135 results about "Extranet" patented technology

The invention relates to the technical field of network security, and particularly discloses a front digital boundary security switching method and system based on an optical one-way transmission characteristic and a storage medium, and the method comprises the steps that a front digital boundary security gateway of a service extranet receives a request, analyzes a context parameter of the request, and stores the context parameter of the request; legality verification is carried out on the carried exchange account, the key and other request parameters, and request context parameters are signed and encrypted; after the legality verification is passed, the service extranet front digital boundary security gateway encapsulates the request context parameter into a request data packet, a unidirectional data transmission optical shutter connection pool from the extranet to the intranet is used, and the request data packet is sent to the intranet front digital boundary security gateway after the connection is obtained; and after receiving the request data packet, the intranet front digital boundary security gateway decrypts and verifies the signature of the request message in the request data packet, reconstructs the request message after the verification is successful, and sends the request message to a real target server to obtain a result.

According to the internal network and external network synchronous transmission method and system based on the TCP provided by the invention, file type detection and file title detection are realized at a server side, compliance screening is carried out on file contents before a transmission link, and sensitive files are prevented from entering a transmission link; after the detection is passed, segmented transmission is carried out by adopting a preset fragmentation rule, and breakpoint resume is executed by utilizing a fragmentation index when the transmission is interrupted, so that the stability and the efficiency of large file transmission are remarkably improved; furthermore, the server pushes the downloading notice to the extranet client through the TCP after receiving the auditing result of the intranet client with the auditing authority, so that the file is ensured to be subjected to the auditing link before being transmitted to the extranet, and the unification of high safety, controllability and high efficiency is realized.

The invention discloses a government affair function efficiency optimization method and system based on multi-modal data fusion, belongs to the technical field of artificial intelligence and intelligent services, and aims to solve the technical problem of how to optimize government affair functions from a data level, a process level, a decision level and a feedback level and improve government affair processing efficiency. According to the technical scheme, the method comprises the following steps: data acquisition: acquiring data from a government affair extranet platform, a paper document and a third-party database in real time or in batches in a government affair extranet data capture mode, acquiring original data, constructing a data pipeline by using Apache NiFi, and connecting an enterprise benefit service and a grassroots governance interface; intelligent data analysis and processing: performing deep analysis, semantic understanding and regularization processing on the collected original data, extracting structured information, generating decision support content, and realizing conversion from data to knowledge; process execution is optimized through an Activity 7 process engine; and closed-loop interaction feedback.

The invention provides a ferry password isolation system, and relates to the technical field of information security, and the system comprises an external network host module, a physical ferry module, an intermediate host module and an internal network host module which are isolated from one another: the external network host module is configured to communicate with an external network, obtain data from the external network, and transmit the data to the physical ferry module; the physical ferry module is configured to communicate with the extranet host module, is disconnected from the intermediate host module, and receives data transmitted by the extranet host module; the data transmission module is disconnected with the external network host module, communicates with the intermediate host module and transmits the data to the intermediate host module; the intermediate host module is configured to receive the data transmitted by the physical ferry module and transmit the data to the intranet host module in a one-way manner; and the intranet host module is configured to receive the data transmitted by the intermediate host module.

The invention discloses an intranet data anti-leakage method based on zero trust and a related device, and belongs to the technical field of information technology and data security. The method comprises the following steps: identifying mainboard information of terminal equipment through a desk management module, limiting all unauthorized data external transmission paths, and only allowing internal white list software to be installed; an isolation wall of an intranet and an extranet is established through a network isolation module, only one network is allowed to exist at the same time, a client is deployed at a credit granting terminal and is bound with a credit granting account, and a gateway end verifies a user identity through a security center and gives a corresponding access right; the flow management and control module is used for limiting the intranet flow to only access the white list website; through an outgoing approval module, mail outgoing is allowed and file outgoing parameters are set only after approval is passed; and single management and control of an external transmission path of intranet data and blocking of a secret divulging behavior are realized. Through real-time control and safety supervision, file protection and leakage prevention of intranet data can be achieved, operation is convenient and fast, and applicability is achieved.

The invention relates to the technical field of computers, and provides an access authority management method and system and related equipment. The access authority management method comprises the following steps: a gateway side performs source identification on a received first request, adds an identifier representing the source of the first request in a request header of the first request, and distributes the first request to a corresponding service side; the service side receives the second request, and performs permission verification on the second request according to the permission annotation marked by the target access interface of the second request and the identifier carried by the request header of the second request; and if the target access interface marks the intranet access annotation and the request header of the second request carries the extranet identifier, refusing the access of the second request to the target access interface. According to the invention, the request source is identified at the gateway side, and the judgment of the interface authority sinks to the service side, so that the calculation load of the gateway side is reduced, and the system response speed is improved; in addition, the corresponding annotation is added to the intranet access interface to realize authority control, and the control accuracy is improved.

The invention discloses a one-way off-line security intelligent decision center system with local deployment as a main and external network service as an auxiliary and a control method, and belongs to the technical field of artificial intelligence security and edge intelligent decision. A three-level security domain physical and logic dual isolation architecture is adopted, extranet multi-model intelligent security enablement is performed on a local core decision domain through a physical one-way import channel, the local core decision domain completes reasoning calculation in combination with an enablement result in a non-extranet interaction state, a top-layer task scheme is generated, and a top-layer task scheme is generated. Through a multi-mode man-machine interaction mode, after human rigid authorization, issuing to an intranet equipment scheduling domain for execution, and feeding back a state in real time to form a full-link closed loop; the method realizes external network multi-model intelligent security enabling, local agent professional decision and rigid closed loop dominated by human beings in the whole process, aims to solve the problems of cloud dependence, data leakage, out-of-control AI, high cost, poor adaptability and the like, and is suitable for families, industries, confidential scenes, field non-support operation and other scenes.

The invention is suitable for the technical field of data governance, and particularly relates to a data governance processing method and system, and the method comprises the steps: receiving an access request uploaded to an intranet by a user, recognizing a risk level, accessing a buffer region into the intranet, and configuring a plurality of virtual containers in the buffer region, obtaining at least a first container, a second container and a root container; and when the risk level of the access request is greater than a threshold value, importing the access request into a first container, analyzing and positioning a target address corresponding to the access request, and carrying out random disturbance processing to obtain a plurality of pseudo addresses. According to the invention, by identifying the risk features, defense can be carried out in advance, potential attack behaviors can be found and blocked in time, the probability of occurrence of security events is reduced, the processing efficiency and security of data management are greatly improved, and safe, reliable and smooth connection of data exchange between the internal network and the external network is ensured.

The invention provides a communication system with isolated internal and external networks. The system comprises an intranet subsystem, an extranet subsystem and a combining system, wherein the intranet subsystem is connected with the combining system and is used for outputting an intranet network signal; the extranet subsystem is connected with the combining system and is used for outputting extranet network signals; and the combining system is used for carrying out signal combining processing on the intranet network signal output by the intranet subsystem and the extranet network signal output by the extranet subsystem so as to output a combined signal, so that the isolation of the intranet and the extranet under the condition of one AP is realized, the security of the intranet and the extranet is improved, and the service life of the intranet and the extranet is prolonged. And the cost is reduced on the basis of ensuring the communication quality.

The invention discloses an extranet-driven intranet and extranet security isolation compiling system, and belongs to the technical field of software development. Comprising an SFTP server, and the SFTP server is connected with an intranet and an extranet. The SFTP server is used for internal and external network upload management and control, internal and external network physical isolation and file synchronization. The intranet comprises an automatic script, a configuration file detection module, an automatic compiling module and an intranet log module; the external network comprises a front end and a rear end, the front end is used for providing a unified operation entrance for a user, and the rear end is used for driving the front end to work through a data processing algorithm; when a user initiates a request through a webpage, a system creates task groups, and each task group comprises a plurality of sub-tasks; at the moment, the extranet executes an extranet process to perform extranet legality verification, and performs task release; and meanwhile, the intranet executes an intranet process and periodically performs intranet legality detection. The method can ensure that each link masters the edition issuing key information consistently, and effectively improves the information transmission efficiency and accuracy.

Systems and methods for Out-of-Band (OOB) networking for heterogeneous computing platforms in low-power states. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform and a network device integrated into or coupled to the heterogeneous computing platform, and the network device may be configured to: wake up from a low-power state while a host processor of the heterogeneous computing platform remains in the low-power state, and access a cloud service through an OOB channel to check a status of an OOB command buffer while the host processor remains in the low-power state.

The invention provides a network access control method and device and related equipment, and relates to the technical field of network security. The method comprises the following steps: receiving a user identity certificate sent by a user terminal, wherein the user identity certificate is used for determining the network access authority of a user; verifying the user identity credential to obtain a network access authority of the user, the network access authority including at least one of an intranet access authority and an extranet access authority; and configuring a network access strategy of the user based on the network access permission. According to the invention, the network access strategy (intranet, extranet or composite authority) is dynamically configured by verifying the user identity certificate, so that the authorized user is allowed to access the specified extranet application as required while maintaining the security of the virtual private network encryption tunnel to protect the intranet resources; the problem of low cooperation efficiency caused by forced network switching of a traditional virtual private network scheme is solved, and the safety of internal network resources is protected while the working efficiency is improved.

The invention discloses an off-line map vehicle monitoring and management system based on a CNN algorithm, and the system achieves the stable positioning in a special scene through embedding an off-line map, and integrates the functions of vehicle positioning, alarm, track playback, personnel authority and the like. In the vehicle real-time positioning function, the CNN algorithm extracts features from positioning data, filters positioning noise caused by environmental factors, and improves accuracy. A CNN algorithm is applied to the track playback function, a large amount of vehicle track data are regarded as two-dimensional plane lines, and the analysis efficiency is improved through classification, anomaly detection and feature extraction. And the vehicle-mounted equipment communicates with the system in real time to obtain the vehicle position, and triggers an alarm to inform personnel when abnormity occurs. The system establishes an intranet and extranet security barrier through a gatekeeper, and ensures efficient real-time and confidentiality of data exchange. In the aspect of personnel login authority management, a CNN algorithm analyzes behavior characteristics such as operation habits of login personnel, whether login behaviors are abnormal or not is judged, and the system safety is enhanced.

The invention relates to an MCX group call service penetration packet implementation method. The MCX server comprises a call control module, a speaking right control module and a media distribution module; a plurality of MCX clients, wherein each MCX client comprises a call processing module, a speaking right processing module and a media processing module; the speaking right control module and the media distribution module are configured to receive and process a UDP penetration packet and update address mapping; the speaking right processing module and the media processing module are configured to send UDP penetration packets and process speaking right and voice streams. According to the invention, the MCX client is enabled to acquire the extranet address and the port of the MCX server for processing the speaking right and the voice stream by using the call signaling established by MCX group call, the speaking right SSRC and the voice SSRC are respectively used for identifying the speaking right of the MCX client and the voice stream of the MCX client according to the MCX protocol, the MCX client is enabled to send the fixed format UDP penetration packet with the SSRC identification to the MCX server, and the UDP penetration packet is enabled to be transmitted to the MCX server. And an intranet penetration function of speaking right and voice between the MCX client and the MCX server is realized.

The invention relates to the technical field of communication, in particular to a communication method based on double one-way channels, which comprises the following steps executed by an intranet communication module: receiving a first one-way optical signal through a first one-way channel, the first one-way optical signal corresponding to a network request sent by an extranet communication module; determining to-be-audited data according to the first one-way optical signal; verifying the to-be-audited data to obtain target data; generating a target instruction according to the target data; through the technical scheme of the application, the problems that the internal network and the external network under physical isolation are low in external request processing efficiency and difficult to realize secure interaction are solved, and the problems that the external request processing efficiency of the internal network under physical isolation is low and the security interaction is difficult to realize are improved. And safe interaction between the intranet and the extranet under physical isolation is realized.

The invention discloses a time-frequency signal security bastion host which comprises an input module, an output module, a signal modulation and demodulation module, an identity authentication module, an equipment management module, a power management module, a signal security detection module, an equipment security audit module and a security login management module. Intranet and extranet isolation is carried out on extranet standard time-frequency signals and intranet time-using equipment through the time-frequency security bastion host, high-precision time-frequency security time service and output of intranet time synchronization signals are achieved, the accuracy of high-precision time frequency and the non-tampering property of standard time are guaranteed, and credible transmission of high-precision standard time is achieved.

This invention provides a method, apparatus, platform, device, and medium for accessing internal and external network terminals. The internal and external network access platform is deployed with a software-defined boundary architecture, which includes a zero-trust system. The method includes: receiving communication connection requests from internal and external network terminals through the zero-trust system; responding to the communication connection requests by granting access permissions to the internet ports of the internal and external network terminals based on a door-knocking packet; establishing a communication connection with the internal and external network terminals based on the access permissions and receiving office business access requests from the internal and external network terminals; responding to the office business access requests, acquiring office data, and returning the office data to the workspace domain of the internal and external network terminals. The zero-trust strategy is implemented through the software-defined boundary architecture, utilizing internet port hiding technology to reduce internet exposure; and a zero-trust sandbox is used to provide security assurance by isolating internal and external network terminals in personal and workspaces, achieving internal and external network isolation during office work and maintenance.

The invention aims to provide an address conversion method for realizing server access and a firewall, and external network access is realized according to the existing bidirectional conversion. And for intranet access, the source address of the access request is rewritten into the server extranet address, the destination address of the access request is rewritten into the server intranet address, and the responded server source address is rewritten back to the server extranet address from the intranet address, so that the consistency of the request address and the response address of the intranet is ensured. Meanwhile, a DNS response packet of the intranet is obtained, and if the DNS request source address is the intranet address, the public network address corresponding to the server domain name is rewritten into the server intranet address, so that the communication of accessing the server by the intranet is performed in the intranet instead of a firewall, the burden of the firewall is effectively reduced, and the communication efficiency is improved.

The present invention discloses a method for detecting and locating low-voltage line faults, comprising the following steps: S1, the collected current and voltage data are sent to the data scheduling center through the intranet after preprocessing; S2, the positioning data are encrypted and sent to the data scheduling center through the extranet; S3, the data scheduling center fuses the data sent through the intranet and the extranet and establishes a joint data model; S4, after the fused data are verified by the joint data model, they are sent to a number of mobile terminals with the highest matching degree. The current and voltage data and the positioning data are collected and transmitted respectively through the intranet and the extranet in an encrypted manner, and a joint data model is established according to the data sent through the intranet and the extranet; the method of the present invention can effectively monitor the low-voltage line, and through the comprehensive transmission method of encrypting the intranet and the extranet, while ensuring the integrity and error-free transmission, the data security is guaranteed.

1. Name of the product in this design: Data Encryptor. 2. Purpose of this design: It is intended to be used as a device for encrypting data when sending data from an intranet to an extranet. 3. The key design feature of this product is its shape. 4. The image or photograph that best illustrates the design's key points: 3D view 1.

The invention discloses a data access method. The method can be applied to an integration platform. When a user wants to access a first application program deployed in an intranet through an extranet, a proxy server deployed in the extranet obtains a data access request, and the data access request is used for requesting to access application data in the first application program. The proxy server packages the data access request to obtain a first message, and the first message is a transport layer message and comprises the data access request. And then, the proxy server sends the first message to a proxy client deployed in an intranet, so that the proxy client parses the first message and then sends the obtained data access request to the first application program. Visibly, through the scheme, the proxy server side and the proxy client side can interact through the transmission layer, the proxy client side does not need to pay attention to an application layer protocol, the communication complexity between the extranet and the intranet is simplified, and therefore the convenience that the extranet accesses the intranet is improved.

The embodiment of the invention provides a cross-forward isolation data comparison system, method and device, a medium and a product, and relates to the field of data synchronization and verification. The system comprises a first agent which is deployed in an intranet and accesses a source end database through a database connection protocol; the second agent is deployed in an external network and establishes one-way communication connection with the first agent; the first agent is also used for transmitting the source end data of the source end database to the second agent through the forward isolation device through the one-way communication connection; and the comparison service is deployed in an external network, pulls the source end data from the interface of the second agent, and performs comparison operation on the source end data and the target end data. According to the method provided by the invention, the technical problem of data comparison in a cross-forward isolation scene is solved through the design of a double-agent architecture and a user-defined protocol, the security and reliability of data comparison are realized, and efficient and secure data comparison in a strict network isolation environment is realized.

The present application relates to a satellite switching method, communication method, system, device, equipment and medium. The method includes: receiving a private network address sent by a terminal; the private network address is the network address of the terminal in the intranet of a high-altitude platform device; the terminal is located in the area served by the high-altitude platform device; converting the private network address corresponding to the terminal into a public network address in the extranet of the high-altitude platform device; sending the public network address to a first satellite device to establish a communication link between the high-altitude platform device and the first satellite device; when it is detected that a preset satellite switching condition is met, obtaining the network address of the second satellite device, sending a satellite switching signaling to the first satellite device to disconnect the communication link between the high-altitude platform device and the first satellite device, and sending a satellite switching signaling to the second satellite device according to the network address of the second satellite device to establish a communication link between the high-altitude platform device and the second satellite device. The use of this method can improve communication quality.

The application belongs to the technical field of network data transmission, and discloses a data internal and external network transmission method and equipment. The method comprises the following steps: in response to a transmission request of to-be-transmitted data, dividing the to-be-transmitted data according to fields; determining an encryption level according to the sensitivity level of the to-be-transmitted data; generating a plurality of key-value pairs by taking each field name as a key and taking field content as a value, to obtain structured data; mapping each field name into a field code according to a field mapping dictionary, and encrypting the field content according to the corresponding encryption level; and generating a message header comprising a field mapping dictionary identifier, an encryption level identifier and a data type identifier of the to-be-transmitted data; and packaging and transmitting the message header and the structured data. The application realizes the safe transmission of data between internal and external networks.

The embodiment of the invention relates to the field of oil and gas energy, and discloses a natural gas cargo demand management system, which comprises a background data center, cargo demanding station-level equipment accessed through an internal network and cargo demanding mobile equipment accessed through an external network, and the cargo demanding station-level equipment and the cargo demanding mobile equipment are respectively connected with the background data center; wherein the cargo demanding station-level equipment is used for receiving station-level end cargo demanding data input by an intranet user and sending the station-level end cargo demanding data to the background data center; the goods-requiring mobile device is used for receiving mobile terminal goods-requiring data input by an external network user and sending the mobile terminal goods-requiring data to the background data center; and the background data center is used for receiving the station-level-end goods-requiring data and the mobile-end goods-requiring data, performing auditing processing according to the station-level-end goods-requiring data and the mobile-end goods-requiring data, and generating an effective balance list for vehicle scheduling and delivery.

The invention belongs to the technical field of data interaction, and particularly relates to a cross-domain multi-mode flow safety interaction method based on an intranet AI engine. The method comprises the following steps: after receiving an extranet service request, an AI engine middle station analyzes the power service attribute of the service request, predicts the core demand characteristic of the service request for data transmission, and preloads and initializes an optimal transmission strategy template according to the core demand characteristic; continuously monitoring the real-time state of the whole transmission process, and dynamically deciding and commanding transmission link adjustment according to the real-time state; and active safety protection is realized through dynamic key management and intelligent flow analysis. According to the method, the real-time performance, reliability and efficiency of key monitoring data transmission are remarkably improved in a complex power network environment.

The invention discloses a network security protection method based on multiple heterogeneous isolation and a related device, the device comprises an intranet, an extranet and a DMZ area, the DMZ area is connected with the intranet and the extranet, a dual heterogeneous firewall and a Web application firewall are arranged in the DMZ area, and the method and the related device can improve the security of the intranet.

This application provides a virtual system operation method and an electronic device. The method includes: the electronic device receiving a first DNS data packet sent by a first application through a first bridge, the first DNS data packet including a source address and a destination address, the destination address being a preset DNS address; the electronic device modifying the destination address in the first DNS data packet from the preset DNS address to the IP address of the first DNS through the first bridge to obtain a second DNS data packet, the second DNS data packet being sent to the first DNS; the electronic device receiving a first response data packet sent by the first DNS through a first physical network card, and sending a second response data packet to the first application through the first bridge, the first response data packet and the second response data packet including a first Internet IP address; the electronic device sending a first data packet through the first application, the destination address of the first data packet being the first Internet IP address, achieving network consistency between inside and outside the container.

The invention discloses a protocol isolation device, an access control method, equipment and a medium, and relates to the technical field of industrial network boundary security, the device comprises an extranet host system, an isolation switching unit and an intranet host system which are all physical modules; wherein each of the extranet host system and the intranet host system comprises a message analysis module, a protocol state module, an access strategy module and an intelligent scheduling module; and strategies such as time-sharing double ferrying, protocol state tracking, a dynamic strategy and intelligent scheduling are designed, and through coordination work of the strategies, a protocol isolation and control scheme which can meet the high-speed data interaction requirement of the industrial Internet of Things and is stable and safe in performance is provided.

An embodiment of the present invention provides a method, device, system and computer-readable storage medium for sharing intranet and extranet data. The method is applied to a data communication room node corresponding one-to-one to an intranet. The data communication room node uploads relevant information of an intranet user to a blockchain to form a directory chain. The directory chain includes at least directory information corresponding to the intranet original data of the intranet user and an intranet mapping relationship between the address information of the intranet original data and the directory information. The method includes: performing identity authentication and access permission judgment on an extranet user who is to access the intranet data; when the identity authentication result of the extranet user is a legitimate user and has access permission, the data communication room node displays the address information of the intranet original data in text form through the intranet mapping relationship.