38 results about "Safety property" patented technology

This application relates to a device capability description method, apparatus, computer device, and storage medium. The method includes: acquiring a capability description language document for a target device; the capability description language document includes device type information, operability status information, operation method information, physical constraint information, and feedback format information; the physical constraint information includes at least one or more of time constraints, energy constraints, safety constraints, lifetime constraints, and mutual exclusion constraints; upon receiving an intent instruction from an upper-layer application, parsing the intent instruction to extract one or more execution targets; and performing capability matching on the one or more execution targets according to the capability description language document to determine target operations from the target device that can achieve the execution targets. This method enables automatic capability adaptation between upper-layer applications and heterogeneous devices, reducing development costs and improving execution security.

The invention relates to the field of data security storage, in particular to a data security storage method of an artificial intelligence data platform. The method comprises the following steps: constructing a data security map based on multi-dimensional security information acquired by an artificial intelligence data platform, performing security risk grading on data according to the data security map, generating security grading labels, and constructing a grading encryption storage strategy; according to the hierarchical encryption storage strategy and the security hierarchical label, generating a polymorphic security snapshot and a temporary snapshot key, packaging the polymorphic security snapshot through the temporary snapshot key, and constructing a security storage index table and a polymorphic snapshot index; based on the security storage index table and the polymorphic security snapshot, performing binding with the task context information, and generating a security access log; and in combination with the data security map, the polymorphic snapshot index and the security access log, the access behavior of the polymorphic security snapshot is analyzed, and a hierarchical encryption strategy is adjusted. According to the invention, the data storage security can be improved.

The invention discloses a security test method and device for an industrial real-time database and a storage medium, and relates to the technical field of industrial internet. The method comprises the following steps: based on a three-security partition architecture, realizing security test on the industrial real-time database by verifying the transmission security of each interval. The logic isolation test between the first security zone and the second security zone emphatically checks access control strategies, industrial protocol transmission integrity and abnormal traffic filtering. The physical isolation test between the first security area or the second security area and the third security area comprises the steps of verifying one-way transmission and data integrity of the forward isolation device and verifying formats and security policies by the reverse isolation device. The cross-three-zone linkage transmission test covers end-to-end data transmission security verification, a simulation attack penetration test from a third security zone to a first security zone, and an emergency mechanism test under an isolation device fault. According to the method, the safety of the industrial real-time database can be improved through a three-partition testing method.

A method and system for adaptive adjustment of power grid operation modes involves acquiring multi-source heterogeneous power grid data and constructing a knowledge base based on this data. Based on the knowledge base, deterministic rule verification is performed on operation instructions to be verified, filtering out instructions that violate preset rules. A large-scale operation instruction model is constructed and trained using the knowledge base to obtain a trained model, outputting dispatch instructions that comply with safety constraints. For operation instructions that pass the deterministic rule verification, power flow calculation verification, N-1 security analysis verification, and a three-level verification for extreme power grid scenarios and major events are performed sequentially. If any level of verification fails, the dispatch instruction is reconstructed by the large-scale operation instruction model, and the three-level verification is re-executed until all verifications pass. This invention achieves automatic generation and closed-loop optimization of safe and compliant dispatch instructions, significantly improving the automation level and safety assurance capability of power grid operation mode adjustment.

This invention discloses a safety interlock control method for thermal power units under deep peak shaving conditions, belonging to the field of thermal power generation automation control technology. The method includes: S10: acquiring relevant data of the target thermal power unit, including records of historical safety interlock control executions of the target thermal power unit, acquiring the load of the target thermal power unit corresponding to each record, and generating a database based on the acquired loads; S20: acquiring the group of loads with the most historical safety interlock control executions from the database, and acquiring correlation parameters related to the loads in the load group, including furnace negative pressure and burner air-coal ratio. This invention, by constructing a database containing historical safety interlock control records and load data, performs multi-parameter correlation analysis and load change trend monitoring, achieving accurate prediction of thermal power unit load changes and dynamic adjustment of interlock thresholds, thereby improving the operational safety and stability of thermal power units under deep peak shaving conditions.

Providing differing degrees of reliability or security for distinct devices within a reliable distributed system. Allowing virtual machines to operate in a reliable distributed system without either exposing the actual available devices to guest operating systems, or requiring the guest OS to maintain, or to maintain information about, reliability or security. Methods are responsive to a hierarchy of possible reliability or security failures, to guard more carefully against simultaneous failures of reliability or breaches of security, without additional work or delay. Functions invoked by the user that relate to reliability and security are hidden, so the user can specify a degree of reliability or security without having to implement those requirements themselves. Providing a uniform set of resources available to all users, separating out those individual resources that are allocated to particular users, and emulating particular devices at the request of those particular users. Users do not have access to “real” devices the distributed system can use, only “virtual” devices presented by the distributed system, where those virtual devices have properties similar, but not necessarily equal, to real devices.

The invention provides a safety function block active defense method and system for a safety instrument system. The method comprises the following steps: before executing a core algorithm, performing pointer security check and numerical field check on input data of a security function block; if the check is passed, entering a pre-operation stage, and monitoring an operation risk in real time through a preset check point by utilizing a reverse analysis pre-operation algorithm or a soft floating point pre-operation algorithm on the premise of not executing an actual instruction which possibly causes hardware exception; and executing a deterministic output strategy according to a pre-operation result, and outputting a unified hierarchical state code (ERR) through a special state pin. The method has the advantages of endogenous safety, fault behavior determination, high diagnosis precision, high configuration efficiency and the like, controller shutdown caused by data exception can be effectively avoided, and the robustness of an industrial control system is improved.

The application provides a kind of embedded software requirement security verification method by means of failure data, which includes: establishing software requirement model, formalizing model description of software requirement, carrying out the patternization processing of failure data, explicitly failure data mode information, establishing the mapping relationship between software requirement model and failure data, carrying out the security verification of software requirement model, obtaining software requirement security verification result, the elements of the software requirement model include function input interface, function output interface and function processing process.The application is driven by failure data and security verification rules, and focuses on the key information that can easily cause engine control software to run failure, which can significantly improve work efficiency and quality, and ensure that potential failure modes and system hazards in software requirements are fully identified.

The invention relates to the technical field of power systems, and particularly discloses a hydrogen energy micro-grid energy management method based on Lyapunov safety reinforcement learning, and the method comprises the steps: constructing a system operation cost model; defining an energy scheduling strategy as a reinforcement learning action, and performing real-time security assessment and correction by using a mixed integer programming model; introducing a Lyapunov function to construct a security induction strategy set; the economy of the reinforcement learning strategy and the operation safety of the system are balanced in combination with a safety evaluation mechanism; and constructing a Markov decision process of safety evaluation, and adopting an improved Actor-Critic algorithm to realize strategy optimization to obtain a management scheme. The method has the advantages that the problems that an existing convex optimization algorithm is difficult to process non-convex and non-linear characteristics of the system, traditional reinforcement learning depends on soft constraint, potential safety hazards exist and the like are solved, and finally the operation cost is reduced while the operation safety of the system is guaranteed.

The invention relates to the technical field of safety protection of power equipment, and discloses a safety protection method for a data acquisition terminal of a metering box, which comprises the following steps of: firstly, acquiring operation parameters of the terminal, constructing a safety state model, setting a safety strategy of a protection module, testing the protection characteristic of the protection module, and adding the strategy into the safety state model. And then safety demand parameters, theoretical protection loads and protection control quantities are calculated, protection instructions of the protection units are generated, protection control is carried out, and finally the protection effect is evaluated. According to the method, through space division of an operation scene, state feature analysis, interference factor extraction, construction of a state transition equation and comprehensive consideration of different stages of a protection process, fine control and dynamic adjustment of a protection unit are realized, a scientific protection effect evaluation system is established, the safety and stability of terminal operation are improved, and the method is suitable for popularization and application. And reliable proceeding of a data acquisition task is ensured.

The invention belongs to the field of artificial intelligence safety, and discloses a large model safety protection method and system and electronic equipment. In order to solve the problem that safety and efficiency cannot be considered at the same time through existing one-step filtering or static rules, sensitive word hard filtering, injection detection and content safety double-model preliminary screening are provided, the risk difference of model output results and the comprehensive risk score of uncertainty indexes are calculated, and a preset dynamic determination threshold value is combined; and distributing the user request to low-risk, medium-risk and high-risk three-path processing. Wherein the low risk uses a lightweight model for rapid verification, the high risk is directly rejected, the medium risk executes a pre-formulated adaptive streaming generation control strategy, and an adaptive sliding window is adopted for monitoring generation and triggering early stop and self-repair. According to the scheme, the average delay and calculation cost can be remarkably reduced while the cue word injection and harmful content recognition accuracy is met, and therefore the safety and practicability of a large model are improved.

This invention discloses an adaptive control method for bearing grinding processes based on reinforcement learning, comprising: S1, real-time acquisition of multi-source state data; S2, construction of a high-dimensional state vector; S3, construction of a historical grinding dataset; S4, construction of an improved IQL model incorporating an uncertainty perception mechanism, offline training using the historical dataset, outputting the Q-value distribution, and learning a safety policy at the safety policy layer; S5, online deployment of the model, generation of candidate commands, and evaluation of uncertainty; S6, judgment by the safety constraint layer: issuing candidate commands when uncertainty is low, and invoking the safety policy to generate safe commands when uncertainty is high; S7, execution of commands and storage of new data in the dataset, periodically optimizing the model. This invention improves the safety and reliability of online decision-making through uncertainty quantification and a safety policy safety net, achieving adaptive and precise control of complex grinding conditions.

The invention relates to the technical field of artificial intelligence, and discloses a safety control method, device and equipment, a storage medium and a computer program product.The method comprises the steps that in response to an input prompt, a safety control module of a large language model is called, the safety control module is trained in advance based on a pre-constructed thinking chain path, and the thinking chain path is input to a user; the thinking chain path is used for representing hierarchical decision logic of hierarchical security policies, the hierarchical security policies comprise a global security policy and a user security policy, performing hierarchical security policy inference on the input prompt based on the security control module, and determining a response action mode of the large language model according to an inference result, and the output response corresponding to the input prompt is generated through the large language model based on the response action mode, so that excessive rejection or insufficient constraint can be avoided, and the balance of safety and help can be realized.

A qualitative and quantitative (Q2) method for verifying safety of movement of complex learning-enabled cyber-physical systems (Le-CPS) using a computer is provided. The method includes determining an initial set of states of the Le-CPS. The computer is used for determining a reachable set of the Le-CPS using a probstar reachability algorithm saved in memory of the computer. The computer includes a Q2 algorithm saved in the memory that is configured is used to simultaneously check (i) if the reachable set satisfies a predetermined safety constraint (qualitative verification) and (ii) determine a probability of satisfaction that the reachable set will satisfy the predetermined safety constraint (quantitative verification). Movement of the Le-CPS is planned based on the step of using the computer including the Q2 algorithm.

The invention discloses an incremental SVM security updating method and system for power grid transient stability discrimination, and the method comprises the steps: obtaining typical and additional scene data based on electromechanical transient simulation, and respectively constructing a pre-training set and an incremental updating set; training the initial SVM model; and performing incremental learning and updating on the model by adopting a safety updating mechanism fusing incremental sample screening, negative sample hard constraint and double-threshold dynamic adjustment, and finally realizing online transient stability judgment. By introducing a safety updating mechanism fusing incremental sample screening, negative sample hard constraint and double-threshold dynamic adjustment, the problems that a traditional discrimination model is difficult to adapt to a complex and changeable power grid scene, an unstable sample is easy to misjudge, and conventional incremental learning efficiency and safety are difficult to consider at the same time are solved.

The invention discloses a safety protection method, a control device, a storage medium and a program product, and relates to the technical field of industrial production, the safety protection method is applied to a collaborative operation system, the system comprises a first device and a second device, and the method comprises the following steps: obtaining real-time position data of the first device; generating a first security permission signal under the condition of determining that the first equipment arrives at and stays at a preset security position according to the real-time position data; acquiring motion state data of the first equipment, and generating a second security permission signal under the condition of determining that the first equipment leaves a dangerous area where the second equipment executes the target action based on the motion state data; and when the first security permission signal and the second security permission signal are detected, outputting a first security enable signal to the second device to permit the second device to execute the target action. According to the invention, the overall safety and reliability of the collaborative operation system are improved.

This invention discloses a method for runtime verification and safety recovery of control logic in embedded real-time systems, relating to the fields of embedded real-time control and functional safety technology. This invention constructs an independent safety monitoring layer outside the operating system kernel, defines runtime contracts containing safety invariance and timing logic constraints for critical control tasks, and performs real-time contract verification through periodic data collection. When a contract violation is detected, a layered recovery mechanism is initiated according to fault levels, including output clamping, task rollback and restart, and algorithm degradation switching. A memory protection unit is used to achieve spatiotemporal isolation protection for tasks. This invention achieves non-intrusive real-time monitoring and hierarchical safety recovery of critical control tasks, improving the functional safety and operational stability of embedded real-time systems. The monitoring overhead is controllable and does not affect real-time system scheduling, making it widely applicable to safety-critical scenarios such as vehicle control and industrial robots.

The invention discloses a secure multi-core controller secure storage system for engineering machinery, a memory management method, a memory management device and memory management equipment in the technical field of secure controllers. The secure multi-core controller secure storage system comprises a secure area, a non-secure area and a Bootloader area which are physically isolated from one another, the security area stores security data and allows the first core to perform read-write operation and allows other cores to perform read-only operation; the non-security area stores non-security data and allows the first core and other cores to perform read-write operation; the Bootloader area stores a to-be-updated application program of the system, and only allows the core zero to perform read-write operation; the secure FRAM stores secure data needing to be frequently updated, and only allows the first core to perform read-write operation; the non-secure FRAM stores non-secure data needing to be frequently updated, and only other cores are allowed to perform read-write operation. Physical isolation is achieved, the possibility that security data are tampered is greatly avoided, and the security of stored data is ensured from the two aspects of hardware design and software design.

Computing equipment obtains a system model (110) that represents assets (A) of a system (100) and paths (P) therebetween. The computing equipment enriches the system model (110) with security control metadata (120) that indicates, for each of one or more of the paths (P), one or more security controls (SC) that are to be implemented for securing the 5 path (P). The computing equipment performs, or retrieves results of, static security analysis (130) on artifacts associated with the system (100) to identify issues (140) with security of the system (100). For each of one or more paths (P) represented in the system model (110), the computing equipment calculates a score (160) that quantifies how secure the path (P) is against a subset of the identified issues (140) that are applicable to the path (P), based on 0 which security controls (SC), if any, are to be implemented for securing the path (P) according to the enriched system model (110E). The computing equipment adapts, or assists with adapting, design of the system (100) based on the score (160) calculated for one or more of the paths (P).

The invention discloses a security and energy consumption optimization scheduling method for a real-time dependent task in heterogeneous computing. The method comprises the following steps: establishing a basic model of a heterogeneous computing system and a dependent task, and constructing an optimization problem which takes real-time performance and safety as constraints and takes minimization of system energy consumption as a target; the method comprises the following steps: designing a task scheduling strategy based on two-stage scheduling, and performing pre-scheduling in a first stage by taking minimization of task completion time as a target so as to determine the priority and deadline constraint of each task; and in the second stage, corresponding safety services are selected according to the safety requirements of data transmission between the tasks, and scheduling decision making is carried out by taking minimization of the total energy consumption of the system as a target on the premise of strictly meeting real-time performance and safety constraints. According to the method, the problems of complex task dependency relationship, low transmission security, high real-time requirement and the like in a heterogeneous computing system can be solved, and the energy consumption of the system is optimized under the condition that the task dependency relationship, the real-time requirement and the security constraint are met.

The application discloses a kind of concurrent system information flow safety refinement relationship verification method and device.This method relates to computer security field, especially the verification of information flow safety refinement relationship of concurrent system.Aiming at the technical defects that traditional refinement technology cannot guarantee the security of information flow, the method abstracts concurrent system at design level and implementation level into concurrent event system, and then proves that the concurrent event system at design level and implementation level satisfies the security preserving simulation relationship.It is proved that the security preserving simulation relationship ensures that if the concurrent system at design level satisfies the security specification, the concurrent system at implementation level also satisfies the security specification.In addition, the application provides a general programming language interface, so that the method is applicable to different programming languages.The application strictly verifies the information flow safety refinement relationship of concurrent system using formal verification and machine proof technology, which can be used to prove the information security of large-scale concurrent system and prevent problems from happening.

This invention discloses a trusted dual-system architecture implementation method based on Trustzone, relating to the fields of information security and trusted computing technology. This architecture deploys a computing subsystem and a protection agent in the REE (Reliable Execution Environment), and a simplified protection system in the TEE (Trusted Execution Environment), achieving secure separation of the two execution environments through hardware isolation mechanisms. During application startup and runtime, the protection agent performs static and dynamic measurements on target files and process memory, and sends the measurement results to the TEE for integrity determination via security monitoring calls. The determination module in the TEE generates determination results based on a pre-stored trusted benchmark library and feeds them back to the protection agent, thereby controlling application execution by allowing, suspending, or terminating it. Simultaneously, the kernel monitor in the TEE periodically verifies the integrity of the REE kernel and the protection agent through a secure timer to prevent high-privilege attacks from bypassing the protection mechanism. This invention achieves decoupling of computing and protection functions without increasing hardware costs, exhibiting good security and versatility.

A PROCESSOR-IMPLEMENTED RUNTIME LAW GOVERNS AUTONOMOUS AND SEMI-AUTONOMOUS SYSTEMS BY ENFORCING PROOF-BEFORE-ACTION. EACH <=100 MS CYCLE, A DETERMINISTIC PROCESSOR OR SECURE-ELEMENT MODULE COMPUTES SAFETY METRICS INCLUDING COHERENCE, INTEGRITY, ROBUSTNESS, STABILITY, AND TIMING; FORMS A NON-COMPENSATORY RESIDUAL (GAMMA); AND PERMITS ACTUATION ONLY WHEN GAMMA=0 AND A SIGNED, METRICS-ONLY EVIDENCE RECORD COMMITS IN THE SAME CYCLE. A FEDERATED HIGH COMMISSION AGGREGATES WINDOW SUMMARIES, COMPUTES FLEET CONSISTENCY AND COHERENCE, AND ISSUES OR REVOKES SHORT-LIVED TOKENS UNDER A STRICT-AND PERMISSION RULE. THE ARCHITECTURE YIELDS MACHINE-ENFORCEABLE PROOF-COUPLED SAFETY, BOUNDED REVOCATION, PRIVACY-PRESERVING AUDIT, AND DETERMINISTIC REPLAY, CONVERTING POLICY INTO EXECUTABLE LAW FOR AUTONOMOUS AND FEDERATED AI GOVERNANCE.

The invention discloses a top-blown furnace spray gun position control method based on safety reinforcement learning. The top-blown furnace spray gun position control method comprises the following steps that S1, a state space based on multi-source data perception is constructed; s2, constructing security constraint conditions based on parameters in the state space, wherein the security constraint conditions comprise action output and state layer hard constraint; s3, designing a reward function containing security constraints; S4, training a constraint reinforcement learning agent based on S1-S3, and adjusting an instruction; s5, acquiring an adjustment instruction, and performing security verification; and S7, the verified safety action is sent to an execution mechanism, the spray gun is driven to complete position adjustment, and interaction data is stored for intelligent agent updating. Compared with the prior art, the top-blowing furnace spray gun position control method based on safety reinforcement learning has the advantage that the top-blowing furnace spray gun position control method based on multi-source data acquisition and state space limitation is provided.

The invention discloses a safety locking control method under a deep peak regulation working condition of a thermal power generating unit, and belongs to the technical field of thermal power generation automation control, and the method comprises the steps: S10, obtaining the related data of a target thermal power generating unit, and enabling the related data to comprise a record of the historical execution of safety locking control of the target thermal power generating unit, obtaining the load of a target thermal power generating unit corresponding to each record, and generating a database based on the obtained load; and S20, a set of loads with the maximum number of times of historically executing safety locking control are obtained in the database, relevant parameters related to the loads in the load set are obtained, and the relevant parameters comprise the hearth negative pressure and the combustor air-powder ratio. According to the method, the database containing the historical safety locking control records and the load data is constructed, multi-parameter correlation analysis and load change trend monitoring are carried out, accurate prediction of the load change of the thermal power generating unit and dynamic adjustment of the locking threshold value are achieved, and therefore the operation safety and stability of the thermal power generating unit under the deep peak regulation working condition are improved.

The invention discloses an STE high-speed decoding device and system for realizing autonomous and controllable domestic computing power, and solves the problems of monopoly, low decoding efficiency and poor safety controllability of an overseas computing power architecture. According to the invention, domestic hardware is used as a base, an STE high-speed decoding core unit is integrated, and based on STE coding rules and proportional philosophy, parallel layered decoding, dynamic computing power scheduling and national security level security verification are adopted, so that a decoding rate greater than or equal to 10 bit / s is realized. A special hardware instruction set is expanded at a chip end, and the ST-ALU and the cache are integrated, so that the decoding delay is greatly reduced; and the AI large model end realizes inference decoding lossless restoration and full-link credible verification, and eliminates distortion and security risks. The method is autonomous, controllable, high in speed, low in time delay, high in safety and suitable for national computing power infrastructure, AI large model deployment and high-performance computing, and the domestic computing power competitiveness and the safety guarantee capability can be remarkably improved.

The application relates to the technical field of network security protection, and particularly discloses a cloud platform network security protection scheduling system for a cloud system, which comprises a business platform layer, a business application layer, a display layer and an intrinsic safety layer; the data center, cloud edge interaction, artificial intelligence application development, application support function and basic calculation analysis are realized through the business platform layer; the global monitoring, calculation, optimization and evaluation of the power grid are satisfied through the business application layer; the cloud data security protection function is newly built based on the intrinsic safety layer; potential security threats are monitored and responded in real time; the risk of security incidents is reduced; the security of the entire cloud platform is improved; the automatic scheduling and management of security resources are realized; the work burden of operation and maintenance personnel is reduced; and the operation and maintenance efficiency is improved.

The invention discloses a program loop structure safety verification method based on optimal inductive loop invariant generation. A BII generation problem is reexpressed as a declarative constraint optimization problem. The new normal form completely bypasses the dependence on symbol abstraction and BAT, and the calculation of BAT is the most expensive step with the maximum calculation cost in the prior art. According to the method, the calculation bottleneck that a traditional method depends on expensive primitives is fundamentally solved. BII solving is carried out through a constraint solving method, and expensive BAT calculation is avoided. Experiments prove that the speed of the method is 4.9 times higher than that of the existing BAT algorithm with the best performance on average, and 86% more reference examples can be solved within 60 seconds of timeout. The high efficiency is derived from the proposed bit-level greedy refinement algorithm and key optimization strategies thereof, and the strategies can reduce the total calling times of the SMT solver by a plurality of orders of magnitude, so that the solving speed is greatly improved.

Application programming interfaces (APIs) of a software package can be separated into containers to facilitate safety assurance through isolation. For example, a computing system can receive an application request associated with the software package. The software package can include a first set of APIs that is compliant with a safety threshold and a second set of APIs that is noncompliant with the safety threshold. The computing system can determine that the application request corresponds to the first set of APIs. In response, the computing system can identify a first container that includes a first instance of the software package in which the first set of APIs is enabled and the second set of APIs is disabled. Subsequent to identifying the first container, the computing system can forward the application request to the first container that can handle the application request using the first instance of the software package.

The invention relates to the technical field of computers, and discloses an RDMA (Remote Direct Memory Access) data operation method, system and equipment, the method comprises the following steps: establishing a packaging layer by packaging an RDMA native programming API (Application Program Interface); defining a data interface of the established encapsulation layer; according to the method, the operation is executed in sequence according to the defined data interface of the encapsulation layer, the design of the encapsulation layer considers security factors, such as effective management of resources and processing of abnormal conditions, so that the potential security risk and the risk of data leakage are reduced, and the security of the application is enhanced.