99 results about "Network administrator" patented technology

Techniques are described for providing a natural language network security policy assistant for allowing a network administrator to implement network security policies using natural language security policy requests. A natural language request can be received by a user and can be translated using Artificial Intelligence into one or more security policy clauses. If the natural language security policy request leads to ambiguities with regard to intended security policies, one or more clarifying questions can be generated as natural language questions and sent to the user for clarification. One or more security policies can be implemented based on the one or more security policy clauses generated in response to the natural language security policy request and / or the natural language response to the clarifying questions.

The invention relates to the field of network security in the industrial field, and discloses an industrial field network security online monitoring system, which comprises an asset identification module, a topology analysis module, a risk assessment module, a dynamic updating module, a decision support module and a visualization module, the system obtains equipment information in the network through a stateless scanning technology, constructs an equipment topological graph, and evaluates equipment risks based on a graph convolutional network; by monitoring the equipment state and the topological structure in real time, the system can dynamically update the risk score and provide an accurate safety assessment result; and according to an evaluation result, the system generates a network security management decision suggestion, and helps a network administrator to effectively manage and cope with the network security risk through multi-dimensional visual display of an equipment state, a risk score, vulnerability information and the like. The method has the advantages of comprehensive equipment identification, dynamic risk assessment, intelligent decision support, visual display and the like, and the efficiency and the automation level of network security management are improved.

The invention relates to the technical field of network management, and discloses an intent-driven network management method and system based on a large language model (LLM). The method comprises the following steps: receiving a natural language intention of a network administrator, analyzing the intention by utilizing a pre-trained large language model, extracting a key target and constraint, generating a configuration scheme of a TCP / IP or QUIC protocol based on an analysis result and a network protocol knowledge base, and ensuring the effectiveness and safety of configuration through a network constraint verification module. And the configuration passing the verification is applied to the network system. The system comprises an intention input module, an LLM analysis module, a configuration generation module, a verification module, an application module and the like. According to the invention, through conversion from automation intention to configuration, the network management process is simplified, the management efficiency and flexibility are improved, the method is especially suitable for multi-parameter optimization scenes of protocols such as TCP / IP and QUIC, and intelligent network management is realized.

The invention provides a lightweight satellite network security management system and method. According to the system, unified management of a satellite network security control plane is realized through the centralized network controller. The system has the functions of satellite node security authentication, dynamic security policy generation and issuing, real-time network monitoring, rapid security event response and the like. The network controller comprises an authentication module, a strategy generation module, a monitoring module, an event response module and the like, a security strategy can be customized according to satellite characteristics, and security threats can be dealt with through real-time monitoring and timely adjustment. The invention also comprises a lightweight design which is particularly suitable for a satellite environment with limited resources, and a method for continuously optimizing a security policy based on monitoring data and event records. In addition, the provided user interface allows a satellite network administrator to conveniently perform policy configuration and event processing. According to the system, through centralized management and dynamic adjustment, the safety and the operation efficiency of the satellite network are remarkably improved, the system has the advantages of light weight, flexibility, real-time performance and the like, and the safety management requirement of the modern satellite network is met.

Techniques and mechanisms for fine-tuning a language model to be optimized for a network device to which the language model is deployed. A controller for a network may maintain an inventory of network devices in a network, and obtain device information for the network devices. The controller may analyze the device information to determine a device type or role for the network devices. The controller may then select a pre-trained model that is optimal or well-suited for a device type of a particular network device, and perform a distillation function of the language model. Once the language model has been distilled, the controller may augment the language model with locally relevant information such that the language model is contextually relevant for the network device. After fine-tuning the language model, the controller pre-positions the language model on the device so network administrators and other users can access it when necessary.

This disclosure describes techniques and mechanisms for determine a change window of least impact based on the type of activity, urgency, and preference, and highlighting risk(s) of choosing a change window. The techniques streamline and automate change window technology and provide customized and personalized change window option(s) to an administrator of a network.

The invention discloses an HTTPS flow redirection and authentication control method based on a FakeDNS, which can intelligently redirect HTTPS flow based on a domain name to an authentication system without destroying the encryption property of the flow, and redirect an HTTPS request of a user to a preset authentication page by utilizing a DNS spoofing technology so as to realize identity verification of equipment and improve the authentication efficiency. Meanwhile, the security and privacy of communication are kept, the network security is improved, a solution which is high in cost effectiveness and easy to deploy and manage is provided, greater flexibility is provided for a network administrator, seamless network access experience is provided for a user, and the user experience is improved. The problem of redirection authentication of HTTPS access based on the domain name in a bypass deployment environment is solved, and the method has important application value in the field of network security.

The invention provides an equipment identification method and system based on packet traffic semantic feature enhancement, and electronic equipment, and the method comprises the steps: converting the original Internet of Things traffic into a general packet-level traffic semantic feature which can be understood by a large language model, and then carrying out the fine adjustment of the large language model through the packet-level traffic semantic feature, and the large language model can automatically learn potential Internet of Things equipment traffic characteristics and execute equipment classification identification decisions. According to the technical scheme, accurate identification of the Internet of Things equipment is realized, a network administrator can grasp the type and state information of the access equipment in real time, access or abnormal behaviors of unauthorized equipment are effectively identified, safety protection measures are taken in time, and the overall safety of an intelligent environment system is guaranteed.

The system (108) in the present disclosure for service barring workflow is designed to automate and streamline the process of managing service barring actions in a telecommunications network It provides centralized control, efficient processing. and granular control over service restrictions by implementing a method (400) involving various nodes. Tracking Area Code (TAC) and Network administrators. The system (108) offers advantages such as enhanced operational efficiency. accurate enforcement of service barring rules. real-time monitoring. and reporting capabilities. It integrates with network elements and ensures compliance with regulatory requirements. With its flexible and scalable architecture, the system (108) enables administrators and users to efficiently handle service barring requests while maintaining a positive customer experience. Overall, the system (108) for service barring workflow optimizes the service management process. enhances security, and contributes to effective network control and customer satisfaction.

The present disclosure relates to the field of network control and services, in particular to content publishing and information pushing. The present disclosure is achieved by the following technical solution: a region content distribution method based on 5G edge computing, includes the following steps: S01, region division; wherein in the step, a 5G network is divided into different network single regions according to different physical regions; S02, node construction; wherein a control node and operation nodes are constructed, and each network single region has at least one operation node; S03, configuration of the control node; S04, configuration of the operation nodes; and S05, content sending. The present disclosure aims at providing the region content distribution method based on 5G edge computing to perform region division on the network. Different regions have different types of network services, such that a network administrator can push different pieces of information and provide different network services to different regions.

The invention relates to the technical field of digital twinning technology and network communication optimization, in particular to a method and a system of a digital twinning network simulation driven NAT (Network Address Translation) optimization engine, comprising the following steps: constructing a virtualization mapping model of a physical network; simulating an NAT (Network Address Translation) process in a digital twin environment through a real-time simulation engine; dynamically adjusting an NAT (Network Address Translation) rule and a load balancing strategy of a physical network based on a simulation result; executing safety protection operation in combination with a machine learning algorithm; the method has the beneficial effects that a digital twinning technology and NAT optimization are deeply fused, and a visual and visual management platform is provided for network management personnel. Management personnel can monitor the network state and the NAT performance in real time through the platform and deeply analyze the network problem root by means of a simulation result, and complex field troubleshooting and manual strategy adjustment do not need to be carried out. Therefore, the difficulty and the cost of network management are reduced, the accuracy and the timeliness of management are improved, and the network management is promoted to develop towards the intelligentization and automation directions.

Vehicle (500) with a communication arrangement comprising a network distributor (201, 301, 401, 501) for reporting the current status of at least one communication link between the network distributor (201, 301, 401, 501) and at least one communication participant (503, 505) connected to the network distributor (201, 301, 401, 501) via a communication interface (219, 221, 303, 305, 405, 407, 413, 416), wherein the network distributor (201, 301, 401, 501) includes at least one computing unit (429, 509) configured to establish a communication link between the network distributor (201, 301, 401, 501) and the at least one communication participant (503, 505) to check, and wherein the at least one computing unit (429, 509) is further configured to send a network management message at least to all other communication participants (503, 501) connected to the network distributor (201, 301, 401, 501).505) using only one network management protocol, wherein the network management message, in the event that the at least one verified communication link is faulty, includes a fault message about a link status to which the at least one verified communication link is connected to the network distributor (201, 301, 401, 501) includes a communication participant (503, 505) and at least one camera and / or a vehicle control unit as a communication participant (503, 505) connected to the network distributor (201, 301, 401, 501).

A threat intelligence gateway (TIG) may protect TCP / IP networks from network (e.g., Internet) threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies may be composed of packet filtering rules with packet-matching criteria derived from cyber threat intelligence (CTI) associated with Internet threats. These CTI-derived packet-filtering rules may be created offline by policy creation and management servers, which may distribute the policies to subscribing TIGs that subsequently enforce the policies on in-transit packets. Each packet filtering rule may specify a disposition that may be applied to a matching in-transit packet, such as deny / block / drop the in-transit packet or pass / allow / forward the in-transit packet, and also may specify directives that may be applied to a matching in-transit packet, such as log, capture, spoof-tcp-rst, etc. Often, however, the selection of a rule's disposition and directives that best protect the associated network may not be optimally determined before a matching in-transit packet is observed by the associated TIG. In such cases, threat context information that may only be available (e.g., computable) at in-transit packet observation and / or filtering time, such as current time-of-day, current TIG / network location, current TIG / network administrator, the in-transit packet being determined to be part of an active attack on the network, etc., may be helpful to determine the disposition and directives that may best protect the network from the threat associated with the in-transit packet. The present disclosure describes examples of methods, systems, and apparatuses that may be used for efficiently determining (e.g., accessing and / or computing), in response to the in-transit packet, threat context information associated with an in-transit packet. The threat context information may be used to efficiently determine the disposition and / or one or more directives to apply to the in-transit packet. This may result in dispositions and / or directives being applied to in-transit packets that better protect the network as compared with solely using dispositions and directives that were predetermined prior to receiving the in-transit packet.

The invention discloses a double-path automatic planning and transmission implementation method for time-sensitive network equipment, which comprises the following steps of: (1) determining identity information of redundant path transmission equipment of current TSN (Time Sensitive Network) equipment, the identity information comprising a transmitting end, a receiving end and a relay transmission end; (2) distributing unique ID identifiers to all TSN devices in the whole network; (3) planning two independent data paths 1 and 2, and determining input and output ports of the two paths; and (4) automatically planning VLAN information on the current path 1 and the current path 2. According to the method, the device configuration under each path in the TSN ring network can be automatically constructed only by determining the identity information of the transmitting end, the relay end and the receiving end equipment and planning the path of the key message by a network administrator; and the redundant path of the key transmission is automatically generated by the TSN equipment according to the transmission node and the path without being configured by a network administrator, so that the configuration workload is reduced, and the fault possibility of network crash caused by configuration is reduced.

A method includes monitoring a plurality of packets received by a network sensor associated with a port of a network, determining a ratio of unicast, multicast or broadcast packets to a total number of packets for the plurality of packets, determining that the ratio is outside the bounds of a threshold range, detecting that a port is misconfigured based on the determination that the ratio is outside the bounds of a threshold range, and automatically notifying a network administrator that the port is misconfigured based on the determination that the ratio is outside the bounds of a threshold range. Further disclosed is a computer system and computer program product configured to perform the method.

The invention relates to the technical field of network security, and discloses an instruction control method and device and a storage medium, and the method comprises the steps: obtaining a risk level of a to-be-operated instruction; determining a control means judgment rule of the to-be-operated instruction according to the risk level of the to-be-operated instruction; according to a control means judgment rule of the to-be-operated instruction, obtaining a control means of the to-be-operated instruction; according to the method and the device, risk management and control are carried out on the to-be-operated instruction of an engineer in the network before the to-be-operated instruction of the engineer is issued, network faults caused by issuing of illegal operation instructions can be directly predicted or prevented, the compliance of the engineer on network operation is improved, and the risk management and control of the to-be-operated instruction in the network is improved. And a network administrator is assisted to manage and control the network, so that the stability and reliability of the network are improved.

Techniques are described for providing a natural language network security policy assistant for allowing a network administrator to implement network security policies using natural language security policy requests. A natural language request can be received by a user and can be translated using Artificial Intelligence into one or more security policy clauses. If the natural language security policy request leads to ambiguities with regard to intended security policies, one or more clarifying questions can be generated as natural language questions and sent to the user for clarification. One or more security policies can be implemented based on the one or more security policy clauses generated in response to the natural language security policy request and / or the natural language response to the clarifying questions.

To allow for paying attention of a manager of a network to timing at which a terminal requested authentication.SOLUTION: A control device 1 comprises: receiving means 12 which receives a signal including a MAC address of an arbitrary terminal 2 from the terminal; reception means 13 which, if the MAC address included in the signal is not included in registered terminal information, outputs a reception time of the signal and the MAC address and accepts an input indicating whether or not the MAC address can be registered; and assignment means 14 which, if the MAC address included in the signal is included in the registered terminal information, executes processing of assigning an IP address to the terminal. In response to an input indicating that the MAC address can be registered, the receiving means adds the MAC address to the registered terminal information and further outputs a warning on the basis of the time.SELECTED DRAWING: Figure 1

Aspects of the present disclosure involve systems and methods for a collaboration conferencing system to track a total number of concurrently utilized ports across any number of conferencing bridges of the network for a particular customer and one or more billing actions may occur based on this tracking. This may result in an alternate billing option for the customer's use of the system. Further, a telecommunications network administrator may provide access to the collaboration conferencing system based on a total number of concurrently utilized ports rather than on a per conference or per minute basis. With the information of the number of purchased ports by the customer, the administrator may more accurately predict an available capacity for the collaboration conferencing system needed to support all of the users of the system and the potential collaboration conferences.

The present invention discloses a method for automatically configuring parameters of a Wi-Fi wireless vibration sensor, which is characterized by comprising the following steps: S1, setting an environment for storing second configuration parameters and identifier information in a host computer, and storing the identifier information and first configuration parameters in the environment; S2, arranging wireless sensors for automatically obtaining configuration parameters; S3, obtaining configuration parameters for setting the configuration parameters corresponding to the environment in the sensors; the sensors can be automatically configured when they are put online without manual operation, thereby reducing the risks of information leakage and errors; the sensors do not need to be manually configured before use, and can be automatically configured after installation, thereby reducing the workload of sensor operation and maintenance personnel; network administrators can configure and manage the network parameters of sensors installed at all measuring points on the sensor management system, thereby reducing the risks of leakage and parameter configuration errors.

Techniques implemented by a network-access analysis system to analyze network access controls for networks, identify traffic flows that are unobserved and unrequired, and determine proposed changes to the network access controls that restrict access from unobserved traffic flows. The system may analyze the network access controls, and determine whether unrequired traffic flows are allowed to be communicated in the network. For instance, the system may analyze network flow logs and identify observed traffic flows that are required by applications in the network, and also identify unobserved traffic flows that are permitted access to, but are not observed in, the network. The system may propose changes to the network access controls to restrict network access by these unobserved traffic flows. A network administrator can receive recommendations from the system regarding the proposed changes, and determine whether they would like to implement the proposed changes to their network access controls.

The invention discloses an intelligent ship network security defense system integrating active defense and path backtracking, and relates to the technical field of network security. In a ship network system, a network firewall is connected behind a ship wireless communication channel, and meanwhile, a route backtracking module for actively analyzing an abnormal route is connected to a core switch of a ship network; the module records and analyzes all routes on the core switch and gives an alarm for abnormal routes, meanwhile, a virtual network terminal is installed on the network server and used for simulating functional terminal equipment in a ship network to serve as bait of network viruses, and when the viruses invade the virtual terminal, the virtual terminal can send out the network viruses. And the virtual terminal sends a virus intrusion alarm to a network administrator, starts a route backtracking system to carry out route backtracking, and automatically sends a backtracked source to a virus library of the firewall. According to the invention, a passive and active combined method is adopted to carry out network security defense, and the network security can be obviously enhanced compared with a single firewall mode.

The system includes a sensor mounted on a passive element of the network, defined by optical boxes or optical fibers, to detect operational parameters of the passive element and periodically produce data packets that represent reference operating conditions and, in real time, data packages that represent anomalous operating conditions detected by the sensor; an input portal maintained in communication with a group of sensors; a server that receives data packets from the input portals, decoding and authenticating them; and a platform receiving, from the server, the data packets of reference operating conditions and of the anomalous operating conditions, storing them and making them available to a network administrator, to be selectively or automatically sent to a field technician, via a mobile computing device.

The application provides a lightweight satellite network security management system and method. The system realizes unified management of the satellite network security control plane through a centralized network controller. The system has functions such as security authentication of satellite nodes, dynamic security policy generation and distribution, real-time network monitoring, and rapid security event response. The network controller includes multiple modules such as authentication, policy generation, monitoring, and event response, and can customize security policies according to satellite characteristics and adjust them in real time to respond to security threats. The application also includes lightweight design, especially suitable for resource-constrained satellite environments, and a method for continuously optimizing security policies based on monitoring data and event records. In addition, the provided user interface allows satellite network administrators to easily configure policies and handle events. Through centralized management and dynamic adjustment, the system significantly improves the security and efficiency of satellite networks, has advantages such as lightweight, flexibility, and real-time, and meets the security management needs of modern satellite networks.

Some embodiments of the invention provide, for a network manager of a secure SD-WAN (software-defined wide-area network), a method of securely adding an edge device, which operates at a branch location in a public network, to the SD-WAN. The method provides, to an activation service hosted on the public network, a record for the edge device that is to be added to the SD-WAN securely, the record for use by the activation service to authenticate the edge device. The method receives a first notification from the activation service indicating the edge device has been authenticated. The method receives a second notification from a verification service indicating the authenticated edge device has been verified. Based on the first and second notifications, the method provides to the activation service (i) a set of configuration data for the edge device and (ii) a set of authentication data for the edge device. The activation service provides the set of configuration data and the set of authentication data to the edge device to use to join the SD-WAN.

The invention relates to the technical field of PoE management, in particular to a cross-device stacking PoE management system and an automatic configuration method thereof, the cross-device stacking PoE management system comprises a master-slave device architecture, the master-slave device architecture comprises a master device and a plurality of slave devices, the master device is used for collecting PoE state information of each slave device and issuing a PoE configuration instruction to the slave devices, the slave device is responsible for executing an instruction of the master device and reporting a state to the master device; the master device configuration module is used for uniformly managing PoE configurations of all slave devices; the slave device execution module is used for receiving and executing a PoE configuration instruction issued by the master device; and the state reporting module is used for reporting the PoE state information to the master device in real time by the slave device. According to the invention, cross-device PoE unified management and control is realized through a master-slave device architecture, and the problem that operation needs to be carried out one by one in a traditional scheme is solved; centralized management, real-time state monitoring and unified configuration of the distributed PoE ports are realized, and the configuration and management process of a network administrator is simplified.

Described are methods and systems for improving cybersecurity of an operating room. A user is prevented from interacting with one or more medical devices connected to an operating room (OR) hub until the user is authenticated through an operations user interface (UI) of the OR hub. The user is authenticated through the operations UI. Authenticating the user through the operations UI includes determining a type of credential possessed by the user. Based on a determination that the user possesses a hospital network administrator credential, the user is permitted to access a plurality of security functions, including enabling and disabling one or more communication ports to which the one or more medical devices are connected. Based on a determination that the user possesses an operator credential, the user is prevented from enabling and disabling the one or more communication ports.

A system and method is provided for creating and administering a guest user's document processing operations, such as printing, on a host company network sharing the same cloud print service as the guest's company network. The host network administrator generates a list of companies that are pre-approved for users from a guest company. The guest user logs into the host network and views a list of pre-approved companies. The user selects one or more approved companies for which they are already approved. The user selects a PIN which is then associated with their information, approved companies and guest company. The user then submits their job to the cloud print service for release by a host company MFP. The user logs into a selected host company MFP with their PIN and a listing of any related, pending job is displayed. The user may select one or more jobs for release and printing. The PIN may be revoked by the host administrator, timeout or expire when a selected number of printouts has been made.

This invention discloses a method for automatic dual-path planning and transmission implementation of time-sensitive network devices, comprising the following steps: (1) determining the identity information of the redundant path transmission devices of the current TSN device, wherein the identity information includes the sender, receiver, and relay transmission end; (2) assigning a unique ID identifier to all TSN devices in the network; (3) planning two independent data paths 1 and 2, and determining the input and output ports of the two paths; (4) automatically planning the VLAN information on the current path 1 and Path 2. This invention only requires the network administrator to determine the identity information of the sender, relay, and receiver devices and plan the path of critical packets, thereby automatically constructing the device configuration under each path in the TSN ring network; the redundant path of critical transmission is automatically generated by the TSN device itself according to the transmission node and path, without the need for network administrator configuration, reducing the configuration workload, thereby reducing the possibility of network crashes caused by configuration.

The invention relates to a management method of an IPv6 (Internet Protocol Version 6) address management system in the technical field of network management methods, which can monitor and maintain the use condition of stateless IPv6 addresses in real time through a router, can automatically manage and monitor the distribution and use of stateless IPv6 addresses, simplifies IPv6 address management, reduces the complexity and resource consumption of network management, and improves the network management efficiency. The stateless IPv6 address management method and device solve the problem that stateless IPv6 address management is difficult in the prior art, a network administrator can grasp the use condition of the address in the network in real time, potential address conflicts or abuse problems can be found and solved in time to ensure the reliability and safety of the network, and the stateless IPv6 address management efficiency is improved by automatically generating the stateless IPv6 address use condition report. The workload of a network administrator is greatly reduced, and the transparency of address management is improved.