3492 results about "Secure communication" patented technology

The invention discloses an archive data security integration management system, which relates to the technical field of knowledge maps and comprises an archive data acquisition module, a knowledge intelligent analysis module, a knowledge map dynamic construction module, a security situation evaluation module and a security communication center module. The data acquisition module structurally acquires metadata and operation behaviors, the intelligent analysis module dynamically governs data quality, the map construction module constructs a three-dimensional security model, the situation evaluation module quantifies security influence and generates a strategy, and the communication center module realizes dynamic identity authentication and bandwidth allocation. Through the knowledge graph technology, comprehensive integration and safety management of the archive data are achieved, the data quality and utilization efficiency are improved, dynamic evaluation and coping with safety threats are achieved, and the safety and integrity of the archive data are ensured. Meanwhile, through dynamic identity authentication and bandwidth allocation, the safety and efficiency of cross-domain communication are improved.

A federated distributed computational system enables secure oncological therapy optimization through robotic integration. The system establishes a distributed graph architecture with secure communication channels connecting computational nodes, implementing encryption protocols for cross-institutional data exchange. Each node contains processing capabilities for fluorescence-guided imaging, uncertainty quantification, and expert knowledge integration while maintaining hierarchical knowledge graphs of oncological biomarkers, interventions, and outcomes. The system coordinates domain-specific knowledge through token-space communication and implements an advanced robotic integration system for surgical interventions using spatiotemporal tumor mapping, multi-modal fluorescence imaging, surgical robot coordination, and space-time stabilized mesh management. Key capabilities include wavelength-specific multi-modal fluorescence detection, combined epistemic and aleatoric uncertainty estimation, tensor-based data integration with adaptive dimensionality control, and light cone search for adaptive treatment optimization—all while maintaining strict privacy controls.

The invention relates to the technical field of firmware protection, in particular to a firmware protection method and system based on a security coprocessor. The method comprises the following steps: acquiring characteristic data of the coprocessor; extracting hardware entropy source data according to the coprocessor feature data; generating a hardware trust root key based on the hardware entropy source data; performing partition processing on the firmware based on the hardware trust root key to obtain firmware partition data; constructing hierarchical verification structure data according to the firmware partition data; implementing firmware starting security verification based on the hierarchical verification structure data to obtain integrity verification data; establishing a secure communication channel between the processors according to the integrity verification data; executing a bidirectional authentication process based on the secure communication channel, and generating session key data; a firmware runtime environment is monitored based on the session key data. According to the method, the hardware entropy source is extracted by measuring the physical characteristics of the coprocessor, and an unforgeable hardware trust root is established, so that the security is improved fundamentally.

A system and method that authenticates and secures communications between a wireless client device and a remote network component. The system includes a gateway component that establishes a secure communications channel with the remote network component. A client device application, corresponding to the wireless client device, receives local authentication credentials from the gateway component. The client device application uses the local authentication credentials to authenticate to the remote network component. The client device application then requests an exclusive local key from the remote network component, which transmits the exclusive local key to the gateway component, which then transmits the exclusive local key to the client device application. The client device application, having the exclusive local key, requests and receives cryptographic material from the remote network component. The client device application secures communications to the remote network component with a shared secret that includes the exclusive local key received from the gateway component and the cryptographic material received from the network component.

The invention discloses an industrial equipment communication method and system based on the industrial internet, and the method comprises the following steps: S1, collecting the multi-modal data of industrial equipment, and generating a preliminary multi-modal fusion feature; s2, performing event-driven analysis on the preliminary multi-modal fusion features to generate event sensing data; s3, constructing a semantic-driven communication protocol, and generating a semantic data queue with a priority identifier; s4, compressing the semantic data queue and carrying out time consistency calibration; s5, optimizing a communication frequency and bandwidth resource allocation strategy in combination with a mixed firefly optimization algorithm and a dynamic differential evolution algorithm; s6, constructing an industrial equipment communication topology model, and predicting path delay and bandwidth occupation indexes of the communication network in combination with the space-time multi-task network; and S7, constructing a zero-sum game model to analyze the potential confrontation relationship in the communication process, and outputting a secure communication scheme. According to the invention, semantic-driven communication, a hybrid optimization algorithm and the like are adopted, and intelligent communication of industrial equipment is realized.

The invention provides a secure channel networking method based on edge computing power, and the method comprises the steps: obtaining the security parameters of a link between nodes in a network topology structure based on a selected networking strategy, including link encryption strength, an authentication mechanism and a key updating period, and combining the bandwidth and time delay of the link, obtaining an optimal secure communication route between the nodes through an edge calculation method; issuing the optimized node communication route to each edge computing node, and dynamically adjusting an authentication mechanism and a key management strategy of a secure channel between the nodes according to link security parameters including link encryption strength, a delay jitter threshold and a packet loss rate threshold; and according to the updated networking strategy, dynamically optimizing node roles and link redundancy, updating a network topology structure, and dividing edge nodes into three node function roles of computing nodes, storage nodes and forwarding nodes in combination with node computing capability, storage capacity and energy consumption level.

The invention relates to a multimedia equipment control method and system based on adaptive protocol matching. The method comprises the following steps: firstly, collecting communication protocol data and extracting features to form a protocol feature data set; secondly, performing confidence coefficient verification on a data set type identification result, and if the confidence coefficient is lower than a threshold value, extracting a depth feature through a convolutional neural network; and calling a national standard protocol adaptation conversion engine based on a classification result, converting the heterogeneous protocol into data in a unified format, and generating a secure communication data frame through national secret algorithm encryption and bidirectional identity verification. And finally, performing hash check and structured analysis on the data frame, constructing an interaction information packet in combination with user behavior characteristics, and dynamically optimizing a control strategy through real-time feedback data to generate a self-adaptive interaction control scheme. According to the method, through a technical closed loop of intelligent analysis-standard conversion-security reinforcement-closed loop optimization, the high efficiency, the intelligent level and the security performance of multimedia equipment management are remarkably improved.

Disclosed are methods and systems for secure data communication amongst computer systems. Encrypted data in a first format is accessed over a secure communication channel from a first source for a first subject. Encrypted data in a second format is accessed over a secure communication channel from a second source for the first subject. The encrypted data in the first format from the first source and in the second format from the second source is decrypted. The decrypted data in the first format from the first source and in the second format from the second source is converted to a third format. At least partly in response to the request for information from a first system, at least a portion of the data from the first source and the second source is accessed from a database The accessed data is transmitted in encrypted form to the first system.

A data-driven dynamic energy management system for the adaptive coordination of renewable and conventional energy sources, consisting of: a processing unit configured to perform real-time calculations to optimize the generation, storage, and distribution of electrical energy by continuously analyzing operational data, forecasting future energy demand, and generating control instructions to match available generation resources with forecasted consumption demand; a storage unit connected to the processing unit, configured to store records of historical energy production and consumption, environmental data, operating thresholds and learned model parameters, and to provide said data as input for the forecasting and optimization routines performed by the processing unit; a multitude of IoT-based monitoring units, each comprising at least one sensor configured to measure instantaneous parameters of generation, storage level, consumption rate and environmental conditions, with each monitoring unit being configured to periodically transmit measurement packets to the processing unit via a secure communication network; a forecasting unit implemented in the processing unit, configured to process historical and real-time data to create forecast curves for demand and generation using statistical and probabilistic forecasting techniques, and to dynamically update the weights of the forecasting model in response to observed deviations between forecasted and actual output; an optimization control unit implemented in the processing unit and configured to evaluate the outputs of the forecasting unit together with current operational data to determine a set of optimized control variables representing the target generation contribution of each energy source, and to pass these targets to a lower-level controller for execution; a controller that is communicatively connected to the processing unit and the multiple energy generation sources and is configured to regulate the operation of each source by adjusting the activation state, output level and operating priority based on the control signals received from the processing unit; an energy storage management unit comprising at least one battery array and a power conditioning circuit, configured to receive control instructions from the processing unit, store excess generated energy, release stored energy when forecasted demand exceeds available generation, and report charging and discharging characteristics in real time to the processing unit for continuous recalibration; an alarm and notification control unit connected to the processing unit, configured to continuously compare storage levels and generation reserves with stored operating thresholds, trigger predefined responses when critical or abnormal conditions are detected, and transmit acoustic, visual, and digital remote alerts to designated operators; a user interface terminal connected to the processing unit, configured to display real-time generation statistics, demand forecasts, energy storage status, and system alerts, and to accept operator-defined parameter inputs that are transmitted to the processing unit for recalibration of forecast or optimization parameters; and a secure server interface configured to synchronize operational logs, learning data, and performance indicators with a remote monitoring or analysis server for centralized monitoring, long-term data analysis, and distributed decision support.

The invention belongs to the technical field of digital information transmission, and relates to a vehicle-mounted ad hoc network security communication system and method based on an NTRU lattice cryptosystem, and the system comprises a message signature module, a message encryption module, a message decryption module, an identity authentication module, and a key exchange module. The message signature module carries out signature by utilizing a private key and a random polynomial dynamically generated by a pseudo-random number generator based on an NTRU lattice cryptosystem; the message encryption module encrypts a to-be-sent message by randomly selecting a temporary polynomial and combining a public key of a receiver; the message decryption module is used for decrypting the received ciphertext # imgabs1 # by using a private key and an inverse element # imgabs0 # of a module p of the private key; the identity authentication module is used for performing identity authentication; the key exchange module realizes secure key exchange between communication nodes in the vehicle-mounted ad hoc network through an improved Blom key distribution protocol. The system improves the security and communication efficiency of the vehicle-mounted network.

The invention discloses a privacy protection system based on federated learning, and relates to the technical field of privacy protection. The system comprises a distributed participating node cluster, wherein each participating node is configured with a local model training unit and a privacy protection module; the coordination server is connected with each participating node through a secure communication layer and comprises a model aggregation module and a dynamic trust evaluation module; the global model distribution channel is used for broadcasting the encrypted global model parameters to participating nodes; and the privacy protection module is integrated in a local participating node and comprises a homomorphic encryption engine and a local differential privacy injector. According to the method, privacy protection strength improvement, model utility optimization, system efficiency breakthrough and security boundary expansion are synchronously achieved under a federated learning framework, and an industrial-grade solution is provided for cross-domain data collaborative learning.

The invention relates to the technical field of energy storage power station combined operation and maintenance management, and provides a virtual power plant-oriented energy storage power station combined operation and maintenance management system, which comprises a dynamic sensing module for acquiring battery cluster temperature difference distribution, power converter switch transient characteristics and grid-connected point harmonic spectrum data of an energy storage power station in real time through a multi-dimensional sensor network; the collaborative decision-making module is used for dynamically generating a cross-station power interaction constraint rule based on the virtual power plant topological structure; the impedance reconstruction module adjusts the equivalent output impedance of the energy storage converter in real time according to the impedance characteristics of the power grid; the state balancing module is used for realizing charge state dynamic balance and power margin collaborative distribution among the multiple energy storage power stations; and the secure communication module is used for ensuring secure transmission of control instructions among the modules by adopting a layered encryption protocol. The operation stability, the power distribution flexibility and the equipment safety of the virtual power plant can be improved, and the service life of the energy storage equipment is prolonged.

The invention provides an Internet of Things data processing method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps that an Internet of Things device carries out the digital signature of an authentication request through employing a pre-stored private key, and generates a signed authentication request; the smart contract in the block chain network receives the signed authentication request, and the smart contract generates an authentication token including an authentication result, a validity period and an authorization level based on the historical authentication record, the credit score, the current timestamp and the challenge value; the Internet of Things equipment receives the encrypted authentication token and the intelligent contract address; the Internet of Things equipment configures own access authority and function limitation according to the authentication result, the validity period and the authorization level; and the Internet of Things equipment takes the intelligent contract address as an identity credential within the period of validity, and is used for subsequent secure communication and data exchange with other Internet of Things equipment or application programs.

A system for real-time data aggregation and analysis within an Internet of Things (IoT) network, consisting of: a multitude of IoT sensor nodes configured to collect data from multiple sources, each sensor node comprising a data acquisition unit for capturing data in real time and a local processing unit for preprocessing the captured data by performing data filtering, normalization and compression prior to transmission; a centralized aggregation server communicating with the multitude of IoT sensor nodes, the aggregation server comprising: a data aggregation module configured to receive, integrate, and synchronize pre-processed data streams from the multitude of sensor nodes, thereby enabling consolidated data storage; a timestamped metadata indexing unit coupled with the data aggregation module and configured to add metadata to each data entry, including a unique identifier, a geographic location, and a timestamp; an analysis engine integrated into the aggregation server, which includes the following: a data processing unit configured to perform real-time analysis of the aggregated data by applying pattern recognition and anomaly detection techniques and to generate processed results based on predefined parameters; a predictive analytics module that is connected to the data processing unit and configured to perform predictive modeling tasks by extrapolating trends from historical and real-time data; a communication interface connected to the aggregation server, configured to enable bidirectional data exchange with external monitoring devices, user interfaces, or remote management systems via secure communication protocols; and a dynamic load balancing unit embedded in the aggregation server, configured to dynamically distribute computing resources between the data processing unit and the predictive analytics module depending on data volume and complexity.

A federated distributed computational system enables secure collaboration across institutions for unified biological and multiomics data analysis. It comprises interconnected computational nodes managed by a central federation manager. Each node includes specialized components: a local computational engine for biological data processing, a privacy-preservation system, a knowledge integration component leveraging dynamic knowledge graphs, and a secure communication interface. The federation manager coordinates computational activities while ensuring security, privacy, legality, and contractual adherence. This architecture allows institutions, citizen scientists, and patients to collaborate on complex biological analyses without compromising sensitive data. By enabling shared computational resources and expertise, the system facilitates breakthrough discoveries while maintaining confidentiality. Additionally, it supports pro-rata or contractually defined participation in resultant benefits or knowledge, ensuring equitable collaboration.

The invention relates to a secure communication method between an edge server and terminal equipment. The secure communication method comprises the following steps: establishing a physical layer channel state information database, generating a multi-dimensional feature vector and encoding the multi-dimensional feature vector into a terminal equipment identifier, generating an identity authentication request by the terminal equipment, and performing hash operation to obtain a first hash value; the identity authentication request and the first hash value are sent to the edge server, the edge server verifies the identity authentication request and queries a corresponding device key, performs hash operation to obtain a second hash value, generates an authentication response message after successfully comparing the second hash value with the first hash value, encrypts the authentication response message by using the device key, and sends the encrypted authentication response message to the edge server; and sending the encrypted authentication response message to the terminal equipment. And the terminal equipment decrypts by using the equipment key to obtain the session key, and communicates with the edge server based on the session key. By using the physical layer channel information and the equipment hardware characteristics, the security communication method fusing dynamic identity authentication and efficient key management improves the security, reliability and anti-attack ability of communication between the edge server and the terminal equipment.

The invention discloses a block chain multi-node secure communication method for an industrial internet, and the method comprises the steps: constructing a multi-chain cooperation mechanism, and obtaining an inter-chain interaction path table; determining a task partition optimization scheme and inter-chain interaction path update data based on the inter-chain interaction path table; matching an adaptive node resource for each task according to a task partition optimization scheme; determining an encryption mechanism between a cross-chain protocol and a block chain according to the security requirement of the task; constructing a multi-level block chain node hierarchical architecture and an intra-chain and inter-chain communication architecture, and formulating a parallel communication scheduling scheme; formulating a dynamic load balancing strategy based on the node resource use condition and the task execution state; and obtaining the task execution progress and the resource use condition of each block chain node, and adjusting the task scheduling and cross-chain communication path. Through the multi-dimensional collaborative design, the execution efficiency, the resource utilization rate and the communication security of the industrial internet are remarkably improved, and the stability and the reliability in a complex multi-chain collaborative scene are ensured.

The invention belongs to the field of network security, and relates to a trusted management and control network platform construction method and device, electronic equipment and a storage medium, the method comprises the following steps: constructing a basic security architecture and a trusted base, the basic security architecture being used for providing a unified root of trust and a management core for collaborative operation of upper security components; based on the basic security architecture and the trusted base, implementing multi-dimensional trusted verification and dynamic access control; an intelligent boundary protection and depth detection system is deployed and is used for constructing an intelligent, three-dimensional and self-adaptive security defense line at the boundary of each region of the network, and various known and unknown threats can be identified and blocked; constructing a unified secure communication tunnel and a cross-domain transmission guarantee; defining and realizing a standardized security function interface and a collaboration protocol; and a continuous trust evaluation and automatic operation management and control closed loop is established. The overall security is enhanced, the secure transmission of data is ensured, the compatibility and collaboration of the system are improved, and the security operation intelligence is realized.

The invention provides an unmanned aerial vehicle cluster task collaboration method based on a block chain, and the method comprises the steps: firstly starting a first unmanned aerial vehicle, initializing an airspace network, and achieving a dynamic ad hoc network; wherein each unmanned aerial vehicle is granted with a digital certificate containing identity information and basic authority before task execution, and the validity of the certificate is verified in real time through an intelligent contract; performing situation synchronization on the unmanned aerial vehicle cluster by adopting a lightweight block chain technology; finally, in the task execution process, the unmanned aerial vehicle group automatically completes task allocation and decision making based on the intelligent contract, and meanwhile, the hash value of the key state data is subjected to uplink evidence storage; and after the task is completed, reading data analysis of the fixed evidence on the chain and generating a visual report. According to the invention, the problems of single-point failure, expansibility bottleneck, security threat and the like existing in a traditional centralized control architecture are solved, autonomous coordination, secure communication and credible evidence storage of the unmanned aerial vehicle cluster in a complex environment are realized, and the reliability, efficiency and security of task execution are greatly improved.

The invention discloses an industrial internet data security communication method based on hybrid anti-quantum cryptography, which relates to the technical field of data communication, and comprises the following steps: acquiring a key pair and an anti-quantum security certificate; sending a connection request to data receiver equipment to complete certificate credibility authentication, and sending an anti-quantum security certificate of the equipment; receiving a shared key seed sent by the data receiver equipment; decrypting the encapsulated ciphertext to obtain a shared key seed, and generating a corresponding shared key according to the same shared key generation algorithm as the data receiver equipment; the method comprises the following steps of: signing original data by using a signature private key, splicing a signature and the original data to obtain spliced data, encrypting the spliced data by using a shared key based on an AES-256-GCM algorithm to obtain an encrypted ciphertext and an ML-DSA signature, and sending the encrypted ciphertext to data receiver equipment. According to the method, the key distribution step is simplified, the signature verification calculation overhead is optimized, and the data communication efficiency is improved.

The invention provides a zero-trust access control method based on cloud side-end collaboration, which comprises the following steps of: deploying zero-trust agents on application servers of cloud, side and end layers, and collecting multi-source trust measurement index data of each layer in real time; the method comprises the following steps: encrypting data, packaging the encrypted data into a standardized data packet, transmitting the standardized data packet to a security evaluation server through a security communication protocol, after the security evaluation server receives the encrypted data packet, carrying out refined multi-dimensional security evaluation in combination with an equipment identifier and network attributes, comprehensively considering various indexes through a weighting algorithm, and carrying out other operations. According to the invention, data transmission and control among the application server, the security evaluation server, the token generation server and the gateway are realized, the security of the application server deployed on the cloud when accessing the intranet data is improved, and the problem of failure of a traditional boundary protection mode caused by network boundary fuzziness in a traditional network is solved; and a stable, safe and reliable network environment is provided for the application server to access the intranet data.

The invention discloses an RFID anti-tracking bidirectional authentication method and system based on a lightweight hash chain, and relates to the technical field of wireless radio frequency identification security. The system comprises a label initialization module, a bidirectional authentication module, an anti-tracking mechanism module, a hash chain updating module, a secure communication module and a system feedback optimization module. The label initialization module generates initial hash chain data; the bidirectional authentication module adopts a bidirectional challenge-response mechanism to generate a dynamic authentication certificate; the anti-tracking mechanism module generates an untraceable session key through Hash chain value dynamic rotation and randomization mask technology; the Hash chain updating module iteratively updates the Hash chain value; the secure communication module adopts a lightweight encryption algorithm to protect communication data; and the system feedback optimization module dynamically adjusts the hash chain length and the key strength. The real-time performance and the anti-attack capability of the RFID system are remarkably improved, and a high-safety and low-power-consumption bidirectional authentication solution is provided for Internet of Things equipment.

An AI-powered system for optimizing industrial workflows and predictive maintenance, which includes the following: a network of sensors configured to collect real-time data from industrial plants, including temperature, pressure, vibration, and energy consumption metrics; a central control unit configured to process and analyze the collected data using machine learning algorithms that continuously improve by learning from both historical and real-time data to increase prediction accuracy; a predictive maintenance module configured to analyze data to predict potential equipment failures, schedule proactive maintenance tasks, and prioritize maintenance activities based on the predicted impact of the failure and the criticality of the equipment; a workflow optimization module configured to dynamically adjust operating parameters to optimize the process flow, including the detection of inefficiencies and the suggestion of improvements in real time; an integration module configured to connect and interact with existing industrial control systems and ERP (Enterprise Resource Planning) software to ensure a seamless flow of data between the platforms; a user interface configured to visualize data in real time, provide alerts and customizable dashboards, and is accessible via desktop and mobile devices for remote monitoring and management; an alarm and notification module configured to deliver critical alarms and maintenance notifications via email, SMS and in-app notifications to ensure a timely response; a cloud-based architecture configured to facilitate scalable data storage, remote access, and management across multiple industrial sites; a reporting module configured to generate comprehensive reports on plant performance, maintenance history, and workflow efficiency for analysis and decision-making; A security protocol to protect data integrity and ensure secure communication between all system components.

Systems and methods for the generation and use of session keys supporting secure communications between a client and server device are disclosed. The client hashes each of a series of passwords a first number of times. The hashed passwords are sent to a server. The server applies the hashed password to an array of PUF devices, and receives an initial response bitstream which is stored. The client later hashes each of the series of passwords a second number of times, which is less than the first number, and these are sent to the server. The server continues to hash the second message digest, generate PUF responses, and compare the result to the initially stored responses. For each password, the number of hashes necessary to achieve a match is a partial session key. Latency is improved by an array of separately addressable PUFs, each producing a partial session key.

The invention discloses an intelligent power grid operation and maintenance system based on federated learning and edge calculation, and the system comprises an intelligent electric meter enhancement module which is disposed at a power grid monitoring node and is used for collecting electric energy quality parameters and environment data in real time; the edge calculation layer is used for carrying out data preprocessing, power quality parameter anomaly detection and building a federated learning model; the secure communication framework is used for establishing a hybrid communication network and multi-level security protection, carrying out routing decision and carrying out encrypted transmission on interactive data among the modules; and the end analysis platform is used for integrating the multi-source heterogeneous data of the power grid, predicting the state of the power grid and generating a maintenance plan. According to the invention, comprehensive monitoring and predictive maintenance of the operation state of the power grid are realized.

Various embodiments described herein generally relate to a method and system for secure distribution of symmetric encryption keys using quantum key distribution (QKD). In at least one embodiment, there is provided a method for secure communication, comprising: establishing one or more secure keys at a first and second ground station using a quantum key distribution (QKD) protocol; transmitting from the first station to the second station a plurality of encryption keys, wherein the transmitting comprises: encrypting, at the first station, the plurality of encryption keys using at least one of the one or more of secure keys to generate an encrypted batch of keys; transmitting the encrypted batch of keys to the second station; and decrypting, at the second station, the encrypted batch of keys using the at least one secure key to access the plurality of encryption keys.

A secure communication method includes receiving, by a first network element, first information and a first signature from a network management network element. The first signature is generated based on a private key of the network management network element and the first information, and the first information is used to describe the first network element. The method also includes sending, by the first network element, the first information and the first signature to a certificate issuing network element. The first information is used to obtain a first certificate, and the first certificate is used to prove an identity of the first network element. The method further includes receiving, by the first network element, the first certificate from the certificate issuing network element.

A method of secure communication is provided. The method can include receiving a message from a first endpoint according to a first communication protocol, translating the message from the first communication protocol to a second communication protocol, and transmitting the message via a communication mode according to the second communication protocol. The method can further include translating the message from the second communication protocol to a third communication protocol and sending the message to a second endpoint according to the third communication protocol.

The invention relates to the technical field of mine network safety operation, in particular to a mine network safety operation system, which comprises a data acquisition and preprocessing module, the data acquisition and preprocessing module acquires various equipment and sensor data of a mine network, and the data quality is improved through denoising of an auto-encoder and processing of a Gaussian mixture model; the threat detection and intelligent analysis module adopts a DCNN and RL combined model and can accurately monitor attack behaviors; the defense strategy generation and response module generates and adjusts a defense strategy in real time according to an attack type and a network state by means of a hybrid reinforcement learning and genetic algorithm; the quantum encryption and secure communication module encrypts transmission data by using a QKD technology to ensure the security of the transmission data; and the event response and recovery module quickly responds to the security event and recovers the system through a self-adaptive algorithm. According to the invention, mine network security challenges are effectively handled, security is comprehensively improved, mine production continuity is ensured, and reliable guarantee is provided for mine network security operation.

The invention relates to a secure communication method for an edge node and terminal equipment based on dynamic key negotiation. The method comprises the following steps: the terminal equipment sends an initial signal when initiating a communication request; the edge node generates a scenarized first key negotiation parameter and feeds back the scenarized first key negotiation parameter after passing dual identity and state verification; after the terminal device decrypts the parameter, a dynamic entropy value is collected by combining a network adaptive sensor, and a second key negotiation parameter associated with the first parameter feature is generated; the two parties calculate session keys based on an ECDH algorithm, and the consistency of the keys is ensured through dynamic entropy verification and Hash comparison; and after the key negotiation succeeds, entering a hierarchical encrypted data transmission stage, and dynamically updating a session key based on a multi-dimensional trigger mechanism. According to the method, through hardware credibility verification, a scenarized key strategy, dynamic entropy enhancement and national secret algorithm adaptation, dynamic management of keys and adaptive matching of terminal resources are achieved, attacks such as equipment counterfeiting and parameter tampering are effectively resisted, and the high-security and compliance requirements in the fields of industrial control and the like are met.