80 results about "Distributed security" patented technology

The invention relates to the technical field of data security management, and discloses a blockchain-based forestry data security management system and method, and the system comprises a data collection unit which is used for comprehensively obtaining a multi-dimensional information flow of forest ecology and resource states; the data processing unit is used for carrying out deep cleaning, standardized regulation and feature value extraction on the originally collected mass heterogeneous data; the block chain storage unit is used for constructing a permanent, tamper-proof and distributed secure storage infrastructure platform of the forestry core data; a verification unit; the safety control unit is used for constructing a covering data transmission, storage and access full-chain depth defense system structure model; a user interface unit; an auditing unit; and a network communication unit. The method is reasonable in design, and the intelligent analysis module is used for processing to form a forest interannual growth trend prediction function distribution map state visual output result set.

The embodiment of the invention provides a test case sample cutting method, device and system and a storage medium, and relates to the technical field of network security testing. The method comprises the following steps: constructing an industrial control system attack tactical library; wherein the tactical library comprises classified and arranged attack techniques and corresponding security attributes; performing information analysis and semantic analysis on the test case sample to generate structured data of the test case sample and / or function points in the test case sample; and cutting the test case sample according to the security attribute and / or the structured data and / or the function point to obtain a test fragment corresponding to the security attribute and / or the function point. According to the method, classification-based attack techniques and security attributes are cut by constructing a tactical library, key information can be accurately extracted and test intentions can be understood through information analysis and semantic analysis, redundant tests are avoided, cut test fragments can concentrate on specific security attributes or function points, the test coverage range is more accurate, and the test efficiency is improved. And the distributed security test effect is improved.

The invention discloses a multi-cascade network security risk dynamic assessment and protection system, and relates to the technical field of network security. Comprising a multi-cascade data acquisition and preprocessing module, a dynamic data traceability graph construction module, a distributed security knowledge graph collaboration module, a multi-cascade risk causal evaluation module and a dynamic protection and closed-loop optimization module. According to the method, a collaborative architecture of multi-cascade data acquisition and preprocessing, dynamic data traceability graph construction, distributed security knowledge graph collaboration, multi-cascade risk causal evaluation and dynamic protection and closed-loop optimization is constructed, and system operation parameters are continuously optimized through a closed-loop feedback link. The dynamic adaptation capability of network security risk assessment to the multi-cascade architecture and the comprehensiveness of assessment results are remarkably improved, and the problems that in the prior art, network security assessment mostly depends on single-dimension data, cross-module deep collaboration is lacked, and dynamic changes of the multi-cascade architecture are difficult to adapt can be solved.

The invention relates to the technical field of risk management and control, in particular to a distributed security risk management and control platform fusing situation awareness and an intelligent contract, and the platform comprises an acquisition module, a situation awareness module, a prediction module, an identification module, and an intelligent contract execution module. Multi-dimensional dynamic parameters related to a port cold chain are comprehensively collected and calculated, temperature difference fluctuation is used for reflecting environment stability, frequency jitter is used for reflecting equipment operation states, queue density and emergency brake behaviors are used for reflecting operation intensity and operation risks, trend judgment is carried out based on different situation index occurrence frequencies in a prediction module, and a prediction result is obtained. And in combination with the time continuity and the space aggregation of the abnormal nodes, the transportation speed is finally automatically adjusted through the intelligent contract, so that the problems of risk early warning lagging and difficulty in effective implementation of field control caused by response delay and insufficient prediction timeliness due to dependence on centralized processing are effectively solved.

The invention provides a time mark event triggering reinforcement learning multi-agent consistency control method and system, and relates to the technical field of multi-agent cooperative control. Establishing a multi-agent system dynamics model comprising a leader and a plurality of followers on the time mark; based on the state information of the leader and the follower, constructing a tracking error and consistency error dynamic equation between the intelligent agents; a reinforcement learning controller based on a neural network is constructed, and an optimal control strategy and a performance index function are approached; an event triggering mechanism is designed, and the controller is triggered to update only when the local error of the intelligent agent exceeds a dynamic threshold value; by constructing a Lyapunov function on a time scale and solving a linear matrix inequality condition, bounded consistency of the system is ensured, and a Zeno phenomenon is eliminated. Unified modeling and distributed safety control of the time scale multi-agent system in the non-ideal environment are achieved, communication resources are saved, the convergence speed is increased, and the robustness and practicability of the system are enhanced.

The disclosure relates to systems, methods and computer readable media for enabling distributed secure remote access from a device via a wide area network (WAN), to a designated physical site covered by local area network (LAN). Specifically, the disclosure relates to a computerized systems, methods and computer-readable media using hardware-based, virtual private network pairs having preshared encryption / decryption keys, operable to transmit data over WAN from a physical computing device to an exclusively designated site in a physical area covered by a LAN.

The invention relates to the technical field of secret-related electronic file transmission and management, and discloses a secret-related electronic file secret transmission safety management system which comprises a safety management system. The security management system comprises a hardware security support layer, a distributed security storage layer, a file full life cycle security management layer, a user identity authentication and behavior auditing layer, a security auditing layer and an emergency response layer. The confidential electronic file secret transmission security management system integrates a trusted computing chip, security boot firmware, a physical unclonable function (PUF) and an optical isolation technology through a hardware security support layer, is different from a traditional system which only depends on software protection, constructs a trusted execution environment from a hardware bottom layer, guarantees the operation credibility by using the trusted computing chip, and improves the security of the confidential electronic file. The secure boot firmware blocks illegal program loading, the PUF endows the hardware with a unique uncounterfeited identity, and the optical isolation realizes physical level network isolation, so that threats such as hardware tampering and physical attacks are radically defended.

The invention discloses a parallel computing and distributed network access risk management and control device and a management and control method, and relates to the technical field of risk management and control. The system comprises three layers, namely network element equipment, a network controller and a security management and control platform, the security management and control platform integrates a PKI-based password infrastructure, a tool engine and an AI engine and uniformly distributes security management and control related strategies, and the network controller is used as an edge execution component and is connected with various network element equipment of a managed network, so that the security management and control related strategies can be uniformly distributed. The risk management and control device is constructed on a full-switching parallel computing architecture which provides a virtual computing power pool. Under the support of high-performance computing power provided by full-switching parallel computing, a safety management and control platform based on a distributed safety management and control system is constructed, unified state monitoring, risk analysis and strategy issuing are carried out on network access risks, and the safety of network access is improved through distributed network event and performance management and control. And network access risk real-time management and control are carried out.

The invention discloses a computing power network resource credible scheduling method based on cloud network security fusion, and relates to the technical field of cloud computing and network security. Aiming at the problems of low resource utilization rate, insufficient security isolation, lack of credibility evaluation and the like in the existing computing power scheduling, a computing power network architecture containing a distributed security resource pool is constructed, and various security services are deployed through security nodes and serve as trust agents to provide security resource support and credibility evaluation basis for computing power task scheduling. According to the method, node state information is collected through state monitoring modules deployed at all nodes; the node credibility is calculated through a credibility evaluation module on the dispatching center and the security node; and the task scheduling module is used for realizing target node optimization and security service link optimization by utilizing a hierarchical deep Q network (Hierarchical Deep Q-Network) model on the basis of the node state information and the credibility result. According to the method, efficient task scheduling can be guaranteed, meanwhile, a user-defined security policy is supported, malicious nodes are effectively identified, and the security of a computing power network is improved.

The present application relates to the field of data processing, more particularly, the present application relates to a kind of based on distributed financial data storage method and system, method includes: obtaining the financial transaction data stream to be stored and is divided to obtain multiple data blocks;For single data block, the distribution variation degree of the data block is calculated, based on distribution variation degree, respectively determine the weighted probability for constructing compression encoding table, encryption round of encryption algorithm and replication factor in distributed storage system, and based on the three key parameters determined in sequence, data block is compressed, encrypted and stored;Compression, encryption and storage are carried out to all data blocks, thus complete the distributed security storage of the financial transaction data stream.The present application controls compression, encryption and storage link by unified index linkage, while improving the anti-statistical analysis ability of encrypted data, realizes the adaptive balance of storage security and resource cost.

The invention relates to the technical field of financial data privacy protection, and discloses a financial data privacy protection method based on a reversible desensitization technology. The method comprises the following steps of: acquiring a multi-source financial data stream, wherein the multi-source financial data stream comprises a transaction data stream and a user data stream; performing feature extraction and privacy risk estimation on the multi-source financial data stream to determine a financial sensitive position and desensitization intensity estimation; setting a reversible desensitization processing mechanism, and generating desensitization financial data based on the desensitization intensity estimation; constructing a distributed secure transmission architecture, and adaptively selecting a data transmission strategy according to a real-time security condition; and transmitting the desensitized financial data through the distributed secure transmission architecture, and realizing reversible desensitization recovery. According to the method, while the privacy of the financial data is effectively protected, the availability and transmission security of the data are guaranteed, and the method is suitable for financial data processing and sharing in multiple scenes.

Techniques for federated distributed security analytics using a swarm node framework to provide a scalable way to improve efficiency and accuracy of determining and remediating security threats, while reducing computational complexity and resource usage of a system. A system may comprise node(s) executing a first engine and a second engine. The first engine may operate in a data plane and receive event data associated with security events, perform a specialized type of function, and generate two classes of output(s): (1) transformed event data output to other first engine(s) of other node(s) and (2) security signal(s) output to the second engine. The second engine may be configured to operate in a control plane. The second engine may receive input(s), including the security signal(s) and determine action(s) to perform with regard to security event(s). The second engine may output instruction(s) to other node(s) and / or derived security signal(s) to other second engine(s).

The application discloses a kind of water conservancy video monitoring safety protection method, system and equipment, and wherein method includes: the smart contract management equipment authentication of alliance block chain architecture, the distributed security access control of decentralization;According to the space-time feature and information entropy analysis of video content Selection adaptive compression algorithm, real-time adjustment compression parameter;Based on the dynamic key derivation algorithm of block chain consensus mechanism and high-precision timestamp, construct double-layer encrypted video transmission mechanism;Based on the distributed hierarchical storage strategy of block chain, execute the hybrid mechanism of local cache and block chain distributed storage;Build timeliness cloud edge collaborative control mechanism.The application realizes the safe access, efficient processing, encrypted transmission, anomaly detection and reliable storage of video monitoring data through the deep integration of edge computing and block chain technology, significantly improves the data credibility, tamper resistance and overall system security of reservoir safety monitoring.

The application provides a distributed security outsourcing computing processing method based on sparse matrix transformation, and relates to the technical field of computers, and the method comprises the following steps: acquiring a first matrix and a second matrix; randomly generating a key set comprising a binary permutation matrix, a sparse triangular matrix and a random vector; performing primary encryption on the first matrix and the second matrix based on the binary permutation matrix; performing secondary encryption on the primary encrypted matrix based on the sparse triangular matrix; distributing the secondary encrypted first secondary encrypted matrix to each edge end in an integrated manner, distributing the second secondary encrypted matrix to each edge end in an even manner after dividing the second secondary encrypted matrix into column vectors according to columns, and enabling the edge end to perform a subtask calculation operation by using the received matrix and return the result to the user end; receiving the calculation results of the edge ends, and aggregating the results; verifying the reliability of the aggregated results by using the random vector, and decrypting the final calculation result. The scheme can improve the security and timeliness of outsourcing computing.

The application discloses an artificial intelligence-based cloud network cooperative distributed security communication method and system. The method comprises the following steps: acquiring network timing data corresponding to a communication connection; performing threat event identification on the network timing data to obtain first identification information; for each communication relay point, determining probability information corresponding to the communication relay point based on the network timing data and characteristic information of the communication relay point, wherein the probability information represents the probability that each data point in the network timing data matches the communication relay point, and the characteristic information represents the characteristics possessed by the communication relay point in the communication connection; performing association processing on the first identification information and the probability information to obtain second identification information; determining a cloud network cooperative distributed security protection strategy according to the second identification information by using a pre-trained artificial intelligence model, and sending the cloud network cooperative distributed security protection strategy to a gateway, so that the communication security of the distributed security communication system can be improved.

The invention discloses a distributed secret key generation method, device and system based on SM9, and belongs to the technical field of cryptography, firstly, the distributed secret key generation method combines identity password characteristics of an SM9 algorithm and a distributed cooperation mechanism to improve the safety and decentration degree of a secret key generation process. Secondly, a distributed key generation system architecture with multi-node cooperative participation realizes common generation, distribution and reconstruction of keys, and avoids central trust risks. Then, a tamper-resistant and share verification mechanism is introduced, the resistance of the system to malicious nodes is enhanced, and the correctness and confidentiality of the key generation process are guaranteed; and finally, the method also supports a transverse expansion capability, has good expandability and platform independence, and is suitable for construction of various distributed security infrastructures. Therefore, the method can meet the application requirements of high concurrency, low delay and high security of the block chain system.

This invention discloses a distributed safety learning control method for mobile robot swarms, relating to the field of robot cooperative control technology. The method includes: calculating the future short-term motion position based on a nominal control quantity, and calculating the predicted neighborhood distance by combining it with a neighborhood state set to form multiple sets of safety constraints; combining these multiple sets of safety constraints with environmental boundary information to form obstacle avoidance constraints, and establishing constraint priority rules with actuator limits; obtaining a hierarchical safety constraint set by adding constraint level identifiers; using the nominal control quantity as the optimization objective and the hierarchical safety constraint set as the constraint conditions to construct a local optimization subproblem, and performing a distributed solution using the alternating direction multiplier method to generate a safe and feasible control quantity. This invention achieves the output of safe and feasible control quantities without centralized computation, thereby improving the real-time performance and reliability of swarm cooperative control.

The invention discloses a distributed secure communication method and device based on quantum key distribution, equipment and a medium, and the method comprises the steps: receiving a communication request from a first user terminal in the same management domain, and the request comprises the identification of a second user terminal in other management domains; determining a second key management node of other management domains according to the identifier of the second user terminal; sending a negotiation key request to a second key management node through a quantum key distribution protocol, so that the second key management node returns a request response according to the negotiation key request; determining a session key through a quantum key distribution network according to the request response; and the session key is issued to the first user terminal, so that the first user terminal encrypts the communication message according to the session key, thereby effectively overcoming the system performance bottleneck under the high-concurrency request, and meeting the communication requirements with relatively high requirements on real-time performance and security.

Techniques for federated distributed security analytics using a swann node framework to provide a scalable way to improve efficiency and accuracy of determining and remediating security threats, while reducing computational complexity and resource usage of a system. A system may comprise node(s) executing a first engine and a second engine. The first engine may operate in a data plane and receive event data associated with security events, perform a specialized type of function, and generate two classes of output(s): (1) transformed event data output to other first engine(s) of other node(s) and (2) security signal(s) output to the second engine. The second engine may be configured to operate in a control plane. The second engine may receive input(s), including the security signal(s) and determine action(s) to perform with regard to security event(s). The second engine may output instruction(s) to other node(s) and / or derived security signal(s) to other second engine(s).

The application provides a data transmission system and method based on security authentication and control, and belongs to the technical field of data security authentication and control. The system comprises a data sending end and a data receiving end. When the data receiving end receives a data sending request, a non-IP firewall unit is started to establish a pre-communication link with the data sending end. The non-IP firewall unit sends a random sampling instruction to the data sending end. Based on the data sample features obtained by random feature sampling, the non-IP firewall unit determines the current data interaction channel of the data receiving end and the data sending end. Based on the current data interaction channel, the data sending end transmits data to the data receiving end. The application also provides a centralized management mode of distributed security access control. The application is based on centralized management of a management center, and further moves the data security authentication to before the start of data transmission. Different transmission channels are matched according to different security authentication results, so that the data transmission efficiency can be improved under the condition of ensuring the terminal security.

Techniques for network-on-chip (NoC) memory addressable encryption and authentication. In an embodiment, NoC circuitry includes NoC routing circuitry, memory circuitry that stores a security parameter, and security circuitry that secures (e.g., encrypts and / or authenticates) a payload based on the security parameter. The security circuitry may secure the payload before the payload is packetized for transmission through the NoC, after the payload is de-packetized for output to an endpoint, or as the payload transits the NoC. The security circuitry may be centralized or distributed amongst access points of the NoC. Distributed security circuitry may exchange a security parameter over a secure link of the NoC circuitry. The security circuitry may include decryption circuitry that decrypts a response from a first endpoint before the response is packetized for transmission through the NoC, after the response is de-packetized for output to a second endpoint, or as the response transits the NoC.

The invention discloses an industrial Internet of Things data security unloading method based on deep migration reinforcement learning. The method comprises the following specific steps: step 1, setting parameters of an IIOT system model; and step 2, providing a distributed security unloading algorithm based on reviewer migration to make a distributed security unloading decision for each IIOT device. A newly added IIOT device adopts a Bregman ball in manifold learning to select an IIOT device with the highest similarity from neighbor devices to serve as a source agent, and knowledge extracted from the source agent and an experience sample collected from a target environment are utilized to quickly train a strategy model adapting to the target environment. And the model reconstruction speed and quality of the distributed security unloading strategy in the unsteady state environment are improved. According to the method, data processing delay and energy consumption in the IIOT system can be effectively reduced while multi-dimensional domain intrusion behaviors are resisted, real-time, safe and reliable industrial data transmission and processing are achieved, and the method is suitable for the IIOT system with high unstability and time-varying characteristics.

An embodiment of the present invention provides a distributed vulnerability scanning method and system, comprising: obtaining the execution time of each current vulnerability scanning task, dividing the execution time of all current vulnerability scanning tasks by a preset number of groups to obtain the average execution time of each group of current vulnerability scanning tasks; grouping the current vulnerability scanning tasks according to the average execution time; and assigning each group of current vulnerability scanning tasks to one of a plurality of scanning engines for execution. This embodiment of the present invention not only improves the efficiency of task assignment, but also enables batch scanning by grouping current vulnerability scanning tasks, thereby reducing the total number of scans. When an exception occurs during the execution of a vulnerability scanning task, the execution of all tasks can be avoided by repeatedly executing the scanning task group containing the task that encountered the exception, thereby improving the fault tolerance of vulnerability scanning and the execution efficiency of vulnerability scanning tasks.

The invention belongs to the technical field of public test evaluation, and discloses a distributed safety public test evaluation method, system, equipment and medium, the method comprises the following steps: based on a case screening strategy and a multi-level test case generation technology, generating a task test case corresponding to task information, and determining the task test case by judging a filtering rate and a passing rate; verifying specification requirements of the optimization task test case; performing process verification on the optimized task test case, capturing industrial control traffic generated in a test scene, and implementing a traffic fuzzy test based on the industrial control traffic to obtain a task test case vulnerability and a test result; and constructing an electric power industrial control vulnerability library to manage task test case vulnerabilities and test results, evaluating vulnerability threat levels, and analyzing the security of industrial control system software based on vulnerability risk levels. According to the invention, full-test process trust chain management of achievement verification can be realized, and the purpose of full-process credible management and control of personnel credibility, behavior controllability and achievement verifiability in a public test environment is achieved.

Mitigating multiple authentications for a geo-distributed security service is disclosed. A request to access a web service from a client device is received. The request is redirected to a geo-distributed authentication service including a distributed cache for storing a user's authentication authorization. An authorization token included in a distributed authentication cache cookie and uniform resource locator (URL) for the web service to facilitate secure access to the web service from the client device are returned.

A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and / or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

The invention discloses a federated learning privacy protection and fair incentive method and system based on grey wolf optimization, and relates to the technical field of federated learning and distributed security computing, and the method comprises the steps: receiving multi-dimensional attribute parameters and preset initial global model parameters of candidate clients; based on the multi-dimensional attribute parameters of the candidate clients, screening the candidate clients by using a grey wolf optimization algorithm to obtain an optimal client; inputting a preset initial global model parameter into the optimal client for training, and performing gradient encryption based on a decentralized threshold function encryption method to obtain encrypted gradient data; performing security aggregation to obtain a security aggregation result, updating a preset initial global model parameter based on the security aggregation result, and performing quality evaluation on the updated global model to obtain a global model quality voucher; and performing consensus verification on the global model quality voucher, and triggering an intelligent contract by the verified global model quality voucher to generate an incentive distribution result.

The invention provides a distributed security authentication method and device for an equipment identity, equipment and a storage medium, and the method comprises the steps: determining that a first manufacturer to which the own equipment belongs and a second manufacturer to which the to-be-authenticated equipment belong have accessed the same decentralized identity platform in response to an instruction that the own equipment performs identity authentication on the to-be-authenticated equipment; obtaining a to-be-authenticated device certificate corresponding to a to-be-authenticated device and a root decentration identifier registered in the decentration identity platform by a second manufacturer in advance; and based on the root decentration identifier and the decentration identity platform, authenticating the certificate of the to-be-authenticated device. According to the method and the device, the corresponding root decentration identifier is only registered for the root certificate issuing mechanism of the second manufacturer corresponding to the to-be-authenticated device, and the decentration identifier does not need to be issued to each device, so that the complexity of device identity operation and maintenance is reduced.

The application relates to the technical field of power system economic dispatch, in particular to a distributed security-constrained economic dispatch method, device, equipment and medium, wherein the method comprises the following steps: acquiring key network topology parameters according to a power transmission network topology; acquiring optimal output and optimal power flow under reactive power constraints according to unit cost parameters; and generating a security-constrained economic dispatch strategy according to target key network topology parameters and the optimal output and optimal power flow under non-constraint conditions. Therefore, the method does not depend on step parameter adjustment, can improve the operation efficiency of the distributed security-constrained economic dispatch, and improves the economy and security of power system operation.

The invention relates to the technical field of electric power data processing, and discloses an electric power market data security sharing privacy computing system, which performs secret sharing on declaration prices through a hybrid encryption module to obtain price fragments, performs homomorphic encryption on declaration electric quantity, and distributes processed data to a first service party and a second service party. Then, the security sorting module cooperatively executes distributed security sorting based on the price fragments, and a quotation index sequence is obtained in a privacy protection mode; and the privacy positioning module and the ciphertext aggregation module utilize the index sequence to determine a marginal unit in a ciphertext domain and complete aggregation calculation of clearing price and electric quantity. And finally, the decryption evidence storage module performs collaborative decryption and block chain evidence storage on the encryption result, and outputs a public and credible clearing result. Therefore, secret sharing and homomorphic encryption are deeply fused, accurate and traceable safe clearing is realized on the premise of not leaking original quotation, and data privacy and result credibility are both considered.