295 results about "Outernet" patented technology

The invention relates to the technical field of network security, and particularly discloses a front digital boundary security switching method and system based on an optical one-way transmission characteristic and a storage medium, and the method comprises the steps that a front digital boundary security gateway of a service extranet receives a request, analyzes a context parameter of the request, and stores the context parameter of the request; legality verification is carried out on the carried exchange account, the key and other request parameters, and request context parameters are signed and encrypted; after the legality verification is passed, the service extranet front digital boundary security gateway encapsulates the request context parameter into a request data packet, a unidirectional data transmission optical shutter connection pool from the extranet to the intranet is used, and the request data packet is sent to the intranet front digital boundary security gateway after the connection is obtained; and after receiving the request data packet, the intranet front digital boundary security gateway decrypts and verifies the signature of the request message in the request data packet, reconstructs the request message after the verification is successful, and sends the request message to a real target server to obtain a result.

The invention provides a method, system and device for data encryption transmission between isolation networks based on a two-dimensional code and a medium, and belongs to the technical field of data transmission. The method comprises the steps that a form needing to be transmitted is acquired from an intranet, and key fields are extracted; converting the primary key field into a short code by using a mapping table, splicing the short code with the basic field and the service field, and adding a check code to obtain source data; after encrypting and encoding the source data, converting the source data into a two-dimensional code, and transmitting the two-dimensional code to an external network system through a physical medium; scanning the two-dimensional code by using a terminal device in an extranet, decoding and decrypting the two-dimensional code, and then splitting the two-dimensional code to obtain a short code, a basic field, a service field and a check code; and performing data verification by using the verification code, restoring the short code into the main key field by using the mapping table after the verification is passed, and restoring the original form according to the main key field, the basic field and the service field. According to the invention, a complete process from internal network data extraction to external network data restoration is realized based on the two-dimensional code.

The invention discloses a big language model training method based on a knowledge graph, which comprises the following steps: collecting professional text data in a specific field, extracting entities and relationships from the professional text data, constructing a field knowledge graph, and constructing the knowledge graph based on data of different data sources on the basis of an external network; and introducing the domain knowledge graph into an intranet, storing the domain knowledge graph into a knowledge base in the intranet, extracting terminologies from the domain knowledge graph, analyzing word frequencies of the terminologies in the professional text data, and selecting the terminologies with the word frequencies higher than a set threshold value as newly added high-frequency terminologies. According to the method, the professional knowledge graph of the target field is constructed, the big language model is finely adjusted based on the professional knowledge graph, and the professional knowledge big language model is generated.

The invention relates to the technical field of online communication, in particular to a multi-network-type intercommunication online communication system which comprises a management information large area, when the system is used, resources in an intranet are mapped to an extranet through an Nginx proxy server, so that remote access of the resources is achieved, and the management information large area is expanded. Data forwarding and load balancing are carried out among different servers by using the Nginx proxy server, the efficiency and stability of data transmission are improved, data can be simultaneously sent and received between two network nodes by using an mqtt protocol, the efficiency and reliability of data interaction are improved, and the data transmission efficiency and reliability are improved. The method is beneficial to providing real-time message transmission and multi-terminal data sharing synchronization of applications such as communication exchange and file storage across two network types, is beneficial to solving the problem that a user cannot perform direct communication exchange and file transmission due to network boundary limitation, crosses regional limitation and time limitation, is beneficial to realizing flexible office, and is convenient to use. The production efficiency is improved.

According to the internal network and external network synchronous transmission method and system based on the TCP provided by the invention, file type detection and file title detection are realized at a server side, compliance screening is carried out on file contents before a transmission link, and sensitive files are prevented from entering a transmission link; after the detection is passed, segmented transmission is carried out by adopting a preset fragmentation rule, and breakpoint resume is executed by utilizing a fragmentation index when the transmission is interrupted, so that the stability and the efficiency of large file transmission are remarkably improved; furthermore, the server pushes the downloading notice to the extranet client through the TCP after receiving the auditing result of the intranet client with the auditing authority, so that the file is ensured to be subjected to the auditing link before being transmitted to the extranet, and the unification of high safety, controllability and high efficiency is realized.

The embodiment of the invention discloses a light application interaction architecture method and device based on data ferry and a medium, and the method comprises the steps: deploying an extranet light application in an extranet server, deploying an ERP system in an intranet server, and physically isolating the extranet server from the intranet server; deploying the cache database in an extranet server, and storing data of the extranet light application in the cache database; and deploying the data ferry machine in an intranet server, querying the newly added data in the cache database through the data ferry machine, and sending the newly added data to the ERP system to complete the light application interaction architecture. According to the embodiment of the invention, intranet applications and services of clients are not directly exposed in an extranet environment, external users cannot directly penetrate through the intranet services no matter what modes the external users pass through, IT security risks are effectively reduced through the light application of the ferry machine, and the extranet applications and the intranet applications have emphasis, perform their own functions and do not influence each other.

The invention discloses an enterprise-level three-party dependency package security management and control system and method, and relates to the technical field of software supply chain security, and the enterprise-level three-party dependency package security management and control system comprises the following modules: a timed task scheduling module, an external network package pre-scanning module, a private service package monitoring module, a dependency graph construction module, a product management and control module and a notification display module. By establishing an external network packet pre-scanning mechanism, security scanning is performed and a blocking list is generated before a dependent packet enters an enterprise private server, and introduction of a packet containing high-risk vulnerabilities is blocked from the source; meanwhile, through the continuous monitoring of the private server package and the construction of the dependency relationship graph, the vulnerability discovery and the accurate positioning of the influence range of the stored dependency package are realized; and finally, performing hierarchical management and control on the affected products based on vulnerability levels, and realizing timely transmission and situation visualization of risk information through a notification display module. According to the invention, full-life-cycle safety protection from an external network source to internal products of an enterprise is realized, and the safety management level and risk response efficiency of the dependent package of the enterprise are effectively improved.

The invention provides a ferry password isolation system, and relates to the technical field of information security, and the system comprises an external network host module, a physical ferry module, an intermediate host module and an internal network host module which are isolated from one another: the external network host module is configured to communicate with an external network, obtain data from the external network, and transmit the data to the physical ferry module; the physical ferry module is configured to communicate with the extranet host module, is disconnected from the intermediate host module, and receives data transmitted by the extranet host module; the data transmission module is disconnected with the external network host module, communicates with the intermediate host module and transmits the data to the intermediate host module; the intermediate host module is configured to receive the data transmitted by the physical ferry module and transmit the data to the intranet host module in a one-way manner; and the intranet host module is configured to receive the data transmitted by the intermediate host module.

The invention discloses a streaming media transmission method and system based on a security isolation device. The method comprises the following steps: connecting an intranet database through the security isolation device; obtaining a streaming media identity identifier in a request information table of the intranet database; converting the streaming media identity into an intranet real streaming media address, accessing the intranet real streaming media address and caching the streaming media information; and forwarding the cached streaming media information to an external network client. By using the security isolation device and the streaming media transmission technology, the problem that the streaming media service cannot be directly accessed in a cross-network environment is solved.

The invention discloses an intranet data anti-leakage method based on zero trust and a related device, and belongs to the technical field of information technology and data security. The method comprises the following steps: identifying mainboard information of terminal equipment through a desk management module, limiting all unauthorized data external transmission paths, and only allowing internal white list software to be installed; an isolation wall of an intranet and an extranet is established through a network isolation module, only one network is allowed to exist at the same time, a client is deployed at a credit granting terminal and is bound with a credit granting account, and a gateway end verifies a user identity through a security center and gives a corresponding access right; the flow management and control module is used for limiting the intranet flow to only access the white list website; through an outgoing approval module, mail outgoing is allowed and file outgoing parameters are set only after approval is passed; and single management and control of an external transmission path of intranet data and blocking of a secret divulging behavior are realized. Through real-time control and safety supervision, file protection and leakage prevention of intranet data can be achieved, operation is convenient and fast, and applicability is achieved.

The invention provides an energy storage EMS device remote debugging system and method, and is used in the technical field of Internet of Things, the system comprises an energy storage EMS device, an FRP server and an operation and maintenance terminal, and the energy storage EMS device comprises an FRP client and a wireless communication module; the FRP client is used for applying for registration from the FRP server and forwarding data of the FRP server after establishing a connection with the FRP server; the wireless communication module is used for establishing wireless communication connection between the energy storage EMS device and the FRP server; the FRP server is used for distributing an external network access IP address of the energy storage EMS device, establishing a connection with the FRP client according to a request of the operation and maintenance terminal, and forwarding data of the operation and maintenance terminal and the FRP client; and the operation and maintenance terminal is used for initiating a connection request to the FRP server and receiving operation and maintenance data returned by the FRP server. According to the scheme, based on wireless communication and FRP intranet penetration, the network configuration process in remote operation and maintenance can be simplified, the power protocol compatibility is improved, and the network connection stability and reliability can be guaranteed.

The invention discloses a one-way off-line security intelligent decision center system with local deployment as a main and external network service as an auxiliary and a control method, and belongs to the technical field of artificial intelligence security and edge intelligent decision. A three-level security domain physical and logic dual isolation architecture is adopted, extranet multi-model intelligent security enablement is performed on a local core decision domain through a physical one-way import channel, the local core decision domain completes reasoning calculation in combination with an enablement result in a non-extranet interaction state, a top-layer task scheme is generated, and a top-layer task scheme is generated. Through a multi-mode man-machine interaction mode, after human rigid authorization, issuing to an intranet equipment scheduling domain for execution, and feeding back a state in real time to form a full-link closed loop; the method realizes external network multi-model intelligent security enabling, local agent professional decision and rigid closed loop dominated by human beings in the whole process, aims to solve the problems of cloud dependence, data leakage, out-of-control AI, high cost, poor adaptability and the like, and is suitable for families, industries, confidential scenes, field non-support operation and other scenes.

The present invention relates to the field of intelligent vehicle technology, and provides a vehicle terminal access method, device and system, the method comprising: receiving an access request corresponding to a target client, allocating a corresponding dynamic port for the current access request; sending the dynamic port to the target client, and instructing the target client to establish a first data channel between the target client and a reverse proxy server; sending the dynamic port to a target vehicle terminal through a target control channel, and instructing the target vehicle terminal to establish a second data channel between the reverse proxy server and the target vehicle terminal; based on the first data channel, receiving an external network request sent by the target client; based on the second data channel, sending the external network request to a target service associated with the external network request in the target vehicle terminal. The present invention can improve the security of communication and ensure the stability of system operation.

The invention particularly relates to a dynamic bandwidth sharing management method based on OpenFlow. According to the dynamic bandwidth sharing management method based on the OpenFlow, an intranet switch guides out-of-network traffic of a virtual machine to an OpenFlow node, and it is ensured that all out-of-station traffic passes through a control platform subjected to centralized management; the OpenFlow controller monitors and analyzes the flow in real time, and limits the flow through IP matching by using a set flow table; the OpenFlow node carries out mutual conversion on the flow of the intranet and the flow of the extranet and applies a corresponding QoS strategy; and the internal network core switch sends the processed flow to the target virtual machine to realize flow control of QoS (Quality of Service). According to the dynamic bandwidth sharing management method based on OpenFlow, it can be ensured that key services obtain necessary bandwidth support, meanwhile, the operation cost of a user is reduced, the network management process is simplified, efficient sharing and cooperation of resources are promoted, the bandwidth management capacity in a cloud computing environment is improved, the elasticity and expandability of a system are enhanced, and the dynamic bandwidth sharing management method based on OpenFlow can be applied to the cloud computing environment. And ever-increasing business requirements can be met.

The invention relates to a credential cross-platform unidirectional optical isolation data transmission and release method and system, and belongs to the field of data processing. The method comprises the following steps: triggering a signal-creative cross-platform one-way data acquisition isolation optical shutter through an initialization protocol, the one-way data acquisition isolation optical shutter covering an intranet processing layer, an extranet processing layer and a single link physical optical fiber layer, and executing the initialization protocol to perform dual-channel independent initialization on network hardware interfaces of the intranet processing layer and the extranet processing layer; the user configuration parameters are analyzed, and a configuration strategy is generated based on the user configuration parameters and used for configuring a one-way data acquisition isolation optical shutter; generating and executing an interface activation protocol of the one-way data acquisition isolation optical shutter based on the user configuration parameters; the intranet processing layer of the unidirectional data acquisition isolation optical shutter receives field network data and unidirectionally transmits the field network data to the extranet processing layer, and the extranet processing layer delivers the field network data to a specified server. According to the invention, one-way secure transmission of data between the internal network and the external network is realized, and no information flowing to the internal network from the external network is ensured.

The invention discloses an analysis and display method and system for network quality detection, a medium and a product, and relates to the technical field of data processing. In the method, external network detection data and WiFi access quality data reported by probe equipment are received, and the data are aggregated according to a preset time period to form a network quality data group of a sampling period. And the system arranges the data groups according to a time sequence, and identifies an abnormal period in which an external network time delay mean value or a packet loss rate suddenly changes. And for each abnormal period, extracting a change sequence of WiFi signal strength, a working frequency band and an external network performance index in the period and an adjacent period. Based on these sequences, the system identifies quality degraded trigger events and extranet path problem points. And finally, displaying the network quality data of each sampling period in a visual interface, and marking a corresponding trigger event and a problem point at an abnormal period position. By implementing the technical scheme provided by the invention, the analysis and display efficiency of network quality detection can be improved.

The invention discloses an extranet-driven intranet and extranet security isolation compiling system, and belongs to the technical field of software development. Comprising an SFTP server, and the SFTP server is connected with an intranet and an extranet. The SFTP server is used for internal and external network upload management and control, internal and external network physical isolation and file synchronization. The intranet comprises an automatic script, a configuration file detection module, an automatic compiling module and an intranet log module; the external network comprises a front end and a rear end, the front end is used for providing a unified operation entrance for a user, and the rear end is used for driving the front end to work through a data processing algorithm; when a user initiates a request through a webpage, a system creates task groups, and each task group comprises a plurality of sub-tasks; at the moment, the extranet executes an extranet process to perform extranet legality verification, and performs task release; and meanwhile, the intranet executes an intranet process and periodically performs intranet legality detection. The method can ensure that each link masters the edition issuing key information consistently, and effectively improves the information transmission efficiency and accuracy.

The invention discloses a method for detecting existence of an illegal external connection channel in a terminal based on a middleware injection mode, which comprises the following steps of: loading byte codes by a detection engine, and hooking corresponding functions on a Web application to realize monitoring and intervention on the Web application; when the intranet terminal accesses the detection Web application, the detection engine detects a request message and inserts a static resource in a response; the static resource tries to access the extranet monitoring server from the browser; after the external network monitoring server receives the access data from the static resources, an illegal external connection alarm is immediately carried out; the extranet monitoring server returns an extranet IP and a browser fingerprint of the terminal host in the access data to the static resource; and the static resource sends the external network IP and the browser fingerprint of the terminal host to the internal network monitoring server, and the internal network monitoring server carries out illegal external connection alarm after receiving the external network IP and the browser fingerprint. According to the invention, powerful support can be provided for network security protection, and security detection precision and breadth are improved.

The invention mainly discloses a streaming media asymmetric network penetration method, which comprises the following steps that: after being started, intranet video equipment is actively connected to a preset extranet server, and a persistent control channel is established; the extranet server receives a watching request instruction of the user side and judges whether a corresponding audio and video stream is transmitted or not, if not, a first instruction is sent to the intranet video device through the control channel, and the first instruction is used for instructing the intranet video device to push the audio and video stream to the extranet server; and the intranet video device responds to the first instruction and transmits the encoded audio and video streams to the extranet server through the data transmission channel.

The invention provides a return system and method for flight data of an unmanned aerial vehicle, and is applied to the technical field of communication. An intranet unit acquires protocol data and file data from a command and control station, and performs protocol conversion on the protocol data to obtain UDP unicast data; the first one-way optical shutter transmits the UDP unicast data and the file data to the external network unit in a one-way manner; the external network unit transmits the file data and the UDP unicast data to the router; the router transmits the file data and the UDP unicast data to a network server through a VPN tunnel; and the command and control center restores the UDP unicast data to obtain protocol data, performs command control on the unmanned aerial vehicle based on the protocol data, and stores file data to an intranet. According to the scheme, the VPN tunnel is constructed, the protocol data and the file data are transmitted back through the VPN tunnel, the transmission back cost is reduced while the transmission back effect is guaranteed, the command and control station and the command and control center are physically isolated through the arrangement of the one-way optical shutter, and illegal utilization of a transmission back link is avoided.

The invention provides a network access control method and device and related equipment, and relates to the technical field of network security. The method comprises the following steps: receiving a user identity certificate sent by a user terminal, wherein the user identity certificate is used for determining the network access authority of a user; verifying the user identity credential to obtain a network access authority of the user, the network access authority including at least one of an intranet access authority and an extranet access authority; and configuring a network access strategy of the user based on the network access permission. According to the invention, the network access strategy (intranet, extranet or composite authority) is dynamically configured by verifying the user identity certificate, so that the authorized user is allowed to access the specified extranet application as required while maintaining the security of the virtual private network encryption tunnel to protect the intranet resources; the problem of low cooperation efficiency caused by forced network switching of a traditional virtual private network scheme is solved, and the safety of internal network resources is protected while the working efficiency is improved.

The invention relates to an MCX group call service penetration packet implementation method. The MCX server comprises a call control module, a speaking right control module and a media distribution module; a plurality of MCX clients, wherein each MCX client comprises a call processing module, a speaking right processing module and a media processing module; the speaking right control module and the media distribution module are configured to receive and process a UDP penetration packet and update address mapping; the speaking right processing module and the media processing module are configured to send UDP penetration packets and process speaking right and voice streams. According to the invention, the MCX client is enabled to acquire the extranet address and the port of the MCX server for processing the speaking right and the voice stream by using the call signaling established by MCX group call, the speaking right SSRC and the voice SSRC are respectively used for identifying the speaking right of the MCX client and the voice stream of the MCX client according to the MCX protocol, the MCX client is enabled to send the fixed format UDP penetration packet with the SSRC identification to the MCX server, and the UDP penetration packet is enabled to be transmitted to the MCX server. And an intranet penetration function of speaking right and voice between the MCX client and the MCX server is realized.

The invention discloses an RTMP one-way proxy method, system and device based on one-way import equipment and a medium, mainly relates to the technical field of one-way proxy, and is used for solving the problems that in the existing scheme, the one-way flow of data is strictly limited, but a VPN (Virtual Private Network) needs to establish a tunnel through two-way communication, and the handshake process of an RTMP also depends on two-way transmission, so that the efficiency is high. The defect cannot be avoided in the prior art. Comprising a streaming media service relay module connected with RTMP stream pushing end equipment A, a one-way sending program connected with the streaming media service relay module, a one-way receiving program connected with the one-way sending program, and an analog terminal publishing module connected with the one-way receiving program. The system comprises a subscribed external network RTMP streaming media server, an analog terminal subscription module connected with the subscribed external network RTMP streaming media server, a one-way sending program connected with the analog terminal subscription module, a one-way receiving program connected with the one-way sending program, and an analog terminal publishing module connected with the one-way receiving program.

The invention provides a gold plating machine which comprises an electroplating bath, an anode outer net and an anode inner net which are respectively arranged on two sides of the electroplating bath, a first power supply connecting wire for connecting a power supply and the anode inner net, and a second power supply connecting wire for connecting the anode inner net and the anode outer net, the anode inner net comprises a first anode inner net and a second anode inner net arranged on the inner side of the first anode inner net. By controlling the electric quantity output by the power supply to flow from the internal network to the external network, compared with a mode of connecting the internal network from the external network in conventional equipment, the electric potential of the external network is reduced, the electric quantity output by the external network is reduced, and the electric quantity distribution uniformity is improved; a traditional complete outer side anode net is divided into a plurality of anode nets which are arranged at intervals, the area of the outer net is reduced, a traditional single-layer anode inner net is changed into a double-layer anode net, the area of the inner net is increased, the area of the anode outer net and the area of the anode inner net are relatively equal, the output electric quantity is relatively equal, and therefore the electric quantity of electroplating liquid is evenly distributed, and the electroplating efficiency is improved. And the plating quality is improved.

The invention discloses a large model localization deployment and security isolation device for a hospital closed network environment, which consists of a model deployment unit, a security isolation unit, a data management unit, a security control unit and an intelligent updating unit, and realizes independent operation of a large model in a hospital. According to the system, safe input of medical data is achieved through data cleaning, desensitization and formatting processing, full-process safety of data and model files is guaranteed through authority control, access recording and encrypted storage, and credible upgrading and abnormal rollback of a model are completed through a one-way isolation and offline updating mechanism. The large model can be operated and maintained under the condition that an external network is not connected, the requirements of hospitals for data privacy and network security are met, and the method is suitable for various types of intelligent medical services.

The invention discloses an Internet of Things equipment interconnection method, and relates to the technical field of Internet of Things, and the Internet of Things equipment interconnection method comprises the steps: broadcasting equipment detection information through a communication mode supported by the Internet of Things equipment; wherein the device detection information comprises a device identifier, a communication mode and an external network connection state of the first device; if connection attribute information fed back by the second equipment based on the equipment detection information is received, storing the connection attribute information in a local routing information table; establishing connection with the second equipment according to the connection attribute information; if the connection attribute information of the connected extranet exists in the routing information table, determining a data route connected with the extranet according to the connection attribute information; the data routing comprises one or more communication modes. By means of the data transmission capability of the equipment, the equipment which cannot be directly connected with the cloud has a networking function, so that remote control of the equipment or control of a handheld terminal can be realized.

The invention discloses an electric power private network unmanned equipment cooperation intranet and extranet data interaction processing method, and belongs to the technical field of power grid intranet and extranet cooperation data processing. The method is used for solving the technical problem of poor data interaction efficiency and quality of an intranet and an extranet during cooperation of unmanned equipment in a power private network in an existing scheme. Task instructions, historical electromagnetic environment data and real-time working condition parameters of the unmanned aerial vehicle and the unmanned vehicle are collected and processed, data analysis is performed through a pre-constructed intention-electromagnetic coupling prediction model, and a preliminary prediction result and an anti-interference resource reservation amount are output; performing unmanned aerial vehicle-unmanned vehicle cooperative resource block division based on the output prediction result, optimizing channel and bandwidth allocation, and outputting an equalization strategy; dynamically switching the working mode of cognitive radio by using an equilibrium strategy, and realizing intelligent combination of repeated data requests in combination with intention similarity clustering; and analyzing the prediction result and the actual interaction behavior of the unmanned equipment, and dynamically implementing resource redistribution.

The invention relates to the technical field of communication, in particular to a communication method based on double one-way channels, which comprises the following steps executed by an intranet communication module: receiving a first one-way optical signal through a first one-way channel, the first one-way optical signal corresponding to a network request sent by an extranet communication module; determining to-be-audited data according to the first one-way optical signal; verifying the to-be-audited data to obtain target data; generating a target instruction according to the target data; through the technical scheme of the application, the problems that the internal network and the external network under physical isolation are low in external request processing efficiency and difficult to realize secure interaction are solved, and the problems that the external request processing efficiency of the internal network under physical isolation is low and the security interaction is difficult to realize are improved. And safe interaction between the intranet and the extranet under physical isolation is realized.

The invention relates to the field of data transmission, in particular to a one-way data transmission device which comprises a data transmission chamber and an optical disc recycling bin communicated with the data transmission chamber through an optical disc recycling opening. The data transmission room is provided with an external network unit, an internal network unit, a transfer bin and a signal transmission module; the external network unit is used for reading data from an external storage medium, recording the data in a pre-stored optical disk, transferring the optical disk to a transfer bin, and triggering the signal transmission module to send a signal to the internal network unit; and the intranet unit is used for transferring the optical disc in the transfer bin to the preset CD driver according to the signal, reading data from the optical disc in the preset CD driver, and transferring the optical disc from the preset CD driver to the optical disc recovery port. An absolute physical isolation barrier is established between the internal network and the external network, one-way, automatic and safe ferrying of data from the external network to the internal network is achieved, the risk of data leakage is effectively eradicated, and the safety and reliability of data transmission between computers of the internal network and the external network are improved.

The invention discloses a time-frequency signal security bastion host which comprises an input module, an output module, a signal modulation and demodulation module, an identity authentication module, an equipment management module, a power management module, a signal security detection module, an equipment security audit module and a security login management module. Intranet and extranet isolation is carried out on extranet standard time-frequency signals and intranet time-using equipment through the time-frequency security bastion host, high-precision time-frequency security time service and output of intranet time synchronization signals are achieved, the accuracy of high-precision time frequency and the non-tampering property of standard time are guaranteed, and credible transmission of high-precision standard time is achieved.