18 results about "Outernet" patented technology

The present application relates to an external network access method and apparatus, and a computer device, a readable storage medium and a product. The method comprises: upon receiving an external network access request sent by at least one internal network device, acquiring the priority with which each external network access request is transmitted to each of at least two gateway servers, wherein the priority is determined on the basis of connection attributes between the gateway servers and the internal network device (S202); sending the external network access request to a first gateway server having the highest priority, and performing network address translation (S204); when an anomaly occurs in the first gateway server during the process of network address translation, sending the external network access request to a second gateway server having the highest priority among the gateway servers other than the first gateway server (S206); performing network address translation (S208); and when the second gateway server converts an internal network address of the internal network device into a public network address of an external network indicated by the external network access request, obtaining an external network access result (S210).

This application discloses a new energy industrial control system platform with real-time early warning function applied in the sampling field. This system platform, through the setting of a zero-trust security model, is significantly different from traditional protection in that all entities in the network, regardless of whether they are on the external or internal network, are considered untrusted by default and require authentication and authorization. This allows for trust assessment and dynamic access control of all access from both inside and outside the enterprise, thereby achieving finer-grained access control, significantly reducing the network attack surface, and achieving the goal of protecting enterprise data resources. Furthermore, in conjunction with the setting of a network disconnection alarm strip, when access is made internally or externally or when a network attack occurs, the central controller controls the network disconnection alarm to inflate, disconnecting the network cable on the target access terminal, thus effectively preventing information leakage and improving confidentiality. Simultaneously, the audible and visual alarm is activated, providing real-time early warning of potential information leakage risks.

The application provides a disassembly-free box power compensation upgrading method and system and a storage medium. The latest upgrading file is stored locally on a host computer. In this way, after the product in the color box is triggered to start by the power compensation upgrading device and accesses the network through the network device, the upgrading file can be obtained from the host computer, without the need to interact with the OTA server through the external network, thereby ensuring the safety of the product in the color box.

This invention provides a personnel information management method, apparatus, system, electronic device, and storage medium. The personnel information management method is applied to an information exchange platform and includes: reading personnel information of reporting personnel from a reporting end via an external network; sending the personnel information to an auditing end via an internal network, so that the auditing end can audit the reporting personnel based on the personnel information; reading the auditing result of the reporting personnel audit from the auditing end via the internal network; and sending the auditing result back to the reporting end via the external network. This application, by reading personnel information from the reporting end via the external network and reading the auditing result of the reporting personnel audit from the auditing end via the internal network, can complete the information exchange of personnel information, facilitating the auditing of reporting personnel. Simultaneously, by not responding to access requests from either the reporting end or the auditing end, it ensures that the reporting end cannot directly communicate with the auditing end, thus ensuring data security.

This invention relates to the field of power system automation technology, specifically to a method for intelligent dispatching and analysis of customer power outages based on low-voltage topology AI perception. The method includes: S1, periodically running the first automation module to automatically query customer power outage event data in the electricity information collection system; S2, processing and intelligently analyzing the power outage data, accurately determining the fault range based on a five-level analysis logic of "single household - meter box - branch - transformer area - line," matching responsible persons, and generating formatted notification messages; S3, securely pushing the message to the external network via an internal / external network connectivity tool, automatically forwarding it to the corresponding responsible group; S4, collecting on-site power outage causes through online forms, and generating a decision report through multi-dimensional statistical analysis using AI analysis tools. This invention achieves minute-level automatic perception of customer power outages, accurate fault location, and proactive dispatching, reducing power outage discovery time by more than 90%, effectively promoting a fundamental shift in customer service models from "passive reporting" to "proactive intelligent emergency repair."

The application discloses a data transmission rate control method, a base station and a data gateway in a communication system. The control method comprises the following steps: detecting the actual air interface transmission rate of target user service in a cell in a current period and obtaining the to-be-transmitted data packet of the target user service in a local buffer; adding the actual air interface transmission rate and the to-be-transmitted data packet into a GTP-u data packet of a preset message type, and feeding back the GTP-u data packet to the data gateway, so that the data gateway controls the data sending rate of an external network in a next period according to the actual air interface transmission rate and the to-be-transmitted data packet, and makes the data sending rate adapt to the air interface transmission rate of the base station. The application can avoid wired transmission resources and reduce the pressure of a wired communication network.

This application provides a method for ICMP packet processing under a distributed NAT gateway, including the following steps: S1, the election module selects an ICMP packet based on rules; S2, on the non-ICMP NAT gateway, configure the routing table based on ICMP groups for outbound redirection and the L2 redirection table for return; S3, after receiving the tunnel packet, the ICMP NAT gateway sends it to the CT module for NAT translation. The ICMP packet processing method under a distributed NAT gateway described in this application ensures normal ICMP packet NAT translation in the case of a distributed NAT gateway. Both election and configuration modifications are centralized within the NAT gateway cluster, requiring no modification to the compute nodes, thus controlling the risk. The scheduling module monitors the connectivity of the ICMP NAT gateway in real time. When the ICMP NAT gateway malfunctions, it re-schedules and selects a new gateway. ICMP packets destined for the external network are encapsulated in tunnel packets within the NAT gateway, containing L3VNI information to identify VPCs. For return, the VPC information is identified based on the binding relationship between the destination IP and the VPC, ensuring VPC isolation.

This invention relates to the field of power system planning and operation optimization technology, specifically disclosing a collaborative optimization method and system for multiple types of active support equipment at the weak-sending end. The method includes establishing a voltage-reactive power droop characteristic equation and constructing a unified power flow-droop static model to describe the system's steady-state operating point; constructing comprehensive performance indicators for multiple scenarios and a unified stiffness constraint model considering the short-circuit capacity of the external grid and the reactive power support capacity of the multiple types of active support equipment; at the capacity configuration layer, minimizing the weighted difference between investment cost and stability benefits is the objective; at the operation layer, minimizing the weighted sum of reactive power output adjustments for multiple types of equipment is the objective. This invention achieves coordinated improvement in configuration and operation to enhance the static margin in the most unfavorable direction and expand the stability domain form by solving capacity configuration using a surrogate model and linear programming at the upper layer, and optimizing reactive power sharing based on Q / V sensitivity and action costs at the lower layer.

The application discloses a kind of based on libcurl and gatekeeper equipment implementation ftp client multiple file transmission method and system, its method includes: obtaining the first communication protocol of the ftp server connected by target ftp client and the second communication protocol of data server to be received, data transmission request is sent to ftp server and data server to be received respectively based on the first communication protocol and second communication protocol by libcurl client, internal network data receiving channel and external network data transmission channel are constructed by gatekeeper equipment, multiple file transmission tasks are constructed using thread pool and call gatekeeper node receives batch files transmitted by target ftp client through internal network data receiving channel, and the batch files are uploaded to data server to be received through external network data transmission channel.The communication protocol of different servers can be used to realize the butt joint of server, and then lay the foundation for subsequent data transmission, without manual socket socket creation, greatly saving manpower cost.

This application discloses a self-organizing network communication method, apparatus, system, and medium. The method includes: for each node in the self-organizing network, updating the communication status with neighboring nodes; updating the optional transmission paths with other nodes in the self-organizing network based on the communication status; sending the optional transmission paths to neighboring nodes so that each node in the self-organizing network can update its own routing information; determining the data transmission mode based on the geographical location of the node; determining the optimal transmission path with the target node in the data transmission mode from the optional transmission paths; and sending the collected target data to the target node according to the optimal transmission path so that the target node can upload the target data through the external network. This method enables reliable networking in areas with poor wireless signal coverage and transmits the data collected by each monitoring device to the external network through the network, which is low-cost and easy to implement.

The application discloses an automatic penetration testing method and device based on expression language and high-concurrency scanning and a medium, and mainly relates to the technical field of penetration testing, and aims to solve the problems of long time consumption, multiple combination tools depending on fragmentation, and lack of flexibility of vulnerability detection rule engine in the prior art. The application comprises the following steps: constructing a front-end and back-end separated system architecture; a back-end service layer delivers task metadata to a message queue; an external network module and an internal network module of a penetration testing engine subscribe or poll a database from the message queue to obtain tasks; the external network module replaces POC template variables with actual parameter values in an execution context, generates a structured request and sends it in parallel, performs normalization processing after receiving a response, executes a precompiled CEL expression in a restricted sandbox and calls a custom function in a preset function library to obtain a vulnerability verification result; and a dynamically scalable pool of the internal network module sequentially obtains subtasks from a local bounded job queue to execute and obtain a vulnerability verification result.

This invention provides an automated testing method, system, and platform for user service terminal hardware platforms, relating to the field of platform testing technology. The method includes: receiving Ethernet data packets sent by a test host and performing Ethernet frame header parsing and routing decisions; if the routing control signal is an IP packet, forwarding the Ethernet data packet directly to the external network interface; if the routing control signal is an MC packet or a TMC packet, performing protocol conversion and interactive testing on the Ethernet data packets, outputting multiple test response data streams; a data stream management module performing polling, arbitration, and merging of the multiple test response data streams, outputting a single data stream; and transmitting the single data stream back to the test host through a dual Ethernet interface module. This invention solves the technical problems of complex system structure, low testing efficiency, and low accuracy in existing user service terminal hardware platform testing technologies. It achieves the technical effect of improving the automation level of multi-interface collaborative testing and improving overall testing efficiency and accuracy.

A network access method, device and electronic equipment, the method comprising: a cloud server receiving a user virtual machine sending an external network access request, determining an unused local virtual IP address, converting the local virtual IP address into a unique target virtual IP address, sending the target virtual IP address to the user virtual machine, so that the user virtual machine can access the external network based on the target virtual IP address. Through the above method, the user can access the external network based on the target virtual IP address when accessing the external network from the private network, which realizes that the user only maintains the target virtual IP address, solves the problem of the user maintaining multiple virtual IP addresses, and improves the user access network convenience.

This invention discloses an optimized scheduling method for incremental distribution networks in zero-carbon industrial parks, involving the field of power system optimization scheduling technology. It includes acquiring predicted data on renewable energy power and load power within the scheduling cycle, along with external grid interaction constraints. An improved multi-objective adaptive evolutionary algorithm is used to solve these constraints, generating operational strategy curves for distributed power sources, energy storage systems, and flexible loads. The optimized scheme is then distributed to the incremental distribution network control system for online scheduling. During the scheduling process, actual operating data is collected, and closed-loop feedback is used to continuously correct the predicted dataset for the next cycle. The algorithm's adaptive optimization improves the accuracy of multi-objective scheduling, while real-time data correction reduces prediction errors. This method achieves continuous and smooth control of all equipment, strengthens the synergy between the power source, grid, load, storage, and external grid interactions, and ensures that scheduling commands are highly adapted to actual operating conditions, guaranteeing stable, efficient, and low-carbon operation of the zero-carbon industrial park distribution network.

This application discloses a target range platform for network security exercises, comprising: a heterogeneous virtualization environment construction module for constructing a locally virtualized target machine environment; a traffic recording and review module; and a console module. The heterogeneous virtualization environment construction module includes a construction submodule and a routing and forwarding submodule. The construction submodule is used to construct the target machine environment using hybrid virtualization technology. The target machine environment includes several target machines and several network devices. The target machines and network devices, as well as the target machines themselves, are connected via virtual communication links, forming a virtual network topology with an undirected graph structure. The routing and forwarding submodule is also used to achieve network isolation between the target machine environment and the external network by responding to outbound routing blocking policies. This enables localized deployment of the target machine environment and isolates external network connections during network security exercises, eliminating the need for traffic backhaul and reducing the risk of data leakage.

The application relates to the field of data communication, in particular to a data communication method suitable for an internal and external network isolation scene, which comprises the following steps: constructing a dynamic isolation zone; designing a dynamic access control rule and an isolation zone dynamic topology, and binding a cross-network identity and a right, completing isolation and access of a medical insurance special network and an external network, carrying out double-stage buffering and time sequence segment caching, uploading and storing to an encryption unit, completing data communication between the internal and external networks after reverse conversion inspection; pushing special network data to the encryption unit in the dynamic isolation zone, and completing data encryption and priority slicing by the encryption unit, and completing backhaul of the medical insurance special network data. The application sets a multi-stage buffering and time sequence segment storage mechanism, caches to a 3-node cluster according to business identification and time slicing during a business peak period, avoids data congestion, and carries out operations such as priority slicing granularity division according to the medical insurance business, so that the backhaul data success rate, safety and real-time performance are guaranteed.

This invention discloses a secure interaction method and system for AR glasses and power metering devices, belonging to the field of communication security technology. It utilizes a dual-link collaborative communication mechanism between AR glasses and a mobile terminal, employing a dual-link communication and encryption mechanism that combines Bluetooth and WiFi in parallel. For different data types and real-time requirements, it dynamically selects and switches the optimal combination of encryption algorithms. While ensuring absolute security isolation within the power intranet, it achieves real-time, secure, and efficient interaction between external network AR devices and internal network metering devices. This effectively solves the core pain points of existing technologies, such as single encryption methods, broken link switching, insufficient performance adaptation, weak key management, and inadequate internal and external network security isolation, achieving a balance between security, real-time performance, reliability, and ease of use.

A system for connecting OpenStack virtual machines to the external network via SNAT on their host node includes a virtual router for creating distributed SNAT, a module for limiting north-south traffic flow of virtual machines, and a network interface card (NIC) link status detection module. The method for connecting to the external network includes the following steps: Step S1, creating a router for distributed SNAT; Step S2, creating a module for limiting north-south traffic flow of virtual machines; Step S3, NIC link status detection.