transmission method, which relates to the technical field of data transmission, realizes dynamic security evaluation of nodes in a camera network by constructing a two-dimensional dynamic confusion matrix, and realizes the security of the nodes in the camera network by combining a key fragmentation strategy and a hop distance discontinuous path scheduling mechanism. And the anti-attack capability and the data confidentiality of the security and protection video data in the transmission process are greatly improved. The main key is split and asynchronously and dispersedly transmitted, so that the risk that the key is intercepted or tampered is effectively reduced; and the data path designed by using the maximum hop distance difference strategy effectively solves the problems of predictability and attack track traceability caused by traditional path continuity. Meanwhile, the integrity and source traceability of the data fragments are ensured through a path closed-loop judgment mechanism at a receiving end, and the safety verification and recombination accuracy of the data at the link level is fundamentally ensured.

The disclosure relates to systems, methods and computer readable media for enabling distributed secure remote access from a device via a wide area network (WAN), to a designated physical site covered by local area network (LAN). Specifically, the disclosure relates to a computerized systems, methods and computer-readable media using hardware-based, virtual private network pairs having preshared encryption / decryption keys, operable to transmit data over WAN from a physical computing device to an exclusively designated site in a physical area covered by a LAN.

The invention relates to the technical field of secret-related electronic file transmission and management, and discloses a secret-related electronic file secret transmission safety management system which comprises a safety management system. The security management system comprises a hardware security support layer, a distributed security storage layer, a file full life cycle security management layer, a user identity authentication and behavior auditing layer, a security auditing layer and an emergency response layer. The confidential electronic file secret transmission security management system integrates a trusted computing chip, security boot firmware, a physical unclonable function (PUF) and an optical isolation technology through a hardware security support layer, is different from a traditional system which only depends on software protection, constructs a trusted execution environment from a hardware bottom layer, guarantees the operation credibility by using the trusted computing chip, and improves the security of the confidential electronic file. The secure boot firmware blocks illegal program loading, the PUF endows the hardware with a unique uncounterfeited identity, and the optical isolation realizes physical level network isolation, so that threats such as hardware tampering and physical attacks are radically defended.

The invention discloses a parallel computing and distributed network access risk management and control device and a management and control method, and relates to the technical field of risk management and control. The system comprises three layers, namely network element equipment, a network controller and a security management and control platform, the security management and control platform integrates a PKI-based password infrastructure, a tool engine and an AI engine and uniformly distributes security management and control related strategies, and the network controller is used as an edge execution component and is connected with various network element equipment of a managed network, so that the security management and control related strategies can be uniformly distributed. The risk management and control device is constructed on a full-switching parallel computing architecture which provides a virtual computing power pool. Under the support of high-performance computing power provided by full-switching parallel computing, a safety management and control platform based on a distributed safety management and control system is constructed, unified state monitoring, risk analysis and strategy issuing are carried out on network access risks, and the safety of network access is improved through distributed network event and performance management and control. And network access risk real-time management and control are carried out.

The present invention discloses a lightweight distributed security communication authentication method and system based on blockchain. The method completes the preliminary configuration and preprocessing through a security management center, generates the public parameters of the system and the information used in the signature authentication process by using the elliptic curve digital signature algorithm, and publishes the authentication information to the blockchain; the edge nodes perform the processing and operation of data locally to complete the authentication process of multiple subjects between the edge nodes and devices and between devices; after the multi-subject authentication process is completed, the negotiation of the shared key is realized through the transmission of three pieces of information. The present invention uses blockchain to realize the storage of key information, ensures the publicity and traceability of data, and reduces the centralization function of the security management center. In the multi-subject authentication process, the data is stored distributively, the distributed authentication between devices is realized, and the negotiation of the shared key is completed, providing security guarantee for the subsequent data transmission.

The invention discloses a computing power network resource credible scheduling method based on cloud network security fusion, and relates to the technical field of cloud computing and network security. Aiming at the problems of low resource utilization rate, insufficient security isolation, lack of credibility evaluation and the like in the existing computing power scheduling, a computing power network architecture containing a distributed security resource pool is constructed, and various security services are deployed through security nodes and serve as trust agents to provide security resource support and credibility evaluation basis for computing power task scheduling. According to the method, node state information is collected through state monitoring modules deployed at all nodes; the node credibility is calculated through a credibility evaluation module on the dispatching center and the security node; and the task scheduling module is used for realizing target node optimization and security service link optimization by utilizing a hierarchical deep Q network (Hierarchical Deep Q-Network) model on the basis of the node state information and the credibility result. According to the method, efficient task scheduling can be guaranteed, meanwhile, a user-defined security policy is supported, malicious nodes are effectively identified, and the security of a computing power network is improved.

The invention relates to the technical field of network equipment security management, and discloses a network equipment policy distribution security management method and system, and the method comprises the steps: obtaining a transmission distance value between network equipment nodes, and setting a security policy distribution path according to the transmission distance value between the network equipment nodes, performing security policy distribution according to the security policy distribution path; acquiring attribute parameters of the network equipment nodes after the security policy is distributed, and determining a policy level coefficient according to the attribute parameters of the network equipment nodes after the security policy is distributed; and according to the policy level coefficient, screening out a to-be-optimized network device node, and merging the security rules of the security policy corresponding to the to-be-optimized network device node to obtain a merged security policy. The distributed security policies can be optimized according to the attribute parameters of the network devices, the processing efficiency of the security policies is improved, and the optimal balance between the security of the network devices and the network performance is ensured.

The present application relates to the field of data processing, more particularly, the present application relates to a kind of based on distributed financial data storage method and system, method includes: obtaining the financial transaction data stream to be stored and is divided to obtain multiple data blocks;For single data block, the distribution variation degree of the data block is calculated, based on distribution variation degree, respectively determine the weighted probability for constructing compression encoding table, encryption round of encryption algorithm and replication factor in distributed storage system, and based on the three key parameters determined in sequence, data block is compressed, encrypted and stored;Compression, encryption and storage are carried out to all data blocks, thus complete the distributed security storage of the financial transaction data stream.The present application controls compression, encryption and storage link by unified index linkage, while improving the anti-statistical analysis ability of encrypted data, realizes the adaptive balance of storage security and resource cost.

The invention relates to the technical field of financial data privacy protection, and discloses a financial data privacy protection method based on a reversible desensitization technology. The method comprises the following steps of: acquiring a multi-source financial data stream, wherein the multi-source financial data stream comprises a transaction data stream and a user data stream; performing feature extraction and privacy risk estimation on the multi-source financial data stream to determine a financial sensitive position and desensitization intensity estimation; setting a reversible desensitization processing mechanism, and generating desensitization financial data based on the desensitization intensity estimation; constructing a distributed secure transmission architecture, and adaptively selecting a data transmission strategy according to a real-time security condition; and transmitting the desensitized financial data through the distributed secure transmission architecture, and realizing reversible desensitization recovery. According to the method, while the privacy of the financial data is effectively protected, the availability and transmission security of the data are guaranteed, and the method is suitable for financial data processing and sharing in multiple scenes.

Techniques for federated distributed security analytics using a swarm node framework to provide a scalable way to improve efficiency and accuracy of determining and remediating security threats, while reducing computational complexity and resource usage of a system. A system may comprise node(s) executing a first engine and a second engine. The first engine may operate in a data plane and receive event data associated with security events, perform a specialized type of function, and generate two classes of output(s): (1) transformed event data output to other first engine(s) of other node(s) and (2) security signal(s) output to the second engine. The second engine may be configured to operate in a control plane. The second engine may receive input(s), including the security signal(s) and determine action(s) to perform with regard to security event(s). The second engine may output instruction(s) to other node(s) and / or derived security signal(s) to other second engine(s).

The application discloses a kind of water conservancy video monitoring safety protection method, system and equipment, and wherein method includes: the smart contract management equipment authentication of alliance block chain architecture, the distributed security access control of decentralization;According to the space-time feature and information entropy analysis of video content Selection adaptive compression algorithm, real-time adjustment compression parameter;Based on the dynamic key derivation algorithm of block chain consensus mechanism and high-precision timestamp, construct double-layer encrypted video transmission mechanism;Based on the distributed hierarchical storage strategy of block chain, execute the hybrid mechanism of local cache and block chain distributed storage;Build timeliness cloud edge collaborative control mechanism.The application realizes the safe access, efficient processing, encrypted transmission, anomaly detection and reliable storage of video monitoring data through the deep integration of edge computing and block chain technology, significantly improves the data credibility, tamper resistance and overall system security of reservoir safety monitoring.

The application provides a distributed security outsourcing computing processing method based on sparse matrix transformation, and relates to the technical field of computers, and the method comprises the following steps: acquiring a first matrix and a second matrix; randomly generating a key set comprising a binary permutation matrix, a sparse triangular matrix and a random vector; performing primary encryption on the first matrix and the second matrix based on the binary permutation matrix; performing secondary encryption on the primary encrypted matrix based on the sparse triangular matrix; distributing the secondary encrypted first secondary encrypted matrix to each edge end in an integrated manner, distributing the second secondary encrypted matrix to each edge end in an even manner after dividing the second secondary encrypted matrix into column vectors according to columns, and enabling the edge end to perform a subtask calculation operation by using the received matrix and return the result to the user end; receiving the calculation results of the edge ends, and aggregating the results; verifying the reliability of the aggregated results by using the random vector, and decrypting the final calculation result. The scheme can improve the security and timeliness of outsourcing computing.

The present invention discloses a security control method, device, and medium for wind farm tampering attacks. The method includes: establishing a wind turbine dynamics model and a wind farm system dynamic equation based on the wind turbine structure; establishing a data tampering attack model for the unit output power transmitted on the unit's internal communication link and the unit-SCADA system communication link based on the data tampering attack characteristics; designing an estimator for the attacked unit, estimating the erroneous information injected by the attacker through a dynamic signal compensation mechanism; designing a distributed security controller for all units, making corresponding control adjustments for different units, and ensuring that each unit and the entire wind farm can operate normally and achieve the expected power output performance under data tampering attacks. The present invention effectively solves the attack and defense problems in wind farms with nonlinear characteristics, ensures the normal operation of each wind turbine in the wind farm, improves the power output performance of the wind farm, and ensures the power generation balance of the wind farm.

The application discloses an artificial intelligence-based cloud network cooperative distributed security communication method and system. The method comprises the following steps: acquiring network timing data corresponding to a communication connection; performing threat event identification on the network timing data to obtain first identification information; for each communication relay point, determining probability information corresponding to the communication relay point based on the network timing data and characteristic information of the communication relay point, wherein the probability information represents the probability that each data point in the network timing data matches the communication relay point, and the characteristic information represents the characteristics possessed by the communication relay point in the communication connection; performing association processing on the first identification information and the probability information to obtain second identification information; determining a cloud network cooperative distributed security protection strategy according to the second identification information by using a pre-trained artificial intelligence model, and sending the cloud network cooperative distributed security protection strategy to a gateway, so that the communication security of the distributed security communication system can be improved.

The invention discloses a distributed secret key generation method, device and system based on SM9, and belongs to the technical field of cryptography, firstly, the distributed secret key generation method combines identity password characteristics of an SM9 algorithm and a distributed cooperation mechanism to improve the safety and decentration degree of a secret key generation process. Secondly, a distributed key generation system architecture with multi-node cooperative participation realizes common generation, distribution and reconstruction of keys, and avoids central trust risks. Then, a tamper-resistant and share verification mechanism is introduced, the resistance of the system to malicious nodes is enhanced, and the correctness and confidentiality of the key generation process are guaranteed; and finally, the method also supports a transverse expansion capability, has good expandability and platform independence, and is suitable for construction of various distributed security infrastructures. Therefore, the method can meet the application requirements of high concurrency, low delay and high security of the block chain system.

This invention discloses a distributed safety learning control method for mobile robot swarms, relating to the field of robot cooperative control technology. The method includes: calculating the future short-term motion position based on a nominal control quantity, and calculating the predicted neighborhood distance by combining it with a neighborhood state set to form multiple sets of safety constraints; combining these multiple sets of safety constraints with environmental boundary information to form obstacle avoidance constraints, and establishing constraint priority rules with actuator limits; obtaining a hierarchical safety constraint set by adding constraint level identifiers; using the nominal control quantity as the optimization objective and the hierarchical safety constraint set as the constraint conditions to construct a local optimization subproblem, and performing a distributed solution using the alternating direction multiplier method to generate a safe and feasible control quantity. This invention achieves the output of safe and feasible control quantities without centralized computation, thereby improving the real-time performance and reliability of swarm cooperative control.

The invention discloses a distributed secure communication method and device based on quantum key distribution, equipment and a medium, and the method comprises the steps: receiving a communication request from a first user terminal in the same management domain, and the request comprises the identification of a second user terminal in other management domains; determining a second key management node of other management domains according to the identifier of the second user terminal; sending a negotiation key request to a second key management node through a quantum key distribution protocol, so that the second key management node returns a request response according to the negotiation key request; determining a session key through a quantum key distribution network according to the request response; and the session key is issued to the first user terminal, so that the first user terminal encrypts the communication message according to the session key, thereby effectively overcoming the system performance bottleneck under the high-concurrency request, and meeting the communication requirements with relatively high requirements on real-time performance and security.

Techniques for federated distributed security analytics using a swann node framework to provide a scalable way to improve efficiency and accuracy of determining and remediating security threats, while reducing computational complexity and resource usage of a system. A system may comprise node(s) executing a first engine and a second engine. The first engine may operate in a data plane and receive event data associated with security events, perform a specialized type of function, and generate two classes of output(s): (1) transformed event data output to other first engine(s) of other node(s) and (2) security signal(s) output to the second engine. The second engine may be configured to operate in a control plane. The second engine may receive input(s), including the security signal(s) and determine action(s) to perform with regard to security event(s). The second engine may output instruction(s) to other node(s) and / or derived security signal(s) to other second engine(s).

The application provides a data transmission system and method based on security authentication and control, and belongs to the technical field of data security authentication and control. The system comprises a data sending end and a data receiving end. When the data receiving end receives a data sending request, a non-IP firewall unit is started to establish a pre-communication link with the data sending end. The non-IP firewall unit sends a random sampling instruction to the data sending end. Based on the data sample features obtained by random feature sampling, the non-IP firewall unit determines the current data interaction channel of the data receiving end and the data sending end. Based on the current data interaction channel, the data sending end transmits data to the data receiving end. The application also provides a centralized management mode of distributed security access control. The application is based on centralized management of a management center, and further moves the data security authentication to before the start of data transmission. Different transmission channels are matched according to different security authentication results, so that the data transmission efficiency can be improved under the condition of ensuring the terminal security.

Techniques for network-on-chip (NoC) memory addressable encryption and authentication. In an embodiment, NoC circuitry includes NoC routing circuitry, memory circuitry that stores a security parameter, and security circuitry that secures (e.g., encrypts and / or authenticates) a payload based on the security parameter. The security circuitry may secure the payload before the payload is packetized for transmission through the NoC, after the payload is de-packetized for output to an endpoint, or as the payload transits the NoC. The security circuitry may be centralized or distributed amongst access points of the NoC. Distributed security circuitry may exchange a security parameter over a secure link of the NoC circuitry. The security circuitry may include decryption circuitry that decrypts a response from a first endpoint before the response is packetized for transmission through the NoC, after the response is de-packetized for output to a second endpoint, or as the response transits the NoC.

The invention discloses an industrial Internet of Things data security unloading method based on deep migration reinforcement learning. The method comprises the following specific steps: step 1, setting parameters of an IIOT system model; and step 2, providing a distributed security unloading algorithm based on reviewer migration to make a distributed security unloading decision for each IIOT device. A newly added IIOT device adopts a Bregman ball in manifold learning to select an IIOT device with the highest similarity from neighbor devices to serve as a source agent, and knowledge extracted from the source agent and an experience sample collected from a target environment are utilized to quickly train a strategy model adapting to the target environment. And the model reconstruction speed and quality of the distributed security unloading strategy in the unsteady state environment are improved. According to the method, data processing delay and energy consumption in the IIOT system can be effectively reduced while multi-dimensional domain intrusion behaviors are resisted, real-time, safe and reliable industrial data transmission and processing are achieved, and the method is suitable for the IIOT system with high unstability and time-varying characteristics.