30 results about "Private address" patented technology

Network address migration using a destination compute instance to update network configuration information in a cloud environment is disclosed. A network interface either using a private address within a subnet corresponding to the created network interface or using a floating address outside of the subnet corresponding to the created network interface is created. A first node of the HA pair with a service provider interface. The first node is an active data server of the HA pair and the second node is a backup node of the HA pair. Requests are serviced the first node using the created network interface. Upon failure of the first node, the second node performs a failover, wherein if the first node was utilizing a floating address, the second node registers the second node with the service provider interface by adding an address of the second node to the route table.

The present disclosure provides a user application data collection method and device, electronic equipment and storage medium, and relates to the technical field of mobile communication. The method is executed by a NWDAF network element or a trusted AF network element, and includes: determining an identifier corresponding to a target user; sending the identifier to a UDM network element to obtain a protocol data unit session identifier corresponding to the target user; sending the protocol data unit session identifier to an SMF network element to obtain a terminal private address corresponding to the target user; sending the terminal private address to a UPF network element to obtain a terminal public address corresponding to the terminal private address; and collecting user application data through the terminal public address. The present disclosure determines the corresponding PDU session identifier through the identifier, and determines the terminal private address through the PDU session identifier. Then, the corresponding UPF network element can be used to match the terminal private address and the terminal public address. Therefore, the present disclosure realizes user application data collection.

Network address migration using a destination compute instance to update network configuration information in a cloud environment is disclosed. A network interface either using a private address within a subnet corresponding to the created network interface or using a floating address outside of the subnet corresponding to the created network interface is created. A first node of the HA pair with a service provider interface. The first node is an active data server of the HA pair, and the second node is a backup node of the HA pair. Requests are serviced the first node using the created network interface. Upon failure of the first node, the second node performs a failover, wherein if the first node was utilizing a floating address, the second node registers the second node with the service provider interface by adding an address of the second node to the route table.

A camera control device is installed in a private address space and controls cameras installed in the private address space. The camera control device includes a control unit that controls the cameras on the basis of control information transmitted from a server device installed in a public address space without performing a process of transmitting images captured by the cameras to the server device.

The invention relates to the technical field of electric digital data processing, and discloses an edge computing network collaborative scheduling system for high-speed rail platform end security response sinking, which comprises a processor core used for processing a security task; the data acquisition module acquires a video data stream; the scheduling distribution module calculates a bit rate change parameter and predicts a load, and issues a storage isolation control word containing a task identifier and a spatial index when an emergency condition is met; the memory management module intercepts the addressing request and modifies a page table entry memory attribute bit to configure a private address field; the cache consistency filtering module recognizes the memory access state, the hardware level shields a cache line state sniffing request generated by a consistency protocol, through silent isolation of the physical level, micro-architecture level performance degradation caused by the inter-core consistency protocol is eliminated, and it is ensured that the security algorithm processing time delay can be predicted in the complex interference environment.

The application provides a Bluetooth random address generation method and related electronic equipment. The method is applied to an electronic device including a Bluetooth Host and a Bluetooth module. The method includes: the Bluetooth Host generating an identity resolution key; in the case that the electronic device meets a first condition, the Bluetooth Host sending the identity resolution key to the Bluetooth module; the first condition is a condition for triggering the electronic device to reduce power consumption; the Bluetooth module generating a resolvable private address RPA based on the identity resolution key IRK and periodically updating the RPA based on the IRK; in the case that the Bluetooth Host is to perform Bluetooth service, the Bluetooth Host sending an RPA request to the Bluetooth module; the Bluetooth module sending the latest updated RPA to the Bluetooth Host; and the Bluetooth Host performing Bluetooth service based on the latest updated RPA.

The application relates to the technical field of electric digital data processing, and discloses an edge algorithm network cooperative scheduling system for high-speed rail platform end safety response sinking, which comprises a processor core used for processing a safety task; a data acquisition module used for acquiring a video data stream; a scheduling and distribution module used for calculating a bit rate change parameter and predicting a load, and used for issuing a storage isolation control word containing a task identifier and a space index when a burst condition is met; a memory management module used for intercepting an addressing request and modifying a page table item memory attribute bit to configure a private address domain; and a cache consistency filtering module used for identifying a memory access state, and used for shielding a cache line state sniffing request generated by a consistency protocol at a hardware level; the application eliminates micro-architecture level performance attenuation caused by inter-core consistency protocols through physical layer silence isolation, and ensures the predictability of safety algorithm processing delay in a complex interference environment.

Network address migration using a destination compute instance to update network configuration information in a cloud environment is disclosed. A network interface either using a private address within a subnet corresponding to the created network interface or using a floating address outside of the subnet corresponding to the created network interface is created. A first node of the HA pair with a service provider interface. The first node is an active data server of the HA pair, and the second node is a backup node of the HA pair. Requests are serviced the first node using the created network interface. Upon failure of the first node, the second node performs a failover, wherein if the first node was utilizing a floating address, the second node registers the second node with the service provider interface by adding an address of the second node to the route table.

The application discloses a kind of end-to-end security communication methods and systems for bluetooth identity identification, method includes the following steps: S1, initialization stage, using LE Secure Connections protocol establishes trusted key negotiation channel, and core key is derived;S2, daily identification stage, through dynamic resolvable private address RPA and encryption verification, prevent replay attack and relay attack;S3, storage stage, utilize hardware encryption engine and partition protection, ensure the physical security of key.The application uses the above-mentioned end-to-end security communication method and system for bluetooth identity identification, realizes end-to-end security coverage, from the initial pairing of mobile phone and equipment, to the dynamic verification of daily communication, to the hardware level protection of core key, forms whole-link closed-loop security system, effectively resists various malicious attacks, adapts high-risk scene such as finance, security, improves the security and reliability of bluetooth identity identification.

An electronic device is provided. The electronic device includes communication circuitry, at least one processor including processing circuitry, and memory including one or more storage mediums, storing instructions, wherein the instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to receive, via the communication circuitry, an advertising packet advertised from an external electronic device, determine, based on a first list of identity resolving keys (IRKs) of other electronic devices whether a resolvable private address (RPA) of the external electronic device in the advertising packet is resolved, and based on determining that the RPA of the external electronic device is not resolved, request, from the external electronic device, via the communication circuitry, a version of a second list of IRKs.

Disclosed are methods, systems, apparatus, and computer program products for securely pairing a vehicle-mounted wireless sensor with a central device. In a specific embodiment, securely pairing a vehicle-mounted wireless sensor with a central device according to the present disclosure includes pairing the vehicle sensor device with a vehicle control system (VCS) using a pre-shared passkey. The pre-shared passkey is shared between the vehicle sensor device and the VCS via an out-of-band exchange. The embodiment also includes the vehicle sensor device sending an identifier of a resolvable private address (RPA) to the VCS. Additionally, the vehicle sensor device communicates with the VCS using the RPA. In this example embodiment, the RPA is periodically regenerated by the vehicle sensor device.

The invention discloses a resource election method based on a block chain, related equipment and a storage medium, and is suitable for resource election business in a block chain network. In the method, a participating object of a service combines a private address parameter and a contract byte code of a reference smart contract provided by an initiating object to calculate a pre-deployment address of the reference smart contract, and election information is stored in a storage space corresponding to the pre-deployment address, so that the initiating object needs to select the reference smart contract after the participating object provides the private address parameter. According to the embodiment of the invention, the competitive selection information stored in the pre-deployment address of the participating object can be obtained only when the participating object is in the pre-deployment address, and then resource competitive selection processing is performed based on the competitive selection information provided by each participating object to obtain a competitive selection result, so that the perception of other objects on the relevance between the competitive selection information provided by the participating object and the resource competitive selection service is shielded; therefore, the election information provided by each participating object can be effectively hidden in the block chain network, and the fairness and security in the resource election process are finally improved.

This application provides a Bluetooth random address generation method and a related electronic device. The method includes: the Bluetooth Host generates an identity resolving key (IRK); the Bluetooth Host sends the IRK to the Bluetooth module when the electronic device meets a first condition, where the first condition is a condition for triggering the electronic device to reduce power consumption; the Bluetooth module generates a resolvable private address (RPA) based on the IRK, and periodically updates the RPA based on the IRK; the Bluetooth Host sends an RPA request to the Bluetooth module when the Bluetooth Host needs to execute a Bluetooth service; the Bluetooth module sends a latest updated RPA to the Bluetooth Host; and the Bluetooth Host executes the Bluetooth service based on the latest updated RPA. Therefore reducing the power consumption of the AP chip, and extending the standby time of electronic device.

The invention provides a communication method and related equipment. The method comprises the following steps: a first responder receives a first frame for initiating a ranging process from an initiator; the first responder generates a first private address based on the first frame and information related to the identity of the first responder; and the first response side sends a second frame carrying the first private address to the initiator. The method can be applied to an ultra-wideband multi-millisecond ranging system. According to the present application, an initiator may verify whether a frame is true from an authorized responder in an ultra-wideband multi-millisecond ranging session.

The invention provides a practical confidential virtual machine architecture implementation method and equipment for an RISC-V processor, and the method comprises the steps: configuring physical memory protection through a safety monitor operating in a machine mode, and isolating and establishing a safety memory pool in a common memory; the CPU is divided into a common mode and a confidential virtual machine mode through time division multiplexing; realizing a short-path confidential virtual machine mode based on entrustment control; a secure vCPU structure is created in the secure memory to store the state of a confidential virtual machine register, and a shared vCPU structure is established in the Hypervisor to be used for rapidly exchanging state information with the secure monitor; constructing a three-level hierarchical memory management structure; a separated memory sharing mechanism is realized, and a customer physical address space of a confidential virtual machine is divided into a private address space and a shared address space. According to the method, the security, the flexibility and the expandability of the confidential virtual machine can be effectively guaranteed, and a solid security guarantee is provided for the RISC-V platform in a high-performance cloud computing environment.

The invention relates to the technical field of communication, in particular to a network session recovery method and system in a microkernel operating system, electronic equipment and a medium. The method comprises the following steps: storing communication association information between an application program and a network service process in a persistent storage area which can be accessed by the network service process; maintaining, by the application, protocol state information of the network session in its user mode space; accessing a shared memory maintained by the application program by a network service process running in a user mode so as to carry out data forwarding; after the network service process is restarted, communication connection with the application program is reestablished based on the communication association information, and the service is recovered: if the protocol state information is stored in the shared memory, the service is recovered by synchronizing the protocol state information; if the protocol state information is stored in the private address space, the network service process restores the data forwarding function, and the application program guarantees session continuity based on the protocol state information maintained by the application program.

Techniques pertaining to enhancements to ranging and reporting in wireless communications are described. An apparatus (e.g., an initiator) performs a one-to-many contention-based ranging operation by: (a) generating a one-to-many initiator report; and (b) transmitting the one-to-many initiator report to a responder. The one-to-many initiator report contains a resolvable private address (RPA) hash calculated using an identity resolving key (IRK) of one of the responder.

An electronic device is provided. The electronic device may comprise a communication circuit, at least one processor including a processing circuit, and a memory storing instructions and including one or more storage media, wherein the instructions, when executed by the at least one processor, cause the electronic device to: receive, through the communication circuit, an advertisement packet advertised from an external electronic device; determine whether or not a resolvable private address (RPA) of the external electronic device within the advertisement packet is resolved, on the basis of a list of identity resolving keys (IRKs) of other electronic devices; and request a version of the list of IRKs from the external electronic device through the communication circuit, on the basis of determining that the RPA of the external electronic device is not resolved.

The invention provides a communication method and related equipment. The method comprises the following steps: a first responder receives a first frame for initiating a ranging process from an initiator; the first responder generates a first private address based on the first frame and information related to the identity of the first responder; and the first response side sends a second frame carrying the first private address to the initiator. The method can be applied to an ultra-wideband multi-millisecond ranging system. According to the present application, an initiator may verify whether a frame is true from an authorized responder in an ultra-wideband multi-millisecond ranging session.

A device (101) for indicating the availability of a Bluetooth communication connection (112) with a communication unit (102) of a vehicle (100) is described. The device (101) is configured to initiate a Bluetooth pairing between the communication unit (102) and an electronic device (110). Furthermore, the device (101) is configured, in response to the initiation of the Bluetooth pairing, to change a private address of the communication unit (102), with which the communication unit (102) of the vehicle (100) indicates the availability of a Bluetooth communication connection (112), using a variable frequency.

System for providing Redundant Network Address Translation (ReNAT) communication, which includes a Network Operations Center (NOC), wherein the NOC includes: a computing device comprising a processor and a memory for storing logic, and comprising at least the following: a first private network component that initiates communication with a private network; a ReNAT Twin Network Address Translation (NAT) coupled with the first private network component, wherein the ReNAT Twin NAT translates between a customer-assigned private Internet Protocol (IP) address and a Unique Private IP (UPIP) address, the UPIP overlapping with a customer-assigned private IP address space and the UPIP being unique in the NOC; a private ReNAT network component coupled with the ReNAT Twin NAT, wherein the private ReNAT network component provides a source IP address to the ReNAT Twin NAT; and a communication logic that enables the system to support communication with a workstation that has a ReNAT Twin NAT client, wherein the address translation is performed by the ReNAT Twin NAT client, wherein the ReNAT Twin NAT addresses in the data are mapped to customer-defined private addresses, and wherein the private ReNAT network component transmits the data to the private network.

The application relates to the technical field of Internet of Things, and particularly provides an industrial Internet of Things data market transaction method based on a block chain. The method comprises the following steps: initializing a system, obtaining private keys and public keys of a platform, a consumer and a data provider; issuing transaction vouchers for the consumer and the data provider who pass the qualification examination through the platform, so that the consumer and the data provider obtain the permission to participate in the transaction; the data provider and the consumer respectively perform uploading data information and sending a purchase request operation according to the obtained permission to participate in the transaction; the data provider determines the purchase qualification of the consumer through the purchase request sent by a private address; data transmission is performed, and the transaction is completed; the method protects the purchase privacy of the consumer, simplifies the transaction process, and is suitable for an industrial Internet of Things market mode.

Systems and methods for securely handling data traffic on local or private networks, such as by using cloud computing, are provided. A non-transitory computer-readable medium, according to one implementation, may be configured to store executable instructions enabling a processor of a user device to perform the step of discovering an origin of a source application associated with network packets bound for a private address space. The executable instructions may further enable the processor to send a tuple regarding the discovered origin to a cloud server to request an analysis of the tuple. Upon receiving an allow instruction from the cloud server, the instructions enable the processor to allow the network packets to flow normally to a destination associated with the private address space. Upon receiving a deny instruction from the cloud server, the instructions enable the processor to drop the network packets.

The invention discloses a Bluetooth near-field non-inductive identity recognition method and system based on a parsable private address, and relates to the field of Internet of Things near-field recognition, and the method comprises the steps: a recognition terminal encrypts a Bluetooth device address parsing key through employing an AES-256 algorithm, and stores the encrypted key in a local hardware encryption partition; the user equipment obtains an analyzable private address by adopting an AES-CMAC Hash algorithm and broadcasts the analyzable private address; the identification terminal performs verification in combination with the key; after the verification is passed, processing the Bluetooth signal intensity value by adopting a three-stage cascade filtering algorithm; calculating a relative distance based on the Bluetooth signal strength value and the dynamic path loss index; when the relative distance is lower than the preset distance threshold value after continuous N times of measurement, a response action of successful identity recognition is triggered, so that the industrial pain points of high privacy leakage risk, complex user operation and high hardware cost in a traditional near-field recognition scheme are solved; and a lightweight and high-compatibility identity verification solution is provided for consumer electronics and industrial Internet of Things equipment.

The present disclosure provides a blockchain proof method and apparatus, an electronic device, and a storage medium. The method is implemented by: obtaining one or more binding declarations from an address controller for a public address of the address controller, the one or more binding declarations indicating a binding relationship between the public address and one or more private addresses of the address controller; for each of the one or more private addresses, obtaining signature data after signing a corresponding binding declaration in the one or more binding declarations, wherein the signing of the corresponding binding declaration is based on a private key corresponding to the private address; and generating first proof data for verifying the one or more binding relationships using a zero-knowledge proof circuit that meets preset conditions, wherein the input of the zero-knowledge proof circuit includes the signature data.

A method and apparatus for generating and operating a privacy-preserving address in an ultra wide band (UWB) wireless network system are disclosed. A method performed by a first device in a UWB wireless network system according to one embodiment of the present disclosure may comprise the steps of: broadcasting a public-based advertisement polling frame; receiving a public-based advertisement response frame from the second device in response to the public-based advertisement polling frame; sending the public-based SOR frame to a second device; and performing a ranging session process with the plurality of second devices after an initialization process according to the public-based advertisement polling frame, the public-based advertisement response frame, and the public-based SOR frame. Here, a polling message broadcasted during a ranging session process can include a private address based on identification information representing a device related to the ranging session process or IRK information generated using a predefined specific value.

Techniques are disclosed relating to dynamically allocating and mapping private memory for requesting circuitry. Disclosed circuitry may receive a private address and translate the private address to a virtual address (which an MMU may then translate to physical address to actually access a storage element). In some embodiments, private memory allocation circuitry is configured to generate page table information and map private memory pages for requests if the page table information is not already setup. In various embodiments, this may advantageously allow dynamic private memory allocation, e.g., to efficiently allocate memory for graphics shaders with different types of workloads. Disclosed caching techniques for page table information may improve performance relative to traditional techniques. Further, disclosed embodiments may facilitate memory consolidation across a device such as a graphics processor.

The invention provides a ranging operation method and device in wireless communication, for example, an initiator performs a one-to-many competition-based ranging operation by the following steps: (a) generating a one-to-many initiator report; and (b) sending the one-to-many initiator report to the one or more responders. The one-to-many initiator report includes a resolvable private address (RPA) hash calculated using an identity resolution key (IRK) of the one or more responders.

A controller device (204) may coordinate a multitude of advertising devices (211-213) so that the advertising devices may have respective advertising intervals and timing offsets, thereby avoiding collision. As a result, the multitude of advertising devices may participate in a synchronized advertising train (SAT). In one example, the multitude of advertising devices are associated with a single peripheral device and share an identity address, though the advertising devices may have different resolvable private addresses. A connecting (central) device (202) may respond to advertising packets of the SAT, and each of the advertising devices may then receive the response from the connecting device, measure a signal quality of the connecting device, and provide signal quality metric data to the controller device. The controller device may then select one of the advertising devices to establish a connection with the connecting device based upon the received signal quality metric data.

The application discloses a communication penetration method and system based on a session initiation protocol, and the method comprises the following steps: forcibly intercepting a data packet sent by a SIP terminal to a SIP server, converting a source IP of the data packet into a public network IP, converting a source port of the data packet into a target port, replacing a private IP and a port carried in a header connection field in SIP signaling of the data packet with the public network IP and the target port, and replacing a private media IP and a port in SDP information with a public network IP and a target media port when the SIP signaling carries the SDP information. Therefore, it can be seen that a boundary device uniformly intercepts and processes SIP data packets, fixes a port conversion relationship during registration, synchronously modifies a private address and a port in a signaling header into boundary device public network information, realizes consistency of network layer and application layer address conversion, and avoids SIP signaling address mismatch in a NAT environment.