44 results about "Extranet" patented technology

The invention discloses a one-way off-line security intelligent decision center system with local deployment as a main and external network service as an auxiliary and a control method, and belongs to the technical field of artificial intelligence security and edge intelligent decision. A three-level security domain physical and logic dual isolation architecture is adopted, extranet multi-model intelligent security enablement is performed on a local core decision domain through a physical one-way import channel, the local core decision domain completes reasoning calculation in combination with an enablement result in a non-extranet interaction state, a top-layer task scheme is generated, and a top-layer task scheme is generated. Through a multi-mode man-machine interaction mode, after human rigid authorization, issuing to an intranet equipment scheduling domain for execution, and feeding back a state in real time to form a full-link closed loop; the method realizes external network multi-model intelligent security enabling, local agent professional decision and rigid closed loop dominated by human beings in the whole process, aims to solve the problems of cloud dependence, data leakage, out-of-control AI, high cost, poor adaptability and the like, and is suitable for families, industries, confidential scenes, field non-support operation and other scenes.

The invention provides a communication system with isolated internal and external networks. The system comprises an intranet subsystem, an extranet subsystem and a combining system, wherein the intranet subsystem is connected with the combining system and is used for outputting an intranet network signal; the extranet subsystem is connected with the combining system and is used for outputting extranet network signals; and the combining system is used for carrying out signal combining processing on the intranet network signal output by the intranet subsystem and the extranet network signal output by the extranet subsystem so as to output a combined signal, so that the isolation of the intranet and the extranet under the condition of one AP is realized, the security of the intranet and the extranet is improved, and the service life of the intranet and the extranet is prolonged. And the cost is reduced on the basis of ensuring the communication quality.

The invention relates to an MCX group call service penetration packet implementation method. The MCX server comprises a call control module, a speaking right control module and a media distribution module; a plurality of MCX clients, wherein each MCX client comprises a call processing module, a speaking right processing module and a media processing module; the speaking right control module and the media distribution module are configured to receive and process a UDP penetration packet and update address mapping; the speaking right processing module and the media processing module are configured to send UDP penetration packets and process speaking right and voice streams. According to the invention, the MCX client is enabled to acquire the extranet address and the port of the MCX server for processing the speaking right and the voice stream by using the call signaling established by MCX group call, the speaking right SSRC and the voice SSRC are respectively used for identifying the speaking right of the MCX client and the voice stream of the MCX client according to the MCX protocol, the MCX client is enabled to send the fixed format UDP penetration packet with the SSRC identification to the MCX server, and the UDP penetration packet is enabled to be transmitted to the MCX server. And an intranet penetration function of speaking right and voice between the MCX client and the MCX server is realized.

The invention relates to the technical field of communication, in particular to a communication method based on double one-way channels, which comprises the following steps executed by an intranet communication module: receiving a first one-way optical signal through a first one-way channel, the first one-way optical signal corresponding to a network request sent by an extranet communication module; determining to-be-audited data according to the first one-way optical signal; verifying the to-be-audited data to obtain target data; generating a target instruction according to the target data; through the technical scheme of the application, the problems that the internal network and the external network under physical isolation are low in external request processing efficiency and difficult to realize secure interaction are solved, and the problems that the external request processing efficiency of the internal network under physical isolation is low and the security interaction is difficult to realize are improved. And safe interaction between the intranet and the extranet under physical isolation is realized.

This invention provides a method, apparatus, platform, device, and medium for accessing internal and external network terminals. The internal and external network access platform is deployed with a software-defined boundary architecture, which includes a zero-trust system. The method includes: receiving communication connection requests from internal and external network terminals through the zero-trust system; responding to the communication connection requests by granting access permissions to the internet ports of the internal and external network terminals based on a door-knocking packet; establishing a communication connection with the internal and external network terminals based on the access permissions and receiving office business access requests from the internal and external network terminals; responding to the office business access requests, acquiring office data, and returning the office data to the workspace domain of the internal and external network terminals. The zero-trust strategy is implemented through the software-defined boundary architecture, utilizing internet port hiding technology to reduce internet exposure; and a zero-trust sandbox is used to provide security assurance by isolating internal and external network terminals in personal and workspaces, achieving internal and external network isolation during office work and maintenance.

The invention discloses a data access method. The method can be applied to an integration platform. When a user wants to access a first application program deployed in an intranet through an extranet, a proxy server deployed in the extranet obtains a data access request, and the data access request is used for requesting to access application data in the first application program. The proxy server packages the data access request to obtain a first message, and the first message is a transport layer message and comprises the data access request. And then, the proxy server sends the first message to a proxy client deployed in an intranet, so that the proxy client parses the first message and then sends the obtained data access request to the first application program. Visibly, through the scheme, the proxy server side and the proxy client side can interact through the transmission layer, the proxy client side does not need to pay attention to an application layer protocol, the communication complexity between the extranet and the intranet is simplified, and therefore the convenience that the extranet accesses the intranet is improved.

The embodiment of the invention provides a cross-forward isolation data comparison system, method and device, a medium and a product, and relates to the field of data synchronization and verification. The system comprises a first agent which is deployed in an intranet and accesses a source end database through a database connection protocol; the second agent is deployed in an external network and establishes one-way communication connection with the first agent; the first agent is also used for transmitting the source end data of the source end database to the second agent through the forward isolation device through the one-way communication connection; and the comparison service is deployed in an external network, pulls the source end data from the interface of the second agent, and performs comparison operation on the source end data and the target end data. According to the method provided by the invention, the technical problem of data comparison in a cross-forward isolation scene is solved through the design of a double-agent architecture and a user-defined protocol, the security and reliability of data comparison are realized, and efficient and secure data comparison in a strict network isolation environment is realized.

The application belongs to the technical field of network data transmission, and discloses a data internal and external network transmission method and equipment. The method comprises the following steps: in response to a transmission request of to-be-transmitted data, dividing the to-be-transmitted data according to fields; determining an encryption level according to the sensitivity level of the to-be-transmitted data; generating a plurality of key-value pairs by taking each field name as a key and taking field content as a value, to obtain structured data; mapping each field name into a field code according to a field mapping dictionary, and encrypting the field content according to the corresponding encryption level; and generating a message header comprising a field mapping dictionary identifier, an encryption level identifier and a data type identifier of the to-be-transmitted data; and packaging and transmitting the message header and the structured data. The application realizes the safe transmission of data between internal and external networks.

The invention discloses a market intelligence management method based on a large language model, and the method comprises the steps: pre-configuring an intelligence source list at a collection side, and collecting intelligence information from an Internet side according to the configured intelligence source list; the collected intelligence information is stored in an enterprise intelligence knowledge base; on the retrieval side, the model performs semantic analysis according to an input retrieval instruction, obtains intelligence information stored in the enterprise intelligence knowledge base through the private domain intranet according to the retrieval instruction subjected to semantic analysis, and obtains intelligence information from the internet side through the public domain extranet; according to the method, the information with repeated content is filtered from the intelligence information obtained by the private domain intranet and the intelligence information of the public domain extranet, and the filtered information is fused to obtain the corresponding intelligence result, so that the public domain information and the private domain information can be fused, the intelligence information is more comprehensive, and an enterprise can insight user requirements and pre-judge the market trend in time.

The invention discloses an intranet data acquisition method and device, electronic equipment and a computer program product. The method comprises the steps that an intranet data query instruction is obtained through a preset tool deployed in an extranet environment, and the intranet data query instruction is at least used for indicating to access at least one preset database deployed in the intranet environment; querying target data indicated by the intranet data query instruction from at least one preset database according to an intranet access permission configured for a preset tool in advance; and uploading the target data to the cloud. The technical problem of contradiction between data security and collection efficiency in an existing industrial scene is solved.

The application provides an intelligent cloud box access method and device, equipment and a storage medium. The method is that, in response to an access operation of a user terminal, an Internet server queries an intranet access address and an extranet access address corresponding to a device identifier in the access operation according to a mapping relationship between the device identifier of the intelligent cloud box and an intranet Internet protocol address and a mapping relationship between the device identifier of the intelligent cloud box and a source Internet protocol address. The access operation is initiated by the user terminal by scanning a two-dimensional code on the intelligent cloud box, and the two-dimensional code includes the device identifier of the intelligent cloud box and the website information of the Internet server. The intranet access address and the extranet access address are sent to the user terminal, so that the user terminal accesses the intelligent cloud box according to the intranet access address and the extranet access address, and a connection is established with the intelligent cloud box.

The invention discloses an internal and external network isolated data transmission system and method based on a two-dimensional code. The system comprises an on-site verification system and an internal and external network transmission system. The field calibration system comprises a current transformer, a transformer calibration device, a wireless communication device and an external network terminal which are connected in sequence; the mutual inductor verification equipment is used for verifying the current transformer and transmitting the detected verification data to the wireless communication equipment; the wireless communication equipment is used for transmitting the verification data detected by the mutual inductor verification equipment; the external network terminal is used for receiving verification data transmitted by the wireless communication equipment; the intranet and extranet transmission system comprises scanning equipment and an intranet terminal which are electrically connected with each other; the scanning device is used for scanning the two-dimensional code displayed by the extranet terminal to obtain data and transmitting the data to the intranet terminal; and the intranet terminal is used for receiving data sent by the scanning equipment.

The invention belongs to the technical field of geographic information data query, and provides a cross-network geographic information security query method and device, equipment and a medium, and the method comprises the steps: obtaining a geographic spatial data query request of an extranet user; performing data verification on the geographic spatial data query request to obtain planar geometric data of a query target, the planar geometric data including a first coordinate system; sending the first coordinate system of the planar geometric data to an internal network and converting the first coordinate system to obtain a second coordinate system; executing spatial query on a target layer of the geographic spatial database according to the second coordinate system to obtain a first query result; and processing the first query result according to a preset desensitization rule to obtain a second query result, and returning the second query result to the extranet user. The cross-network geographic information query method has the beneficial effect that the cross-network geographic information query security and accuracy are improved.

The invention belongs to the technical field of enterprise mailboxes, and discloses an enterprise mailbox extranet access security reinforcement method, which comprises the following steps that: step 1, when employees log in a mail system through OUTLOOK, OWA and a mobile phone client in a non-office area network, requests can be submitted to an HAPROXY proxy server, and the Haproxy can access a control list according to a self-defined ACL (Access Control List); when the enterprise mailbox is subjected to hostile attacks of others, the Lua script automatically adds an attacker IP into the blacklist, and after the same IP attempts to be attacked for multiple times, the Lua script adds the IP into the permanent blacklist, so that on the premise of conveniently and quickly accessing the enterprise mailbox, the security of accessing the mailbox by an operator through any user side is improved, and the user experience is improved. And the purposes of preventing other people from maliciously attacking the enterprise mailbox, damaging the enterprise mail system and stealing and leaking the confidential information of the enterprise are achieved, and great convenience is brought to operators in the process of accessing the enterprise mailbox.

The invention discloses a network equipment connecting device in an emergency command system, and relates to the technical field of emergency command, and the network equipment connecting device comprises a multi-network communication module which is used for butt joint in different network environments; and the multi-network communication module comprises a network communication unit, a participating building unit and a video conference unit. According to the invention, by designing the multi-network communication module, seamless connection of various network environments such as a government extranet and a command information network is realized, and the problems of communication obstacles and compatibility during emergency command in different network environments are solved.

The invention discloses a networking method for multi-path connection system side service of an ad hoc network, which comprises the following steps that: access equipment is connected with an external network, establishes a network link with a system in a tunnel mode, generates a routing information packet according to a link state and broadcasts the routing information packet; after receiving the routing information packet, the service equipment calculates a priority value of a route and records the priority value into a routing table, meanwhile, selects the route with the maximum priority value as a local network external connection route and sends confirmation information to access equipment of the route, and the access equipment receives route updating information of the service equipment and informs system side routing equipment through an external connection link at the same time; the method comprises the following steps: a system side route device receives a route updating instruction and updates route information of a target service device address, and after connection is successful, an access side and a service side periodically check connection reliability and automatically switch an optimal route. And the networking efficiency and stability are obviously improved.

The invention discloses a network security data processing method, which comprises the following steps that: an intranet server obtains a data external transmission request, an external transmission information plug-in performs preliminary auditing on external transmission data, and performs statistics on display characteristics of the data to obtain secondary auditing data; performing forward chain auditing on the secondary auditing data; task data weight vectors are calculated by collecting task data in real time, forward chain auditing is carried out based on the weight vectors and set conversion rules, and forward series chain auditing and forward parallel chain auditing can be switched; the method comprises the steps of outputting a forward chain auditing result according to forward chain auditing, generating a transmission instruction based on the forward chain auditing result, transmitting safety data of an intranet to an extranet according to the transmission instruction, and enabling a forward auditing chain to be flexibly adjusted according to a real-time scene through weight calculation, so that the rigidity of a static chain is avoided; and through a parallel-to-series splicing mechanism, waiting time of low-risk tasks is reduced, and processing efficiency and auditing accuracy are improved.

The invention discloses a working method and system of a quantum security firewall based on IP switching, and the method comprises the steps: the quantum security firewall creates n virtual interfaces with a corresponding number, and distributes a group of IP addresses for each virtual interface; selecting a part of virtual interfaces as virtual interfaces for communication; the remaining virtual interfaces are used as standby virtual interfaces; the quantum key service device distributes symmetrical key files for the extranet device and the quantum security firewall in the extranet device cluster; and the external network device of the data to be transmitted generates transmission data and sends the transmission data to the corresponding virtual interface, and the quantum security firewall judges whether to switch the virtual interface based on the received transmission data. According to the invention, through an IP switching mechanism, the service corresponding to the attacked IP can be seamlessly switched to other normally running virtual interfaces in real time for transmission and processing, the continuity and availability of the service are ensured, and the risk of service interruption caused by attack is greatly reduced.

The present application relates to network asset positioning technical field, specifically to a kind of risk IP automatic association region, unit positioning method, comprising the following steps, construct large enterprise hierarchical network asset architecture library, and establish the mapping relationship between security monitoring area and network equipment;After capturing network security threat alarm log, risk IP address is extracted and its network attribute is judged;For the risk IP of intranet attribute, based on alarm source equipment, the initial monitoring area is positioned, and recursive association retrieval is executed in architecture library from specific asset to network segment range, from the region of this level to the unit of upper level;For the risk IP of extranet attribute, the joint query of external record information and geographical position is executed.In the present application, by setting security device monitoring area and tree organization architecture association mechanism, the responsibility subject accurate positioning in cross-region IP address multiplexing and non-standard network planning scene is realized, and the hysteresis problem of artificial level-by-level checking alarm information is solved.

The invention discloses a user internet surfing log processing method and device based on a large model and a computer program product. The method comprises the steps that the multi-mode fusion capability of a universal large model, a code large model and a multi-mode large model is utilized; according to the method, the target internet surfing log data generated based on the internet surfing behavior of the target user is efficiently converted from unstructured data to structured information, and then accurate classification of the intranet target internet surfing log data and the extranet target internet surfing log data and intelligent summarization of website content are completed; through statistical analysis of summarized intranet target internet surfing log data and service type labels and service content introductions thereof, and extranet target internet surfing log data and website classification labels and website content introductions thereof, a classification result (for example, whether the internet surfing behaviors belong to negative and slowdown behaviors or not) of the internet surfing behaviors of the target user is determined more accurately; therefore, the processing efficiency and accuracy of the target internet surfing log can be improved based on cooperative processing of a plurality of large models.

This invention discloses an intelligent module for gas meters, an edge intelligent gas meter, and its implementation method. The intelligent module includes a legal metering unit, an edge intelligent unit, a communication control unit, and a power supply unit. The edge intelligent unit is an open intelligent computing unit capable of loading third-party applications and connecting to the internet. It has no direct physical connection with the legal metering unit. The communication control unit serves as the sole data path between the two, controlling the forwarding of read requests and intercepting and discarding write commands. The legal metering unit authenticates received commands that modify legal metering data based on the communication source and the authorization identifier of the command before deciding whether to execute them. The communication control unit adds a source identifier to the data forwarded from the edge intelligent unit to distinguish between legal and non-legal data. This invention, while introducing an open edge AI computing unit, structurally ensures the security of legal metering data and enables independent functional upgrades and local real-time intelligent processing.

The invention relates to the technical field of inspection and detection digitization, in particular to an LIMS-based inspection and detection digitization quality control system and an LIMS-based inspection and detection digitization quality control method. According to the LIMS-based inspection and detection digital quality control system, a laboratory information management module is deployed in an intranet and is used for executing whole-process management of inspection and detection tasks, and the whole-process management comprises task receiving, allocation, execution and monitoring and inspection report generation; the customer service module is used for providing online business handling, progress tracking and information feedback for customers; the statistical analysis module is used for performing multi-dimensional statistics and analysis on all-platform business data based on a data warehouse and an application online analysis technology; and the data middleware module is used for data interaction between the modules. Through the data middleware module, the system is integrated, database synchronization and a WebAPI interface are utilized, real-time synchronization of data of an internal network and an external network and efficient cooperation of services are achieved, and the integrity, consistency and availability of the data are improved.

The embodiment of the invention provides a strategy management method and device, a controller, a gateway and a storage medium, and relates to the technical field of communication, and the method comprises the steps: receiving a corresponding relation between an IP address of a terminal and a specified SGT sent by an authentication server after the authentication of the terminal is passed, and the specified SGT is the SGT of a network security group accessed by the terminal; the corresponding relation is pushed to the gateway, so that the gateway generates an ACL execution strategy based on a pre-stored ACL basic strategy and the corresponding relation, the ACL basic strategy comprises a source SGT, a target SGT and a strategy action, and the ACL execution strategy comprises a source IP address corresponding to the source SGT, a target IP address corresponding to the target SGT and the strategy action. By adopting the scheme, policy connection between an intranet user and an extranet SSL VPN user can be realized.

This invention discloses a non-network layer-based communication system and method. The system includes a Layer 2 switch supporting Layer 2 forwarding capabilities, a first intranet machine, a second intranet machine, a first extranet machine, and a second extranet machine. Both the first and second intranet machines are connected to the Layer 2 switch via MAC interfaces. The first and second extranet machines are connected via an IP network. The first extranet machine connects to the first intranet machine via a MAC interface, and the second extranet machine connects to the second intranet machine via a MAC interface. In this invention, data between hosts in the intranet environment and between hosts in the intranet and extranet environments are processed using RAW Sockets combined with a custom data structure. This eliminates the need for network layer protocol forwarding, preventing the risk of network layer communication information leakage. Furthermore, the custom data structure allows users to define their own data filtering rules, increasing customization to adapt to different business or scenario operational requirements.

The invention provides a power grid material sample information extranet transmission method and system, and belongs to the technical field of power system Internet of Things information security, and the method comprises the steps that a sender splices sample data into a plaintext; dynamically negotiating with a receiver through an ECDH protocol to generate a shared session key; performing bit confusion processing on the plaintext by using the timestamp; encrypting the confused plaintext by using a session key, and digitally signing the hash and timestamp of the original plaintext; packaging the ciphertext, the signature, the timestamp and the public key, and calculating a transmission fingerprint uplink storage certificate; and the receiver decrypts and carries out anti-confusion, verifies the signature and the timestamp, and links the verification result. Through cooperation of the dynamic secret key, bit confusion, digital signature and block chain evidence storage, forward secrecy, anti-flow analysis, identity authentication and strong non-repudiation of data transmission are realized, and the method is especially suitable for transmitting power grid material sample information in a public network environment by resource-constrained terminals such as intelligent safety helmets and the like.

The utility model relates to an internal and external network data security unidirectional transmission system and device, which belongs to the technical field of network data security, and comprises a first processor, and a data acquisition module, a data processing module and a data storage module which are respectively connected with the first processor, wherein the data acquisition module comprises a data receiving assembly and a data converter; and the data acquisition module and the data storage module are respectively connected with the intranet host and the extranet host through network interfaces so as to realize secure one-way transmission of intranet data and extranet data. According to the utility model, the two network bridge devices are connected in series, one end is connected with the intranet network, and the other end is connected with the extranet network, so that one-way data encryption transmission between the intranet network and the extranet network is realized.

The invention discloses a multi-mode dynamic network isolation data ferry transmission method, and relates to the field of data transmission security. The method is based on independent intranet equipment and extranet equipment which are not communicated with each other, the intranet equipment and the extranet equipment carry independent coding / decoding modules, an optical axis is calibrated through magnetic attraction physical connection, parameter detection and acousto-optic feedback, a coding high-fault-tolerance dynamic two-dimensional code sequence is segmented through the intranet equipment and dynamically displayed, and the extranet equipment captures in a microsecond level through a high-speed CMOS multi-camera array. And completing data transmission by combining multi-channel parallel decoding, space-time calibration and redundancy check. According to the method, through physical and network dual isolation and non-encrypted security design, key-related risks are avoided, and cooperative optimization of high-refresh-rate display and high-resolution recognition is matched, so that zero leakage, high efficiency and high stability of data transmission in a sensitive scene are realized, adaptability is high, and deployment is convenient.

The invention discloses an aluminum output task issuing system, method and device, a medium and a product, and relates to the technical field of information issuing, and the system comprises a first terminal, a server and a second terminal; the first terminal is located in an intranet and is provided with a first client of an aluminum output task application program; the server is located in an extranet and an intranet and is provided with a database and the aluminum output task application program, and the database stores related data of the aluminum output task application program; and the second terminal is located in an external network and is provided with a second client of an aluminum output task application program. The task issuing efficiency and the safety of the task information are improved.

The utility model discloses a kind of wired network monitoring equipment intelligent monitoring terminal, it is related to network equipment maintenance technical field.The terminal includes intranet single-chip microcontroller, extranet single-chip microcontroller, one-way photoelectric isolation transmission module, power module, RJ45 interface module, mains detection module, switch drive circuit and 4G communication module.Intranet single-chip microcontroller is connected wired network switch through RJ45 interface module, sends PING instruction and monitors network state;Extranet single-chip microcontroller is responsible for power monitoring, remote control and data interaction;One-way photoelectric isolation transmission module realizes the one-way data transmission and electrical isolation of intranet and extranet;Power module supports mains and battery automatic switching.Terminal can accurately identify mains interruption, network cable loosening and other fault types, support remote restart, guarantee intranet security, improve operation and maintenance efficiency.

The invention discloses an access request identification method and device, a medium and a program product, and relates to the field of financial science and technology, and the method comprises the steps: receiving a login request sent by user equipment; determining a first user interception result according to the user login time, the user login region, the system upgrading region and the system upgrading time interval; when the first user interception result is that user access is allowed, determining a user identification result according to user login information and an internal verification white list; wherein the user identification result comprises that the user is an internal verification user and the user is an external access user; and determining a second user interception result according to the user identification result and a preset interception rule. According to the scheme, whether the user is the extranet access user or the intranet verification user is directly determined according to the login request of the user, so that the extranet access user is intercepted during internal verification, access identification of the extranet user is realized, and the access experience of the extranet user is improved.