1021 results about "Private network" patented technology

The invention relates to the technical field of aerospace, in particular to low-altitude traffic flow airspace-oriented real-time planning, and provides a centimeter-level precision detection network covering a low-altitude airspace by integrating multi-dimensional data sources such as radar electromagnetic feature recognition, ADS-B (Automatic Dependent Surveillance-Broadcast) automatic monitoring, Beidou or GPS (Global Positioning System) space-time reference positioning and the like. The three-dimensional trajectory and motion situation of the aircraft are solved in real time, intelligent reconstruction of an airspace sector and adaptive optimization of a flight corridor are realized by adopting a dynamic programming algorithm driven by reinforcement learning based on the real-time pose data of the aircraft, and a flight conflict prediction model constructed by combining a space-time convolutional neural network is used for predicting the flight conflict. According to the method, potential risks can be pre-judged, an optimal avoidance path can be generated, full-process digital management and control from identity verification to airspace authorization can be realized by constructing an aircraft digital identity authentication system and a dynamic access control mechanism, and modules such as a three-dimensional navigation information service module, a low-altitude digital communication private network module and an intelligent early warning and warning system module are integrated. And the guarantee of full-life-cycle service is provided for the low-altitude aircraft.

The invention discloses a private network dynamic access control method and system, and relates to the technical field of network security and access control. The method comprises the following steps: acquiring equipment behavior data and network flow data in a private network, performing feature construction, and generating equipment trust features and network behavior features; and carrying out multi-dimensional risk assessment model training based on the equipment trust features and the network behavior features, carrying out real-time risk assessment on access requests or entities in the private network through the trained multi-dimensional risk assessment model, and generating a real-time risk score through a weighted aggregation function. According to the invention, through the multi-modal feature fusion model based on an attention mechanism, deep association of static attributes and dynamic behavior features of equipment is realized, and a real-time risk score is generated in combination with a multi-dimensional risk assessment model and a weighted aggregation algorithm. The limitation that in traditional access control, the evaluation dimension is single, the static strategy lags behind, and dynamic threats cannot be reflected is effectively overcome, and the accuracy and interpretability of private network access risk perception are remarkably improved.

Methods, apparatus, systems, and articles of manufacture are disclosed for device authentication in a dedicated private network. An example apparatus includes interface circuitry, machine readable instructions, and programmable circuitry to utilize the machine readable instructions to generate first credentials associated with a first network based on second credentials associated with a second network, the first credentials including first location data corresponding to a dedicated private network (DPN), cause a mobile device to program a programmable subscriber identity module (SIM) of the mobile device based on the first credentials, and permit the mobile device to access the DPN based on a determination that second location data corresponding to the mobile device and included with the programmable SIM corresponds to the first location data.

A control unit (130) of a control apparatus (10) acquires a position of a first communication device (40A) and first quality information about a plurality of links. The first communication device (40A) is positioned in a first site in which a first base station (20A1) for a first private network is arranged, and is connectable to the plurality of links including the first private network. The control unit (130) acquires a position of a second communication device (40B) and second quality information about the plurality of links. The second communication device (40B) is positioned in a second site in which a second base station (20B1) for a second private network is arranged, and is connectable to the plurality of links including the second private network. The control unit (130) acquires first and second communication information about the first and second communication devices (40A and 40B). The control unit (130) uses the first and second communication information and first and second quality information to determine a communication route satisfying a desired quality between the first and second communication devices (40A and 40B), and gives notice of route information.

The invention relates to the technical field of coal mine telecommunication, and discloses a coal mine underground integrated private network coverage system based on a 5G communication and AR double-transmitting selective-receiving technology, an efficient transmission and baseband processing network is constructed by taking a macro base station as a core on the ground and matching with PTN equipment and a BBU, a 5G micro base station and an RRU are deployed under the ground for a complex environment, and low-loss signal coverage is realized through optical fibers. The AR double-transmitting selective-receiving module ensures that underground data are not lost and have no error through redundant coding and double-link transmission; the edge computing module sinks data processing to the underground, reduces transmission delay and optimizes resource allocation; and the system monitoring and interference suppression unit monitors the operation state in real time, performs multi-stage alarm and resists multipath effect and electromagnetic interference, and finally realizes integration of communication above and under the well, reliability of data transmission, high efficiency of resource utilization and stability of system operation, thereby providing solid communication support for safety production, equipment management and control and personnel scheduling under the coal mine.

The invention belongs to the technical field of ship management, and provides a combined intelligent ship water diversion system integrating differential positioning, a laser radar and a camera. In the shore end RTK-inertial navigation depth fusion positioning module, extended Kalman filtering fusion is carried out on data acquired by shipborne equipment, so that continuity of accurate positioning is realized; the construction of a color high-precision map is realized through a laser radar-monocular vision color high-precision modeling module, details such as wharf fender materials and signboard characters can be better distinguished, and the problem of shoreline modeling defects is solved; visualization of obstacles is achieved through the multi-scene dynamic obstacle detection and fusion module, meanwhile, through cooperation of multi-source data, the precision and stability of ship positioning are greatly improved, higher precision and reliability are achieved, and the precision of a guide instruction is improved; through cooperation of the 5G private network and the visualization module, the data transmission efficiency is improved, the timeliness is improved, and transmission delay can be avoided.

The invention discloses a private network content copyright monitoring and evidence obtaining system based on AI and a large model, which utilizes AI and large model technologies to carry out copyright monitoring and evidence obtaining on multimedia content in a private network environment, and carries out deep semantic understanding and cross-modal feature extraction through a large model processor to generate unified semantic representation. The method comprises the steps that a copyright content database is established and stored in a copyright content knowledge base, the copyright content knowledge base is used for storing metadata of original content protected by copyright, unified semantic representation and copyright declarations in a natural language form provided by a copyright party, and the copyright declarations are converted into query vectors through a semantic understanding technology; the method comprises the following steps: acquiring a semantic representation of a multimedia content, performing similarity calculation with the semantic representation of the multimedia content, identifying infringement content, when the infringement content is identified, recording an original source, publishing time and publisher information of the infringement content, performing differentiation analysis, generating an evidence chain, displaying a copyright monitoring result through a user interface, generating infringement alarm information, and presenting details of the evidence chain.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

A core network server for defining authentication credentials and authenticating a wireless communication device according to WIFI communication protocols includes a central processing unit (CPU) and a non-transitory memory comprising executable instructions that when executed by the CPU, causes the core network server to receive an encrypted authentication request from a wireless communication device; send the encrypted authentication request to an authentication server based on one or more attributes in the encrypted authentication request; receive an indicator of a specialized network slice associated with the wireless communication device based on sending the encrypted authentication request; communicate authentication messages to the wireless communication device according to one or more network functions of the specialized network slice; and authenticate the wireless communication device according to the specialized network slice responsive to communicating the authentication messages.

The invention relates to the technical field of humanoid robot control. The invention provides a humanoid robot bilateral force feedback teleoperation method of a force compensation mechanism. According to the method, a 5G private network is used for deployment, the characteristics of low delay, high reliability and large bandwidth of the 5G private network are utilized, real-time interaction of high-dimensional haptic data in a remote and cross-domain environment is effectively supported, cross-domain teleoperation can be achieved, high-fidelity feedback transmission of environment contact force is effectively achieved, and the real-time interaction of the high-dimensional haptic data in the remote and cross-domain environment is achieved. The precision, the operation efficiency and the overall safety of remote operation of the humanoid robot in complex industrial scenes such as nuclear power maintenance, precise assembly and high-risk environment operation are remarkably improved, the gap between traditional automation and low-efficiency remote operation is filled up, and reliable technical support is provided for advanced industrial application needing man-machine cooperation fine force control.

Disclosed are various embodiments that extend customer premises networks onto a cloud provider network. In one embodiment, a layer-3 virtual private network is established between a tunneling agent and a virtual private network server on a cloud provider network. The tunneling agent is executed on an edge customer premises equipment (CPE) device on a customer premises network. A layer-2 virtual interface is established for an edge application on the cloud provider network using a tunnel to encapsulate layer-2 traffic between the customer premises network and the edge application over the layer-3 virtual private network.

The present application relates to the technical field of metal plastic forming, and discloses a titanium alloy radial forging reduction rate collaborative optimization method based on material testing, which acquires dynamic characteristic data of a forging process in real time through multi-dimensional material performance parameter collection, constructs a multi-objective collaborative optimization model, and realizes intelligent collaborative configuration of the reduction rate parameter by using an adaptive weight distribution strategy. A thermal coupling factor normalization equation and a phase field free energy functional normalization model are established to solve the technical problems of uneven structure and excessive residual stress caused by the empirical configuration of the reduction rate parameter in the traditional forging process. A lightweight model is deployed through an edge computing node, and millisecond-level dynamic correction of the optimization scheme is realized in combination with a 5G industrial private network, thereby improving the grain size qualification rate and size accuracy of titanium alloy forgings. The present application improves the grain size qualification rate of forgings, ensures stable control of the size accuracy while reducing the residual stress of forgings, and improves the batch stability of high-end titanium alloy components.

Techniques are described for routing traffic through an interconnect cloud gateway based on cloud traffic routing indicators. The interconnect cloud gateway can advertise the cloud traffic routing indicators, which can include cloud indicators and transport gateway indicators. The cloud indicators can include cloud tags utilized to route cloud traffic. The transport gateway indicators can include transport gateway flags utilized to identify private networks utilized to route the cloud traffic. The cloud traffic can routed during normal private network operation through private networks, which can be dynamically replaced by public networks due to occurrences of failures preventing the data traffic from being routed through the private networks and to cloud networks.

The invention relates to the technical field of network security, in particular to a management method and system for customizing private network asset fingerprints, and the method comprises the following steps: based on a network access event, analyzing a behavior track and a historical mode, recognizing an abnormal activity path, judging an abnormal relation between an asset authority group and an access action, screening risk assets, and checking the authority level. And adjusting the fingerprint authority, analyzing the security event aggregation condition, identifying the failure state, and analyzing and detecting the fingerprint behavior deviation rate through the operation time sequence. According to the method, by analyzing multi-dimensional changes of network access behaviors, identifying path offset and traffic abnormity and combining time sequence association of permission allocation and access actions, comprehensive study and judgment are conducted on operation risks and permission matching conditions, fingerprint permission categories are dynamically adjusted, and further, through aggregation analysis of security events and operation time sequences, the security events and the operation time sequences are analyzed. The abnormal state of the fingerprint is identified in real time, and behavior consistency verification in the asset fingerprint using process is achieved.

A system for controlling access to cryptographic resources is disclosed. The system may receive a request to transfer cryptographic resources between users, including a user identifier and a first cryptographic signature. The system may verify the signature and retrieve an encrypted private key from a key vault using the user identifier. A command to sign the request may be transmitted over a private network to a signature device, which may generate a second cryptographic signature using the decrypted private key. The system may receive the second signature, generate a blockchain operation based on the request and signature, and transmit the operation to a blockchain node for commitment. The system may also handle new account generation, storing encrypted keys in jurisdiction-specific databases, and validating blockchain operations against request parameters.

A distributed cloud computing system is disclosed that includes a controller configured to deploy network constructs including any of transit gateways, spoke gateways, subnets, or private networks and logic that, upon execution by one or more processors, causes performance of operations including: causing rendering of a graphical user interface that includes a display panel configured to display progress of a build process for a network topology graph, receiving first user input through the graphical user interface indicating selection of a first cloud service provider, a first access account, and a first cloud region, receiving second user input through the graphical user interface indicating selection of one or more of the network constructs to be deployed in the first cloud region, instructing the controller to deploy the one or more of the network constructs in the first cloud region according to the first user input and the second user input.

Techniques for leveraging the MASQUE protocol to provide remote clients with full application access to private enterprise resources are described herein. One or more network nodes may be configured to execute a MASQUE proxy service to provide a remote client device with full access to an enterprise / private application resource executing on an application node and hosted in an enterprise / application network, behind the MASQUE proxy service. In some examples, the MASQUE proxy service may execute on a single proxy node hosted at an edge of a cloud network or at an edge of an enterprise network. Additionally, or alternatively, a first instance of the MASQUE proxy service may execute on a first proxy node hosted at an edge of a cloud network (e.g., an ingress proxy node) and a second instance of the MASQUE proxy service may execute on a second proxy node hosted at an edge of the enterprise network.

A method of operating a network device is provided. The method can include detecting a first host device that is communicatively coupled to a first interface or port of the network device, identifying a first host profile identifier corresponding to a first class of devices to which the first host device belongs, and advertising, to one or more additional network devices, network reachability or routing information for the first host device. The network reachability information can include at least the first host profile identifier associated with the first host device and a first sequence number. The first sequence number may indicate a number of mobility or roaming events taken by the first host device.

Containerized orchestration of secure socket layer virtual private network benchmarking is disclosed. A test portal can accommodate developing test event information (TEI) based on test input information. Test input information can be used to generate event images, e.g., containers, that can be readily scaled, mutated, etc., via a containerization environment instance. One or more event image can be groups into a pod. An event image can be a new container, a previously used container, or a permutation of a container. Event image(s) can be retrieved from external sources, e.g., a library, a commercial vendor of event images, etc. TEI can be based on a pod(s) and communicated to a device-under-test (DUT). DUT performance can be measured, and results can be accessed by an entity, e.g., a test engineer, a results analysis engine, etc. Results can be employed to direct subsequent DUT testing.

The invention discloses a bridge health monitoring system which comprises a sensing layer, a transmission layer, a processing layer and an application layer which are in communication connection in sequence. The sensing layer synchronously collects structural mechanics, environmental influence and traffic load data through multi-source heterogeneous sensing nodes, and the sensing nodes adopt a solar energy and vibration energy double-source energy supply and low-power-consumption mechanism; the transmission layer adopts a'wireless private network + edge gateway 'mixed mode, and has data caching and breakpoint resuming functions; the processing layer analyzes data through a deep learning fusion algorithm based on an attention mechanism, and realizes dynamic early warning threshold adaptive adjustment in combination with a Bayesian reasoning model; and the application layer provides a visual interface, graded early warning and targeted maintenance decision suggestions. The system achieves the precise monitoring of the full life cycle of the bridge, improves the evaluation accuracy and system stability, reduces the operation and maintenance cost, provides scientific support for the safe operation and maintenance of the bridge, is suitable for the health monitoring scenes of various bridge types, and greatly improves the accuracy of the evaluation of the health state of the bridge.

The invention discloses a 5G industrial gateway rapid networking method and system, and the method comprises the steps: building a routing protocol neighbor relation between an industrial gateway and a server module and a core network module, and synchronizing a link state database; and respectively executing a shortest path priority algorithm on the three nodes, and calculating respective shortest paths to other nodes according to the link state database so as to generate respective optimal IP routing tables. When the industrial gateway receives a first data packet, the industrial gateway forwards the first data packet to a core network module through a base station and a private network bearer network according to an internal optimal IP routing table and a target IP address in the first data packet; and the core network module forwards the first data packet to the data network module according to the optimal IP routing table and the target IP address in the core network module. According to the invention, link state databases of the industrial gateway, the server module and the core network module are synchronized through a routing protocol, so that each device masters the topological structure of the whole network, and dynamic addressing of the industrial network is effectively supported.

The invention discloses a resource allocation and configuration method and device and electronic equipment. The method comprises the following steps: converting network resources in a private network into programmable objects, and constructing a resource label model according to attribute information of the programmable objects and the network resources; receiving service demand information, extracting a service intention in the service demand information, and converting the service intention into a standardized intermediate instruction; generating a resource allocation scheme according to the standardized intermediate instruction and the network resource use state information, and evaluating the resource allocation scheme in a digital twin environment of the private network; and under the condition that the evaluation result of the resource allocation scheme in the digital twin environment meets a preset requirement, converting the resource allocation scheme into a control instruction, and sending the control instruction to the network resource. The technical problems of low network resource allocation efficiency and slow service response speed caused by non-uniform resource description and high service demand analysis difficulty in a multi-manufacturer heterogeneous network environment are solved.

This invention provides methods and systems for seamless mobile connectivity between public and private cellular networks. The system dynamically switches user devices between networks based on location, radio signal availability, or preconfigured policies that prioritize private networks when within range. For devices with physical SIM cards, an embedded applet enables switching between operator profiles, while ESIM profiles deploy applets for selecting among multiple identities within a profile. All cellular traffic, whether on public or private networks, is routed through a cloud-based system for centralized security and policy enforcement. Network selection may be influenced by defining the private network as the Home Public Land Mobile Network (HPLMN) or scanning available networks via applet capabilities. The system supports unified subscription, connectivity, and service management via a cloud-based portal, ensuring reliability and security across diverse network environments. This approach enhances mobility, security, and flexibility for enterprise and IoT applications.

The invention discloses an AI-based private network abnormal risk traffic multi-modal detection method and system, relates to the technical field of network security, and is used for solving the problem that compound attacks which are high in concealment and have service context association are difficult to effectively identify in a private network. The method comprises the following steps: firstly, injecting business semantics for flow analysis through multi-modal data acquisition and business intention marking; then, by adopting a mode of combining session boundary stability analysis and protocol compliance verification, detecting anomalies from two dimensions of microscopic protocol operation and macroscopic behavior trend respectively, and generating risk events of different levels; finally, an attack chain judgment mechanism is constructed through time sequence correlation analysis, a front-end detection strategy is dynamically optimized based on a judgment result, a closed-loop detection system from data collection to threat response is formed, and the detection accuracy of advanced threats in the private network environment and the self-adaptive capacity of the system are effectively improved.

Devices, systems, methods, and processes for fabric congestion management are described herein. At each ingress switch, virtual output (“VO”) queues are created for egress ports based on identifiers, state indicators, and encapsulation values of the egress ports received via an Ethernet Virtual Private Network (“EVPN”) control plane. When a data packet is received at the ingress switch, an egress port for the data packet is determined, an identifier and an encapsulation value of the egress port are added to the data packet, and the data packet is stored in a corresponding VO queue. The data packet remains at the ingress switch until an egress switch is available. At the egress switch, one or more tags are added in the data packet based on the encapsulation value, whereas the destination egress port is identified based on the identifier. Thus, a quick egress through the egress switch is achieved.

Disclosed are various embodiments relating to remotely connecting to customer premises networks to access cloud-executed edge applications. In one embodiment, a layer-3 virtual private network is established between a cloud provider network and a customer premises network of a customer. A layer-2 virtual interface is established for an edge application executed on the cloud provider network using a tunnel to encapsulate layer-2 traffic over the layer-3 virtual private network. A client device outside of the cloud provider network is connected to the customer premises network via the layer-3 virtual private network.

The invention discloses a legal knowledge graph construction method and a matched device and system, and belongs to the technical field of legal sciences, the legal knowledge graph construction method comprises the following specific steps: step 1, multi-source data acquisition: acquiring multi-source data through a judicial private network security interface; and synchronously obtaining heterogeneous data of the legal provision database, the judgment document database and the law literature database. According to the method, the legal element recognition accuracy is remarkably improved by adopting the adversarial training triple extractor, the problem of regional judgment expression difference is effectively solved, the knowledge graph updating period is shortened to be within 24 hours based on a conflict resolution mechanism of authority and aging attenuation, the method adapts to legal revision and judicial interpretation change, and the method is high in practicability and easy to popularize. The FPGA hardware acceleration device realizes high concurrent processing, a built-in legal rule base automatically detects logic contradictions such as criminal responsibility age conflicts and the like, the error conduction risk is reduced, and authoritative technical support is provided for judicial decision making.

The invention discloses an AI large model-oriented financial private network optimization method and system, and relates to the technical field of communication networks. According to the method, an exclusive path strategy is generated for AI training, reasoning and sensitive data traffic by collecting AI service requirements and network states and utilizing the SID programming capability of SRv6; the load of the computing power node is monitored in real time, the computing power state is linked with network scheduling, and network-computing power collaborative optimization is realized; a hop-by-hop path authentication mechanism based on a dynamic authentication segment identifier Auth-SID is introduced, so that the security of a data transmission path is enhanced; and end-to-end visual operation and maintenance and closed-loop feedback of the service flow are realized by adopting a flow-following detection technology. According to the invention, the problems of mismatching of flow scheduling and AI service requirements, insufficient network and computing power collaboration, lack of path security guarantee and weak operation and maintenance visualization capability in the prior art are solved, deep adaptation of network resources and the AI service requirements is realized, and the computing power collaboration efficiency, the path security and the operation and maintenance intelligence level are improved.

The invention discloses a data center equipment health state evaluation method and system based on an out-of-band technology, and relates to the technical field of equipment health monitoring. The server is used for cross-manufacturer equipment health management and control and adapts to a multi-hardware platform; an independent out-of-band private network is built, an equipment management port is connected, hardware assets, operation states and environment energy consumption data are acquired, and agency is not needed; a component-equipment-cluster three-level index system is adopted, and a dynamic threshold value is set in combination with the equipment duration and the fault history; comparing with historical deviation two-dimensional evaluation, and generating a health score; third-level alarming and fault positioning are carried out, and emergency alarming is responded within one minute; and the data is visually presented, the data is stored by using Redis and MySQL, and report export is supported. The problems that traditional in-band management depends on a service network, evaluation is one-sided and alarm is disordered are solved, an out-band private network guarantees independent and safe management and control, multi-dimensional evaluation accurately reflects equipment health, graded alarm and remote linkage improve operation and maintenance efficiency, cross-manufacturer equipment is adapted, and intelligent operation and maintenance of a data center are assisted.

Two electronic devices attempt to communicate and exchange Internet Protocol (IP) packets over a cellular communication network, and at least one of the two devices is behind a symmetric Network Address Translation (NAT) service. At least one of the two devices executes a Session Traversal Utilities for NAT (STUN) protocol, which provides to that device a pair of external IP address and port of that device; which that device then informs to a Message Broker Unit that is accessible to both devices via the public Internet. The Message Broker Unit provides the external IP address and port of that device, to the other device; which then connects to a Virtual Private Network (VPN) server and sends to the first device one or more User Datagram Protocol (UDP) packets that penetrate or puncture the NAT service in an application-agnostic manner.