155 results about "Outernet" patented technology

According to the internal network and external network synchronous transmission method and system based on the TCP provided by the invention, file type detection and file title detection are realized at a server side, compliance screening is carried out on file contents before a transmission link, and sensitive files are prevented from entering a transmission link; after the detection is passed, segmented transmission is carried out by adopting a preset fragmentation rule, and breakpoint resume is executed by utilizing a fragmentation index when the transmission is interrupted, so that the stability and the efficiency of large file transmission are remarkably improved; furthermore, the server pushes the downloading notice to the extranet client through the TCP after receiving the auditing result of the intranet client with the auditing authority, so that the file is ensured to be subjected to the auditing link before being transmitted to the extranet, and the unification of high safety, controllability and high efficiency is realized.

The invention discloses an enterprise-level three-party dependency package security management and control system and method, and relates to the technical field of software supply chain security, and the enterprise-level three-party dependency package security management and control system comprises the following modules: a timed task scheduling module, an external network package pre-scanning module, a private service package monitoring module, a dependency graph construction module, a product management and control module and a notification display module. By establishing an external network packet pre-scanning mechanism, security scanning is performed and a blocking list is generated before a dependent packet enters an enterprise private server, and introduction of a packet containing high-risk vulnerabilities is blocked from the source; meanwhile, through the continuous monitoring of the private server package and the construction of the dependency relationship graph, the vulnerability discovery and the accurate positioning of the influence range of the stored dependency package are realized; and finally, performing hierarchical management and control on the affected products based on vulnerability levels, and realizing timely transmission and situation visualization of risk information through a notification display module. According to the invention, full-life-cycle safety protection from an external network source to internal products of an enterprise is realized, and the safety management level and risk response efficiency of the dependent package of the enterprise are effectively improved.

The invention discloses an intranet data anti-leakage method based on zero trust and a related device, and belongs to the technical field of information technology and data security. The method comprises the following steps: identifying mainboard information of terminal equipment through a desk management module, limiting all unauthorized data external transmission paths, and only allowing internal white list software to be installed; an isolation wall of an intranet and an extranet is established through a network isolation module, only one network is allowed to exist at the same time, a client is deployed at a credit granting terminal and is bound with a credit granting account, and a gateway end verifies a user identity through a security center and gives a corresponding access right; the flow management and control module is used for limiting the intranet flow to only access the white list website; through an outgoing approval module, mail outgoing is allowed and file outgoing parameters are set only after approval is passed; and single management and control of an external transmission path of intranet data and blocking of a secret divulging behavior are realized. Through real-time control and safety supervision, file protection and leakage prevention of intranet data can be achieved, operation is convenient and fast, and applicability is achieved.

The invention discloses a one-way off-line security intelligent decision center system with local deployment as a main and external network service as an auxiliary and a control method, and belongs to the technical field of artificial intelligence security and edge intelligent decision. A three-level security domain physical and logic dual isolation architecture is adopted, extranet multi-model intelligent security enablement is performed on a local core decision domain through a physical one-way import channel, the local core decision domain completes reasoning calculation in combination with an enablement result in a non-extranet interaction state, a top-layer task scheme is generated, and a top-layer task scheme is generated. Through a multi-mode man-machine interaction mode, after human rigid authorization, issuing to an intranet equipment scheduling domain for execution, and feeding back a state in real time to form a full-link closed loop; the method realizes external network multi-model intelligent security enabling, local agent professional decision and rigid closed loop dominated by human beings in the whole process, aims to solve the problems of cloud dependence, data leakage, out-of-control AI, high cost, poor adaptability and the like, and is suitable for families, industries, confidential scenes, field non-support operation and other scenes.

The invention discloses an analysis and display method and system for network quality detection, a medium and a product, and relates to the technical field of data processing. In the method, external network detection data and WiFi access quality data reported by probe equipment are received, and the data are aggregated according to a preset time period to form a network quality data group of a sampling period. And the system arranges the data groups according to a time sequence, and identifies an abnormal period in which an external network time delay mean value or a packet loss rate suddenly changes. And for each abnormal period, extracting a change sequence of WiFi signal strength, a working frequency band and an external network performance index in the period and an adjacent period. Based on these sequences, the system identifies quality degraded trigger events and extranet path problem points. And finally, displaying the network quality data of each sampling period in a visual interface, and marking a corresponding trigger event and a problem point at an abnormal period position. By implementing the technical scheme provided by the invention, the analysis and display efficiency of network quality detection can be improved.

The invention relates to an MCX group call service penetration packet implementation method. The MCX server comprises a call control module, a speaking right control module and a media distribution module; a plurality of MCX clients, wherein each MCX client comprises a call processing module, a speaking right processing module and a media processing module; the speaking right control module and the media distribution module are configured to receive and process a UDP penetration packet and update address mapping; the speaking right processing module and the media processing module are configured to send UDP penetration packets and process speaking right and voice streams. According to the invention, the MCX client is enabled to acquire the extranet address and the port of the MCX server for processing the speaking right and the voice stream by using the call signaling established by MCX group call, the speaking right SSRC and the voice SSRC are respectively used for identifying the speaking right of the MCX client and the voice stream of the MCX client according to the MCX protocol, the MCX client is enabled to send the fixed format UDP penetration packet with the SSRC identification to the MCX server, and the UDP penetration packet is enabled to be transmitted to the MCX server. And an intranet penetration function of speaking right and voice between the MCX client and the MCX server is realized.

The invention discloses an RTMP one-way proxy method, system and device based on one-way import equipment and a medium, mainly relates to the technical field of one-way proxy, and is used for solving the problems that in the existing scheme, the one-way flow of data is strictly limited, but a VPN (Virtual Private Network) needs to establish a tunnel through two-way communication, and the handshake process of an RTMP also depends on two-way transmission, so that the efficiency is high. The defect cannot be avoided in the prior art. Comprising a streaming media service relay module connected with RTMP stream pushing end equipment A, a one-way sending program connected with the streaming media service relay module, a one-way receiving program connected with the one-way sending program, and an analog terminal publishing module connected with the one-way receiving program. The system comprises a subscribed external network RTMP streaming media server, an analog terminal subscription module connected with the subscribed external network RTMP streaming media server, a one-way sending program connected with the analog terminal subscription module, a one-way receiving program connected with the one-way sending program, and an analog terminal publishing module connected with the one-way receiving program.

The invention discloses a large model localization deployment and security isolation device for a hospital closed network environment, which consists of a model deployment unit, a security isolation unit, a data management unit, a security control unit and an intelligent updating unit, and realizes independent operation of a large model in a hospital. According to the system, safe input of medical data is achieved through data cleaning, desensitization and formatting processing, full-process safety of data and model files is guaranteed through authority control, access recording and encrypted storage, and credible upgrading and abnormal rollback of a model are completed through a one-way isolation and offline updating mechanism. The large model can be operated and maintained under the condition that an external network is not connected, the requirements of hospitals for data privacy and network security are met, and the method is suitable for various types of intelligent medical services.

The invention discloses an Internet of Things equipment interconnection method, and relates to the technical field of Internet of Things, and the Internet of Things equipment interconnection method comprises the steps: broadcasting equipment detection information through a communication mode supported by the Internet of Things equipment; wherein the device detection information comprises a device identifier, a communication mode and an external network connection state of the first device; if connection attribute information fed back by the second equipment based on the equipment detection information is received, storing the connection attribute information in a local routing information table; establishing connection with the second equipment according to the connection attribute information; if the connection attribute information of the connected extranet exists in the routing information table, determining a data route connected with the extranet according to the connection attribute information; the data routing comprises one or more communication modes. By means of the data transmission capability of the equipment, the equipment which cannot be directly connected with the cloud has a networking function, so that remote control of the equipment or control of a handheld terminal can be realized.

The invention discloses an electric power private network unmanned equipment cooperation intranet and extranet data interaction processing method, and belongs to the technical field of power grid intranet and extranet cooperation data processing. The method is used for solving the technical problem of poor data interaction efficiency and quality of an intranet and an extranet during cooperation of unmanned equipment in a power private network in an existing scheme. Task instructions, historical electromagnetic environment data and real-time working condition parameters of the unmanned aerial vehicle and the unmanned vehicle are collected and processed, data analysis is performed through a pre-constructed intention-electromagnetic coupling prediction model, and a preliminary prediction result and an anti-interference resource reservation amount are output; performing unmanned aerial vehicle-unmanned vehicle cooperative resource block division based on the output prediction result, optimizing channel and bandwidth allocation, and outputting an equalization strategy; dynamically switching the working mode of cognitive radio by using an equilibrium strategy, and realizing intelligent combination of repeated data requests in combination with intention similarity clustering; and analyzing the prediction result and the actual interaction behavior of the unmanned equipment, and dynamically implementing resource redistribution.

The invention relates to the technical field of communication, in particular to a communication method based on double one-way channels, which comprises the following steps executed by an intranet communication module: receiving a first one-way optical signal through a first one-way channel, the first one-way optical signal corresponding to a network request sent by an extranet communication module; determining to-be-audited data according to the first one-way optical signal; verifying the to-be-audited data to obtain target data; generating a target instruction according to the target data; through the technical scheme of the application, the problems that the internal network and the external network under physical isolation are low in external request processing efficiency and difficult to realize secure interaction are solved, and the problems that the external request processing efficiency of the internal network under physical isolation is low and the security interaction is difficult to realize are improved. And safe interaction between the intranet and the extranet under physical isolation is realized.

The invention relates to the field of data transmission, in particular to a one-way data transmission device which comprises a data transmission chamber and an optical disc recycling bin communicated with the data transmission chamber through an optical disc recycling opening. The data transmission room is provided with an external network unit, an internal network unit, a transfer bin and a signal transmission module; the external network unit is used for reading data from an external storage medium, recording the data in a pre-stored optical disk, transferring the optical disk to a transfer bin, and triggering the signal transmission module to send a signal to the internal network unit; and the intranet unit is used for transferring the optical disc in the transfer bin to the preset CD driver according to the signal, reading data from the optical disc in the preset CD driver, and transferring the optical disc from the preset CD driver to the optical disc recovery port. An absolute physical isolation barrier is established between the internal network and the external network, one-way, automatic and safe ferrying of data from the external network to the internal network is achieved, the risk of data leakage is effectively eradicated, and the safety and reliability of data transmission between computers of the internal network and the external network are improved.

The invention relates to an intranet penetration end-to-end encryption method based on a TLS protocol. The method comprises the following steps: establishing a TCP tunnel between an intranet client and an edge node server of an extranet; after the intranet client receives the TLS handshake request from the edge node server through the TCP tunnel, the intranet client establishes the TCP tunnel with the intranet service and transmits the TLS handshake request to the intranet service in an unvarnished manner; the intranet client side forwards a Server Hello message, an encrypted message and a Certifiate message from an intranet service to the edge node server side; the intranet client transparently transmits the TLS encrypted message from the edge node server to an intranet service through a TCP tunnel; and the intranet client transparently transmits a response TLS encrypted message from the intranet service to the edge node server through the TCP tunnel. Compared with the prior art, the method has the advantages of realizing full coverage of an encryption process, ensuring safe and controllable access and the like.

This invention relates to the field of data encryption, specifically disclosing a method and system for preventing data leakage on enterprise terminals based on kernel encryption and file redirection. The method includes the following steps: S1. At the terminal layer, a secure terminal is deployed, and the C-Y drives of the terminal hard drive are fully encrypted using the VeraCrypt kernel driver. An isolated, unencrypted Z drive is created as a dedicated external network drive. S2. On the secure terminal, kernel-level permission control is executed through the loaded MiniFilter file system filtering driver, including: intercepting and verifying software installation and execution requests, and only allowing software within the whitelist issued by the policy server to start. This invention significantly improves the security of enterprise terminal data by deploying hard drive encryption and partition creation technology based on the VeraCrypt kernel driver on the enterprise terminal. Full encryption of some partitions on the terminal hard drive and the creation of an isolated dedicated external network drive effectively isolate sensitive internal network data from potentially risky external network environments.

The application discloses a data synchronization method and device, equipment and storage medium, and relates to the technical field of communication. The method comprises the following steps: acquiring external network system information of an external network system, creating a cross-network data attribute template according to the external network system information, generating target cross-network data corresponding to the cross-network data attribute template based on a preset cross-network data generation strategy, and sending the target cross-network data to a preset gateway; transmitting the target cross-network data to the external network system through the preset gateway, so that the external network system saves the target cross-network data locally and feeds back a corresponding data synchronization result to the preset gateway; and then confirming a data synchronization state of the target cross-network data in the external network system according to the data synchronization result. In this way, the cross-network data attribute can be accurately controlled, and the cross-network data can be incrementally exported when there is new data.

1. Name of the product in this design: Data Encryptor. 2. Purpose of this design: It is intended to be used as a device for encrypting data when sending data from an intranet to an extranet. 3. The key design feature of this product is its shape. 4. The image or photograph that best illustrates the design's key points: 3D view 1.

The invention discloses a data access method. The method can be applied to an integration platform. When a user wants to access a first application program deployed in an intranet through an extranet, a proxy server deployed in the extranet obtains a data access request, and the data access request is used for requesting to access application data in the first application program. The proxy server packages the data access request to obtain a first message, and the first message is a transport layer message and comprises the data access request. And then, the proxy server sends the first message to a proxy client deployed in an intranet, so that the proxy client parses the first message and then sends the obtained data access request to the first application program. Visibly, through the scheme, the proxy server side and the proxy client side can interact through the transmission layer, the proxy client side does not need to pay attention to an application layer protocol, the communication complexity between the extranet and the intranet is simplified, and therefore the convenience that the extranet accesses the intranet is improved.

The present application relates to an external network access method and apparatus, and a computer device, a readable storage medium and a product. The method comprises: upon receiving an external network access request sent by at least one internal network device, acquiring the priority with which each external network access request is transmitted to each of at least two gateway servers, wherein the priority is determined on the basis of connection attributes between the gateway servers and the internal network device (S202); sending the external network access request to a first gateway server having the highest priority, and performing network address translation (S204); when an anomaly occurs in the first gateway server during the process of network address translation, sending the external network access request to a second gateway server having the highest priority among the gateway servers other than the first gateway server (S206); performing network address translation (S208); and when the second gateway server converts an internal network address of the internal network device into a public network address of an external network indicated by the external network access request, obtaining an external network access result (S210).

This application provides a method, apparatus, and computer program product for upgrading a private cloud server. The method includes: the private cloud server sending an upgrade package verification key and a first transmission key to a target client, causing the target client to send the upgrade package verification key and the first transmission key to a vendor server. The upgrade package verification key is an encryption key for a firmware upgrade package generated by the private cloud server, and the first transmission key is a transmission key for the private cloud server's external network port. If the private cloud server receives an encrypted firmware upgrade package sent by the vendor server on its external network and decrypts the encrypted firmware upgrade package to obtain a firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from its external network and performs a firmware upgrade. The encrypted firmware upgrade package is obtained by the vendor server encrypting the firmware upgrade package using the upgrade package verification key and the first transmission key. This method solves the problem of easy intrusion during firmware upgrades of private cloud servers.

To provide a protective net having high cushioning properties.SOLUTION: The protective net is a protective net for wrapping an object to be protected. The protective net includes an inner net 20 which comes into contact with an object to be protected in a state of wrapping the object to be protected, and an outer net 30 which is joined to the inner net 20. When an external force in a direction toward the object to be protected is applied, the inner net 20 is deformed so that the width becomes wider than before the external force is applied.SELECTED DRAWING: Figure 6

The embodiment of the invention provides a network exit scheduling method and device, electronic equipment and a storage medium, and relates to the technical field of data processing. According to the specific implementation scheme, address information of a specified type of a to-be-transmitted target data packet is determined, and target address information is obtained; determining a target value corresponding to the target address information based on a preset network exit scheduling rule set; and setting a target scheduling label included in the target value for the target data packet, so that when the scheduling server transmits the target data packet, data transmission processing is performed on the target data packet based on a transmission path indicated by the target scheduling label. Therefore, according to the scheme of the invention, the efficiency of outputting the data packet to the external network can be effectively improved.

The embodiment of the invention provides a cross-forward isolation data comparison system, method and device, a medium and a product, and relates to the field of data synchronization and verification. The system comprises a first agent which is deployed in an intranet and accesses a source end database through a database connection protocol; the second agent is deployed in an external network and establishes one-way communication connection with the first agent; the first agent is also used for transmitting the source end data of the source end database to the second agent through the forward isolation device through the one-way communication connection; and the comparison service is deployed in an external network, pulls the source end data from the interface of the second agent, and performs comparison operation on the source end data and the target end data. According to the method provided by the invention, the technical problem of data comparison in a cross-forward isolation scene is solved through the design of a double-agent architecture and a user-defined protocol, the security and reliability of data comparison are realized, and efficient and secure data comparison in a strict network isolation environment is realized.

This invention relates to the field of multi-mode router technology, and provides a method and system for multi-mode router network switching based on subnet device characteristics. The method includes: acquiring statistical information of the router's primary and secondary SIM card networks, and dividing the network; acquiring the router's user configuration, and further dividing the network; acquiring system information data of the subnet devices connected to the router, and configuring the network type of the subnet devices based on the system information data; acquiring the traffic consumption and connected external network server information of the subnet devices over a period of time, and configuring the subnet device's affiliation type based on the traffic consumption and connected external network server information; and switching the router's network based on the subnet device's network type and affiliation type, combined with the network division. This achieves automatic network switching.

The application provides a database migration method, a database migration device, a database migration equipment and a computer readable storage medium; relates to network and routing technology of cloud technology; the method comprises the following steps: migrating data in a source database of an external network to a target database of an internal network, and keeping the source database and the target database synchronized; in the synchronization process, the following operations are performed: redirecting the address of the virtual private network of the target database to the address of the source database, and switching the access request to the address of the virtual private network of the target database, so as to redirect the access request to the source database based on the redirected address of the source database; stop the synchronization of the source database and the target database, and restore the address of the virtual private network of the target database to the address of the target database. Through the application, smooth migration of the database can be realized.

The invention discloses a playing progress adjusting method, device and equipment and a computer readable storage medium. The method comprises the following steps: sending a first broadcast message carrying first address information to a second playing terminal; and if a second broadcast message carrying second address information sent by a second playing terminal is received and a numerical value corresponding to the second address information is greater than or equal to a numerical value corresponding to the first address information, playing the target playing content based on a first content playing instruction sent by a first target playing terminal in the second playing terminal, receiving first playing progress information sent by the first target playing terminal; and adjusting the playing progress of the target playing content based on the first playing progress information. By adopting the method provided by the invention, the playing progress synchronization of a plurality of playing terminals can be realized under the condition of no extranet.

The application provides a file sharing management analysis method and system, and belongs to the technical field of file sharing, and specifically comprises the following steps: determining the target sharing file monitoring application system based on the stability of the communication transmission of the data communication link between different storage servers; determining the monitoring processing frequency of the target sharing file based on the historical update data of the target sharing file in different external network monitoring targets; generating multiple groups of monitoring schemes based on the target sharing file monitoring application system; determining the best monitoring scheme in the different monitoring schemes based on the monitoring processing frequency of the target sharing file and the corresponding monitoring application system; and obtaining the update data of the external network monitoring target through the corresponding monitoring application system of the target sharing file in the best monitoring scheme, and forwarding the update data to the matching application system of the target sharing file in real time, thereby improving the real-time performance of the file sharing processing.

The invention belongs to the technical field of data interaction, and particularly relates to a cross-domain multi-mode flow safety interaction method based on an intranet AI engine. The method comprises the following steps: after receiving an extranet service request, an AI engine middle station analyzes the power service attribute of the service request, predicts the core demand characteristic of the service request for data transmission, and preloads and initializes an optimal transmission strategy template according to the core demand characteristic; continuously monitoring the real-time state of the whole transmission process, and dynamically deciding and commanding transmission link adjustment according to the real-time state; and active safety protection is realized through dynamic key management and intelligent flow analysis. According to the method, the real-time performance, reliability and efficiency of key monitoring data transmission are remarkably improved in a complex power network environment.

The invention discloses a traffic analysis method, system and device and a computer readable storage medium, and relates to the technical field of network security, and the method comprises the steps: obtaining to-be-processed multi-source data in a target network environment; performing flow analysis on the multi-source data to obtain to-be-processed DNS flow; the DNS traffic to be processed is classified to obtain a first type of DNS traffic and a second type of DNS traffic, the first type of DNS traffic comprises traffic from an intranet host to an intranet DNS transponder, and the second type of DNS traffic comprises traffic from the intranet DNS transponder to an extranet; matching the first type of DNS traffic and the second type of DNS traffic of which the time interval is within a set threshold to obtain candidate DNS traffic pairs; and carrying out flow link reduction on the candidate DNS flow pair to obtain a DNS flow link. The limitation of a single data source perspective is broken through, analysis of cross-regional DNS traffic is realized, and an accurate DNS traffic link can be restored; and the real-time performance and the applicability are relatively high.

The application relates to a wireless debugging port external network forwarding method and system under a Hongmeng 5.0 system, which comprises the following steps: a Hongmeng device end starts a remote debugging daemon process through a service manager, generates a device digital certificate, registers to a relay server, stores a returned certificate ID to a TEE security storage area; a debugging connection security area model is constructed based on historical debugging data and is solidified to a TEE trusted execution environment; a dynamic token is generated in the TEE, and after verification, the relay server is requested to map a port to an external network; real-time debugging data is captured through a kernel probe, and features of the real-time debugging data are extracted to generate real-time debugging points; the boundary shortest distance of the real-time debugging points and a security area boundary is calculated, and when the boundary shortest distance is smaller than a threshold value, a session is interrupted and a hierarchical optimization strategy is triggered. The application realizes high-security wireless debugging port external network mapping, and guarantees debugging safety through dynamic token verification, behavior feature monitoring and a fuse mechanism.

The invention provides an unauthorized equipment monitoring method and device, a storage medium and equipment. The unauthorized equipment monitoring method comprises the following steps: respectively configuring three corresponding remote signaling points on an unauthorized equipment monitoring device and a telecontrol management machine; all flow mirror images except for the port of the switch connected with the unauthorized equipment monitoring device are sent to the unauthorized equipment monitoring device; if the non-authorized equipment monitoring device monitors that the source address or the destination address of the traffic mirror image belongs to the non-authorized address, updating a remote signaling point of the non-authorized equipment monitoring device to be in an alarm state; synchronizing the remote signaling point state of the unauthorized equipment monitoring device to a remote signaling point corresponding to the telecontrol management machine; the remote signaling point state of the telecontrol management machine is sent to an automatic master station; and the automatic master station generates unauthorized equipment alarm information according to the state of the remote signaling point. Detailed information such as whether the unauthorized equipment is connected to a transformer substation, a power plant or a new energy station network and whether the unauthorized equipment is connected to an external network is monitored and fed back to an automatic master station, and corresponding alarm information is sent out, so that network safety and power grid operation risks caused by access to the unauthorized equipment or connection to the external network are avoided.