2683 results about "Private network" patented technology

The invention relates to the technical field of signal devices, and discloses a traffic signal control method and system based on vehicle-road cloud multi-modal data fusion, and the method comprises the steps: collecting multi-modal traffic data synchronously in real time through a vehicle-end sensor, road-side sensing equipment and a cloud Internet platform; fusing the heterogeneous data by adopting a space-time alignment algorithm, and constructing a standardized space-time feature matrix; traffic flow prediction is carried out based on a multi-layer space-time diagram neural network trained by a federated learning mechanism, and a signal control instruction is generated through reinforcement learning and a multi-objective optimization model; and issuing the green wave parameter, the dynamic timing scheme and the cross-domain coordination strategy to a roadside signal machine through the cloud edge coordination architecture to execute control. The problems that in the prior art, low-delay private network communication cannot be achieved, the data fusion efficiency is low, unmanned driving is not supported, and the deployment cost is high are solved, and the purposes of low-delay communication, high reliability and low risk are achieved.

The present disclosure relates generally to computer-implemented systems and techniques for leveraging a virtual decentralized database to enable user identity authentication and verification of user activity and associated behaviors on open internet and public web-based and native applications. Techniques are disclosed for user identification profile onboarding using biometrics, frictionless CAPTCHA (Completely Automatic Public Turing Tests To Tell Humans And Computers Apart) processes, passive data capture of physiological and behaviors using device sensors, and cryptographic methods of storing user engagement activity as immutable data files for secure distribution on a decentralized virtual private network. Such technologies operate to establish a high confidence level for user authenticity, communication origin, engagement outcome transparency and clarity of intent for users active on social, commercial, e-commerce and information sharing platforms. More specifically, an unobtrusive passive data capture method of authentication and verification on a secure VPN supports the organic, spontaneous and original experience audiences desire while simultaneously eliminating opportunities for unscrupulous actors to exploit open internet exchanges by inserting fraudulent user accounts, automated bots and other measures that mimic or impersonate live humans, which ultimately undermines user confidence in data safety and erodes mutual trust between people, companies and institutions.

A multi-cloud overlay network for supporting communications between a first public cloud network and a second public cloud network. The overlay network features a management virtual private network, which includes a network load balancing (NLB) component and a controller registered as a target on a port of the NLB component. The overlay network further includes one or more spoke or transit gateways and a multi-cloud access virtual private cloud (VPC) operating within the first public cloud network, and a remote cloud load balancer component operating the second public cloud network. The remote cloud load balancer component is communicatively coupled between the multi-cloud access VPC and one or more remote spoke or transit gateways. The multi-cloud access VPC includes a VPC endpoint that is assigned a private IP address and communicatively coupled to the NLB component and a virtual private network (VPN) gateway communicatively coupled to a private transport.

Serverless containerization of a collaboration application improves deployment and security of the collaboration application. A system may generate a container within a private cloud. The container may execute the collaboration application. The container is assigned an Internet Protocol (IP) address and is associated with a security group that controls network traffic to and from the container. The system may include a network load balancer configured with the IP address assigned to the container that allocates computational resources for executing the collaboration application. The system may include serverless resources such as a database and filesystem that is accessible to the container within the private cloud. The system may include a private cloud (PC) endpoint configured to establish a private connection with an end user interface, wherein the private connection provides secure network traffic between the PC endpoint the end user interface within a private network of the PC endpoint.

The invention discloses a private network data security detection method based on big data, and belongs to the field of security detection, and the method comprises the steps: obtaining a real-time data packet from private network traffic, encoding the data packet through a forward error correction code technology, generating redundancy check information, and obtaining an encoded data packet; if a bit error is detected in the transmission process of the coded data packet, requesting a sending end to retransmit a damaged data packet through an automatic retransmission request mechanism to obtain a retransmitted data packet; adjusting the redundancy of a forward error correction code and a trigger threshold of an automatic retransmission request according to the adaptive error correction parameter, generating an optimized error correction scheme, and obtaining a repaired data packet; and aiming at the alarm processing instruction, automatically adjusting a network flow control strategy, limiting the transmission bandwidth of an abnormal destination, updating the sensitive data fingerprint database, and obtaining optimized protection configuration.

Techniques are described for enabling users of a cloud provider network to create policies used to control the use of temporary security credentials by computing resources other than a computing resource to which the credentials were issued. An identity and access management service encodes, into temporary security credentials, information about the virtual private network to which the credentials are issued. When a computing resource subsequently issues requests to perform actions and uses the temporary security credentials to sign the request, the cloud provider network further adds, to the network traffic, information associated with the virtual private network from which the request originates. A user can then create a policy with a statement indicating that request are to be permitted only if, e.g., the identity of the virtual private network as encoded in the temporary security credentials matches the identity of the virtual private network identified by the information included in the request.

Techniques for leveraging the MASQUE protocol to provide remote clients with full application access to private enterprise resources are described herein. One or more network nodes may be configured to execute a MASQUE proxy service to provide a remote client device with full access to an enterprise / private application resource executing on an application node and hosted in an enterprise / application network, behind the MASQUE proxy service. In some examples, the MASQUE proxy service may execute on a single proxy node hosted at an edge of a cloud network or at an edge of an enterprise network. Additionally, or alternatively, a first instance of the MASQUE proxy service may execute on a first proxy node hosted at an edge of a cloud network (e.g., an ingress proxy node) and a second instance of the MASQUE proxy service may execute on a second proxy node hosted at an edge of the enterprise network.

The invention relates to a network slice optimization method for a 5G private network, and the technical scheme comprises the steps: constructing a time sequence performance model in a slice operation process, and monitoring tiny changes including end-to-end time delay, throughput and packet loss rate; then extracting a short-period fluctuation mode of the index, and comparing the gradient with a historical stability threshold value; judging whether the index is in a performance critical state or not by identifying an index drifting behavior which continuously jitters but does not default yet; non-equal-ratio responses including jitter improvement and delay decline after each time of resource adjustment are recorded; then trend fitting is carried out on the data, and whether a performance platform period or a critical jump point exists or not is judged; delimiting three intervals of resource investment in the model: an inactive area with invariable investment, a high-sensitivity area with rapid performance change and a rising saturation area with stable performance and continuous resources, wherein the three intervals include an inactive area with invariable investment, a high-sensitivity area with rapid performance change and a rising saturation area with stable performance; and identifying the current response area of the slice through the model, determining that the regulation strategy does not take equal proportion input as the core, and taking the optimal response area as a resource allocation interval to make a choice.

This disclosure describes techniques and mechanisms for performing passive measurement for combined one-way latency, packet loss metrics along with liveness detection using customer data packets ingested at a sink node in hardware for Level 2 and Level 3 VPN services. The customer data packets are sampled and copied for measurement either at source node or sink node. The duplicated measurement packet headers are punted based on the IPV6 destination option type to hardware analytics engine at sink node for analytics that populates histogram bins using the timestamps from the packets. Using the transmitted packets during a period, and received packets in all the bins, packet loss is measured. Based on the packets received status, liveness state is detected by the sink node and notified to the source node.

The 5G RedCap quantum encryption method and the 5G RedCap quantum encryption device which are oriented to wireless public network access and support 5G communication, quantum keys and an IPSec protocol are formed by taking productization, practicability and light weight as targets, the quantum keys which are distributed in real time based on a quantum key service platform and are better in randomness and faster in updating frequency are adopted to construct a quantum encryption tunnel, and the quantum encryption efficiency is improved. And the data security of the 5G wireless channel for transmitting real-time service information, running state monitoring and the like is improved. Based on the 5G RedCap quantum CPE terminal, safe, efficient and reliable access of power distribution automation, unmanned aerial vehicle inspection and inspection robot business can be realized, so that the safe access level of power business is improved.

A core network server for defining authentication credentials and authenticating a wireless communication device according to WIFI communication protocols includes a central processing unit (CPU) and a non-transitory memory comprising executable instructions that when executed by the CPU, causes the core network server to receive an encrypted authentication request from a wireless communication device; send the encrypted authentication request to an authentication server based on one or more attributes in the encrypted authentication request; receive an indicator of a specialized network slice associated with the wireless communication device based on sending the encrypted authentication request; communicate authentication messages to the wireless communication device according to one or more network functions of the specialized network slice; and authenticate the wireless communication device according to the specialized network slice responsive to communicating the authentication messages.

A system and method of using generative AI to convert NL queries to database commands for accessing one or more databases. The method includes receiving a natural language (NL) request for information associated with a private network. The method includes providing the NL request to an artificial intelligence (AI) model trained to identify, from a plurality of access objects associated with a plurality of databases and a plurality of event types, a particular access object that provides access to one or more event datasets associated with the NL request. The method includes generating, by a processing device and using the AI model, a database request associated with the particular access object based on the NL request.

The invention relates to the technical field of satellite telemetering and remote control, and discloses a port task processing method for a satellite measurement, operation and control system, which comprises the following steps of: 1, detecting all available network interfaces through a port scanner, and establishing a multi-path communication channel comprising a public network, a private network and a satellite link; step 2, acquiring packet loss rate, delay, bandwidth and jitter parameters of each path in the multi-path communication channel in real time, and updating the parameters based on a preset period; and step 3, generating a comprehensive score of each path according to the packet loss rate, the delay, the bandwidth and the jitter parameters. According to the method and the device, the technical scheme of dynamic scoring and switching of the multi-path communication channel is adopted, and the technical effect of automatically selecting the optimal path according to the real-time network performance is achieved; the problems of high transmission delay, large packet loss rate and incapability of adaptive adjustment caused by network fluctuation are solved.

Systems and methods are provided herein for providing a system to reconfigure a user's access network to provide varying quality of service (QOS) based on flow identification. For example, a policy server (PS) may transmit a plurality of addresses of virtual private network (VPN) servers associated with a priority status to a cable modem (CM) and / or cable modem termination system (CMTS) associated with a client device. The CMTS may notify the PS when the CM and / or CMTS detects VPN traffic between the client device and a VPN server associated with the priority status. In response to the notification, the PS may transmit an update message to the CMTS, wherein the update message comprises an updated configuration. The updated configuration may be used to update the CM and / or CMTS so that the updated CM and / or CMTS process future data packets according to an updated QoS policy.

The invention discloses an electric power production data private network security situation awareness system and method. The method comprises the following steps: 1) acquiring security data of an electric power production data private network in real time; 2) standardizing the acquired data; 3) constructing a power grid entity relation graph, and fusing the standardized data obtained in the step 2) into the graph; 4) constructing an attack graph, and associating the attack graph with the power grid equipment entity relationship graph; 5) combining the power grid entity relation graph with the attack graph, performing deep correlation analysis, and identifying potential attacks in the power grid; 6) generating a grade risk alarm according to an identification result in the step 5), and triggering corresponding countermeasures; and 7) simulating the defense measures in the step 6), and optimizing and adjusting the defense countermeasures according to a feedback result. According to the method, the multi-source data is combined with the dynamic knowledge graph technology, real-time correlation analysis of the power grid entity relationship and the attack behavior is supported, and the recognition capability of novel attacks is remarkably improved.

The present invention relates to the technical field of digital twin, and in particular to a private network park digital twin visualization method, apparatus and device, and a computer storage medium. Disclosed in the present application is a private network park digital twin visualization method, comprising: using a clustering algorithm to classify ground objects in a remote sensing image of a park, dividing grids on the basis of formed pixel clusters, and calculating dilution ratios thereof; mapping grid data and point cloud data into a unified coordinate system, and using the clustering algorithm to cluster the point cloud data in each grid; sampling each point cloud cluster on the basis of the dilution ratio of the corresponding grid, and finding out non-edge points by means of a BoundED algorithm; on the basis of the proportion of the non-edge points in each point cloud cluster, calculating an initial dilution threshold of each point cloud cluster; and, after each point cloud cluster has been diluted, rendering and presenting same by means of a three-dimensional rendering engine and returning a rendering frame number and, if the rendering frame number meets a preset condition, ending the process.

The invention provides a 5G air-to-ground network communication system, method and device based on a flight test. The 5G air-to-ground network communication system comprises an airborne terminal subsystem and a ground terminal subsystem. The airborne terminal subsystem comprises an airborne data processing unit for establishing a flight associated subject parameter file according to the received flight mission reservation information and acquiring flight mission parameters according to the flight associated subject parameter file; the 5G terminal is used for sending an access request to the test flight private network and sending flight task parameters to the test flight data management platform; and the airborne 5G antenna is used for sending the flight task parameters to the test flight data management platform. The ground terminal subsystem comprises a test flight private network for receiving the access request and establishing an air-ground network communication link; the air-ground network management and control platform is used for sending indication information to the test flight data management platform; and the test flight data management platform is used for sending flight task reservation information to the airborne data processing unit according to the received indication information and receiving flight task parameters. According to the invention, the obtaining timeliness of the flight mission parameters can be improved.

The invention discloses a data private network state reasoning method based on an electric power production knowledge graph. The method comprises the following steps: 1) constructing the electric power production knowledge graph; 2) data acquisition; collecting operation state monitoring data of equipment from entity equipment of various power system components through a standardized interface, wherein the operation state monitoring data comprises the state, load data and environment data of the power system components; 3) associating the collected equipment operation state monitoring data with the knowledge graph through a data private network, and updating the power production knowledge graph based on the data collected in real time; and 4) analyzing the current state of the power system by adopting an inference engine, and predicting a potential fault. According to the method, the power production knowledge graph is constructed and data private network state reasoning is performed based on the power production knowledge graph, so that the operation and maintenance efficiency of the power system and the accuracy of fault diagnosis are remarkably improved.

The invention provides a hyperspectral snapshot compression imaging method and system based on a space-spectrum prior decoupling model, high-quality reconstruction is realized through decoupling optimization and a deep expansion network, and the method comprises the following steps: constructing a training data set containing a compression measurement image and a corresponding reconstruction spectrum; establishing an objective function fusing space and spectrum prior, converting the objective function into constrained optimization, and converting the constrained optimization into three sub-problems of linear reconstruction, space prior and spectrum prior by adopting a semi-quadratic splitting method; a deep expansion network is designed to alternately solve sub-problems: a linear sub-problem is solved through analysis, and a space / spectrum sub-problem is subjected to implicit prior modeling through a private network, so that end-to-end reconstruction is realized; a mixed loss function is adopted to optimize model parameters, and images can be reconstructed in real time after training is completed. Space and spectrum prior decoupling is carried out, space structure details and spectrum features are respectively captured through an independent network architecture, the problem of mutual interference of joint modeling in a traditional method is solved, and high-quality spectrum image reconstruction is realized.

In general, this disclosure describes techniques for leveraging a containerized routing protocol process to implement virtual private networks using routing protocols. In an example, a system comprises a container orchestration system for a cluster of computing devices, the cluster of computing devices including a computing device, wherein the container orchestration system is configured to: deploy a containerized application to a compute node; and in response to deploying the containerized application to the compute node, configure in the compute node a virtual routing and forwarding (VRF) instance to implement a virtual private network (VPN) for the containerized application.

The invention provides a computing power resource management and distribution method and system and a medium. The method comprises the following steps: integrating various computing power resources in a private network, establishing a computing power resource information base, analyzing a computing power resource request, establishing a service demand model, optimizing and matching a computing power resource configuration template, obtaining a computing power adaptation template, and establishing a service demand model; optimal computing power resource adaptation is carried out according to dynamic information of target computing power resources matched with the computing power adaptation template, isolation processing is carried out at the same time, monitored performance index data are processed, a load trend is predicted, a corresponding computing power resource adjustment strategy is obtained, and the computing power resources are optimized and expanded according to big data analysis; therefore, efficient utilization and elastic expansion of the computing power resources of the private network are realized by constructing the dynamic computing power resource pool and the resource scheduling model and monitoring, adjusting and optimizing an expansion mechanism, and the processing efficiency and security of big data services are remarkably improved.

The invention provides a roaming place dynamic signing method, device and equipment under a 5G network and a medium, and relates to the technical field of communication. The method comprises: acquiring a target data network identifier, the target data network identifier being issued by an access and mobility management function network element after a user equipment initiates a session request to the access and mobility management function network element in a core network, the user equipment completes private network service signing in the roaming place and is located in a private network service area of the roaming place; determining a private network distribution rule matched with the target data network identifier; and issuing the private network offloading rule to a user plane function network element in the core network, the private network offloading rule being used for the user plane function network element to establish an offloading session with the user equipment, and the offloading session being used for the user equipment to access a private network provided by the private network service in the private network service area. According to the method and the device, the problem that foreign users cannot conveniently access private network services provided in a private network area range of a visited place can be solved.

A system and method for providing file scanning between a client device and a resource through a zero trust network environment (ZTNE) are disclosed. The method includes detecting in network traffic between the client device and the ZTNE a request to receive a first content from a resource deployed in a private network, wherein the resource is accessible to the user device making first request through the ZTNE; detecting in network traffic between the client device and the ZTNE a second request to send a second content from the client device to a public network, wherein the public network is accessible to the user device making the second request through the ZTNE; sending the request to the public network, in response to determining that the second content is allowable; and blocking the request to the public network, in response to determining that the second content is not allowable network traffic.

The invention relates to the technical field of aerospace, in particular to low-altitude traffic flow airspace-oriented real-time planning, and provides a centimeter-level precision detection network covering a low-altitude airspace by integrating multi-dimensional data sources such as radar electromagnetic feature recognition, ADS-B (Automatic Dependent Surveillance-Broadcast) automatic monitoring, Beidou or GPS (Global Positioning System) space-time reference positioning and the like. The three-dimensional trajectory and motion situation of the aircraft are solved in real time, intelligent reconstruction of an airspace sector and adaptive optimization of a flight corridor are realized by adopting a dynamic programming algorithm driven by reinforcement learning based on the real-time pose data of the aircraft, and a flight conflict prediction model constructed by combining a space-time convolutional neural network is used for predicting the flight conflict. According to the method, potential risks can be pre-judged, an optimal avoidance path can be generated, full-process digital management and control from identity verification to airspace authorization can be realized by constructing an aircraft digital identity authentication system and a dynamic access control mechanism, and modules such as a three-dimensional navigation information service module, a low-altitude digital communication private network module and an intelligent early warning and warning system module are integrated. And the guarantee of full-life-cycle service is provided for the low-altitude aircraft.

The invention discloses a private network dynamic access control method and system, and relates to the technical field of network security and access control. The method comprises the following steps: acquiring equipment behavior data and network flow data in a private network, performing feature construction, and generating equipment trust features and network behavior features; and carrying out multi-dimensional risk assessment model training based on the equipment trust features and the network behavior features, carrying out real-time risk assessment on access requests or entities in the private network through the trained multi-dimensional risk assessment model, and generating a real-time risk score through a weighted aggregation function. According to the invention, through the multi-modal feature fusion model based on an attention mechanism, deep association of static attributes and dynamic behavior features of equipment is realized, and a real-time risk score is generated in combination with a multi-dimensional risk assessment model and a weighted aggregation algorithm. The limitation that in traditional access control, the evaluation dimension is single, the static strategy lags behind, and dynamic threats cannot be reflected is effectively overcome, and the accuracy and interpretability of private network access risk perception are remarkably improved.

The present invention discloses system and method for adaptive deception orchestration is disclosed. The system comprises a dummy asset generation module configured for generating dummy assets upon receipt of defined organizational data from an organization server, a dockerized container creation module configured for generating a plurality of virtual system groups, a virtual private machine client-server communication module configured for establishing a plurality of virtual private networks (VPN) in the plurality of virtual system groups, to provide a secure communication channel, a cyber-attack path orchestration module configured for orchestrating one or more cyber-attack scenario based on a plurality of historical behavioural patterns, an adaptive camouflaging module operatively configured for transferring system logs at a predetermined time interval by masking a chatting application and an intelligence accumulation module operatively connected to the adaptive camouflaging module configured for generating an attack pattern based on the analysis of the system logs.

Systems, methods, and computer-readable storage media of configuring digital currency nodes utilizing a one-tier model or two-tier model. One method includes transmitting, via an application provider system, an installation request including authentication information, downloading, by the user device, a digital wallet application, and installing, by the user device, the digital wallet application based on one or more system requirements, wherein installing includes verifying the user device meets the one or more system requirements, generating a public and private key pair, hardening the user device, storing and configuring the digital wallet application, and authenticating the digital wallet application. The method further includes establishing, via a private network, a private network connection associated with digital currency issuance. Another method includes transmitting a registration request, receiving a software package including a software appliance and executable code, installing the software appliance and establishing a private network connection associated with digital currency issuance.

The invention belongs to the technical field of wind power generation, and discloses a wind power plant digital twin modeling system and a use method, the system comprises an equipment module, the equipment module comprises a biological bionic adaptive fan blade system, a quantum sensing network, a laser radar system, a high-resolution multi-modal imaging system and an intelligent autonomous flying robot group system; the network module comprises a 5G private network, a quantum communication network and an edge computing network; the data module comprises a distributed database system, a big data processing platform and an AI training platform; the AI module comprises a wind regime prediction model, a power prediction model, an equipment health state monitoring model and a self-adaptive control algorithm model; the application module comprises a digital twinborn visualization platform, a holographic mixed reality operation and maintenance system and an intelligent scheduling system. Modeling and intelligent management of the wind power plant can be realized, the power generation efficiency can be improved, the operation and maintenance cost can be reduced, and the service life of equipment can be prolonged.

The invention discloses an integrated airport foreign object detection system and method, and the system comprises a multi-source data collection module which is combined with a self-adaptive triggering mechanism, and dynamically adjusts the working mode of a sensor according to a flight timetable and meteorological data; the edge calculation processing module is used for extracting a foreign object candidate region by adopting a multi-modal data fusion technology, carrying out confidence coefficient weighted decision based on a D-S evidence theory and outputting accurate position and size information of a foreign object; the automatic submission module is used for establishing a grading alarm mechanism, pushing high-risk foreign objects to a control tower terminal in real time through a 5G / wireless private network, and synchronously generating an encrypted standardized report; and the intelligent analysis platform predicts a foreign object high-incidence area by using an LSTM time sequence model, traces foreign object causes in combination with a knowledge graph technology, and provides management decision support through a visual interface. According to the invention, full-process optimization is realized through a closed-loop architecture of multi-source data acquisition, edge calculation processing, automatic submission and intelligent analysis.

The invention discloses a channel negotiation method and device based on relay proxy and a storage medium, and relates to the technical field of telecommunication, and the method comprises the steps: requesting a relay server to obtain a relay proxy address, packaging the relay proxy address into a candidate address of a session description protocol, and sending the candidate address to a called terminal through the relay server, analyzing a private network address in response information fed back by the called terminal, initiating a binding request to the private network address of the called terminal, and if the binding request does not establish connection with the called terminal, sending a penetration request to a specified port of the relay server, and establishing a bidirectional network address channel with the called terminal through the penetration request forwarded by the relay server and a binding request initiated by the called terminal to the relay proxy address. According to the invention, the channel between the calling end and the called end is established through the relay proxy address of the relay server and the penetration request, so that the flexibility of media stream transmission is improved.