48 results about "Exchange protocol" patented technology

The invention discloses a fusion method for automatic coprocessing of multi-source heterogeneous data, which comprises the following steps of: analyzing the format and semanteme of the multi-source heterogeneous data to obtain metadata features of each data source, the metadata features comprising data types, coding modes and semantic tags, and generating a standardized metadata description set; according to the metadata description set, a pre-established protocol template library is adopted, an applicable template is matched, an initial unified exchange protocol is generated, and the initial unified exchange protocol comprises a format conversion rule and a semantic mapping relation; and if the format conversion rule of the initial unified exchange protocol cannot adapt to the metadata features of the newly added data source, dynamically updating the protocol template through a machine learning algorithm to obtain an exchange protocol adaptive to the new data source.

The invention discloses a quantum key fused block encryption method, a communication system and an evaluation method thereof, and the method comprises the steps: fusing a quantum key generated by quantum key division into an Internet key exchange protocol of IPsec to form a mixed key; the sender and the receiver carry out message transmission through the mixed key, the authentication head and the packaging security load, so that the quantum key is integrated into the IPsec framework; and meanwhile, different quantum keys are used in each VPN channel, so that one-time pad is realized. In addition, the invention further provides a method for evaluating the performances such as the key consumption rate, the maximum supportable VPN tunnel number and the total throughput. According to the invention, the security and stability of data transmission in the quantum computer era can be improved.

Embodiments for communicating using a switch configured to establish multiple types of communication routes. First and second upstream switch ports (USPs) communicate with first and second hosts according to first and second Compute Express Link (CXL) protocols, respectively. A downstream switch port (DSP) communicates with a device according to a third CXL protocol. The switch couples the first USP to the DSP via a first route traversing a single Virtual CXL Switch (VCS), and couples the first USP to the second USP via a second route traversing two VCSs. Optionally, the switch includes a Resource Provisioning Unit (RPU) coupling the two VCSs of the second route, terminating the first and second CXL protocols, and translating between CXL messages conforming to the first and second CXL protocols.

The invention relates to the technical field of industrial Internet of Things, in particular to a gateway information pushing method and system based on an MQTT exchange protocol, and the method comprises the steps: obtaining a theme message from an equipment end, and recording a subscriber state and a subscription theme from a subscription end; matching a subscription theme with the theme message, and selecting a corresponding pushing mode according to the subscriber state after matching succeeds; in response to the fact that the subscriber state is in the off-line state, marking the theme message which is not received by the subscriber as an undelivered theme message, and storing the theme message in a gateway database; and obtaining the state of the subscriber in real time, and pushing the marked non-delivered theme message to the subscriber when the subscriber is detected to be online. According to the scheme of the invention, the message reliability is effectively improved, the development amount of customized analysis is reduced, and the applicability of message interaction is improved.

Methods and systems for securely sending user plane data from a base station to an Artificial Intelligence (AI) server via a mobile telecommunication network are disclosed herein. A method performed by the base station located in a Radio Access Network (RAN) includes: sending an interface setup request to the (AI) server, receiving an interface setup response from the AI server, establishing, by exchanging cryptographic keys using an Internet Key Exchange (IKE) protocol, a data transport tunnel between the base station and the AI server based on an Internet Protocol Security (IPSec) network protocol, and sending the user plane data from the base station to the AI server for training artificial intelligence based models.

The invention relates to the technical field of block chains and secure transactions, and discloses a secure data transaction method based on a block chain exchange protocol key replacement attack, comprising the following steps: S1, a seller generates a Merkel root as an integral commitment based on an all-encrypted symmetric key; s2, the seller responds to the random challenge of the buyer and generates a composite zero-knowledge proof to confirm the validity of the key; s3, the buyer verifies the authenticity of the composite zero-knowledge proof; s4, the seller divides the main key and the private key, and the buyer calculates a verification target value and deploys an intelligent contract containing transaction fund; and S5, the seller submits the second key share to the smart contract to trigger automatic verification and atomized liquidation. According to the method, key replacement attacks are defended by using Merkel root commitment and zero-knowledge proof, atomic fair exchange is realized by combining key segmentation and an intelligent contract, and the security and fairness of transactions are ensured.

The invention discloses a data forwarding method and device for a data center bridging switching protocol, equipment and a storage medium, relates to the technical field of data traffic management, and discloses the data forwarding method for the data center bridging switching protocol, which comprises the following steps: acquiring a preset data center bridging switching protocol set and traffic data; performing standardization processing on the preset data center bridging exchange protocol set to obtain a target data center bridging exchange protocol set; performing traffic classification scheduling according to the traffic data to obtain a target traffic queue; and performing data balanced forwarding according to the target flow queue and the target data center bridging switching protocol set to obtain a target forwarding result so as to complete data forwarding of the data center bridging switching protocol. The technical effects of improving interoperability among different devices, simplifying network management, enhancing performance in a high-density network environment and reducing delay and packet loss are achieved.

The invention discloses a single-interface dual-protocol communication method and system, electronic equipment and a readable storage medium, and relates to the technical field of communication, both active communication equipment and passive communication equipment are provided with target interfaces, and the target interfaces are configured with a real-time data exchange protocol and a file transfer protocol. The method comprises the following steps that: active communication equipment generates a parameter configuration command of a target sending parameter carrying a negotiation character of a file transfer protocol based on a real-time data exchange protocol; the passive communication device configures a sending parameter of the negotiation character by using the parameter configuration command; after configuration is completed, the active communication equipment sends a file transmission starting command to the passive communication equipment so as to trigger the passive communication equipment to send negotiation characters; and during the period, the active communication equipment can determine each sending moment when the passive communication equipment sends the negotiation character, and determines each bus conflict time period according to the sending moment, so as to send a real-time data exchange message to the passive communication equipment at the moment outside each bus conflict time period.

The invention relates to the field of security protection of the electric power Internet of Things, in particular to a lightweight identity authentication method for limited equipment under the electric power Internet of Things, which can adapt to a large-scale and widely distributed network environment of the electric power Internet of Things by introducing a lightweight encryption algorithm and an efficient key exchange protocol, ensures the security, and improves the authentication efficiency of the limited equipment under the electric power Internet of Things. The calculation burden and the energy consumption of limited equipment in the power Internet of Things are effectively reduced; a decentralized authentication mechanism is adopted, so that the problems of single-point failure and performance bottleneck in a traditional centralized authentication method are solved, efficient equipment authentication and key exchange are realized, and the expandability of a network is ensured; security threats such as replay attacks and man-in-the-middle attacks are effectively prevented by periodically updating session keys and using digital signatures, and the reliability of network communication and the confidentiality of data are enhanced. By introducing a key exchange protocol and a digital signature technology, the integrity and authenticity of data are guaranteed, tampering behaviors of malicious nodes are prevented, and the overall security of the system is improved.

A system for scheduling a timed interchange protocol via an integrated augmented-reality presentation, includes a computing system having a processor, a memory device and a non-transitory storage device. The one or more processor executes computer-readable instructions. A network connection connects multiple user devices to the computing system, each of the multiple user devices having a known or determinable current location. Upon execution of the computer-readable instructions, the computing system performs steps including, for each user device of the multiple user devices, receiving interrogation resultant data identifying an accessible item (AI) in a transient position proximal to the current location of the user device; retrieving, from the at least one of a memory device and a non-transitory storage device, overlay content for display on the user device, the overlay content including information about the AI. The overlay content is sent for display on the user device.

This invention proposes a hybrid quantum-resistant security enhancement method for IPSec VPNs. The method includes: intercepting Internet Key Exchange (ITE) packets and adding a proxy header between the transport layer header and the ISE payload of the packets; obtaining a quantum key from a key pool using quantum key distribution technology and generating a first-stage session key based on the quantum key; protecting the ISE key negotiation process using a quantum-resistant cryptographic algorithm to generate a second-stage session key; and using the first-stage and second-stage session keys as input parameters for a key derivation function to generate a final session key for encrypted data transmission. This invention, without modifying the original IPSec negotiation process, supports dynamic key combinations of different security levels, enhancing the quantum security protection capability of VPN data transmission while maintaining system flexibility and performance.

A system for scheduling a timed interchange protocol via an integrated augmented-reality presentation, includes a computing system having a processor, a memory device and a non-transitory storage device. The one or more processor executes computer-readable instructions. A network connection connects multiple user devices to the computing system, each of the multiple user devices having a known or determinable current location. Upon execution of the computer-readable instructions, the computing system performs steps including, for each user device of the multiple user devices, receiving geolocation data identifying the current location of the user device, and retrieving, from the at least one of a memory device and a non-transitory storage device, overlay content for display on the user device. The overlay content includes information about an accessible item (AI) in a non-transient position proximal to a current location of the user device. The overlay content is sent for display on the user device.

Aspects of the present disclosure describe secure user registration and device provisioning with respect to transaction systems. Some example embodiments use a Password-Authenticated Exchange (PAKE) protocol to facilitate secure registration of a user identifier (ID) and a password with a transaction account service, and provisioning of a user's client device with a client device provisioning service. Upon completion of the PAKE protocol, two keys can be generated: a session key for encrypting and authenticating communications with the server; and a client key for sharing information among client devices. For some example embodiments, a user registers their user ID and password, and subsequently uses their user ID and a personal identified number (PIN) code to provision a primary client device in association with the user ID. Additionally, for some example embodiments, a secondary client device is provisioned in association with the user ID via a provisioned primary client device.

The present disclosure proposes method and systems for establishing secure communication session(s) between a first device and a second device, where the first device operates in a user network and implements a first key exchange protocol for secure communication. The second device is capable of communicating with the first device over a wireless communication network. The second device implements a second key exchange protocol that is different to the first key exchange protocol for secure communication. A proxy entity configured for implementing the first and the second key exchange protocols for secure communication is provided. The proxy entity is configured for generating and / or provisioning one or more session keys for the first and the second devices using the key exchange protocols specific to each device for establishing secure communication between the first and second device based on the generated session key(s).

Disclosed herein are systems, methods, and computer-readable media for an exchange management platform that obtains, using artificial intelligence (AI) orchestrators, a set of available exchanges based on a set of exchange protocols. In some implementations, a first command set directs one or more AI orchestrators to generate, as output, a set of resources satisfying a first protocol from the set of exchange protocols. A second command set and a second protocol from the set of exchange protocols can then be provided, as input, to the one or more AI orchestrators, causing the one or more AI orchestrators to determine a set of available exchanges for transferring a resource between two entities. The set of available exchanges can be obtained from the one or more AI orchestrators and display of a graphical layout based on the set of available exchanges can be caused.

A system includes a first coarse-grained reconfigurable (CGR) processor including first and second CGR arrays. A second CGR processor includes third and fourth CGR arrays. Each CGR array includes an address generator and coalescing unit (AGCU) designated as an array master AGCU (AMAGCU). The first CGR array AGCU is also designated as a processor master AGCU (PMAGCU) and as a system master (SMAGCU). The third CGR array AGCU is also designated as a PMAGCU. Each AMAGCU performs first execution synchronization actions, each PMAGCU also performs second execution synchronization actions, and the SMAGCU also performs third execution synchronization actions. The execution synchronization actions include a token exchange protocol for tokens such as “array ready”, “processor ready”, “system master ready”, “program start”, “array done, “processor done”, and “program terminate”. The tokens are communicated over a token bus via token interfaces that include a bus interface and a token receive FIFO.

A dynamic routing information exchange protocol session is established between a protocol processing intermediary and an application pipeline function executor running at a virtualized computing service. During the session, the intermediary receives a message indicating reachability information of a pipeline function implemented by the executor, and causes an entry indicating the executor as a destination to be stored in a route table of the service. After the entry is stored, a request for the application function is directed to the executor using the entry.

The present invention relates to a method, apparatus, device, and medium for processing a rational exchange protocol. The method comprises: conducting a dynamic game based on an improved Buttyan model and a rational exchange protocol to obtain a Buttyan model game tree, the game results, and benefits obtained by each participant acting according to different strategies; based on the obtained benefits, determining a first condition that must be satisfied for the probability of a first participant sending a target message when complying with the protocol rules in the rational exchange protocol, and a second condition that must be satisfied for the benefits of a second participant when complying with the protocol rules in the rational exchange protocol; and processing a rational electronic contract signing agreement to be processed based on the first and second conditions. The method of the present invention can make the second participant more cautious and improve the ability to identify false messages, thereby ensuring that both parties to the agreement comply with the agreement as much as possible, which helps maintain the fairness and effectiveness of the contract.

A system for scheduling a timed interchange protocol via an integrated augmented-reality presentation, includes a computing system having a processor, a memory device and a non-transitory storage device. The one or more processor executes computer-readable instructions. A network connection connects multiple user devices to the computing system, each of the multiple user devices having a known or determinable current location. Upon execution of the computer-readable instructions, the computing system performs steps including, for each user device of the multiple user devices, receiving geolocation data identifying the current location of the user device, and retrieving, from the at least one of a memory device and a non-transitory storage device, overlay content for display on the user device. The overlay content includes information about an accessible item (AI) in a non-transient position proximal to a current location of the user device. The overlay content is sent for display on the user device.

Systems and methods are provided for effectuating overlay tunnels between software-defined wide area network (SD-WAN) end-point devices despite the use of IPSec passthrough in one or more network devices, such as modems or routers that exist between the end-point devices. In particular, the Internet Key Exchange (IKE) protocol can be allowed to progress until a modem / router is able to establish an IKE tunnel, after which overlay packets using cloud-managed keys can be allowed to pass through the modem / router. An overlay tunnel may then be established between the end-point devices, and the IKE tunnel can be taken down.

The application discloses a kind of data processing method, system and storage medium of intelligent construction, it is related to data processing technical field, comprising the following steps: obtaining the communication path parameter between the multiple cooperative operation equipment of construction site, constructs first constraint condition, and using clustering algorithm to filter the first path set satisfying first constraint condition;Cooperative operation data flow in the first path set is obtained, and multi-resolution feature extraction is carried out using DWT, and layered data exchange protocol stack is obtained;According to layered data exchange protocol stack, construct bandwidth pre-allocation matrix, and carry out bandwidth preemption in combination with preset bandwidth preemption algorithm;Bandwidth preemption result is evaluated based on bayesian decision model, and equipment moving path switching is carried out according to evaluation result, solve the problem that traditional method is difficult to deal with the burst demand of high concurrency data stream, and high priority task delay is caused by bandwidth competition, seriously threatens construction safety.

Techniques are described for securely transmitting diagnostic data between a STA and an AP before the STA has successfully been on boarded at the AP. In the embodiments herein, the STA can use a key (e.g., a long-term key) to encrypt diagnostic data transmitted to the AP when the STA has not been on boarded by the AP. This key can be provided to the STA several different ways such as when the STA was provisioned to connect to a service set identifier (SSID) supported by the AP, or the STA may have previously associated with the SSID (e.g., by connecting to the same or another AP supporting the SSID during a previous session) and received or generated the key.

This invention discloses a data exchange method between an artillery information processing system and a bus. By constructing a data exchange protocol and bus relationship table, an exchange protocol relationship table, a lookup table of sent message associations, and a specific exchange protocol data structure, the system achieves automatic data reception, unpacking, and automatic data packaging and transmission, completing the universal processing of data transmission and reception between the artillery information processing system and the bus. For situations where communication protocol adjustments are needed due to changes in system requirements, only the adjusted communication protocol needs to be re-entered into the database according to a predefined format, effectively reducing the development pressure of data encoding and decoding programs and significantly lowering system development costs caused by changes in requirements and protocol adjustments. Simultaneously, users can directly access the data center to complete data interaction with the bus, thereby shielding users from the hardware and software differences of heterogeneous buses, reducing system coupling, and improving software reliability.

The application discloses a kind of low altitude unmanned aerial vehicle network in multi-cloud storage data integrity verification and error positioning method, data integrity verification is in low altitude unmanned aerial vehicle network, after generating user private key and public key by comprehensive supervision service platform registration, stored data is sent to multiple cloud servers to carry out multi-cloud storage data;The low altitude unmanned aerial vehicle data stored on multiple cloud servers is executed integrity verification, including: the first smart contract on the blockchain generates audit challenge according to chain state and issues;Each cloud server generates response proof according to the stored encoding data block and issues to chain;Verification contract listens to and aggregates all response proofs, batch verification is carried out, and the result is published in audit log.The method constructs a decentralized audit framework and does not rely on third-party auditors.If verification fails, a positioning mechanism can be triggered to accurately locate damaged data.To protect identity privacy, a key exchange protocol is embedded to achieve conditional anonymity.The supervision platform can balance anonymity and accountability.

In embodiments of the present disclosure improved capabilities are described for a tag operating system configured to manage asset data exchanged between an RF reader and one or more asset RF tags, and an IoT connector core integrated with the tag operating system, where the IoT connector core transfers asset data collected via the RF reader from the one or more asset RF tags and delivers the asset data to an IoT system of a cloud platform over a data exchange protocol, and where the asset data was generated at least in part based on an endpoint intelligence function stored on the one or more asset RF tags.

This invention belongs to the field of data security protection technology and discloses a trusted application lifecycle security management method and system. This method is applicable to various heterogeneous trusted execution environments (TEEs), including three entities: the TEE, the user end, and the security management service. A key exchange protocol is used to establish a secure channel between these three entities. Verifiable proofs are generated within the security management service, and each operation at each stage of the trusted application's lifecycle is recorded and signed, generating a non-repudiation track. These verifiable proofs include initialization proofs, operation proofs, freeze proofs, and deletion proofs. This invention provides a universal proof generation and verification mechanism applicable to heterogeneous TEE technology systems, ensuring non-repudiation of each lifecycle process and enabling secure management of the trusted application lifecycle. Furthermore, based on enclave state awareness and an enclave self-destruction instruction set extension, this method enables self-lifecycle management by the trusted application itself.

The invention discloses a circulation method for archive management of a power supply system, and the method comprises the steps: building an archive version control model in advance according to the business demands of archive circulation, and generating a unique version identifier for the modification operation of each node; obtaining sensitive information fields in the archive, encrypting the sensitive information through a symmetric encryption algorithm, and if the archive needs to be decrypted in the circulation process, judging whether decryption operation is allowed or not according to an authority verification result; for archive management systems of different departments and institutions, a data exchange protocol is established in advance, and a standardized data format is adopted for archive transmission; the security requirement in the archive circulation process is determined, a multi-level access control mechanism including identity authentication, role authorization and data level control is adopted, if a user requests to access an archive, whether access is allowed or not is judged according to an authority verification result, and an access log is recorded at the same time.

A method for quantum-resistant security enhancement to an Internet key exchange protocol, comprising: (011) performing key agreement with a second network device to generate an initial key; (012) acquiring a quantum key from a first network node; (013) performing post-quantum password encryption on the quantum key, and sending to the second network device a first encryption result that has undergone encryption; (014) performing decryption on a received second encryption result, and obtaining a second decryption result; and, (015) on the basis of a first quantum key, a first encryption key, a first verification key, a first derivation key, the first encryption result, and the second decryption result, generating a second encryption key, a second verification key, and a second derivation key, so as to encrypt communication between a first network device and the second network device.

A method for protecting data transmission in an ad hoc network including nodes, each node including a private key, a public key and a certificate of the public key signed by a certification authority, the method including transmitting by the first node to the second node: a first message signed with the private key of the first node; a third message containing a first set of initialization data including: a first certificate including the public key of the first node, signed by the certification authority; a second data set including the IP address of the first node; and the first certificate associated with the IP address of the first node, wherein the second data set is signed with the private key of the first node.

A procedure that includes: at a first network device (120, 122) between a second network device (112) and a third network device (154), detecting an Internet Key Exchange Protocol (IKE) key negotiation between the second network device and the third network device; based on the detection of the IKE key negotiation! between the second network device and the third network device, creating a firewall session in the first network device between the second and the third network device, wherein a first Internet Protocol Security (IPSec) tunnel (212) is established by the first network device between the second and the third network device using the IKE key negotiation, the first tunnel being compliant with the firewall session and allowing the passage of IPSec data packets through the first network device between the second and the third network device; Passing the IPSec data packets exchanged between the second and third network devices through the first network device based on the establishment of the first tunnel using cloud-managed IPSec keys from a cloud-based orchestrator (142), wherein the IPSec data packets are exchanged as part of a handshake operation that results in the establishment of a second tunnel between the second and third network devices according to the cloud-managed IPSec keys, the second tunnel being an overlay tunnel (218) on an underlay network; and After the second tunnel has been established and the cloud-managed IPSec keys are active, discard the negotiated IKE and carefully dismantle the first IPSec tunnel without disrupting encrypted communication between the second and third network devices.