128 results about "Security compliance" patented technology

The invention relates to the technical field of informatization processing, and provides an IT asset intelligent management system and an implementation method thereof, and the system comprises an asset discovery subsystem which outputs a standardized asset list through a feature comparison and deduplication fusion program; the unified modeling subsystem forms an asset topological graph by processing association and dependence between information technology assets; the intelligent analysis and prediction subsystem outputs insight results and prediction indexes about resource capacity prediction, anomaly detection, cost optimization suggestions, risk trends and the like; the life cycle management subsystem drives an automatic operation and maintenance workflow through a strategy engine to realize closed-loop management of the information technology asset state; the security and compliance subsystem generates an alarm, a repair suggestion or executes an automated repair policy. According to the invention, intelligence, automation and safety compliance of information technology asset management are realized, and the efficiency and reliability of information technology operation, maintenance and management are significantly improved.

The invention relates to the technical field of intelligent edge computing, and discloses a heterogeneous data processing optimization system based on intelligent edge computing. Comprising a heterogeneous data acquisition module, an edge preprocessing module, an intelligent optimization scheduling module, a heterogeneous fusion analysis module and a self-adaptive feedback control module. According to the system, data streams of different formats and protocols can be collected from a plurality of heterogeneous data sources in real time, and multi-modal correlation analysis is carried out after preprocessing and intelligent scheduling. Meanwhile, the system performance is optimized through self-adaptive feedback control, and a resource efficiency evaluation module and a safety compliance verification module are further arranged. According to the method, the problems of delay, accuracy, resource allocation, safety compliance and the like in heterogeneous data processing are effectively solved, the data processing efficiency and the system stability are improved, and the method is suitable for heterogeneous data processing scenes in the fields of industry, traffic, medical treatment and the like.

The invention discloses a multi-dimensional evaluation method for credential environment migration, and particularly relates to the field of evaluation. According to the method, an evaluation index system covering infrastructure, an application system, data resources and security compliance is constructed, and comprehensive scanning is realized through instruction set detection, binary analysis and equal security compliance inspection; dynamically calculating the weight by adopting an AHP-entropy weight hybrid model, and triggering weight rebalance based on the volatility; through combination of static scanning and a dynamic probe, the compatibility, performance and safety differences are quantitatively analyzed; and finally, generating a visual risk assessment report, integrating data of each stage to calculate a compatibility score, a performance loss rate and a security level, providing instruction level difference comparison, a performance flame graph and a vulnerability attack path interaction view, and outputting a migration suggestion comprising a priority reconstruction list, an NEON instruction optimization scheme and a staged reinforcement plan.

The invention discloses a risk control strategy-based decision engine and method, and relates to the technical field of financial risk control, and the decision engine comprises a strategy warehouse module, a mapping service module, an execution engine module, a data management module, a version rollback module, a security scale module, and a monitoring alarm module. According to the invention, function decoupling is realized through collaborative design of the seven modules, and the modules interact through a unified interface, support strategy dynamic loading, gray release, distributed parallel execution, version governance and security compliance capabilities, and ensure high cohesion and low coupling of the system; through unique strategy version management, intelligent mapping and gray release, plug-in parallel execution, multi-version consistency view, block chain audit rollback, security compliance management and control, intelligent monitoring and other technical innovations, a complex, dynamic and high-concurrency risk control business scene is effectively supported; the security, the flexibility, the expandability and the auditing performance of the decision engine are remarkably improved, and the technical advancement and the industry creativity are high.

The invention discloses a multi-dimensional large model test evaluation method and system, belongs to the technical field of artificial intelligence testing, integrates a basic model, platform capability and application performance to realize multi-dimensional large model test evaluation, and comprises the following steps: basic model capability evaluation, including sensitive lexicon + BERT semantic double-engine security detection and context dependence test chain; evaluating the capability of the model platform, including presetting LLM intelligent labels and double-person back-to-back data backflow; application performance evaluation, including character disturbance robustness test and LIME interpretability grading evaluation; large-model full-stack testing is achieved through a RESTful heterogeneous model nanotube interface, and localized compatibility adaptation verification is achieved based on GPU attenuation rate quantification. The method solves the problem of lack of evaluation of platform engineering capability, safety compliance and localization support in the prior art, realizes three-dimensional capability coupling evaluation, solves the problem of localization adaptation, and fills the blank of a large-model full-stack test technology.

The invention discloses an intelligent media asset management system based on artificial intelligence, a multi-modal data processing module adopts a time-shifting convolutional neural network to extract spatio-temporal features of videos and audios, an intelligent cataloguing module optimizes a video shot segmentation strategy based on deep reinforcement learning, a graph neural network is utilized to model a label semantic relationship, and a video shot segmentation strategy is established; and label global dependence and entity identification are optimized through Transform and a conditional random field, and abnormal labels are detected in combination with an Isolation Forest algorithm, so that the cataloguing accuracy and fluency are remarkably improved. The knowledge graph engine adopts a hierarchical knowledge graph to embed and construct a cross-modal resource association network, supports a dynamic update label system, and adopts technologies such as multi-modal AI analysis, reinforcement learning optimization, knowledge graph association, distributed architecture and security compliance design. The problems of poor system expansibility, prominent potential safety hazards and the like in traditional media asset management are solved, efficient and accurate media asset intelligent processing is achieved, and the intelligent level, system performance and data security of media asset management are improved.

The invention discloses a large model memory management method and device and a medium, and relates to the technical field of artificial intelligence, and the method comprises the steps: obtaining a new knowledge unit and a partition parameter corresponding to the new knowledge unit; according to the partition parameter, determining a storage partition corresponding to the new knowledge unit in the knowledge base; calculating the similarity between the new knowledge unit and each existing knowledge unit, and taking the existing knowledge unit of which the similarity is greater than a preset similarity threshold as a candidate conflict object; calculating the conflict degree between each candidate conflict object and the new knowledge unit, and processing the new knowledge unit according to the conflict degree to obtain a first processing result; and injecting the first processing result into the corresponding storage partition. According to the management method, catastrophic forgetting can be effectively prevented and controlled, long-term retention and safety compliance of key knowledge are guaranteed, and technical support is provided for application of a large model in a complex and continuous evolution scene.

The invention relates to the technical field of foreign trade information processing, and provides a multi-language semantic aggregation and automatic quotation system which comprises a multi-language keyword analysis module, a data acquisition module, a semantic aggregation and clustering module, a visual display module, a quotation generation and editable module and an output and mail arrival module. The system has the advantages of high automation, accurate semantics, multi-format output, flexible editing, safety and compliance, easy maintenance and the like, and is suitable for multiple industry fields such as mothers and infants, consumer electronics, pet supplies, industrial equipment and the like.

The invention discloses a method and system for enterprise employee social security compliance management based on a knowledge graph, and relates to the technical field of artificial intelligence, and the method comprises the steps: collecting employee basic data and employee social security data corresponding to each enterprise in real time, and adding an enterprise identifier for each piece of employee basic data and employee social security data; social security policy data are obtained, a policy change time sequence is constructed based on the social security policy data, and the effective time, the region range, the applicable crowd and the specific terms of each social security policy are recorded; in response to an enterprise employee social security compliance management request, inputting the employee basic data, the employee social security data and the social security policy data of the corresponding enterprise as an original data set into an enterprise employee social security compliance management model, and outputting a social security adjustment strategy, the problems that in the prior art, policy changes cannot be dynamically adapted, the social security states of employees cannot be compared in real time, and the cost optimal adjustment strategy cannot be automatically generated are solved.

A device, system and method for accelerated compliance testing for real-time detection of suspicious transactions in a transaction stream. A machine learning model may determine a global trend of cumulative transaction behavior based on all, a majority or a representative subset, of the stream of transactions. For each transaction in the stream, a skip rule engine may sort each security compliance test to be skipped or not skipped based on the test's relevance to the global trend of the cumulative transaction behavior. The not skipped security compliance tests may be executed in real-time for each transaction in the stream to generate real-time partial security assessments therefore comprising real-time suspicious transaction alerts. The remaining tests may be skipped in real-time and executed, at a time delay after transaction times, to generate time delayed supplemental security assessments therefore comprising time delayed suspicious transaction alerts to complete all compliance testing.

1. Name of the Design Product: Conversation Area and Information Display Area of the Graphic User Interface for Compliance Q&A of Electronic Devices. 2. Use of the Design Product: An electronic device. 3. Design Key Points of the Design Product: The part of the graphic user interface in the electronic device that is claimed for protection. 4. Picture or Photograph Best Showing the Design Key Points: Design 1, Variant State Diagram 1. 5. Design 1 is designated as the basic design. 6. Use of the Graphic User Interface: The graphic user interface is used for intelligent Q&A on security compliance issues. The part of the graphic user interface claimed for protection is used for intelligent Q&A on security compliance issues and for displaying the regulatory standards cited in the intelligent responses. The graphic user interface can be interacted with through touch or click operations by the user on the graphic user interface. In response to the completion of generating the reply information for the user's question, the graphic user interface changes from the main view of Design 1 to Design 1, Variant State Diagram 1 to display the result of generating the reply information and the thinking process of generating the reply information; in response to the user touching or clicking on a certain regulatory standard queried during the thinking process, the graphic user interface changes from Design 1, Variant State Diagram 1 to Design 1, Variant State Diagram 2 to display the detailed information of that regulatory standard. In response to the completion of generating the reply information for the user's question, the graphic user interface changes from the main view of Design 2 to Design 2, Variant State Diagram 1 to display the result of generating the reply information and the thinking process of generating the reply information; in response to the user touching or clicking on a certain regulatory standard queried during the thinking process, the graphic user interface changes from Design 2, Variant State Diagram 1 to Design 2, Variant State Diagram 2 to display the detailed information of that regulatory standard. 7. Other Circumstances Requiring Explanation: Other Explanation: The part of the graphic user interface shown by the dashed line in each view of Design 1 to Design 2 does not constitute the part claimed for protection in this design.

The application relates to a power grid production data access method and device for power grid data sharing security compliance based on deep action determination and risk budget. The method comprises the following steps: in response to an access request for power grid production data sent by a terminal, inputting a context feature vector corresponding to the access request into a pre-constructed deep action determination model to obtain a target access action corresponding to the access request; in the case that the target access action is a preset access action, determining a current privacy budget value corresponding to the target access action; in the case that the current privacy budget value does not exceed a current remaining privacy budget value, performing differential privacy protection processing on the power grid production data according to the current privacy budget value to obtain processed power grid production data, and returning the processed power grid production data to the terminal. By using the method, the security of power grid production data access can be improved.

Provided is a system and method for security screening, the method including: matching, by at least one of at least one processor, a passenger name of a passenger in a baggage source message (BSM) with a passenger name in a manifest, wherein the BSM comprises travel data of a first mode of travel of a luggage item of the passenger on an air carrier; extracting, by at least one of the at least one processor, an International Air Transport Association (IATA) license plate number from the BSM for the luggage item; accessing, by at least one of the at least one processor, security screening image and related data captured during a first mode of travel security screen of the luggage item using the IATA license plate number; displaying, by at least one of the at least one processor, a graphical user interface (GUI) on a display device to analyze the screening image and related data; and obtaining via a scanning device, by at least one of the at least one processor, a mark representative of the analysis result in response to scanning an IATA license plate barcode affixed to the luggage item, wherein the analysis result is representative of one of: a security compliance of the luggage item to cross a border or to transfer to a second mode of travel, and a non-security compliance of the luggage item.

The invention provides a main data automatic governance method and system based on a large model and Dores, and belongs to the field of data governance. The method comprises the following steps: constructing an RAG main data management knowledge base stored in Dores, and exploring multi-source heterogeneous data by utilizing federated query and MCP service of the Dores; driving an end-to-end process from main data automatic identification, asset checking, source layer modeling and data access, and main data standard model definition and gold attribute set generation by using a large language model; deep cleaning is carried out on the data by adopting a rule and AI cooperation mode, and heterogeneous data mapping and ETL task generation and arrangement are completed; finally, in combination with a graph database and an authority system, intelligent data security sharing based on dynamic desensitization is realized. According to the method, automation, intelligence and adaptive optimization of the whole process of main data management are realized, and the problems of dependence on manpower, low efficiency, incomplete coverage and insufficient safety compliance of a traditional scheme are solved.

The invention relates to the technical field of archive management, in particular to a material collection contract archive whole-process collection system based on a large model agent. The system comprises a data access layer, an intelligent processing layer, a knowledge service layer, an application layer and a security compliance layer which are in communication connection in sequence. The data access layer is used for collecting multi-source heterogeneous contract data and pushing a collection result to the intelligent processing layer; and the intelligent processing layer realizes intelligent analysis, verification, state tracking and knowledge association of contract data based on a large model agent. The objective of the invention is to provide a material collection contract archive full-process collection system based on a large model agent, and by constructing a technical architecture integrating data collection, intelligent processing, knowledge precipitation and closed-loop management, automatic and intelligent management of a full life cycle from generation to archiving of contract archives is realized.

The invention relates to a data detection method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: receiving a domain name data detection request triggered for a form trigger, and obtaining a form filling address associated with the form trigger and target domain name data carried by the domain name data detection request; analyzing the form filling address to obtain a form identifier carried by the form filling address, and obtaining a workflow identifier associated with the form identifier and workflow structure data associated with the workflow identifier; and analyzing the workflow structure data, obtaining a plurality of workflow tasks carried by the workflow structure data and an execution sequence of the plurality of workflow tasks, sequentially executing the plurality of workflow tasks according to the execution sequence, and carrying out multiple items of security compliance detection on the target domain name data to obtain a detection result. By adopting the method, tedious operation in the data detection process and misoperation in different links can be reduced, and the safety compliance detection processing efficiency of the domain name data is improved.

The invention provides a full-automatic and multi-scene TLS certificate updating and deploying method driven by artificial intelligence. According to the method, an encryption storage library, a token operator and a general operator are deployed in a Kubernetes environment, automatic application, storage and distribution of certificates are realized, and multi-environment adaptation is supported. A centralized log management and large language model is introduced, and logs are analyzed in real time to complete fault diagnosis and self-healing decision. Through the built-in adapter of the general operator, the new environment can be driven to work only by adding a configuration statement. The method has the technical highlights of dynamic token management, a universal adapter expansion mechanism, AI drive fault rating and the like, cross-environment unified management can be realized, the management cost is reduced, the safety compliance is improved, manual intervention of operation and maintenance is reduced, and the overall cost of ownership is reduced by more than 40% compared with that of a traditional scheme.

For crypto assets mounted to pods as files or environment variables, security and compliance can be complex and therefore may be inadequately managed. [Solution] The system may include memory and a processor that communicates with the memory. The processor may be configured to perform operations. The operations may include steps to monitor network actions between resources in a network and steps to extract encrypted data from the network actions. The operations may include steps to detect connection security data from the encrypted data and steps to obtain resource health reports for the resources in the network. The operations may include steps to merge the connection security data with the resource health reports and steps to generate security compliance reports.

The invention relates to the technical field of computer software development, and provides a method and device for determining the risk of a software package and a server. According to the method, the problem that privacy compliance and security vulnerability risks may be introduced due to the fact that in an actually delivered demand list, demands not in a planning demand list are not subjected to privacy compliance and security compliance analysis can be solved. The method comprises the steps of obtaining at least one code submission record associated with a software package, wherein the at least one code submission record is associated with a corresponding delivery demand; generating a delivery demand list associated with the software package according to the delivery demand; and performing delivery risk analysis on the software package according to the delivery demand list, and determining a first analysis result which is used for determining whether the software package can be published or not.

The invention discloses an insurance policy information management system and method, electronic equipment and a storage medium, and the system comprises an insurance policy information query module which carries out the unified authentication and routing arrangement of an insurance policy query request, and generates a target request; according to a configuration rule, obtaining insurance policy data from a plurality of data sources through the target request, and executing field filtering, field mapping, data desensitization and result sorting on the insurance policy data to generate a standardized query response; the configuration management module is used for carrying out visual configuration, storage and distribution management on the configuration rules; the security management module is used for carrying out encryption and decryption and signature verification on the transmission message and managing an encryption key and an algorithm suite; and the log auditing module is used for recording the operation logs and carrying out centralized storage and retrieval. According to the method, the problems of different query calibers, slow cross-system joint query, insufficient configuration and weak security compliance are solved, the query response speed and experience consistency are improved, the system reusability and configuration flexibility are enhanced, and the security compliance capability is enhanced.

The invention belongs to the technical field of artificial intelligence, and discloses a generation method, device and equipment of a containerized application orchestration engine and a storage medium, and the method comprises the steps: creating a declarative application model which describes the overall configuration and deployment requirements of a containerized application; based on the application model, an automatic assembly line from code construction to environment deployment is triggered and executed through a unified arrangement engine, safety strategies are integrated in the automatic assembly line, and safety check and compliance verification are automatically executed; in response to a change event of the Git warehouse, synchronizing the application model to a plurality of target computing clusters based on a GitOps principle; and collecting execution data of the automatic assembly line and the production environment runtime indexes, and associating the execution data of the automatic assembly line to generate delivery efficiency measurement and release decision support. According to the method, the problems of inconsistent deployment process, lack of security compliance verification, difficulty in multi-cluster state synchronization and lack of data support for delivery efficiency in containerized application deployment are solved.

The embodiment of the invention provides a sensitive word detection method and device, electronic equipment and a medium, belongs to the field of data monitoring, can be applied to business scenes related to finance and insurance, and can also be applied to business scenes related to intelligent medical treatment. Client equipment continuously monitors text setting interface calling of the client equipment and obtains a corresponding target text when the interface is called, and text collection points can be converted into automatic obtaining during operation from later manual inspection. The target text is detected, and the first detection result indicating whether the sensitive word is contained or not is obtained, so that whether the copywriting has a safety compliance risk or not can be judged at the first time, and low efficiency and error proneness of manual detection are avoided; and when the detection result shows that the sensitive words are contained, the detection report is generated based on the sensitive words in the target text and is sent to the operation end equipment, so that the abnormal information is reported and handled in time, and the automation degree, the detection efficiency and the response timeliness of sensitive word detection are improved.

This invention relates to the field of information security technology and proposes a hybrid encrypted data transmission and storage method and system adapted to the domestically developed IT environment. The method includes: training an adaptive neural network based on the hardware information of the domestically developed CPU to output a capability feature vector; using a cache prediction network based on the capability feature vector to predict the performance of national cryptographic algorithms and output a performance prediction matrix; using a deep reinforcement learning network based on the performance prediction matrix to detect resource conflicts between combinations of national cryptographic algorithms, filtering the combinations, and outputting the optimal combination of national cryptographic algorithms; encrypting the data to be transmitted and outputting encrypted transmission data; transmitting the encrypted transmission data to the target node, decrypting the encrypted transmission data, re-encrypting and storing it, and outputting securely stored data. This invention improves the security and adaptability of data transmission and storage in the domestically developed IT environment, and meets the security compliance requirements of the domestically developed IT environment through a complete transmission verification and storage re-encryption process.

A system and method for dynamically selecting, executing, and optimizing microservices across multiple cloud service providers is disclosed. A workload management system receives a microservice execution request, retrieves metadata from a microservices catalog, and selects an optimal cloud provider using a weighted cost function based on execution performance, cost, security compliance, and availability. A machine learning model refines provider selection using historical execution data. An API abstraction layer formats and encrypts execution requests before transmission. A performance monitoring module tracks execution, while a fault detection module identifies failures and triggers automated failover via a failover module that preemptively replicates execution state data. A response processing module validates execution results before returning them to the requesting application. The system ensures dynamic, cost-efficient, and secure workload distribution while maintaining seamless failover resilience. By leveraging real-time performance metrics, historical data, and predictive analytics, the system optimizes microservice execution across diverse cloud environments.

This invention discloses a multi-agent collaboration method and system for domestically developed operating systems, belonging to the field of intelligent technology for domestically developed desktop operating systems. It aims to solve the core problems of existing solutions, such as lack of collaboration standards, black-box decision-making, and difficulty in reusing experience. The method establishes a collaboration system by building an MCP protocol stack and a native DBus mapping, generating a structured inference chain through the System-2 inference engine, and achieving a closed loop through dynamic task distribution, three-level memory reuse, and visual auditing. The system includes a main agent, a cluster of sub-agents, and multiple core modules to collaboratively support the implementation of the method. This solution enables plug-and-play intelligent agents, full traceability of decision-making, and improves the execution efficiency of similar tasks by more than 30%. It is deeply adapted to multiple versions of openKylin and domestically developed hardware, meeting the security compliance and efficient collaboration needs of key scenarios such as government affairs and finance.

The invention relates to the technical field of data security, in particular to a data flow compliance evaluation method, which comprises the following steps of: constructing a data service information model through a data service model definition module; constructing a safety compliance risk assessment model through a safety compliance risk model definition module; establishing an association relationship between the data service information model and the security compliance risk assessment model, and importing the acquired data service information into the data service information model through a data service information acquisition module; a data service security compliance evaluation module is used for carrying out data service security compliance evaluation to obtain a security compliance evaluation result and manual and intelligent evaluation suggestions; the evaluation report generation module generates an evaluation report. According to the invention, by integrating a plurality of functional modules, accurate modeling of data service information, scientific assessment of risks, reliable verification of data and efficient generation of assessment reports are realized, so that the comprehensiveness, accuracy and flexibility of data service security compliance assessment are improved.

The present invention relates to an AI-driven cybersecurity system that provides adaptive protection by identifying, mitigating, and preventing cyber threats in real-time. The system leverages advanced machine learning algorithms to detect anomalies in network traffic, enabling the identification of potential threats, which are then neutralized through automatic adjustments to firewall rules and network configurations. The system includes a tracing module capable of locating the source of cyberattacks by analyzing IP addresses and other network metadata, allowing for comprehensive incident reporting. Additionally, the invention logs and monitors all devices connecting to the network, both via Wi-Fi and hardline access, ensuring security compliance and detecting unauthorized activity. The system's adaptive approach ensures continuous protection by automatically updating security measures and reporting detailed findings to security personnel for future prevention.

Security compliance may be facilitated for multiple endpoints associated with a network. Multiple batch endpoint assessments may be performed. Each batch endpoint assessment of the multiple batch endpoint assessments may include receiving multiple status indicators associated with at least a subset of endpoints of the multiple endpoints. For each batch endpoint assessment of the multiple batch endpoint assessments, a status may be assigned to each endpoint of the multiple endpoints based on the plurality of status indicators. A state may be generated for each endpoint of the multiple endpoints based on the statuses assigned to the multiple endpoints.

This application discloses a file transfer method, apparatus, electronic device, and storage medium, relating to the field of financial technology. The method includes: parsing the current file transfer task to obtain the address of the source device, the address of the target device, task attribute information, and security compliance information; filtering multiple initial transfer strategies based on the security compliance information to obtain multiple candidate transfer strategies; determining the file transfer link based on the address of the source device and the address of the target device; determining the comprehensive suitability of each candidate transfer strategy based on the task attribute information, the real-time link quality information of the file transfer link, the real-time resource information of the source device, and the real-time resource information of the target device; and determining the target transfer strategy from the multiple candidate transfer strategies based on the comprehensive suitability; and executing the current file transfer task according to the target transfer strategy, enabling the transfer strategy to adapt to the complex and dynamically changing intranet environment of financial institutions, thereby improving file transfer efficiency and success rate.

The application discloses a kind of self-adapting configuration method and system of energy storage system communication interface, including obtaining the communication protocol data information of energy storage equipment to be accessed;Protocol characteristic vector of the energy storage equipment to be accessed is calculated;Initial interface configuration parameter of the energy storage equipment to be accessed is generated;Integrity, timing and safety compliance verification are carried out to initial interface configuration parameter, and the interface configuration parameter of the energy storage equipment to be accessed is obtained;According to the interface configuration parameter obtained, the update of protocol rule library is carried out, and the self-adapting configuration of the communication interface of the energy storage equipment to be accessed is completed.The application not only realizes the self-adapting configuration of energy storage system communication interface, but also has higher reliability, better accuracy and higher efficiency.