164 results about "Message flow" patented technology

The invention relates to the technical field of network security, in particular to a network security situation awareness method based on artificial intelligence, which comprises the following steps: deploying probes on a plurality of key link nodes of a network, and acquiring a specific type of network basic maintenance message flowing through the node; based on the obtained message, microcosmic time sequence characteristics of the message are extracted, and a first time sequence signal is formed; comparing the first time sequence signal with a pre-stored node reference time sequence signal, executing collaborative deviation calculation, and generating a collaborative deviation coefficient; and based on the collaborative deviation coefficient, determining a local vibration intensity value of the node, converging local vibration intensity values of a plurality of nodes in the network, and executing spatial correlation fusion calculation. According to the method, anomaly detection is realized by analyzing the time sequence coordination rule of the network basic maintenance message, any abnormal condition damaging a normal coordination mode can be captured, and the recognition rate of unknown threats is improved.

The invention provides a service message processing method, electronic equipment, a storage medium and a program product. Service messages sent by the bottom cloud pool and message flow values are obtained, the service messages are classified, and the classified service messages and corresponding service type identifiers are obtained; determining a target business service module and a target message queue according to the business type identifier, and determining business priorities corresponding to the classified business messages; and determining a target node number of the service nodes in the target business service module according to the message traffic value and the business priority. Sending the classified service messages to a target message queue; sending the classified business messages to a target business service module through the target message queue; calling a service node through a target business service module, processing the classified business message, and generating a message processing result; sending the message processing result to the target service application; the problem that the processing efficiency is low when the service message is processed is solved.

CAN bus signal format inference includes: extracting candidate signals from training CAN bus message traffic; defining one or more signals, each signal being a candidate signal that matches structural characteristics of a matching data type and each signal being assigned the matching data type; and generating an inferred CAN bus protocol with which the defined one or more signals conform. Signals are extracted from CAN bus message traffic using the inferred CAN bus protocol, an anomaly in an extracted signal is detected, and an alert is generated indicating the detected anomaly. In another aspect, a transport protocol (TP) signal is extracted and analyzed to determine a fraction of the TP signal that matches opcodes of a machine language instruction set, and an anomaly is detected based at least in part on the determined fraction exceeding an opcode anomaly threshold.

A method and system for initiating message listening and routing message content to authorized user devices is disclosed. For a second user device to receive notifications regarding records of a first user, the second user device provides information identifying the first user to a notification service. The notification service verifies the identifying information. The notification service initiates one or more listeners to listen for messages flowing over a messaging bus that are relating to the first user. Once a message is identified, at least a portion of the message is used to generate a notification that may be sent to the second user device.

A technique to stop lateral movement of ransomware between endpoints in a VLAN is disclosed. A security appliance is set as the default gateway for intra-LAN communication by overwriting the DHCP responses. Message traffic from compromised endpoints is detected. Attributes of ransomware may be detected in the message traffic, as well as attempts to circumvent the security appliance. Compromised devices may be quarantined by assigning them the default gateway to a preset blackhole IP address.

The invention discloses a multi-dimensional dynamic trust evaluation method and system for a new energy power terminal, and the method comprises the steps: extracting the universal features of the terminal based on terminal log interaction data, extracting special knowledge evidence according to an equipment level perception layer and a network layer, and converting all features into 0-1 standardized values; when a terminal accesses for the first time, the static attribute of the terminal is complementarily collected, so that an initial trust baseline is established and an initial trust value is given; firstly, an IoT device interaction diagram is constructed, nodes are terminal devices, attributes are knowledge evidence vectors, edges are device direct interaction relations, and weights of the edges are defined by historical interaction quality; fusing the equipment knowledge evidence and the interaction relationship through a node2vec algorithm to generate a low-dimensional embedded vector; and finally, calculating the cosine similarity of the device vectors, multiplying the cosine similarity by the interaction frequency proportion to obtain the direct trust degree of the 0-1 interval, and quantifying the direct trust relationship between the devices. Performing trust evaluation on the message flow dimension; and historical interaction behavior trust evaluation and timeliness optimization.

Apparatuses, methods, and systems for generating a sequential flow of electronic actions for a user are disclosed. One method includes sensing a flow trigger action, scraping characteristics of an electronic presence of the user, characterizing user identifying information using an LLM (large language model) and the characteristics, determining a selection of actions and conditional splits (branches) to form a sequential flow of electronic messages for sub-users of the user, generating one or more electronic messages based on the identifying information and the determined sequential flow of electronic messages, displaying the one or more electronic messages to the user, sensing actions of the user based on the displaying of the one or more electronic messages, finalizing the electronic messages based on the sensed actions of the user, and electronically sending the one or more finalized electronic messages to sub-users of the user.

CAN bus signal format inference includes: extracting candidate signals from training CAN bus message traffic; defining one or more signals, each signal being a candidate signal that matches structural characteristics of a matching data type and each signal being assigned the matching data type; and generating an inferred CAN bus protocol with which the defined one or more signals conform. Signals are extracted from CAN bus message traffic using the inferred CAN bus protocol, an anomaly in an extracted signal is detected, and an alert is generated indicating the detected anomaly. In another aspect, a transport protocol (TP) signal is extracted and analyzed to determine a fraction of the TP signal that matches opcodes of a machine language instruction set, and an anomaly is detected based at least in part on the determined fraction exceeding an opcode anomaly threshold.

A user equipment (UE) can be a mobile terminating (MT) device that may receive data from another UE or other network element via a telecommunication network. When a small data payload is available for an MT UE, a base station of the telecommunication network can send a paging message to the UE that includes a Mobile Terminating Small Data Transmission (MT-SDT) paging cause. Based on the MT-SDT paging cause in the paging message, the UE can use Small Data Transmission (SDT) procedures to respond to the paging message. The SDT procedures can allow the UE to obtain the small data payload while the UE remains in a Radio Resource Control (RRC) Inactive state.

The invention relates to the technical field of computers, and discloses a bus signal simulation method for a universal emission control system. The method comprises the following steps: acquiring equipment node topology, a protocol type and historical load data; constructing a bus network abstract model; extracting a message flow time sequence template; generating a concurrent message scheduling sequence conforming to the arbitration logic; fusing to form a high-fidelity signal substrate; superposing physical layer interference signals based on measured data; and the data is injected into a tested system through a hardware-in-the-loop interface. The system comprises a bus topology analysis module, a network modeling module, a time sequence template extraction module, a scheduling generation module, a signal fusion module, an interference injection module and a hardware output module. According to the method, through logic and physical layer combined modeling, the test authenticity, the coverage rate and the platform universality are remarkably improved.

The invention provides a message flow control method, system and device and a readable storage medium. The method comprises the following steps: carrying out fragmentation processing on an input message according to a preset fragmentation size, and generating a plurality of message fragments cached in a fragmentation FIFO (First In First Out); performing length accumulation on each message fragment, wherein an accumulated value is associated with an actual length of the message fragment and a message length variation caused by encryption and decryption or message editing processing; and when the accumulated value reaches a preset boundary value, resetting the accumulated value and enabling the flow control value to execute self-adding operation. Compared with the prior art, the method has the advantages that the flow control design universality is high, the method can adapt to message length changes in scenes such as encryption, decryption or message editing, and accurate and synchronous flow control value operation is ensured; secondly, the depth of the recombined FIFO is only related to the delay of the main path and does not change along with the increase of the number of ports, so that the chip area and the power consumption are reduced; in addition, the flow control is triggered by the accumulated length boundary, and the resource efficiency and the system reliability are improved.

A queue application programming interface (QAPI) in a first data center receives incident messages, each with an incident identifier. The first data center is in communication with additional data centers. The messages are either ordered or unordered. Ordered messages must be processed in the order received, while unordered messages do not. The QAPI transmits the messages to a message stream data structure. A first worker sub-system retrieves unordered messages from the message stream for processing. In parallel, the QAPI transmits the messages to a group stream data structure which arranges the messages into groups. A second worker sub-system retrieves groups of ordered messages for processing. At least one of the first or second worker sub-systems is associated with the additional data centers.

The application provides a kind of semi-supervised in-vehicle CAN bus anomaly detection method and device based on dynamic graph, and relates to the technical field of anomaly detection.The method comprises: constructing an undirected time dynamic graph according to the message flow sequence and message content of the CAN bus; converting the time stamp into a time embedding vector through a time encoder, learning the low-dimensional representation of nodes and edges through a graph embedding module to obtain node embedding; predicting the anomaly score of each node according to the anomaly detection network, calculating the statistical distribution of normal nodes; further calculating the reference distribution, deviation score and deviation loss; generating a pseudo label for each node according to the deviation score, and then obtaining a trained anomaly detection model.The application proposes a semi-supervised intrusion detection method based on dynamic graph in combination with semi-supervised and graph neural network theory for network attacks received by in-vehicle CAN bus.

The invention provides an asynchronous tracking method for a vehicle remote control link, and belongs to the technical field of Internet of Vehicles, and the method comprises the steps: a cloud service platform side defines a plurality of key tracking nodes, and the key tracking nodes cover the life cycle stages of issuing, transmitting, responding and exception handling of a remote control instruction; standardized node tracking data is generated at each key tracking node, and the node tracking data at least comprises a vehicle identification code used for uniquely identifying a vehicle and a message serial number used for associating a single operation full link; releasing the node tracking data to a specified theme of a message queue system in an asynchronous calling mode to ensure that the processing of the remote control main service is not blocked by log recording operation; and monitoring the message queue theme through an independent log consumption service, and persisting the obtained node tracking data to a non-relational database to form a complete link tracking record for fault diagnosis.

This application relates to a logical Java Card runtime environment. Techniques are disclosed for generating a message stream configured to indicate the source of various messages within the message stream. In particular, an indicator identifies at which interface of a terminal (e.g., of a mobile handset) a message was received. The terminal receives messages on various interfaces and separates messages received via different interfaces within the message stream with interface switch indicators. In one embodiment, a smart card receives a message stream that includes a set of messages and interface switch indicators therein. The smart card delivers messages from the message stream to a single logical partition of the smart card until an interface switch indicator is identified in the message stream. From that point on, the smart card delivers messages from the message stream to a different logical partition of the smart card until another interface switch indicator is identified in the message stream.

Systems and methods are provided that support concurrent voice commands from different users. A speech recognition system includes a first input interface to receive a first audio input, a second input interface to receive a second audio input, an output interface, a first recognition module coupled to the first input interface and the output interface to determine a first textual representation of the first audio input and transmit a first message stream comprising the first textual representation and a first identifier associated with the first audio input via the output interface, and a second recognition module coupled to the second input interface and the output interface to determine a second textual representation of the second audio input and transmit a second message stream comprising the second textual representation and a different identifier associated with the second audio input via the output interface.

A system for processing distributed transactions is provided. The system includes a sequencer that communicates an atomic message stream to multiple different service instances. The service instances each process the messages from the message stream into a local queue. Each service instance also executes a state machine by reading messages from a queue and transitioning between states in the state machine while also performing one or more operations in connection with performing a distributed transaction.

This invention discloses a multi-source data intelligent connection management method, belonging to the field of data processing and information fusion technology. The method includes: deploying an intelligent agent program to listen to window message streams and reconstruct operation paths; synchronously capturing and parsing network requests to obtain structured business data; establishing a mapping relationship between operations and data through multimodal fusion parsing; filtering target data based on a no-code rule base; standardizing formats using a conversion engine; generating RPA instructions with the assistance of a large model; embedding a digital credential mechanism throughout the entire chain to ensure data integrity; and dynamically enhancing business logic through extension point injection. This invention aims to solve the problems of difficult data collaboration, high adaptation costs, and insufficient security caused by the lack of standard interfaces in heterogeneous business systems. It achieves high-precision, low-latency, and auditable automatic data collection, conversion, and entry across closed systems, significantly shortening the supplier access cycle and improving the efficiency of supply chain four-flow collaboration and system scalability.

A system for automatically tracking elements associated with a software application and for generating customizable graphs that capture the dependencies and message flows among the elements is provided. For a software application deployed in a cloud environment, configuration files used to deploy the elements of the software application are processed to extract information such as the name of each element and the names of messages used or produced by each element. This extracted data is combined with implicit data about the cloud environment such as data about elements used in the environment but that are not deployed using configuration files. Graph data is generated from the combined data that includes an object for each element and edges that represent message flows or dependencies between the elements. The graph data is used to render and display a graph of the software application.

The embodiment of the invention provides a heterogeneous cloud pool task processing method and device, equipment, a medium and a program product, and the method comprises the steps: obtaining a combined message flow which is a message queue containing a plurality of cloud pool architectures; distributing the message queues of various cloud pool architectures in the combined message flow to corresponding target message queues according to the architecture identifier, and generating a distribution result; loading metadata of each target message queue according to a distribution result, and generating a message task flow; and the message queue is issued to the plurality of cloud pools according to the message task flow, so that the system delay fluctuation is reduced.

The invention provides an anti-attack method and network equipment, and the method comprises the steps: a carrier level network address translation CGN creates an anti-attack table for an access user, and when the user meets an attack condition, the message flow of the user is processed according to an anti-attack strategy in the anti-attack table of the user. Through the method, the CGN aims at the attack prevention of the user level.

The invention relates to the technical field of automobile electronic communication, and provides a CAN message data flow direction visualization method and device and a computer program product, and the method comprises the steps: analyzing a database description file to obtain CAN message node information, and pre-constructing an electronic control unit mapping node based on the CAN message node information; analyzing the CAN message data file, and recording communication pair information of the CAN message based on the electronic control unit mapping node; determining electronic control units participating in communication and a center node with the maximum communication traffic according to the communication pair information, and determining a visual interface layout mode based on the number of the electronic control units; and according to the visual interface layout mode, the communication pair information and the central node, generating a visual animation representing the flow direction of the CAN message data. According to the method, abstract message data can be converted into visual animation demonstration, so that an engineer can visually check the flow direction of the message, error frame generation nodes are quickly positioned through highlight identifiers, and the efficiency of CAN network debugging and troubleshooting is remarkably improved.

Message processing is described, in which each of first and second computer systems have a message operator configured to process messages to manage a data structure having a state determined via the processing. The message operator of the first computer system is configured to reroute unprocessed messages to the message operator of the second computer system such that the message operator of the second computer system establishes an order of an input message stream and a current state of the data structure arising from the input message stream. The message operator of the second computer system is configured to, once the current state is established, send the messages of the input message stream to the message operator of the first computer system in accordance with the established order such that the current state of data structure is recreated by the message operator of the first computer system.

The invention provides a message mirroring method and device based on P4 hardware, and relates to the technical field of networks, and the method comprises the steps: switching a target message mirroring rule according to the current operation state of network equipment, the target message mirroring rule being a mirroring complete message rule or a mirroring partial message rule, the mirror image part message rule is configured with a message cutting mode; and according to the complete mirroring message rule, or the partial mirroring message rule and the message cutting mode configured therein, mirroring a message flowing through the network device to obtain mirroring message data, and sending the mirroring message data by using a specified port. According to the method, the network fluency degree and the observation effect on the mirror image message can be well considered.

The application discloses a message flow detection method and device, a storage medium and an electronic device. The method comprises the following steps: receiving a target detection request, wherein the target detection request is used for requesting to detect a target flow parameter of a target message with a target message feature transmitted by a network device; determining the target message parameter of the target message from a reference message parameter, and determining a target detection template used for detecting the target flow parameter from a reference detection template; generating a target detection configuration according to the target message parameter and the target detection template, wherein the target detection configuration records a detection process of detecting the target flow parameter of the target message with the target message feature; and detecting the message transmitted by the network device by using the target detection configuration. By using the technical solution, the problem of low detection performance of the message flow in the related art is solved.

A system for processing distributed transactions is provided. The system includes a sequencer that communicates an atomic message stream to multiple different service instances. The service instances each process the messages from the message stream into a local queue. Each service instance also executes a state machine by reading messages from a queue and transitioning between states in the state machine while also performing one or more operations in connection with performing a distributed transaction.

A modelling platform including at least one processor in communication with a memory device and a payment processor is provided. The at least one processor is configured to retrieve subsets of data from a transaction history database, derive training data sets from the subsets, apply model input data fields of each training data set as inputs to one or more machine learning models, and apply a machine learning algorithm to adjust parameters of the one or more machine learning models. The at least one processor is also configured to upload at least one trained machine learning model to an operational predictive model module, apply a stream of real-time authorization request messages as inputs to the at least one trained machine learning model, and transmit, to the payment processor in real-time or near real-time, values of at least one output obtained by applying the stream.

The application discloses a kind of based on the system and method for diagnosing abnormal delay of business message of multi-source data, it is related to business message analysis technical field, the present application is from at least two independent physical channel real-time acquisition business message stream, message content is parsed, and the business identifier generated by information source end is extracted;Analysis data quality evaluation index of each physical channel;Confirm reference channel based on data quality evaluation index;The message describing the same market event in different physical channels is matched and aligned, and the completeness index, jump point time difference and continuity difference index are analyzed;The completeness index, jump point time difference and continuity difference index are combined into hybrid feature pair;Known channel abnormal type label is injected into hybrid feature pair for classification training;The hybrid feature pair generated based on real-time running data is screened candidate abnormal channel;Positioning main abnormal channel leading to abnormality;And generate diagnosis report.The accuracy of data analysis is improved.

The invention provides a TSN redundant message elimination method and device, and the method comprises the steps: constructing an HASH + CAM flow table structure which takes a triple HASH table as a main part and a CAM table as an auxiliary part, and pre-storing a Key value of a TSN message flow and a corresponding flow ID number in the HASH + CAM flow table structure; obtaining a TSN message to be judged, extracting key information of the TSN message, and generating a Key type and a Key value based on the key information; querying in the triple HASH table according to the Key type and the Key value, and outputting a stream ID number corresponding to the Key value when the Key type and the Key value are hit; if the query of the triple HASH table is not hit, performing query in the CAM table according to the Key value, and outputting a stream ID number corresponding to the Key value when the query is hit; and confirming whether the TSN message is a redundant message or not according to the stream ID number, and discarding the redundant message after confirmation. Through efficient HASH table and CAM table design and optimized table item storage and access strategies, redundancy elimination of large-flow TSN messages under low clock frequency is realized.

Systems and methods for dynamically generating event cards from message streams is provided. A system receives a message of a sequence of messages from a content source, determine, from the message, the game condition of the game, compare the game condition with a previous game condition and determines events that occurred in the game based on the message and the comparison. The system can determine, for each event of the one or more events, an event type and individual player contributions of one or more players and assign, for each event of the one or more events, to each player that contributed in the event, a points allocation corresponding to the player's contribution in the event based on the points assignment policy and the event type. The system can generate event cards and transmit the event cards to emote devices according to a content filtering policy.