131 results about "Security guarantee" patented technology

The invention provides an industrial control network security service security guarantee system based on behavior analysis, which belongs to the technical field of industrial control network security, and comprises a multi-source data fusion acquisition module, a dynamic behavior modeling engine, a federal learning analysis cluster, an attack chain prediction module, a self-adaptive protection strategy executor and a model evolution feedback ring, wherein the multi-source data fusion acquisition module synchronously acquires industrial control network flow (including OPC UA / Modbus / DNP3 protocol analysis), equipment operation logs, user operation behavior fingerprints and physical interface state data, and the physical interface state data comprises electrical characteristic fluctuation monitoring of USB / network interfaces. According to the scheme, through multi-technology fusion and closed-loop design, the problems of static performance, single-dimension analysis defects and response lag of a traditional industrial control security scheme are effectively solved, a comprehensive protection system with dynamic modeling, intelligent decision making, privacy protection and continuous optimization is constructed, and the security and service reliability of an industrial control network are remarkably improved.

The invention relates to the technical field of computers, and discloses a data control method and system, electronic equipment and a storage medium, and the method comprises the steps: receiving a data control strategy defined by a data owner, and the data control strategy is constructed based on a quintuple framework and comprises a subject, an object, an environment condition, an operation behavior and an effect; compiling the data control strategy into an intelligent contract code, and generating a source code based on an intelligent contract template; deploying the smart contract code to a block chain network to form a decentralized strategy decision point; intercepting the data access request, triggering the smart contract to verify the access request, and generating an access credential when the verification is passed; and allowing data access based on the access credential, and monitoring a data use behavior to ensure consistency with the data control strategy. According to the method, the fine granularity and the whole-process coverage of data control can be improved, the auditing credibility can be improved, the automation level and the efficiency of a control system can be improved, and the end-to-end safety guarantee capability is enhanced.

The invention relates to the field of large language models, and provides a safety guarantee method for text generation of a large language model. The existing watermarking technology can detect whether a text comes from a specific model or not, but cannot trace the identity of a user, so that responsibility can not be traced when the text is spread or tampered for the second time. According to the main scheme, a statistical signal is embedded in a generated text based on a relaxed red-green dictionary method, and a model tends to select a green list token by adjusting the token sampling probability when the language model is generated; the user information is a mobile phone number or an identity card number, Base4 coding is carried out, and offset information is obtained; in the basic watermark text, starting from the first green token, generating a synonym list based on the context every two continuous token positions, and selecting corresponding synonyms for replacement according to the offset so as to implicitly embed user information; the method comprises the following steps: detecting a basic watermark, recovering a text by using a Transform-based sequence denoising auto-encoder, and extracting user information according to a replacement position and an offset.

The invention provides an intelligent prediction method and system applied to system log security audit, and the method comprises the steps: firstly obtaining a historical log data set of a power monitoring system, carrying out the event correlation modeling, generating a log event correlation model, generating a security event prediction rule library based on the log event correlation model through a rule mining algorithm, and carrying out the prediction of the security event. And then obtaining a real-time log data stream, inputting the log event association model to obtain a real-time event association result, matching the real-time event association result with the rule base to generate an abnormal event prediction result, finally generating a security audit report according to the abnormal event prediction result, sending the security audit report to the power monitoring terminal, and updating rule base parameters according to feedback information. Therefore, the abnormal event in the power monitoring system can be predicted in advance, and the intelligent level and the safety guarantee capability of system safety auditing are improved.

The invention discloses a cloud-side collaborative household arrhythmia early warning AI agent, and relates to the technical field of AI agents. The system specifically comprises a data acquisition module, an edge computing module, a cloud computing module, an application module and a safety guarantee module, the data acquisition module acquires electrocardio and related physiological signals in real time through wearable equipment, and the edge computing module performs preprocessing and preliminary anomaly detection on data, quickly responds and screens key data and uploads the key data to a cloud; the cloud computing module carries out deep analysis and personalized model training; the application module converts a cloud result into real-time early warning and health suggestions and pushes the real-time early warning and health suggestions to the user and medical personnel; the security guarantee module runs through the whole process, and ensures the privacy and security of data in acquisition, transmission, storage and application. According to the invention, data processing is scientific and efficient, data can be comprehensively collected and preprocessed, meanwhile, real-time preliminary screening and secure transmission are realized, and the transmission pressure and privacy risk are reduced.

The invention discloses an inner product encryption method, device and system based on a GR-LWE problem, and belongs to the technical field of information encryption, and the method comprises the following steps: generating a main public key and a corresponding main private key based on a dihedral non-exchangeable group ring and preset security parameters; obtaining vector data used for decryption, and carrying out operation on the vector data and the main private key to generate a decryption key used for decryption operation; vector data to be encrypted and plaintext data to be encrypted are obtained and are operated with the public key part in the main public key to generate a ciphertext; and a decryption key is used for carrying out decryption operation on the ciphertext, and when and only when the inner product result of the vector data for decryption and the vector data to be encrypted is 0, correct plaintext data can be obtained. According to the invention, an inner product encryption scheme is expanded to the dihedral non-exchangeable group ring, so that the security of the encryption scheme is improved, and long-term security guarantee is provided for resisting quantum computer attacks.

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention relates to the technical field of medical information security, in particular to a security guarantee method and system in a medical data interaction process, and the method comprises the steps: firstly carrying out the read-only solidification and disk encryption of data, and building a fingerprint hash tree; zero-knowledge proof and dynamic privacy budget are generated according to strategies such as purposes and calling times, and semantic vectors are obtained through encoding and signed into a revocation chain; the algorithm is divided into linear, nonlinear and pulse sub-graphs in a credible environment, three-domain ciphertext calculation is carried out, Laplace noise is injected into pulse output according to budget and then fusion is carried out, and a re-linearization key is derived; a hypergraph commitment is generated based on a fused ciphertext, a semantic vector and a key drive delay function are utilized to take a random value and a proof, a composite commitment is obtained through a threshold signature and a random bit sequence, cross-chain evidence storage with root hash is carried out, and differential privacy and long-term auditing are realized.

The invention discloses an AI large model-oriented financial private network optimization method and system, and relates to the technical field of communication networks. According to the method, an exclusive path strategy is generated for AI training, reasoning and sensitive data traffic by collecting AI service requirements and network states and utilizing the SID programming capability of SRv6; the load of the computing power node is monitored in real time, the computing power state is linked with network scheduling, and network-computing power collaborative optimization is realized; a hop-by-hop path authentication mechanism based on a dynamic authentication segment identifier Auth-SID is introduced, so that the security of a data transmission path is enhanced; and end-to-end visual operation and maintenance and closed-loop feedback of the service flow are realized by adopting a flow-following detection technology. According to the invention, the problems of mismatching of flow scheduling and AI service requirements, insufficient network and computing power collaboration, lack of path security guarantee and weak operation and maintenance visualization capability in the prior art are solved, deep adaptation of network resources and the AI service requirements is realized, and the computing power collaboration efficiency, the path security and the operation and maintenance intelligence level are improved.

The invention discloses a zero-trust gateway single packet authentication method and system for a new energy fan control system, computing equipment, a computer storage medium, a computer program product and a chip. The authentication method comprises the steps of generating an authentication material; exchanging and deriving a mixed key; binding Hash calculation is carried out; encrypting and assembling the message; receiving and verifying by the gateway; and binding verification and registration are carried out. The invention relates to a zero-trust gateway single packet authentication method combining a post quantum cryptography algorithm and a national commercial cryptography algorithm. The method is applied to secure communication between a wind power plant and a centralized control center, an SM2, SM3 and SM4 combined algorithm in a national secret system is combined with a post-quantum key agreement algorithm CRYSTALS-Kyber512, identity authentication, encryption and integrity verification are completed through a single message, confidentiality protection and anti-quantum security guarantee under one-time interaction are achieved, and the security of the wind power plant is improved. The method is especially suitable for new energy scenes with wide fan distribution, complex links and high real-time requirements.

The invention discloses a quantum key distribution system and method. According to the system, a phase coherence monitoring mechanism is innovatively introduced, and early attack detection is realized through a dynamic consensus sampling protocol; a zero-trust relay network is constructed by adopting a wavefront fragmentation principle, and trust dependence on relay nodes is eliminated; self-adaptive safety monitoring is realized based on a finite state automaton, and a system safety strategy is dynamically adjusted. According to the method, the problems of resource consumption type attack, relay trust dependence, static protocol limitation and the like faced by an existing QKD system are solved through a strict mathematical framework, and long-distance quantum key distribution with efficient resources, endogenous security and elasticity and physical layer security guarantee is realized. Experiments show that compared with a traditional scheme, the detection delay of the system is reduced by about 38%, the resource waste is reduced by about 40%, and the availability of the system reaches 99.995% or above.

The invention provides an insurance customer cross-institution credit risk assessment system based on federated learning, and relates to the technical field of credit risk assessment, and the system comprises a data preprocessing module, a federated training module, a privacy protection module, a block chain excitation module, an interpretability enhancement module, a model optimization module and a risk assessment module. Through federal learning, available and invisible collaboration of cross-mechanism data is realized, exclusive risk features of the insurance industry are extracted, training strategies and privacy protection intensity are dynamically adjusted, mechanism contributions are quantified, automatic excitation is performed, compliance interpretable evaluation results are generated, and an insurance service cycle optimization model is adapted. According to the invention, comprehensive improvement of risk assessment accuracy, business scene adaptability, privacy security guarantee and supervision compliance is realized through cooperation of multiple modules, and an efficient, safe and feasible integrated technical scheme is provided for cross-institution credit risk assessment in the insurance industry.

The invention discloses a cross-platform accounting automatic carry-over system which comprises a front-end application module, a data synchronization engine module, an intelligent carry-over module and a data analysis and safety guarantee module. The front-end application module is in real-time two-way communication with the rear end through WebSocket, monitors account operation of a user, and packages the account operation into a JSON data packet containing an operation type, a timestamp and a data fingerprint; the data synchronization engine module receives the operation data, stores the operation data into a database after standardization conversion and integrity verification, and pushes the operation data to a target platform in real time; a neural network model based on historical data and artificial sample training is built in the intelligent carry-over module, data needing to be carried over are automatically screened, and compliance subject conversion is executed; the data analysis and security assurance module generates a multi-dimensional financial statement, and data security is ensured by adopting encryption, redundant storage and abnormal monitoring; through the automatic processing flow, the efficiency of account transfer is improved, and manual intervention and errors are avoided.

The invention discloses an instruction tamper-proofing device for a traffic information board system, relates to the field of traffic information security, and solves the three technical problems of key clone risk, high computing power dependence and poor environmental adaptability of a traditional encryption scheme. A tamper-proof system is constructed through a triple cooperation mechanism: a unique unclonable physical feature is extracted based on a physical unclonable circuit, efficient integrity verification is realized through a segmented cascade parity check circuit, and a timestamp is accurately compared in combination with a temperature compensation clock; and multi-dimensional features are fused, spliced and integrated, tampering recognition is performed through feature comparison, and ultimate protection is formed if irreversible hardware is triggered to fail if tampering recognition is performed. The device achieves pure hardware millisecond-level response, thoroughly eliminates software dependence, maintains zero misjudgment rate in an extreme environment, ensures full-life-cycle safety of instructions through physical-level protection, and provides unduplicated safety guarantee for an information board system.

The invention relates to the technical field of rental facility management, in particular to a rental facility remote rental management system based on AI glasses, which comprises a code scanning module, an imaging module, a gesture operation module, a charging server and a communication module. The code scanning module is used for identifying codes of leasing facilities, the imaging module is used for superposing leasing information through the AR technology, the gesture operation module is used for analyzing the intention of a user to complete leasing confirmation, the billing server generates bills and supports multi-mode payment, and the communication module is used for achieving data interaction and safety guarantee. The method can improve the lease management efficiency, optimizes the user experience, and achieves the real-time and convenient remote lease management.

The invention provides a knowledge asset traceability tracking method based on digital watermarking, and the method comprises the steps: obtaining to-be-protected knowledge assets, and extracting the multi-modal feature representation of the knowledge assets; according to the method, spatial intensity mapping is dynamically generated by combining a prediction model, intelligent embedding is realized, a DWT-SVD mixed domain core technology is adopted, the multi-resolution analysis capability of discrete wavelet transform and algebraic stability of singular value decomposition are fully played, tracing anchor points are provided for watermarks, and meanwhile, a multiple security guarantee system is constructed, so that the security of the watermarks is improved. And finally, an asset identification module, a watermark generation module, an intelligent embedding module, a traceability verification module and an audit report module are integrated through end-to-end systematic design, so that a complete management closed loop is formed, and the system universality is improved. The full-life-cycle management function enables intellectual property risk management and control through log auditing and a visual report, so that the concealment and safety of the digital watermark are improved.

The invention discloses a low-altitude intelligent network-oriented multi-stage security task unloading optimization method, and belongs to the technical field of low-altitude intelligent network edge computing. The method aims at solving the problems that exploration and development of a traditional task unloading method in a low-altitude dynamic heterogeneous network environment are unbalanced, optimization precision is insufficient, and safety guarantee is insufficient. The method comprises the following steps: constructing a network architecture containing communication, calculation and security models based on basic information of low-altitude intelligent network equipment; configuring a multi-constraint optimization problem; after the initial population is generated, searching a globally optimal solution by adopting an improved escape optimization algorithm; and executing calculation energy consumption optimization configuration according to the optimal solution. According to the method, algorithm innovation and security constraint design are combined, task unloading efficiency, resource allocation rationality and data transmission security are cooperatively improved, and dynamic heterogeneous features of the low-altitude intelligent network are adapted.

The application provides a kind of information project whole process supervision management platform, comprising: data acquisition layer, core supervision layer, intelligent analysis layer, application display layer, data storage layer and security guarantee layer.A kind of information project whole process supervision management platform provided by the application, through data acquisition layer, core supervision layer, intelligent analysis layer, application display layer, data storage layer and security guarantee layer etc. Structure mutual cooperation, when using, data acquisition layer realizes multi-source data automatic convergence and standardization, without manual integration scattered data, so as to improve the degree of supervision informationization;Core supervision layer covers the whole life cycle of project, solidifies unified supervision standard, intelligent analysis layer realizes risk real-time early warning through algorithm, application display layer provides personalized mobile operation, data storage layer and security guarantee layer guarantee data security traceable.

The invention discloses an enterprise digital information security monitoring system based on an intelligent firewall, and relates to the technical field of network security, the enterprise digital information security monitoring system comprises a visual monitoring platform, the visual monitoring platform is in communication connection with a data acquisition module, an abnormal behavior identification module, a behavior classification management and control module, an intelligent firewall module and a reinforcement learning module, the modules are in electric signal connection; the data acquisition module is used for collecting and preprocessing monitoring data from each key node of an enterprise internal network. By combining a behavior analysis technology, utilizing an intelligent firewall to identify real security threats and cooperating with reinforcement learning to effectively distinguish normal behaviors from abnormal behaviors, compared with a traditional static configuration security monitoring system, the method can dynamically adjust protection rules, perform real-time updating according to new threat intelligence or attack modes, and improve the security monitoring efficiency. And the false alarm and missing alarm conditions are obviously reduced, the security protection accuracy is improved, and a more reliable security guarantee is provided for an enterprise network.

The application provides a monitoring management module and method, a microcontroller, a computer program and a storage medium. The monitoring management module uniformly runs a security mechanism irrelevant to a virtual machine function or also runs a security mechanism corresponding to a started virtual machine. When a security mechanism monitoring error occurs, if the security mechanism is irrelevant to the virtual machine function, a global response or a partition response is executed; if the security mechanism is relevant to the virtual machine function, a fault response of the corresponding virtual machine is executed. It can be seen that by uniformly managing each security mechanism, the safe running environment of each virtual machine can be maximally ensured, the virtual machine does not need to perform security guarantee by itself, the development workload of the virtual machine monitoring software is reduced, and the hardware resources in the microcontroller and the computing resources of the central processing unit are saved, so that the cost is effectively reduced. In addition, the fault responses are separately managed, so that the virtual machines irrelevant to the fault can be ensured to normally run, and the system availability is improved while the system security is ensured.

The invention discloses a block chain fragmentation system error fragmentation security guarantee method and system, and the method comprises the steps: transmitting a request message to other nodes in an entrance fragment if a node is a node in the entrance fragment after a security guarantee trigger condition and a round trigger condition are satisfied, and determining a random fragment; after the leader node receives the request message with the preset proportion, a forwarding message is generated and sent to all nodes in the random fragment; after receiving the forwarding message of the leader node, the node in the random fragment generates a state message and feeds back the state message to the leader node; the leader node generates a new cycle message after receiving a preset proportion of consistent state message in the random fragment, and sends the new cycle message to all nodes in the entry fragment; and after receiving the new cycle message, the node in the entry fragment executes a conflict processing operation. According to the method, the situation that the security or activity of transactions in the fragments is threatened due to the fact that error nodes possibly exceed a threshold value in part of the fragments can be handled.

The utility model relates to the technical field of endoscopes, in particular to an adjustable disposable endoscope which comprises a grip, a switch and a connecting wire are arranged on the lower side of the grip, an inner assembly is arranged on the upper side of the grip and fixed to the grip through a fixing assembly, and the inner assembly is connected with the grip through a connecting wire. The inner mechanism is provided with a positioning assembly used for positioning the fixing assembly, through collaborative design of the fixing assembly and the positioning assembly, through the fixing assembly, stable installation of the inner assembly is ensured, meanwhile, convenient operation of rapid disassembly and assembly is achieved, and the maintainability of equipment is greatly improved; the positioning assembly and the fixing mechanism are matched to realize a double locking mechanism, so that the safety guarantee is improved, the accidental falling risk in clinical operation is effectively prevented, the inner assembly can be quickly replaced after single operation by adopting a disposable scheme, next detection is carried out, and the replacement efficiency in a high-frequency use scene is improved.

The application discloses a data access control method, device, blockchain network and storage medium. The method comprises: a client initiates a registration request to a password device, the registration request comprising identification information; receiving signature data and a first key, wherein the signature data is obtained by the password device signing the first key and the identification information based on a private key of a first public-private key pair of a blockchain network, and the first key is an access password of the password device; generating a second key based on the signature data, the second key being a root key for generating a second public-private key pair, and the second public-private key pair being a key of an extended network of the blockchain network. In this way, the access password and the client identification information are signed by the private key of the first public-private key pair of the blockchain network to obtain the signature data, which has high randomness and high security, thereby providing a security guarantee for subsequently generating the root key of the key pair of the extended network of the blockchain network.

The application relates to the technical field of database synchronization, in particular to a database synchronization method and system supporting virtual machine and container deployment, which comprises the following steps: architecture design, task definition and configuration, automatic deployment and intelligent scheduling, service discovery and load balancing, monitoring and alarming, security guarantee, and has the beneficial effects that the database synchronization method and system supporting virtual machine and container deployment are combined with the advantages of distributed scheduling of Nomad and containerization or virtualization technology, and through automatic deployment, intelligent scheduling and elastic expansion and other means, efficient and reliable execution of a database synchronization task is realized.

The application discloses a data space construction method and device, wherein the method comprises the following steps: distributing a data security engine, a data management terminal and a data space user terminal at the bottom layer of a data space system; performing data service analysis on the protection of the bottom layer data based on the data security engine, the data management terminal and the data space user terminal; wherein the data security engine comprises an access control model, a data desensitization algorithm, a data structure model, a data control flow model and an identity recognition model; accessing a plurality of data sources by using a data access module; accessing the data sources corresponding to the data management terminal, the data user terminal and the data security engine into the data space of the data space system to obtain the data sources of the data space; and constructing a security protection layer based on the data security engine according to the data sources of the data space to form a secure data space. The application is used for providing security guarantee for data with high confidentiality and security requirements.

The application discloses a kind of distributed energy and load intelligent management and control system based on wisdom family, including energy router host control unit, mains access module, family photovoltaic interface module, direct current energy storage interface module, new energy automobile charging interface module and household electricity interface module.Mains, photovoltaic, new energy automobile charging and household electricity interface module are connected with host control unit through direct current control type solid state relay.Direct current energy storage interface module is connected with host control unit through overcharge relay control circuit containing opto-coupler isolation device and switching triode, and integrates hardware level undervoltage protection circuit, provides double security guarantee of software and hardware.The host control unit of the application executes intelligent scheduling logic, according to illumination, energy storage battery capacity, power grid state and other information, preferentially allocates photovoltaic power supply, coordinates energy storage charging and discharging and power grid energy supplement, and guarantees core load power supply when power grid is powered off.

Disclosed herein is a formalized programming framework using memory compartmentalization and other properties of certified compilers to provide that security guarantees verified at the source level also hold on the compiled code. A trusted execution environment formulated as a collection of objects that access separate memory locations and conform to a public interface.

The invention discloses a security access control method, system and device for a power database and a storage medium, and the method comprises the steps: receiving user identity information sent by a user at an access terminal, and carrying out the user identity matching based on the user identity information in combination with living body face detection; after the user passes identity matching, state information of the access terminal is extracted, terminal environment risk perception of the access terminal is carried out according to the state information, and terminal environment risk information is obtained; extracting a historical access log of the access terminal, and performing abnormal access risk identification according to the historical access log to obtain abnormal access risk data; and calculating a risk coefficient of the access equipment according to the terminal environment risk information and the abnormal access risk data, and dynamically adjusting the access authority based on the risk coefficient. According to the method, the access reliability of the power database can be improved, the security guarantee of the power database access is ensured, the security of the access database is improved, and the power database is prevented from being threatened.

The invention relates to a cross-border data security identification method and system based on a streaming short object, and belongs to the technical field of electric digital data processing, and the method comprises the following steps: generating a service identifier, recording outbound data by an enterprise, and generating a data content ID by using a plug-in; the method comprises the following steps: sampling and generating a streaming short label, firstly carrying out key communication between an injection device and an identification device, then generating a streaming short label data packet by the injection device in a pre-generation and dynamic generation combined mode, and carrying out real-time injection in a data transmission process; in the data packet generation process, equipment ID hash, subkey derivation, flow attribute abstract and data encryption are completed; when a data packet is identified, outbound security identification equipment monitors a data stream, extracts stream-following short identification information through feature bit matching and decryption operation, and analyzes and obtains corresponding stream attributes and transmission information. According to the invention, the traceability and security of the cross-border data flow are guaranteed, the risk of sensitive data leakage is avoided, and the compliance and controllability of cross-border data management are improved.

Embodiments of the present application provide a cross-blockchain transaction synchronization method, device and equipment and a storage medium, relating to the technical field of blockchains; the method enables cross-blockchain synchronization of transaction data under the premise of decentralization and security guarantee; the method comprises the following steps: when a request of a first blockchain network for sending a local block to a second blockchain network is approved, in response to a transaction instruction triggered by a user, a transaction request block used for requesting a transaction is sent to any node of the second blockchain network; a transaction confirmation block sent by the second blockchain network is received; the transaction confirmation block is generated by any node of the second blockchain network in response to a confirmation instruction triggered by a user after the second blockchain network approves the transaction request block; transaction data recorded in the transaction confirmation block and the transaction request block is synchronized, and a transaction completion block is generated and sent to the second blockchain network.