622 results about "Intranet" patented technology

The invention discloses a data exchange system for performing real-time secure communication with an intranet system, and relates to the technical field of network data security. The system comprises a network environment identification module, a challenge authentication module, a hardware key binding module, a data communication module, an abnormal response module, a strategy updating module and a visual monitoring and log module. According to the invention, by introducing the trust map evaluation module, map modeling is carried out on the characteristics of the equipment in the historical operation process, the rationality of the current operation environment of the system is judged based on the map coincidence evaluation result, the communication module is allowed to operate only when the evaluation result meets the condition, and a judgment mechanism based on the historical trusted behavior is formed; and the prevention and control capability of the system on gradual-change attacks and behavior counterfeit is enhanced.

The invention relates to the technical field of medical information, in particular to a method and a system for processing medical record documents by utilizing artificial intelligence, and particularly relates to a method and a system which can receive and process multi-modal input information including images, videos and voices, can work cooperatively through a multi-agent system and can process the medical record documents. The invention discloses a system for automatically generating, controlling quality and safely inputting medical records in combination with a medical knowledge base and an implementation method thereof. The invention relates to an automatic medical record writing system based on multi-modal input and multi-agent driving. The automatic medical record writing system comprises a multi-modal input module, a multi-agent processing platform and a safety intranet input module. According to the method, establishment of the data channel between the medical intranet and the external AI system is proposed for the first time, the problem of medical intranet isolation is solved, industrial pain points are solved in a breakthrough mode, and a new medical AI landing path is developed.

The invention discloses an interactive connection establishment method and system based on an ICE protocol and electronic equipment. The method comprises the steps that a client configures STUN and SFU server addresses to support ICE connection; the client initiates a request to the STUN server and obtains a local candidate, and initiates a request to the SFU server and obtains a relay candidate, and the relay candidate is used as an opposite terminal candidate; the local candidates are packaged into an ICE candidate list, the client and the opposite end exchange the ICE candidate list through a signaling server, and the relay candidates are added into PeerConsection; initiating bidirectional connectivity check based on the candidate list; the low-delay P2P direct connection is preferentially established through a preset overtime verification mechanism, and the low-delay P2P direct connection is degraded to an SFU relay channel according to levels when the low-delay P2P direct connection fails. Seamless connection from intranet penetration to cloud relay is realized, and high-reliability and low-delay end-to-end connection support is provided for network communication.

Disclosed in the present application are an aircraft final assembly and integration testing platform and testing method. On the basis of a rational platform architecture, structured process data preparation, model-based operation guideline document preparation, and dispatch assistance decision-making are realized by means of an application layer, such that uniform data sources in the field of final assembly can be achieved. Data uploading and issuing between an industrial control network and an internal network, and data interaction control between layers are implemented by means of the mutually collaborative operation of the application layer, a storage layer, an edge layer and an execution layer, thereby improving the information acquisition efficiency and the operating efficiency. The edge layer and the execution layer collaboratively operate, so as to realize the interactive collaboration between the assembly guidance work for operators and automatic testing, thereby improving the efficiency of data information acquisition, operation instruction and fault handling during a final assembly and testing process of an aircraft.

The invention discloses an automatic auditing and checking system and method for substation operation safety. The system comprises an automatic data acquisition module, a data semantic fusion analysis module, a dynamic auditing rule generation module, a risk collaborative prediction module, an automatic information pushing module and a visual interaction configuration module. All the modules are connected through an intranet data interface and a system internal communication protocol, aiming at the prominent problems that the auditing process depends on manpower, the information system is split, the system semantics is difficult to understand, the risk identification is not comprehensive, the rule adaptability is poor, the response and push chain is broken and the like commonly existing in the existing substation operation auditing work. The invention provides an automatic auditing and checking system and method for substation operation safety, and aims to construct a full-process closed-loop intelligent auditing platform with semantic comprehension capability, multi-source data fusion capability, risk collaborative prediction capability and dynamic rule evolution capability.

The invention provides a resource access method and device, a zero-trust platform and a storage medium, and the method comprises the steps: receiving an internal resource access request of a zero-trust client, the access request carrying an access address of a target resource, user information of the zero-trust client, and temporary authentication information; the access address comprises a zero-trust platform domain name and a target resource identifier, the zero-trust platform domain name points to a public network address of the zero-trust platform, and the target resource identifier is used for uniquely identifying a target resource; the temporary authentication information is used for authenticating that the zero-trust client has the qualification of initiating the access request; based on the user information and the temporary authentication information, verifying the user identity and the access authority of the zero-trust client; after the verification is successful, determining a real address of the target intranet server based on a pre-configured mapping relationship between the real address of the intranet server and the internal resource identifier; and forwarding the access request to the target intranet server according to the real address of the target intranet server.

The invention provides a multifunctional network protocol converter, which comprises a main control module, a switch chip, a communication module and a storage module, and is characterized in that the switch chip comprises a plurality of network ports, each network port belongs to the same intranet, and each network port can be independently provided with a communication mode, supports various different protocols and data forwarding configurations, can realize various forwarding modes, and is provided with a plurality of communication interfaces; the data exchange module provides a physical layer data exchange function; the main control module identifies, analyzes, stores, converts and encapsulates the data of different protocol types received by the network port and the communication module through the data storage protocol stack, forwards the encapsulated data of different protocols through the network port and the communication module, and integrates a switch, a protocol converter and a data processing function into one device; the system architecture is simplified, the problems of high network protocol conversion cost and complexity caused by the prior art are effectively solved, and the network protocol conversion cost and complexity are effectively reduced.

The invention discloses a fusion quantum secure communication method of an NAT gateway, and relates to the technical field of communication network information security and quantum information. Comprising the steps of 1, creating a fusion quantum security communication system of an NAT gateway, 2, adopting a quantum hybrid encryption architecture through a quantum security module, and internally arranging a quantum key distribution unit and an anti-quantum computing acceleration chipset, 3, expanding a quintuple mapping structure of NAT through a dynamic address mapping and quantum encryption module, newly adding a quantum security dimension field QSV, and carrying out quantum encryption on the quantum key distribution unit and the anti-quantum computing acceleration chipset. And 4, developing a protocol non-inductive conversion engine through a hybrid protocol stack cooperation module, supporting an IPv4 / IPv6 dual-stack quantum tunnel and a quantum key inheritance protocol to realize cross-protocol family encryption parameter migration, dynamically adjusting a quantum encapsulation mode in an address conversion process, and dynamically associating an internal network address port with a quantum key parameter and a channel fingerprint feature. And 5, constructing a quantum perception type session state machine through an anti-quantum attack session management module, and performing a joint decision-making mechanism through quantum entanglement state monitoring and classical traffic feature analysis.

The invention provides a safe short message link invoice generation system and method based on a bank intranet, and belongs to the technical field of data processing, and the method specifically comprises the steps: determining an available invoicing amount interval based on the change condition of a centralized verification risk time period in an effective time interval of an invoicing short message link at a current time period under different invoicing amounts, and when the matching invoice amount is not in the available invoice amount interval, according to the change condition of the matching invoice in different concentrated verification risk time periods and the invoice amount influence condition of the different concentrated verification risk time periods on the future time period, the matching invoice amount is calculated according to the change condition of the matching invoice in the different concentrated verification risk time periods. According to the generation processing method for determining the effective time interval of the short message link invoice of the server of the bank intranet in the current time period, the congestion condition of the server for checking and downloading the invoice is avoided.

The invention relates to the technical field of computer information security, and discloses a communication anomaly detection method, which comprises the following steps: acquiring historical session data of a target application; constructing a traffic fingerprint model according to the historical session data; monitoring the target application in real time, and obtaining target session data of the target application; performing analysis processing on the target session data, and extracting a target feature vector of the target session data; judging whether the target session data is an abnormal communication behavior or not according to the target feature vector, a traffic fingerprint model and an abnormal threshold; and when the target session data is an abnormal communication behavior, triggering an alarm mechanism. According to the method, the traffic fingerprint model is constructed by acquiring the historical session data of the target application, the session data of the target application is monitored and analyzed in real time, and whether the communication is abnormal or not is judged by combining the model and the abnormal threshold value. The encryption traffic and application behavior diversity are effectively handled, the false alarm rate is reduced, and the intranet application security and monitoring efficiency are improved.

The invention discloses a medical network collaborative penetration test system and method based on artificial intelligence, and belongs to the technical field of medical information security, and the method comprises the steps: integrating a hospital intranet, medical equipment, cloud data center data and historical network delay data to construct a medical network data center; analyzing association between network vulnerabilities and delay data through a graph neural network, constructing an attack path analysis model containing delay weights, and quantifying risk scores to generate a test target priority list; defining a protocol vulnerability and a delay threshold, designing a test scene and generating an attack vector, matching an attack tool to perform a simulation test, calculating a vulnerability triggering success rate and evaluating a risk; generating a penetration test case according to the test target priority list and the risk level, executing multiple rounds of attack tests and generating a report; and monitoring the change of the vulnerability triggering success rate by dynamically adjusting the delay parameter, setting an early warning threshold value, and monitoring and sending a risk early warning notification in real time.

The invention provides a self-adaptive transformation and migration method and system for an internal website, and relates to the technical field of website migration. Comprising the following steps: constructing a hierarchical credential adaptation architecture, establishing a dynamic authority-data mapping mechanism, realizing knowledge base-data migration linkage and deploying an adaptive security protection chain. The method is used for realizing collaborative improvement of compatibility, security and knowledge service efficiency of an internal website in a credential environment through hierarchical credential adaptation, dynamic permission and data association, knowledge base linkage and self-adaptive security protection; besides, through cooperative work of the hardware driving adaptation module and the software interface conversion module, automatic identification of hardware features and interface features, precise analysis of adaptation requirements and dynamic generation of configuration files are realized. The compatibility of an internal website to different models of servers, autonomous controllable components and software interfaces in a credential environment is remarkably improved, the adaptation period is shortened, and stable operation of the system is guaranteed.

The invention discloses a full-link analysis display method and device based on routing configuration, a medium and equipment. The method comprises the following steps: collecting and extracting equipment routing data; confirming the type of equipment routing data, and executing data cleaning processing according to the type of the equipment routing data; path acquisition is carried out based on the routing configuration information of the target assets, and three groups of network incoming link diagrams are respectively obtained; and sequentially splicing the Internet network inbound link diagram, the internal network inbound link diagram and the cluster network inbound link diagram to generate a hierarchical whole network link topological diagram, and performing front-end link display on the whole network link topological diagram. Visualization of various assets and internet access links in a virtualized network is realized, and in an actual application scene, problems can be quickly found based on the topological graph of the whole network links according to association of the collected equipment routing data and the security events, the influence range is positioned, and the security response efficiency is improved.

The invention discloses an offline consumption method under a network interruption condition, and belongs to the technical field of electronic payment. In order to solve the problems of payment failure and low efficiency caused by network congestion or interruption in people-intensive scenes such as canteens and the like, the scheme realizes offline consumption through a local transaction verification and asynchronous order reporting mechanism: firstly, TCP connection is established between a consumption machine and an offline server through an intranet, a user swipes a card / scans a code to trigger a transaction after a worker inputs an amount, and the payment efficiency is improved; the offline server verifies the account balance and the transaction limitation in real time, if the verification is passed, an order is generated and stored in a local database, payment success is returned, and external network communication is not needed in the transaction process; the problem of transaction paralysis during network interruption is effectively solved, the stability and efficiency of a high-frequency payment scene are improved, and the method is suitable for canteens, convenience stores and other scenes needing offline payment support.

The invention discloses an abnormal data real-time filtering method and system based on edge computing in a dynamic environment system, the method is executed by an edge computing gateway, sliding window weighted average preprocessing is equivalently realized by adopting integer shift operation, and the single computing overhead is controlled within 50 clock cycles; dynamically and adaptively adjusting dynamic reference model parameters based on the ratio of the network load to the sensor sampling frequency; performing multi-stage anomaly filtering of a hard threshold value, a mutation rate and a statistical interval on the data through a three-stage pipeline judgment structure executed by atomization; an FPGA hardware queue manager independent of a main processor bypasses a TCP stack to push abnormal data at the highest priority, and redundant data is stored in a zero-copy annular buffer area managed by DMA. According to the invention, the problems of intranet congestion, server I / O bottleneck and alarm delay under the centralized architecture of the traditional dynamic loop system are solved, and the fault, fault, fault, fault, fault and fault are realized on resource-limited platforms such as Cortex-M4 and the like; the average alarm delay is 8 milliseconds; and the data compression rate is more than 90%.

The invention discloses an intranet penetration traceability method for multi-scale heterogeneous log behavior analysis, and relates to the technical field of network security, and the method comprises the steps: carrying out the standardization processing of an original log stream of a heterogeneous log source, and generating a unified semantic event stream; performing multi-scale time window division on the unified semantic event stream, calculating an event density characteristic index of each window, and identifying a short-time dense subsequence based on the event density characteristic indexes; clustering analysis is carried out on the identified short-time dense subsequences based on semantic weighted entropy, and aggressive dense segments and normal high-load segments are distinguished; based on the semantic relevance of the event, extracting long-time sparse clues from the unified semantic event stream; a long-time sparse clue is used as a time anchor point, an aggressive dense section adjacent to the time anchor point is positioned in an extended time range of the long-time sparse clue, and an intermediate interpolation event sequence is generated through a conditional time sequence model to reconstruct a complete attack chain.

The invention discloses an enterprise intranet information security solution supporting multiple encryption protection, which belongs to the field of computer network information security, and comprises a user terminal, a movable encryption gateway, a cloud authentication management platform, an operator network infrastructure and an enterprise intranet, the user performs biological characteristic and dynamic token double-factor authentication through the gateway; after the authentication is passed, the gateway sends encrypted authentication data to a cloud authentication management platform; after the platform verification is passed, calling an operator platform interface, and dynamically calculating the fine-grained network access authority of the user; an operator platform establishes an isolation security data tunnel from a mobile network to an enterprise intranet according to the security data tunnel, encryption transmission and access control based on dynamic authority are implemented for gateway data streams, multiple authentication, cloud authentication and an operator special line tunnel are integrated, and high-security and high-reliability enterprise intranet access flexibly supporting mobile office is achieved.

The invention relates to the technical field of computer network communication, in particular to a lightweight intranet interface dynamic routing agent system which comprises a rule management module, a routing analysis module and a request processing module. The rule management module provides an agent rule configuration interface and performs persistent storage, and comprises a configuration sub-module, a verification sub-module and a storage sub-module; the routing analysis module extracts a rule identifier from a public network request and retrieves a matching rule, and comprises an identifier extraction sub-module and a real-time retrieval sub-module; the request processing module executes preprocessing logic and forwards a request according to an original protocol, and comprises a script execution sub-module and a protocol forwarding sub-module. Dynamic routing is achieved, adaptability and operation and maintenance efficiency are improved, safety is guaranteed through multi-layer protection, deployment flexibility is enhanced through lightweight design, service continuity and communication quality are guaranteed, and the limitation of a traditional proxy technology is effectively solved.

The invention discloses an official document processing method and device based on a large model and an official document generating and checking all-in-one machine. The official document processing method based on the large model can quickly respond to a user request, automatically match and call a pre-trained official document generation sub-model corresponding to a literary and sports category by automatically identifying an official document title and an official document keyword, and automatically process the official document in combination with knowledge base data of a corresponding application field. According to the method, the large language model technology is utilized to quickly and intelligently generate the official document file with high quality, official document processing which is specially refined in various official document styles and is combined with the user industry can be realized, and the official document processing efficiency is greatly improved. According to the document generating and checking all-in-one machine, software and hardware are perfectly combined, the problems of document format accurate generation, large model illusion, safety risk, computing power support and the like can be solved at the same time, safe and efficient operation of the all-in-one machine in a user intranet environment is achieved, and the difficulty and cost of building and maintaining a complex system by a unit are reduced.

A system includes a memory configured to store user profile data associated with a user, user interaction data associated with a preauthorized user, and a software application configured to access the user profile data. The system further includes processors configured to access the user interaction data, in which the user interaction data is captured in relation to a natural language exchange session. The processors execute a generative machine-learning model trained to identify an intent of the preauthorized user based on the user interaction data associated with the preauthorized user, determine, based on the identified intent, whether the user interaction data corresponds to a sequence of authorized user interactions or a sequence of unauthorized user interactions, and, in response to determining that the user interaction data corresponds to the sequence of unauthorized user interactions, cause the software application to restrict access of the preauthorized user to the user profile data.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The invention discloses a one-way data security sharing method based on a private cloud DMZ, particularly relates to the technical field of network security, and solves the problem of internal data security sharing under a strict one-way strategy of the private cloud DMZ. To-be-shared data and a sharing strategy are subjected to double encryption, binding and packaging through the sharing management server to generate a data sharing packet and an access credential, and the data sharing packet and the access credential are pushed to a DMZ area gateway server through a one-way network channel; during external access, the gateway locally decrypts and verifies strategy validity (including identity, timeliness and dynamic factors), and decrypts data response after verification is passed. According to the method, the risk that the DMZ is connected back to the intranet is eradicated, fine management and control of dynamic strategies are achieved, the method is compatible with an existing firewall architecture, access logs can be actively audited by the intranet, and a safe closed loop is formed.

The invention discloses a power transmission line unmanned aerial vehicle communication networking system based on an optical fiber ring network, and relates to the field of power transmission line communication networks. The plurality of integrated base stations form an optical fiber ring network through the OPGW optical cable and the LTE MESH ad hoc network; the unmanned aerial vehicle executing the power transmission line inspection task and the corresponding fixed airport are accessed to an information intranet through an optical fiber ring network; wherein the integrated base station comprises an OPGW integrated base station and a MESH integrated base station; the OPGW integrated base station is deployed at a node with an optical fiber splice closure on a power transmission line tower, and is accessed to the information intranet in a wired connection mode; and the MESH integrated base station is deployed at a node, without an optical fiber splice tray, on a power transmission line tower, and is accessed to the OPGW integrated base station in a wireless connection mode. The power transmission line unmanned aerial vehicle communication networking system based on the optical fiber ring network can guarantee timely, safe and efficient large-scale data transmission.

The invention discloses a non-intrusive electronic medical record generating and filling method and system based on a localized large model. In order to solve the problems of medical privacy protection and heterogeneous system integration, a parameter compression large language model deployed in an intranet is utilized in the scheme, and doctor-patient dialogues are converted into structured medical records in real time. The core innovation lies in that a multi-modal traceability evidence chain is constructed, millisecond mapping of a generated text and an original record is established by using a cross attention (Cross-Attention) alignment mechanism, verification playback of'point word listening 'is supported, and the AI illusion trust crisis is effectively solved. Meanwhile, the semantic visual perception technology is adopted, an API interface does not need to be opened by an electronic medical record (EMR) manufacturer, an input control is intelligently positioned through OCR and screen semantic understanding, and manual operation is simulated to complete data injection. According to the invention, data leaving, result traceability and system zero transformation integration are realized.

Techniques are described for managing access to data stored in a blockchain, and for managing the communication of blockchain data to other entities. A private key may be generated and issued to an external entity to enable the external entity to access an internal (e.g., private blockchain). The external entity may be an external (e.g., public) blockchain, device, process, or user that is outside an internal network. The key may be associated with metadata that includes constraints, conditions, or rules governing access to the blockchain. An authorized entity may employ the key to request access to the blockchain via access management module(s), and the access management module(s) may employ the metadata to determine whether to approve the request. The access management module(s) may also employ rules governing outbound communication of data from internal blockchain(s) to external entities.

The invention provides a network intrusion detection method and system based on artificial intelligence, and relates to the technical field of network intrusion detection, and the method comprises the steps: obtaining multi-dimensional behavior data of a terminal domain, a network link domain and an application layer domain, and employing a high-density or hierarchical collection strategy according to a network type; preprocessing the data through a standardization priority or coding priority scheme according to feature types; constructing a CNN-LSTM fusion model adaptive to network dynamics, and extracting space and time sequence correlation features; based on the sample condition, adopting full or incremental training to obtain a convergence model; a result is output through a high-precision or high-speed detection strategy in combination with scene requirements; and continuously iteratively optimizing the model based on the environmental change. The system correspondingly comprises a multi-domain data acquisition module, a data preprocessing module and the like. The method breaks through the limitation of single-domain detection, accurately recognizes cross-domain cooperative attacks, adapts to different network scenes, reduces the false alarm and missing alarm rate, improves the detection real-time performance and stability, and is suitable for various network environments such as enterprise intranets and hybrid clouds.

The invention mainly discloses a streaming media asymmetric network penetration method, which comprises the following steps that: after being started, intranet video equipment is actively connected to a preset extranet server, and a persistent control channel is established; the extranet server receives a watching request instruction of the user side and judges whether a corresponding audio and video stream is transmitted or not, if not, a first instruction is sent to the intranet video device through the control channel, and the first instruction is used for instructing the intranet video device to push the audio and video stream to the extranet server; and the intranet video device responds to the first instruction and transmits the encoded audio and video streams to the extranet server through the data transmission channel.

The invention provides a communication method, a communication device and a communication system. In the method, the gateway device can send the request information for requesting the intranet access configuration information to the session management device, so that the session management device can send the intranet access configuration information to the gateway device based on the request information, and therefore, the intranet access configuration information is automatically configured for the gateway device; a series of problems (such as complexity, time consumption and high error rate) caused by manual configuration of the gateway equipment can be avoided, so that the accuracy and efficiency of configuration are improved.

The invention relates to the technical field of equipment control, and discloses a production equipment control system for electronic components. According to the system, related parameters of production equipment of electronic components are acquired through a data acquisition module, acquired data are processed and analyzed through a data processing module, and the average operation temperature, the average humidity, the stable operation power, the standard current, the standard voltage, the operation efficiency and the vibration frequency value of the production equipment are calculated; the abnormal monitoring module performs threshold analysis on the abnormal monitoring index of the production equipment, when the index exceeds a preset range, a control signal is sent to the control module, and when the control module receives the control signal, the control module performs real-time control on the production equipment of the electronic component. Equipment operation parameters are automatically adjusted, a comprehensive adjustment report is generated after control adjustment is completed, and the display module sends the comprehensive adjustment report to production management personnel through an internal network.

The invention discloses an intranet terminal abnormal network behavior identification method and system, and the method comprises the steps: capturing network flow, extracting multi-dimensional heterogeneous features, and obtaining a feature embedding vector set through vectorization coding and IP segmentation embedding processing; constructing a semantic-space mapping mechanism between features, converting a logic neighborhood relationship in a network protocol into an Euclidean space neighborhood relationship in a pseudo-spatial feature grid, and stacking along a time dimension to generate a four-dimensional feature topology tensor; respectively extracting local correlation, axis distribution and long-distance dependence characteristics by using squares, bars and expansion convolution kernels which are arranged in parallel, and carrying out self-adaptive weighted fusion; and finally, based on the fusion feature vector, determining abnormity through a full-connection classification layer. According to the method, the discrete traffic data is converted into the pseudo-space tensor with semantic topology, so that the logic structure of network behaviors is effectively recovered, and the recognition precision of hidden attacks in an internal network and an industrial control environment is remarkably improved in cooperation with multi-scale convolution.