233 results about "Security guarantee" patented technology

The present invention discloses a post-quantum key negotiation system and method based on the IKE protocol, which relates to the field of network security, especially the design and implementation of key exchange and identity authentication protocols. The present invention provides security for data protection and identity authentication by combining the IKE protocol scheme with the post-quantum cryptographic algorithm; by introducing post-quantum cryptographic algorithms such as ML‑KEM, ML‑DSA and FALCON, the quantum resistance of key exchange and identity authentication is enhanced, and the flexibility and adaptability of the protocol are also improved; in addition, the dynamic algorithm selection mechanism adopted by the present invention enables users to optimize security performance according to specific needs, thereby improving the overall efficiency of the system while ensuring information security.

The invention provides an industrial control network security service security guarantee system based on behavior analysis, which belongs to the technical field of industrial control network security, and comprises a multi-source data fusion acquisition module, a dynamic behavior modeling engine, a federal learning analysis cluster, an attack chain prediction module, a self-adaptive protection strategy executor and a model evolution feedback ring, wherein the multi-source data fusion acquisition module synchronously acquires industrial control network flow (including OPC UA / Modbus / DNP3 protocol analysis), equipment operation logs, user operation behavior fingerprints and physical interface state data, and the physical interface state data comprises electrical characteristic fluctuation monitoring of USB / network interfaces. According to the scheme, through multi-technology fusion and closed-loop design, the problems of static performance, single-dimension analysis defects and response lag of a traditional industrial control security scheme are effectively solved, a comprehensive protection system with dynamic modeling, intelligent decision making, privacy protection and continuous optimization is constructed, and the security and service reliability of an industrial control network are remarkably improved.

The invention relates to the technical field of path planning, and discloses an unmanned aerial vehicle path planning method based on large-range cruise, which comprises the steps of geographic information acquisition, geographic information processing, regional discretization, starting point and target point setting, feasible path search and path optimization. Geographic information collection is comprehensive and accurate, data of terrains, obstacles, no-fly zones and the like are covered, and a foundation is laid for path planning; regional discretization fits the characteristics of an unmanned aerial vehicle, cells are divided according to the minimum turning radius and the effective range of a sensor, and flight safety and perception are guaranteed. Feasible path searching is efficient and reasonable, and the optimal path is searched by well-designed cost and heuristic functions and considering multiple factors; path optimization is effective, based on a B spline curve smoothing method, curvature and length are reduced, energy consumption is reduced, and abrasion is reduced; safety verification is added, collision and cross-zone risks can be accurately judged, and safety guarantee is enhanced.

The invention discloses a self-learning intelligent question answering system and method with long and short term memory, and the system comprises a self-learning module, a large model reply module, a short term memory module, a long term memory module, and a safety guarantee module. The self-learning module realizes real-time learning and updating, so that the system can be continuously improved according to latest user interaction; the long-short term memory module processes short-term information and long-term information respectively, so that the system can flexibly meet various different types of user requirements, and accurate and timely answers are provided. According to the technical scheme, the technical problem that an existing system lacks self-learning ability and long-short-term memory design is solved, the intelligent level and user experience of the system are remarkably improved, more intelligent and efficient services are provided for a user, and the advantages and the positive effects are beneficial to popularization and application. Therefore, the system has strong competitiveness and wide application prospect in the market.

The invention provides an IKE (Internet Key Exchange) protocol security enhancement method based on PUF (Physical Unclonable Function) dynamic authentication and a post-quantum mixed key, which organically combines a PUF, a post-quantum cryptographic algorithm (PQC, especially Kyber KEM) and an improved Internet Key Exchange Protocol (IKE) to realize key exchange of post-quantum security and enhanced identity authentication. The method comprises the following steps: generating a dynamic pre-shared key (PSK) by utilizing the PUF; the method comprises the following steps: integrating a Kyber KEM to an IKE protocol, and replacing traditional Diffie-Hellman key exchange; the PUF-driven dynamic PSK is used as an identity authentication method of the IKE; meanwhile, Kyber KEM and ECDH are adopted for key exchange, and a final session key is generated through joint participation of a Kyber negotiation key, an ECDH negotiation key and PSK derived by PUF; and an IKE protocol process is optimized, and Kyber key exchange and PUF (Physical Unclonable Function) authentication are completed in an IKESAINIT stage and an IKEINTERMEDIATE stage. According to the method, key exchange is post-quantum secure, identity authentication is also post-quantum secure, and the final key integrates three key components of Kyber, ECDH and PUF, so that triple security assurance is provided.

The invention relates to a large language model intelligent contract code auditing method and system based on retrieval enhancement generation and back one-step prompt words. The method comprises the steps of performing block processing on a to-be-audited smart contract code, inputting the block processing into an embedding model, calculating cosine similarity between feature vectors, and outputting a similar feature vector set; obtaining a historical audit case by adopting a retrieval enhancement generation technology; identifying security risk points through a large language model to obtain a risk point set; the large language model adopts a one-step prompt word backing method to calculate and obtain an audit result set, and an audit report is generated according to the audit result set. According to the method, intelligent contract codes are segmented and subdivided into logic units, and potential risks can be identified and analyzed more accurately by using the powerful capability of a large language model, so that the safety and reliability of the intelligent contract are improved; and in combination with a backward one-step prompt word technology, the auditing efficiency and accuracy are remarkably improved, and a comprehensive security guarantee is provided for development and application of the smart contract.

The invention discloses a budgeting unit integrated management method. The management method comprises the following steps: establishing a unified data platform; the management process is optimized; real-time data monitoring and early warning are carried out; intelligent analysis and decision support; and establishing a safety guarantee mechanism. An execution report is generated through a data analysis model and a decision support algorithm, sustainable optimization, data encryption and access control guarantee the safety and stability of an integrated system, and full-life-cycle management and dynamic monitoring of financial funds are achieved.

The invention provides an intelligent collaborative innovation incubation and campus security fusion management platform, which relates to the technical field of fusion management and comprises a multi-modal data acquisition and fusion system, an intelligent decision and strategy optimization engine, an edge calculation and security communication architecture, a scenarized analysis and prediction module and a security assurance and model adaptation system. The multi-modal data acquisition and fusion system comprehensively collects multi-source data of a campus environment, personnel behaviors and equipment states through a multi-sensor array, realizes efficient fusion of different modal features by using a feature fusion algorithm based on tensor decomposition, provides a comprehensive and refined data basis for subsequent analysis, and improves the accuracy of data fusion. And the intelligent decision-making and strategy optimization engine learns and generates an optimal decision-making strategy for various scenes of campus safety management by virtue of a plurality of advanced algorithms such as a consensus double-Q network algorithm, an artificial fish swarm optimization algorithm based on Levy flight, a particle swarm optimization algorithm based on quantum behaviors and the like.

The invention relates to the technical field of computers, and discloses a data control method and system, electronic equipment and a storage medium, and the method comprises the steps: receiving a data control strategy defined by a data owner, and the data control strategy is constructed based on a quintuple framework and comprises a subject, an object, an environment condition, an operation behavior and an effect; compiling the data control strategy into an intelligent contract code, and generating a source code based on an intelligent contract template; deploying the smart contract code to a block chain network to form a decentralized strategy decision point; intercepting the data access request, triggering the smart contract to verify the access request, and generating an access credential when the verification is passed; and allowing data access based on the access credential, and monitoring a data use behavior to ensure consistency with the data control strategy. According to the method, the fine granularity and the whole-process coverage of data control can be improved, the auditing credibility can be improved, the automation level and the efficiency of a control system can be improved, and the end-to-end safety guarantee capability is enhanced.

The invention relates to the field of large language models, and provides a safety guarantee method for text generation of a large language model. The existing watermarking technology can detect whether a text comes from a specific model or not, but cannot trace the identity of a user, so that responsibility can not be traced when the text is spread or tampered for the second time. According to the main scheme, a statistical signal is embedded in a generated text based on a relaxed red-green dictionary method, and a model tends to select a green list token by adjusting the token sampling probability when the language model is generated; the user information is a mobile phone number or an identity card number, Base4 coding is carried out, and offset information is obtained; in the basic watermark text, starting from the first green token, generating a synonym list based on the context every two continuous token positions, and selecting corresponding synonyms for replacement according to the offset so as to implicitly embed user information; the method comprises the following steps: detecting a basic watermark, recovering a text by using a Transform-based sequence denoising auto-encoder, and extracting user information according to a replacement position and an offset.

The invention provides an intelligent prediction method and system applied to system log security audit, and the method comprises the steps: firstly obtaining a historical log data set of a power monitoring system, carrying out the event correlation modeling, generating a log event correlation model, generating a security event prediction rule library based on the log event correlation model through a rule mining algorithm, and carrying out the prediction of the security event. And then obtaining a real-time log data stream, inputting the log event association model to obtain a real-time event association result, matching the real-time event association result with the rule base to generate an abnormal event prediction result, finally generating a security audit report according to the abnormal event prediction result, sending the security audit report to the power monitoring terminal, and updating rule base parameters according to feedback information. Therefore, the abnormal event in the power monitoring system can be predicted in advance, and the intelligent level and the safety guarantee capability of system safety auditing are improved.

The invention discloses an intelligent logistics platform electronic signature automatic management method and system, and relates to the logistics management technology field, and a contract signing module of the system integrates a signature request unit, a first processing unit, a second processing unit, an electronic signature obtaining unit and a contract signing unit. Through the units, the effective verification of the user identity is realized, the dynamically encrypted and stored electronic signature is quickly obtained, and the security guarantee is provided for the contract signing process. In addition, the system also comprises a contract template management module, a signature management module, a contract generation module, a log and audit module, a user authority management module and the like, which jointly provide a comprehensive, efficient and safe intelligent logistics platform electronic signature automatic management scheme.

The invention relates to the technical field of data transmission, and particularly discloses a block chain-based data security storage and verification method, which comprises the following steps: collecting biological characteristics, generating a first dynamic key, the first dynamic key being used for encrypting first data, and updating during each access to ensure the key timeliness; dividing the first data into a plurality of segments according to logic, generating segmented hash values, and storing the segmented hash values on a chain; dynamically loading the corresponding fragment according to the user permission, and realizing anonymous verification through a homomorphic encryption technology; based on the Internet of Things technology, the first positioning parameter and the first state parameter are combined, the access permission is dynamically adjusted, and a self-destruction mark is set to avoid the overtime access risk; and in the storage process of the data fragments, dynamic security scoring and path adjustment are performed through distributed storage. According to the method, the static problem in data storage and access control is solved, and a more flexible and reliable security guarantee can be provided in a dynamic access scene.

The invention discloses an authority control method and device, computer equipment and a computer readable storage medium, relates to the technical field of information security management and control, performs authority management through an interface, realizes fine-grained management and control of authority, enhances the security protection capability of a system, ensures that different user roles can only access authorized data resources, and improves the user experience. The authority control requirement of an enterprise in a complex business scene is met, and a solid security guarantee is provided for enterprise informatization construction. The method comprises the following steps: in response to a system access request, determining that the system access request indicates a to-be-accessed target interface; acquiring role information of a target role initiating the system access request, determining a target platform associated with the role information, and matching interface permission information of the target role under the target platform; and when the interface permission information indicates that access to the target interface is allowed, generating a target menu based on the target interface, and controlling the target role to access the target menu.

The invention relates to the technical field of data analysis, and discloses an intelligent safety guarantee platform for a crane. The platform is characterized in that a data acquisition module acquires crane operation parameters through a sensing network and performs feature extraction; the state monitoring module monitors and evaluates the states of steel wire rope abrasion and brake clearance key components; the basic operation and maintenance module formulates a maintenance plan based on the health indexes and historical data; the operation guarantee module carries out safety assessment on hoisting operation and generates a control scheme; the system management module monitors a platform operation process; and the knowledge base module performs association analysis on various data and constructs an intelligent operation and maintenance knowledge base. The method is suitable for various cranes such as portal cranes, bridge cranes and gantry cranes specified in GB / T 20776, and intelligence and precision of the crane maintenance process are achieved.

The invention discloses an intelligent and safe express logistics supporting system and an intelligent and safe logistics supporting method. The method comprises the following steps: (1) receiving and processing an order; (2) cargo collection and packaging; (3) tracking and positioning goods; (4) intelligent sorting and loading intelligent sorting; (5) intelligent distribution and transportation; (6) receiving and signing; (7) data analysis and optimization; (8) safety guarantee and exception handling; and (9) customer service and feedback. According to the invention, accurate comparison needs to be carried out according to order placing information during order placing and pick-up, so that a user is prevented from replacing goods during pick-up at the stage, after the sent goods are confirmed to be received after being correct, a courier also carries out monitoring in the pick-up and delivery process, and a pick-up person also carries out real-time monitoring during pick-up; and after the goods are confirmed to be correct, the goods can be taken, and after the goods are monitored to have problems, the loss is assessed through video evidence obtaining, so that unnecessary disputes are avoided.

Provided in the present application is a function management method. The method comprises: receiving a function call trigger event triggered by a user for a target function; on the basis of a function identifier of the target function, acquiring functionality classification information of the target function; on the basis of the functionality classification information of the target function and a mapping relationship between a function functionality and a container type, determining a target container type matching the functionality classification information of the target function; allocating, from a container resource pool, a container of the target container type to the target function; and loading, in the container, a code package of the target function, so as to execute a corresponding system call behavior. In the method, isolation technology for matching differentiated containers for functions according to requirements is provided, the functions are classified from a security dimension, and the functionalities of containers are separated, such that the functions of different security types are operated in different types of containers, and thus the calculation and data security of the functions themselves are achieved, and the security guarantee for a serverless platform is realized, thereby preventing a malicious function from performing container escaping to destroy an operation environment of the serverless platform.

The invention discloses a secure startup method and system of a trusted controller, and belongs to the technical field of industrial control system security, and the method comprises the steps: configuring a secure startup strategy in U-Boot, and executing the secure startup strategy in the startup process of the trusted controller through a trusted controller drive; when the trusted controller is started, the security starting strategy is verified by adopting the first-level security strategy, and corresponding security check is executed according to the security starting strategy after verification is passed; after the trusted controller is started, the security starting strategy establishes a trusted chain according to the trusted files, measurement verification is carried out on all the trusted files of the trusted chain, and when all the trusted files pass verification, the trusted controller passes trusted verification; according to the secure starting method of the trusted controller, the reliability of the system is improved through establishment and verification of the trusted chain, a flexible protected area and comprehensive trusted file verification, and comprehensive security guarantee is provided for the system.

The invention discloses a cloud-side collaborative household arrhythmia early warning AI agent, and relates to the technical field of AI agents. The system specifically comprises a data acquisition module, an edge computing module, a cloud computing module, an application module and a safety guarantee module, the data acquisition module acquires electrocardio and related physiological signals in real time through wearable equipment, and the edge computing module performs preprocessing and preliminary anomaly detection on data, quickly responds and screens key data and uploads the key data to a cloud; the cloud computing module carries out deep analysis and personalized model training; the application module converts a cloud result into real-time early warning and health suggestions and pushes the real-time early warning and health suggestions to the user and medical personnel; the security guarantee module runs through the whole process, and ensures the privacy and security of data in acquisition, transmission, storage and application. According to the invention, data processing is scientific and efficient, data can be comprehensively collected and preprocessed, meanwhile, real-time preliminary screening and secure transmission are realized, and the transmission pressure and privacy risk are reduced.

The invention discloses an optical cable network automatic monitoring system based on industrial equipment, which relates to the field of industrial automation and comprises a dynamic monitoring module, an abnormity repairing module, a structure analysis module, a cloud management platform module, an automatic alarm module, a safety guarantee module, an intelligent maintenance module and an expansion compatible module. Wherein the output end of the dynamic monitoring module is connected with the input ends of the abnormity repairing module and the cloud management platform module; the output end of the abnormity repairing module is connected with the input end of the structure analysis module; the output end of the cloud management platform module is connected with the input end of the automatic alarm module; the output end of the automatic alarm module is connected with the input ends of the intelligent maintenance module and the safety guarantee module; the output ends of the safety guarantee module and the intelligent maintenance module are connected with the input ends of the cloud management platform module and the expansion compatibility module; according to the method, the problems that a fault point cannot be predicted, a network topology structure cannot be automatically identified and optimized and the compatibility is poor in a traditional monitoring system are solved.

The invention provides a function management method, which comprises the following steps of: receiving a function call trigger event which is triggered by a user and aims at a target function, acquiring function classification information of the target function according to a function identifier of the target function, and performing function call according to the function classification information of the target function and a mapping relationship between a function and a container type, and determining a target container type matched with the function classification information of the target function, allocating a container of the target container type to the target function from a container resource pool, and loading a code package of the target function in the container to execute a corresponding system calling behavior. According to the method, an isolation technology for matching the functions with the differentiated containers as required is provided, the functions are classified from security dimensions, and the functions of the containers are separated, so that the functions of different security types are operated in different container types, the calculation and data security of the functions are realized, the security guarantee of the serverless platform is realized, and the safety of the serverless platform is ensured. And the malicious function is prevented from escaping from the container and damaging the operation environment of the serverless platform.

The invention relates to unified data backup and disaster recovery equipment, in particular to the field of data security, and specifically comprises a data backup module, a disaster recovery module and a recovery verification module, the data backup module is used for carrying out data fragmentation on data needing to be backed up, then carrying out Hash processing on each data block by utilizing a Hash function, distributing each data fragment to a plurality of backup nodes, registering a Hash value of the data fragment on a block chain by the backup nodes, and storing the Hash value on the corresponding backup node; in the storage process, a smart contract is utilized to manage data backup operation according to a preset rule, and by utilizing the characteristics of decentralization and non-tampering provided by a block chain technology, security guarantee of data backup can be realized in backup and disaster recovery, the problems of security and consistency of traditional centralized backup are solved, and data backup efficiency is improved. And through a block chain technology, distributed storage of the data can be realized, and it is ensured that the data is not tampered in a backup process.

The invention discloses a communication method based on a post-quantum key encapsulation algorithm, which overcomes the problems that in the prior art, TLS protocol communication cannot cope with the threat of a quantum computing technology and is low in security, and comprises the following steps: generating a public and private key pair, and sending a handshake message from a user side to a server side; generating a random message from the message space, packaging the random message and the public key by adopting a quantum key packaging algorithm after CPA security, and sending a handshake message from the server side to the user side; decrypting the private key and the ciphertext and calculating an intermediate variable of the TLS protocol, wherein the user side and the server side receive the intermediate variable required by the negotiation key in the TLS protocol; and the server side calculates the signature information by using the mask function, the user side receives the signature information and compares the signature information with the original signature information, and if the comparison succeeds, data transmission is carried out. Therefore, security guarantee against quantum computing attack is provided for communication, and the communication security is improved.

The invention relates to an information management method for a supply chain comprehensive management platform, and the method comprises the steps: obtaining and sorting supply chain related enterprises, and determining a plurality of block chain nodes; obtaining operation data of supply chain associated enterprises, and storing the operation data to corresponding block chain nodes; label set mapping is carried out on the operation data based on the sorting result; respectively inputting the operation data into the prediction model and the optimization model; performing association analysis on the operation demand prediction information and the operation optimization information to generate an operation optimization strategy; the operation optimization strategy is stored in the block chain node correspondingly associated with the operation optimization strategy; according to the method, the blockchain technology is introduced, so that the transparency and traceability of supply chain information are realized, and the problems of information asymmetry and data islands are solved; demand prediction and process optimization are carried out through the pre-training model, so that the real-time response capability to market changes and risks is improved; and by generating and storing an optimization strategy, a basis and a safety guarantee are provided for continuous improvement of the supply chain.

The invention discloses an inner product encryption method, device and system based on a GR-LWE problem, and belongs to the technical field of information encryption, and the method comprises the following steps: generating a main public key and a corresponding main private key based on a dihedral non-exchangeable group ring and preset security parameters; obtaining vector data used for decryption, and carrying out operation on the vector data and the main private key to generate a decryption key used for decryption operation; vector data to be encrypted and plaintext data to be encrypted are obtained and are operated with the public key part in the main public key to generate a ciphertext; and a decryption key is used for carrying out decryption operation on the ciphertext, and when and only when the inner product result of the vector data for decryption and the vector data to be encrypted is 0, correct plaintext data can be obtained. According to the invention, an inner product encryption scheme is expanded to the dihedral non-exchangeable group ring, so that the security of the encryption scheme is improved, and long-term security guarantee is provided for resisting quantum computer attacks.

The invention provides a dynamic security division method and related equipment, and relates to the technical field of artificial intelligence. The method comprises the steps that environment element description information and user element description information are obtained from a spatial ontology knowledge model, the environment element description information is information for describing environment element categories, and the user element description information is information for describing user element categories; according to a preset security interaction rule, security interaction information between the environment element description information and the user element description information is constructed, and the security interaction rule is used for determining whether a security interaction relationship exists between the environment element and the user element; performing security assessment according to the security interaction information to obtain a security assessment result; and carrying out security division on the area in the application scene space according to a security evaluation result. According to the method and the device, security area division is carried out for the user in the application scene space, the space security guarantee of family members is improved, and the application scene space customized for area security is provided for the user.

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention relates to the technical field of medical information security, in particular to a security guarantee method and system in a medical data interaction process, and the method comprises the steps: firstly carrying out the read-only solidification and disk encryption of data, and building a fingerprint hash tree; zero-knowledge proof and dynamic privacy budget are generated according to strategies such as purposes and calling times, and semantic vectors are obtained through encoding and signed into a revocation chain; the algorithm is divided into linear, nonlinear and pulse sub-graphs in a credible environment, three-domain ciphertext calculation is carried out, Laplace noise is injected into pulse output according to budget and then fusion is carried out, and a re-linearization key is derived; a hypergraph commitment is generated based on a fused ciphertext, a semantic vector and a key drive delay function are utilized to take a random value and a proof, a composite commitment is obtained through a threshold signature and a random bit sequence, cross-chain evidence storage with root hash is carried out, and differential privacy and long-term auditing are realized.

The invention discloses an AI large model-oriented financial private network optimization method and system, and relates to the technical field of communication networks. According to the method, an exclusive path strategy is generated for AI training, reasoning and sensitive data traffic by collecting AI service requirements and network states and utilizing the SID programming capability of SRv6; the load of the computing power node is monitored in real time, the computing power state is linked with network scheduling, and network-computing power collaborative optimization is realized; a hop-by-hop path authentication mechanism based on a dynamic authentication segment identifier Auth-SID is introduced, so that the security of a data transmission path is enhanced; and end-to-end visual operation and maintenance and closed-loop feedback of the service flow are realized by adopting a flow-following detection technology. According to the invention, the problems of mismatching of flow scheduling and AI service requirements, insufficient network and computing power collaboration, lack of path security guarantee and weak operation and maintenance visualization capability in the prior art are solved, deep adaptation of network resources and the AI service requirements is realized, and the computing power collaboration efficiency, the path security and the operation and maintenance intelligence level are improved.

The invention discloses a zero-trust gateway single packet authentication method and system for a new energy fan control system, computing equipment, a computer storage medium, a computer program product and a chip. The authentication method comprises the steps of generating an authentication material; exchanging and deriving a mixed key; binding Hash calculation is carried out; encrypting and assembling the message; receiving and verifying by the gateway; and binding verification and registration are carried out. The invention relates to a zero-trust gateway single packet authentication method combining a post quantum cryptography algorithm and a national commercial cryptography algorithm. The method is applied to secure communication between a wind power plant and a centralized control center, an SM2, SM3 and SM4 combined algorithm in a national secret system is combined with a post-quantum key agreement algorithm CRYSTALS-Kyber512, identity authentication, encryption and integrity verification are completed through a single message, confidentiality protection and anti-quantum security guarantee under one-time interaction are achieved, and the security of the wind power plant is improved. The method is especially suitable for new energy scenes with wide fan distribution, complex links and high real-time requirements.