164 results about "Protection system" patented technology

The invention discloses a firmware-level security protection system and method for a hard disk of industrial automation equipment, particularly relates to the technical field of storage security protection, and is used for solving the problem of abnormal tampering of firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence library, firmware-level judgment on operation abnormity, access border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to closed loop recovery by combining protected segment integrity verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the operation safety and the maintainability of the firmware are integrally improved.

The invention relates to the technical field of data security of the Internet of Things, in particular to an edge data security protection system and method based on a security chip, and the system comprises edge equipment which is deployed at the edge of a network and is used for detecting or collecting original data; the security chip is embedded in or externally connected to the edge equipment, and an encryption engine and a security storage area are integrated in the security chip; the encryption engine is integrated with an encryption algorithm, and a secret key is stored in the secure storage area; the security agent software runs on a control system of the edge equipment and is in communication connection with the security chip, and the security agent software is configured with a security policy; wherein the security agent software is configured to receive original data, call an encryption engine of the security chip according to a security policy to encrypt the original data, generate protected data, and send the protected data to a cloud or a data center; or the original data is monitored, and safety measures are taken for the original data with risks.

The invention belongs to the field of industrial control and computer data security, and particularly relates to a millisecond-level power failure data protection system for an industrial control panel. The invention discloses a millisecond power failure data protection system for an industrial control panel. The millisecond power failure data protection system comprises a core processing component, a real-time synchronous shadow memory component, a bus voltage monitoring component, a pre-entropy reduction logic control component, a nonvolatile storage component and a flight control bus arbitration component. The bus voltage monitoring assembly monitors a voltage drop trend and performs early warning, the pre-entropy reduction logic control assembly calculates a minimum data survival set according to energy entropy, the real-time synchronous shadow memory assembly constructs a synchronous shadow control domain and atomizes data, and the flight control bus arbitration assembly compulsively takes over a bus and freezes processor access at the moment of power failure. Atomized writing of data into the nonvolatile storage component is guaranteed. According to the invention, zero-delay data protection and millisecond-level hot start recovery at the moment of power failure are realized, and the data security and reliability of the industrial control equipment in a severe environment are enhanced.

The invention relates to a system calling ptrace-based operating system micro-service security protection system and method, which are characterized in that the running state of micro-service is monitored in real time through calling of a ptrace system in a user state, and dynamic integrity verification is realized in combination with an SM3 hash algorithm. The method comprises the following steps: calculating an SM3 hash value of a code segment of a micro-service when the micro-service is started, storing the SM3 hash value as a static reference, periodically reading memory data of a target process through ptrace in a running process, recalculating a dynamic hash value, and comparing the dynamic hash value with a reference value; if it is detected that the hash values are inconsistent, it is judged that code injection attacks exist, and a defense mechanism is triggered. According to the method, the system stability risk caused by kernel module injection is avoided, meanwhile, real-time interception of tampering attacks during operation is achieved through high-frequency dynamic comparison, the lightweight design enables the method to be suitable for high-reliability scenes such as spaceflight with limited resources, the integrity of a micro-service code segment can be guaranteed, low performance loss of the system can be maintained, and the system reliability is improved. The balance blank between dynamic defense and system stability in the prior art is effectively filled.

The invention discloses a test control method and system for a direct-current power supply, and relates to the field of simulation testing, and the method comprises the steps: constructing a three-dimensional adaptive model to complete the matching calibration of system software and hardware, and achieving the load calibration through the comparison of dynamic load simulation and actual measurement data; in the testing process, a three-stage starting mechanism is adopted to power on step by step, fault protection is configured, and parameter scanning and real-time recording are executed according to a preset mode and a testing point; a double-closed-loop feedback mechanism is introduced, an inner loop adjusts output parameters, and an outer loop predicts power grid disturbance and performs advanced compensation; a safety threshold value is dynamically generated in combination with real-time environment data, linkage protection of approaching early warning and overrun protection is achieved, and a reliable effective data set is formed through fusion processing and double verification of multi-source test data. The system has the advantages that the precision and intelligence of the whole test process are realized through dynamic load simulation, a multi-level safety protection system is constructed through a three-level starting mechanism, and the precision, safety and data value of the test are comprehensively improved.

The invention discloses a data protection system for a PCIe (Peripheral Component Interconnect Express) switch. The data protection system comprises a CRC (Cyclic Redundancy Check) module, a data verification module and an error monitoring management module, wherein the CRC verification module is in communication connection with a non-transparent bridge port, and / or an upstream port, and / or a downstream port of the PCIe switch and is used for carrying out CRC verification on data received and sent by the ports, and the data verification module is in communication connection with an internal bus of the PCIe switch and is used for verifying a data packet transmitted on the internal bus and sending the verified data packet to the PCIe switch. And the error monitoring management module is in communication connection with the verification module, and is used for monitoring the data packets sent and received by the ports to identify illegal packets, recording the number and types of the illegal packets, and feeding back according to the types of the illegal packets. The data protection system can be used for a non-transparent bridge port and the like of a PCIe (Peripheral Component Interconnect Express) switch, performs data protection on the whole transmission process of a data stream, ensures the integrity of the data, and improves the reliability.

The invention provides a document transfer system in a credential environment and an operation method thereof, the system adopts a multi-storage medium unified adaptation and intelligent scheduling mechanism, can dynamically select an optimal storage rear end according to file characteristics through a storage strategy engine, and combines fragment uploading, breakpoint resuming and a second transmission technology based on mixed Hash, so that the file transfer efficiency is improved, and the file transfer efficiency is improved. And the processing efficiency of massive files, especially large files, and the utilization rate of system resources are greatly improved. A full-life-cycle data security protection system with the SM2 / SM4 cryptographic algorithm as the core is constructed, and the confidentiality, integrity and availability of data are comprehensively improved. By providing a standardized API interface and a deep association mechanism of files and service data, the integration cost of the multi-service system is greatly reduced. The integrated visual operation and maintenance monitoring system realizes real-time perception and intelligent alarm of system performance, storage states and business indexes, and obviously improves the autonomy level of operation and maintenance and the fault emergency response speed.

The invention relates to a federated learning-based commercial data protection system, and the system comprises a federated protection module which is used for obtaining multi-modal behavior feature vectors, forming encryption features, carrying out aggregation operation, forming an encryption view, constructing a relation graph, and carrying out federated risk scoring; the self-adaptive control module is used for selecting a group of response action candidate sets, performing cost-benefit simulation evaluation on candidate actions in the response action candidate sets, generating a response action sequence, issuing a control measure command, verifying whether risk misjudgment occurs or not, and feeding back a verification result to the federal protection module; and the compliance guarantee module is used for acquiring data, carrying out noise addition on the data, locally completing encryption, constructing a verifiable trust and audit chain, hiding technical operation to corresponding legal requirements and dynamically generating a compliance state report. According to the technical scheme, the technical problems that in the prior art, misjudgment and early warning are prone to occurring, effective blocking cannot be conducted before IP leakage occurs, and privacy regulation requirements are not met are solved.

The invention discloses an automobile frameless window protection system and method and a computer storage medium. The automobile frameless window protection system comprises a data acquisition subsystem, an automobile central calculation subsystem, an execution subsystem, an interaction subsystem and a power supply subsystem. Wherein the data acquisition subsystem, the execution subsystem, the interaction subsystem and the power supply subsystem are all in communication connection with the automobile central calculation subsystem; the data acquisition subsystem is configured to acquire data related to the protection of the frameless window of the automobile in real time; the automobile central calculation subsystem is configured to receive and fuse the data acquired by the data acquisition subsystem, and then perform logic judgment according to a preset protection strategy to generate a corresponding control instruction; the execution subsystem is configured to execute actions including automobile door speed reduction, automobile window lifting or door lock control after receiving a control instruction of the automobile central calculation subsystem; and the interaction subsystem is configured to remind a user after receiving the control instruction of the automobile central computing subsystem.

A storage system has zones in solid-state storage memory, with power loss protection. The system identifies portions of data for processes that utilize power loss protection. The system determines to activate or deactivate power loss protection for the portions of data for the processes. The system tracks activation and deactivation of power loss protection in zones in the solid-state storage memory, in accordance with the portions of data having power loss protection activated or deactivated.

A system for kernel protection includes a processor and a transmission interface. The processor is arranged to execute at least one guest virtual machine (VM), at least one primary VM, and a hypervisor. The at least one guest VM is arranged to send at least one command to a command hub. The at least one primary VM is arranged to manage and configure a safety setting according to the at least one command from the command hub and at least one policy, and manage and configure a safety protection component according to the safety setting. The hypervisor is arranged to manage and configure the safety protection component according to a ground rule and at least one safety setting command from the at least one primary VM. The transmission interface is arranged to bind the at least one primary VM to the hypervisor.

The present disclosure provides a method for deploying the software framework on the ML Platform in a secure manner. In particular, the present disclosure provides a method for securely deploying the ML models or the algorithms into the system by providing a multi-level scanning procedure. In an embodiment, the disclosed method performs multiple vulnerability scans on the ML model or the algorithm at multiple stages to check for malware and ensure that only models / algorithms that pass the security checks are imported into the system. If the security scan detects vulnerabilities at any stage then the files are placed in a quarantined zone and the import process is terminated. Thereby protecting the system and making it cyber-secure.

The invention discloses a full-link security processing method and device for service sensitive data. The method comprises the following steps: executing pre-encryption processing on the service sensitive data generated by a client side before the service sensitive data is sent to a server side; in the process of sending the service sensitive data generated by the client to the server, protecting the service sensitive data subjected to pre-encryption processing through a dual protection mechanism; the service sensitive data which are received by the server and protected by the dual protection mechanism are stored by adopting a differentiated storage strategy according to the use scene; and automatically filtering the stored service sensitive data during log output through a Nacos dynamic configuration sensitive field list. Through the method provided by the invention, the sensitive data is disassembled into four links, namely a client front encryption processing link, a dual protection link in a transmission process, a server storage protection link and a log output filtering link, a security protection system covering the whole life cycle of the service sensitive data is constructed, and unified management and control and dynamic adjustment of security strategies are realized.

In some examples, a cluster protection system comprises at least one processor and a memory storing instructions which, when executed by the at least one processor, cause the system to perform operations comprising identifying a target cluster or an object in a container management framework, identifying application data and metadata associated with the target cluster or the object, generating a first snapshot of the target cluster or the object, the first snapshot including at least the metadata, storing the first snapshot in offsite cloud storage, generating a second snapshot of the target cluster, the second snapshot including at least the application data, and storing the second snapshot in a persistent volume in onsite storage.

This invention discloses a multi-level network-type energy storage control and protection system and method, relating to the field of energy storage technology. The method includes: S1, performing feature modeling on the multi-source operating signals of the acquired energy storage system to construct a multi-source operating feature set; S2, performing time series rate of change analysis on the multi-source operating feature set to extract dynamic features of current direction change and power reversal; S3, performing energy disturbance amplitude analysis on the dynamic energy feature set to calculate an adaptive protection threshold set in real time; S4, comparing the real-time sampled signal with the adaptive protection threshold set to identify whether an over-limit state has been triggered; S5, when an over-limit state is detected to be triggered, extracting the real-time dynamic features of the over-limit event, matching the real-time dynamic features of the over-limit event with the energy backlash judgment model, determining the anomaly type of the over-limit event based on the matching result, and outputting a protection action command or dynamic balance control command corresponding to the anomaly type.

The application relates to an illegal debugging protection system in the technical field of computers, which comprises a kernel layer processing module, the kernel layer processing module is used for: monitoring a debugging behavior in real time through a hook function registered by a kernel layer to obtain debugging information; the debugging information comprises debugging process information, debugging behavior information and debugged process information; obtaining a pre-configured anti-debugging strategy for the debugged process according to the debugged process information, if the anti-debugging strategy is obtained, judging the legality of the debugging behavior by matching the debugging behavior information with the anti-debugging strategy; the anti-debugging strategy comprises a combination of at least one protection behavior, and the protection behavior comprises an inhibited debugging behavior; if the debugging behavior is illegal debugging, obtaining a pre-configured illegal debugging disposal strategy; if the pre-configured illegal debugging disposal strategy is obtained, executing the illegal debugging disposal strategy. The illegal debugging protection system provided by the application realizes the consideration of safety and convenience.

The invention discloses a full-link data security protection system and method based on a trusted root, and belongs to the technical field of information security. The link data transmission structure comprises a plurality of substructures, each substructure comprises an operating system, an application program, internal hardware and a transmission channel which are used as encryption objects, the encryption objects are encrypted, and the encryption content is as follows: setting a trusted platform module as a trusted root encryption tool; the operating system comprises an identity authentication password and authority management; the application program encryption comprises a login password and a hierarchical application lock; the internal hardware comprises data encryption of a BIOS, a hard disk and a memory; communication encryption measurement modules are arranged at the two ends of the transmission channel; by the adoption of the system and method, the trusted platform module (TPM) serves as a hardware trusted root, and the processes of operating system identity authentication and authority management, a system application program hierarchical encryption mechanism, a hardware layer data encryption module and transmission channel double-end encryption are achieved.

The invention belongs to the field of aviation airborne computers, and provides a multi-stage detection power-down data protection system and method based on an MCU (Microprogrammed Control Unit), which are used for protecting key health data generated by a main module when a main power supply of the system is powered down. The system comprises a to-be-tested power supply module, an MCU energy storage power supply module, a data communication module and an MCU control module. The MCU integrates an ADC, an interrupt GPIO, a detector PVD, an SRAM and a Flash; the to-be-tested power supply module is respectively connected with the ADC and the GPIO, and monitors a main power supply for supplying power to the main module; the MCU energy storage power supply module provides backup power supply for the MCU when the main power supply is powered down; and the main module writes key data into the SRAM through the data communication module, and the MCU transfers the key data into the Flash after detecting a power failure event. The method does not need an NVRAM (Non-Volatile Random Access Memory) or a special monitoring chip, is low in cost and high in reliability, and is suitable for high-reliability embedded systems such as aviation and airborne systems.

The application provides a Webshell file detection method and device, equipment and a storage medium, wherein the method comprises: obtaining an operation mode of a current operation on a server and a source file to which an operation request corresponding to the operation mode belongs; updating the value of a judgment parameter N according to the operation mode and a preset parameter update condition; wherein N is a constant greater than 0; in the case that N is greater than a preset value, the source file is determined to be a Webshell file. The above scheme can determine that the source file is a Webshell file without detecting the specific content of the file, which not only avoids the possibility that an attacker may bypass the detection of the protection system through rules, but also still has accurate and comprehensive detection capability for variant or updated Webshell files.

The application relates to a user browser-based protection system, wherein the protection system comprises a remote browser, a server and a user browser; the remote browser is connected with the user browser through the server, is used for generating drawing instructions corresponding to a page when the page is pushed, and transmitting the drawing instructions to the user browser through the server; and the user browser is used for loading a drawing library and rendering a target page based on the drawing instructions and the drawing library. Through the application, the problems of high network bandwidth requirement, large data transmission volume and large time delay in the related art are solved, the drawing instructions and the drawing library are used to render the target page in the browser, the rendering speed is improved, the requirement for bandwidth is reduced, and the time delay of data transmission is reduced.

This invention relates to the field of charging pile data acquisition and protection technology, specifically disclosing a method and system for protecting multi-gun data acquisition in charging piles. The method includes the following steps: S1, synchronously acquiring operating data from multiple charging guns; S2, preprocessing the acquired operating data; S3, dynamically allocating the charging power of each charging gun in stages based on battery state of charge and individual cell voltage data; S4, constructing a layered protection system, providing layered protection for the transmission layer, access layer, storage layer, and monitoring layer; S5, constructing an early warning and response mechanism according to the severity of anomalies, and providing graded early warning and handling for abnormal situations. This invention, employing the above-mentioned method and system for protecting multi-gun data acquisition in charging piles, solves the technical problems of poor synchronization of multi-gun data acquisition, weak data protection, and fixed power allocation in supercharging piles, providing efficient and safe technical support for new energy vehicle charging facilities.

The invention relates to the field of non-power-outage transformation, in particular to a transition protection system for non-power-outage transformation and a transformation method. The analog circuit breaker is connected to the terminal strip sleeve group through the connecting cable, and is matched with the transition period protection device and the pre-installation protection device for debugging, so that debugging signal access and quit are realized; the terminal strip set comprises a transition type protection terminal strip and a debugging terminal strip, the transition type protection terminal strip is connected to the transition period protection device, and the debugging terminal strip is connected to the pre-installation protection device; and the transition type protection terminal strip is connected with an on-site secondary loop and a corresponding screen cabinet through a secondary cable group. According to the scheme, seamless protection transition from exiting of an old protection device to inputting of a new protection device is achieved through a rapid non-destructive connection tool. Off-line debugging is carried out through a simulation circuit breaker before transformation, so that the compatibility of a transitional protection device and a pre-installed protection device is ensured; and after the transformation is completed, a new protection device is quickly switched, and the updating and upgrading of the secondary equipment are realized.

The application provides a self-adaptive cross-domain policy coordination and dynamic adjustment method and device and electronic equipment, the method comprising: logically comparing security policies to obtain a conflict detection result; based on the conflict detection result, adjusting the target security policy that exists conflict for the current scheduling context of the target security domain that exists conflict; the current scheduling context comprises the current resource load of the target security domain and / or the task urgency of the cross-domain task. The method provided by the application dynamically adjusts the target security policy by including the current scheduling context of the current resource load of the target security domain and the task urgency of the cross-domain task, realizes self-adaptive solution of cross-domain policy conflict, adjusts the policy by combining the resource load and the task urgency, can protect the system security and stability when the resource is tight, can optimize the execution logic to guarantee the business efficiency when the task is urgent, and further improves the efficiency and safety of cross-domain coordination scheduling.

The invention provides a module safety protection system and method, computer equipment and a storage medium, the system comprises a plurality of main control modules and a plurality of safety gate modules, and each safety gate module corresponds to an internal module; each master control module is used for initiating an access request to the internal module, and the access request carries a hardware identity label and an access security attribute of the master control module; each security gate module is used for receiving the access request and carrying out legality verification on the hardware identity identifier and the access security attribute based on a pre-configured security rule; and each security gate module is also used for allowing access to the corresponding internal module when the hardware identity identifier and the access security attribute pass verification, or blocking the access request. By adopting the scheme, illegal access can be accurately resisted, the data security of the internal module is protected, and the protection capability is improved.

The invention relates to a localized database migration and safe operation and maintenance method and system for a thermal power system, and belongs to the technical field of databases. The method comprises the steps that an existing database of the thermal power system is comprehensively evaluated, and a migration plan is made; selecting and building a domestic database platform supporting a hybrid storage engine, wherein the platform respectively processes high-frequency instructions, historical data and equipment metadata by utilizing a memory optimization table, a time sequence database and a relational database; data migration is executed in a planned power failure window or a mirror image test environment, and consistency verification, business function verification and performance pressure test are carried out; executing data governance, including measurement point naming standardization, abnormal data cleaning and data partitioning; after migration is completed, a whole-process security protection system is deployed, transmission is encrypted by adopting a national cryptographic algorithm, and strict access control and two-factor authentication based on roles are implemented. According to the method, the system performance, the data quality and the information security protection level are remarkably improved, and the operation and maintenance cost and complexity are reduced.

This invention discloses an automatic computer protection system and method, relating to the field of computer file security protection. The technical solution includes: detecting user idle time; identifying sensitive tabs in the browser when the user is about to leave, and extracting the ORB feature point set of their content area as a content fingerprint; creating a Gaussian blur overlay window when the user has left, tracking the positional changes of the content area through feature point matching and affine transformation, and dynamically adjusting the position and size of the overlay window so that the overlay always follows the movement of the file content; and destroying the overlay window when the user returns, restoring the file to normal display. This invention, through content area tracking based on visual features and progressive blurring, solves the problem of sensitive file content being exposed and background tasks being interrupted when a user is briefly away, achieving fine-grained protection at the file and tab levels, and helping to improve the security of computer files in the office environment.

The application discloses a kind of mine field's cross-platform file transfer's method, comprising the following steps: S1: mine file source identification and fluidization: interface industrial internet platform, read the original file generated in specific business scenario, and convert it into file stream;S2: intelligent unified transcoding for mine terminal: the file stream is uniformly transcoded by intelligent transcoding engine;S3: encryption based on mine data security level: the file after transcoding is encrypted;S4: mine business driven safe transfer: receiving encrypted transcoding file, decryption and decoding are carried out in target mine terminal or mine designated storage node.The application realizes safe and efficient cross-platform transmission between mine multi-business systems, completely solves the file compatibility problem of mine terminal, significantly improves the file transmission and access efficiency in mine weak network environment, and builds mine-level data security protection system.

The present invention relates to a retrofit network-connected water pump automation and protection system, configured for industrial, commercial, and residential pump management applications. The invention is designed to integrate with existing magnetic contactor-based pump starter panels, including Direct-On-Line (DOL) and Star-Delta systems, through lowvoltage relay-based integration with existing magnetic contactor starter architectures. The invention incorporates a pulse-based electromechanical actuation architecture configured to emulate manual START and STOP push-button operations through predefined relay pulses, thereby enabling non-invasive retrofit automation of existing industrial control panels. The system further includes a memory-based Power-Interruption State Retention Architectureutilizing Non-Volatile Storage (NVS) memory for preserving operational state, remaining timer duration, and runtime information during electrical power interruptionthrough event-triggered non-volatile memory synchronization and temporary capacitor-assisted energy reserve operation, wherein the controller automatically restores operation from the remaining runtime condition after power recovery. The invention additionally comprises a dynamic hybrid sensor abstraction architecture capable of automatically adapting between resistance-based probe sensing systems and UART-based ultrasonic sensing systems through firmware-controlled operational logic. An edge-processing automation engine performs autonomous local decision-making, emergency fault protection, dry-run prevention, overload monitoring, phase fault detection, and offline automation independently of continuous cloud connectivity

The invention discloses a cross-site scripting attack protection system and method, a user sets a rule type, a target parameter, a rule matching content and a processing action at a management end, a configuration center generates a protection rule according to the rule type, the target parameter, the rule matching content and the processing action information, the professional knowledge requirement of the user is reduced, and the user experience is improved. A user does not need to write rules, the use threshold of the cross-site scripting attack protection system is reduced, the usability of the system is improved, the cross-site scripting attack protection rules can be generated efficiently and flexibly at low cost, the protection engine generates the current rule set copy when receiving the rule update, the rule update package is adopted to update the current rule set copy, and the user experience is improved. In the rule updating period, updating is carried out in a copy establishing mode, the influence of rule updating on the current protection requirement is avoided, the protection engine does not need to interrupt the protection service to carry out rule updating, and the protection engine meets the harsh protection requirement that internet services are highly available for 7 * 24 hours.