114 results about "Network domain" patented technology

The invention discloses a cross-network collaborative alarm noise reduction method based on a knowledge distillation large model, and belongs to the technical field of network security. Comprising the following steps: deploying a server in a first network domain for operating a teacher model; a lightweight device is deployed in a second network domain needing to be protected and is used for operating a student model; a knowledge distillation module is established as a communication bridge between two networks. In the first network domain, training a teacher model by using the alarm data; after training is completed, the teacher model generates a knowledge data packet; the teacher model writes the generated knowledge data packet back to the knowledge distillation module and associates the knowledge data packet with the original reference alarm data; and the student model deployed in the second network domain simultaneously reads the reference alarm data and the corresponding knowledge data packet generated by the teacher model from the knowledge distillation module. According to the invention, the efficiency and accuracy of cross-network cooperative security alarm noise reduction are improved, and an efficient alarm noise reduction method is provided for the technical field of network security.

The invention relates to the technical field of data transmission, and discloses a cross-domain model communication method, device and equipment and a computer readable storage medium. The method is applied to a cross-domain model communication system, the system comprises a user domain, a data domain and a gatekeeper, and the method comprises the following steps: sending request information of a model in the data domain to the gatekeeper through the user domain, and performing security auditing on the request information through the gatekeeper; when the security check is passed, sending the request information to a data domain through a gatekeeper, and generating response information based on the request information through a model; sending the response information to a gatekeeper through the data domain, and performing security auditing on the response information through the gatekeeper; and when the security check is passed, the response information is sent to the user domain through the gatekeeper. When the model carries out data transmission between the user domain and the data domain, the transmitted data is subjected to security auditing through the gatekeeper, and the data transmission is carried out only when the security auditing is passed, so that the security of cross-domain communication of the model is improved.

The invention relates to the technical field of communication, and discloses a reinforcement learning-based cross-space resource autonomous configuration method, which comprises the following steps of: performing joint modeling on network resources and physical resources by using a unified heterogeneous graph, and expressing a cross-space resource comprehensive configuration problem as a random and time-varying mixed integer nonlinear programming problem in a rolling time domain; introducing reinforcement learning to convert the nonlinear programming problem into a constrained Markov decision process; a resource configuration language instruction output by the policy network is mapped into a specific network domain and physical domain control instruction through a domain specific compiler, the specific network domain and physical domain control instruction is transactionally issued and executed, and an execution receipt is collected and fed back to the policy network to form closed-loop learning; according to the method, the engineering feasibility and the theoretical interpretability are unified. By means of a resource configuration language and triple masks, strategy output naturally falls in a compilable and rollback instruction subspace, and invalid exploration and configuration conflicts are remarkably reduced.

The present disclosure provides a network configuration verification acceleration method based on network domain knowledge, an electronic device and a readable storage medium. The method of the present disclosure comprises: screening the first configuration information in the network configuration information irrelevant to the network invariant to be verified, ignoring the first configuration information in the network configuration information, and obtaining the second configuration information; encoding the network invariant to be verified to obtain the first encoded information; encoding the second configuration information to obtain the second encoded information, wherein the numerical attribute information in the second configuration information is abstracted in the encoding process; combining the first encoded information and the second encoded information to obtain the encoded information; determining the search order of the first variable in the encoded information, and determining the assignment order of the first variable in the encoded information; selecting the first variable in the encoded information according to the search order, and then assigning the selected first variable according to the assignment order to verify the encoded information.

A resource event sensing method and system based on computing network fusion relates to the technical field of computing network fusion resource sensing, and comprises the following steps: decomposing an application into a computing task and a connection task to generate application information; generating task information including a task ID, a task type, a resource type, a corresponding resource ID and resource context information for each task; constructing a unified computing network resource information topological graph based on the task information, taking computing resources corresponding to the computing tasks as nodes, and taking connection resources corresponding to the connection tasks as edges; a unified clock source is adopted to ensure the time consistency of sensing data, and the resource state is sensed; and carrying out aggregation and correlation analysis on the sensing events according to the resource dependency chain. Through the unified event model, the computing network topology and the resource association mechanism, the problems of sensing fragmentation, fault positioning difficulty and low resource scheduling efficiency caused by sensing separation of the computing power domain and the network domain are solved, a precise end-to-end resource view is provided for AI application, and the operation and maintenance efficiency of the AI cluster is remarkably improved.

This invention relates to the field of waste-to-energy incineration technology and provides an artificial intelligence-based combustion control method for waste-to-energy boilers. The method includes: collecting data from a distributed control system, flue gas monitoring, and feed metering, aligning these data with a unified time frame, and generating combustion condition data; calculating drift residuals and missing rates, classifying and labeling them to obtain confidence weights; calculating equivalent lower heating value and moisture content from steam flow and feed flow based on energy balance, updating parameters only during the stable steam and carbon monoxide windows; identifying the equivalent time delay from control quantities to steam and emissions based on cross-correlation peak values, writing this information into the prediction model after stabilization, and performing shift compensation; constructing hard constraints for steam and emissions based on aligned predictions, writing confidence into the cost function, using MPC to calculate the feasible region, selecting incremental deployments within the policy network domain, and backing down and auditing for low confidence levels.

The invention discloses a recognition method of a reversely-installed fastener, a storage medium and equipment, and the method comprises the steps: firstly obtaining an original image of a track, carrying out the data enhancement and domain extension of the original image, inputting the enhanced track image and a domain extension image into a fastener recognition model, and carrying out the iterative training, thereby obtaining a trained fastener recognition model; inputting a track image to be recognized to obtain a fastener recognition result of the track image; the fastener identification model is based on Faster R-CNN and comprises a backbone network, a region candidate network, a domain comparison module and a detection head, the domain comparison module introduces a class-level domain comparison learning mechanism to encourage a detector to understand correlation and difference between fasteners in different fields on the class level, the model is guided to mine fastener class-level domain invariant features, and the detection head is used for identifying the fasteners in the class-level domain. According to the method, the problem that the reversely-installed fastener is difficult to recognize in multiple scenes is solved, the generalization and accuracy of track fastener recognition are greatly improved, the cost is saved, and the method has important practical application significance.

A multi-domain recovery service (MDRS) is described for dynamically recovering from network path failures in a communication network. The MDRS can be implemented within an orchestrator of an Open Radio Access Network (O-RAN) architecture.Upon detecting a trigger condition affecting (e.g., a failure in) a network path that traverses multiple network domains, embodiments query a network topology service and an observability service to obtain high-level and low-level network topology information and real-time network conditions across these domains. Embodiments identify candidate alternative paths by analyzing this comprehensive network data and selects an optimal alternative path based on predefined criteria such as latency, bandwidth capacity, reliability, and traffic load. The orchestrator can then direct the reconfiguration of network components across the multiple network domains to route communications through the new network path, thereby restoring end-to-end connectivity.

This application relates to a method, apparatus, computer device, and computer program product for representing spatiotemporal log source graphs in multi-source heterogeneous networks, relating to the field of network security, and capable of accurately determining the spatiotemporal behavioral representation of the source graph of node interactions in multi-source heterogeneous networks. The method includes: acquiring log data from the multi-source heterogeneous network; mapping the log data to a preset network security ontology model in each network domain to obtain the entities corresponding to the log data and the relationships between these entities; obtaining an initial source graph based on the entities and relationships; merging redundant nodes based on the data dependencies between nodes in the initial source graph to obtain a target source graph; extracting causal topological features through a heterogeneous graph attention mechanism and extracting temporal evolution features through a temporal attention mechanism; and comparing and fusing the causal topological features and temporal evolution features to obtain the spatiotemporal behavioral representation corresponding to the target source graph.

This application provides a message sending method, apparatus, and storage medium based on route security verification, relating to the field of network technology. It solves the technical problem in related technologies where routing forwarding rules designed by routing devices based on a valleyless model may not provide comprehensive route security verification. Applied to a first routing device, the method includes: receiving a target message sent by a second routing device; the second routing device being the upstream device of the first routing device; the target message including: a network domain identifier of the second routing device; the network domain identifier indicating the network domain to which the routing device belongs; performing route security verification on the first routing device based on the network domain identifier of the second routing device and the network domain identifier of the first routing device; and, if the route security verification of the first routing device passes, sending the target message to a third routing device, the third routing device being the next-hop device of the first routing device.

The utility model discloses a vehicle-mounted PON network communication system, which comprises an optical network domain unit, an ODN optical network unit and a branch network unit, the optical network domain unit is a central centralized processing unit of an optical line terminal and is used for point-to-multipoint of a single-fiber bidirectional network, the ODN optical network unit is an optical distribution network unit of passive light, and the branch network unit is used for point-to-multipoint of a single-fiber bidirectional network. The optical line terminal is electrically connected with the optical line terminal; according to the utility model, the number of the optical network domain unit is set to be one, and optical signal transmission between the optical distribution network unit and the plurality of branch network units is utilized, so that the traditional point-to-point network communication is replaced, and the whole vehicle network communication can be realized by only one optical network domain unit OLT and the plurality of branch network units ONU, thereby greatly reducing the number of optical fibers and optical modules, and reducing the cost. The cost is saved, the communication efficiency is improved through a PON network burst function mode, and the progress of automatic driving of the ADAS is accelerated.

The invention discloses a redundancy optimization-based power grid data consistency method, which comprises the following steps of: dividing a whole network into a plurality of local domains by utilizing reputation data and topological information of nodes, electing a global committee, further performing dynamic influence evaluation on a transaction request based on a network domain division graph, and according to an evaluation result, determining the consistency of the transaction request. High-frequency local transactions are limited in a local consensus domain for closed-loop processing, and only transactions related to global influences are submitted to a global committee. Through the mode, the communication redundancy of the whole network is remarkably reduced, so that the concurrent processing capability and expansibility of the system are greatly improved while the data consistency is guaranteed.

Disclosed in the present application are a method and apparatus for generating a cross-domain network topology, which are used for restoring a cross-domain network topology. The method comprises: on the basis of alarm data of each of a plurality of network ports located in a plurality of network domains, determining an alarm type of each network port, wherein the plurality of network domains comprise a wavelength division network domain and a data communication network domain, and the alarm type of each network port is used for representing the nature of an alarm generated by each network port; on the basis of the alarm types of the plurality of network ports, determining from among the plurality of network ports at least one network port pair having a cross-domain association relationship, wherein any network port pair includes two network ports from different network domains, the alarm types of the two network ports having a causal relationship; and on the basis of the at least one network port pair, generating a cross-domain network topology. In this way, in the present application, at least one network port pair having a cross-domain association relationship can be determined on the basis of alarm data, thereby enabling the restoration of a cross-domain network topology.

This invention discloses a domain-specific intelligent routing method for large-scale low-Earth orbit (LEO) satellite networks, belonging to the field of satellite communication technology. This method constructs a network model based on multi-dimensional resource characteristics and combines an improved Transformer architecture regional traffic prediction algorithm to provide resource constraints and spatiotemporal correlation characteristics for routing decisions. Based on geographical region division into virtual nodes and autonomous domains, the LEO satellite network routing process is decoupled into intra-domain and inter-domain parts. Intra-domain routing employs a multi-agent deep Q-network, while inter-domain routing uses a summation tree-based deep Q-network. Routing and resource scheduling algorithms are designed separately for each domain. Through hierarchical routing and decoupled resource scheduling, a domain-specific intelligent routing system with both flexibility and scalability is constructed. This invention significantly enhances the service capabilities of LEO satellite networks under extreme scenarios such as high-frequency topology changes, strictly limited resources, and sudden spatiotemporal changes in traffic, providing a highly reliable, low-latency routing solution for integrated space-ground communication, emergency disaster early warning, and global real-time data transmission.

The application relates to a mapping relationship generation method and device and a storage medium. The method comprises the following steps: obtaining mapping relationship information between a communication connector on a node and a network domain; obtaining mapping relationship information between a process and the node, wherein the mapping relationship information between the process and the node comprises a software component corresponding to the process, and the software component comprises at least one port prototype; creating a service instance for a port prototype used by the process in the network domain according to the mapping relationship information between the communication connector on the node and the network domain and the mapping relationship information between the process and the node, and creating a mapping relationship between the service instance and a target communication connector of the node. Therefore, the mapping relationship does not need to be manually established for each instance, and the efficiency in the communication management configuration process can be improved.

The application provides an AI-based cloud printing task scheduling and cross-terminal resource coordination method and system. The cloud printing task scheduling and cross-terminal resource coordination method comprises generating a position distribution state diagram of a printer terminal cluster and a printer control terminal in a network domain; the cloud platform performs corresponding association of the printer control terminal for each printer terminal in the printer terminal cluster according to the position distribution state, and adjusts the association relationship according to the similarity of the position distribution state; it is judged whether the printing resources of each printer terminal meet the consumable requirements of the printing task; when the printing resources of the printer terminal meet the consumable requirements of the printing task, the printing task scheduling is performed on the printer terminal cluster in the network area; when the printing resources of the printer terminal do not completely meet the consumable requirements of the printing task, the cross-terminal resource coordination adjustment is performed on the printer terminal cluster in the network area. The system comprises modules corresponding to the method steps.

The invention discloses a space-ground integrated electromagnetic spectrum hierarchical semantic situation multi-granularity cognitive system and method, and the system employs a cloud-edge-end hierarchical architecture, and comprises a space-based network, an air-based network and a ground-based network from top to bottom. Cloud computing nodes in the space-based network, edge computing nodes in the air-based network and terminal nodes in the ground-based network are subjected to layered molecular network processing; the method comprises the following steps: establishing a cloud-edge-end layered spectrum semantic situation multi-granularity cognitive mechanism, and collaboratively cognizing a spectrum semantic situation by cognitive granularity gradually coarsened from end to cloud; aiming at heterogeneity of a space-ground integrated network, nodes in air-space-ground network domains are subjected to hierarchical molecular networking based on space breadth, node density and frequency utilization characteristics, and a frequency spectrum hierarchical semantic situation multi-granularity cognitive mechanism in each network domain among the air-space-ground network domains is established. According to the method, the problems of spectrum sensing data explosion and resource shortage of computing nodes and communication links under a traditional spectrum situation sensing architecture are effectively solved.

The embodiment of the application provides a resource allocation method of a communication network and a resource allocation system of the communication network, wherein the method comprises the following steps: analyzing a service request of a specified service to obtain a target parameter requirement, the target parameter requirement being a parameter requirement of a group of quality of service parameters of the communication network for the specified service; obtaining network state information of a first network domain in a plurality of network domains, the network state information of the first network domain being used for indicating a network state of the first network domain; based on the network state information of the first network domain, decomposing the target parameter requirement into a sub-parameter requirement corresponding to each network domain in the plurality of network domains, and respectively issuing a resource allocation instruction carrying the sub-parameter requirement corresponding to each network domain to a controller of each network domain, so as to instruct the controller of each network domain to allocate resources for the specified service in each network domain, and the sub-parameter requirement corresponding to each network domain is a parameter requirement of a group of quality of service parameters of each network domain for the specified service.

A multi-domain recovery service (MDRS) is described for dynamically recovering from network path failures in a communication network. The MDRS can be implemented within an orchestrator of an Open Radio Access Network (O-RAN) architecture. Upon detecting a trigger condition affecting (e.g., a failure in) a network path that traverses multiple network domains, embodiments query a network topology service and an observability service to obtain high-level and low-level network topology information and real-time network conditions across these domains. Embodiments identify candidate alternative paths by analyzing this comprehensive network data and selects an optimal alternative path based on predefined criteria such as latency, bandwidth capacity, reliability, and traffic load. The orchestrator can then direct the reconfiguration of network components across the multiple network domains to route communications through the new network path, thereby restoring end-to-end connectivity.

A server of a first network domain receives an indication container object created in a second network domain. The server identifies, based on the indication container object, a unique identifier, where the unique identifier allows initiation of logging into an account. The server transmits a confirmation code to a user device that is identified based on the unique identifier. Transmitting the confirmation code allows completion of login to the account.

A method of transmitting a deterministic flow, applied to an ingress node of the deterministic flow in a deterministic network domain, comprises, receiving a deterministic flow data packet; determining an index number of an elastic buffer queue (EQ) for buffering the deterministic flow data packet and buffering the deterministic flow data packet in the EQ corresponding to the index number of the EQ; in a current scheduling cycle Cycle x, obtaining a planned EQ resource of a next scheduling cycle Cycle (x+1), wherein the EQ resource at least comprises: an EQ index number and a planned transmission resource amount of the EQ corresponding to the EQ index number; obtaining at least one deterministic flow data packet from the EQ corresponding to the obtained EQ index number, storing the obtained at least one deterministic flow data packet into a physical queue corresponding to the next scheduling cycle Cycle (x+1).

The invention discloses an edge gateway message routing collaboration method and system based on a distributed network, and the method comprises the steps: firstly querying a local routing table after a first edge gateway receives a message routing request, and when a target device is matched to be located in other edge gateway domains, sending a message routing request to the first edge gateway; a special forwarding path can be dynamically and quickly established with the second edge gateway, global routing query or central server intervention is not needed, and localization and automation of routing discovery are realized; wherein a direct forwarding path between a first edge gateway and a second edge gateway is established, and a pre-established device connection path is combined, so that directional and efficient transmission of messages among devices across different edge network domains is realized; meanwhile, redundant revolution of the message in the central cloud or the upper network is avoided, the time delay and the network load of end-to-end transmission are reduced, and the communication interruption risk caused by the fault of the central node is reduced at the same time.

The invention relates to the technical field of network communication, and discloses a cross-domain trusted flexible Internet access service implementation method and system, and the method comprises the steps: transmitting an identity statement to a local network domain through an access device, so as to build a temporary trust relationship, and obtaining a temporary access credential; the problem of initial trust establishment in an unfamiliar network domain without a preset trust basis is solved. On this basis, the access device generates a structured description according to a task demand and an operation strategy, performs multi-round negotiation with a local network domain, and finally establishes a temporary service protocol within an acceptable range of both parties by identifying the difference between the service demand and the operation strategy and generating an alternative service proposal.

Methods and apparatus for biometric data maintenance, access and distribution across two or more experiential and / or network domains. In one embodiment, a 5G NR-based network architecture is provided which allows ultra-low latency and effectively user-imperceptible biometric data use for e.g., authentication and maintenance of user state across multiple domains via multiple constituent user devices (e.g., UEs). The network architecture includes both (i) a distributed biometric database (BDB) model wherein relevant biometric data for individuals / UEs is intelligently cached in various portions of the distributed database, and (ii) centralized and local BAEs (biometric analytics entities) which manage the aforementioned intelligent caching, as well as network configuration using one or both of 5G NR network “slicing” and CU / DU split options to optimize end-user biometric-related applications such as those providing identification / authentication, AR functions, VR functions or yet others.

The application relates to an FPGA-based super-high-speed network security transmission method and system, and belongs to the technical field of network security communication. The system is mainly composed of a network interface module, a password processing module and a configuration management module. The network interface module provides the transmission of super-high-speed network messages, the analysis and recombination of protocols and the compliance inspection of messages; the password processing module fully utilizes the parallel processing capacity of the multi-algorithm unit of the system and provides gatekeeper-type encryption and decryption and out-of-order rearrangement services for network messages. The configuration management module realizes the unified management of the configuration of the running parameters of the network interface module and the password processing module and the audit log through a management bus. The application solves the problems of poor performance, low bandwidth, unstable password operation delay, message disorder and the like of traditional security transmission equipment, and solves the problems of real-time performance, confidentiality and integrity of super-high-speed data transmission between two network domains.

The invention relates to an equipment cross-domain authorization method and device, computer equipment and a storage medium. The method comprises the following steps: responding to equipment access to a target domain, mapping a source domain trust feature of the equipment in a source domain to a trust feature space of the target domain, and obtaining a trust feature space of the target domain based on the trust feature obtained by mapping and an environmental risk factor of the target domain, obtaining a target domain trust value of the equipment in the target network domain through a pre-trained cross-domain trust migration model; and determining a resource access range of the equipment in the target domain according to the target domain trust value, and authorizing resources in the resource access range to the equipment. By adopting the method, the problems of trust migration and authorization during cross-domain of the Internet of Things equipment can be effectively solved, trust transfer between heterogeneous networks can be realized, and the flexibility of cross-domain authorization can be improved; and reasonable resource access authority can be given according to the trust condition of the equipment in the target network domain, so that the rationality and security of access control are improved.

The invention provides an attack traffic processing method and device, equipment, a medium and a program product. Relates to the technical field of network security. The method is applied to a cloud server, and the cloud server comprises a plurality of network domains, a flow processing module and a shared honeypot system. The method comprises the following steps: acquiring attack traffic for a network domain; performing network virtual mapping processing on original attack information in the attack traffic to generate corresponding virtual attack information; based on the virtual attack information, redirecting the attack traffic to a shared honeypot system for attack interaction, and obtaining interaction information of the attack traffic; and returning the interaction information to an attack terminal corresponding to the network domain according to a mapping relationship between the virtual attack information and the original attack information. According to the method provided by the invention, the attack traffic of the plurality of network domains is uniformly drained to the shared honeypot system, so that cross-domain communication and resource reuse are realized, and the deployment cost of tenants and the maintenance cost of the platform are further reduced.

A method performed by performed by an exposure node having a first identity in a first network domain in a telecommunications network is provided. The method includes initiating a request towards a first network node for a subscription to an event of a communication device. The request includes subscription information for a common network exposure in at least two network domains. The method further includes receiving a response from the first network node. The response includes at least one of: a first confirmation that the event will be reported to the exposure node for a second network domain for the common network exposure and a second confirmation that the event will be reported to the exposure node for the first network domain. The second confirmation omits an indication of the common network exposure. Methods performed by a first network node are also provided.

The invention discloses a vehicle network management method and device, equipment and a storage medium, and belongs to the technical field of automobiles. The method is applied to a first electronic control unit, and specifically comprises the following steps: acquiring a network management message sent by a second electronic control unit in a specified network domain; the network management message comprises a service type and a service criticality level corresponding to the service type; determining whether the service criticality level satisfies a preset level condition based on a preset network state table and the service criticality level; if yes, the network state of the first electronic control unit is managed based on the network state of the second electronic control unit; if not, determining whether the service type satisfies a preset service condition based on a preset network state table and the service type; and if yes, based on the network state of the second electronic control unit, performing management processing on the network state of the first electronic control unit.