372 results about "Network domain" patented technology

The invention provides a digital twinborn-based park pipe network monitoring and early warning method and system, and relates to the technical field of pipe network monitoring and early warning, and the method comprises the steps: constructing a park pipe network domain knowledge graph, collecting real-time monitoring data and historical operation and maintenance data, and forming a knowledge enhanced pipe network data set; extracting pipe network performance attenuation characteristics by using a bidirectional gating recurrent neural network, and deeply fusing the pipe network performance attenuation characteristics with expert empirical rules in the domain knowledge graph to construct a performance attenuation analysis model; a performance degradation curve and remaining useful life are calculated based on the model, potential fault risks are predicted, and maintenance suggestions are generated. According to the invention, precise evaluation of pipe network performance degradation, early warning of fault risks and intelligent generation of maintenance suggestions are realized, and the intelligent level and reliability of operation and maintenance of the park pipe network are improved.

The invention discloses an optical transmission cross-domain service real-time configuration method, an optical transmission cross-domain service real-time configuration device and a computer program product, and aims to realize unified planning and dynamic output of cross-domain service end-to-end service quality targets by constructing a multi-domain quality strategy fusion model and integrating service quality strategies and resource states of different network domains. By collecting performance data of each domain in real time and combining with a time sequence analysis algorithm, the network performance degradation trend can be accurately identified; based on quality propagation path analysis of a cross-domain service topological relation graph, a quality degradation root can be quickly positioned, the influence range of the quality degradation root can be quantified, and the service quality stability of a key service in a resource limited scene is ensured; by establishing a cross-domain service quality mapping system, heterogeneous network performance parameters are mapped to end-to-end service quality indexes, and the cross-domain collaborative operation and maintenance efficiency is greatly improved. A continuous iterative optimization mechanism driven by reinforcement learning is adopted, adaptive adjustment of network resource allocation and a routing strategy is realized, and a cross-domain service quality dynamic optimization closed loop is formed.

The invention relates to the technical field of network communication, and discloses an intelligent control method and system of a switch. The method comprises the following steps: receiving a heterogeneous data stream in a target network domain; performing data processing by using a preset flow feature aggregation model, and generating a flow dynamic pressure field distribution diagram and a protocol priority mapping matrix; constructing an adaptive scheduling threshold model, and generating a multi-target flow control instruction set; a cascade effect is simulated based on a network congestion chained conduction model, and collaborative routing parameters are optimized; and iteratively optimizing through a mixed integer programming framework, and outputting a network scheduling action sequence to a switch control engine. The system correspondingly comprises a data receiving module, a data processing module, an instruction generation module, a simulation optimization module and an instruction output module. According to the method, heterogeneous data can be effectively processed, congestion can be accurately predicted, flow control can be optimized, the overall performance of the network can be improved, and communication requirements in a complex network environment can be met.

The invention relates to the technical field of data processing, can be applied to business scenes of financial science and technology, medical health, lease and the like, and discloses a distributed multi-terminal data cooperative processing method, which comprises the following steps: receiving a structured data unit containing business logic generated by an initiating terminal, and transmitting the structured data unit to a business verification server, receiving verification result data returned by the service verification server, and performing security encapsulation processing on the verification result data to generate security encapsulation data; calling a distributed communication service interface of the distributed operating system, and detecting a connectable device set in a network domain where the initiating terminal is located; and establishing a multi-path transmission link based on the transmission capability parameters of the terminal devices in the connectable device set, and distributing the security encapsulation data to the target terminal device group through the multi-path transmission link. According to the invention, efficient distribution and synchronization of data are realized through a multipath transmission link, the dependence on a background system is reduced, the timeliness and consistency of data synchronization are improved, and the maintenance cost of the system is reduced.

Techniques disclosed in the present disclosure relate to communication networks and methods for supporting time-sensitive deterministic communication based on a time-sensitive network (TSN) mechanism. A communication network may include a plurality of network domains in the communication network connecting each other, and a plurality of schedulers in the plurality of network domains. A respective of the plurality of schedulers may compute a local schedule for a respective of the plurality of network domains, and a first scheduler and a second scheduler of the plurality of schedulers may iteratively exchange a first local schedule and a second local schedule. The first local schedule and the second local schedule may include different cycle times. The first network domain may transmit interdomain ethernet link information related to a link connecting the first network domain and the second network domain, and intradomain schedule information related to the first local schedule.

A control method for a real-time channel group comprises: after a first real-time channel group creation request is received, joining any node to a first real-time channel group, and initiating system clock synchronization to nodes in the first real-time channel group; after a second real-time channel group creation request is received, joining any node in the first real-time channel group as a shared node to a second real-time channel group; and triggering a channel group packet parsing request according to an execution cycle and an interruption duration to extract a channel group packet for parsing processing. By means of a plurality of real-time channel groups sharing at least one node, system clock synchronization is realized, the number of nodes of real-time channel groups needing to be managed is reduced, and the efficient transmission of a real-time packet is realized.

The invention provides an SDN (Software Defined Network) inter-domain traffic engineering method based on reinforcement learning, which comprises the following steps of: deploying a data traffic demand monitoring platform and a control system, and constructing a global network topological graph; calculating a short link identifier for the link in the network and distributing the short link identifier to each network device; flow judgment is carried out, upward notification is carried out according to requirements, and pre-operation of intelligent routing is cooperatively completed; deploying a reinforcement learning model in the total intelligent body, outputting an optimal cross-domain path strategy to the cooperative controller, disassembling the optimal cross-domain path strategy into flow table rules which can be executed by each domain, and issuing the flow table rules to local controllers of related domains; and each local controller pushes the flow table configuration to the domain switching equipment to complete the forwarding decision of the flow. According to the method, a complete closed-loop process of flow measurement, intelligent decision making, cross-domain control and path issuing is realized, feasible reference is provided for actual deployment of an intelligent network, and the method has good engineering popularization value and is suitable for intelligent scheduling scenes such as an operator backbone network, an industrial internet and metro edge cloud.

The invention provides an adaptive path selection system based on GNN and multi-agent DRL, which is based on a layered multi-domain SDN architecture and comprises a root server layer, a domain controller layer and a data layer. The root server layer comprises a root server and a root agent, and the root agent is used for calculating a global routing path strategy and optimizing and adjusting a routing path according to feedback of a local network domain. And the root server distributes the routing path to a domain controller layer according to a routing path strategy to carry out routing path forwarding and adjustment of a local network domain. The domain controller layer comprises a plurality of domain controllers and domain intelligent agents, the domain controllers construct a topological structure composed of boundary switches, and a routing decision is made in a local domain according to an optimal global routing path strategy. And the domain intelligent agent performs modeling analysis on the topological structure by using a deep reinforcement learning algorithm in combination with a graph neural network to realize intra-domain path selection. And the data plane layer feeds back the network topology information to the domain controller, and receives and executes a routing decision sent by the domain controller at the same time.

The invention discloses a causal chain tracking method and system for cross-space APT attack behaviors, and relates to the technical field of network security. The method comprises the following steps: collecting heterogeneous device logs crossing multiple network domains, extracting original attack data, performing spatial-temporal feature extraction, and generating a device behavior spatial-temporal vector; analyzing the original attack data to obtain attack tactical semantic features, fusing the equipment behavior space-time vector and the attack tactical semantic features, and constructing a three-dimensional association map; and performing attack path reasoning on the three-dimensional association map based on a causal discovery algorithm, identifying a causal dependency relationship, performing data tracking according to the causal dependency relationship, reconstructing an APT attack causal chain, and obtaining an attack logic path. The technical problem that in the prior art, comprehensive and accurate traceability analysis on cross-space APT attacks is difficult is solved, and the technical effects of efficient reconstruction of APT attack causal chains and accurate identification of attack paths are achieved.

The invention relates to the technical field of communication transmission, in particular to a communication signal processing method and a communication receiver. The method comprises the following steps: acquiring position information data of a communication receiver; performing network domain construction on the communication receiver position information data to generate a communication connection network domain; performing multi-source heterogeneous communication signal acquisition on the communication connection network domain to obtain a standard multi-source heterogeneous communication signal; performing network domain compatibility level classification on the communication connection network domain to generate network domain compatibility level data; performing optimal mapping path adjustment on the communication connection network domain by using the network domain compatibility level data so as to generate a dynamic topology mapping rule; and performing multi-protocol seamless adaptation conversion on the communication connection network domain based on the standard multi-source heterogeneous communication signal through a dynamic topology mapping rule to generate a protocol adaptive conversion strategy. According to the invention, through intelligent scheduling, protocol adaptation, dynamic topology adjustment and signal steganography technologies, the efficiency and security of cross-domain communication are improved.

Methods and apparatus for biometric data maintenance, access and distribution across two or more experiential and / or network domains. In one embodiment, a 5G NR-based network architecture is provided which allows ultra-low latency and effectively user-imperceptible biometric data use for e.g., authentication and maintenance of user state across multiple domains via multiple constituent user devices (e.g., UEs). The network architecture includes both (i) a distributed biometric database (BDB) model wherein relevant biometric data for individuals / UEs is intelligently cached in various portions of the distributed database, and (ii) centralized and local BAEs (biometric analytics entities) which manage the aforementioned intelligent caching, as well as network configuration using one or both of 5G NR network “slicing” and CU / DU split options to optimize end-user biometric-related applications such as those providing identification / authentication, AR functions, VR functions or yet others.

The invention provides a network performance state determination method and device, electronic equipment and a storage medium, and relates to the technical field of computing power networks, the method is applied to a first computing power gateway, and the method comprises the following steps: respectively measuring a first network performance state between the first computing power gateway and at least one second computing power gateway; receiving a second network performance state between each second computing power gateway and each computing power service instance sent by each second computing power gateway; determining a comprehensive network performance state between the first computing power gateway and each computing power service instance based on the first network performance state and the second network performance state; the comprehensive network performance state is used for determining the optimal computing power route of the user access request. According to the invention, the number of network detection sessions of the user side computing power gateway is reduced through a sectional network state detection mechanism, the network burden in the computing power network domain is reduced, and the efficiency of detecting the network performance state is further improved.

The invention discloses a secure sharing exchange method and system based on double unidirectional optical shutters. The method comprises the following steps: respectively deploying a sharing exchange service in two networks isolated by optical gates, and registering interface information of business applications needing cross-optical-gate interaction on the sharing exchange services; each network comprises a database which is used for storing registration information, a transmission record, a transmitted application name, a transmission state, transmission time, transmission content and a return result; through an application registration step and a unique interface name of the whole domain, on the basis of not leaking an IP and a port to different security network domains, service application cross-optical-shutter file transmission and HTTP parameter request are realized based on a TCP / IP protocol, and the invasiveness to a service application code is reduced; according to the invention, monitoring of data transmission is realized in a transmission process; and after the transmission is completed, the receiving side returns the transmitted application name, the transmission parameter or the file name and the sending time to the transmission initiating side to form a transmission closed loop.

The invention relates to a cross-network domain security data interaction method and device based on dynamic multi-channel and intelligent verification, computer equipment, a computer readable storage medium and a computer program product, and is applied to an external network domain. The method comprises the following steps: acquiring network state data of each available transmission channel between an internal network and an external network, and determining a transmission priority score of each available transmission channel so as to screen out a main transmission channel and a standby transmission channel; dynamically distributing to-be-transmitted data fragments to the main transmission channel and the standby transmission channel through a reinforcement learning algorithm; transmitting the data fragments distributed to the main transmission channel and the standby transmission channel to an isolation domain; the isolation domain is used for filtering the received data fragments through a hardware filtering engine and sending the filtered data fragments to the internal network domain; the internal network domain is used for verifying the integrity of the data fragments according to the fragment hash values corresponding to the data fragments. By adopting the method, the intelligence of data transmission in the internal and external network interaction process can be improved.

The invention discloses a large-scale low-orbit satellite network domain-division intelligent routing method, which belongs to the technical field of satellite communication, and comprises the following steps: constructing a network model based on multi-dimensional resource characteristics, and providing resource constraint conditions and space-time correlation characteristics for routing decision by combining with a regional flow prediction algorithm of an improved Transform architecture; virtual nodes and an autonomous domain are divided based on a geographic area, and a low-orbit satellite network routing process is decoupled into an intra-domain part and an inter-domain part; a multi-agent deep Q network is adopted in a domain, a sum tree mechanism-based deep Q network is adopted between domains, a routing algorithm and a resource scheduling algorithm are respectively designed, and a domain intelligent routing system with flexibility and expandability is constructed through hierarchical routing and resource decoupling scheduling. According to the method, the service capability of the low earth orbit satellite network in extreme scenes such as topology high-frequency change, strict resource limitation and traffic space-time mutation is remarkably enhanced, and a high-reliability and low-delay routing solution is provided for space-ground integrated communication, emergency disaster early warning and global real-time data transmission.

A communication method and a related device are applied to the field of network awareness. In the application, a first node can obtain accumulated time delay information of N routing paths, and determine a target routing topology between the first node and a root node at least based on the accumulated time delay information of the N routing paths, the first node and the root node belong to the same network domain, and the path through which the message of the first node passes when being transmitted in the network comprises the first node and the root node. The shorter the time delay of message transmission between the nodes in the network domain is, the higher the stability of message transmission of the routing topology passing through the shorter time delay is, so that the target routing topology of the node transmission message in the same network domain is screened out from the obtained accumulated time delay information of the N routing paths, and the stability of the message transmission of the node transmission message in the network domain is improved. A low-delay message transmission routing path can be coordinated among the nodes. And the message of the node is transmitted through the target routing topology, so that the reliability of the end-to-end delay can be ensured.

The invention discloses a network security multi-target monitoring system and monitoring method based on monitoring data, and aims to solve the problems that the existing network security monitoring technology is insufficient in single-point monitoring, lacks multi-target comprehensive evaluation, is difficult to adapt to a dynamic network environment, lacks an effective early warning mechanism and the like. The invention provides a network security multi-target monitoring method and system based on monitoring data. The method comprises the following steps: dividing a target monitoring network into a plurality of sub-network domains, arranging a network traffic feature acquisition module in each sub-network domain, acquiring first and second traffic data, and extracting abnormal features in combination with an attack frequency; cloud data is used to calculate the security margin and the security margin index of each sub-network domain, and then the security uniformity and the security change trend of the target monitoring network are evaluated; and performing early warning according to the historical data and the current trend.

Procedures, methods, architectures, apparatuses, systems, devices, and computer program products for enabling computing aware traffic steering (CATS) using internet protocol (IP) address anchoring are described. One method may include receiving a request for a service that is offered by two or more nodes in a network domain associated with a network element. The request comprises information indicating an identifier associated with the service and CATS requirements to assist the network element to determine which one of the nodes to select to instantiate the service. The method may include determining, based on an ability of the nodes to provide the service under the CATS requirements, which one of the nodes to select to instantiate the service, and sending information indicating an allocated internet protocol (IP) prefix associated with the selected one of the nodes that is instantiating the service.

The embodiment of the invention discloses a digital certificate management method and device, computer equipment and a storage medium, and belongs to the technical field of network security. In the application, a BCF node can send certificate information of a first NF node to a plurality of target CA nodes in different network domains in a block chain system according to CA node indication information in a certificate issuing request of the first NF node, and the plurality of target CA nodes jointly provide a certificate signature for the certificate information of the first NF node. And the BCF node sends the authorized digital certificate to the first NF node based on the signature, so that decentralized cross-domain certificate issuing is realized.

There are provided measures for performance related management of artificial intelligence or machine learning pipelines in cross-domain scenarios. Such measures exemplarily comprise transmitting a first artificial intelligence or machine learning performance related message towards a second network entity managing lifecycles of artificial intelligence or machine learning pipelines in a first network domain in a network, and receiving a second artificial intelligence or machine learning performance related message from said second network entity, wherein said first artificial intelligence or machine learning performance related message comprises a first information element including at least one first cross-domain network service involved artificial intelligence or machine learning pipeline performance related parameter.

The invention provides a real-time simulation method, device and equipment based on multi-domain situation awareness and a storage medium, and the method comprises the steps: firstly obtaining data sources of a plurality of combat domains, and carrying out the preprocessing of the data source of each combat domain; wherein the data source comprises land domain data, sea area data, airspace data, sky domain data and network domain data; fusing the preprocessed data sources of the combat domains to generate unified multi-domain data, and constructing a simulation model based on the unified multi-domain data; experimental factors are obtained, the experimental factors are used for constructing multiple experimental schemes through an orthogonal test, the multiple experimental schemes are input into the simulation model to generate key indexes, and the key indexes comprise combat target achievement conditions, military strength consumption, combat time and resource consumption; and dynamically optimizing the key indexes, and outputting a combat decision scheme which can be used for reference of a command and control system. The problem that the decision of a command and control system is affected due to insufficient simulation precision is solved.

The invention discloses a network attack tracing method, device and equipment and a medium, and the method comprises the steps: obtaining a plurality of network flow data packets, a plurality of pieces of weblog data and a plurality of equipment state parameters of a plurality of monitoring nodes in a target network domain; determining an abnormal node with a network attack behavior in the plurality of monitoring nodes based on the plurality of network flow data packets, the plurality of pieces of network log data and the plurality of equipment state parameters; and tracing the network attack behavior based on the abnormal data packet of the abnormal node, the abnormal weblog data and the abnormal equipment state parameter to obtain an attack type, an initial attack node and an attack path of the network attack behavior. The collaborative analysis value of data packet deep features and multi-source equipment information is fully utilized, real threats and normal network activities are accurately distinguished, and the traceability accuracy and reliability are remarkably improved. Meanwhile, through correlation analysis of multi-dimensional data, an attack source positioning range can be converged step by step, and an attack path can be completely reconstructed.

The embodiment of the present invention provides a method and system for constructing a knowledge base in the field of power grid based on a vector database, which belongs to the field of emerging software and new information technology services. The method includes: obtaining a power grid data file to be stored; obtaining keywords in the power grid data file; using a preset vector database to process the keywords to obtain word vectors; determining similar word vectors of each word vector according to a preset similarity distance; word-processing the power grid data file; sequentially reading the power grid data file after word processing; processing the read word vectors or similar word vectors to obtain mapping values; counting according to the mapping values; using the counting result as the second feature of the power grid data file; clustering the power grid data file using the second feature and the keywords; index encoding the result of the clustering operation to obtain the power grid domain knowledge base.

The invention relates to the technical field of information security, in particular to a cluster self-discovery method suitable for a cloud server cipher machine, which comprises the following steps: when physical equipment of the cloud server cipher machine leaves a factory, a certificate management module generates an equipment certificate and a root CA certificate in combination with an enterprise CA system, and stores the equipment certificate and the root CA certificate; after the virtual cipher machine is created and started, the key management service module combines with the certificate management module to generate a virtual machine certificate, and stores the virtual machine certificate, the storage device certificate and the root CA certificate together; the cluster management service module enables the master node of the virtual cipher machine to discover the slave node of the virtual cipher machine in the same network domain through UDP broadcast, and executes three-level verification on the slave node of the virtual cipher machine from three aspects of an equipment certificate, a virtual machine certificate and an authentication signature; and the virtual cipher machine master node synchronizes the cluster master key to the virtual cipher machine slave node passing verification. According to the invention, hierarchical identity isolation and verification of the cloud server cipher machine host and the virtual cipher machine can be realized, and the security of cluster self-discovery and authentication stages is ensured.

The invention belongs to the technical field of network communication, and discloses a service network message cross-domain transmission method and system based on SRv6SID function extension. According to the method, a service network identifier is embedded in an Args field of the SRv6SID, the service network identifier comprises a service network type (TYPE) and a service virtual group tag (VGT), and service awareness transmission of a cross-domain network is realized in combination with an intelligent routing decision driven by deep reinforcement learning. Compared with the prior art, the protocol compatibility can be ensured, the transmission delay and the protocol overhead can be remarkably reduced, the transmission flexibility, the high efficiency and the customizability of the service network message among different network domains can be improved, and the method and the device are suitable for scenes such as 5G, industrial internet and the like.

The invention discloses a self-adaptive distributed network integration system and method for virtual and real unmanned aerial vehicle cooperation, and relates to the technical field of unmanned aerial vehicle control, the system comprises a central control plane and at least one node agent, the central control plane comprises a global identity manager configured and distributed with globally unique network identity information, recording and recovering the network identity information; the network topology and state manager is configured to generate a virtual and real network state view, responds to query and issues a network simulation instruction to the node agent; the distributed network coordinator is configured to decide and coordinate the node agents to construct a cross-host logic two-layer network domain; the security policy manager is configured to define and store a network access control policy of the virtual unmanned aerial vehicle; the adaptive distributed network integration system and method aim to realize physical presentation of the virtual unmanned aerial vehicle on the network level, so that the virtual unmanned aerial vehicle can directly communicate with and collaboratively work with a real unmanned aerial vehicle in the same network plane.

The invention relates to the technical field of wireless communication, and provides an ultra-low time delay cooperative communication method and system, and the method comprises the steps: constructing an end-to-end network slice strategy model which comprises a wireless access network, a bearer network and a core network based on a service level protocol; fusing vehicle-mounted and roadside heterogeneous sensing data, constructing surrounding environment situation sensing data, and generating an uplink data packet with a service type identifier; a dynamic decision is made according to a service type identifier in the uplink data packet, a collaborative scheduling logic mechanism is triggered, end-to-end transmission is completed in each network domain, and a multi-access edge computing data packet is output; and performing real-time analysis on the multi-access edge computing data packet, generating a final control instruction or early warning information, and completing closed-loop issuing through a downlink. According to the invention, end-to-end network resource hard isolation and cloud end-to-end integrated cooperative intelligence are cooperatively fused, and a whole-process deterministic service system from multi-source sensing, guarantee communication and cooperative decision-making to closed-loop control is constructed.

Examples described herein relate to multiple processor nodes which are physically separate with interfaces to a common network interface. A local processor can run a timing recovery algorithm, and tune the master timer to align with the network domain to cause the master timer and network timing domains to be in the same domain. A common master timer can be used to align time stamps of independent processor nodes. A processor node can use the common master timer as a reference and the processor does not need to communicate with another processor to synchronize its timer.

The invention discloses a decentralized AI service credible management system and a decentralized AI service credible management method. According to the method, the client and the server of each network domain are constructed through the credible AI model based on federal learning, so that the credibility of the AI model obtained by training can be ensured; the block chain node in each network domain can evaluate the credibility of the AI model uploaded to the block chain by the server of each network domain through the AI model credibility evaluation based on logistic regression and clustering, thereby supporting the subsequent personalized AI service. Through on-chain registration, under-chain storage and authorization access control of the AI model realized based on the client, the server and the block chain network, block chain-based AI service management is realized, and decentralized management of the whole life cycle of the AI service can be realized.

A system and method for privilege assurance protection of computer networks that remedies the deficiencies of the current directory service structure. The system uses a software agent to collect and store snapshots of all network resources on a computer network by identifying network domains, searching the directory service of each domain for network resources, and periodically querying the network resources for changes. The software agent communicates with a backend server which provides searching, querying, storage, administrative and other functionality to the agent via remote procedure calls.