465 results about "Outernet" patented technology

The invention relates to the technical field of network security, and particularly discloses a front digital boundary security switching method and system based on an optical one-way transmission characteristic and a storage medium, and the method comprises the steps that a front digital boundary security gateway of a service extranet receives a request, analyzes a context parameter of the request, and stores the context parameter of the request; legality verification is carried out on the carried exchange account, the key and other request parameters, and request context parameters are signed and encrypted; after the legality verification is passed, the service extranet front digital boundary security gateway encapsulates the request context parameter into a request data packet, a unidirectional data transmission optical shutter connection pool from the extranet to the intranet is used, and the request data packet is sent to the intranet front digital boundary security gateway after the connection is obtained; and after receiving the request data packet, the intranet front digital boundary security gateway decrypts and verifies the signature of the request message in the request data packet, reconstructs the request message after the verification is successful, and sends the request message to a real target server to obtain a result.

The invention provides a method, system and device for data encryption transmission between isolation networks based on a two-dimensional code and a medium, and belongs to the technical field of data transmission. The method comprises the steps that a form needing to be transmitted is acquired from an intranet, and key fields are extracted; converting the primary key field into a short code by using a mapping table, splicing the short code with the basic field and the service field, and adding a check code to obtain source data; after encrypting and encoding the source data, converting the source data into a two-dimensional code, and transmitting the two-dimensional code to an external network system through a physical medium; scanning the two-dimensional code by using a terminal device in an extranet, decoding and decrypting the two-dimensional code, and then splitting the two-dimensional code to obtain a short code, a basic field, a service field and a check code; and performing data verification by using the verification code, restoring the short code into the main key field by using the mapping table after the verification is passed, and restoring the original form according to the main key field, the basic field and the service field. According to the invention, a complete process from internal network data extraction to external network data restoration is realized based on the two-dimensional code.

The invention discloses a big language model training method based on a knowledge graph, which comprises the following steps: collecting professional text data in a specific field, extracting entities and relationships from the professional text data, constructing a field knowledge graph, and constructing the knowledge graph based on data of different data sources on the basis of an external network; and introducing the domain knowledge graph into an intranet, storing the domain knowledge graph into a knowledge base in the intranet, extracting terminologies from the domain knowledge graph, analyzing word frequencies of the terminologies in the professional text data, and selecting the terminologies with the word frequencies higher than a set threshold value as newly added high-frequency terminologies. According to the method, the professional knowledge graph of the target field is constructed, the big language model is finely adjusted based on the professional knowledge graph, and the professional knowledge big language model is generated.

The invention discloses a data interaction system and method based on cross-network interconnection, the system comprises an extranet service system, an internetwork switching device and an intranet service system, the extranet service system transmits to-be-transmitted data to the intranet service system through the internetwork switching device, the internetwork switching device is used for managing a cross-network control strategy, and the intranet service system transmits the to-be-transmitted data to the intranet service system through the internetwork switching device. Detecting the state of inter-network interaction agent equipment, and actively establishing a cross-network data transmission encryption channel; the internetwork switching equipment comprises an extranet processing unit, a switching processing unit and an intranet processing unit; the extranet processing unit is used for processing data transmitted by the extranet service system; the exchange processing unit is used for transmitting the data processed by the external network processing unit to the internal network processing unit; and the intranet processing unit is used for processing the received data and transmitting the processed data to an intranet service system. According to the invention, the data transmission bandwidth and link security can be improved, and the integrity of cross-network transmission data is ensured.

The invention relates to the technical field of online communication, in particular to a multi-network-type intercommunication online communication system which comprises a management information large area, when the system is used, resources in an intranet are mapped to an extranet through an Nginx proxy server, so that remote access of the resources is achieved, and the management information large area is expanded. Data forwarding and load balancing are carried out among different servers by using the Nginx proxy server, the efficiency and stability of data transmission are improved, data can be simultaneously sent and received between two network nodes by using an mqtt protocol, the efficiency and reliability of data interaction are improved, and the data transmission efficiency and reliability are improved. The method is beneficial to providing real-time message transmission and multi-terminal data sharing synchronization of applications such as communication exchange and file storage across two network types, is beneficial to solving the problem that a user cannot perform direct communication exchange and file transmission due to network boundary limitation, crosses regional limitation and time limitation, is beneficial to realizing flexible office, and is convenient to use. The production efficiency is improved.

The invention relates to a transmission method and device based on network environment self-adaption and a storage medium, and the method comprises the steps: trying to establish direct connection with a cloud PC server if a user terminal is in an intranet and is in the same-level network with the cloud PC server; if the user terminal is in the intranet but is not in the same-level network with the cloud PC server, trying to establish connection with the cloud PC server through P2P, and if the user terminal does not successfully establish connection with the cloud PC server through the media Trans; if the user terminal is in the external network and the VPN connected with the user terminal and the cloud PC server are in the same level of network, connecting the VPN through dialing and directly connecting the IP address of the cloud PC server to realize direct connection of media streams; and if the user terminal is in an external network, but the VPN connected with the user terminal and the cloud PC server are not in the same level of network, the user terminal is connected with the VPN through dialing, the VPN tries to establish connection with the cloud PC server through P2P, and if the connection is not successful, the VPN tries to establish connection with the cloud PC server through Trans.

According to the internal network and external network synchronous transmission method and system based on the TCP provided by the invention, file type detection and file title detection are realized at a server side, compliance screening is carried out on file contents before a transmission link, and sensitive files are prevented from entering a transmission link; after the detection is passed, segmented transmission is carried out by adopting a preset fragmentation rule, and breakpoint resume is executed by utilizing a fragmentation index when the transmission is interrupted, so that the stability and the efficiency of large file transmission are remarkably improved; furthermore, the server pushes the downloading notice to the extranet client through the TCP after receiving the auditing result of the intranet client with the auditing authority, so that the file is ensured to be subjected to the auditing link before being transmitted to the extranet, and the unification of high safety, controllability and high efficiency is realized.

The invention provides a cross-regional device networking system and method. The system comprises a system server, a main gateway arranged on the system server, a plurality of terminal devices, a plurality of client devices, a Coturn server, a local area network switch and a plurality of Webrtc edge gateways. The terminal equipment is connected with the system server through the local area network switch or is connected with the system server through the Webrtc edge gateway; the client device and the Coturn server are respectively connected with the system server, and external network access of videos is provided through the Coturn server; the Webrtc edge gateway comprises a soft routing module, a VPN (Virtual Private Network) networking module and a Webrtc video module; the system server comprises a video monitoring module and a Webrtc video module, the Webrtc video module provides video playing service for the client, and the Coturn server provides an intranet direct connection mode, a P2P mode or a relay mode for path optimization transparent playing. According to the invention, low-cost cross-regional networking can be realized, high-efficiency video access is realized, and various equipment access systems are compatible.

The embodiment of the invention discloses a light application interaction architecture method and device based on data ferry and a medium, and the method comprises the steps: deploying an extranet light application in an extranet server, deploying an ERP system in an intranet server, and physically isolating the extranet server from the intranet server; deploying the cache database in an extranet server, and storing data of the extranet light application in the cache database; and deploying the data ferry machine in an intranet server, querying the newly added data in the cache database through the data ferry machine, and sending the newly added data to the ERP system to complete the light application interaction architecture. According to the embodiment of the invention, intranet applications and services of clients are not directly exposed in an extranet environment, external users cannot directly penetrate through the intranet services no matter what modes the external users pass through, IT security risks are effectively reduced through the light application of the ferry machine, and the extranet applications and the intranet applications have emphasis, perform their own functions and do not influence each other.

The invention relates to an extranet access method and device, computer equipment, a readable storage medium and a product, and relates to the technical field of communication. The method comprises the following steps: when receiving extranet access requests sent by at least one piece of intranet equipment, acquiring priorities of the extranet access requests respectively transmitted to at least two gateway servers; the priority is determined based on the connection attribute between the gateway server and the intranet equipment; sending the extranet access request to a first gateway server with the highest priority, and performing network address translation; when the first gateway server is abnormal in the network address translation process, an external network access request is sent to a second gateway server with the highest priority in the gateway servers except the first gateway server, and network address translation is carried out; and when the second gateway server converts the intranet address of the intranet equipment into the public network address of the extranet indicated by the extranet access request, obtaining an extranet access result. By adopting the method, the external network access efficiency can be improved.

The invention provides a network security one-way isolation system and method of a communication satellite system and electronic equipment, and relates to the technical field of communication, the network security one-way isolation system of the communication satellite system comprises a first one-way firewall, an intranet host system, a one-way gatekeeper, an extranet host system and a second one-way firewall, the intranet host system receives service data transmitted by the communication service network through the first one-way firewall, and performs format conversion processing on the service data to obtain internal interface data in a preset format supported by the one-way gatekeeper, so as to send the internal interface data in the preset format to the one-way gatekeeper, and the one-way gatekeeper forwards the data to the extranet host system; and the external network host system recovers the internal interface data in the preset format into service data, and sends the recovered service data to the external network through the second one-way firewall. According to the system, a multi-stage deep security protection framework of a two-stage firewall and a one-stage one-way gatekeeper is adopted, so that the network security of a communication service network is ensured.

The invention relates to the technical field of Internet of Things, and discloses a service registration method, a block chain total system, an edge node, a medium and a product, and the method comprises the steps: obtaining the total service information and identity information of a target service node, and the external network communication information of a target edge node, the total service information comprises communication indication information and service information of at least one service provided by the target service node. And creating a first interface address corresponding to the target service according to the external network communication information and the communication indication information of the target service. And generating service registration information corresponding to the target service according to the communication indication information and the service information of the target service, the first interface address and the identity information of the target service node. And adding the service registration information corresponding to the target service to the block chain account book. And according to a preset block chain synchronization mechanism, service registration information corresponding to the target service is synchronized to block chain account books of other edge nodes. According to the invention, cross-network registration of services can be realized.

The invention discloses an internal and external network information transmission method and device based on isolation control. The method comprises the following steps: when a connection request from an external network is received, creating a client thread; analyzing the data when determining that the client thread receives the data from the external network; when the data is determined to belong to a legal message based on the data analysis result, packaging the data; forwarding the packaged data to a communication channel, and forwarding the packaged data to an intranet corresponding to the extranet by using the channel for data processing; after the intranet receives the data, de-encapsulation is carried out, and processing is carried out to obtain response data; and after the external network receives the response data, the response data is fed back to the slave station of the external network through the client thread. According to the invention, the technical problem that the industrial control system is difficult to maintain and upgrade and difficult to meet the data high-speed interaction requirement of the high-speed industrial Internet of Things due to the use of a large number of aging equipment and technologies in the industrial control system in the related technology is solved.

The invention provides an energy consumption online detection device and system, and belongs to the technical field of energy consumption monitoring. According to the energy consumption online detection system, an internal network processing unit, an external network processing unit and a safety data exchange unit are installed in energy consumption online monitoring end equipment, and the internal network processing unit and the external network processing unit are respectively connected with safety computer equipment and are respectively connected with an internal network and an external network. And the intranet security computer equipment and the data acquisition application software system are responsible for realizing data acquisition and protocol analysis with various field monitoring instruments, data acquirers and informatization systems of energy consumption units, encrypting data and transmitting the data to the extranet processing unit through the security data exchange unit.

The invention discloses an enterprise-level three-party dependency package security management and control system and method, and relates to the technical field of software supply chain security, and the enterprise-level three-party dependency package security management and control system comprises the following modules: a timed task scheduling module, an external network package pre-scanning module, a private service package monitoring module, a dependency graph construction module, a product management and control module and a notification display module. By establishing an external network packet pre-scanning mechanism, security scanning is performed and a blocking list is generated before a dependent packet enters an enterprise private server, and introduction of a packet containing high-risk vulnerabilities is blocked from the source; meanwhile, through the continuous monitoring of the private server package and the construction of the dependency relationship graph, the vulnerability discovery and the accurate positioning of the influence range of the stored dependency package are realized; and finally, performing hierarchical management and control on the affected products based on vulnerability levels, and realizing timely transmission and situation visualization of risk information through a notification display module. According to the invention, full-life-cycle safety protection from an external network source to internal products of an enterprise is realized, and the safety management level and risk response efficiency of the dependent package of the enterprise are effectively improved.

The invention provides a ferry password isolation system, and relates to the technical field of information security, and the system comprises an external network host module, a physical ferry module, an intermediate host module and an internal network host module which are isolated from one another: the external network host module is configured to communicate with an external network, obtain data from the external network, and transmit the data to the physical ferry module; the physical ferry module is configured to communicate with the extranet host module, is disconnected from the intermediate host module, and receives data transmitted by the extranet host module; the data transmission module is disconnected with the external network host module, communicates with the intermediate host module and transmits the data to the intermediate host module; the intermediate host module is configured to receive the data transmitted by the physical ferry module and transmit the data to the intranet host module in a one-way manner; and the intranet host module is configured to receive the data transmitted by the intermediate host module.

The invention relates to a load balancing method and device based on gateway equipment and electronic equipment, and belongs to the technical field of network communication, and the method comprises the steps that a load balancing strategy is pre-configured, and the load balancing strategy comprises a load balancing interface and a matching condition; receiving a DNS message sent by the client; when it is determined that a session corresponding to the DNS message does not exist in a preset session table, creating a first session based on the DNS message; matching a first session with the load balancing strategy to obtain a target load balancing strategy; and calculating the source address of the first session based on the target load balancing strategy to obtain a link interface corresponding to the first session. According to the invention, the DNS request can be ensured to always access the high-quality DNS server at the exit of the current operator, and the DNS request and the internet access request of the client are ensured to always access the external network through the same link, so that the network access quality of the client is improved.

The invention relates to an intranet access system and method, electronic equipment and a storage medium, and the system comprises a redirection service module which is used for receiving an intranet application access request sent by a client from an extranet, and controlling the client to send a first redirection request to an extranet access assistant service module; the extranet access assistant service module is used for converting the intranet address into a WebVPN access address, returning the WebVPN access address to the client, controlling the client to send a WebVPN login request to the WebVPN service module, and controlling the client to send a WebVPN access request to the WebVPN service module based on the WebVPN access address; and the WebVPN service module is used for sending the intranet application access request to the intranet application system indicated by the WebVPN access request. Therefore, the user can automatically jump to access the intranet application system after logging in for one time, the user operation is simplified, and the user experience is improved.

The invention discloses a streaming media transmission method and system based on a security isolation device. The method comprises the following steps: connecting an intranet database through the security isolation device; obtaining a streaming media identity identifier in a request information table of the intranet database; converting the streaming media identity into an intranet real streaming media address, accessing the intranet real streaming media address and caching the streaming media information; and forwarding the cached streaming media information to an external network client. By using the security isolation device and the streaming media transmission technology, the problem that the streaming media service cannot be directly accessed in a cross-network environment is solved.

The invention discloses an intranet data anti-leakage method based on zero trust and a related device, and belongs to the technical field of information technology and data security. The method comprises the following steps: identifying mainboard information of terminal equipment through a desk management module, limiting all unauthorized data external transmission paths, and only allowing internal white list software to be installed; an isolation wall of an intranet and an extranet is established through a network isolation module, only one network is allowed to exist at the same time, a client is deployed at a credit granting terminal and is bound with a credit granting account, and a gateway end verifies a user identity through a security center and gives a corresponding access right; the flow management and control module is used for limiting the intranet flow to only access the white list website; through an outgoing approval module, mail outgoing is allowed and file outgoing parameters are set only after approval is passed; and single management and control of an external transmission path of intranet data and blocking of a secret divulging behavior are realized. Through real-time control and safety supervision, file protection and leakage prevention of intranet data can be achieved, operation is convenient and fast, and applicability is achieved.

The invention provides an H.323 video conference secure transmission system and method based on isolated transmission equipment, and relates to the technical field of data transmission. Comprising an extranet conference agent used for receiving a registration signaling of a conference calling terminal and transmitting the registration signaling to an intranet conference agent; after the conference called terminal completes registration, receiving a conference call of the conference calling terminal and transmitting the conference call to the intranet conference agent; receiving a call response and forwarding the call response to the conference call terminal; the intranet conference agent is used for receiving the registration signaling and the conference call sent by the extranet conference agent, and forwarding the registration signaling and the conference call to the called conference terminal; and receiving a call response sent by the called conference terminal, and transmitting the call response to the external network conference agent. According to the invention, high-efficiency transmission of audio and video data is realized, centralized management is carried out through a single-guide mode, and the system is suitable for scenes requiring low-delay and high-reliability audio and video transmission, such as online conferences, video live broadcast and multimedia applications.

The invention provides an energy storage EMS device remote debugging system and method, and is used in the technical field of Internet of Things, the system comprises an energy storage EMS device, an FRP server and an operation and maintenance terminal, and the energy storage EMS device comprises an FRP client and a wireless communication module; the FRP client is used for applying for registration from the FRP server and forwarding data of the FRP server after establishing a connection with the FRP server; the wireless communication module is used for establishing wireless communication connection between the energy storage EMS device and the FRP server; the FRP server is used for distributing an external network access IP address of the energy storage EMS device, establishing a connection with the FRP client according to a request of the operation and maintenance terminal, and forwarding data of the operation and maintenance terminal and the FRP client; and the operation and maintenance terminal is used for initiating a connection request to the FRP server and receiving operation and maintenance data returned by the FRP server. According to the scheme, based on wireless communication and FRP intranet penetration, the network configuration process in remote operation and maintenance can be simplified, the power protocol compatibility is improved, and the network connection stability and reliability can be guaranteed.

The invention discloses a one-way off-line security intelligent decision center system with local deployment as a main and external network service as an auxiliary and a control method, and belongs to the technical field of artificial intelligence security and edge intelligent decision. A three-level security domain physical and logic dual isolation architecture is adopted, extranet multi-model intelligent security enablement is performed on a local core decision domain through a physical one-way import channel, the local core decision domain completes reasoning calculation in combination with an enablement result in a non-extranet interaction state, a top-layer task scheme is generated, and a top-layer task scheme is generated. Through a multi-mode man-machine interaction mode, after human rigid authorization, issuing to an intranet equipment scheduling domain for execution, and feeding back a state in real time to form a full-link closed loop; the method realizes external network multi-model intelligent security enabling, local agent professional decision and rigid closed loop dominated by human beings in the whole process, aims to solve the problems of cloud dependence, data leakage, out-of-control AI, high cost, poor adaptability and the like, and is suitable for families, industries, confidential scenes, field non-support operation and other scenes.

The present invention relates to the field of intelligent vehicle technology, and provides a vehicle terminal access method, device and system, the method comprising: receiving an access request corresponding to a target client, allocating a corresponding dynamic port for the current access request; sending the dynamic port to the target client, and instructing the target client to establish a first data channel between the target client and a reverse proxy server; sending the dynamic port to a target vehicle terminal through a target control channel, and instructing the target vehicle terminal to establish a second data channel between the reverse proxy server and the target vehicle terminal; based on the first data channel, receiving an external network request sent by the target client; based on the second data channel, sending the external network request to a target service associated with the external network request in the target vehicle terminal. The present invention can improve the security of communication and ensure the stability of system operation.

The invention particularly relates to a dynamic bandwidth sharing management method based on OpenFlow. According to the dynamic bandwidth sharing management method based on the OpenFlow, an intranet switch guides out-of-network traffic of a virtual machine to an OpenFlow node, and it is ensured that all out-of-station traffic passes through a control platform subjected to centralized management; the OpenFlow controller monitors and analyzes the flow in real time, and limits the flow through IP matching by using a set flow table; the OpenFlow node carries out mutual conversion on the flow of the intranet and the flow of the extranet and applies a corresponding QoS strategy; and the internal network core switch sends the processed flow to the target virtual machine to realize flow control of QoS (Quality of Service). According to the dynamic bandwidth sharing management method based on OpenFlow, it can be ensured that key services obtain necessary bandwidth support, meanwhile, the operation cost of a user is reduced, the network management process is simplified, efficient sharing and cooperation of resources are promoted, the bandwidth management capacity in a cloud computing environment is improved, the elasticity and expandability of a system are enhanced, and the dynamic bandwidth sharing management method based on OpenFlow can be applied to the cloud computing environment. And ever-increasing business requirements can be met.

The invention relates to a credential cross-platform unidirectional optical isolation data transmission and release method and system, and belongs to the field of data processing. The method comprises the following steps: triggering a signal-creative cross-platform one-way data acquisition isolation optical shutter through an initialization protocol, the one-way data acquisition isolation optical shutter covering an intranet processing layer, an extranet processing layer and a single link physical optical fiber layer, and executing the initialization protocol to perform dual-channel independent initialization on network hardware interfaces of the intranet processing layer and the extranet processing layer; the user configuration parameters are analyzed, and a configuration strategy is generated based on the user configuration parameters and used for configuring a one-way data acquisition isolation optical shutter; generating and executing an interface activation protocol of the one-way data acquisition isolation optical shutter based on the user configuration parameters; the intranet processing layer of the unidirectional data acquisition isolation optical shutter receives field network data and unidirectionally transmits the field network data to the extranet processing layer, and the extranet processing layer delivers the field network data to a specified server. According to the invention, one-way secure transmission of data between the internal network and the external network is realized, and no information flowing to the internal network from the external network is ensured.

The invention discloses an analysis and display method and system for network quality detection, a medium and a product, and relates to the technical field of data processing. In the method, external network detection data and WiFi access quality data reported by probe equipment are received, and the data are aggregated according to a preset time period to form a network quality data group of a sampling period. And the system arranges the data groups according to a time sequence, and identifies an abnormal period in which an external network time delay mean value or a packet loss rate suddenly changes. And for each abnormal period, extracting a change sequence of WiFi signal strength, a working frequency band and an external network performance index in the period and an adjacent period. Based on these sequences, the system identifies quality degraded trigger events and extranet path problem points. And finally, displaying the network quality data of each sampling period in a visual interface, and marking a corresponding trigger event and a problem point at an abnormal period position. By implementing the technical scheme provided by the invention, the analysis and display efficiency of network quality detection can be improved.

The invention discloses an extranet-driven intranet and extranet security isolation compiling system, and belongs to the technical field of software development. Comprising an SFTP server, and the SFTP server is connected with an intranet and an extranet. The SFTP server is used for internal and external network upload management and control, internal and external network physical isolation and file synchronization. The intranet comprises an automatic script, a configuration file detection module, an automatic compiling module and an intranet log module; the external network comprises a front end and a rear end, the front end is used for providing a unified operation entrance for a user, and the rear end is used for driving the front end to work through a data processing algorithm; when a user initiates a request through a webpage, a system creates task groups, and each task group comprises a plurality of sub-tasks; at the moment, the extranet executes an extranet process to perform extranet legality verification, and performs task release; and meanwhile, the intranet executes an intranet process and periodically performs intranet legality detection. The method can ensure that each link masters the edition issuing key information consistently, and effectively improves the information transmission efficiency and accuracy.

The invention discloses a method for detecting existence of an illegal external connection channel in a terminal based on a middleware injection mode, which comprises the following steps of: loading byte codes by a detection engine, and hooking corresponding functions on a Web application to realize monitoring and intervention on the Web application; when the intranet terminal accesses the detection Web application, the detection engine detects a request message and inserts a static resource in a response; the static resource tries to access the extranet monitoring server from the browser; after the external network monitoring server receives the access data from the static resources, an illegal external connection alarm is immediately carried out; the extranet monitoring server returns an extranet IP and a browser fingerprint of the terminal host in the access data to the static resource; and the static resource sends the external network IP and the browser fingerprint of the terminal host to the internal network monitoring server, and the internal network monitoring server carries out illegal external connection alarm after receiving the external network IP and the browser fingerprint. According to the invention, powerful support can be provided for network security protection, and security detection precision and breadth are improved.

The invention mainly discloses a streaming media asymmetric network penetration method, which comprises the following steps that: after being started, intranet video equipment is actively connected to a preset extranet server, and a persistent control channel is established; the extranet server receives a watching request instruction of the user side and judges whether a corresponding audio and video stream is transmitted or not, if not, a first instruction is sent to the intranet video device through the control channel, and the first instruction is used for instructing the intranet video device to push the audio and video stream to the extranet server; and the intranet video device responds to the first instruction and transmits the encoded audio and video streams to the extranet server through the data transmission channel.