3449 results about "High security" patented technology

The invention discloses a network security verification method and system for a security system, and belongs to the technical field of network security, and the method comprises the steps: obtaining a biological feature recognition request triggered by a user on terminal equipment, synchronously collecting dynamic behavior track data, and generating a behavior feature code; inputting physiological feature data and behavior feature codes in the biological feature recognition request into a feature verification model, when an output biological behavior correlation index is lower than a first preset threshold value, triggering a dynamic verification strategy adjustment instruction, generating a multi-dimensional verification superposition strategy, and executing at least two verification operations in the multi-dimensional verification superposition strategy, the verification result is input into the distributed time synchronization node to generate an encryption token; and when the synchronous matching degree of the encryption token among different nodes exceeds a second preset threshold value, outputting a security verification passing instruction. According to the method, multi-modal feature fusion, dynamic hierarchical verification and time-space encryption technologies are adopted, replay attacks are prevented, an adaptive defense system is constructed, and reliable authentication of a high-security network scene is ensured.

Systems and methods are disclosed for optimization, management, and merging of processes. This system integrates a multifaceted technological framework, including generative artificial intelligence, quantum computing simulations, and blockchain technology. It features a user interface for inputting diverse workflow requirements, a generative AI module for processing these inputs, and a quantum computing module for simulating and optimizing workflows. The system utilizes blockchain for secure workflow deployment and a suite of specialized engines for prompt management, data extraction, analysis, optimization, deployment orchestration, and continuous monitoring. These components ensure the system's adaptability to user-specific needs, scalability across various industries, and capability for integration with existing enterprise systems. This invention revolutionizes BPM by streamlining processes, enhancing efficiency, and maintaining high security and customization standards.

The invention discloses a fine-grained access control method and system based on risk identification, and belongs to the technical field of information security. According to the method, user subject attributes, behavior attributes and system environment attribute information are collected in real time, a standardized decision matrix is constructed, an interval type-2 fuzzy set (IT2FS) is used for conducting fuzzy modeling on the attributes, and an upper membership matrix and a lower membership matrix are generated. And calculating the dynamic weight of the attribute index in combination with a CRITIC method, introducing a time decay factor to dynamically correct a risk score through an improved TOPSIS method, calculating the Euclidean distance between an access request and a positive / negative ideal solution, and generating a normalized risk closeness degree. And based on the risk score and a preset threshold value, dynamically matching a hierarchical permission strategy, and adopting a static rule and a priority coverage mechanism to eliminate permission conflicts. According to the method, multi-dimensional risk assessment and dynamic weight adjustment are fused, the problems of insufficient real-time performance, subjective weight dependence and weak uncertainty processing capability in a traditional method are solved, the accuracy and security of access control are remarkably improved, and the method is suitable for scenes with high security requirements such as cloud computing and finance.

The invention relates to the technical field of information security, and discloses a data security management system and method in an intelligent power grid, and the system comprises a dynamic encryption and key management module which is used for carrying out the encryption and key management of the data of the intelligent power grid, determining an encryption algorithm according to the sensitivity of the data, and generating a corresponding key, the dynamic encryption and key management module transmits encrypted data and key information to the adaptive access control module so as to ensure the security of data access; and the self-adaptive access control module is used for managing access permissions of the user and the equipment and performing dynamic authorization according to the attribute label and the context information. Through dynamic encryption and adaptive key management, an encryption algorithm and a key length are adjusted in real time according to data sensitivity and a network environment, a quantum key distribution technology is combined, high security and quantum attack resistance of a key are ensured, and then security and real-time performance of data transmission are ensured.

The invention relates to the technical field of unmanned aerial vehicles, in particular to a low-power-consumption unmanned aerial vehicle concealed control and encrypted communication method and system based on BLE 5.0. According to the method, link quality is dynamically evaluated based on a BLE node detection frame, a path decision result is generated, and a self-adaptive scattering network topological structure is constructed in combination with the real-time position of an unmanned aerial vehicle and electromagnetic environment changes; packaging the unmanned aerial vehicle control instruction into a GATT feature value update message, and generating a hidden control data stream; combining time, space and channel dimensions to generate a frequency hopping sequence parameter set; performing dynamic slicing and pseudo-random recombination on the hidden control data stream through a space-time dual encryption mechanism to generate an encrypted control instruction data stream; and transmitting the encrypted control instruction data flow to an unmanned aerial vehicle execution layer through a dynamic scattering network. On the premise of keeping the low power consumption characteristic, the unmanned aerial vehicle control system has high concealment, high reliability and high safety, and meanwhile, a tracking path of an enemy to a real flying hand is cut off through the dummy flying hand layer.

The invention discloses a power grid project supplier information access control method based on a zero-trust architecture, and the method comprises the following steps: S1, receiving an access request, and executing identity verification; s2, extracting supplier related information from the verified access request, and generating access context information; s3, generating an access control strategy according to the access context information; s4, a resource access path is established, and access connection is completed through an encryption communication mode; s5, collecting operation behavior data of the suppliers in the access process; s6, calculating a deviation degree between the operation behavior data and a preset behavior baseline, and generating a risk score; s7, when the risk score exceeds a set threshold value, executing a corresponding security processing operation; and S8, archiving the operation behavior data and the security processing record in the access process. According to the method, a dynamic access control and behavior risk response system is constructed based on a zero-trust architecture, and the method has the advantages of fine authorization, continuous verification and high security.

The invention relates to the technical field of commercial password detection methods, and discloses a high-security method for negotiating a temporary session key based on a national secret algorithm, and the commercial password detection method comprises the following steps: initialization and identity authentication: two communication parties generate an SM2 public and private key pair, and the identity is verified through a digital certificate and an SM2 signature; temporary key negotiation: generating a shared key point based on an SM2 key exchange protocol; session key derivation: generating a temporary session key by using an SM3 hash algorithm; key confirmation and encrypted communication: verifying the key through an SM4 algorithm and encrypting communication data; according to the high-security method for negotiating the temporary session key based on the national secret algorithm, efficient key negotiation of both communication parties in an unsecure channel is realized through an SM2 key exchange protocol, an SM3 hash algorithm and an SM4 symmetric encryption algorithm. The method combines digital certificate authentication, dynamic random numbers and timestamps, has forward security, replay attack resistance and man-in-the-middle attack resistance, and is suitable for high-security scenes such as finance and government affairs.

The invention discloses an information encryption method for wireless electronic countermeasure, and relates to the technical field of wireless transmission. According to the method, the wireless channel state is monitored in real time, the channel quality evaluation model is established, and the adaptive frequency adjustment algorithm and the cognitive radio technology are combined, so that whether the channel meets the communication quality requirement or not can be accurately judged, the influence of interference and attack on communication is effectively avoided, the continuity and stability of the communication process are ensured, and the communication quality is improved. The adaptability and the reliability of a communication system in a complex electromagnetic environment are remarkably improved, the quantum key is generated based on an encryption communication protocol of quantum key distribution, extremely high security of the key is ensured, communication data are difficult to crack in the encryption transmission process, security threats such as eavesdropping and tampering are effectively resisted, and the security of the communication system is improved. And through a secret key pre-distribution mechanism and a secret key updating process, the insufficient secret key distribution rate and the potential security risk are dealt with, the security of communication is further enhanced, and the confidentiality and integrity of information transmission are ensured.

The invention discloses an information security management method and system based on sensitive data, relates to the technical field of data management, and comprises the following steps: realizing quantum encryption transmission of remote high-sensitive data by combining a quantum key distribution link and a dynamic chaotic key stream; the partitioning and synchronization priority is dynamically adjusted according to the node load, the data integrity is verified through CRC, the distributed storage disaster recovery system with extremely high safety and usability is achieved, it is ensured that data can still be recovered even under extreme disasters, a zero-trust data channel based on an IPSec tunnel is constructed in the data transmission process, and the reliability of data transmission is improved. The tamper-proof, anti-counterfeiting and anti-leakage capabilities of a data access link are greatly improved, the access frequency abnormity is detected through the isolated forest model, the behavior trend is detected through the LSTM time sequence prediction model, the baseline deviation analysis is performed through user behavior portrait comparison, and the real-time, multi-modal and chained security monitoring of the user data operation behavior is realized.

A user equipment (UE) communicates with remote endpoints by accessing a space vehicle (SV) in a store and forward (S&F) mode when the SV has no feeder link to a network. The SV includes RAN and CN capability to enable the UE to communicate with an on board proxy. The UE sends mobile originated voice and data to the remote endpoints via the proxy and a second proxy in an S&F center (SFC) and similarly receives mobile terminated data from the remote endpoints. Secure access by the UE to the SV and by the second proxy to a ground network is enabled by providing, to the SV and SFC, UE security key data derived non-reversibly from a security key on the UE USIM. The derived security key data avoids exposing the USIM security key and enables SV access without pre-subscription to an SV operator.

The invention relates to a secure communication method for an edge node and terminal equipment based on dynamic key negotiation. The method comprises the following steps: the terminal equipment sends an initial signal when initiating a communication request; the edge node generates a scenarized first key negotiation parameter and feeds back the scenarized first key negotiation parameter after passing dual identity and state verification; after the terminal device decrypts the parameter, a dynamic entropy value is collected by combining a network adaptive sensor, and a second key negotiation parameter associated with the first parameter feature is generated; the two parties calculate session keys based on an ECDH algorithm, and the consistency of the keys is ensured through dynamic entropy verification and Hash comparison; and after the key negotiation succeeds, entering a hierarchical encrypted data transmission stage, and dynamically updating a session key based on a multi-dimensional trigger mechanism. According to the method, through hardware credibility verification, a scenarized key strategy, dynamic entropy enhancement and national secret algorithm adaptation, dynamic management of keys and adaptive matching of terminal resources are achieved, attacks such as equipment counterfeiting and parameter tampering are effectively resisted, and the high-security and compliance requirements in the fields of industrial control and the like are met.

The invention discloses intelligent part damage identification and quantitative analysis based on multi-modal fusion, and particularly relates to the technical field of intelligent part damage identification. According to the method, synchronous or asynchronous real-time data acquisition is carried out on a target part, multi-modal features are extracted in combination with a heterogeneous feature extraction network, confidence scores of all modals are calculated, mutual information between the modals is fused, and an attention weighted fusion process is guided; when it is detected that the modality is abnormally suppressed, feature enhancement and dynamic weight adjustment are implemented, key weak signals are prevented from being ignored, fusion features are input into a damage identification model, and a damage identification result, modal weight visualization and early damage risk scoring are output; the technology effectively improves the recognition capability of the model for early and hidden damage, is especially suitable for sensitive capture and fusion judgment of weak modal signals in high-safety scenes such as wind power and aviation, and significantly enhances the early warning accuracy and maintenance foresight of the system.

Disclosed in the embodiments of the present application are a data access control method and an apparatus, which are used for improving security for data access control. The method in the embodiments of the present application comprises: configuring authentication information for data access control, the authentication information comprising one or more of the following: an identity security classification level, a resource security classification level and an environment security classification level, the identity security classification level being used for indicating the access authority of a user, the resource security classification level being used for indicating the confidentiality level of a cloud resource, and the environment security classification level being used for indicating the confidentiality level of a cloud environment; receiving a data access request from the user, the data access request being used for requesting access to data in the cloud resource or cloud environment; and processing the data access request according to authentication logic, the authentication logic comprising control logic between the authentication information, the authentication logic being used for controlling the access authority of the user to the data in the cloud resource or cloud environment, or being used for controlling the flow direction of the data between the cloud resource or the cloud environment, and the flow direction being a direction from a low security classification level to a high security classification level.

An anomaly detection-based attention purification graph defense method is provided, which includes: Step 1: selecting an anomaly detection algorithm, passing an input graph into an anomaly detection module, and obtaining potential abnormal edges, wherein the obtained result is specifically a two-dimensional matrix named linkpred; Step 2: passing the linkpred matrix obtained in Step 1 and other required training parameters into an ADGAT model for training, and purifying an attention layer in the training process by linkpred; Step 3: using the trained model to generate graph node features to complete a specific downstream graph task. In the downstream graph task with high security requirements, the method can enhance the robustness of the model on the premise of defending the inherent noise and malicious disturbance in graph data and ensuring the performance of GNNs.

The invention discloses a distributed data encryption and verification system and method based on a block chain, and relates to the technical field of block chains. The method comprises the following steps: dynamically matching an initial processing node and a transmission path according to data characteristics and node capability; selecting an optimal path and an encryption strategy by combining the node capability, the network state and the data security requirement; data fragmentation encryption transmission is executed, and the transmission quality is evaluated in real time; future transmission risks are predicted based on historical data, and path sustainability is evaluated; and adjusting the path according to the real-time verification value and the prediction feasibility, and updating the block chain record. Full-link traceable auditing is realized through block chain evidence storage, the dynamic encryption strategy and predictive path optimization are combined, the transmission efficiency is improved, the security risk is reduced, the energy consumption is reduced, and the method is suitable for a high-security demand scene.

A process for enhancing network security includes collecting network configuration and network environment information from users, including the identification of suppliers of goods and services. The collected information is parsed to identify individual security risks and a value is assigned to each security risk identified. A cumulative security score is calculated for each user using the values assigned to each security risk, and suggestions are offered to improve security.

The invention discloses a data analysis question and answer platform based on a large model and a knowledge vector library, and relates to the field of intelligent question and answer. Firstly, question and answer content of a user is obtained, the question and answer content is analyzed through a large model, and a data analysis type question is screened out; then identifying keywords in the data analysis type question; keyword classification is carried out through cooperation of a large model and a knowledge vector library, and keywords are classified into indexes, dimensions and statistical periods; the indexes, the dimensions and the statistical periods are converted into corresponding SQL fragments, and the SQL fragments are spliced to generate an SQL query statement; executing the SQL query statement to query the database, and returning a query result; and the query result is converted into structured data, and the structured data is displayed through a front-end user interface, so that natural language data analysis and question answering with low cost, high efficiency, high safety, high accuracy and high flexibility can be realized.

The invention discloses an encryption communication system and method based on multi-information dynamic key generation. The system comprises a sending client, a server and a receiving client, and aims to ensure high security and integrity in data transmission. And the sending client generates a random number seed through the timestamp, the user ID and the position information, and uses a random number generated by the seed as a secret key to symmetrically encrypt the content of the data packet. And the server only serves as a data transfer node, does not have a decryption function, and provides a time service to ensure that the sending and receiving clients generate matched random number sequences. And after the receiving client receives the data packet, a random number seed is generated based on the same timestamp, user ID and position information, and the same random number sequence and decryption key are generated. And verifying the data integrity. The dynamic random number seed and the secret key design ensure that the secret key is unique and unpredictable, the secret key is prevented from being intercepted or reused, and the method is suitable for large-scale data transmission with high safety requirements such as finance and government affairs.

Embodiments described herein relate to computer systems and methods for digital asset custodian that seamlessly integrates off-chain multi-party computation (MPC) signing with on-chain party identity authentication. The system comprises a service provider node, multiple computation nodes equipped with robust secure hardware, and a Blockchain accessible to all participating nodes. The nodes deliver a threshold signing service with utmost security—ensuring that no single node can recover the private key, while simultaneously recording and mutually authenticating each node's identity on-chain. The system boasts intrinsic support for hierarchical address creation and signing, facilitated by an enhanced protocol. Its scalability, particularly in the quantity of computation nodes, is complemented by efficient communication tailored to the demands of the MPC protocol.

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.

The invention relates to the technical field of electric power information security, in particular to an abnormal behavior detection method and system for electric power sensitive data flow. The method comprises the following steps: acquiring user operation behavior characteristics and data circulation track information through multi-source data acquisition; carrying out joint modeling on the behavior pattern by utilizing short time sequence Markov modeling and a long time sequence Informer structure; multi-dimensional features such as operation frequency, access paths and data types are integrated through a feature fusion module; a plurality of scoring mechanisms are introduced to judge the influence of data exception on the power system; further mining a data interaction relationship among multiple subjects by utilizing graph structure modeling; and a model structure search method is combined to carry out performance optimization on the whole detection process. The method can effectively improve the detection accuracy and real-time response capability of abnormal circulation of sensitive data in complex scenes such as power dispatching, power distribution automation and terminal access, and is suitable for data protection requirements of a power system in a high-safety-requirement environment.

Systems, computer program products, and methods are described herein for AI-based adaptive security parameter calculation in license key generation with quantum-resistant protections. The present disclosure is configured to utilize advanced cryptographic techniques, including elliptic curve cryptography and SHA-3 hashing, to produce secure digital signatures for license keys. An AI-driven engine analyzes historical security data to adaptively adjust key generation parameters, ensuring enhanced protection against current and emerging threats. This adaptive approach allows for continuous learning and improvement of security measures, making the system robust against both classical and quantum cryptographic attacks. The disclosed methods integrate the generation, assessment, and validation of keys into a streamlined process that promotes high security while maintaining efficiency.

The invention discloses a blockchain-based bidding and tendering data security processing method, which belongs to the technical field of data encryption, and specifically comprises the following steps of: segmenting original data into logic blocks according to a time axis, and generating a dynamic feature code containing a hierarchical relationship by using a current data hash value and a last feature segment of a preorder block through nonlinear fusion; and constructing a three-dimensional verification topology network containing a timestamp longitudinal chain, a content association transverse tree and an environment parameter space matrix. And establishing a dynamic verification channel, activating three-anchor-point association path cross verification when data is called, and generating an integrity proof. A self-destruction mechanism is implanted in verification, and data blocks are subjected to gradient erasure when abnormal conditions occur. And finally, generating a traceability map, dispersing encryption key parameters in multiple domains, and recording a storage domain coordinate hash abstract through a block chain. The method is suitable for high-security electronic bidding and tendering scenes.

The invention discloses a full-scene multi-stage linkage simulation test system and method, electronic equipment and a storage medium, which are applied to a train autonomous operation control system, and the system comprises a cooperative positioning and sensing simulation module which is used for realizing Beidou high-safety and high-precision positioning under multi-source spatio-temporal information fusion; the ground signal control system simulation module is connected with the cooperative positioning and sensing simulation module; a vehicle and vehicle-mounted control system simulation module; and a trackside simulation module. According to the method, comprehensive processing of Beidou positioning, train data, environment perception and trackside data is realized, synchronous fusion and dynamic collaborative perception of'air-train-ground-ring 'multi-dimensional information are realized, and train-road-ring multi-dimensional information space-time consistency synchronization is realized by constructing a Beidou virtual space-time reference, so that the system is high in reliability and high in reliability. The problems that a traditional train control system is not uniform in space-time benchmark and large in simulation test data analysis difficulty are solved.

The invention discloses an industrial Internet of Things control method for multi-type working parameter deployment, which relates to the technical field of industrial automation control, and comprises the following steps: S001, establishing a time sequence observation baseline of a multi-stage redundant path, injecting micro-amplitude identification pulses into all control nodes, generating an instruction time delay distribution curve and a resource occupation track, and establishing a time sequence observation baseline of a multi-stage redundant path; the method is used for revealing potential conflict sources and providing initial conditions. According to the method, a conflict source is revealed by establishing a time sequence observation baseline, competition nodes are identified by using a loop retrieval graph, a conflict list is formed, a single-source control right token is issued to realize link convergence, token stagnation is monitored, snapshot rollback and standby path takeover are combined to avoid interruption, and after takeover, time delay shaping is implemented to ensure stable landing of an instruction. Finally, the topological weight, the token priority and the fusing threshold value are dynamically updated, a self-evolution closed loop is constructed, and high reliability and high safety of industrial Internet of Things control are achieved.

The invention discloses an identity authentication and control method and device based on a block chain. According to the method, biological features are collected through edge nodes to generate feature vectors, a combined hash value is generated in combination with a device scene label and a service role label, the combined hash value is uploaded to a cloud server after encrypted signature, and the combined hash value is written into a block chain through an intelligent contract; and during user authentication, the edge node calculates a real-time risk level, dynamically selects an authentication mode, calls an intelligent contract for verification after verification of the cloud server, and adjusts the risk level according to a verification result to implement management and control. According to the method, the edge cloud collaborative architecture is adopted, and the dynamic multi-factor authentication mechanism and the block chain consensus technology are combined, so that high-security privacy protection authentication is realized, the security requirements of different service scenes can be met, data leakage and replay attacks are effectively prevented, and the authentication efficiency and reliability are improved.

The invention discloses a digital information secure transmission system and method based on network protocol analysis, and relates to the technical field of digital information transmission. In order to solve the problems that an existing secure transmission method mainly focuses on encryption and access control, cannot fully identify security risks possibly caused by protocol vulnerabilities or improper configuration, lacks an active identification and repair mechanism for potential vulnerabilities, is relatively single in processing mode of secure transmission and lacks a flexible real-time response mechanism, the invention provides a secure transmission method based on the protocol vulnerabilities. According to the method, potential security threats and vulnerabilities are detected and identified in real time by deeply analyzing a network protocol, and security risks existing in network communication are dynamically protected in combination with a threat detection and vulnerability repair mechanism, so that higher security is provided in the aspects of data encryption and access control, and the security of the network communication is improved. And potential vulnerabilities and attacks on the protocol level are effectively prevented through deep analysis and behavior pattern recognition of the network protocol.

The invention discloses a hybrid encryption and decryption method based on a chaotic system and an optical key, and the encryption method comprises the steps: generating a chaotic key through the initial information of a to-be-encrypted object and an initial key, and generating a chaotic sequence for the chaotic key through employing a five-dimensional Hamiltonian conservative chaotic system (FHCCS); scrambling and grouping the initial information according to the chaotic sequence, and selecting a corresponding diffraction distance as an optical key; generating a computer-generated hologram by adopting a layered angular spectrum method according to the diffraction distance; encrypting the computer-generated hologram by adopting the chaos sequence to obtain an optical password book; and encrypting a ciphertext of the optical password book by using the chaotic sequence to obtain a ciphertext of a final encrypted object. According to the method, an encryption mode of combining the optical key and the chaotic key is adopted, and the optical password book inherits the advantages of efficient information storage, high decryption speed, high parallelism and the like of optical encryption, and has the advantages of high shear resistance, high security and the like which are not possessed by a traditional password book.

The invention discloses a computer file protection method, which relates to the technical field of computer information security, and comprises the following steps of: S1, classifying files and marking security levels based on content characteristics and sensitivity; s2, dividing system user permission levels and configuring a multi-factor authentication mechanism; s3, constructing a file access control matrix and setting a fine-grained operation authority rule; s4, deploying an access behavior monitoring module, and recording a file operation behavior log in real time; s5, performing dynamic risk analysis based on behavior modeling and an anomaly recognition algorithm; s6, performing hierarchical response according to the risk level, wherein the hierarchical response comprises measures such as warning, limiting, network disconnection and locking; and S7, encrypting and storing the log information, and providing an auditing interface for behavior traceability. According to the method, static permission control and a dynamic behavior recognition mechanism are fused, full-process intelligent protection of files from creation, access, transmission to storage is achieved, and the method has the advantages of being high in safety, timely in response, capable of achieving self-adaptive evolution of strategies and the like.

The invention discloses a lattice-based cryptographic algorithm-oriented side channel attack-resistant NTT circuit, which comprises a control unit, which is mainly used for controlling the enabling of a bottom layer component in the structure and the data flow direction among modules; the storage unit is used for storing the coefficient, the random twiddle factor address and the twiddle factor; the address generation unit is used for calculating and generating a storage RAM (Random Access Memory) address of a twiddle factor participating in operation and a read address required by the coefficient storage unit; and the coefficient transposing unit is used for realizing coefficient reading meeting the index distance among all NTT stages. According to the side channel attack resisting NTT circuit oriented to the lattice-based cryptographic algorithm, when a low delay base-4CT / GS butterfly unit is masked, the increment of modular multiplication resources is reduced, and the resource consumption is remarkably reduced while high security is kept.