246 results about "Protection system" patented technology

The invention relates to a feature defense method and system in a network transmission process, and the method comprises the steps: intercepting a network transmission data flow in a migration channel of a virtual machine in real time, and building a bidirectional flow mirror image pipeline; performing deep protocol analysis and recombination on the original transmission message in the mirror image pipeline to obtain a structured traffic log of complete load information and metadata labels; based on a preset traffic feature set, extracting a memory paging transmission time sequence feature and a disk data block check code distribution feature from the structured traffic log, and constructing a first detection sub-vector; according to the invention, a high-precision virtual machine migration security protection system is realized.

The invention relates to the technical field of solid state disk security protection, in particular to a security protection detection method and system for a solid state disk, and the method comprises the following steps: obtaining a historical security monitoring log of the solid state disk, carrying out normalized fluctuation rule mining and reference behavior evolution, and constructing a normalized reference behavior model; identifying real-time access behavior data of the solid state disk; analyzing access modes of behavior storage units one by one according to the real-time access behavior data, and identifying real-time access behavior characteristics to generate real-time access behavior characteristics; and performing reference access deviation detection on the real-time access behavior characteristics according to the normalized reference behavior model, tracing an access position, and positioning a malicious access storage unit. Through a multi-layer and all-around intelligent protection system, the overall safety and stability of the solid state disk are improved.

The invention discloses a firmware-level security protection system and method for a hard disk of industrial automation equipment, particularly relates to the technical field of storage security protection, and is used for solving the problem of abnormal tampering of firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence library, firmware-level judgment on operation abnormity, access border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to closed loop recovery by combining protected segment integrity verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the operation safety and the maintainability of the firmware are integrally improved.

The invention relates to the technical field of power dispatching, in particular to a virtual power plant control system and method. Comprising a data fusion module, a dynamic optimization scheduling module, an intelligent prediction module, a user interaction module, a self-learning adaptive module, a cooperative control module, a safety protection module and a storage unit. Key information is accurately extracted; the dynamic optimization scheduling module is based on a deep reinforcement learning algorithm, fully considers various factors to generate a global optimal strategy, and overcomes the defects of local optimization; the safety protection module constructs a multi-layer protection system to guarantee the safety of the system; the user interaction module covers the functions of information display, demand response, service customization and the like, personalized demands of users are met, complex conditions of the energy market and power grid operation can be handled on the whole, the operation benefit and safety of the virtual power plant are improved, and popularization is facilitated.

The invention discloses a cross-platform file transfer method in the mine field, which comprises the following steps: S1, mine file source identification and fluidization: docking an industrial internet platform, reading an original file generated by a specific business scene, and converting the original file into a file stream; s2, intelligent unified transcoding for the mining terminal: performing unified transcoding on the file stream through an intelligent transcoding engine; s3, encryption based on the mine data security level: carrying out encryption processing on the transcoded file; and S4, safe unloading driven by the mine service: receiving the encrypted transcoding file, and decrypting and decoding the encrypted transcoding file at a target mine terminal or a mine appointed storage node. According to the method, safe and efficient cross-platform transmission among mine multi-service systems is realized, the problem of mine terminal file compatibility is thoroughly solved, the file transmission and access efficiency in a mine weak network environment is remarkably improved, and a mine-level data security protection system is constructed.

The invention relates to the technical field of data security of the Internet of Things, in particular to an edge data security protection system and method based on a security chip, and the system comprises edge equipment which is deployed at the edge of a network and is used for detecting or collecting original data; the security chip is embedded in or externally connected to the edge equipment, and an encryption engine and a security storage area are integrated in the security chip; the encryption engine is integrated with an encryption algorithm, and a secret key is stored in the secure storage area; the security agent software runs on a control system of the edge equipment and is in communication connection with the security chip, and the security agent software is configured with a security policy; wherein the security agent software is configured to receive original data, call an encryption engine of the security chip according to a security policy to encrypt the original data, generate protected data, and send the protected data to a cloud or a data center; or the original data is monitored, and safety measures are taken for the original data with risks.

Systems and methods for memory replay protection are disclosed. In an example, a system in the form of a device includes a processor, and a replay protection circuit coupled to the processor and including a memory interface circuit, wherein the replay protection circuit is configured to generate a message authentication code (MAC) from at least one block of data and to access the at least one of block of data via the memory interface circuit using ciphertext that is generated by the replay protection circuit in response to a plaintext memory address received from the processor.

The invention discloses a primary main wiring diagram on-site configuration method based on microcomputer protection, and relates to the technical field of power system microcomputer protection. Two-stage mapping from a grid position to a primitive identifier and two-stage mapping from the primitive identifier to a rendering handle are maintained in parallel in a nonvolatile memory through a double-page mirroring transaction; reading screen resolution, adaptively calculating blank space and grid scaling according to a residual pixel threshold value, and outputting global coordinates; monitoring virtual switching value change in an operation period, dynamically selecting local or whole-screen refreshing according to a dirty rectangle merging algorithm, and triggering a degradation strategy in combination with a comprehensive load score; the protection device can be safely and rapidly rearranged in a low-resource mode on site, a main wiring diagram is refreshed in real time, and the problems of factory returning upgrading, resolution ratio adaptation and refreshing lagging are solved.

The invention discloses a power-down protection system and a power-down protection method, and relates to the technical field of computers, and the method comprises the steps that when a monitor obtains power-off indication information, it is indicated that abnormal power-down may occur, at the moment, a power-off request is immediately sent to a power manager, and when the power manager receives the power-off request, the power-off indication information is sent to the power manager; and immediately sending a data storage request to the first controller. And when the first controller receives a data storage request, the data cached in the first storage area of the storage device is brushed to the second storage area. The power manager can detect that the power supply voltage value drops to the preset voltage threshold value for a period of time after the abnormal power failure, and after the abnormal power failure, the power manager receives the power failure request earlier and immediately sends the data storage request, so that the first controller can execute the operation of refreshing the data as soon as possible, and the duration of refreshing the data can be prolonged.

The invention relates to the technical field of alternating current grid-connected operation countercurrent prevention, in particular to an alternating current countercurrent prevention intelligent switch. The system is composed of hardware and software, and comprises an intelligent anti-countercurrent architecture, an anti-countercurrent safe operation logic program, a switch and remote switch and protection system program, and a record display system. The switch has the functions of a switch and a remote switch, ensures that the switch is not closed under the condition that the frequency and the phase are not the same under the condition of alternating current countercurrent prevention, and is automatically closed when the condition is met, so that the system safety is effectively protected.

The invention belongs to the field of industrial control and computer data security, and particularly relates to a millisecond-level power failure data protection system for an industrial control panel. The invention discloses a millisecond power failure data protection system for an industrial control panel. The millisecond power failure data protection system comprises a core processing component, a real-time synchronous shadow memory component, a bus voltage monitoring component, a pre-entropy reduction logic control component, a nonvolatile storage component and a flight control bus arbitration component. The bus voltage monitoring assembly monitors a voltage drop trend and performs early warning, the pre-entropy reduction logic control assembly calculates a minimum data survival set according to energy entropy, the real-time synchronous shadow memory assembly constructs a synchronous shadow control domain and atomizes data, and the flight control bus arbitration assembly compulsively takes over a bus and freezes processor access at the moment of power failure. Atomized writing of data into the nonvolatile storage component is guaranteed. According to the invention, zero-delay data protection and millisecond-level hot start recovery at the moment of power failure are realized, and the data security and reliability of the industrial control equipment in a severe environment are enhanced.

An illustrative method includes a data protection system detecting an anomaly associated with a managed run-time environment; determining, based on the detecting the anomaly, that the managed run-time environment is possibly being targeted by a security threat; and performing, based on the determining that the managed run-time environment is possibly being targeted by the security threat, a remedial action associated with the managed run-time environment. The performing the remedial action may include identifying a recovery dataset generated prior to the detecting the anomaly, the recovery dataset for data associated with the managed run-time environment and stored by a storage system, and converting the recovery dataset into a protected recovery dataset that cannot be deleted without a specific instruction provided by an authorized entity.

The invention relates to a system calling ptrace-based operating system micro-service security protection system and method, which are characterized in that the running state of micro-service is monitored in real time through calling of a ptrace system in a user state, and dynamic integrity verification is realized in combination with an SM3 hash algorithm. The method comprises the following steps: calculating an SM3 hash value of a code segment of a micro-service when the micro-service is started, storing the SM3 hash value as a static reference, periodically reading memory data of a target process through ptrace in a running process, recalculating a dynamic hash value, and comparing the dynamic hash value with a reference value; if it is detected that the hash values are inconsistent, it is judged that code injection attacks exist, and a defense mechanism is triggered. According to the method, the system stability risk caused by kernel module injection is avoided, meanwhile, real-time interception of tampering attacks during operation is achieved through high-frequency dynamic comparison, the lightweight design enables the method to be suitable for high-reliability scenes such as spaceflight with limited resources, the integrity of a micro-service code segment can be guaranteed, low performance loss of the system can be maintained, and the system reliability is improved. The balance blank between dynamic defense and system stability in the prior art is effectively filled.

The invention discloses a test control method and system for a direct-current power supply, and relates to the field of simulation testing, and the method comprises the steps: constructing a three-dimensional adaptive model to complete the matching calibration of system software and hardware, and achieving the load calibration through the comparison of dynamic load simulation and actual measurement data; in the testing process, a three-stage starting mechanism is adopted to power on step by step, fault protection is configured, and parameter scanning and real-time recording are executed according to a preset mode and a testing point; a double-closed-loop feedback mechanism is introduced, an inner loop adjusts output parameters, and an outer loop predicts power grid disturbance and performs advanced compensation; a safety threshold value is dynamically generated in combination with real-time environment data, linkage protection of approaching early warning and overrun protection is achieved, and a reliable effective data set is formed through fusion processing and double verification of multi-source test data. The system has the advantages that the precision and intelligence of the whole test process are realized through dynamic load simulation, a multi-level safety protection system is constructed through a three-level starting mechanism, and the precision, safety and data value of the test are comprehensively improved.

The invention belongs to the technical field of embedded system information security, and particularly discloses a program control flow protection system and method based on stack data confidentiality and integrity. According to the method, the key stream is generated and managed during memory access of the special hardware for micro-architecture level design, and quick encryption and decryption calculation of the stack key data is realized through the exclusive-or operation of the key stream and the stack data. The stack data confidentiality protection supports the burst transmission property of an AHB-Lite bus on which stack data transmission depends, and the execution overhead of a program control flow protection method is reduced; on the basis of data encryption, MAC codes are calculated and verified when stack data are written in and read out based on a stack data integrity verification architecture of the MAC codes, real-time detection of tampering of stack key data is achieved, and program control flow abnormity is found in time. Through parallel encryption and decryption and integrity verification of the stack data, protection of the program control flow is realized from the aspect of stack data protection.

The invention discloses a data protection system for a PCIe (Peripheral Component Interconnect Express) switch. The data protection system comprises a CRC (Cyclic Redundancy Check) module, a data verification module and an error monitoring management module, wherein the CRC verification module is in communication connection with a non-transparent bridge port, and / or an upstream port, and / or a downstream port of the PCIe switch and is used for carrying out CRC verification on data received and sent by the ports, and the data verification module is in communication connection with an internal bus of the PCIe switch and is used for verifying a data packet transmitted on the internal bus and sending the verified data packet to the PCIe switch. And the error monitoring management module is in communication connection with the verification module, and is used for monitoring the data packets sent and received by the ports to identify illegal packets, recording the number and types of the illegal packets, and feeding back according to the types of the illegal packets. The data protection system can be used for a non-transparent bridge port and the like of a PCIe (Peripheral Component Interconnect Express) switch, performs data protection on the whole transmission process of a data stream, ensures the integrity of the data, and improves the reliability.

The invention relates to the technical field of computer security, in particular to an operating system kernel security protection system based on hardware virtualization, which comprises a hardware virtualization module, a kernel isolation module, a security monitoring module and a data protection module. And the system security is obviously improved. Traditional software protection depends on authority management and access control mechanisms of an operating system and is easily subjected to bypassing attacks of malicious programs, for example, protection is broken through by modifying a system call table, utilizing memory vulnerabilities and the like. According to the system, privilege level isolation of hardware virtualization is utilized, a kernel runs in an independent virtual machine with the highest privilege level, a user application program runs in a virtual machine with the low privilege level, and hardware directly prevents unauthorized access of the application program, so that direct attack of malicious codes of an application layer to the kernel is eradicated fundamentally.

Presented herein are embodiments for handling changes in an information handling system without compromising the security of the system by sealing against platform configuration registers (PCRs) and a recovery key. Embodiments comprise approaches where a private recovery key is always stored in (or accessible from) a trusted management system and only the public key is exposed during the setup and recovery. A combination of a secure policy module (e.g., PolicyPCR) and a policy authorization module (e.g., PolicyAuthorize) that allow unsealing without interacting with a trusted management system in normal cases (e.g., no information handling system changes). In one or more embodiments, when the system has undergone one or more changes, the trusted management system may be accessed to authorize unsealing of a sealed data objects. The trusted management system may approve the changes and may also facilitate resealing of the data object to reflect the changed system.

Systems and methods are provided for entering a guarded mode of an operating system of a computing device. A guarding system may receive a user input at a computing device. The operating system of the computing device may be configured to operate in a guarded mode or a non-guarded mode. The guarding system may determine, while the operating system is operating in the non-guarded mode, that the received user input matches a user input configured to initiate the guarded mode. The guarding system may cause the operating system to transition from the non-guarded mode to the guarded mode. In response to the operating system transitioning to the guarded mode, the guarding system may modify at least one attribute of a third-party application installed on the computing device.

The invention provides a document transfer system in a credential environment and an operation method thereof, the system adopts a multi-storage medium unified adaptation and intelligent scheduling mechanism, can dynamically select an optimal storage rear end according to file characteristics through a storage strategy engine, and combines fragment uploading, breakpoint resuming and a second transmission technology based on mixed Hash, so that the file transfer efficiency is improved, and the file transfer efficiency is improved. And the processing efficiency of massive files, especially large files, and the utilization rate of system resources are greatly improved. A full-life-cycle data security protection system with the SM2 / SM4 cryptographic algorithm as the core is constructed, and the confidentiality, integrity and availability of data are comprehensively improved. By providing a standardized API interface and a deep association mechanism of files and service data, the integration cost of the multi-service system is greatly reduced. The integrated visual operation and maintenance monitoring system realizes real-time perception and intelligent alarm of system performance, storage states and business indexes, and obviously improves the autonomy level of operation and maintenance and the fault emergency response speed.

The invention relates to a federated learning-based commercial data protection system, and the system comprises a federated protection module which is used for obtaining multi-modal behavior feature vectors, forming encryption features, carrying out aggregation operation, forming an encryption view, constructing a relation graph, and carrying out federated risk scoring; the self-adaptive control module is used for selecting a group of response action candidate sets, performing cost-benefit simulation evaluation on candidate actions in the response action candidate sets, generating a response action sequence, issuing a control measure command, verifying whether risk misjudgment occurs or not, and feeding back a verification result to the federal protection module; and the compliance guarantee module is used for acquiring data, carrying out noise addition on the data, locally completing encryption, constructing a verifiable trust and audit chain, hiding technical operation to corresponding legal requirements and dynamically generating a compliance state report. According to the technical scheme, the technical problems that in the prior art, misjudgment and early warning are prone to occurring, effective blocking cannot be conducted before IP leakage occurs, and privacy regulation requirements are not met are solved.

The invention discloses an automobile frameless window protection system and method and a computer storage medium. The automobile frameless window protection system comprises a data acquisition subsystem, an automobile central calculation subsystem, an execution subsystem, an interaction subsystem and a power supply subsystem. Wherein the data acquisition subsystem, the execution subsystem, the interaction subsystem and the power supply subsystem are all in communication connection with the automobile central calculation subsystem; the data acquisition subsystem is configured to acquire data related to the protection of the frameless window of the automobile in real time; the automobile central calculation subsystem is configured to receive and fuse the data acquired by the data acquisition subsystem, and then perform logic judgment according to a preset protection strategy to generate a corresponding control instruction; the execution subsystem is configured to execute actions including automobile door speed reduction, automobile window lifting or door lock control after receiving a control instruction of the automobile central calculation subsystem; and the interaction subsystem is configured to remind a user after receiving the control instruction of the automobile central computing subsystem.

A storage system has zones in solid-state storage memory, with power loss protection. The system identifies portions of data for processes that utilize power loss protection. The system determines to activate or deactivate power loss protection for the portions of data for the processes. The system tracks activation and deactivation of power loss protection in zones in the solid-state storage memory, in accordance with the portions of data having power loss protection activated or deactivated.

A system for kernel protection includes a processor and a transmission interface. The processor is arranged to execute at least one guest virtual machine (VM), at least one primary VM, and a hypervisor. The at least one guest VM is arranged to send at least one command to a command hub. The at least one primary VM is arranged to manage and configure a safety setting according to the at least one command from the command hub and at least one policy, and manage and configure a safety protection component according to the safety setting. The hypervisor is arranged to manage and configure the safety protection component according to a ground rule and at least one safety setting command from the at least one primary VM. The transmission interface is arranged to bind the at least one primary VM to the hypervisor.

The present disclosure provides a method for deploying the software framework on the ML Platform in a secure manner. In particular, the present disclosure provides a method for securely deploying the ML models or the algorithms into the system by providing a multi-level scanning procedure. In an embodiment, the disclosed method performs multiple vulnerability scans on the ML model or the algorithm at multiple stages to check for malware and ensure that only models / algorithms that pass the security checks are imported into the system. If the security scan detects vulnerabilities at any stage then the files are placed in a quarantined zone and the import process is terminated. Thereby protecting the system and making it cyber-secure.

The invention discloses a full-link security processing method and device for service sensitive data. The method comprises the following steps: executing pre-encryption processing on the service sensitive data generated by a client side before the service sensitive data is sent to a server side; in the process of sending the service sensitive data generated by the client to the server, protecting the service sensitive data subjected to pre-encryption processing through a dual protection mechanism; the service sensitive data which are received by the server and protected by the dual protection mechanism are stored by adopting a differentiated storage strategy according to the use scene; and automatically filtering the stored service sensitive data during log output through a Nacos dynamic configuration sensitive field list. Through the method provided by the invention, the sensitive data is disassembled into four links, namely a client front encryption processing link, a dual protection link in a transmission process, a server storage protection link and a log output filtering link, a security protection system covering the whole life cycle of the service sensitive data is constructed, and unified management and control and dynamic adjustment of security strategies are realized.

In some examples, a cluster protection system comprises at least one processor and a memory storing instructions which, when executed by the at least one processor, cause the system to perform operations comprising identifying a target cluster or an object in a container management framework, identifying application data and metadata associated with the target cluster or the object, generating a first snapshot of the target cluster or the object, the first snapshot including at least the metadata, storing the first snapshot in offsite cloud storage, generating a second snapshot of the target cluster, the second snapshot including at least the application data, and storing the second snapshot in a persistent volume in onsite storage.

A management server (100) includes a common key distribution unit (113) that generates a common key shared by a plurality of output destination servers (201), generates first encrypted data obtained by encrypting the common key for each output destination server (201) by using a public key paired with a secret key individually possessed by each output destination server (201), and distributes the generated first encrypted data to each output destination server (201), thereby causing each output destination server (201) to decrypt the common key; and a data output unit (114) that distributes second encrypted data obtained by encrypting an output value by using the common key to each output destination server (201), thereby causing each output destination server (201) to decrypt the output value.

Systems and methods are disclosed herein that can detect at least one activity by parsing text from an operation of a consumer electronics device and determine that the at least one activity matches a risk scenario. The at least one activity may be identified by the at least one processor as occurring in the future.

This invention discloses a multi-level network-type energy storage control and protection system and method, relating to the field of energy storage technology. The method includes: S1, performing feature modeling on the multi-source operating signals of the acquired energy storage system to construct a multi-source operating feature set; S2, performing time series rate of change analysis on the multi-source operating feature set to extract dynamic features of current direction change and power reversal; S3, performing energy disturbance amplitude analysis on the dynamic energy feature set to calculate an adaptive protection threshold set in real time; S4, comparing the real-time sampled signal with the adaptive protection threshold set to identify whether an over-limit state has been triggered; S5, when an over-limit state is detected to be triggered, extracting the real-time dynamic features of the over-limit event, matching the real-time dynamic features of the over-limit event with the energy backlash judgment model, determining the anomaly type of the over-limit event based on the matching result, and outputting a protection action command or dynamic balance control command corresponding to the anomaly type.