188 results about "Security domain" patented technology

The invention relates to the technical field of power system network and information security, and discloses a power system transverse isolation and secure data transmission method and system.The method comprises the steps that a production control security domain and a management information security domain are determined, and cross-domain service flow information is configured; when transmission between a production control security domain and a management information security domain is needed, cross-domain service flow information to which service data belongs is collected and packaged into a security self-description data unit; on the transverse isolation path, acquiring header information to generate a session token; when the secure self-description data unit is forwarded, feature data are obtained and compared with the associated session token, and forwarding is carried out when limiting conditions are met; and maintaining a sliding time window, carrying out statistics on the forwarded security self-description data unit, and identifying an abnormal behavior. According to the invention, semantic-level access control and dynamic protection of cross-domain services between a production control security domain and a management information security domain are realized.

The invention provides a cross-security domain computing power resource federation and privacy protection system. The system comprises a scheduling management node, a communication gateway, a plurality of computing nodes, a verification node and a key management node. The scheduling management node decomposes the calculation general task into a plurality of subtasks and plans different node execution paths; the communication gateway encapsulates the subtask data into an encrypted data packet containing a position identification segment and an encrypted data segment which can be independently decrypted; the computing node is integrated with the trusted execution environment to provide hardware-level security isolation; the summarizing node is used for receiving sub-task results which are processed by the computing nodes and comprise encrypted data segments; the verification node realizes calculation integrity verification; and the key management node confirms a task completion state by collecting the position identification segment, and coordinates and starts a data segment aggregation decryption process. According to the method, the data and code privacy of the computing task is ensured while the computing power island is broken, and a cross-domain computing power resource sharing mechanism with balanced safety and performance is established.

The invention discloses a data transmission method and device between security domains, a storage medium and electronic equipment. Relates to the field of data transmission, and the method comprises: in a front-end application of a first security domain, in response to an interaction request triggered by a user, generating a request message containing a unique identifier, and issuing the request message to a message queue service in the first security domain, the message queue service being used for a large model processing service in a second security domain, consuming the request message according to a pre-configured security access strategy, and writing response data of the large model into a shared cache service of a first security domain; and initiating a query request to the shared cache service to obtain response data corresponding to the interaction request from the shared cache service, and displaying the response data to the user through a user interface of the front-end application. The problem that data transmission efficiency is low when data transmission between security domains in a one-way network isolation environment is realized by depending on a manual or semi-automatic off-line ferry mode in the prior art is solved.

Example embodiments of systems and methods for data transmission in a contactless card are provided. The contactless card may include a processor, and a memory. The memory may contain a first applet, a second applet, and a plurality of keys. The first applet and the second applet may be stored within a shared security domain. The second applet may be configured to communicate with the first applet to perform one or more cryptographic services. The second applet may be configured to transmit one or more requests to the first applet to encode one or more payload strings based on the plurality of keys to perform the one or more cryptographic services. The first applet may be configured to perform the one or more cryptographic services on behalf of the second applet based on the one or more requests.

The invention discloses a one-way off-line security intelligent decision center system with local deployment as a main and external network service as an auxiliary and a control method, and belongs to the technical field of artificial intelligence security and edge intelligent decision. A three-level security domain physical and logic dual isolation architecture is adopted, extranet multi-model intelligent security enablement is performed on a local core decision domain through a physical one-way import channel, the local core decision domain completes reasoning calculation in combination with an enablement result in a non-extranet interaction state, a top-layer task scheme is generated, and a top-layer task scheme is generated. Through a multi-mode man-machine interaction mode, after human rigid authorization, issuing to an intranet equipment scheduling domain for execution, and feeding back a state in real time to form a full-link closed loop; the method realizes external network multi-model intelligent security enabling, local agent professional decision and rigid closed loop dominated by human beings in the whole process, aims to solve the problems of cloud dependence, data leakage, out-of-control AI, high cost, poor adaptability and the like, and is suitable for families, industries, confidential scenes, field non-support operation and other scenes.

The invention relates to the field of power system operation, and discloses a partition power grid new energy consumption capability evaluation method considering power-carbon collaborative optimization, and the method comprises the following steps: S1, carrying out the modeling of power grid time sequence data and topological information based on a time sequence channel decoupling lightweight graph convolutional network, and obtaining a power grid dynamic partitioning result; s2, on the basis of a semantic perception feature enhancement network, calculating a partitioned power grid security domain on the basis of the partitioning result; and S3, under the constraint of the security domain, carrying out power-carbon collaborative optimization scheduling by using a colistia colony intelligent optimization algorithm. According to the method, a lightweight graph convolutional network is constructed based on a space-time decoupling principle of power grid topology and new energy output, and node electrical association strength is dynamically weighted based on a graph attention mechanism; through a time sequence channel separation method, adaptive optimization of a minute-level power grid partition structure is realized, and the mismatch problem of a fixed partition mode under source load fluctuation is solved.

The invention discloses an elastic scheduling method and system for a power grid based on a dynamic security domain, and relates to the technical field of elastic scheduling methods, and the method comprises the steps: determining the boundary of a non-key constraint based on an elastic adjustment factor, a power grid operation event corresponding to the power grid, and a plurality of constraints; the corresponding optimization event is determined according to the dynamic security domain, the boundary of the non-critical constraint and the real-time working data of the power grid, and the elastic scheduling system of the power grid is determined based on the optimization event, the real-time load data of the power grid and the corresponding real-time power supply data, so that the accuracy of the elastic scheduling system of the power grid is improved; and the elastic scheduling effect of the power grid is further improved. Therefore, the plurality of sub elastic scheduling projects are determined according to the identification of the elastic scheduling mode, the power optimization event of the power grid is determined based on the project content of each sub elastic scheduling project, the corresponding project position and the real-time load data of the power grid, and the accuracy of the online optimization logic of the power grid is ensured.

The invention relates to the technical field of power system simulation, and discloses a power system time sequence simulation system considering security constraints. The system comprises a power grid topology analysis unit, a dynamic security domain calculation unit, a time sequence constraint modeling unit, a simulation track generation unit and a check feedback unit. The power grid topology analysis unit obtains element connection relations and electrical parameters, and generates a topology description file containing a node admittance matrix; the dynamic safety domain calculation unit obtains the voltage stability limit and the power angle stability boundary of each working condition, and forms a safety domain boundary set; a time sequence constraint modeling unit combines the set with a predefined time interval to build a security constraint time sequence model containing a transient process; the simulation trajectory generation unit solves a differential algebraic equation set by using an implicit trapezoidal integral method, and outputs a state variable trajectory with a timestamp; and the check feedback unit compares the track with the security domain boundary, marks an abnormal segment and generates a correction instruction. The system realizes fusion of security constraint and time sequence simulation.

The invention relates to the technical field of network security, and discloses a data leakage real-time blocking method fusing a micro-isolation strategy and context awareness. According to the method, a micro-isolation strategy engine based on a data sensitivity level is constructed, a logic security domain is defined, and an independent access control rule is configured; collecting a network data flow in real time, identifying sensitive data by using a deep packet detection technology, and extracting context information; dynamically analyzing and generating risk metadata, calculating a real-time risk index, and establishing a behavior baseline model to detect behavior deviation; in combination with behavior deviation, a risk index and a data operation type, an access control rule is adaptively decided and dynamically updated, a high-risk or unauthorized data transmission session is blocked in real time, and the data leakage protection capability is improved.

The invention discloses a cooperative control method and system for an automobile longitudinal beam production line. The method comprises the steps that fool-proof verification is conducted on the longitudinal beam production line; the longitudinal beam single piece is pretreated to obtain a longitudinal beam basic piece; the longitudinal beam basic part is fed into a first target station to execute a welding procedure, a semi-finished longitudinal beam is obtained, and first posture data are obtained; acquiring operation data and second attitude data corresponding to a second target station; determining a first process relay compensation domain based on the first attitude data and the second attitude data; generating a dynamic security domain based on the operational data; determining process rhythm parameters according to the first process relay compensation domain and the operation data; determining a dynamic pre-leaning point of the mechanical arm in the third target station and a clamping compensation value on the second clamp according to the procedure rhythm parameters; determining an action reference template of the second clamp; and the mechanical arms in the second clamp and the third target station are planned to generate a cooperative strategy. The collaborative efficiency of the automobile longitudinal beam production line can be effectively improved.

The invention discloses an operating room purification environment self-adaptive regulation and control method and system based on time sequence prediction, and relates to the technical field of air conditioning. According to the operating room purification environment self-adaptive regulation and control method based on time sequence prediction, the environment state of an operating room and purification air conditioner operation time sequence data are continuously obtained in a set sliding regulation and control period, and a collaborative feature set is generated through associated feature mining; extracting a predicted collaborative feature set through a time sequence prediction model in combination with historical collaborative features; performing security domain definition based on the operation state set and a preset mapping relation library, and determining a purification control domain; according to the method, the operating room is subjected to environment regulation and control through the prediction optimization control set, so that the accuracy of environment regulation and control is improved, the problem of regulation and control lag caused by real-time fluctuation of the environment is avoided, operation parameters of a purification air conditioner are matched in advance, and then the cleanliness of the operating environment is guaranteed.

This invention belongs to the field of flight control computer hardware architecture technology, specifically relating to a heterogeneous flight control core circuit and system. This invention integrates a microcontroller unit and an artificial intelligence coprocessor unit on the same printed circuit board, achieving data and command interaction through isolated high-speed interconnect channels. The microcontroller unit constitutes the safety control and real-time decision-making domain, used to execute safety-critical and hard real-time tasks, and to implement operational management and fault isolation for the artificial intelligence coprocessor unit; the artificial intelligence coprocessor unit constitutes the intelligent sensing and computing domain, used to execute computationally intensive and non-real-time critical tasks. This architecture achieves decoupling and collaboration between the safety domain and the computing domain at the hardware level, ensuring both high functional safety and determinism in flight control, while fully releasing the high-performance computing power required for intelligent sensing, thus meeting the dual requirements of advanced aircraft for highly reliable flight control and intelligent function expansion.

The invention discloses an integrated intelligent monitoring system and a hierarchical isolation method and equipment based on a security domain, and relates to the technical field of industrial automation system integration, the method comprises a centralized data bus, a modular function service and a service interface, the centralized data bus is used for receiving original real-time data acquired from bottom equipment; the modularized function service is used for designing each function service of the discrete manufacturing workshop into a mutually independent and pluggable module form, and each function service subscribes to required data from the centralized data bus; and the service interface is used for publishing the generated new service data back to the centralized data bus after the function service consumes the subscription data, so that other function services can subscribe and consume. According to the invention, the problems of architecture chaos, data islands and security risks in multi-subsystem integration can be effectively solved.

The present application relates to power industry safety domain boundary fitting technology, in particular to a kind of high-dimensional static security domain boundary fitting method of power system, considering system generator output constraint, node load value sampling is carried out, through power flow calculation, the sample in the security domain is filtered out, and initial sample set is formed.Boundary sample search algorithm is proposed, for each sample in initial sample set, find a sample in the security domain, a sample outside the security domain, and satisfy the distance between the two is less than the set distance threshold value.The data in the boundary sample set in the original power injection space is converted to new three-dimensional feature space by deep neural network model.Extract the boundary in feature space by the weighted tilt decision tree algorithm based on information gain ratio, and evaluate the boundary performance, select the optimal boundary.The method can realize the fitting of high-dimensional boundary of power system security domain, and reduce the error with actual boundary.

This invention discloses a method and system for correcting inter-regional power transmission plans based on static security domains. The method includes: constructing a static security domain for the power system time-by-time according to the initial first boundary conditions of the regional power grid dispatch plan, and pre-solving the first dispatch results for each time period; determining each time period exceeding the limit; using the transmission power of the inter-regional power transmission plan as the correction object for each time period exceeding the limit, calculating the correction distance for each time period exceeding the limit, and calculating the corresponding sensitivity; relaxing the transmission power of the corresponding first inter-regional power transmission plan based on the sensitivity, and obtaining the transmission power constraint conditions for the second inter-regional power transmission plan; and solving the second dispatch results for each time period to complete the correction of the regional power grid dispatch plan. This invention can expand the optimization space of the dispatch plan correction optimization problem, enhance the dispatching agency's ability to ensure the safety of power grid operation, and improve the effectiveness of inter-regional power transmission plan correction.

The application relates to the technical field of power system dispatching, and discloses an intra-day forward-looking dispatching fast solving method considering large-scale new energy cluster power generation fluctuation, which comprises the following steps: S1: new energy cluster space-time fluctuation scene generation based on neuron cellular automata, S2: power grid dynamic security domain definition and simplification based on physical information neural network, S3: dispatching fast optimization solving based on model prediction path integral, and S4: dispatching scheme dynamic elasticity and stability evaluation based on the theory of Koopman operator. The new energy cluster space-time fluctuation scene generation method based on neuron cellular automata can effectively generate a space-time scene reflecting the large-scale new energy cluster power generation fluctuation, support uncertainty analysis, has the advantages of high calculation efficiency and scene authenticity, and solves the problem that the traditional statistical model ignores space-time coupling, thereby causing inaccurate scene generation.

The invention relates to the technical field of high and low temperature all-in-one machines, in particular to a high and low temperature all-in-one machine safety control method and system. Firstly, operation parameters of the high and low temperature all-in-one machine are collected in real time through a multi-mode sensor system; performing time synchronization and data fusion on the acquired operation parameters to generate a multi-dimensional time sequence fusion data sequence; calculating a real-time parameter boundary of the dynamic security domain model based on a current set working condition; inputting the multi-dimensional time sequence fusion data sequence and the real-time parameter boundary into a risk assessment engine, and calculating a comprehensive risk score; and finally executing a hierarchical active control strategy according to the comprehensive risk score. According to the method, a complete technical closed loop from multi-source data fusion, dynamic risk assessment to intelligent hierarchical control is realized, and the safety and reliability of equipment are remarkably improved.

The invention discloses an effective security domain-based post-power-grid-fault operation adequacy repairing method and system, belongs to the technical field of power grid fault repairing, and aims to solve the problems of conservative static limit, lack of visual representation of multi-section security situation and insufficient real-time cooperative correction capability in a traditional N-1 checking method. According to the method, the dynamic section limit is constructed by introducing the adjustable power flow transfer coefficient, and the visual depiction and the global strategy feasibility identification of the multi-section coupling safety boundary are realized based on the effective safety domain concept; and establishing a convex optimization collaborative repair model which takes the operation adequacy as a guide and takes the minimum total energy consumption of stored energy as a target. The improvement of quota formulation from static state to dynamic state, safety analysis from isolation to coupling and correction decision from experience to optimization is realized, and the observability of the operation state and the accuracy of the scheduling decision after the power grid breaks down are remarkably enhanced.

The invention discloses a distributed chip security domain system based on an earth clone scale model, and the system comprises a modeling unit which is used for building a geographic grid according to the real latitude and longitude of the earth; the management unit is used for dividing the geographic grid into security domains corresponding to countries or regions one by one, each security domain is used for generating and storing a public and private key pair, a private key is embedded in the distributed chip security domain, and a public key is uploaded to a global distributed block chain network; and the authentication unit is used for carrying out cross-region security verification based on the security domain by utilizing a universe anchor point. The invention further provides a digital integrated authentication method and the eSIM mobile phone. According to the invention, independent COS examples are preset for each country in a distributed chip, and a total factor large Token and zero-knowledge proof technology are combined, so that identity authentication of a user at any place in the world is ensured, and integrated digital identity authentication with high safety, strong privacy and global mutual recognition is realized.

The invention discloses a smart pipeline abnormal data sequence prediction method based on a Transform network. The method comprises the following steps: collecting pipeline data, constructing a time sequence, and dividing a monitoring window; a pipe network topology Laplacian matrix is constructed based on the pipe section connection relation, and a normal reference set is extracted; separating a source signal by using topology constraint SOBI and establishing a source space security domain model; constructing a time sequence fusion Transform prediction network to output abnormal sequence prediction; calculating an abnormal weight according to the deviation between the monitoring window and the normal reference set and between the monitoring window and the source space security domain, and updating source signal features; based on the abnormal weight, the source signal feature and the prediction residual error, constructing an improved SOBI optimization target to jointly optimize a blind source separation parameter and a prediction network parameter; and constructing an event triggering criterion according to the source space security domain default index and the prediction residual error to adaptively update the abnormal weight and the joint model, and outputting a pipeline abnormality prediction result. According to the invention, the reliability of pipeline abnormity prediction is improved.

The application relates to the technical field of operation and maintenance cross-domain access, in particular to a cross-domain access control method of a distributed operation and maintenance audit system, which comprises the following steps: obtaining a high-risk degree according to the high-risk confidence of an instruction and a global consequence performance value, and then obtaining an asset sensitivity degree; obtaining a real-time abnormality index according to the current high-risk prominence degree of a security domain and the mean value of the high-risk degrees of various instructions within a first preset time; obtaining a real-time sensitivity degree based on the real-time abnormality index and the asset sensitivity degree; obtaining a cross-domain sensitive change degree based on the real-time sensitivity degrees corresponding to the initiation domain and the target domain of an instruction; obtaining a cross-domain risk degree based on the cross-domain sensitive change degree, the maximum value of the real-time sensitivity degrees in the security domains involved by an access link corresponding to the instruction and the historical maximum high-risk degree of the instruction; and executing a corresponding level of release strategy on the instruction according to the cross-domain risk degree. The application can significantly enhance the overall security and active defense capability of cross-domain access.

The invention provides an AIoT device data priority scheduling method based on an SD-WAN, and relates to the technical field of data processing, and the method comprises the steps: analyzing device data at an AIoT gateway or an SD-WAN edge device into data atoms containing a security domain identifier, a service type identifier, a data size, a deadline, a basic value, an attenuation coefficient and a reliability requirement; an instant value function is generated; the edge device collects network measurement data for the superposition tunnel path according to a preset measurement period, calculates a path time delay quantile and a path packet loss rate quantile, obtains a deliverable coefficient and an expected delivery value of a data atom on each path, and further calculates a unit byte scheduling index; selecting the maximum scheduling index to send under the constraint of credit balance; when the deliverable coefficient is lower than the reliability requirement, double-path copying or system code action is executed, and a receiving end carries out duplicate removal and expired discarding; and the edge device reports statistical information, and the controller updates the next window allocation to realize closed-loop scheduling and resource isolation.

The invention discloses a power grid new energy bearing capacity assessment and analysis method and device based on a security domain theory. The method comprises the following steps: acquiring power system fault information and generator time sequence operation data; establishing a motion equation based on the inertia center coordinate system, and identifying leading and lagging coherent generator groups; adjusting the output of a leading generator group generator, identifying a leading instability unit and a mode, searching a critical instability point, and determining a stability judgment reference parameter; constructing a multi-modal practical dynamic security domain by adopting a maximum Lyapunov index criterion sensitivity analysis algorithm and combining a stability criterion, a sensitivity matrix, a stability judgment formula and a constraint condition; and calculating the stability margin of the system and dynamically adjusting the proportion of the new energy, carrying out loop iteration until the stability margin meets a preset requirement, and outputting a new energy bearing capacity evaluation value. The method does not need to depend on a complex simulation model, achieves the advanced prediction of the transient stability and the quantification of the stability margin, improves the accuracy and practicability of the evaluation of the new energy bearing capacity, and assists the safe and stable operation of a power system.

The invention discloses a cross-security domain heterogeneous service data isolation and secure exchange method and system, and relates to the field of multiplexing communication, in the method, data transmission is realized through a sending end host, a receiving end host and a physical isolation device. A sending end divides data into a high priority and a low priority according to service characteristics, when the high-priority data needs to be sent, the low-priority data which is being transmitted can be interrupted, and specific head information (head hanging, head priority and head recovery) is used for recording an interruption position and a service identifier. And the receiving end directly forwards the high-priority data according to the header information, and recombines and recovers the interrupted low-priority data at the same time. The method and the device are used for reducing queuing waiting time of key signaling, and improving real-time performance and transmission efficiency of cross-domain interaction of high-priority services on the premise of guaranteeing physical isolation safety.

A collaborative diagnostic method and system for equipment faults based on secure multi-party computation is disclosed, relating to data processing systems or methods applicable to administrative, commercial, financial, management, supervisory, or predictive purposes. The method includes: acquiring equipment operating data within each security domain; generating fault feature summaries by grouping data according to equipment type and parameter ranges; calculating multidimensional similarity of fault features between domains based on equipment type consistency, overlap of state feature ranges, and time delay; constructing a cross-domain fault propagation network; identifying fault loop propagation paths and fault convergence nodes; and finally outputting the analysis results. Implementing this method can improve the accuracy of identifying cross-domain fault propagation paths and key nodes without sharing raw data details across security domains.

The application discloses a multi-target-oriented power distribution network safety domain operation point screening method, medium and equipment, belongs to the field of power system operation and optimal control, and comprises the following steps: firstly, constructing a static safety domain containing a power flow equation and multiple constraints based on power distribution network nodes, branch information and safety criteria; secondly, accurately obtaining a safety domain boundary through adaptive direction search and error correction; thirdly, generating a candidate operation point by Monte Carlo sampling, combining economic and reliable indexes, and obtaining a Pareto optimal solution set through fast non-dominated sorting; finally, screening an optimal operation point considering safety, economy and reliability through fuzzy multi-attribute decision and decision maker preference analysis; the application realizes three-dimensional target collaborative optimization, is high in calculation efficiency and strong in robustness, can adapt to real-time optimization requirements of high-proportion distributed power distribution networks, and can be widely applied to active power distribution network safety evaluation, energy storage configuration and economic dispatching scenes.

The invention relates to the technical field of quantum communication, in particular to a cross-domain user login system based on a quantum key distribution network, which comprises a field extraction module, a security domain analysis module, a quantum state negotiation module, a quantum encryption encapsulation module, a quantum decryption verification module and a security tunnel establishment module, the field extraction module extracts a user identity identifier and an anti-replay random number from the login request; the security domain analysis module analyzes the identifier to obtain a security domain and a quantum network node; the quantum state negotiation module generates session quantum key pairs based on node negotiation; the quantum encryption packaging module encrypts the random number and the voucher by using a user side key to obtain a quantum encryption login voucher; the quantum decryption verification module uses the server side secret key to decrypt and verify, and outputs an authentication result; the secure tunnel establishment module derives a key according to the result, and establishes a cross-domain secure communication link; according to the invention, the security and authentication efficiency of cross-domain user login can be improved.

This invention discloses an adaptive PC-Kriging reliability analysis method and system based on active learning. The method includes: using weighted clustering to obtain uniformly distributed first candidate samples from a pre-generated MC sample pool and constructing an initial PC-Kriging model; using interval reduction to select samples and construct a new sample pool, dividing the new sample pool into two sub-sample pools: a safe domain and a failure domain; for each sub-sample pool, weighted clustering is used again to select uniformly distributed second candidate samples; using the second candidate samples distributed in the failure domain and the safe domain, crossing points are constructed; the constructed crossing points are used as new experimental points to iteratively update the PC-Kriging model; convergence is determined and the results are output. The technical solution of this invention focuses on key regions through interval reduction and updates the model based on crossing points, which can more accurately approximate the limit state surface, reduce the number of experimental points, improve prediction accuracy, and is more efficient in utilizing computational resources.

A method, system, medium, and product for exhibition hall layout security verification are disclosed. The method includes: acquiring a building information model of the target exhibition hall and equipment deployment data of the deployed equipment; constructing an equipment-facilities security domain diagram of the target exhibition hall based on the equipment deployment data and the structural features of the exhibition hall; calculating a spatial risk coefficient between each deployed equipment node and a target security facility node in the equipment-facilities security domain diagram; calculating a risk transmission coefficient from multiple deployed equipment nodes to the same security facility node in the equipment-facilities security domain diagram based on a first preset risk model; calculating a comprehensive risk level of the security facility node based on the spatial risk coefficient and the risk transmission coefficient using a second preset risk model; and generating equipment-facilities collaborative optimization suggestions when the comprehensive risk level exceeds a preset risk threshold. This application can improve the accuracy of exhibition hall layout security verification.