13 results about "Information technology security" patented technology

The invention discloses a message communication method and device, equipment and a medium, and relates to the technical field of information technology security. The method is applied to a client, and comprises the following steps: generating an asymmetric key pair based on a first national cryptographic algorithm, and exchanging with a public key in the asymmetric key pair generated by a server to determine an initial key pair corresponding to the client and generate a shared key; performing identity authentication with the server, and encrypting the to-be-sent message by using the shared key based on a second cryptographic algorithm after the authentication is passed to obtain encrypted data; determining a hash value corresponding to the to-be-sent message, and adding the hash value to a pre-constructed Merkel tree to obtain a root hash value; signing the root hash value to generate a corresponding signature result, and splicing the signature result with the encrypted data to generate a complete data packet; and sending the complete data packet to a server, so that the server performs data consistency verification based on a locally maintained Merkel tree. Through the technical scheme of the invention, more reliable message communication can be realized.

The invention provides an information system routing and API (Application Program Interface) scanning test tool, and relates to the technical field of information technology security testing, and the tool comprises the following steps: carrying out target survival verification on a target URL (Uniform Resource Locator); generating a complete absolute URL list; obtaining an independent path component, and generating an ordered and de-duplicated to-be-scanned path combination queue through depth-controllable Cartesian product operation; the to-be-scanned path combination queue is scanned in a multi-thread concurrent mode through the intelligent scanning work module, and meanwhile the system resource utilization rate is collected and displayed in real time through the system resource monitoring module; in the scanning process, the intelligent scanning work module receives and applies configuration parameter updating from the visual interaction interface module in real time; scanning response results are collected and filtered, and the results are stored in real time; while the scanning comprehensiveness and the system stability are ensured, the overall efficiency of the scanning test and the user experience are greatly improved.

This invention discloses a CPE identification system based on the ChatGPT large-scale model and incremental learning technology, relating to the field of information technology security. It includes a software security vulnerability information database, a preprocessing layer, a semantic encoding layer, and a label prediction layer. The semantic encoding layer comprises a ChatGPT pre-trained large-scale model module and a gated recurrent unit network module. The ChatGPT pre-trained large-scale model module performs preliminary processing on the preprocessed data to obtain text feature data. The gated recurrent unit network module performs sequence analysis on the text feature data to obtain dynamic features. The label prediction layer includes a layer-by-layer improved label attention mechanism module and an anti-forgetting incremental learning module. The layer-by-layer improved label attention mechanism module refines the dynamic features. The anti-forgetting incremental learning module updates the CPE identification system in a timely manner. This invention effectively improves the accuracy and training efficiency of vulnerability information identification.

Various embodiments of the teachings herein include a method for executing workloads in an execution environment. An example includes: determining approval of the workload for execution using a list of admissible workloads; determining information identifying an IT security risk of the execution environment; and amending the admissibility list of admissible workloads depending on the determined risk information.

The invention discloses a computer information technology security storage device, and relates to the field of computer storage, the computer information technology security storage device comprises a computer main body, the top end of the computer main body is provided with a button, one side of the computer main body is provided with a protection frame, and the bottom end of the button is provided with a microswitch. Through the arrangement of the button, the driving chip, the LED warning lamps and the pressure sensor, if a person does not perform identity verification and directly presses the button, the driving chip controls one LED warning lamp to emit yellow light, and if the person presses the button for multiple times in a short time and the pressure sensor monitors pressure for multiple times, the other LED warning lamp emits red light, so that the person does not perform identity verification. The person can immediately understand the reason that the connection port cannot be opened by comparing the color of the LED warning lamp with the specification on one side, so that the problem is solved, if the person cannot obtain identity verification, the button cannot be controlled to operate, and then the connection port cannot be used, so that the safety of data information is ensured, and leakage cannot be caused.

The invention relates to the technical field of information technology security, and particularly provides a computer informatization security device, which comprises a multi-stage data filtering system, which is configured in a way that each stage of filtering module corresponds to a specific type of security threat and records data characteristics related to the security threat; the threat identification system is configured to extract data features meeting preset conditions from the multi-stage data filtering system; the dynamic response system is configured to generate a protection instruction for the current threat according to the extracted data features; and adjusting data feature records in the multi-stage data filtering system according to the protection instruction. According to the invention, a closed-loop protection system is realized through a modular cooperative work mechanism; according to the intelligent feature extraction function, the threat recognition system carries out mode matching on feature data generated by multi-stage filtering based on a preset rule, automatic extraction and standardized processing of threat features are achieved, and structured input is provided for dynamic response.

Technical fields: - Information technology; - Security The present invention relates to a method for authenticating users in digital systems, using two passwords one after the other, without providing confirmation or denial feedback in the user interface. The only feedback is the granting of access after both passwords have been entered correctly in contiguous sequence. The main differences of this method compared to other two-factor authentication methods are: a. it does not actually use two factors, but only one factor in duplicate. b. it does not depend on another device or system, reducing the opportunities for an attacker to find security weaknesses. c. it can be used in systems with or without internet access. d. it can be used in both physical and digital systems. e. it exponentially decreases the chances of password breaking by guessing or using the brute-force method.

The application relates to the technical field of information technology security, and in particular provides a computer information security device, which comprises a multistage data filtering system configured so that each stage filtering module corresponds to a specific type of security threat and records data features related to the security threat; a threat identification system configured to extract data features meeting preset conditions from the multistage data filtering system; and a dynamic response system configured to generate a protection instruction for the current threat according to the extracted data features and adjust the data feature records in the multistage data filtering system according to the protection instruction. The application realizes a closed-loop protection system through a modular collaborative working mechanism; the intelligent feature extraction function; the threat identification system performs pattern matching on the feature data generated by the multistage filtering based on preset rules, realizes automatic extraction and standardized processing of threat features, and provides structured input for dynamic response.

The present invention belongs to the field of information technology security of Internet of Vehicles (IoV), and relates to an IoV privacy protection method based on CNTR on the NTRU lattice, including S1, initialization settings, in which a trusted center configures system parameters; S2, vehicle registration, in which a vehicle is registered with a trusted center upon leaving the factory, and a current vehicle private key is generated; S3, road test unit registration, in which the public key of the road test unit uses the system public key broadcast by the trusted center, and the private key of the road test unit uses the system private key; S4, message signcryption, in which a signcrypted message is broadcast; S5, message designcryption, in which the road test unit obtains the signcrypted message sent by the vehicle and designcrypts it using the system private key. The present invention has the advantages of using NTRU lattice cryptography and ring signature technology to achieve quantum security protection for IoV vehicle and Internet of Everything (V2X) communications.

The utility model discloses information technology security testing equipment, and belongs to the technical field of computer testing. Comprising a test electrical box; the test board is fixedly connected to the top surface of the test electrical box; the support frame is fixedly connected to one side of the test board in a symmetrical structure; the lifting cylinder frame is in sliding fit between the two supporting frames and is connected and limited with fastening bolts in the supporting frames; the electric push rod is fixedly connected to one side of the lifting cylinder frame and is electrically connected with the controller in the test electrical box; the part sleeve plate is fixedly connected to the other end of the electric push rod and is in sliding fit with the lifting cylinder frame; and the clamp arms can be rotationally adjusted in multiple directions and are connected in the part sleeve plate at equal intervals. The position of the distance adjusting frame in the test board is adjusted, and the aperture size of the placing groove in the test board is changed under the position limitation of the positioning screw rod, so that the test board can be used for standard detection of computer hosts of the same size and model, and the convenience of computer host testing is improved.

The invention belongs to the field of Internet of Vehicles information technology security, and relates to a CNTR-based Internet of Vehicles privacy protection method on an NTRU lattice, which comprises the following steps: S1, initialization setting: a trusted center configures system parameters; s2, registering a vehicle, registering the vehicle to a trusted center when the vehicle leaves a factory, and generating a current vehicle private key; s3, a drive test unit is registered, a public key of the drive test unit uses a system public key broadcasted by the trusted center, and a private key of the drive test unit uses a system private key; s4, signcrypting the message, and broadcasting the signcrypted message; s5, message unsigncryption: after the road test unit obtains the signcryption message sent by the vehicle, the system private key is used for unsigncryption; the method has the advantages that the NTRU lattice password and ring signature technology is adopted, and quantum safety protection of Internet of Vehicles and Internet of everything (V2X) communication is achieved.

The application discloses a Ukey authentication method and device, equipment and storage medium, and relates to the field of information technology security, and comprises the following steps: receiving a login request of a user through a preset universal login page, and obtaining user information and a personal identification code; sending a verification request corresponding to the personal identification code to a preset universal desktop application through the preset universal login page, and verifying the personal identification code by using the preset universal desktop application after the preset universal desktop application receives the verification request; and if the verification is successful, sending the user information, a Ukey certificate and a preset signature to a preset server through the preset universal login page, so as to verify the user. By constructing the universal desktop application and the universal login page, and by connecting the Ukey drivers of multiple manufacturers through the universal login application, the Ukey can be interacted with through a unified middleware, and the adaptation of Ukeys of different manufacturers can be realized.