1773 results about "Private network" patented technology

The invention relates to the technical field of signal devices, and discloses a traffic signal control method and system based on vehicle-road cloud multi-modal data fusion, and the method comprises the steps: collecting multi-modal traffic data synchronously in real time through a vehicle-end sensor, road-side sensing equipment and a cloud Internet platform; fusing the heterogeneous data by adopting a space-time alignment algorithm, and constructing a standardized space-time feature matrix; traffic flow prediction is carried out based on a multi-layer space-time diagram neural network trained by a federated learning mechanism, and a signal control instruction is generated through reinforcement learning and a multi-objective optimization model; and issuing the green wave parameter, the dynamic timing scheme and the cross-domain coordination strategy to a roadside signal machine through the cloud edge coordination architecture to execute control. The problems that in the prior art, low-delay private network communication cannot be achieved, the data fusion efficiency is low, unmanned driving is not supported, and the deployment cost is high are solved, and the purposes of low-delay communication, high reliability and low risk are achieved.

A multi-cloud overlay network for supporting communications between a first public cloud network and a second public cloud network. The overlay network features a management virtual private network, which includes a network load balancing (NLB) component and a controller registered as a target on a port of the NLB component. The overlay network further includes one or more spoke or transit gateways and a multi-cloud access virtual private cloud (VPC) operating within the first public cloud network, and a remote cloud load balancer component operating the second public cloud network. The remote cloud load balancer component is communicatively coupled between the multi-cloud access VPC and one or more remote spoke or transit gateways. The multi-cloud access VPC includes a VPC endpoint that is assigned a private IP address and communicatively coupled to the NLB component and a virtual private network (VPN) gateway communicatively coupled to a private transport.

The invention discloses a private network data security detection method based on big data, and belongs to the field of security detection, and the method comprises the steps: obtaining a real-time data packet from private network traffic, encoding the data packet through a forward error correction code technology, generating redundancy check information, and obtaining an encoded data packet; if a bit error is detected in the transmission process of the coded data packet, requesting a sending end to retransmit a damaged data packet through an automatic retransmission request mechanism to obtain a retransmitted data packet; adjusting the redundancy of a forward error correction code and a trigger threshold of an automatic retransmission request according to the adaptive error correction parameter, generating an optimized error correction scheme, and obtaining a repaired data packet; and aiming at the alarm processing instruction, automatically adjusting a network flow control strategy, limiting the transmission bandwidth of an abnormal destination, updating the sensitive data fingerprint database, and obtaining optimized protection configuration.

The invention relates to a network slice optimization method for a 5G private network, and the technical scheme comprises the steps: constructing a time sequence performance model in a slice operation process, and monitoring tiny changes including end-to-end time delay, throughput and packet loss rate; then extracting a short-period fluctuation mode of the index, and comparing the gradient with a historical stability threshold value; judging whether the index is in a performance critical state or not by identifying an index drifting behavior which continuously jitters but does not default yet; non-equal-ratio responses including jitter improvement and delay decline after each time of resource adjustment are recorded; then trend fitting is carried out on the data, and whether a performance platform period or a critical jump point exists or not is judged; delimiting three intervals of resource investment in the model: an inactive area with invariable investment, a high-sensitivity area with rapid performance change and a rising saturation area with stable performance and continuous resources, wherein the three intervals include an inactive area with invariable investment, a high-sensitivity area with rapid performance change and a rising saturation area with stable performance; and identifying the current response area of the slice through the model, determining that the regulation strategy does not take equal proportion input as the core, and taking the optimal response area as a resource allocation interval to make a choice.

The invention relates to the technical field of satellite telemetering and remote control, and discloses a port task processing method for a satellite measurement, operation and control system, which comprises the following steps of: 1, detecting all available network interfaces through a port scanner, and establishing a multi-path communication channel comprising a public network, a private network and a satellite link; step 2, acquiring packet loss rate, delay, bandwidth and jitter parameters of each path in the multi-path communication channel in real time, and updating the parameters based on a preset period; and step 3, generating a comprehensive score of each path according to the packet loss rate, the delay, the bandwidth and the jitter parameters. According to the method and the device, the technical scheme of dynamic scoring and switching of the multi-path communication channel is adopted, and the technical effect of automatically selecting the optimal path according to the real-time network performance is achieved; the problems of high transmission delay, large packet loss rate and incapability of adaptive adjustment caused by network fluctuation are solved.

The invention discloses an electric power production data private network security situation awareness system and method. The method comprises the following steps: 1) acquiring security data of an electric power production data private network in real time; 2) standardizing the acquired data; 3) constructing a power grid entity relation graph, and fusing the standardized data obtained in the step 2) into the graph; 4) constructing an attack graph, and associating the attack graph with the power grid equipment entity relationship graph; 5) combining the power grid entity relation graph with the attack graph, performing deep correlation analysis, and identifying potential attacks in the power grid; 6) generating a grade risk alarm according to an identification result in the step 5), and triggering corresponding countermeasures; and 7) simulating the defense measures in the step 6), and optimizing and adjusting the defense countermeasures according to a feedback result. According to the method, the multi-source data is combined with the dynamic knowledge graph technology, real-time correlation analysis of the power grid entity relationship and the attack behavior is supported, and the recognition capability of novel attacks is remarkably improved.

The present invention relates to the technical field of digital twin, and in particular to a private network park digital twin visualization method, apparatus and device, and a computer storage medium. Disclosed in the present application is a private network park digital twin visualization method, comprising: using a clustering algorithm to classify ground objects in a remote sensing image of a park, dividing grids on the basis of formed pixel clusters, and calculating dilution ratios thereof; mapping grid data and point cloud data into a unified coordinate system, and using the clustering algorithm to cluster the point cloud data in each grid; sampling each point cloud cluster on the basis of the dilution ratio of the corresponding grid, and finding out non-edge points by means of a BoundED algorithm; on the basis of the proportion of the non-edge points in each point cloud cluster, calculating an initial dilution threshold of each point cloud cluster; and, after each point cloud cluster has been diluted, rendering and presenting same by means of a three-dimensional rendering engine and returning a rendering frame number and, if the rendering frame number meets a preset condition, ending the process.

The invention discloses a data private network state reasoning method based on an electric power production knowledge graph. The method comprises the following steps: 1) constructing the electric power production knowledge graph; 2) data acquisition; collecting operation state monitoring data of equipment from entity equipment of various power system components through a standardized interface, wherein the operation state monitoring data comprises the state, load data and environment data of the power system components; 3) associating the collected equipment operation state monitoring data with the knowledge graph through a data private network, and updating the power production knowledge graph based on the data collected in real time; and 4) analyzing the current state of the power system by adopting an inference engine, and predicting a potential fault. According to the method, the power production knowledge graph is constructed and data private network state reasoning is performed based on the power production knowledge graph, so that the operation and maintenance efficiency of the power system and the accuracy of fault diagnosis are remarkably improved.

The invention provides a hyperspectral snapshot compression imaging method and system based on a space-spectrum prior decoupling model, high-quality reconstruction is realized through decoupling optimization and a deep expansion network, and the method comprises the following steps: constructing a training data set containing a compression measurement image and a corresponding reconstruction spectrum; establishing an objective function fusing space and spectrum prior, converting the objective function into constrained optimization, and converting the constrained optimization into three sub-problems of linear reconstruction, space prior and spectrum prior by adopting a semi-quadratic splitting method; a deep expansion network is designed to alternately solve sub-problems: a linear sub-problem is solved through analysis, and a space / spectrum sub-problem is subjected to implicit prior modeling through a private network, so that end-to-end reconstruction is realized; a mixed loss function is adopted to optimize model parameters, and images can be reconstructed in real time after training is completed. Space and spectrum prior decoupling is carried out, space structure details and spectrum features are respectively captured through an independent network architecture, the problem of mutual interference of joint modeling in a traditional method is solved, and high-quality spectrum image reconstruction is realized.

The invention provides a computing power resource management and distribution method and system and a medium. The method comprises the following steps: integrating various computing power resources in a private network, establishing a computing power resource information base, analyzing a computing power resource request, establishing a service demand model, optimizing and matching a computing power resource configuration template, obtaining a computing power adaptation template, and establishing a service demand model; optimal computing power resource adaptation is carried out according to dynamic information of target computing power resources matched with the computing power adaptation template, isolation processing is carried out at the same time, monitored performance index data are processed, a load trend is predicted, a corresponding computing power resource adjustment strategy is obtained, and the computing power resources are optimized and expanded according to big data analysis; therefore, efficient utilization and elastic expansion of the computing power resources of the private network are realized by constructing the dynamic computing power resource pool and the resource scheduling model and monitoring, adjusting and optimizing an expansion mechanism, and the processing efficiency and security of big data services are remarkably improved.

The invention relates to the technical field of aerospace, in particular to low-altitude traffic flow airspace-oriented real-time planning, and provides a centimeter-level precision detection network covering a low-altitude airspace by integrating multi-dimensional data sources such as radar electromagnetic feature recognition, ADS-B (Automatic Dependent Surveillance-Broadcast) automatic monitoring, Beidou or GPS (Global Positioning System) space-time reference positioning and the like. The three-dimensional trajectory and motion situation of the aircraft are solved in real time, intelligent reconstruction of an airspace sector and adaptive optimization of a flight corridor are realized by adopting a dynamic programming algorithm driven by reinforcement learning based on the real-time pose data of the aircraft, and a flight conflict prediction model constructed by combining a space-time convolutional neural network is used for predicting the flight conflict. According to the method, potential risks can be pre-judged, an optimal avoidance path can be generated, full-process digital management and control from identity verification to airspace authorization can be realized by constructing an aircraft digital identity authentication system and a dynamic access control mechanism, and modules such as a three-dimensional navigation information service module, a low-altitude digital communication private network module and an intelligent early warning and warning system module are integrated. And the guarantee of full-life-cycle service is provided for the low-altitude aircraft.

The invention discloses a private network dynamic access control method and system, and relates to the technical field of network security and access control. The method comprises the following steps: acquiring equipment behavior data and network flow data in a private network, performing feature construction, and generating equipment trust features and network behavior features; and carrying out multi-dimensional risk assessment model training based on the equipment trust features and the network behavior features, carrying out real-time risk assessment on access requests or entities in the private network through the trained multi-dimensional risk assessment model, and generating a real-time risk score through a weighted aggregation function. According to the invention, through the multi-modal feature fusion model based on an attention mechanism, deep association of static attributes and dynamic behavior features of equipment is realized, and a real-time risk score is generated in combination with a multi-dimensional risk assessment model and a weighted aggregation algorithm. The limitation that in traditional access control, the evaluation dimension is single, the static strategy lags behind, and dynamic threats cannot be reflected is effectively overcome, and the accuracy and interpretability of private network access risk perception are remarkably improved.

The present invention discloses system and method for adaptive deception orchestration is disclosed. The system comprises a dummy asset generation module configured for generating dummy assets upon receipt of defined organizational data from an organization server, a dockerized container creation module configured for generating a plurality of virtual system groups, a virtual private machine client-server communication module configured for establishing a plurality of virtual private networks (VPN) in the plurality of virtual system groups, to provide a secure communication channel, a cyber-attack path orchestration module configured for orchestrating one or more cyber-attack scenario based on a plurality of historical behavioural patterns, an adaptive camouflaging module operatively configured for transferring system logs at a predetermined time interval by masking a chatting application and an intelligence accumulation module operatively connected to the adaptive camouflaging module configured for generating an attack pattern based on the analysis of the system logs.

The invention discloses an integrated airport foreign object detection system and method, and the system comprises a multi-source data collection module which is combined with a self-adaptive triggering mechanism, and dynamically adjusts the working mode of a sensor according to a flight timetable and meteorological data; the edge calculation processing module is used for extracting a foreign object candidate region by adopting a multi-modal data fusion technology, carrying out confidence coefficient weighted decision based on a D-S evidence theory and outputting accurate position and size information of a foreign object; the automatic submission module is used for establishing a grading alarm mechanism, pushing high-risk foreign objects to a control tower terminal in real time through a 5G / wireless private network, and synchronously generating an encrypted standardized report; and the intelligent analysis platform predicts a foreign object high-incidence area by using an LSTM time sequence model, traces foreign object causes in combination with a knowledge graph technology, and provides management decision support through a visual interface. According to the invention, full-process optimization is realized through a closed-loop architecture of multi-source data acquisition, edge calculation processing, automatic submission and intelligent analysis.

The invention discloses a channel negotiation method and device based on relay proxy and a storage medium, and relates to the technical field of telecommunication, and the method comprises the steps: requesting a relay server to obtain a relay proxy address, packaging the relay proxy address into a candidate address of a session description protocol, and sending the candidate address to a called terminal through the relay server, analyzing a private network address in response information fed back by the called terminal, initiating a binding request to the private network address of the called terminal, and if the binding request does not establish connection with the called terminal, sending a penetration request to a specified port of the relay server, and establishing a bidirectional network address channel with the called terminal through the penetration request forwarded by the relay server and a binding request initiated by the called terminal to the relay proxy address. According to the invention, the channel between the calling end and the called end is established through the relay proxy address of the relay server and the penetration request, so that the flexibility of media stream transmission is improved.

Methods, apparatus, systems, and articles of manufacture are disclosed for device authentication in a dedicated private network. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to utilize the machine readable instructions to generate first credentials associated with a first network based on second credentials associated with a second network, the first credentials including first location data corresponding to a dedicated private network (DPN), cause a mobile device to program a programmable subscriber identity module (SIM) of the mobile device based on the first credentials, and permit the mobile device to access the DPN based on a determination that second location data corresponding to the mobile device and included with the programmable SIM corresponds to the first location data.

This disclosure above describes a method, a device, and a system for encrypting / decrypting physical channels in a wireless communication network. Among various embodiments are: pre-allocating a key, dynamically granting a key, encrypting the physical channel based on key in various levels, dividing the spectrum into two categories, or dividing a network into an initial access network and a private network. In one embodiment, a method for physical channel encryption is disclosed. Performed by a UE, the method may include obtaining a first key for decrypting a first physical channel, the first physical channel being encrypted; and decrypting the first physical channel based on the first key to obtain a signal or data transmitted by a first network element, the signal or the data being carried in the first physical channel.

The invention relates to the technical field of power production communication, and discloses an optical fiber transmission and multi-channel communication scheduling fusion method, system and device based on emergency communication switchover, and a medium, and the method comprises the steps: carrying out the unified protocol packaging of data of a production scheduling service, and obtaining a production scheduling service data independent transmission protocol stream; the method comprises the following steps: receiving a production scheduling service data independent transmission protocol stream to be transmitted, and pre-distributing a wavelength channel in an optical fiber transmission channel for the independent transmission protocol stream according to the priority and data traffic of a production scheduling service; carrying out independent transmission protocol stream transmission in the optical fiber transmission channel, adjusting the transmission adaptability of a target channel in multiple channels according to an emergency communication switching requirement, and switching the optical fiber transmission channel to the target channel; the target channel comprises a 5G private network channel and a satellite channel. According to the method, flexible adaptation and data consistency of production scheduling service transmission can be ensured, and the emergency scheduling communication capability and efficiency are improved.

The invention provides an unmanned aerial vehicle assisted private network task unloading and resource optimization method and device, and relates to the technical field of unmanned aerial vehicle communication. The method comprises the following steps: constructing a calculation task processing delay and energy consumption model based on an unloading strategy; an unmanned aerial vehicle trajectory optimization and user task unloading strategy optimization algorithm based on DDPG is constructed according to the model; establishing an unmanned aerial vehicle perception model, and generating perception calculation task data through the unmanned aerial vehicle perception model; a dichotomy cross entropy loss function is adopted to optimize decision making and unloading of an action space in a DDPG-based unmanned aerial vehicle trajectory optimization and user task unloading strategy optimization algorithm, and an optimal unloading strategy and an optimal unloading proportion are obtained; and repeatedly and iteratively executing the unmanned aerial vehicle trajectory optimization and user task unloading strategy optimization algorithm based on the DDPG until the award function converges, and generating an optimal unmanned aerial vehicle trajectory flight and user calculation unloading strategy. According to the invention, tasks can be efficiently distributed between the ground and the aerial platform.

A control unit (130) of a control apparatus (10) acquires a position of a first communication device (40A) and first quality information about a plurality of links. The first communication device (40A) is positioned in a first site in which a first base station (20A1) for a first private network is arranged, and is connectable to the plurality of links including the first private network. The control unit (130) acquires a position of a second communication device (40B) and second quality information about the plurality of links. The second communication device (40B) is positioned in a second site in which a second base station (20B1) for a second private network is arranged, and is connectable to the plurality of links including the second private network. The control unit (130) acquires first and second communication information about the first and second communication devices (40A and 40B). The control unit (130) uses the first and second communication information and first and second quality information to determine a communication route satisfying a desired quality between the first and second communication devices (40A and 40B), and gives notice of route information.

The invention relates to the technical field of coal mine telecommunication, and discloses a coal mine underground integrated private network coverage system based on a 5G communication and AR double-transmitting selective-receiving technology, an efficient transmission and baseband processing network is constructed by taking a macro base station as a core on the ground and matching with PTN equipment and a BBU, a 5G micro base station and an RRU are deployed under the ground for a complex environment, and low-loss signal coverage is realized through optical fibers. The AR double-transmitting selective-receiving module ensures that underground data are not lost and have no error through redundant coding and double-link transmission; the edge computing module sinks data processing to the underground, reduces transmission delay and optimizes resource allocation; and the system monitoring and interference suppression unit monitors the operation state in real time, performs multi-stage alarm and resists multipath effect and electromagnetic interference, and finally realizes integration of communication above and under the well, reliability of data transmission, high efficiency of resource utilization and stability of system operation, thereby providing solid communication support for safety production, equipment management and control and personnel scheduling under the coal mine.

The invention belongs to the technical field of ship management, and provides a combined intelligent ship water diversion system integrating differential positioning, a laser radar and a camera. In the shore end RTK-inertial navigation depth fusion positioning module, extended Kalman filtering fusion is carried out on data acquired by shipborne equipment, so that continuity of accurate positioning is realized; the construction of a color high-precision map is realized through a laser radar-monocular vision color high-precision modeling module, details such as wharf fender materials and signboard characters can be better distinguished, and the problem of shoreline modeling defects is solved; visualization of obstacles is achieved through the multi-scene dynamic obstacle detection and fusion module, meanwhile, through cooperation of multi-source data, the precision and stability of ship positioning are greatly improved, higher precision and reliability are achieved, and the precision of a guide instruction is improved; through cooperation of the 5G private network and the visualization module, the data transmission efficiency is improved, the timeliness is improved, and transmission delay can be avoided.

A hierarchical-context area network includes a first virtual private network infrastructure context area network for a first virtual private network infrastructure context area in a first virtual private network infrastructure context level that includes a first virtual private network server, a second virtual private network infrastructure context area network for a second virtual private network infrastructure context area in the second virtual private network infrastructure context level that includes a second virtual private network server, wherein the first virtual private network server receives a protocol data unit from a client device and identifies the second virtual private network server, in accordance with a routing control policy defined by the hierarchical-context area network, as a current point of egress for transporting the protocol data unit through the hierarchical-context area network to send to an external device.

The invention belongs to the technical field of data circulation, and discloses a data circulation method and system based on a slice network and a trusted data space. Comprising the following steps: a connector obtains private network generation feedback to allow a user to access the connector through a corresponding slice private network on the basis of a pre-configured static route; obtaining a user credible voucher and an authentication message forwarded after addressing by the first router; verifying the user credible credential, analyzing the authentication message, and forwarding an obtained network attribute label to a network controller; and allowing the user to enter the trusted data space for data interaction through a second router when the user trusted certificate passes verification and the network attribute tag passes verification by a network controller. According to the invention, the security during data circulation is effectively improved.

The invention discloses a private network content copyright monitoring and evidence obtaining system based on AI and a large model, which utilizes AI and large model technologies to carry out copyright monitoring and evidence obtaining on multimedia content in a private network environment, and carries out deep semantic understanding and cross-modal feature extraction through a large model processor to generate unified semantic representation. The method comprises the steps that a copyright content database is established and stored in a copyright content knowledge base, the copyright content knowledge base is used for storing metadata of original content protected by copyright, unified semantic representation and copyright declarations in a natural language form provided by a copyright party, and the copyright declarations are converted into query vectors through a semantic understanding technology; the method comprises the following steps: acquiring a semantic representation of a multimedia content, performing similarity calculation with the semantic representation of the multimedia content, identifying infringement content, when the infringement content is identified, recording an original source, publishing time and publisher information of the infringement content, performing differentiation analysis, generating an evidence chain, displaying a copyright monitoring result through a user interface, generating infringement alarm information, and presenting details of the evidence chain.

The invention provides a communication method and a communication device, and the method relates to the technical field of communication, and the method comprises the steps: a first UPF receives a first data message, the first data message comes from a first terminal, the first data message is a data message of a first group of services, the target IP address of the first data message is a first IP address, and the target IP address is a second IP address; the first IP address is a large network IP address of the second terminal, and both the first terminal and the second terminal sign a first group of services; and a second data message is sent to a second user plane function UPF, the second UPF is the UPF of the park where the second terminal is located, the second data message is generated based on the first data message, the target IP address of the second data message is a second IP address, and the second IP address is obtained based on the first IP address. The second IP address is a private network IP address applied by the second terminal based on the first group of services. Based on the method, the service access delay of the terminal can be reduced.

The invention discloses an IPSec (Internet Protocol Security) VPN (Virtual Private Network) security gateway communication method fused with a post quantum cryptography technology, which comprises the following steps of: S1, in a first-stage main mode of IKE (Internet Key Exchange) key agreement, replacing a traditional single SM2 algorithm and a digital certificate based on an SM2 cryptographic algorithm with an SM2 and PQC mixed algorithm and a mixed PQC digital certificate; s2, the initiator and the responder respectively use the PQC encryption key pair and the PQC signature key pair to carry out key exchange and data signature, and simultaneously use the SM2 encryption key pair and the SM2 signature key pair to carry out key exchange and data signature; s3, in the message 1, the initiator sends a security alliance load containing the attribute of the fused SM2 and PQC algorithm to the responder; s4, in the message 2, the responder feeds back a PQC series hybrid certificate and an SA proposal; and S5, in the message 3 and the message 4, the initiator and the responder complete key exchange and verification. According to the invention, the security of the IPSec VPN security gateway can be improved, and quantum computing attacks can be resisted.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

A core network server for defining authentication credentials and authenticating a wireless communication device according to WIFI communication protocols includes a central processing unit (CPU) and a non-transitory memory comprising executable instructions that when executed by the CPU, causes the core network server to receive an encrypted authentication request from a wireless communication device; send the encrypted authentication request to an authentication server based on one or more attributes in the encrypted authentication request; receive an indicator of a specialized network slice associated with the wireless communication device based on sending the encrypted authentication request; communicate authentication messages to the wireless communication device according to one or more network functions of the specialized network slice; and authenticate the wireless communication device according to the specialized network slice responsive to communicating the authentication messages.

The invention relates to the technical field of humanoid robot control. The invention provides a humanoid robot bilateral force feedback teleoperation method of a force compensation mechanism. According to the method, a 5G private network is used for deployment, the characteristics of low delay, high reliability and large bandwidth of the 5G private network are utilized, real-time interaction of high-dimensional haptic data in a remote and cross-domain environment is effectively supported, cross-domain teleoperation can be achieved, high-fidelity feedback transmission of environment contact force is effectively achieved, and the real-time interaction of the high-dimensional haptic data in the remote and cross-domain environment is achieved. The precision, the operation efficiency and the overall safety of remote operation of the humanoid robot in complex industrial scenes such as nuclear power maintenance, precise assembly and high-risk environment operation are remarkably improved, the gap between traditional automation and low-efficiency remote operation is filled up, and reliable technical support is provided for advanced industrial application needing man-machine cooperation fine force control.