240 results about "Secure channel" patented technology

The invention discloses a path planning and hierarchical cooperative control method and system for an unmanned aerial vehicle cluster. The system comprises a path planning module and a formation motion control module. The method comprises the steps that firstly, an improved RRT * algorithm is adopted by a path planning module, through a multi-strategy heuristic node expansion mechanism fusing target bias and artificial potential field guidance and comprehensively considering path length, channel volume and Z-axis height change, a center path and a three-dimensional safe channel which take into account safety and smoothness are planned for an unmanned aerial vehicle cluster; and then, based on the central path, the formation motion control module adopts a distributed model prediction control framework, designs different optimization targets for a navigator and a follower, and solves an optimal control instruction on line, so that a cluster is guided to complete trajectory tracking, collision avoidance among individuals and self-adaptive formation reconstruction in a secure channel. According to the invention, the navigation problem of the unmanned aerial vehicle cluster in a complex obstacle environment is solved, and the path planning efficiency and the robustness of cooperative control are improved.

The invention provides a visualization system capable of synchronously displaying multiple types of data according to time. Comprising a distributed service cluster composed of a micro-service, a user management micro-service, a data transmission micro-service, a data storage management micro-service, a data extraction micro-service, a data visualization display micro-service, a data visualization template management micro-service and a resource monitoring micro-service; the micro-services are packaged in a containerized manner and interact by adopting a lightweight communication protocol, and automatic deployment and dynamic expansion are realized through a container arrangement tool; the system is provided with a basic parameter set with customizable micro-service configuration and a graphical configuration interface which are used for cooperatively generating a system operation environment configuration strategy. The user management micro-service establishes a multi-dimensional authority system based on a role access control model, and records an operation log to realize audit tracking; the data transmission micro-service integrates a plurality of heterogeneous data access modes, carries out transmission process verification and carries out secure channel transmission through the service gateway.

The invention discloses a multi-communication group fusion holding method and system for an intelligent door lock, and the method comprises the steps: building an independent multicast tree taking a feature vector as an identifier according to a communication group request initiated by each main control door lock; generating a multicast message containing a target communication group feature vector and a digital signature according to a merging request sent by the first master control door lock; according to feature vectors exchanged by the master control door locks of the two parties through a secure channel, a target master control door lock initiates feature interception registration, and negotiates and establishes a boundary feature tag rewriting rule; and according to the established forwarding path and the rewriting rule, the audio and video streams of the communication groups of the two parties are subjected to feature tag rewriting through the network boundary router, and then bidirectional intercommunication is realized. By utilizing the embodiment of the invention, the dynamic security isolation and seamless fusion of multiple communication groups can be realized, the network load and transmission delay are reduced, meanwhile, the terminal door lock can realize audio and video intercommunication without sensing the network address of the opposite end or changing the configuration, and the expansibility, the security and the user experience of the system are improved.

The invention discloses a door lock communication group decomposition method and system, and the method comprises the steps: encrypting and issuing a sub-feature vector to a local storage of a corresponding member door lock through a secure channel according to the sub-feature vector generated by a main control door lock and a binding relation between the sub-feature vector and the member door lock; generating a multicast message containing a target subgroup feature vector and a digital signature according to a splitting request sent by a main control door lock; according to the result of querying the local ARP table and the subgroup registry by the multicast router, determining the subgroup to which the door lock connected with each interface belongs, and registering the corresponding sub-feature vector for the corresponding interface in the multicast forwarding table; and according to a detection message sent by each sub-group master control door lock and a confirmation message of a member door lock, the multicast router identifies and removes sub-feature vector registration of an interface which is not associated with an effective door lock, and communication group decomposition is completed. By utilizing the embodiment of the invention, safe, reliable and interface-level refined door lock group decomposition can be realized, and the splitting efficiency and the communication safety are improved.

The invention relates to the technical field of distributed response, in particular to a distributed message dynamic response method based on websocket. The method comprises the following steps: constructing a distributed message service cluster to configure a websocket communication module, message middleware and a client for each service node, and providing a unified service access point to the outside through an Nginx load balancer, so as to automatically register and subscribe a global control theme to the message middleware and form a hierarchical theme subscription structure; when the client initiates a connection request, the connection is distributed and a secure channel is established; the client sends a service request message, packages the service request message into a standardized message format, and associates session information of the client at the same time; and receiving the session message, performing intelligent filtering, generating a response result, and pushing the response result to the client in real time. According to the invention, efficient processing and real-time response of messages in a distributed environment can be realized.

The invention belongs to the technical field of single-chip microcomputers, and particularly relates to a remote monitoring system based on a single-chip microcomputer and a control method thereof. The system comprises a single-chip microcomputer, a sensor acquisition unit, a wireless communication unit and an execution mechanism. When a single-chip microcomputer, a sensor acquisition unit and a system are initialized, a wireless communication unit and an execution mechanism are sequentially powered on, after the single-chip microcomputer completes hardware self-inspection, a handshake instruction is sent to the wireless communication unit, a secure channel with a remote control terminal is established, and after handshake is completed, the single-chip microcomputer writes in a unique identity identification code and enters a standby state; the single-chip microcomputer polls the sensor acquisition unit according to a preset sampling period to obtain an original data frame; the remote control terminal analyzes the error correction compressed data block, generates a control instruction according to a threshold strategy and returns the control instruction; the single-chip microcomputer receives the control instruction, then drives the execution mechanism to act, and records an execution state log. The method has the advantages of being high in communication efficiency, high in link fault-tolerant capability and fast in remote control response.

The invention discloses a cross-industry data sharing method and system using a trusted data space, and relates to the technical field of data sharing, and the method comprises the steps: obtaining a cross-industry data dimension relation; obtaining a sharing request, and carrying out dimension migration analysis on the sharing request to obtain a dimension migration path set; according to the dimension migration path set, adaptive reorganization operation is executed on the to-be-shared data, and reorganized shared data is obtained; according to the cross-industry data dimension relationship and the dimension migration path set, performing cross-industry confidence evaluation on the recombined shared data to generate a shared decision result; and performing data sharing on the recombined shared data through a secure channel of the trusted data space. The technical problems that existing cross-industry data sharing is difficult, and data resources are wasted are solved.

The invention relates to the technical field of block chain data sharing, and discloses a student psychological assessment data sharing method and system based on a block chain. The method comprises the following steps: when a user logs in through a browser client, a system triggers a zero-knowledge proof generation process; and the client signs the timestamp and the random number by using a local false identity private key to form a zero-knowledge proof request packet, and submits the zero-knowledge proof request packet to the alliance chain node through a secure channel. And the node calls an identity verification contract to verify the signature, generates a session token containing a role type and a validity period after the signature passes, writes the token in an alliance chain account book in a hash manner and returns the token to the client. The client encrypts and stores the token, and a subsequent data request is carried through an HTTP header; and when it is detected that the token is expired or abnormal, the client automatically re-triggers the zero-knowledge proof process. The method depends on the block chain and zero knowledge proof technology, optimizes identity verification and session management, guarantees data sharing safety, compliance and stability, and is suitable for student psychological assessment data sharing among multiple subjects.

The invention relates to the technical field of data transmission, and discloses a gas meter information secure transmission method based on response function compensation, which comprises the following steps: collecting multi-source data and network signal quality information of a gas meter; according to a real-time network environment and physical conditions, data transmission parameters are dynamically adjusted through a response function compensation algorithm, when data transmission in a static time slot fails, a dynamic retransmission time slot is automatically allocated for retransmission, a retransmission frequency threshold value is set, and packet loss caused by channel errors or collision is compensated through a retransmission response function; a multi-layer encryption mechanism is adopted to encrypt transmission data, an optimal transmission channel is intelligently selected according to network conditions, adaptive hybrid communication is performed through star flash short-distance communication or Wi-Fi wide-area transmission, and a response compensation mechanism of multi-dimensional environmental parameters is established based on a signal transmission model; transmitting the encrypted data to a monitoring management platform through a secure channel; therefore, safety early warning decision is realized, and dynamic accurate transmission and active safety protection are realized.

The invention discloses a risk management and control method for cross-domain interaction of power data. The method comprises the following steps: deploying a pre-trained sensitive information identification model at a data exit gateway to identify a sensitive information type and a risk level; dynamically matching a desensitization strategy according to the risk level, and executing hierarchical desensitization operation; performing attribute-based encryption operation on a core field of the desensitized data, wherein an access attribute of a receiver is defined by a logic combination of a role attribute and a domain attribute; data are transmitted through a cross-domain secure channel based on a block chain, and decryption can be performed only when and only when a private key binding attribute set of a receiving party meets a logic combination access strategy predefined by a sender. According to the method disclosed by the invention, the risk of sensitive information leakage in cross-domain interaction of the power data is solved, hierarchical protection, dynamic access control and transmission integrity verification of the sensitive data are realized, and the security of data sharing of the power system is remarkably improved.

Trusted execution environment microservice debugging is provided. A debug operation is performed on a microservice running in the trusted execution environment utilizing a debugger server within a trusted execution environment based on a set of microservice debug messages received from a client device of a user. A microservice debug result of performing the debug operation on the microservice running in the trusted execution environment is sent to a debugger client within a privilege separation container outside the trusted execution environment via a secure channel between a privilege separation secure channel client within the trusted execution environment and a privilege separation secure channel server within the privilege separation container outside the trusted execution environment utilizing the debugger server. The microservice debug result of performing the debug operation on the microservice running in the trusted execution environment is sent to the client device of the user utilizing the debugger client.

The invention discloses a cloud instance privacy security enhancement method based on security channel dynamic measurement, and the method comprises the steps: building a secure and credible communication channel through a secure communication client, and connecting the communication channel to a local user side through the Internet; a local user side deploys a TPCM secure communication module which is responsible for secure communication with the multi-cloud service rental instance. And the trusted software base is responsible for maintaining a measurement strategy and performing measurement judgment and control when a user process runs in the cloud service lease instance. The system specifically comprises a judgment mechanism module, a control mechanism module, a measurement mechanism module and a credible reference library. On the premise that infrastructures of cloud service providers are not trusted, in order to achieve safety and credibility of user remote cloud service lease instance data and application during operation and privacy protection of users, a measurement agent and a safety communication client are deployed in a cloud service lease instance; meanwhile, the tenant can perform deep monitoring on the process in the cloud instance, and it is ensured that sensitive information such as a monitoring strategy and reference data is not exposed to a cloud service provider.

In an embodiment, a method includes receiving a data packet and generating an optimized security tag based on a standard security tag by replacing an 8-byte optional secure channel identifier (SCI) of the standard security tag with 32 most significant bits of a 4 packet number, a 2-byte MAC Security Entities (SecY) engine identifier, and a 2-byte short SCI. The method further includes encrypting the data packet and transmitting the encrypted data packet comprising the optimized security tag to an electronic device.

An example operation includes one or more of establishing a secure channel between a host platform and a vehicle based on a transport layer security (TLS) handshake between the host platform and the vehicle, downloading an authorization code to the vehicle through the secure channel between the host platform and the vehicle, receiving the authorization code from a mobile application installed on a mobile device, generating a mobile application certificate for the mobile device and transmitting the mobile application certificate to the mobile application on the mobile device, and establishing a secure connection between the host platform and the mobile application on the mobile device based on the mobile application certificate.

The invention discloses a lightweight identity authentication and data security interaction method, system, equipment and medium for a protection measurement and control device, and relates to the technical field of power system information security. The method comprises the steps that the protection measurement and control device and an edge gateway carry out bidirectional identity authentication based on a preset shared master key and random numbers generated by the protection measurement and control device and the edge gateway; after the authentication succeeds, the two parties derive a session key of the communication based on the random number; between the protection measurement and control device and the edge gateway, service data is encrypted by using a session key, an integrity check code is generated, and a security data message is constructed for transmission; the receiver performs integrity verification and decryption on the security data message to obtain plaintext data; and receiving a key updating instruction from the cloud based on the secure channel, and performing secure updating on a preset shared master key. According to the invention, a mechanism of combining the pre-shared master key with the dynamic session key is adopted, so that the complex certificate chain verification overhead of a PKI system is avoided.

The invention relates to the technical field of vehicles, in particular to an OTA upgrading method and related equipment based on dynamic security and credibility verification, and the method comprises the steps: a cloud end obtains an original upgrading package, dynamically fragments the original upgrading package, and outputs an upgrading file; a secure channel is established between the vehicle end and the cloud end, and the upgrade file is downloaded through the secure channel and temporarily stored; the vehicle end triggers TEE intervention, credibility verification is carried out on the upgrade file, and after verification is passed, fragmented data is decrypted and recombined into a complete upgrade package; installing the recombined upgrade package to a vehicle end, and triggering a rollback process based on backup mirror image hash verification when the installation fails; according to the invention, the safety and reliability of vehicle OTA upgrading can be improved.

The invention discloses a secure closed-loop circulation and physical output control method and system for an oversized raster image. The method comprises the following steps: a client adaptively calculates fragmentation granularity according to a network state, fragments an image and encrypts and transmits the image; the server performs secondary encryption and distributed storage on the received data; the preview end constructs a multi-resolution hierarchy based on a viewport mapping technology, only extracts visual slices and superposes watermarks, and transmits the visual slices and the watermarks to a client memory for zero-cache rendering; and the printing end constructs a secure channel bound with a hardware fingerprint, carries out streaming decryption on the data, embeds traceability information, and injects a printing drive in real time. According to the method, the problems of unstable GB-level image transmission and unsmooth preview are solved, and high-efficiency circulation and strict protection of design assets are realized through full-process data non-landing streaming control.

The invention belongs to the field of data transmission of wind power plants, and particularly discloses a secure data transmission method and system for a wind power plant, and the method comprises the steps: firstly obtaining wind speed, wind direction and other wind power plant parameters, grouping the parameters in sequence, mining a data sequence dependency relationship by means of an optimized long-short-term memory network, and extracting a feature vector; associating and integrating the equipment space and the operation relationship into a feature matrix; constructing a multi-dimensional data encryption model based on multiple dimensions of parameters, and encrypting the feature matrix by adopting a dynamic key generation mechanism; and establishing a secure channel to transmit encrypted data through a self-adaptive routing selection strategy based on a link state, and restoring the data by a receiving end by using a corresponding key and a decryption algorithm. The system is composed of a parameter acquisition unit, a data grouping unit and other eight units, all the units work cooperatively, the safety guarantee of the whole process of wind power plant data from acquisition and encryption processing to safe transmission and decryption reduction is achieved, and the data transmission safety and reliability are effectively improved.

The invention provides a ship loading method based on a multi-intelligent optimization algorithm, and relates to the technical field of shipping loading optimization, and the method comprises the following steps: S1, stowage request receiving and data preprocessing: receiving a stowage request and carrying out data processing on ship parameters, cargo information and loading rules; s2, deck virtual area division and functional area mapping: dynamically dividing a deck into a plurality of functional sub-areas according to loading rules and cargo attributes; s3, region-level multi-algorithm collaborative loading: for each sub-region, dynamically matching based on region characteristics and cooperatively executing at least two different types of intelligent optimization algorithms to carry out cargo loading; s4, performing global scheme verification and dynamic fine adjustment, including summarizing loading schemes of each sub-region, and performing global weight balance and security channel connectivity verification; and S5, outputting and visualizing a loading result. According to the method, multiple constraint conditions can be automatically processed, the optimization strategy is dynamically matched, and global optimization is realized.

The invention discloses an intelligent gateway control method based on edge computing, and the method comprises the steps: S1, collecting the operation state data of network nodes through a distributed sensor, carrying out the filtering, denoising and normalization processing, sorting according to a timestamp, and generating the preprocessing data containing network flow, node load and response time delay; s2, calculating the resource demand quantity of each node based on the preprocessed data, executing a dynamic resource allocation algorithm in combination with the available resource state of the node, and generating a resource allocation result containing a calculation resource quota and a task allocation relationship; s3, inputting a resource allocation result into a gateway control model, adjusting model parameters based on a real-time network state, and generating a control strategy; and S4, encoding the control strategy into an instruction sequence, encrypting the instruction sequence through a digital signature, transmitting the encrypted instruction sequence to an execution unit through a secure channel, and executing a control instruction after verifying integrity and signature validity. Therefore, dynamic resource allocation, real-time network state adjustment and security instruction transmission are realized.

Aspects of the disclosure relate to a collaborative verified user platform using distributed ledger technology. A collaborative verified user platform may receive user information from a first user device. The platform may store the user information to a distributed ledger. The platform may update the distributed ledger based on one or more changes to the user information. The platform may receive a request to access the user information. The platform may determine whether to grant access to the user information based on one or more permissions. The platform may establish a secure channel between a first user device and a second user device. The platform may process secure requests associated with a venture corresponding to both the first user device and to the second user device. The platform may detect a permission violation. The platform may initiate one or more security actions based on the permission violation.

The invention relates to an AI auxiliary diagnosis method and device based on text processing, equipment and a medium. The method comprises the following steps: acquiring medical text data, constructing a secure channel based on data characteristics to generate a data load, processing the data load through an encryption algorithm, sending the data load to a target interface, and analyzing response data to obtain an original medical text set; cleaning the original set by adopting a multilayer regular filtering system of a text processing engine, inputting a semantic analysis model to calculate a feature association value, generating a semantic classification tag when the feature association value accords with a preset threshold value, constructing a classification index database, and extracting potential semantic association features to obtain an extended semantic feature set; and finally, classifying and marking the extended feature set, arranging and determining a content structure through a layered content organizer, and dynamically updating and generating a final output document. By adopting the method, the security of data transmission and storage can be ensured, the specialty of medical text cleaning and semantic analysis is improved, and automatic conversion from semantics to document structures is realized.

The invention discloses a DDS Security certificate secure creation and deployment method, which comprises the following steps of: initializing a certificate management service (CMS), establishing a secure channel with a trusted execution environment (TEE), and loading a preset DDS identity CA root certificate from the TEE; an application package manager APM analyzes the application configuration information, carries an application identity ID, and initiates a certificate creation request to a CMS; the CMS constructs certificate information, and sends a certificate creation request carrying the certificate information and an application identity (ID) to the trusted execution environment; public and private keys are generated in the TEE, a certificate is created and signed, and the created application identity certificate is returned to the CMS; the certificate management service verifies and stores the certificate, and returns an identity certificate and a CA root certificate to the APM; and the APM installs the identity certificate to a specified folder of the application installation directory. According to the invention, the establishment and deployment of the identity certificate are realized based on the CMS and the TEE, the certificate management process is simplified, and the deployment efficiency is improved.

The invention relates to an end-side cloud cooperative driven Internet of Things service data management method, and relates to the technical field of computer processing, and the method comprises the following steps: S01, configuring a data preprocessing rule and an analysis strategy at a cloud management platform, and publishing a data management strategy packet to a cloud strategy library; s02, the cloud management platform dynamically issues the data management strategy packet to a specified edge node according to the type of an end side device and the load state of the edge node; s03, the edge node and the cloud management platform establish a secure channel, and metadata indexes and preprocessing rules in a cloud strategy library are synchronized; and S04, the edge node collects the original data of the end side equipment in real time. According to the invention, based on an end-side cloud three-layer dynamic collaborative architecture, through edge lightweight real-time processing and cloud global intelligent analysis, the transmission efficiency, resource utilization rate and decision intelligence of data management of the Internet of Things are realized.

Techniques described herein can allocate respective unique secure channel identifiers (SCIs) to respective uplink encryptor interfaces which provide intersite connectivity over multipathing internet protocol (IP) networks between a first data center site and a second data center site. A respective uplink encryptor interface can then use the unique SCI allocated thereto, along with a packet number counter value to encrypt and generate an integrity check value for at least a portion of a packet. The encryption can comprise using the SCI and the packet number counter value to generate a unique packet initialization vector for the packet, which is then used to encrypt and integrity protect the packet. The respective uplink encryptor interface can send the encrypted packet via a tunnel to a second data center site via a secure communication channel spanning across multiple encryptors and multiple decryptors. The encrypted packet can be decrypted at the second data center site and forwarded along to its destination within the second data center site.

The invention relates to a Keystone-based deep ground security heterogeneous data fusion method and system, and the method comprises the steps: deploying a Keystone trusted execution environment on a deep ground edge computing node, creating a security enclave, carrying out the encryption access of multi-source heterogeneous data on the basis of remote authentication and key agreement, completing the space-time alignment and feature extraction after decryption in the enclave, and carrying out the fusion of the multi-source heterogeneous data. And performing cross-modal association analysis and risk assessment based on a preset model or a rule engine to obtain a fusion result, encrypting and signing the fusion result in the enclave, distributing the fusion result to an authorized receiver through a secure channel, and realizing one-time task destruction, long-term task cycle reconstruction and key refreshing in combination with enclave full life cycle management. According to the method, the credibility and the real-time performance of heterogeneous data fusion processing in a complex scene can be improved while the confidentiality and the integrity of deep operation and maintenance data are guaranteed.

The utility model discloses a security channel entrance guard, and relates to the technical field of security channels. The safety channel entrance guard comprises gate machines, a protection assembly and a flow dividing assembly, the tops of the gate machines are fixedly connected with face recognition equipment, the number of the gate machines is two, the gate machines are oppositely arranged, the protection assembly is located on the gate machines, the protection assembly comprises winding equipment, an elastic net, a clamping plate, a mounting rod and a connecting belt, the winding equipment is fixedly mounted on one group of gate machines, and the elastic net is fixedly mounted on the other group of gate machines. The elastic net winding device is installed in the winding device, and the flow dividing assembly is also located on the gate. The gate can be protected, through the arrangement of the elastic net, a layer of additional protection is provided, interference of the external environment to the gate and access control equipment is prevented, the elastic net can provide physical isolation, the equipment is protected against damage, unintentional or intentional collision of pedestrians can be effectively reduced, and the safety of the gate is improved. The equipment is prevented from being damaged due to misoperation or overuse, and the service life of the equipment is prolonged.

The invention belongs to the field of remote management and control, and discloses a remote login and control method and system based on a virtual serial port and an MQTT protocol, and the method comprises the steps: building a safety publishing and subscribing data channel with a pseudo terminal APP through the MQTT protocol based on a unique code and a national secret algorithm of a remote device, generating a working key, and carrying out the data interaction through the key, and meanwhile, a control command and response data are transmitted between the data transfer service and the terminal simulator by utilizing a pre-created virtual serial port, so that remote login and control are realized. The unique code ensures the uniqueness of the equipment identity, and illegal access is prevented; a national cryptographic algorithm such as SM2 replaces traditional RSA, and encryption efficiency and safety balance are optimized; a working key and a secure channel mechanism guarantee data transmission confidentiality; the virtual serial port integrates a terminal access process, and supports potential user authentication and an authority control layer.

The invention relates to a chip credibility authentication method and device based on multichannel isolation concurrent protection, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a credible authentication request sent by external equipment, and generating a plurality of subtasks according to the credible authentication request; distributing each sub-task to each secure channel, and executing the sub-task in each secure channel to obtain an execution result corresponding to each secure channel; encrypting each execution result according to a post quantum cryptographic algorithm to obtain a plurality of encrypted execution results; and verifying each encryption execution result to obtain a verification result, and performing joint signature fusion on each encryption execution result under the condition that each verification result passes verification to obtain a credible authentication result. By adopting the method, the security of the chip can be improved.

This application discloses a privacy-aware and data de-identification system and method for unmanned aerial vehicles (UAVs). The system includes an airborne edge computing unit, multi-source sensors, a dual-channel data processor, a security encryption and transmission module, and a policy management interface. It is implemented through three parallel pipelines: a real-time privacy-aware pipeline uses a lightweight neural network to detect sensitive targets such as faces and license plates and outputs bounding boxes; a dynamic and precise de-identification pipeline calls a policy library to perform context-aware de-identification on the target area; and a dual-stream split-path controllable transmission pipeline transmits the de-identified data stream to the business platform in real time via a public network, while simultaneously transmitting the encrypted original data stream to a trusted data port through an independent secure channel.