202 results about "Network Access Control" patented technology

The invention relates to the technical field of network security, and discloses an enterprise-level network access control system based on dynamic authentication, which comprises an access request acquisition module, an identity risk assessment module, a dynamic authentication decision module, a multi-factor authentication module, an access control module and an access log storage module. The method comprises the steps of capturing a user access request and extracting feature data; calculating a risk score and generating a result; comparing a safety threshold value, and judging whether dynamic authentication is triggered or not; if yes, an optimal authentication strategy is calculated, and whether additional identity verification is executed or not is determined; if yes, authentication is completed, and a result is returned; determining an access right based on the authentication result, and storing an access record; and optimizing an authentication strategy and a risk scoring model by using historical data. By adopting a dynamic authentication technology based on risk scores, a flexible and efficient network access control effect is achieved, and the defect that a traditional method is difficult to cope with variable access situations is overcome.

A cloud-based architecture includes a cloud-based network management system (NMS) that provides the management plane and one or more cloud-based NAC systems that provide NAC services, including end-point device authentication. The cloud-based NAC system may have multiple groups of authentication server instances. Each group may have multiple authentication server instances to allow the authentication service provided by the group to serve more client devices than a single authentication server instance alone. Different Groups can be configured differently to serve different tenant sets.

The invention discloses a dynamic network access control method and system based on a zero-trust architecture, and the method comprises the steps: integrating equipment health degree evaluation through the triple dynamic binding of biological feature dynamic binding, equipment fingerprint salt value hash verification and environmental state perception, and constructing a real-time trust basis; dynamic risk quantification is realized based on a multi-source heterogeneous data fusion machine learning model, real-time upgrading and degrading self-adaptive adjustment of authority is realized through an AI driving strategy generation module according to a real-time risk score, a zero-trust sandbox limitation sensitive operation is triggered for high-risk access, and a minimum authority channel is started for low-risk access; performing fine-grained access control and intercepting an unauthorized request in real time by adopting an agent-free API gateway technology, and monitoring an operation behavior in combination with a block chain non-tampering storage access log and an anomaly detection algorithm; finally, a continuous self-adaptive evolutionary cycle is formed through a risk assessment-policy execution-abnormal feedback closed loop mechanism, and the static lag problem of traditional network access control is systematically solved.

The present invention discloses a network security protection method and system, which relates to the field of network security technology, including obtaining user behavior data of a target user and determining the user's current network security level; automatically adjusting weight parameters of an activity index, a login anomaly index, a running index and an operation anomaly index according to the real-time status and historical data of the network environment; establishing a hybrid state model using the collected user behavior data to identify and predict normal and abnormal behavior patterns; calculating the comprehensive security parameters of the target user based on the dynamically adjusted weight parameters, and then determining the user's overall security level; dynamically adjusting the network access control strategy according to the user's security level. The present invention forms a set of advanced network security protection mechanisms by integrating user behavior analysis, environmental adaptability weight adjustment, hybrid state model prediction, comprehensive security parameter calculation and dynamic access control strategy.

Introduced here are pressure-mitigation systems able to mitigate the pressure applied to a human body by the surface of an object (also referred to as a “structure”). A controller device (or simply “controller”) can be fluidically coupled to a pressure-mitigation device that includes a series of selectively inflatable chambers. When a pressure-mitigation device is placed between a human body and a surface, the controller can continuously, intelligently, and autonomously circulate fluid through the chambers of the pressure-mitigation device. Normally, the controller circulates air through the chambers of the pressure-mitigation device, though the controller could circulate another fluid, such as water or gel, through the chambers of the pressure-mitigation device. The controller may cause the chambers to be selectively inflated, deflated, or any combination thereof.

The invention provides a network access control policy management method and device, equipment and a medium. The method comprises the steps that network security information of a firewall in a preset time period is collected, the network security information is analyzed according to the machine learning technology, a network security index is obtained, the network security index is used for evaluating the effectiveness of a currently deployed access control strategy, and the network security information comprises the network security information of the firewall in the preset time period; using the currently deployed access control strategy to control the generated data; and according to the network security index, updating the deployment access control strategy in the firewall. According to the technical scheme, the network access control strategy is updated in real time by monitoring the network access information, and the network access safety is improved.

The invention relates to a network access control system, a network access control method and related equipment. In the system, a client agent module is used for acquiring process identification information and establishing a binding relationship between a process and a network message; the traffic acquisition and analysis module is used for acquiring network messages at a gateway side, analyzing and aggregating the network messages and generating a structured traffic record; the process association verification module is used for verifying the validity of the binding relationship and establishing and maintaining the association relationship between the process and the structured traffic record; the traffic aggregation and strategy generation module is used for executing traffic aggregation and network behavior analysis based on the structured traffic record and the association relationship, and dynamically generating an access control strategy based on a network behavior analysis result; and the dynamic access control execution module is used for controlling the network access request based on the access control strategy and generating an execution result containing the control result. The system realizes self-adaptive generation of process-level control and access control strategies.

The invention discloses a self-adaptive distributed network integration system and method for virtual and real unmanned aerial vehicle cooperation, and relates to the technical field of unmanned aerial vehicle control, the system comprises a central control plane and at least one node agent, the central control plane comprises a global identity manager configured and distributed with globally unique network identity information, recording and recovering the network identity information; the network topology and state manager is configured to generate a virtual and real network state view, responds to query and issues a network simulation instruction to the node agent; the distributed network coordinator is configured to decide and coordinate the node agents to construct a cross-host logic two-layer network domain; the security policy manager is configured to define and store a network access control policy of the virtual unmanned aerial vehicle; the adaptive distributed network integration system and method aim to realize physical presentation of the virtual unmanned aerial vehicle on the network level, so that the virtual unmanned aerial vehicle can directly communicate with and collaboratively work with a real unmanned aerial vehicle in the same network plane.

An example network access control system includes a memory storing one or more security policies for an enterprise network; and one or more processors coupled to the memory and configured to: receive a request to connect to the enterprise network from a client device of a user, in response to the receipt of the request, determine one or more user attributes associated with the user and one or more endpoint attributes of the client device, identify a security policy of the one or more security policies based on the one or more user attributes and the one or more endpoint attributes, and configure an access control module of a network device of the enterprise network in accordance with the security policy.

The invention provides an access rule management method, device and equipment based on an access control matrix, and relates to the technical field of network security, and the method comprises the steps: obtaining a source address and a target address; generating an access control matrix based on the source address, the target address, the protocol and the target port, and determining target network equipment and passing network equipment based on the access control matrix; automatically generating corresponding access control rules for the target network equipment and the path network equipment based on the target network equipment and the access control matrix thereof, and automatically generating corresponding access control rules for the path network equipment and the access control matrix thereof; and correspondingly configuring the access control rule to the target network equipment and the path network equipment to realize access control of the target network equipment and the path network equipment. According to the invention, through the access control matrix, a visual and structured interface is provided, so that a manager can clearly check, edit and manage the network access control rule.

The invention discloses a network access control method and device, equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: receiving a network resource access request sent by a client, and determining a trust evaluation factor used for carrying out the trust evaluation of the client, and a current trust score; estimating a variation coefficient of a trust evaluation factor based on the number of accesses of the current access request and the current trust score; estimating a conflict coefficient of each trust evaluation factor based on the access frequency and the trust score, and determining an objective weight of each evaluation factor based on the conflict coefficient and the variable coefficient; fusing the subjective weight and the objective weight to obtain a comprehensive weight; and calculating the sum of the products of all the comprehensive weights and the current trust score to obtain a total trust score, if the total trust score exceeds a preset threshold, allowing access, and if the total trust score does not exceed the preset threshold, forbidding access. According to the method, the trust evaluation result can be more accurate, so that accurate network access control is realized.

Provided is a system for network access control. The system includes an authentication server configured to perform a basic authentication procedure for a user by communicating with at least one user terminal, a service server configured to provide a service to at least one user terminal passing through the basic authentication procedure, a collection device configured to acquire traffic data of the at least one user terminal passing through the basic authentication procedure from at least one of the service server and a network interface connected to the service server, acquire a traffic dataset by refining the acquired traffic data in accordance with correlation, and extract time-series feature points of the traffic dataset, and an artificial intelligence (AI) management device configured to train at least one AI model to define a traffic character template of the user on the basis of the time-series feature points.

The invention relates to the technical field of wireless communication and terminal network access control, and discloses a CPE (Customer Premise Equipment) signal adaptive enhancement and link switching method and a CPE signal adaptive enhancement and link switching system. According to the method, combined characteristics reflecting short-time quality drop amplitude, error code burst degree, time delay bursting degree and apparent strength level can be included, so that the shielding shadow and multipath illusion can be distinguished in a scene in which the shielding and strong reflection of the steel structure coexist, and the multi-path illusion can be distinguished on the premise of not depending on multi-source data. A small amount of key link observation data is organized into fingerprint representation with scene identification capability, and a basis is provided for subsequent enhancement and switching control. Therefore, the link shadow fingerprint is introduced, so that the link control process has the capability of identifying the special phenomenon that the apparent signal is strong but the actual error code is burst, and the switching decision and the enhanced control form collaborative management, thereby reducing the error switching, reducing the switching jitter and improving the service continuity.

The invention discloses a network threat systematic protection method, and belongs to the technical field of network security. According to the method, a unified policy center is constructed, and three layers of security policies of an overlay network, a terminal and an application are defined and issued in a unified manner; network admission control, terminal security management and API risk monitoring systems are deployed to execute strategies respectively; an intelligent linkage mechanism is established, and cross-system automatic co-processing is realized; centralized monitoring, data aggregation and visual analysis are carried out through the unified safety operation center, and support is provided for optimization; and continuously optimizing the strategy and the rule based on the operation data. According to the invention, the problems of isolation, strategy splitting and response lag of a protection system in the prior art are solved, and an active defense system with cooperative linkage and continuous evolution is constructed.

The invention provides a network access control method and system, and relates to the technical field of network security. The method comprises the steps that a terminal sends a first request message to a certificate issuing system, the first request message is used for applying for an access certificate, and the first request message carries a user identifier; receiving an access voucher signed and issued by the voucher signing and issuing system for a user corresponding to the user identifier, wherein the access voucher comprises the user identifier, an authority identifier and a digital signature; the VPN client is started, a network access request is sent to the VPN server, the network access request carries the access credential, so that the VPN server uses the public key of the credential issuing system to verify the digital signature, and a network access channel corresponding to the permission identifier is opened under the condition that the verification is passed. According to the embodiment of the invention, access permissions of different users can be set according to actual needs, the VPN server opens the corresponding network access channel according to the permission identifier in the access credential, and different access requirements of employees on internal and external network resources are met.

Embodiments of the present disclosure relate to a network access control method, apparatus and device, and a storage medium. The network access control method includes: receiving a certificate verification request sent by a terminal, and returning a certificate verification response to the terminal, wherein the certificate verification response carries a preset server certificate, the certificate verification response is used for instructing the terminal to verify the preset server certificate based on a root certificate installed in the terminal, and identity verification information of the root certificate is partially or fully different from identity verification information of the preset server certificate; and receiving a verification result returned by the terminal for the preset server certificate, and in a case where the verification result indicates that certificate verification succeeds, determining that the terminal has a security risk and interrupting a network access communication link of the terminal. In the embodiments of the present disclosure, when the terminal successfully verifies the preset server certificate, the terminal may be prevented from accessing a network by interrupting the network access communication link with the terminal, thereby improving the security of the network.

The invention provides a network access control method and device and related equipment, and relates to the technical field of network security. The method comprises the following steps: receiving a user identity certificate sent by a user terminal, wherein the user identity certificate is used for determining the network access authority of a user; verifying the user identity credential to obtain a network access authority of the user, the network access authority including at least one of an intranet access authority and an extranet access authority; and configuring a network access strategy of the user based on the network access permission. According to the invention, the network access strategy (intranet, extranet or composite authority) is dynamically configured by verifying the user identity certificate, so that the authorized user is allowed to access the specified extranet application as required while maintaining the security of the virtual private network encryption tunnel to protect the intranet resources; the problem of low cooperation efficiency caused by forced network switching of a traditional virtual private network scheme is solved, and the safety of internal network resources is protected while the working efficiency is improved.

A network access server (NAS) device on a wireless network at a site is described, the NAS device comprising memory including a policy cache having entries for one or more client devices where each entry includes a last policy action previously identified by a network access control (NAC) system for the respective client device. The NAS device further comprising processing circuitry configured to, upon receipt of an access request for the wireless network from a client device, authenticate the client device. The processing circuitry is configured to, after authentication of the client device, determine whether the client device is included in the policy cache. The processing circuitry is configured to, based on the client device being included in the policy cache, authorize the client device to access the wireless network in accordance with the last policy action for the client device.

A First transceiver, especially transceiver of a user equipment, UE, is configured to receive a signal comprising one or more enhanced fields carrying an information for access control based upon feature support and / or feature activation, wherein the transceiver is configured to control its own access to the cell dependent on the one or more enhanced fields.

The invention discloses a network access control method and electronic equipment, and relates to the technical field of computers, network resources and access strategies thereof are visually presented in a graphical user interface in a node and connecting line mode, logic conflict judgment and strategy optimization recommendation are synchronously completed when a user drags and generates the strategies, and the network access control method and the electronic equipment have the advantages that the user experience is improved, and the user experience is improved. The abstract configuration process originally depending on a command line or a rule form is converted into a visual and interactive operation process, so that the degree of dependence of network access strategy configuration on professional experience is reduced, the probability of occurrence of artificial configuration errors is reduced, potential risks are controlled in the strategy generation stage, and the strategy generation efficiency is improved. And the overall efficiency and security of private cloud network access policy management are improved.

The invention discloses a dynamic network access control system under a zero-trust architecture, which relates to the technical field of network security, and comprises a multi-dimensional trust evaluation module, a self-adaptive micro-segmentation engine, a strategy decision execution module and a risk perception feedback module, the multi-dimensional trust evaluation module calculates a comprehensive trust score based on five-dimensional features of identity, equipment, network, application and data; the self-adaptive micro-segmentation engine dynamically generates network micro-segments based on a graph diffusion algorithm; the strategy decision execution module adopts deep reinforcement learning to generate an access decision; the risk perception feedback module identifies abnormity based on the LSTM network and adjusts trust parameters through closed-loop feedback, the four modules are deeply coupled and cooperated, refined dynamic access control is realized, the occurrence rate of security events is reduced by more than 85%, and an innovative solution is provided for enterprise network security.

The invention provides a network access control method based on a network side vehicle container, which belongs to the technical field of network security, and comprises the following steps: deploying a business service container and the network side vehicle container in a container unit; configuring an access white list through the service management and control platform, and synchronizing the access white list to a network side vehicle container; when monitoring that a network access request initiated by the business service container is public network access, hijacking the public network access request to a network side vehicle container based on a firewall rule; the method comprises the following steps: acquiring a protocol type and server associated information in a public network access request, extracting corresponding server verification information from the server associated information according to the protocol type, querying in an access white list according to the server verification information, and when acquiring that the access white list contains the server verification information, querying in the access white list according to the public network access request. And establishing communication connection with a public network server for data transmission. According to the method, detection of public network service requests of various protocol types is realized, and the convenience of accessing white list configuration is improved.

This application discloses a network access control system, method, apparatus, and device. The system involves a requesting device sending a network access request to a server; the server authenticating the request; if the authentication is successful, allowing the requesting device to access the target network; acquiring information related to a first network access behavior corresponding to the request and information related to a second network access behavior corresponding to the holder of the network access credential; generating a network access risk assessment prompt based on the first and second network access behavior information; the large language model performing a network access risk assessment based on the prompt; and controlling the requesting device's access to the target network based on the network access risk assessment result. This approach effectively balances a high level of user experience and new risk identification capability with low hardware requirements and low risk assessment data processing requirements.

A method of operating a server is provided that includes providing, with the server, one or more services relating to network access control and management of a network, predicting a network configuration failure associated with the network with a failure prediction model, and generating a network configuration recommendation based on the predicted network configuration failure to avoid the predicted network configuration failure. The failure prediction model can be a machine-learning based network configuration failure prediction model that is trained on past network configuration failure events. Operated in this way, erroneous network configuration issues can be automatically identified and addressed in a timely fashion.

Disclosed are systems and methods that enable robust, universal authentication and network access control capabilities for networks having a variety of computing device types and end users that access and operate on the network. The systems permit verification of end user identity, confirmation that computing devices have sufficient resources to reliably operate on the network, and configuration of computing devices with required software applications. The systems and methods further enable real-time, intelligent monitoring of the tasks and functions performed by system end users. The systems provide an immersive experience that allows end users to teleport into the environment of other end users, including viewing another end user's computer desktop, listening to ongoing telephone conversations, viewing and analyzing contemporaneous images or video of an end user and the end user's work environment, and interacting with the end user to provide precision coaching and assistance.

This disclosure provides a method, apparatus, device, medium, and product for access verification in on-chip networks (NoCs), relating to integrated circuit design and verification and System-on-Chip (SoC) design technologies, particularly in the areas of NoC security verification, access control, and access control isolation verification. The specific implementation scheme is as follows: a routing access permission file is parsed to obtain access permission paths and self-test instances; the self-test instances are executed to obtain self-test results; the self-test results and the routing access permission file are compared and verified to obtain a verification result; if the verification result fails, the access permission paths in the routing access permission file are modified until the verification result passes; routing tests are performed in a UVM environment based on the modified access permission paths to obtain the access verification result. This technical solution can shorten the access verification cycle of on-chip networks.

The present application discloses a method for overlay network access control and password isolation based on user identity identification, comprising: deploying an asymmetric cryptographic system based on identification passwords on CPE devices, and using the identification passwords to design CPE device network identifications, device public and private keys, and user identifications; binding user identifications with access control policies and transmission encryption policies, and utilizing identity authentication services and policy services provided by infrastructure; applying user identifications to service access processes, and implementing two-level permission checks on CPEc devices and CPEs devices at the edge of the overlay network to achieve fine-grained access control for different user services; setting a zero-interaction service key generation mechanism based on the algorithmic characteristics of identification and public keys, and cooperating with the Encapsulating Security Payload Protocol to protect the confidentiality, integrity, and forward security of user service data, thereby achieving strong password-based security isolation of different user service data on the overlay network.

The invention provides a network access control list adjusting method based on flow analysis and optimization, which comprises the following steps of: firstly, acquiring total flow information, and then dynamically constructing a network digital twinborn model based on the total flow information; constructing a causal derivation model based on a simulation result of the network digital twin model; analyzing and processing the real-time traffic by using a causal derivation model, and generating a plurality of network access control list change rules and corresponding deployment strategies; and then simulating the network access control list change rules and the deployment strategy thereof in the network digital twin model, and determining a target network access control list from each network access control list change rule based on a simulation result. According to the invention, a self-learning, dynamic risk quantification and strategy automatic generation and verification ACL tuning system is constructed, and the ACL tuning system is not only an optimization rule, but fundamentally changes the generation and management normal form of the ACL.

The invention provides a website security method and device, equipment, a storage medium and a program product, and relates to the field of artificial intelligence. The method comprises the following steps: under the condition that a network access control is unlocked for the first time on that day, acquiring identity information of an unlocking person, acquiring identity information of a first card punching person punching in a first preset duration range before and after unlocking, detecting whether a person enters a defense deployment area or not, identifying identity information of an entering person under the condition that the person enters, and sending the identity information of the entering person to the network access control unit; if the identity information of the unlocking person, the identity information of the first card punching person and the identity information of the entering person are matched and the current time is within a preset defense withdrawing time range, executing a defense withdrawing strategy; according to the method, automatic defense withdrawing of the control network point is realized, and the reliability and the safety of defense withdrawing are improved.

Device Assisted Services (DAS) for protecting network capacity is provided. In some embodiments, DAS for protecting network capacity includes monitoring a network service usage activity of the communications device in network communication; classifying the network service usage activity for differential network access control for protecting network capacity; and associating the network service usage activity with a network service usage control policy based on a classification of the network service usage activity to facilitate differential network access control for protecting network capacity.