169 results about "End-to-end encryption" patented technology

Secure communication provided with secure and non-secure root ports. One embodiment comprises: a plurality of cores; a memory controller to couple to a memory; an interconnect fabric coupled to the plurality of cores and the memory controller; and a root complex to support end-to-end encrypted channels between devices, the root complex comprising: a root port to receive non-posted requests from a requestor device, the root port to associate a first tag value with a non-posted request to indicate whether the non-posted request is received over an end-to-end encrypted channel; and a bridge device to transmit the non-posted request with the first tag value and to subsequently receive a completion message including the first tag value, wherein the root port is to determine whether the completion message is to be encrypted in accordance with the end-to-end encrypted channel based on the first tag value.

The invention discloses a distributed computing power dynamic scheduling method and device and a medium, and the method comprises the steps: packaging heterogeneous computing power resources of a home terminal and an edge cloud node through a lightweight containerization technology, and collecting the hardware resource state data of the home terminal and the load data of the edge cloud node in real time; generating a dynamic scheduling strategy according to the task calculation type and the real-time network state of the to-be-calculated task, and splitting the to-be-calculated task into a plurality of sub-tasks according to the dynamic scheduling strategy; distributing the sub-tasks to home terminals or edge cloud nodes according with a dynamic scheduling strategy, and aggregating calculation results of the sub-tasks; and performing end-to-end encryption and fragmentation verification on the cross-domain transmitted data stream, and dynamically adjusting the task allocation permission of the home terminal based on the equipment security score.

The invention discloses a secure transmission system based on a multimedia short message, and relates to the technical field of communication and network security, and the system comprises a protocol stack security reinforcement module which carries out the hierarchical reconstruction of an MMS protocol stack, comprises a preprocessing layer, is used for intercepting and filtering illegal characters, and verifies the legality of a message structure through a finite-state machine; the analysis layer is used for pre-judging memory requirements based on message types and lengths by adopting a dynamic memory allocation strategy; the execution layer is integrated with a null pointer checking mechanism, and the validity of a pointer is forcibly verified before a protocol stack calls a function; the encryption and signature module is used for carrying out end-to-end encryption on a message body and metadata by adopting a hybrid encryption algorithm and carrying out message integrity verification through a lightweight hash tree; and the vulnerability real-time monitoring module is embedded into an abnormal behavior detection model based on machine learning and is used for dynamically identifying memory occupation abnormity and illegal instruction calling high-risk operation when the protocol stack runs.

A method for secure onboarding to a closed mesh network in which a camera-equipped device scans a QR code embedded in a durable physical carrier (e.g., adhesive bandages, photographs, ID cards) to extract an access credential, configuration profile, or secure URL that automatically configures the device for network access, authenticates the device to the mesh without manual credential entry or transmission of plaintext credentials over insecure channels, and establishes end-to-end encrypted communications between network nodes; the method supports cryptographically random, single-use or time-limited credentials with periodic refresh to prevent replay, encoding of VPN / WireGuard or proprietary configuration profiles, substantially real-time onboarding (e.g., under five seconds), optional multi-factor verification (biometric or PIN), immediate initiation of secure messaging, voice / video or data sessions upon onboarding, audit logging for compliance and revocation based on detected unauthorized activity, and covert or overt embedding of QR codes in environment-resistant carriers for emergency, disaster response, first responder, or covert deployment, with the QR code rendered unreadable or deactivated after successful onboarding to prevent credential reuse.

The invention relates to the field of data encryption, in particular to a data encryption transmission method and device in a hybrid cloud environment, equipment and a storage medium. The method comprises the following steps: acquiring data to be transmitted; performing key field deep semantic analysis on the to-be-transmitted data, and performing dynamic layered encryption to obtain a plurality of layered encrypted transmission data packets; available transmission path detection is carried out on the hybrid cloud environment, dynamic end-to-end encryption is carried out, and a plurality of end-to-end encryption transmission links are constructed; performing distributed encryption transmission and dynamic transmission path decision on the plurality of layered encryption transmission data packets based on the plurality of end-to-end encryption transmission links, and constructing a dynamic transmission path adjustment strategy; detecting all user access behaviors in the hybrid cloud environment; and carrying out user cloud service provider classification on all the user access behaviors, carrying out personalized behavior modeling, and constructing a behavior portrait of each user. According to the invention, efficient and safe data encryption transmission for the hybrid cloud environment is realized.

The invention discloses an informatization system dynamic verification method based on a zero-trust architecture, and the method comprises the steps: collecting and standardizing user operation requests of all business systems, and achieving unified resource and organization identification; a distributed encryption operation log link is constructed through an end-to-end encryption protocol, and safe synchronization and tampering prevention of an operation behavior abstract are guaranteed; extracting a multi-dimensional right decision variable, inputting the multi-dimensional right decision variable into an adaptive artificial intelligence decision model, dynamically generating a reversible permission factor set, and supporting fine-grained and rollback permission authorization and real-time automatic revocation; the log chain is encrypted and recorded in the whole process, intelligent abnormity monitoring and end-to-end traceability are combined, the consistency and compliance auditing of the global permission state are supported, and the security, traceability and intelligent self-adaptive treatment capacity of sensitive operation in the multi-organization cooperation environment are effectively improved.

A system and associated methods provide solutions for end-to-end privacy and per-hop routing and policy decision in multi-hop and Software-Defined Wide Area Networks (SD-WANs) by leveraging unique SDWAN edge identities of edge devices. The system enables end-to-end encryption between traffic source and destination sites using IPsec ESP tunnel mode, with System IPs as the outer IP addresses. The system further enables per-hop integrity protection using IPsec AH transport mode, with WAN IPs as the outer IP addresses. By having some information encrypted between a source device and a destination device and other information encapsulated between hops (e.g., between source device and an intermediate device), the system enables route and policy lookup based on destination site System-IP, along with integrity protection based on SLA-class in packet metadata for independent path selection at intermediate hops.

The application discloses a smart community management service system, and particularly relates to the field of service management, comprising a perception layer module, a communication layer module, a data processing layer module and an application layer module; the application realizes global intelligent management through the collaborative architecture of the perception layer module, the communication layer module, the data processing layer module and the application layer module; the perception layer is deployed with multi-source heterogeneous sensors, and data preprocessing is conducted in combination with edge computing; the communication layer adopts multi-protocol fusion transmission, supports 5G+NB-IoT dual-channel redundancy and end-to-end encryption; the data processing layer is based on a cloud-edge collaborative architecture, uses Kalman filtering denoising, D-S evidence theory fusion conflict information, LSTM-Attention prediction device failure, and constructs a digital twin simulation optimization energy consumption; the application layer provides a three-dimensional visual management and control platform, integrates security linkage, air conditioner group control strategy driven by reinforcement learning and convenient service scheduling, and supports cross-platform access and RBAC permission management.

The invention provides a distributed photovoltaic data acquisition method and device based on adaptive encryption communication and multi-link redundancy, and the method comprises the steps: collecting real-time power generation data, equipment state data and environment parameters of a photovoltaic system through a multi-source sensor, and forming original data; an MQTT over TLS adaptive encryption communication protocol is adopted to perform end-to-end encryption on original data, and dynamic key management is combined to ensure transmission security; based on a dynamic link selection algorithm, encrypted data is transmitted to a power master station through 4G and LoRaWAN double-link redundancy, so that the transmission reliability is improved; and the master station side decrypts the data and then integrates the data to a database to support power grid dispatching and predictive analysis. According to the invention, the problems of safety and reliability in distributed photovoltaic data acquisition are solved, and the method is suitable for a smart power grid monitoring scene with high reliability and high real-time performance requirements.

The invention relates to a smart home equipment control method and system based on QUIC point-to-point communication, and belongs to the technical field of smart home control, and the control method comprises the steps: receiving a natural language instruction of a user terminal, and carrying out the analysis to obtain a target equipment identifier and an operation intention description text; retrieving a pre-constructed equipment registry according to the target equipment identifier, and obtaining a corresponding cue word template and a QUIC connection address; calling an artificial intelligence model deployed locally, and outputting a structured equipment control instruction in combination with the operation intention description text and the cue word template; performing signature encryption on the structured equipment control instruction, establishing a QUIC end-to-end encryption transmission channel between the user terminal and the target equipment, and transmitting the QUIC end-to-end encryption transmission channel to the target equipment; receiving operation response data fed back by the target equipment after the target equipment verifies and executes the structured equipment control instruction; the device registry is dynamically optimized based on the operational response data. According to the invention, the risk of cloud service privacy leakage can be reduced, and the data security of the smart home system is improved.

The invention discloses an audio and video transmission method and device based on multi-mode AI enhancement and dynamic end-to-end encryption, equipment and a storage medium, and relates to the technical field of digital audio and video processing and secure transmission, and the method comprises the steps: obtaining an original audio and video stream, and separating the original audio and video stream into audio data, video data and subtitle text data; performing multi-mode AI enhancement processing on the audio data, the video data and the subtitle text data to obtain enhanced audio and video data; generating an encryption decision instruction based on the real-time network state, and performing encryption processing on the enhanced audio and video data according to the encryption decision instruction to generate encrypted data with a tamper-proof watermark; and when the encrypted data passes integrity verification and copyright legality judgment, the encrypted data is transmitted through a secure transmission channel, and collaborative optimization of security and efficiency is realized through a core technology chain of multi-modal separation enhancement, dynamic encryption decision, hardware-level watermark binding and credible verification transmission.

The invention relates to the technical field of near-field communication security, in particular to a hardware-level identity authentication and end-to-end encryption near-field data interaction method and system for an electric red-connected terminal, and the method comprises the steps: a first electric red-connected terminal and a second electric red-connected terminal initiate pairing based on a Bluetooth secure connection pairing protocol, and negotiate to generate a long-term key through an ECDH algorithm; performing bidirectional identity verification by adopting an application layer authentication protocol; activating AES-CCM encryption by using a session key derived from a long-term key; bluetooth signal strength and a connection state are monitored in real time, and a negotiation key is automatically paired again when abnormity occurs; generating an interaction log, digitally signing the log by using a locally stored private key, and securely storing the signed log in a local secure storage area of the terminal; the digital signature of the latest log is verified, and if interaction abnormity is found, the local security module of the terminal recovers the local data to the pre-interaction state according to the last credible log record. The problem that traditional Bluetooth communication is prone to eavesdropping and tampering can be solved.

According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

The invention discloses an Android instant messaging method and system based on dynamic key management and privacy protection. The system comprises an equipment fingerprint key generation module used for extracting equipment hardware fingerprints and generating a unique master key through a Hash algorithm; the dynamic session key rotation module is used for dynamically deriving a session key based on a timestamp confusion mechanism and a preset triggering condition; the key verification and synchronization module is used for realizing key legality verification through two-factor verification and a server blacklist mechanism; and the privacy protection module is used for protecting user data privacy by adopting an end-to-end encryption and local storage encryption technology, so that the technical problems in the background technology are solved, and the technical effects of remarkably improving the communication security and the privacy protection level through equipment fingerprint binding, dynamic key rotation and a two-factor verification mechanism are realized.

The invention relates to the technical field of network scheduling, and discloses an agricultural heterogeneous perception and intelligent network scheduling method and system, and the method comprises the following steps: S01, a system initialization stage; step S02, a resource scheduling and strategy learning stage; step S03, a sensing data fusion and processing stage; s04, a security mechanism and life cycle management stage: adopting an end-to-end encryption and identity authentication mechanism in a data transmission process, and collecting feedback parameters for updating a scheduling strategy and releasing resources after a task is completed; the system comprises a multi-mode agricultural sensing terminal, intelligent gateway equipment, a 5G and LPWAN hybrid access network, a resource scheduling module and a scheduling strategy learning engine. According to the method, the multi-dimensional state characteristics such as the network congestion level, the edge node load, the data timeliness and the task priority are sensed in real time through the deep reinforcement learning model, and the optimal allocation decision of communication and computing resources is dynamically generated.

A communications system may include a satellite constellation and a terrestrial network. A first user equipment (UE) device may provision sender keys, handles, and / or status information with a core network while connected to the terrestrial network. The core network may accommodate server fan out to a set of other UE devices associated with a particular user identifier. When the first UE device disconnects from the terrestrial network, the first UE device and the set of other UE devices may convey end-to-end encrypted messages through the constellation and the core network. The first UE device may address the set of other UE devices using a short handle associated with the user identifier and / or using a handle index. The first UE device may transmit a control message via the constellation that instructs the core network to release provisioned status information to the set of other UE devices.

The invention discloses a federal relay transmission method and system and terminal equipment, and the transmission method comprises the steps: obtaining a model increment generated by each client in a local training model, and carrying out the fragmentation and encryption processing, and obtaining a data unit set; obtaining a path list currently issued by the aggregator, distributing a transmission path for each data unit in the data unit set, and packaging routing information; multi-hop forwarding is carried out on the data unit through the relay node, link index information is recorded and reported to the aggregator, and the aggregator updates the path list based on the link index information; and verifying, decrypting and recombining the received data units in the aggregator, and updating the global model based on the model increment recombined by all the clients. The method is applied to the field of encryption transmission, safe, reliable and efficient transmission of model increment in federated learning can be effectively achieved, and data privacy is protected and the method adapts to a complex network environment through end-to-end encryption, fragmentation parallel transmission and dynamic multi-hop path optimization.

The invention relates to the technical field of computers, discloses a data sharing method and system for patients suffering from metabolic acidosis, and aims to solve the problem of out-of-control safety caused by extensive authority, bare transmission and traceless behaviors in cross-institution medical data circulation. A dynamic authority strategy based on roles and scenes is constructed by extracting and standardizing patient diagnosis and treatment data from a hospital system; end-to-end encrypted transmission is realized through bidirectional authentication and a temporary session key; establishing a three-layer block chain type audit log tracking access, a secret key and a data flow direction; dynamic desensitization, quality verification, cache acceleration and intelligent contract extension mechanisms are integrated, and a visual authority topology monitoring and credit scoring system is supplemented. According to the technical scheme, data field-level accurate authorization, encryption and anti-theft in the whole transmission process, traceability in the whole operation period and use compliance self-feedback are achieved, and the scientific research value of clinical data is released to the maximum extent while the privacy safety of a patient is effectively guaranteed.

According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.

A communications system may include a satellite constellation and a terrestrial network. A first user equipment (UE) device may provision sender keys, handles, and / or status information with a core network while connected to the terrestrial network. The core network may accommodate server fan out to a set of other UE devices associated with a particular user identifier. When the first UE device disconnects from the terrestrial network, the first UE device and the set of other UE devices may convey end-to-end encrypted messages through the constellation and the core network. The first UE device may address the set of other UE devices using a short handle associated with the user identifier and / or using a handle index. The first UE device may transmit a control message via the constellation that instructs the core network to release provisioned status information to the set of other UE devices.

Disclosed are a server system based on public cloud technology, an instance creation method and a cloud management platform, and belong to the technical field of cloud services. The server system comprises a first server and a second server connected by a connection channel. A first instance of the first server is provided with a first business module and a first security module; a second instance of the second server is provided with a second business module and a second security module; the first business module is used for sending an access request for the second business module, and the access request is used for requesting the second business module to provide a second tenant service; the first security module is used for obtaining the access request, encrypting the access request, and sending the encrypted access request to the connection channel; and the second security module is used for obtaining the encrypted access request from the connection channel, decrypting the encrypted access request, and sending the decrypted access request to the second business module. The application realizes end-to-end encryption protection of the access request.

A communications system may include a satellite constellation and a terrestrial network. A first user equipment (UE) device may provision sender keys, handles, and / or status information with a core network while connected to the terrestrial network. The core network may accommodate server fan out to a set of other UE devices associated with a particular user identifier. When the first UE device disconnects from the terrestrial network, the first UE device and the set of other UE devices may convey end-to-end encrypted messages through the constellation and the core network. The first UE device may address the set of other UE devices using a short handle associated with the user identifier and / or using a handle index. The first UE device may transmit a control message via the constellation that instructs the core network to release provisioned status information to the set of other UE devices.

Disclosed are a server system based on public cloud technology, an instance creation method and a cloud management platform, belonging to the technical field of cloud services. The server system comprises a first server and a second server, between which connection channels are established. A first service module and a first security module are provided in a first instance of the first server; a second service module and a second security module are provided in a second instance of the second server; the first service module is configured to send an access request for the second service module, the access request being used for requesting the second service module to provide a second tenant service; the first security module is configured to acquire the access request, encrypt the access request, and send the encrypted access request to the connection channel; and the second security module is configured to acquire the encrypted access request from the connection channel, decrypt the encrypted access request, and send the decrypted access request to the second service module. The present application implements end-to-end encryption protection of access requests.

A method and apparatus for processing a transaction between a merchant system and a customer system, the customer system associated with a customer of the merchant are described. The method may include receiving, at a commerce platform, a transaction request from the merchant system, wherein the transaction request is generated by the merchant system and comprises a card identifier and encrypted payment card data, wherein the card identifier is determined from card data for a payment card used in the transaction and the encrypted payment card data comprises at least an encryption of a payment account number. The method may also include decrypting, by the commerce platform, the encrypted payment card data using an encryption key selected based on the card identifier, the encryption key associated with the commerce platform. Furthermore, the method may include authorizing, by the commerce platform in communication with one or more authorization systems, the transaction using the decrypted payment card data.

Secure communication provided with secure and non-secure root ports. One embodiment comprises: a plurality of cores; a memory controller to couple to a memory; an interconnect fabric coupled to the plurality of cores and the memory controller; and a root complex to support end-to-end encrypted channels between devices, the root complex comprising: a root port to receive non-posted requests from a requestor device, the root port to associate a first tag value with a non-posted request to indicate whether the non-posted request is received over an end-to-end encrypted channel; and a bridge device to transmit the non-posted request with the first tag value and to subsequently receive a completion message including the first tag value, wherein the root port is to determine whether the completion message is to be encrypted in accordance with the end-to-end encrypted channel based on the first tag value.

The application provides a kind of intelligent substation remote monitoring system based on power data network, it is related to power data monitoring technical field, including: station end system, for collecting the video image data and equipment operating condition data in substation, additional uniform time label is attached to the data collected, and equipment operating condition data is executed local anomaly detection;Power data communication network, connect station end system with remote monitoring center, for transmitting different types of data in different virtual transmission channels;Remote monitoring center, with station end system between using end-to-end encryption communication, for receiving the data uploaded by each station end system, the video image data and equipment operating condition data under the same time label are carried out space-time correlation analysis, and output fault diagnosis result.The application, realizes the deep fusion of video data and operating data, solves the fault positioning difficult problem caused by data island, significantly improves the accuracy and efficiency of fault diagnosis.

The invention relates to the technical field of local area network data secure transmission, and discloses an Internet of Things gateway transmission method and system based on lims integration, and the method comprises a data collection and transmission step, a data distribution and analysis step, and a data display and analysis step. The system applies the method. According to the application, the data transmission path is optimized through the MQTT protocol and the QoS mechanism, the packet loss rate is reduced, and the concurrent processing capability is improved; protocol decoupling is realized through the Internet of Things platform, and multi-protocol access and flexible expansion are realized; through an end-to-end encryption and equipment identity authentication mechanism, data transmission security and access control are ensured; and through a data standardization and active subscription mechanism, the interface development complexity is reduced, and real-time pushing and display of the data are realized. By adopting the method and the device, the technical problems of low transmission efficiency, difficulty in system expansion, poor safety, complexity in LIMS integration and the like in the prior art can be effectively solved.

Embodiments relate to preventing access of removed users to messages shared in a group chat with an end-to-end encryption. An aspect includes, responsive to creation of a group having members for communicating using encryption keys, receiving a request to remove a given member of the members from the group, the given member being associated with a computer system, at least one message of the group being accessible to the given member. An aspect includes identifying the encryption keys associated with the given member and causing a deletion on the computer system of the encryption keys associated with the given member in response to the request. An aspect includes confirming the deletion of the encryption keys on the computer system associated with the given member. The deletion of the encryption keys on the computer system prevents access of the computer system to at least one message of the group.

The invention discloses a visual financial data dynamic analysis method and system, and relates to the technical field of data analysis. According to the method, after exposure index R1 identification and preliminary risk partition judgment are completed on a single access behavior, response strategy strength R2 is further calculated; and according to the response strategy intensity R2, the access behaviors are divided into a path reinforcement strategy rule set. Each strategy rule set corresponds to different access reinforcement control contents, such as end-to-end encryption mode switching, binding authentication mechanism starting, access authority automatic degradation, access data delay decoupling and the like. According to the mechanism, a reinforcement response scheme can be dynamically selected according to current behaviors, paths and environmental factors of visitors, so that the protection precision and sensitivity of high-risk access paths are improved, meanwhile, resource waste caused by excessive reinforcement of low-risk access is avoided, and adaptive matching and on-demand configuration between strategies and risks are realized.