115 results about "Message structure" patented technology

The invention discloses an SSL VPN security gateway communication method fused with a post quantum cryptography technology. Comprising the following steps: S1, a client and a server respectively configure a serial hybrid signature digital certificate containing an SM2 algorithm and a serial hybrid encryption digital certificate containing a PQC algorithm, and a corresponding PQC encryption key pair private key, a PQC signature key pair private key, an SM2 encryption key pair private key and an SM2 signature key pair private key; s2, newly adding a hybrid algorithm password suite using an SM2 algorithm and a PQC algorithm in a password suite list of the client, and forcibly jacking the priority of the hybrid algorithm password suite; and S3, a message structure in a handshake protocol is transformed to use a series hybrid encrypted digital certificate to realize that PQC algorithm processing is added on the basis of an original national cryptographic algorithm to realize quantum key negotiation resistance. According to the method, the PQC algorithm is added on the basis of the original national secret algorithm, and the handshake protocol is transformed, so that anti-quantum-attack key agreement and identity authentication can be realized, the communication security is remarkably improved, and meanwhile, the interoperability with the standard SSL VPN is kept.

The invention discloses a secure transmission system based on a multimedia short message, and relates to the technical field of communication and network security, and the system comprises a protocol stack security reinforcement module which carries out the hierarchical reconstruction of an MMS protocol stack, comprises a preprocessing layer, is used for intercepting and filtering illegal characters, and verifies the legality of a message structure through a finite-state machine; the analysis layer is used for pre-judging memory requirements based on message types and lengths by adopting a dynamic memory allocation strategy; the execution layer is integrated with a null pointer checking mechanism, and the validity of a pointer is forcibly verified before a protocol stack calls a function; the encryption and signature module is used for carrying out end-to-end encryption on a message body and metadata by adopting a hybrid encryption algorithm and carrying out message integrity verification through a lightweight hash tree; and the vulnerability real-time monitoring module is embedded into an abnormal behavior detection model based on machine learning and is used for dynamically identifying memory occupation abnormity and illegal instruction calling high-risk operation when the protocol stack runs.

The invention provides a middleware system interacting with a soft bus based on a general publish-subscribe mode, which belongs to the technical field of communication, and comprises a protocol plug-in management module for dynamically loading a protocol plug-in; the soft bus interaction module receives the publishing / subscribing request message, creates a session service and calls a loaded protocol plug-in, and the protocol plug-in processes a data distribution service message; the message structure management module is connected with the protocol plug-in management module; the data mapping module is connected with the message structure management module; the session management module is respectively connected with the soft bus interaction module and the data mapping module; and the real-time scheduling engine is respectively connected with the protocol plug-in management module and the session management module. The method has the advantages that multiple protocols are supported through a plug-in mechanism, efficient interaction with a device soft bus is achieved, the soft bus is used for issuing capacity, session services are created, a general message structure is adopted, low-delay, high-reliability and efficient heterogeneous system communication is achieved, and the requirements of the Internet of Things and industrial control scenes are met.

The invention belongs to the technical field of power systems, and provides an integrated conversion method and system for a distributed photovoltaic multi-source heterogeneous protocol, and the method comprises the steps: receiving a first protocol message issued by a power grid master station, analyzing the structure of the message, and extracting a control parameter in the message; a register query message is sent to inverter address polling, and the type of a target photovoltaic inverter execution protocol is identified; generating a downlink communication message based on the identified target photovoltaic inverter execution protocol type in combination with the extracted control parameters; and sending the generated downlink message to the photovoltaic inverter, receiving returned state data, verifying the returned state data, packaging the verified data according to a first protocol format, and returning the packaged data to the power grid master station, thereby completing bidirectional protocol conversion and data interaction between the distributed photovoltaic equipment and the power grid master station. According to the invention, the integration efficiency of the low-voltage distributed photovoltaic system is improved, and reliable technical support is provided for the construction of a novel power system taking new energy as a main body.

The invention belongs to the technical field of cipher machines, and discloses an MCP protocol-based intelligent security service calling method, which comprises the following steps of: defining a standardized MCP message structure, and creating a mapping relation table of an MCP instruction and a cipher machine API (Application Program Interface); constructing an MCP server interface module, and receiving an MCP format request sent by the AI agent; analyzing the request to determine a password operation type; converting the operation type into a corresponding cipher machine API call based on the mapping relation table; aPI calling and transmitting parameters are sent to the server cipher machine; and receiving an operation result, packaging the operation result into a response message according to the MCP message structure, and returning the response message to the AI agent. Through a standardized message structure and a mapping mechanism, the calling process of the cipher machine is simplified, and the technical threshold is reduced; and meanwhile, seamless connection between the AI application and the cipher machine is realized through an interface module and a session management mechanism, so that the AI system can call the hardware-level cipher service on the premise of ensuring the safety.

The invention relates to the technical field of Internet of Things access, in particular to an auditable privacy protection authentication method based on Internet of Things access, which comprises the following steps: acquiring an uplink and downlink message extraction field set and verifying consistency, generating a mismatch identifier and screening a protocol candidate set if the uplink and downlink message extraction field set is not consistent, matching an optimal protocol based on the mismatch identifier and generating an instruction, and reconstructing a session collection feature construction vector to obtain a synchronization period, and predicting a trend judgment deviation adjustment period to generate a scheduling strategy. According to the invention, through uplink and downlink message structure field consistency verification and protocol matching score screening, rapid adaptation and dynamic identification of an authentication protocol are realized, a protocol vector model and similarity score are fused to improve multi-protocol authentication elasticity, and delay jitter is introduced to construct a communication dynamic vector. In combination with trend prediction and period adjustment, the key synchronization real-time adaptive ability is enhanced, key refresh is triggered when communication abnormity occurs initially, the key update sensitivity is improved, and the authentication accuracy of equipment access and the privacy protection durability are guaranteed.

The invention relates to the technical field of industrial internet security communication, and discloses a lightweight encryption method and system for an industrial real-time data stream, and the method comprises the following steps: intercepting an original data packet, and carrying out the deep packet detection to extract a network layer quintuple and application layer metadata; matching an optimal strategy in a strategy rule set according to the feature vector and generating a scheduling instruction; in response to the instruction, calling a corresponding pre-compilation password operation pipeline to carry out differential encryption processing on the load; and constructing a fixed-length security policy head containing the algorithm template identifier, and packaging and sending the fixed-length security policy head. According to the invention, task fragmentation is carried out by using a consistent Hash technology so as to ensure processing order-preserving. By adopting a lightweight message structure without handshake negotiation and a multi-level strategy scheduling mechanism, content-based fine-grained security protection is realized, and the communication requirements of low delay and high certainty are met while the security of industrial control data is ensured.

The invention discloses an instance generation method and device, equipment, a storage medium and a product, and relates to the technical field of automated testing, and the instance generation method comprises the following steps: obtaining a message standard, and analyzing the message standard to obtain a message list and a related basic rule, the message list comprises a set of all message types defined in the message standard; the message list is traversed, a message structure of each message in the message list is obtained through analysis, and the message structure comprises element rules of fields and a logic relation between the fields; generating a test case based on the related basic rule, and generating corresponding test data according to the test case; and filling the test data corresponding to each test case into a message template assembled based on the message structure to generate a test instance. The test efficiency is improved.

The invention discloses a communication message log desensitization system, method and device, a medium and a program product. The system comprises: a client adaptation module, which is used for receiving byte data and a message type identifier of an original communication message from a service system through an application program interface; the analysis rule base is used for storing message structure configuration information of various message formats; the processing function warehouse is used for registering analytic functions of various message formats; the analysis processing engine is used for analyzing the byte data into tree structure data based on the message structure configuration information and an analysis function; the desensitization rule base is used for storing desensitization rules of various message types; and the desensitization execution engine is used for synchronizing the traversed tree structure data and the desensitization rule base so as to position a target message domain, and desensitizing the target message domain to obtain desensitized structured log data. According to the embodiment of the invention, the method can desensitize the complex message log, and the desensitization process is low in invasion to a service system and is low in maintenance cost.

An application identifies a metadata field within a Remote Direct Memory Access (RDMA) message structure that can be used for timestamp injection. The application generates a high-resolution timestamp that captures a time when the RDMA message is sent, where the high-resolution timestamp has a first size that exceeds a size of the metadata field. The application compresses the high-resolution timestamp into a compressed timestamp having a second size that fits within the size of the metadata field, and injects the compressed timestamp into the metadata field of the RDMA message, the RDMA message sent from a sender host to a receiver host. The application calculates a one-way delay between the sender host and the receiver host using the compressed timestamp, and outputs a control signal based on the one-way delay.

The invention discloses an SSL VPN security gateway communication method based on a post quantum cryptography technology. The method comprises the following steps: S1, a client and a server respectively configure a pure PQC algorithm digital certificate containing a PQC encryption key pair and a signature key pair; s2, a PQC algorithm password suite using a pure PQC algorithm is newly added in a password suite list of the client, and the priority of the PQC algorithm password suite is forcibly set up; and S3, transforming a message structure in a handshake protocol to replace a digital certificate based on an SM2 cryptographic algorithm with a pure PQC algorithm digital certificate to realize anti-quantum key negotiation. By introducing a pure PQC algorithm digital certificate and transforming a handshake protocol, quantum attack resistant key negotiation and identity authentication can be realized, the communication security is remarkably improved, the existing SSL VPN specification is compatible, only PQC related fields are expanded, and the deployment cost is reduced.

The invention relates to the technical field of data processing, in particular to a system and method for realizing http interface configuration scheduling based on Redis, and the system comprises a message analysis module, an encryption module, a configuration management module, a front-end configuration module and a technical framework module. The method has the beneficial effects that path matching and mapping of parameters are realized in modes of jsonPath, Snack3, staxon and the like, so that matching of any node of a message structure is realized, and personalized processing of interface configuration is supported; meanwhile, the nullity of the parameters is verified, the types of the parameters are converted, compatibility of a local interface type and a third-party interface type is achieved, and the availability of fields is improved; and symmetric encryption, asymmetric encryption, field encryption and message encryption are supported, encryption configuration is provided for the whole process of the request, and the security of data is ensured. Individual configuration can meet richer service scenes, and modular configuration avoids coupling of internal functions of an interface before the interface, so that the later maintenance efficiency is improved.

The present invention relates to a data grid system for realizing data collaboration based on a private message structure, which includes a control plane, a data plane, and data packets; the control plane, the data plane, and the data packets are connected in sequence; the system performs data transfer collaboration in a decentralized manner of the data grid. The present invention changes the concept that a large amount of data must be centralized in traditional centralized data collaboration for use, focuses on the domain attributes of data, and allows each domain to participate in data collaboration and transfer to achieve the goal of data joint governance and decentralization.

The present disclosure relates to a vehicle message test method, system and storage medium. The method comprises: generating message test data, the message test data being used to test any message in a preset message set, the preset message set comprising all message subsets conforming to target standards at each stage, the target standards being cooperative intelligent transport systems, vehicle communication system application layer and application data interaction standards; sending the message test data to a device under test to trigger the device under test to send the message test data to a second test device based on an application under test, the second test device being used to transparently transmit received data to the first test device; and obtaining a test result corresponding to the application under test in the device under test based on the message test data and data received from the second test device. The present disclosure can realize full-coverage automatic testing of the message set and message structure of the standards in the field of cooperative intelligent transport systems.

The application provides a data acquisition method, a data acquisition device and a safety monitoring system. The method comprises the following steps: acquiring a plurality of real-time monitoring messages, and converting the real-time monitoring messages into a preset format to obtain a plurality of target monitoring messages, wherein the preset format at least comprises a message name and a message structure; determining a plurality of target data element standards according to the plurality of target monitoring messages, one target monitoring message corresponds to one target data element standard, and one target data element standard corresponds to at least one target monitoring message; constructing a plurality of data elements according to the target monitoring messages and the corresponding target data element standards, one target monitoring message at least corresponds to one data element, and the data element is used for unifying the name and format of the data in the target monitoring message; and storing each data element in a corresponding database. The method solves the problem that, in the prior art, due to different manufacturers of monitoring sub-stations, the data naming and data structure are not unified, so that it is difficult to perform comprehensive analysis on multiple disasters.

The invention discloses a description language tool for a protocol fuzz test, and the tool comprises a PDL module which is used for defining a protocol message structure, a session state, and association between fields; the analysis module is used for analyzing the PDL definition into an intermediate representation; the fuzzy test engine is used for generating a use case by adopting a three-stage coding assembly line according to the intermediate representation and the session context; and the execution module is used for sending the use case and receiving the response. The PDL of the tool supports bit-level precision, a composite structure and an inheritance mechanism, a semantic perception variator is arranged in the fuzzy test engine, and consistency of use case generation and response analysis is achieved through single-definition bidirectional semantics. Accurate modeling and dynamic simulation of a complex protocol are realized through a unified description language, and the efficiency, the coverage rate and the maintainability of fuzzy testing are remarkably improved.

The invention relates to the technical field of dust explosion prevention in the textile industry, in particular to a dust explosion prevention method and system in the textile industry and a storage medium. The explosion-proof method comprises the steps that a bus communication architecture based on a two-wire system power line carrier is constructed, a multi-host communication mode adopting a private protocol is established between a controller and a plurality of detection probes, and a message structure of the private protocol comprises a function code field, a number field, a data field and a CRC verification field, wherein the function code field definition comprises 01H alarm coding, 02H parameter modification coding and 03H heartbeat request coding. According to the invention, a multi-host communication architecture based on a private protocol is constructed, dynamic distribution of bus control right and dust flow feature detection are deeply coupled, and a zero-latency master-slave switching mechanism when an alarm event is triggered is realized.

The invention discloses an equipment communication management system and a battery formation test system, and belongs to the technical field of equipment communication. The invention provides a modularized and configurable equipment communication management system, which is characterized in that a collaborative architecture of a configuration file receiving module, a command and data routing module and an equipment interaction module is introduced, and a dynamic configuration file containing equipment identification information, a communication protocol type and a request / response message structure definition is combined; uniform adaptation of various industrial communication protocols is realized. A request message structure definition comprises a sending mode parameter, a sending frequency parameter and a sending interval parameter, so that the system can flexibly support complex interaction modes such as periodic communication, single request or limited times of polling according to configuration. The equipment communication management system provided by the invention comprehensively supports a complex communication scene, greatly improves the equipment access efficiency, enhances the system compatibility and expansibility, and reduces the maintenance cost and the firmware version fragmentation risk.

The invention provides an agent communication method, a readable storage medium and electronic equipment, and is applied to the technical field of software. The method comprises the following steps: when a target message sent by a source agent in a plurality of agents is received, caching the target message into a message queue, extracting the target message from the message queue, determining a target agent for processing the target message from other agents based on the extracted target message, and sending the target message to the target agent. In the method, each agent communicates through a message structure and a communication interface, so that each agent can indirectly communicate through a communication framework without protocol conversion, protocol conversion in a communication process can be avoided, consumption of hardware resources and time is reduced, and the communication efficiency is improved. Therefore, the running efficiency of a software system can be improved.

An application identifies a metadata field within a Remote Direct Memory Access (RDMA) message structure that can be used for timestamp injection. The application generates a high-resolution timestamp that captures a time when the RDMA message is sent, where the high-resolution timestamp has a first size that exceeds a size of the metadata field. The application compresses the high-resolution timestamp into a compressed timestamp having a second size that fits within the size of the metadata field, and injects the compressed timestamp into the metadata field of the RDMA message, the RDMA message sent from a sender host to a receiver host. The application calculates a one-way delay between the sender host and the receiver host using the compressed timestamp, and outputs a control signal based on the one-way delay.

An apparatus and method for incorporating remote attestation into a standardized secure channel handshake without modifying existing message structures or existing secure channel implementations. At a client side, the method comprises: generating a copy based on an exchanged secure channel message; collecting attestation measurements representing a current state of the communication device; calculating an attestation private key based on a device private key and the hash of the attestation measurement; generating an attestation signature by signing the copy using the calculated attestation private key; the attestation signature is sent over a computer network. At a server side, the method comprises the following steps: extracting a public key from a received identity certificate; generating a copy based on the exchanged secure channel message; calculating an attestation public key based on the extracted public key, a predefined reference hash, and the set of generator points; and verifying the attestation signature based on the attestation public key.

The invention discloses an SRv6 policy state monitoring method and device, equipment and a storage medium, which are applied to the technical field of networks, and comprise the following steps: acquiring an SRv6 policy route reported by the equipment in real time based on the change of a segment list state; analyzing the SRv6 policy routing to obtain policy path control information, and packaging the SRv6 policy routing into a message structural body in a target format based on the policy path control information; and determining a segment list based on a segment list key value in the policy path control information carried by the message structure body, determining the state of the segment list, and determining the state of the SRv6 policy based on the state of the segment list corresponding to the SRv6 policy routing. The SRv6 policy routing is reported in real time based on the change of the segment list state, the state of the SRv6 policy is monitored in real time, all information of the SRv6 policy is not carried, only policy path control information is carried, resource consumption is reduced, and therefore the SRv6 policy state monitoring efficiency is improved.

The invention discloses a user-defined construction method for an ACARS message, and the method comprises the steps: configuring an ACARS message structure of each system in an airplane, so as to obtain input parameter configuration information, triggering rule configuration information, message style configuration information, and state machine configuration information; generating an input parameter custom structure of the ACARS message of the corresponding system based on the input parameter configuration information; generating a triggering rule custom structure of the ACARS message of the corresponding system based on the triggering rule configuration information; generating a message style custom structure of the ACARS message of the corresponding system based on the message style configuration information; and indexing the input parameter custom structure, the trigger rule custom structure and the message style custom structure based on the state machine configuration information to generate an ACARS message structure of the corresponding system. The invention further discloses a user-defined construction device for the ACARS message and a computer readable medium.

The application discloses a message processing method, device and equipment, a storage medium and a program product. The application relates to the technical field of communication. The method comprises the following steps: determining a field path corresponding to a to-be-analyzed message according to a corresponding relationship between a message identifier and the field path in a first configuration file; determining a structure identifier corresponding to the field path according to a corresponding relationship between the field path and the structure identifier in the first configuration file; extracting a corresponding code paragraph from the to-be-analyzed message according to the field path, so as to obtain target code; determining at least one sub-field path corresponding to the structure identifier according to a second configuration file, the second configuration file being configured with a corresponding relationship between the structure identifier and the sub-field path; and taking attribute data extracted from the target code based on the at least one sub-field path as a field analysis result of a to-be-analyzed field corresponding to the field path. The technical scheme of the application can realize analysis and processing of messages with different message structures.

This application discloses a ship-to-shore information communication method and apparatus, relating to the technical field of coastal communication. The method includes: responding to receiving an encrypted data packet from a ship-based or shore-based IPSec security gateway device; if the packet's message structure is an ESP protocol message, then searching for an encryption algorithm and security specification according to the security parameter index; after verifying the integrity of the ESP message in the data packet according to the encryption algorithm and security specification, detecting whether the data packet is a replay attack; if the data packet is not a replay attack, then decrypting the data packet in reverse according to the encryption algorithm and security specification, obtaining and sending the original IP data to the core network layer for subsequent processing and forwarding. This method ensures the integrity and privacy of transmitted data in high-security scenarios such as ship-to-shore communication.

The application discloses a description language tool for protocol fuzz testing, comprising a PDL module for defining protocol message structure, session state and inter-field association, an analysis module for analyzing the PDL definition into an intermediate representation, a fuzz testing engine for generating a use case by adopting a three-stage encoding pipeline according to the intermediate representation and session context, and an execution module for sending the use case and receiving a response. The PDL of the tool supports bit-level precision, composite structure and inheritance mechanism, the fuzz testing engine is internally provided with a semantic perception variator, and a single definition is used to realize bidirectional semantics, so that the consistency of use case generation and response analysis is realized. The tool realizes accurate modeling and dynamic simulation of a complex protocol through a unified description language, and significantly improves the efficiency, coverage and maintainability of the fuzz testing.

The kernel audit message transmission method based on the structure body comprises the following steps: determining a core audit field set; designing an audit message structure body with member variables corresponding to the fields in the core audit field set one by one; when an audit event is generated by a kernel audit subsystem, extracting corresponding audit field information from a kernel data structure and filling the audit message structure body; transmitting the filled audit message structure body to a parser of a user state audit daemon; and directly accessing the member variables in the audit message structure body by the parser to obtain the audit field information, so as to realize direct memory access of the structured field. Through the combination of the structured design and the zero-copy technology, the efficiency bottleneck of the traditional Linux kernel audit system in a high-performance scene is solved, meanwhile, the flexible extension mechanism meets the complex audit demand, and the method can be widely applied to scenes with strict requirements for security audit, such as server clusters and cloud native environments.

The invention relates to the technical field of security communication protocols of the Internet of Things, in particular to an automatic protocol identification method used in an environment of the Internet of Things, which comprises the following steps of: acquiring a difference value between a message index and frequency, aggregating a field section to generate a group number, matching a structure offset to calculate a fluctuation quantity, and identifying a period hopping field to output an identification result. According to the method, the distribution characteristics and the structure change trend of byte sections can be effectively described by performing difference analysis on repetition frequency and density change of each byte position in a communication message and establishing a field aggregation relationship, and the structure stability and drift fields in the message are extracted and the offset amplitude of the fields is quantized, so that the communication efficiency is improved. A message structure consistency judgment mechanism is established, a comprehensive evaluation mode of periodic change and structure stability is formed in combination with analysis of a periodic field byte change range and frequency hopping frequency, and field position mapping and periodic characteristics of a newly received message are subjected to matching judgment, so that a message structure consistency judgment result is obtained. Accurate classification and efficient identification of the dynamic change communication data are realized.

The invention discloses a two-way communication method for a digital twin system and PLC (Programmable Logic Controller) equipment in a Linux environment, which comprises the following steps of: establishing a secure communication channel based on TCP (Transmission Control Protocol) and TLS (Transport Layer Server) encryption and two-way authentication, defining an application layer message structure, and finishing initial secure link connection; developing, integrating and packaging a UE5 plug-in with a communication function, and providing visual blueprint nodes to configure PLC equipment parameters and process message serialization; based on a secure communication channel and a UE5 plug-in, real-time bidirectional data interaction is executed between the digital twin system and PLC equipment, and connection is maintained through heartbeat detection and automatic reconnection; and constructing the UE5 project containing the plug-in into a Linux executable file through a cross compiling tool chain, and deploying and configuring the Linux executable file. According to the invention, a safe, real-time and easy-to-use complete solution for bidirectional communication between the digital twin system and the PLC equipment in the Linux environment with good expansibility is formed while the requirements of localization and autonomous controllability are met.

The application discloses a system login method and device, equipment and medium, and relates to the technical field of computers. The method is applied to a preset verification tool and comprises the following steps: scanning a current login identifier to obtain a corresponding semantic message structure; when a login request is detected, performing ECDSA signature on the message structure by using a preset private key to obtain a corresponding signature value; synchronizing the signature value to a block chain node, so that a server verifies the signature value obtained from the block chain node, obtains corresponding address information, determines a target user identity corresponding to the address information from a user identity library bound with the system in advance, and then sends a login token corresponding to the target user identity to a front end. Through the above scheme, the login identifier is scanned to obtain the semantic message structure, and the ECDSA signature verification is performed, so that more secure and more convenient system login can be realized.