510 results about "Secure transmission" patented technology

The invention relates to the technical field of data encryption and transmission, in particular to a power grid cross-domain operation and maintenance data secure transmission method and system based on encryption, and the method comprises the steps: pre-judging a current risk through a historical network security event, dividing a network environment into different risk intervals based on a risk level evaluation value, encryption strategies with different intensities are correspondingly matched, so that refined security management and control with higher risk and stronger protection are realized; a triple progressive identity authentication system of an equipment layer, a dynamic layer and a biological layer is constructed, a dynamic permission management and control mechanism driven by identity attributes and risk levels is constructed, a basic permission boundary is determined based on inherent identity attributes of an operation and maintenance terminal, and permission strength and validity period are dynamically adjusted in combination with a risk level evaluation value. And finally, generating an access control strategy only adapted to the current terminal, the current risk and the current access request, so as to perform data encryption and transmission through the target encryption strategy and the access control strategy, thereby ensuring the security of data transmission.

The invention relates to the technical field of audio and video transmission, in particular to an internal and external network audio and video secure transmission method and system based on a cloud platform. By combining the load balancing technology with the real-time load state and the audio and video stream characteristics of the cloud platform, the encrypted traffic can be dynamically distributed to a plurality of back-end servers, and the calculation overhead in the encryption process can be effectively reduced through selection of the lightweight asymmetric encryption algorithm and the optimized key exchange process; in a handshake stage, by optimizing a key negotiation process and adjusting a key exchange process according to segmentation characteristics, the execution efficiency of a protocol is further improved, and by dynamically adjusting the execution opportunity of encryption operation, it is ensured that the encryption operation is executed at a proper opportunity, and the encryption efficiency is improved. By monitoring and adjusting the load distribution strategy and the encryption parameters in real time, the system operation mode can be dynamically adjusted according to the distortion degree and the transmission state of the audio and video streams, and the distortion degree of the audio and video streams is effectively reduced.

The invention discloses a cloud-side collaborative household arrhythmia early warning AI agent, and relates to the technical field of AI agents. The system specifically comprises a data acquisition module, an edge computing module, a cloud computing module, an application module and a safety guarantee module, the data acquisition module acquires electrocardio and related physiological signals in real time through wearable equipment, and the edge computing module performs preprocessing and preliminary anomaly detection on data, quickly responds and screens key data and uploads the key data to a cloud; the cloud computing module carries out deep analysis and personalized model training; the application module converts a cloud result into real-time early warning and health suggestions and pushes the real-time early warning and health suggestions to the user and medical personnel; the security guarantee module runs through the whole process, and ensures the privacy and security of data in acquisition, transmission, storage and application. According to the invention, data processing is scientific and efficient, data can be comprehensively collected and preprocessed, meanwhile, real-time preliminary screening and secure transmission are realized, and the transmission pressure and privacy risk are reduced.

A method for authenticating an application program interface (API) invoker enhances secure communication between API invokers and a Common Application Program Interface Framework (CAPIF). The method involves sending authentication information from the API invoker to the CAPIF function, which authenticates the invoker's identity. The process includes obtaining enrollment information to establish a secure transport layer security (TLS) connection with the CAPIF function. Advanced authentication mechanisms leverage an authentication and key management for applications (AKMA) anchor key, enabling secure derivation and verification of application function keys (KAF). Additionally, the CAPIF function uses received authentication data to retrieve API invoker configuration information, onboard signing keys, and certificates. These elements facilitate secure API access and interaction while ensuring compliance with authentication protocols.

The invention discloses a channel security transmission method for protecting data privacy of an edge gateway of the Internet of Things, and relates to the technical field of security and privacy protection of the Internet of Things, and the method comprises the steps: constructing an edge gateway security architecture, generating a quantum key through a QKD module based on the constructed edge gateway security architecture, and generating sensitivity data through an IPS vNSF; calculating noise based on the sensitivity data, generating disturbance data based on the noise, calculating a shared key, generating an encryption key in combination with the quantum key and the shared key, segmenting the encryption key through Shamir secret sharing, and encrypting and decrypting the key; encrypting the noise by using the decrypted key, generating global noise based on the encrypted noise, and calculating secondary disturbance data based on the global noise; and generating coded data based on the secondary disturbance data, and generating reconstruction data based on the coded data. According to the invention, the comprehensive security authority of the edge gateway in the aspects of key security and privacy protection intensity is improved.

The invention relates to the technical field of network data security, in particular to a power fgOTN power low-delay secure transmission method. Obtaining a service bearing network topology and link transmission parameters, and constructing a network connection matrix; simulating a flow redistribution process after a fault of a single node, and calculating a topology betweenness centrality index of the substation node; the method comprises the following steps: analyzing payload contents of power business data frames at a fgOTN mapping preceding stage, extracting continuous monitoring features and discrete control features, and calculating a real-time business criticality index of each data frame in combination with a frequency deviation and a voltage fluctuation state of a current network; establishing a two-dimensional decision matrix, and generating a defense strategy according to mapping positions of the topological betweenness centrality index and the criticality index value in the matrix; processing the service data according to the generated defense strategy, and mapping the service data to a fine granularity time slot of the fgOTN; and embedding a security state signaling in the frame overhead, and sending the security state signaling to opposite-end equipment through an optical transmission unit.

The invention relates to the technical field of internet-of-things encryption, in particular to a logistics in-transit data secure transmission system, which comprises a trajectory hash presetting module used for extracting longitude and latitude dotting data according to a logistics transportation plan, arranging the longitude and latitude dotting data according to a time sequence to generate a predetermined trajectory coordinate sequence, and transmitting the predetermined trajectory coordinate sequence to a database; and performing iterative hash operation on the predetermined track coordinate sequence in combination with a time slice index, and storing a check value output by the operation as a reference hash check chain. According to the method, the real-time reliability of each network node can be quantified, so that the evaluation result focuses on the recent behavior performance, finally, the low-trust node is moved out of the routing topology according to the dynamic score, and a safe and purified transmission link is actively constructed; according to the whole set of processing flow, security reinforcement is carried out on a path from a key generation source to data transmission, so that the confidentiality of data content is ensured, and the availability and integrity of data transmission are ensured by dynamically cleaning network infrastructures.

The present disclosure provides a method for secure message encryption and decryption using witness encryption. The method includes generating a master public key and a master secret key, generating common reference strings for a non-interactive zero-knowledge (NIZK) proof system and a commitment scheme, creating commitments using random values, and setting the master public and secret keys. A function key is generated by creating a dummy function tag and a NIZK proof. Message encryption involves generating a dummy input tag and creating a witness encryption ciphertext. The encrypted output includes attributes, the dummy input tag, and the witness encryption ciphertext. Decryption is performed using the function key and a witness decryption algorithm. The method enables secure message transmission with confidentiality and integrity throughout the encryption and decryption phases.

The invention provides a zero-trust-based dynamic data secure transmission and processing channel construction device and method, and the method comprises the steps: S1, collecting to-be-transmitted data, and classifying the data to obtain a data classification result; s2, based on the data classification result, the user identity information and the environmental risk information, a dynamic security policy is generated, and the dynamic security policy comprises an encryption algorithm selection rule, a trust evaluation threshold and a data operation authority policy; according to the invention, the fine-grained security policy is generated and continuously adjusted by dynamically sensing the data sensitivity and the real-time trust state, so that the full-link self-adaptive security protection from transmission to processing is realized; according to the method, the security multi-party calculation is seamlessly integrated in a high-sensitivity scene, so that the end-to-end security and privacy protection level of data in a cross-domain and multi-participant environment are remarkably improved while the data mobility is guaranteed, and the problem that a traditional static security mechanism is difficult to adapt to dynamic risks is effectively solved.

The invention discloses a method for improving the performance of double-independent quantum key distribution of actual reference system measurement equipment, belongs to the technical field of quantum key distribution (QKD), and aims to improve the performance of the double-independent quantum key distribution when non-ideal factors such as a post-pulse effect of a detector and finite sample statistical fluctuation are considered. The invention relates to a method and a system for improving the performance of a reference system measurement device by introducing an advantage extraction technology into a double independent quantum key distribution (RFI-MDI-QKD) protocol of the reference system measurement device. Simulation results show that when the post-pulse effect and the statistical fluctuation effect are considered, the advantage extraction method can effectively improve the security key rate and the security transmission distance of the RFI-MDI-QKD protocol on the premise of not changing optical hardware. According to the invention, a valuable reference technology can be provided for practical research of the RFI-MDI-QKD system.

The invention relates to a key management method and device based on a quantum security chip carrier, and relates to the technical field of quantum computing, a unique UID is generated through a quantum random number generator in combination with a PUF technology, a mapping relation is established, sub-keys are derived in a layered mode and stored in a partitioned mode, and the key management efficiency is improved. A ternary binding mechanism of a chip unique identity, a quantum random entropy source and a storage environment fingerprint is constructed, through integrity verification, bidirectional identity authentication and a quantum secure transmission channel, key full-life-cycle security control is realized, quantum attacks and security threats are effectively resisted, and the security, credibility, traceability and suitability of key management are improved.

The invention relates to the technical field of smart home devices, in particular to a smart home device communication method driven by a physical unclonable function, which is used for establishing a secure session between a resource-limited initiating device and a resource-limited receiving device, and comprises the following steps: A, generating a physical unclonable function key; b, anti-quantum key negotiation; c, combining identity authentication and signature; d, establishing a secure session key; and E, safely transmitting the instruction. According to the method, the non-persistent key is generated and established through the physical unclonable function key, so that the problems of physical attack and key stealing are solved; anti-quantum key negotiation and lattice ciphertext de-encapsulation provide anti-quantum security, and the problem of future calculation threats is solved; identity authentication and signature are combined to realize single handshake, delay and power consumption are reduced, and the requirements of low power consumption and high efficiency are met; drift calibration is implemented, so that the stability of the key of the physical unclonable function is guaranteed, and the reliability is improved; and the confidentiality and the integrity of the instruction are ensured by the final secure transmission of the instruction.

The invention provides a digital certificate acquisition method and device, electronic equipment and a readable storage medium, and the method comprises the steps: monitoring a network communication behavior of a target process, and obtaining network connection information established by the target process; wherein the network connection information comprises network tetrad information; when it is detected that the target process executes the data reading operation, protocol analysis is performed on the network data flow in the receiving buffer area, and a server certificate is extracted based on a protocol format corresponding to the target secure transmission protocol; if the protocol analysis is not successfully completed, directly obtaining the analyzed server certificate from the memory; and reporting the server certificate and the network tetrad information to a certificate monitoring platform. According to the invention, completely unknown server certificates in an enterprise can be monitored, and the problems of abnormal service interruption and the like caused by expiration of the server certificates are fundamentally avoided.

The invention relates to the technical field of cross-border data secure transmission, and particularly discloses a semantic analysis-based cross-border data secure transmission method, which comprises the following steps of: dividing a sender credit investigation level through a multi-source credit investigation acquisition and semantic analysis model; the method comprises the following steps: preprocessing to-be-transmitted multi-modal data, and classifying the data through semantic alignment; matching transmission authority according to credit investigation levels and data types, separating transmittable data according to core / non-core data, and performing hierarchical encryption according to sensitive types of the data; data are transmitted through a cross-border private line of a TLS1.3 protocol, a sliding window and a retransmission mechanism are combined, and the integrity is verified by adopting a Hash algorithm. According to the invention, compliance dynamic adaptation is realized, protection precision and reliability are improved, and safety and efficiency are balanced.

The invention discloses an implementation method of a sub-connection active STAR-RIS assisted secure communication system. A base station, a sub-connection active STAR-RIS, a legal user and an eavesdropping user are included. According to the invention, M units of STAR-RIS are grouped into L sub-arrays, and an amplifier is shared to reduce power consumption and cost; with maximization of system secrecy energy efficiency as a target, base station beam forming, STAR-RIS reflection / transmission coefficients and amplifier amplification coefficients are jointly optimized; and solving the non-convex optimization problem by adopting an efficient algorithm based on block coordinate descent. According to the invention, the hardware overhead and the system power consumption are effectively reduced through the sub-connection structure, meanwhile, the secure transmission efficiency of the system is remarkably improved through joint optimization, multiplicative fading is overcome, and an efficient and reliable solution can be provided for 6G secure communication.

The invention provides a novel cloud tampering resistant medical image encryption method integrated with a signature watermark, aims to solve the problems of security and integrity of a medical image in cloud transmission and storage and tracing of an image generation source, and designs an improved chirp two-dimensional hyperchaotic system (2D-ICBHM) and an image decomposition encryption method. On the basis of an improved chaotic system, n groups of index scrambling and double chaotic sequence replacement encryption mechanisms are constructed, pixel-by-pixel encryption of the decomposed image is realized, and meanwhile, a block exchange algorithm, a rotation arrangement algorithm and a block diffusion algorithm are designed to complete global block encryption of the image; according to the scheme, a strategy of combining pixel-by-pixel encryption and block encryption is adopted, the encryption effect is ensured under the condition that time overhead is not increased, an integrated doctor signature watermark technology not only realizes verification of an image source, but also can accurately detect a tampering behavior, avoids medical risks, has relatively strong anti-attack and anti-tampering capabilities, and is suitable for large-scale popularization and application. And a promising solution is provided for safe transmission of medical images.

A double-lane millimeter wave vehicle networking safety transmission method, system, device and medium based on STAR-RIS, the method comprising: constructing a STAR-RIS assisted double-lane millimeter wave vehicle networking communication scene; based on the propagation characteristics of millimeter wave signals, combining the channel fading characteristics under the conditions of line-of-sight and non-line-of-sight transmission and the transmission and reflection functions of STAR-RIS, calculating the channel gain of the cascaded channel of the STAR-RIS assisted link; based on the random geometry theory, respectively calculating the probability density functions of the associated distances of the direct link, the STAR-RIS reflection link and the STAR-RIS transmission link; constructing a dynamic link association strategy supporting ternary selection; establishing a signal-to-interference-and-noise ratio model under three association modes; combining the physical layer security performance index definition, calculating the closed-form analytical expressions of the connection interruption probability and the secrecy interruption probability, and verifying the security gain of STAR-RIS; the present application has the advantages of effectively overcoming the half-space coverage blind area of the traditional reflective RIS, and improving the link connection reliability and physical layer safety transmission performance under the double-lane complex shielding environment.

The application discloses an RIS-assisted zero-forcing beamforming method based on a physical layer security technology, and the method comprises the following steps: constructing an RIS-assisted downlink MISO security transmission system model, constructing a passive eavesdropping user mathematical model based on random geometry, and constructing a legal user and eavesdropping user received signal-to-noise ratio expression; constructing a legal user received signal-to-noise ratio maximization optimization problem model, including determining optimization variables, an objective function and constraint conditions, and pre-designing a transmission beamforming vector based on a zero-forcing algorithm; constructing a joint optimization transmission beamforming and reflection beamforming vector algorithm, dividing the legal user received signal-to-noise ratio maximization optimization problem into two sub-problems for solving, and optimizing the reflection beamforming vector at the RIS and the transmission beamforming vector at the base station. The application jointly optimizes the transmission beamforming vector and the reflection beamforming vector, and realizes the optimization target of legal user received signal-to-noise ratio maximization.

The invention relates to the technical field of data management, and discloses a medical data secure transmission method and a big data digital signature system, and the method comprises a hierarchical processing step, a privacy enhancement step, a key negotiation step, a segmented transmission step and an audit tracking step. The system comprises a signature preprocessing module, a hierarchical signature module, a privacy purification module, a verification module and a tracing module. According to the method, a risk association map is constructed through hierarchical processing, and accurate identification of data association risks is realized; privacy and availability are balanced through differentiated privacy enhancement, authorization controllability is enhanced in combination with block chain key management, large file transmission integrity and non-repudiation are guaranteed, and whole-course audit is controllable. According to the system, the relevance between the signature and the privacy feature is improved through module design, the integrity and relevance of the signature chain are guaranteed, privacy protection and verifiability are compatible, efficient verification is achieved, the dispute traceability is provided, and pediatric medical data safety is guaranteed in cooperation with the method.

The embodiment of the invention discloses a password information processing method and device, electronic equipment and a storage medium, multiple groups of encryption key pairs are bound with a key effective time interval, a key corresponding to a playing time period is quickly matched in combination with an index mapping table, a user does not need to manually input multiple passwords, and the user experience is improved. The problem that the password needs to be input repeatedly after being replayed after being modified is solved; a key is stored by an asymmetric encryption algorithm, and is transmitted through a secure transmission channel, so that the key storage and transmission security is ensured, and the problem of insufficient security of existing key management is improved; the integrity of the decrypted data is verified by means of the verification key, and the equipment end is triggered to retransmit incomplete data fragments, so that the defects of lack of data integrity guarantee and an exception recovery mechanism are overcome; and meanwhile, the key query efficiency is improved by the index mapping table.

The invention relates to a method for securing transmission of payload (17) from a transmitter device (3) to a receiver device (4). The payload (17) is calculated by a primary module (7) of the transmitter device (3) and, redundantly thereto, corresponding payload is calculated by a secondary module (8) of the transmitter device (3). The payload (17) calculated by the primary module (7) and a check value (20) calculated by the secondary module (8) for the payload calculated by the secondary module are combined in an overall data record (21). This overall data record (21) is then transmitted from the transmitter device (3) to the receiver device (4), with a check being carried out as to whether the contained check value (20) matches the contained payload (17). If this is not the case, an error is identified. The invention also relates to a corresponding transmitter device (3) and to a motor vehicle (1) configured for the method.

The application discloses a data transmission verification method suitable for shipborne devices, wherein a first shipborne device obtains a device group number of a second shipborne device; if the device group number of the second shipborne device is consistent with that of the first shipborne device, the verification is successful, data transmission is started, otherwise, the verification fails, and the following process a or / and process b is entered; a. coordinate positioning verification; if the satellite positioning difference of the two shipborne devices is within a preset range, the verification is successful, the first shipborne device performs limited transmission to the second shipborne device; if the satellite positioning difference is not within the preset range, the verification fails, and the transmission process is terminated or process b is performed; b. online verification. Through the data transmission verification method, the data security can be improved, the transmission is started after the device group relationship of the two shipborne devices is verified, and the safe transmission of the data in the device group is ensured.

This invention discloses a cloud-edge-device intelligent collaborative system and method for secure cross-network transmission, comprising terminal devices, edge nodes, an edge cloud platform, and a central cloud platform: The terminal devices collect production data from oil and gas field operations and upload the data to the edge nodes; the edge nodes upload the production data to the edge cloud platform and perform AI inference and execution based on received container images or model files; the edge cloud platform preprocesses the production data based on preset cloud-edge collaborative rules and transmits the processed production data to the central cloud platform via a northbound security gateway; and deploys the received container images or model files to the corresponding edge nodes; the central cloud platform trains AI algorithms based on the production data to obtain container images or model files, which are then transmitted to the edge cloud platform via a southbound security gateway. This system enables secure sharing and intelligent collaborative scheduling of oil and gas production data.

The application discloses a kind of unmanned aerial vehicle inspection data security transmission method and system based on 4G private deployment.The method comprises: deploying 4G non-public network containing communication perception integrated base station, and identifying illegal eavesdropping channel by active eavesdropping perception module;Task unmanned aerial vehicle and the physical layer protection system of collaborative protection unmanned aerial vehicle are constructed, and task unmanned aerial vehicle transmits integrated beam back data and locates eavesdropper, and protection unmanned aerial vehicle directional transmission interference signal;End-to-end encryption and identity authentication are executed on the basis of physical layer protection, and form double security mechanism;With the security transmission rate under unit energy consumption as optimization goal, establish joint optimization model;The model is decomposed into two coupled sub-problems and solved alternately, and after iterative convergence, according to optimal parameter, security transmission is executed.The application reduces system energy consumption while ensuring the security transmission of inspection data by double protection of physical layer and cryptographic layer, double unmanned aerial vehicle cooperation and security energy efficiency joint optimization.

The application discloses a kind of based on intelligent non-stationary control's satellite-ground fusion security transmission method, comprising the following steps;Step one: construct time-frequency dual-dimensional satellite-ground fusion transmission model, the construction of overall application scene is carried out;Step two: based on time-frequency dual-dimensional satellite-ground fusion transmission model, the acquisition of low interference continuous usable frequency slot is carried out, and frequency slot set is obtained;Step three: by the information sequence in the frequency slot set is changed into orthogonal non-stationary waveform signal, it simultaneously presents the dynamic non-stationary characteristic of no rule in time, space, frequency and multiple dimensions, to obtain final sequence;Step four: the performance analysis of the non-stationary control sequence obtained;Step five: based on performance analysis, by theoretical derivation, the security and reliability of the proposed method overall are tested.The application has the characteristics of strong anti-interference ability, high transmission stability, excellent security performance, adaptive complex time-varying channel environment.

The invention discloses an MASs consistency logic security control method under hybrid attacks, and relates to the technical field of multi-agent system security control, the method comprises the following steps: firstly initializing MASs system parameters, and realizing data confidentiality protection and information tampering detection by an LSPM through a two-layer key mechanism of symmetric key encryption and asymmetric key signature; designing a segmented consistency controller for a mixed scene of eavesdropping, information tampering containing content and identity source tampering and DoS attack, and deriving a linear matrix inequality LMIs through a time-varying Lyapunov function LKFs to solve controller parameters; and finally, continuously executing data security transmission and state adjustment to ensure that the MASs realizes leader-follower LF consistency. According to the method, when the MASs face mixed network attacks such as eavesdropping, tampering and denial of service, a comprehensive guarantee with confidentiality, integrity and authenticity is provided, and the reliability that the system finally realizes a consistent control target is ensured.

The application relates to an intelligent metasurface security transmission optimization method based on a supervised deep neural network. The method comprises the following steps: acquiring a signal of a transmitting integrated RIS, modeling an RIS-to-legal user channel, combining the signal and the channel, and calculating a legal user received signal-to-interference-and-noise ratio and an achievable rate; meanwhile, corresponding indexes at an eavesdropper and an achievable rate of an eavesdropping link are calculated. Then, a multicast system security capacity is designed according to a minimum value of the achievable rate of the legal user and the achievable rate of the eavesdropping link. In order to achieve the target, an optimization model is constructed by combining the achievable rate of the legal user, RIS power and a perceived signal-to-noise ratio constraint. A supervised deep neural network and a training set are constructed, an offline training, online inference and parameter updating are carried out by using an Adam optimizer according to a preset loss function, and a trained network is obtained. Finally, the optimization model is solved by using the network, and RIS phase shift and power allocation coefficients are acquired. The method can reduce the calculation complexity and improve the real-time performance.

The invention discloses a communication method, network equipment and a storage medium. In the application, a control node obtains a first SID used for indicating a first P node to execute encryption or decryption operation based on first SA information, and issues the first SID to a first PE node. When a first PE node receives a first message which is to be sent to a second PE node through a first P node and needs to be transmitted through an SA tunnel, a first SID is packaged in a first SRH of the first message. Therefore, after the first P node receives the first message, under the indication of the first SID, the first SA information is utilized to perform encryption or decryption operation on the first message, and the processed message is forwarded, so that the P node encrypts or decrypts the message, the requirement of secure transmission of the message on networking is reduced, the message encryption and decryption mode is more flexible, and the security of the message is improved. And the requirements of users can be better met.

The application provides a kind of campus security risk prevention and control cloud service platform, it is related to cloud platform technical field, including: data processing and transmission module, for based on cloud platform architecture data storage, processing and secure transmission, and support the automatic reconnection and concurrent control of data transmission;Safety assurance module, connect data processing and transmission module, for the digital management of the civil air defense, physical protection and technical support information of campus;Security risk prevention and control module, connect data processing and transmission module and safety assurance module, for the information processing and linkage of campus safety management, safety education and safety emergency process;Joint defense and control module, connect security risk prevention and control module, for based on the processing result of security risk prevention and control module, realize the data linkage and emergency response command between multi-level education management department and school. By constructing the campus security risk prevention and control cloud service platform, the intelligentization and collaboration level of campus safety management is significantly improved.

The invention relates to the technical field of supply chain operation, in particular to a supply chain management method and system based on a block chain and artificial intelligence, and the method comprises the steps: receiving a commodity qualification file based on a production node, carrying out the initial credibility verification operation and secondary credibility verification of the commodity qualification file, and obtaining a credibility authentication result and credibility, generating a unique identification code and a commodity code based on the commodity qualification file, the credibility authentication result and the credibility, recording the commodity qualification file, the credibility authentication result, the credibility, the unique identification code and the commodity code as a qualification authentication data set, and performing data transmission to obtain operation data of each commodity business in the plurality of commodity businesses, and completing supply chain management based on the plurality of service operation data and the plurality of transmission data. According to the method, the dynamic credibility analysis model and the dynamic disturbance encryption mechanism are constructed, and the credible evidence storage traceability of the block chain is combined, so that high-credibility authentication and secure transmission of the supply chain data are ensured, and supply chain management is realized.