159 results about "Message structure" patented technology

The invention discloses an SSL VPN security gateway communication method fused with a post quantum cryptography technology. Comprising the following steps: S1, a client and a server respectively configure a serial hybrid signature digital certificate containing an SM2 algorithm and a serial hybrid encryption digital certificate containing a PQC algorithm, and a corresponding PQC encryption key pair private key, a PQC signature key pair private key, an SM2 encryption key pair private key and an SM2 signature key pair private key; s2, newly adding a hybrid algorithm password suite using an SM2 algorithm and a PQC algorithm in a password suite list of the client, and forcibly jacking the priority of the hybrid algorithm password suite; and S3, a message structure in a handshake protocol is transformed to use a series hybrid encrypted digital certificate to realize that PQC algorithm processing is added on the basis of an original national cryptographic algorithm to realize quantum key negotiation resistance. According to the method, the PQC algorithm is added on the basis of the original national secret algorithm, and the handshake protocol is transformed, so that anti-quantum-attack key agreement and identity authentication can be realized, the communication security is remarkably improved, and meanwhile, the interoperability with the standard SSL VPN is kept.

The invention discloses a secure transmission system based on a multimedia short message, and relates to the technical field of communication and network security, and the system comprises a protocol stack security reinforcement module which carries out the hierarchical reconstruction of an MMS protocol stack, comprises a preprocessing layer, is used for intercepting and filtering illegal characters, and verifies the legality of a message structure through a finite-state machine; the analysis layer is used for pre-judging memory requirements based on message types and lengths by adopting a dynamic memory allocation strategy; the execution layer is integrated with a null pointer checking mechanism, and the validity of a pointer is forcibly verified before a protocol stack calls a function; the encryption and signature module is used for carrying out end-to-end encryption on a message body and metadata by adopting a hybrid encryption algorithm and carrying out message integrity verification through a lightweight hash tree; and the vulnerability real-time monitoring module is embedded into an abnormal behavior detection model based on machine learning and is used for dynamically identifying memory occupation abnormity and illegal instruction calling high-risk operation when the protocol stack runs.

The embodiment of the invention provides a power grid intelligent equipment data distributed processing and real-time pushing method and system, and belongs to the technical field of power grid data processing. The method comprises the following steps: collecting electric power data, and transmitting the data to an Internet of Things gateway; the Internet of Things gateway directly stores the collected data into the message queue without processing based on a publishing attribute mode of the message queue; persistently storing the relationship between the collected data and the gateway register point location in a relational database, and pre-loading associated data in the relational database into a cache database Redis; associating the obtained data with the mapping relation in the Redis cache, and packaging a unified update message structure; according to the method, updating messages are pushed to different themes, and the system pushing pressure is reasonably distributed to all pushing services by appointing the themes subscribed by different pushing services. According to the method, the operation data of the power system can be timely and effectively acquired, and real-time interaction and updating with the client can be realized.

The invention provides a middleware system interacting with a soft bus based on a general publish-subscribe mode, which belongs to the technical field of communication, and comprises a protocol plug-in management module for dynamically loading a protocol plug-in; the soft bus interaction module receives the publishing / subscribing request message, creates a session service and calls a loaded protocol plug-in, and the protocol plug-in processes a data distribution service message; the message structure management module is connected with the protocol plug-in management module; the data mapping module is connected with the message structure management module; the session management module is respectively connected with the soft bus interaction module and the data mapping module; and the real-time scheduling engine is respectively connected with the protocol plug-in management module and the session management module. The method has the advantages that multiple protocols are supported through a plug-in mechanism, efficient interaction with a device soft bus is achieved, the soft bus is used for issuing capacity, session services are created, a general message structure is adopted, low-delay, high-reliability and efficient heterogeneous system communication is achieved, and the requirements of the Internet of Things and industrial control scenes are met.

The invention belongs to the technical field of power systems, and provides an integrated conversion method and system for a distributed photovoltaic multi-source heterogeneous protocol, and the method comprises the steps: receiving a first protocol message issued by a power grid master station, analyzing the structure of the message, and extracting a control parameter in the message; a register query message is sent to inverter address polling, and the type of a target photovoltaic inverter execution protocol is identified; generating a downlink communication message based on the identified target photovoltaic inverter execution protocol type in combination with the extracted control parameters; and sending the generated downlink message to the photovoltaic inverter, receiving returned state data, verifying the returned state data, packaging the verified data according to a first protocol format, and returning the packaged data to the power grid master station, thereby completing bidirectional protocol conversion and data interaction between the distributed photovoltaic equipment and the power grid master station. According to the invention, the integration efficiency of the low-voltage distributed photovoltaic system is improved, and reliable technical support is provided for the construction of a novel power system taking new energy as a main body.

The invention belongs to the technical field of cipher machines, and discloses an MCP protocol-based intelligent security service calling method, which comprises the following steps of: defining a standardized MCP message structure, and creating a mapping relation table of an MCP instruction and a cipher machine API (Application Program Interface); constructing an MCP server interface module, and receiving an MCP format request sent by the AI agent; analyzing the request to determine a password operation type; converting the operation type into a corresponding cipher machine API call based on the mapping relation table; aPI calling and transmitting parameters are sent to the server cipher machine; and receiving an operation result, packaging the operation result into a response message according to the MCP message structure, and returning the response message to the AI agent. Through a standardized message structure and a mapping mechanism, the calling process of the cipher machine is simplified, and the technical threshold is reduced; and meanwhile, seamless connection between the AI application and the cipher machine is realized through an interface module and a session management mechanism, so that the AI system can call the hardware-level cipher service on the premise of ensuring the safety.

The invention relates to the technical field of Internet of Things access, in particular to an auditable privacy protection authentication method based on Internet of Things access, which comprises the following steps: acquiring an uplink and downlink message extraction field set and verifying consistency, generating a mismatch identifier and screening a protocol candidate set if the uplink and downlink message extraction field set is not consistent, matching an optimal protocol based on the mismatch identifier and generating an instruction, and reconstructing a session collection feature construction vector to obtain a synchronization period, and predicting a trend judgment deviation adjustment period to generate a scheduling strategy. According to the invention, through uplink and downlink message structure field consistency verification and protocol matching score screening, rapid adaptation and dynamic identification of an authentication protocol are realized, a protocol vector model and similarity score are fused to improve multi-protocol authentication elasticity, and delay jitter is introduced to construct a communication dynamic vector. In combination with trend prediction and period adjustment, the key synchronization real-time adaptive ability is enhanced, key refresh is triggered when communication abnormity occurs initially, the key update sensitivity is improved, and the authentication accuracy of equipment access and the privacy protection durability are guaranteed.

The invention provides a DDS-based simulation test method and device, a storage medium and an electronic device.The method comprises the steps that a source data distribution service DDS message sent by a to-be-tested service module is monitored; a pre-configured relation configuration table is read, and the relation configuration table is used for storing a first mapping relation between the source DDS message and the message structure of the response DDS message and a second mapping relation between the message structure and the test data; simulating and arranging a response DDS message of the source DDS message based on the relationship configuration table; and sending a response DDS message to the service module. Through the embodiment of the invention, the technical problem that the test data cannot be flexibly provided for the to-be-tested service module in the test process in the related technology is solved, and the flexible self-definition of the test flow and the test data in the DDS message simulation test process is realized.

The present application discloses a cryptography device management method and management platform. The method comprises: on the basis of a secure channel protocol and a predefined protocol message structure, performing information exchange with a cryptography device to establish a secure channel and negotiate a session key; and within the validity period of the secure channel, on the basis of the session key and the predefined protocol message structure, performing management and state monitoring on attributes of a managed object corresponding to each cryptography device, wherein the predefined protocol message structure comprises a message header, a message data part, and a message signature part which are described by using a JSON object, and information packaged by the protocol message structure is management monitoring configuration parameters of the cryptography device. According to the present application, a message structure of a cryptography device management protocol in REST style is predefined on the basis of an HTTP, thereby improving the usability and compatibility of the cryptography device management method, and satisfying the security requirements.

The embodiment of the invention provides an ARP spoofing defense method and system, electronic equipment and a storage medium, and belongs to the technical field of communication security. After receiving a first ARP request from a second communication device, the first communication device analyzes the first ARP request to obtain a source IP address and a source MAC address contained in the first ARP request, generates a second ARP request of a free ARP message structure according to the source IP address and the source MAC address, determines the source MAC address as a destination MAC address, and unicast the second ARP request according to the destination MAC address. The first ARP request is sent to the source MAC address to monitor whether a second request response of the second ARP request is received or not, if the second request response is received, the mapping relation between the source IP address and the source MAC address is bound, otherwise, legal equipment corresponding to the source IP address and the source MAC address does not exist in the network, and the first ARP request is an ARP spoofing packet, so that the ARP spoofing packet is recognized in time, and the user experience is improved. And the security of the communication network is improved.

The invention relates to the field of charging piles, in particular to a method and system for enabling a four-wheel charging pile operation platform to be compatible with a two-wheel charging pile and a medium. According to the method, a protocol adaptation module is designed, the module comprises a protocol analyzer, a protocol mapping table and a data converter, the protocol analyzer is used for analyzing message structures of a two-round charging pile communication protocol and a four-round charging pile operation platform protocol, and core data and control information transmitted in the communication process are obtained; the protocol mapping table sets mapping rules for different types of pile charging protocols and provides a default value filling mechanism to configure all necessary fields, and the data converter performs format conversion on mapped data subjected to protocol analysis, so that the four-round charging pile operation platform receives and sends communication data of two-round charging piles in a two-way manner. And normal communication interaction is completed. Through the protocol adaptation module, the four-wheel charging pile operation platform can be compatible with the two-wheel charging pile, and unified management of different types of equipment is achieved.

The invention relates to the technical field of industrial internet security communication, and discloses a lightweight encryption method and system for an industrial real-time data stream, and the method comprises the following steps: intercepting an original data packet, and carrying out the deep packet detection to extract a network layer quintuple and application layer metadata; matching an optimal strategy in a strategy rule set according to the feature vector and generating a scheduling instruction; in response to the instruction, calling a corresponding pre-compilation password operation pipeline to carry out differential encryption processing on the load; and constructing a fixed-length security policy head containing the algorithm template identifier, and packaging and sending the fixed-length security policy head. According to the invention, task fragmentation is carried out by using a consistent Hash technology so as to ensure processing order-preserving. By adopting a lightweight message structure without handshake negotiation and a multi-level strategy scheduling mechanism, content-based fine-grained security protection is realized, and the communication requirements of low delay and high certainty are met while the security of industrial control data is ensured.

The invention discloses an instance generation method and device, equipment, a storage medium and a product, and relates to the technical field of automated testing, and the instance generation method comprises the following steps: obtaining a message standard, and analyzing the message standard to obtain a message list and a related basic rule, the message list comprises a set of all message types defined in the message standard; the message list is traversed, a message structure of each message in the message list is obtained through analysis, and the message structure comprises element rules of fields and a logic relation between the fields; generating a test case based on the related basic rule, and generating corresponding test data according to the test case; and filling the test data corresponding to each test case into a message template assembled based on the message structure to generate a test instance. The test efficiency is improved.

The invention relates to the technical field of computers, and discloses a business object information query method and device, computer equipment and a storage medium, and the method comprises the following steps: storing detail information of a business object in a first local cache; wherein the detailed information comprises identification information of the business object; sorting the identification information of the business objects to obtain sorted identification information; storing the sorted identification information in a second local cache; wherein the first local cache is different from the second local cache; traversing the sorted identification information to obtain target identification information; obtaining target detail information corresponding to the target identification information from a first local cache; returning the target detail information according to the target message structure; wherein the target message structure comprises a value list and a key list. Therefore, by optimizing the data storage and query process, the method for improving the business object information query efficiency is realized.

The invention discloses a communication message log desensitization system, method and device, a medium and a program product. The system comprises: a client adaptation module, which is used for receiving byte data and a message type identifier of an original communication message from a service system through an application program interface; the analysis rule base is used for storing message structure configuration information of various message formats; the processing function warehouse is used for registering analytic functions of various message formats; the analysis processing engine is used for analyzing the byte data into tree structure data based on the message structure configuration information and an analysis function; the desensitization rule base is used for storing desensitization rules of various message types; and the desensitization execution engine is used for synchronizing the traversed tree structure data and the desensitization rule base so as to position a target message domain, and desensitizing the target message domain to obtain desensitized structured log data. According to the embodiment of the invention, the method can desensitize the complex message log, and the desensitization process is low in invasion to a service system and is low in maintenance cost.

An application identifies a metadata field within a Remote Direct Memory Access (RDMA) message structure that can be used for timestamp injection. The application generates a high-resolution timestamp that captures a time when the RDMA message is sent, where the high-resolution timestamp has a first size that exceeds a size of the metadata field. The application compresses the high-resolution timestamp into a compressed timestamp having a second size that fits within the size of the metadata field, and injects the compressed timestamp into the metadata field of the RDMA message, the RDMA message sent from a sender host to a receiver host. The application calculates a one-way delay between the sender host and the receiver host using the compressed timestamp, and outputs a control signal based on the one-way delay.

The invention provides a Qt-based serialized extensible control system communication protocol implementation method, which comprises the following contents: a universal message structure is introduced, and the message structure comprises two parts, namely a message header and a message body, the message header is composed of a frame header, a timestamp, a frame number, a message body length, the number of data segments, a message body CRC check and a reserved field; serializing the message header and the message body, and splicing the message header and the message body into message data of a QByteArray type on the basis of the serialized message header and message body; efficient deserialization processing is carried out, and the process comprises the processes of message header data analysis, message body data receiving and data segment deserialization. According to the invention, a universal message structure is introduced and can be flexibly applied to communication among various control systems, so that the flexibility and universality of a communication protocol are improved; and an efficient serialization and analysis method is adopted, so that the data transmission efficiency and the communication stability are effectively improved.

The invention discloses an SSL VPN security gateway communication method based on a post quantum cryptography technology. The method comprises the following steps: S1, a client and a server respectively configure a pure PQC algorithm digital certificate containing a PQC encryption key pair and a signature key pair; s2, a PQC algorithm password suite using a pure PQC algorithm is newly added in a password suite list of the client, and the priority of the PQC algorithm password suite is forcibly set up; and S3, transforming a message structure in a handshake protocol to replace a digital certificate based on an SM2 cryptographic algorithm with a pure PQC algorithm digital certificate to realize anti-quantum key negotiation. By introducing a pure PQC algorithm digital certificate and transforming a handshake protocol, quantum attack resistant key negotiation and identity authentication can be realized, the communication security is remarkably improved, the existing SSL VPN specification is compatible, only PQC related fields are expanded, and the deployment cost is reduced.

The invention relates to the technical field of data processing, in particular to a system and method for realizing http interface configuration scheduling based on Redis, and the system comprises a message analysis module, an encryption module, a configuration management module, a front-end configuration module and a technical framework module. The method has the beneficial effects that path matching and mapping of parameters are realized in modes of jsonPath, Snack3, staxon and the like, so that matching of any node of a message structure is realized, and personalized processing of interface configuration is supported; meanwhile, the nullity of the parameters is verified, the types of the parameters are converted, compatibility of a local interface type and a third-party interface type is achieved, and the availability of fields is improved; and symmetric encryption, asymmetric encryption, field encryption and message encryption are supported, encryption configuration is provided for the whole process of the request, and the security of data is ensured. Individual configuration can meet richer service scenes, and modular configuration avoids coupling of internal functions of an interface before the interface, so that the later maintenance efficiency is improved.

The present invention relates to a data grid system for realizing data collaboration based on a private message structure, which includes a control plane, a data plane, and data packets; the control plane, the data plane, and the data packets are connected in sequence; the system performs data transfer collaboration in a decentralized manner of the data grid. The present invention changes the concept that a large amount of data must be centralized in traditional centralized data collaboration for use, focuses on the domain attributes of data, and allows each domain to participate in data collaboration and transfer to achieve the goal of data joint governance and decentralization.

The present disclosure relates to a vehicle message test method, system and storage medium. The method comprises: generating message test data, the message test data being used to test any message in a preset message set, the preset message set comprising all message subsets conforming to target standards at each stage, the target standards being cooperative intelligent transport systems, vehicle communication system application layer and application data interaction standards; sending the message test data to a device under test to trigger the device under test to send the message test data to a second test device based on an application under test, the second test device being used to transparently transmit received data to the first test device; and obtaining a test result corresponding to the application under test in the device under test based on the message test data and data received from the second test device. The present disclosure can realize full-coverage automatic testing of the message set and message structure of the standards in the field of cooperative intelligent transport systems.

The application provides a data acquisition method, a data acquisition device and a safety monitoring system. The method comprises the following steps: acquiring a plurality of real-time monitoring messages, and converting the real-time monitoring messages into a preset format to obtain a plurality of target monitoring messages, wherein the preset format at least comprises a message name and a message structure; determining a plurality of target data element standards according to the plurality of target monitoring messages, one target monitoring message corresponds to one target data element standard, and one target data element standard corresponds to at least one target monitoring message; constructing a plurality of data elements according to the target monitoring messages and the corresponding target data element standards, one target monitoring message at least corresponds to one data element, and the data element is used for unifying the name and format of the data in the target monitoring message; and storing each data element in a corresponding database. The method solves the problem that, in the prior art, due to different manufacturers of monitoring sub-stations, the data naming and data structure are not unified, so that it is difficult to perform comprehensive analysis on multiple disasters.

The invention discloses a description language tool for a protocol fuzz test, and the tool comprises a PDL module which is used for defining a protocol message structure, a session state, and association between fields; the analysis module is used for analyzing the PDL definition into an intermediate representation; the fuzzy test engine is used for generating a use case by adopting a three-stage coding assembly line according to the intermediate representation and the session context; and the execution module is used for sending the use case and receiving the response. The PDL of the tool supports bit-level precision, a composite structure and an inheritance mechanism, a semantic perception variator is arranged in the fuzzy test engine, and consistency of use case generation and response analysis is achieved through single-definition bidirectional semantics. Accurate modeling and dynamic simulation of a complex protocol are realized through a unified description language, and the efficiency, the coverage rate and the maintainability of fuzzy testing are remarkably improved.

The invention relates to the technical field of dust explosion prevention in the textile industry, in particular to a dust explosion prevention method and system in the textile industry and a storage medium. The explosion-proof method comprises the steps that a bus communication architecture based on a two-wire system power line carrier is constructed, a multi-host communication mode adopting a private protocol is established between a controller and a plurality of detection probes, and a message structure of the private protocol comprises a function code field, a number field, a data field and a CRC verification field, wherein the function code field definition comprises 01H alarm coding, 02H parameter modification coding and 03H heartbeat request coding. According to the invention, a multi-host communication architecture based on a private protocol is constructed, dynamic distribution of bus control right and dust flow feature detection are deeply coupled, and a zero-latency master-slave switching mechanism when an alarm event is triggered is realized.

The invention discloses a P4-based medical information intelligent hierarchical control system and method, and the method comprises the steps: S1, analyzing a transmitted HL7 message, and extracting key information, including an MAC address, an IP address and HL7 user information, from the HL7 message by an analysis module in a data plane; s2, executing an access control function, and matching by using a white list and a black list in the access control form; s3, allocating the bandwidth based on the emergency degree, matching the emergency level form, and obtaining the priority of the corresponding bandwidth allocation; s4, executing a dynamic encryption strategy, and distinguishing the users with different permission levels through specified fields in the MAC address, the IP address and the HL7 information; and S5, performing HL7 data encapsulation to ensure that the message structure is complete, and recalculating the checksum of the message by a data plane to ensure that the message conforms to a protocol specification. Intelligent identification, dynamic priority control and privacy protection can be carried out on the HL7 message, and the requirements of medical scenes for high efficiency, safety and interconnection and intercommunication are met.

The invention discloses an equipment communication management system and a battery formation test system, and belongs to the technical field of equipment communication. The invention provides a modularized and configurable equipment communication management system, which is characterized in that a collaborative architecture of a configuration file receiving module, a command and data routing module and an equipment interaction module is introduced, and a dynamic configuration file containing equipment identification information, a communication protocol type and a request / response message structure definition is combined; uniform adaptation of various industrial communication protocols is realized. A request message structure definition comprises a sending mode parameter, a sending frequency parameter and a sending interval parameter, so that the system can flexibly support complex interaction modes such as periodic communication, single request or limited times of polling according to configuration. The equipment communication management system provided by the invention comprehensively supports a complex communication scene, greatly improves the equipment access efficiency, enhances the system compatibility and expansibility, and reduces the maintenance cost and the firmware version fragmentation risk.

The invention provides an agent communication method, a readable storage medium and electronic equipment, and is applied to the technical field of software. The method comprises the following steps: when a target message sent by a source agent in a plurality of agents is received, caching the target message into a message queue, extracting the target message from the message queue, determining a target agent for processing the target message from other agents based on the extracted target message, and sending the target message to the target agent. In the method, each agent communicates through a message structure and a communication interface, so that each agent can indirectly communicate through a communication framework without protocol conversion, protocol conversion in a communication process can be avoided, consumption of hardware resources and time is reduced, and the communication efficiency is improved. Therefore, the running efficiency of a software system can be improved.

An application identifies a metadata field within a Remote Direct Memory Access (RDMA) message structure that can be used for timestamp injection. The application generates a high-resolution timestamp that captures a time when the RDMA message is sent, where the high-resolution timestamp has a first size that exceeds a size of the metadata field. The application compresses the high-resolution timestamp into a compressed timestamp having a second size that fits within the size of the metadata field, and injects the compressed timestamp into the metadata field of the RDMA message, the RDMA message sent from a sender host to a receiver host. The application calculates a one-way delay between the sender host and the receiver host using the compressed timestamp, and outputs a control signal based on the one-way delay.

The present invention relates to the field of automobile software technology, and specifically provides a vehicle-side service communication configuration method, system, device and storage medium. It includes obtaining vehicle demand information to configure the usage scenarios and functions of vehicle-side services, and building a service-oriented architecture (SOA) service model of vehicle-side services based on this. The SOA service model configures the domain identity (DomainID) value and the topic (Topic) unit parameters based on the data distribution service (DDS) communication protocol. And the DomainID value and the Topic unit parameters are set as communication parameters between functional domains. The code automatic generation module of the vehicle-side code generator generates the communication code of the vehicle-side application corresponding to each functional domain according to the communication parameters. The present invention makes the communication between services more flexible by modeling the vehicle-side function SOA service, DDS becomes a service component, and the service interface communication is configured. On the basis of the DDS standard, a unified message structure is defined and the data transmission under the same topic is achieved through the publish / subscribe communication model.

An apparatus and method for incorporating remote attestation into a standardized secure channel handshake without modifying existing message structures or existing secure channel implementations. At a client side, the method comprises: generating a copy based on an exchanged secure channel message; collecting attestation measurements representing a current state of the communication device; calculating an attestation private key based on a device private key and the hash of the attestation measurement; generating an attestation signature by signing the copy using the calculated attestation private key; the attestation signature is sent over a computer network. At a server side, the method comprises the following steps: extracting a public key from a received identity certificate; generating a copy based on the exchanged secure channel message; calculating an attestation public key based on the extracted public key, a predefined reference hash, and the set of generator points; and verifying the attestation signature based on the attestation public key.