846 results about "Outernet" patented technology

The invention discloses a system for judging a cloud safety malicious program. The system comprises a cloud terminal, a client, a virtual defending group and a station, wherein light malicious code defending software is installed on the client. A local characteristic base maintains the current prevalent malicious code information and keeps relatively stable scale, so that the performance of the client is improved. The client organizes in the form of a virtual defending group, the cloud terminal distributes malicious risk solving schemes with the virtual defending group as a unit, and group members belonging to the same virtual defending group can interact malicious code information, so that the spending of the client terminal is reduced. According to a cloud safety malicious program judging method based on the system, the working mode thereof includes an online mode and an offline mode. The online mode comprises a series of sub steps, and the client updates the local characteristic base through an extranet or an intranet. In the offline mode, the client synchronizes the local characteristic base through the intranet, and the offline safety of the client is guaranteed.

The embodiment of the invention provides a message transmission method, a device and a network system, wherein the message transmission method comprises the following steps of: receiving an encrypted message transmitted by a client through a VPN (Virtual Private Network) tunnel, decrypting the encrypted message and transmitting the decrypted message to a corresponding intranet server, wherein the encrypted message is transmitted by encrypting the message to be transmitted when the client determines that a control strategy comprises an IP address and a port number which are the same with the IP address and the port number of a destination of the message to be transmitted according to the pre-set control strategy; the control strategy comprises the information of the IP address and the port number of the intranet server which can carry out message interaction with a secure socket layer virtual private network (SSLVPN) server; and the source IP address of the decrypted message is an extranet IP address. The message between an intranet and an extranet can be transferred through a secure socket layer virtual private network (SSLVPN) under the condition of unchanging the topology structure of the intranet by utilizing the technical scheme provided by the embodiment of the invention.

The invention discloses a one-way data exchange device and method for physical isolation among networks at different security levels. The device comprises an intranet processing unit and an extranet processing unit, wherein a transition unit for data exchange is arranged between the intranet processing unit and the extranet processing unit and comprises an intranet optical drive group (namely a burn drive), an extranet optical drive group (namely a read-only drive) and a manipulator assembly. The one-way data exchange device does not need manual intervention and can implement data transfer by virtue of non-direct connection of the manipulator assembly, the specific drive, a control system and a disc shredder (according to selection) so as to achieve the true physical isolation. The one-way data exchange device and method adopt a simple principle, are safe and reliable, prevent various invasive bugs from hiding fundamentally, save time for manual data exchange by disc burning, conveniently implement the safe data exchange, and bring convenience for safe data storage and exchange among secret departments of the Chinese People's Liberation Army and China.

The invention provides a mobile payment system which comprises an NFC (Near Field Communication) electronic tag and terminal equipment, wherein the NFC electronic tag comprises an NFC data sending module and a two-dimension code tag. The NFC data sending module is used for sending commodity information to the terminal equipment, the commodity information includes company identification information and commodity identification information; the two-dimension code tag is used for recording the commodity information; and the terminal equipment is used for obtaining the commodity information from the NFC electronic tag and then generating payment command information according to the commodity information and sending the payment command information to an outside server. The mobile payment system has the advantages of simplicity, activeness, timeliness and high accuracy in the mobile payment process; and moreover, the mobile payment system provides information security compared to Bluetooth communication and can therefore be widely used for various e-commerce fields.

Provided is an electric marketing mobile application safe protection system. In the present, the safety problem is caused after a mobile terminal is used, and third-party secondary encryption is easy to crack to generate information leakage. The electric marketing mobile application safe protection system comprises a safe terminal layer, a safe channel layer, a safe access platform layer and a mobile application layer. The mobile application layer is used for supporting service application of the mobile terminal and achieving system application safety. The technical scheme of the electric marketing mobile application safe protection system achieves safe access to the mobile terminal, achieves strong insulation between an outer information network and an inner information network through an insulation method, cuts down attack of outer networks and effectively improves information safety.

The embodiment of the invention provides a method, a device and a system for processing the source downloading. The method comprises a step of: intercepting a downloading request in an area interior net sent to an area exterior net by a client, wherein the downloading request contains a downloading address of the area exterior net and source information identification requested to download, and the downloading request is for requesting a first information file corresponding to the downloading source information of the area exterior net. The method also comprises the steps of: obtaining a corresponding second information file from a second source server in the area interior net according to the source information identification, and sending the second information file to the client for the client to upload and download the source information from the second source server according to the address of the second source server, wherein the second information file contains the address of the second source server of the area interior net for storing the source information. The technical solution of the embodiment of the invention can efficiently reduce the area scheduling flow in a P2P network, promote the scheduling efficiency, reduce the pressure of the P2P network in the scheduling process and ensure the property of the P2P network.

The invention discloses a method for communication between intranet equipment and internet equipment and NAT (Network Address Transformation) equipment. The method comprises the steps of: classifying an interface connected with first intranet equipment and a public network interface of the NAT equipment per se into a same VLAN (Virtual Local Area Network) by the NAT equipment, classifying an interface connected with second intranet equipment of the NAT equipment per se into the other VLAN by the NAT equipment, issuing a public network IP (Internet Protocol) address and a gateway address, distributed to the first intranet equipment, on a virtual interface enabled by the NAT equipment per se, and setting ARP (Address Resolution Protocol) information of the IP address to be a silent state; forwarding a received message sent by the first intranet equipment to the internet from a public network interface located in the same VLAN with an ingress interface of the message; forwarding a message, which is sent by the second intranet equipment to the internet and transformed by a network address port, from the public network interface; and forwarding a message sent by the internet equipment according to whether the message is matched with a NAT forwarding table. By applying the method and the NAT equipment, provided by the invention, one equipment in a local area network can interact with a public network rapidly by using the public network IP address, and other equipment in the local area network interact with the public network through NAT.

The invention discloses a method and a device for realizing source address conversion by using an address pool. The method comprises the following steps: for a message for an internal network to visit an external network, if the flow structure being matched the message does not contain NAT information, seeking the flow structure of which the internal network source address is the same as that of the message in the flow structure recorded with the NAT information, and converting the source address of the message by using the address of the address pool in the NAT information of the flow structure as the source address after conversion; and for the flow structure carrying out the source address NAT for the first time, recording the conversion relation between the source address of the internal network and the address of the address pool in the flow structure as NAT information. The invention ensures that the same internal network source address can use the same address of the address pool after NAT, thereby avoiding access failure caused by different addresses.

The invention provides a network security early warning system of a self-adaptive mimicry technology. The system comprises simulation substitute hosts, real hosts, a main server, a simulation server and a flow monitoring unit, a plurality of real hosts are connected with the main server to form an intranet, and the simulation substitute hosts are used for simulating the operation of the real hosts. The simulation server is used for simulating the operation of the main server, the flow monitoring unit and the plurality of simulation substitute hosts are respectively connected with the simulation server so as to form an external network for simulating the operation of an internal network, the external network is accessed to the Internet, and encrypted communication can be carried out betweenthe main server and the simulation server. The flow monitoring unit and the plurality of simulation substitute hosts are respectively connected with the simulation server so as to form an external network for simulating the operation of an intranet, the external network is accessed to the Internet, and attack behaviors are filtered through the external network, so that the security of the intranet can be greatly improved, and the intranet is prevented from being attacked.

The invention relates to the field of information security, and specifically, the invention relates to an APT firewall system. An extranet interface module 101, an abnormal flow detection module 102, an intranet interface module 103, an abnormal association module 104, a retrospective evaluation module 105 and a host program monitoring module 106 are integrated in the system for detecting the flow of an extranet and an intranet in real time, monitoring the program process in real time and further decomposing and identifying abnormal flow and abnormal behaviors containing APT threats so as to locate the APT threat level, intercept the APT communication, clear the APT Trojan program and eliminate the threat attacks and the potential safety hazards.

The invention discloses a method and a system for realizing NAT traversal in a structured P2P network. The method comprises that: a user node contacts a guide node positioned in an outer network to acquire the information of other user nodes which are different from the ID of the user node or have a distance in a set value in a guide node route table and establish and update a route table per se;and the user node judges whether the external IP address and port number per se are the same as the IP address and port number of a intranet, if the external IP address and port number are the same as the IP address and port number of the intranet, the user node is positioned in the outer network, and if the external IP address and port number are not the same as the IP address and port number ofthe intranet, the user node is positioned in the intranet; the user node selects a user node positioned in the outer network at random as a partner node per se and adds the information of the partnernode; simultaneously, the user node sends IP address, port number and ID updating messages including the partner node to each node in the route table, and each node updates the information of respective route table; control information is transmitted between user nodes in a mode of forwarding by the partner node; and data information is transmitted between the user nodes in a mode of assisting connection by the partner node.

The invention discloses a self-adaptive bandwidth transmitting and playing method based on audio and video frequency synchronization, and relates to a video data transmission processing technology of a public mobile communication device. The method comprises the steps: generating a video stream data according to an H.264 coding; dynamically adjusting size of transmitted data quantity in real time according to the condition of current wireless bandwidth, transmitting the data to an outer network server via a wireless network; receiving and displaying audio and video data received by a client; creating an audio and video data buffer area, displaying and playing the video by a certain playing strategy according to the speed of receiving data quantity, and ensuring synchronization of the real-time video and audio frequency through an audio and video synchronization algorithm in an entire process. According to the method disclosed by the invention, operation and maintenance efficiency is improved; manpower cost is reduced; the video can be detected in real time; the problem of vibration of the wireless bandwidth is solved; the audio and video are synchronous, and the method has the advantages of strong generality, strong transportability and flexible expansibility.

The invention relates to the field of computer security protection, in particular to a network information interaction method and a network security system. The network information interaction method comprises the following steps: firstly constructing a heterogeneous data collaboration server for an external network, restoring external network data displayed in different forms into information in an XML (Extensible Markup Language) format, screening and uniformizing, and translating the information in the XML format into Unicode; constructing a recognition and control system for an internal network, displaying the Unicode and control identification with variable color on a display, starting a photographing program and intercepting an image on the screen of the current display by a photography or videography device when the control identification is changed into specific color; and restoring an image file into XML information in a data recognition and control server by adopting an OCR (Optical Character Recognition) technology, and leading the XML information into a corresponding internal network database through a data interface. The network security system takes an image recognition technology as a core, internal and external network equipment is not physically connected, and the data is screened before leading and connection so as to realize real-time data leading and connection on the basis of true physical isolation.

The invention discloses a method for calculating a voltage stability margin of a regional power grid by considering outer network equivalence and belongs to the technical field of analysis of static voltage stability of a power system. The method comprises the following steps of: adding a ground branch circuit into a conventional David south model to make an outer network equivalent; calculating outer network equivalence reactance and ground admittance by using a computer through a program according to outer network information under a typical running mode; calculating equivalent power supply electric potential according to inner network measured data and finally calculating an index of the static voltage stability margin of the regional power grid. By the method, the influence of the outer network on the ground branch circuit can be considered effectively and the problem of parameter drift in the conventional David south equivalence method can be solved effectively; therefore, the calculation precision of the stability margin index is high. In the method, only the information under the typical running mode of the outer network is needed and the data under all the running modes of the outer network is not needed, so that the requirement on the data of the outer network is low, the engineering practicability is high and the popularization and application are facilitated. The method can be widely applied to calculation and analysis of the index of the static voltage stability margin of the regional power grid which is connected with the outer network through a single point.

The invention relates to a connection transfer method and equipment. The method comprises the following steps of: receiving an internet connection request message which is initiated by a client by using gateway equipment; creating a context for the internet connection request message; transmitting an intranet connection request message to an intranet server according to the internet connection request message; receiving an intranet connection response message for the intranet connection request message from the intranet server; checking the intranet connection response message according to the checking part of the context in the intranet connection response message, and after the intranet connection request message passes the checking, finding corresponding internet connection according to the data part of the context; and transmitting an internet connection response message to the client according to the internet connection response message. According to the embodiment of the invention, when connection is established between intranet and internet, the context is set in extended message headers on a wide area network (WAN) side and a local area network (LAN) side, and after the messages are received, related information is directly indexed according to the context for connection checking and message forwarding, so that data is ensured to be transmitted securely and highly efficiently.

The invention provides a restaurant management system and method by a mobile phone. The restaurant management system comprises an NFC (Near Field Communication) electronic tag and terminal equipment, wherein the NFC electronic tag comprises an NFC data transmitting module and a two-dimensional code tag; the NFC data transmitting module is used for transmitting restaurant information to the terminal equipment; the two-dimensional code tag is used for recording the restaurant information; the terminal equipment is used for acquiring restaurant information from the NFC electronic tag, then generating restaurant data of a place where a user is positioned according to the restaurant information and transmitting the restaurant data of the place where the user is positioned to an outer network server. The restaurant management system and method provided by the invention have the advantages of simplicity, convenience, activity, accuracy and timely property when being used for managing the catering process of the user and can be widely suitable for the fields of business restaurant.

The invention relates to an estimation method of an extra-long tunnel horizontal through error. Hole exterior and hole interior control measuring errors are not inevitable when a tunnel is excavated, and so that the tunnel opposite excavation has the through error. The estimation method provided by the invention comprises the following steps of: establishing a hole exterior horizontal control network, obtaining a breakthrough point coordinate form an inlet point, an outlet point and a directional point, estimating the horizontal through error caused by a hole exterior horizontal control measuring error according to a differential formula method; and then establishing a tunnel hole interior wire network, designing the wire network from the inlet and the outlet and a through surface in a simulating manner according to an equal side, and estimating a tunnel horizontal through error caused by the hole interior wire measuring error. The estimation method provided by the invention can be used for carry outing hole exterior GPS (Global Positioning System) network and hole interior wire net simulation and flat difference without measured data, the horizontal through error caused by the hole exterior GPS network measuring error and the horizontal through error caused by the hole exterior horizontal control measuring error of any length tunnel are estimated, and the problem of extra-long tunnel control measuring horizontal through error and control network optimization design is solved.

The invention provides a safety checking method for a power system. The method comprises the following steps of: S1, determining a further equivalence date as required, and forming interface power flow of the equivalence date on a network scheduling side; S2, performing network equivalence calculation on the section of the equivalence date according to the interface power flow; S3, deriving the result of the network equivalence calculation on the section of the equivalence date to generate an equivalence file, and transmitting the equivalence file to provincial scheduling; S4, obtaining the equivalence file on a provincial scheduling side, resolving the equivalence file, storing resolved data into a defined outer net equivalence data structure to obtain an outer net equivalence model of the provincial scheduling, and splicing a provincial scheduling model with the outer net equivalence model of the provincial scheduling to generate a power flow section provided with the outer net equivalence model; and S5, performing safety checking calculation on the power flow section provided with the outer net equivalence model generated in the S4. Safety checking is performed in comparison to a use history and the current outer net equivalence model, so that the accuracy of an obtained result is increased greatly.

The invention discloses a method for simple data interaction between an electric power region I and an electric power region III by using reserve 1bit data of a forward direction isolating device, and relates to the technical field of data interaction of electrical power systems. The method is characterized by comprising the following steps: requiring an NAT conversion on IP of an outer net server on which a server-side software is mounted, initializing Socket at an end of the outer net server firstly, then binding with a port, listening into the port, after intranet client software receives a remote control check request, building socket connection with an outer net server-side software, and matching the equipment object unique code in a scheduling command with the equipment object unique code in a remote control constrain analysis request. The method provided by the invention is reasonable, can feedback information in time and is convenient to operate.

The invention discloses a data encryption and isolation system. The data encryption and isolation system comprises an intranet formed by intranet computers and an extranet formed by extranet computers, wherein the intranet and the extranet are connected through a physical isolation module or a logical isolation module; the physical isolation module or the logical isolation module is used for encrypting intranet data and exporting the data to the extranet, is used for importing non-encrypted data of the extranet into the intranet unidirectionally, and is further used for decrypting the encrypted data of the extranet and importing the decrypted data into the intranet. The intranet comprises one intranet computer or at least two intranet computers. According to the data encryption and isolation system, secure communication of the intranet and secure data exchange between the intranet and the extranet are guaranteed through a solution adopting quantum data encryption and secure exchange via data transfer units, and secret leakage cases are eliminated.

The invention discloses a different-network information transmission system based on image processing, and the system comprises a transmitting end which is used for reading to-be-transmitted data, carrying out the coding of the data according to a preset coding mode, forming an image code, displaying the image code, scanning the QR code displayed by the receiving end, analyzing and obtaining information contained in the QR code image, and carrying out the next operation according to the decoding condition; a receiving end which is used for scanning the image code displayed by the sending end,analyzing and obtaining information contained in the image code, generating confirmation information coded in a QR code format according to the decoding condition, forming a QR code and displaying theQR code, and if the decoding succeeds, receiving data carried by the image code. According to the invention, information can be effectively and rapidly transmitted between intranets without physicalconnection and between the intranet and the extranet; the single-time coding information amount and the transmission speed can be greatly improved, and the safety is high; and data transmission in a bidirectional simplex mode can be realized, so that the hardware cost is reduced.

The invention provides a network address translation method and an NAT gateway, which are applied to the NAT gateway and comprise the following steps: acquiring a first data packet sent by a current intranet server in a local area network through a current intranet IP address; when the target IP address in the first data packet is matched with an extranet IP address configured by the NAT gateway,modifying input port information in the first data packet according to an extranet router connected with the NAT gateway to obtain a second data packet; determining a current extranet IP address corresponding to the current intranet IP address, and determining a target intranet IP address corresponding to the target IP address; and sending the second data packet to a target intranet server in a local area network indicated by the target intranet IP address through the current extranet IP address. According to the scheme, the problem that the card issuing flow in the NAT gateway is blocked canbe solved.