1436 results about "Security level" patented technology

The invention belongs to the technical field of data security, and discloses a data management method based on a data resource security identification level, and the method achieves the automatic and intelligent decision making: achieves the data classification and the automatic identification of the security level through a machine learning and deep learning model, remarkably reduces the manual intervention, and improves the efficiency and accuracy. And dynamic real-time performance: in combination with a risk assessment model, the system can detect abnormal behaviors in real time and dynamically adjust a security policy in a data flow process, so as to ensure that the sensitive data is properly protected in different scenes. And security and compliance: a log auditing module ensures the traceability of all data operations, improves the response capability to potential risks through an anomaly detection algorithm, and provides effective compliance guarantee for data security governance. And the system can be compatible with various data sources, supports configuration and execution of various security policies, and is suitable for data security management requirements of different industries (such as finance and medical treatment).

The invention relates to the technical field of data desensitization, in particular to an electronic commerce platform information security desensitization scheme analysis system based on artificial intelligence, which comprises a data classification module, an access evaluation module, a dynamic desensitization module and a security audit module. According to the method, the data of the e-commerce platform is intelligently classified and evaluated by adopting an artificial intelligence technology, dynamic desensitization and finer access control of the data are realized, various data access requirements can be dynamically met by evaluating the sensitivity level of the file and the security level of the access request, data processing is performed according to requirements, and the data processing efficiency is improved. The security and privacy of user data are effectively protected, through automation of security audit, the recognition efficiency of abnormal behaviors is improved, the transparency and traceability of overall data management are enhanced, through real-time analysis and response, the risk of data leakage is reduced, and the practical value of data and the fluency of service operation are kept.

The invention relates to the technical field of safety monitoring, in particular to a building bearing capacity detection system based on the Internet of Things, which comprises a strain load module, an offset gradient module, a rhythm risk module, a threshold judgment module and a map reconstruction module. According to the method, the maximum strain excursion and direction reversal characteristics of adjacent time windows are analyzed and captured through the dynamic frequency excursion gradient, the response sensitivity to microcosmic bearing capacity fluctuation is improved, a strain jump rhythm map is constructed, sudden change time point time difference, amplitude difference and direction continuity parameters are extracted, and an abnormal load section is accurately positioned. The method comprises the following steps: identifying sudden strain jump events, performing cross-level rhythm map multi-dimensional comparison by applying a dynamic time warping algorithm, screening synchronous mutation nodes to generate a risk set, performing density clustering sorting based on direction consistency parameters, reconstructing a security level topological map, and improving visual spatial relevance and dynamic evolution characteristics of a structural instability path.

The invention provides a digital asset security verification and information monitoring method and system, and the method comprises the steps: carrying out the classification of digital assets through employing a multi-dimensional classification model according to the type attributes of the digital assets, obtaining the classification labels and feature vector representations of the digital assets, and building a digital asset feature database; obtaining transaction historical data of the digital assets from the digital asset association map, discovering association rules and abnormal modes of digital asset transactions by using a time sequence mode mining technology, and forming a transaction verification rule base; according to the data structure of the algorithm adaptation layer, an intelligent data analysis and conversion technology is adopted, heterogeneous digital asset data is mapped to a unified feature space, standardized digital asset data is generated, and a digital asset feature database is formed; and performing deep verification analysis by using the digital asset feature database to obtain security attribute information of the digital assets, and performing dynamic assessment on the security level of the digital assets by using a multi-factor risk assessment model to generate the security rating of the digital assets.

A system and method for dynamically visualize and modify user authority and security resource edge based on access behaviors in a cloud computing environment. The method provides a new access control perspective to ensure the credibility of database object usage patterns, build clearer and explicit security data consumption mode for data usage requests, and guide tenants to have a more comprehensive understanding and concise use. Processing components and method are configured to gather data and analytics including collecting data resource and database object usage tagging both resources and users with security level by machine learning and building an access model for each role. The method uses graph modeling with created, trained access patterns for users protected resources and produces in-memory implicit sub-groups for users with similar access requirements and limits their resource accesses according to their history behaviors. Further provided are outlier activities prediction and in-real time access authorization modification.

The invention provides a distributed multi-mode data cross-trust-domain data sharing method and system, and relates to the technical field of data sharing, and the method comprises the steps: carrying out the type recognition and format standardization processing of heterogeneous data provided by a plurality of data source nodes; dividing the data source node into different trust domains based on the security level, the authorization range and the protection strategy; constructing a cross-trust-domain data mapping model to establish a data synchronization channel; verifying the access authority through the smart contract and recording an access log; a distributed consensus mechanism based on a Byzantine fault-tolerant algorithm is adopted to synchronize data states, and data conflicts are solved through version control. According to the invention, secure sharing and state consistency maintenance of heterogeneous data are realized, and the reliability and fault tolerance of cross-trust-domain data sharing are improved.

The invention provides a digital certificate generation method and device, electronic equipment and a storage medium, and the method comprises the steps: receiving a certificate generation request sent by a user terminal, the certificate generation request comprises user information and an identifier of a certificate generation algorithm, and the certificate generation algorithm comprises a post quantum cryptographic algorithm and a preset national cryptographic algorithm; and generating a target mixed public key according to the post-quantum public key of the post-quantum cryptographic algorithm and a national cryptographic public key of a preset national cryptographic algorithm, generating a target digital certificate according to the user information and the target mixed public key, and sending the target digital certificate to the user terminal. The digital certificate is generated based on the post-quantum cryptographic algorithm and the national cryptographic algorithm, so that communication security can be ensured, quantum attacks are resisted, and certificate generation at an unconditional security level is realized.

The invention relates to the technical field of data supervision, in particular to a data security protection supervision system, which comprises an access monitoring module, a behavior abnormity monitoring module, a security configuration module and a data risk management module, and is characterized in that based on user access behavior data, access frequency and security level information are collected, and user behavior characteristics are automatically extracted; an access control snapshot is obtained. According to the method, through dynamic permission configuration and real-time abnormal activity monitoring, data access safety is remarkably improved, user behavior characteristics are automatically extracted, behavior deviation is analyzed, quick response to potential risks is ensured, and through the continuously-updated safety strategy and risk assessment, the safety of data access is greatly improved. The security measures are allowed to timely adapt to the constantly changing threat environment, and through detailed risk management, the processing speed and accuracy are improved, so that the data supervision is more efficient, the possibility of data leakage and abuse is reduced, and the flexibility and reliability of the system in the aspect of protecting data privacy and integrity are ensured.

The invention relates to the technical field of cores, and discloses a method and a system for realizing USB flash disk equipment interaction based on a flash memory encryption technology, which comprises the following steps of: dividing an encryptable data block of a flash memory controller, and determining a dynamic entropy weight of the encryptable data block by utilizing an equipment interaction instruction and a random noise characteristic signal; generating a self-adaptive key generation sequence capable of encrypting data blocks through an address allocation mode and a dynamic entropy weight of a flash memory controller; calculating a side channel leakage risk index of the flash memory controller, and setting a security level label of an encryptable data block in combination with a self-adaptive key generation sequence; the method comprises the following steps: setting a differentiated security protection mechanism of an encipherable data block by constructing an access control matrix of the encipherable data block and an encryption risk area of a flash memory controller; and generating a secure interaction scheme of the USB flash disk equipment based on the self-adaptive key generation sequence in combination with the differential security protection mechanism and the access control matrix. According to the invention, the interaction safety and reliability of the USB flash disk equipment can be improved.

The invention provides a data encryption transmission system and method, relates to the technical field of data encryption transmission, ensures basic safety of data transmission through AES pre-encryption processing, further introduces a data acquisition module and a data processing module, can monitor environmental parameters and operation state parameters in different time periods, and analyzes variation indexes of the parameters, so that the data encryption transmission can be realized. Dynamically adjusting an encryption strategy to adapt to different data transmission environments; through a matched decryption mechanism of an encryption lock and a decryption condition, the security of identity verification is improved; and the adaptive adjustment of the conformity threshold value M is realized through the dynamic adjustment module, so that the system can automatically adjust the security level when facing complex attacks, and the security and flexibility in the data transmission process are greatly enhanced.

The invention discloses a data asset credible circulation method and system based on intelligent contract dynamic assessment, and relates to the technical field of data asset circulation security, and the method comprises the steps: extracting the type, sensitivity and source authentication level of a data asset, calculating a comprehensive risk score based on a security risk assessment model, and dynamically dividing the security level; matching an intelligent contract template according to the grade, setting a circulation authority, and binding an asset fingerprint and a contract address; identity authentication and dynamic reputation management are carried out on the block chain nodes, and the access authority is adjusted in real time; after a circulation request is received, on-chain dynamic verification is performed by integrating node qualification, asset state and purpose matching, compliance score decision circulation permission is calculated, an intelligent contract is called to execute circulation operation, an on-chain circulation track is generated, and a circulation safety state is monitored in real time. The method has better effects in the aspects of safety, flexibility and credibility.

The invention discloses a multi-factor authentication trusted data space access control method, platform and medium, and relates to the technical field of data security, the method comprises the following steps: analyzing the authority, record, path and target of a request access user, and obtaining access parameters; generating a verification gradient based on the security levels of parameter matching permissions, records, paths and targets; in combination with the gradient and the user authentication record, creating an authentication demand factor with gradient constraint; and generating a space access permission according to the authentication result, and controlling the trusted data access permission. According to the scheme, the data security protection capability is enhanced through a dynamic multi-factor verification mechanism. According to the method and the device, the technical problem of insufficient data security protection capability caused by lack of a multi-factor dynamic authentication and fine-grained access control mechanism in a data space access process in the prior art is solved; the technical effects that the access authority is dynamically adjusted based on multi-factor authentication, and the data security and credibility in the data space access process are effectively improved are achieved.

The invention discloses a trusted cloud security confidential privacy level product service method, and relates to the technical field of design of cloud computing security. The method comprises the following steps: acquiring a trusted cloud privacy security level and a hierarchical core security mechanism, establishing a binding relationship with a product, extracting technical features and performing quantitative scoring, and constructing a three-dimensional security matrix; obtaining a privacy grading service demand of the user, and establishing a demand matching model to screen a security preference grade product; obtaining different-dimension technical grade improvement times of the user security preference grade product, and carrying out synergistic effect analysis; if significant positive correlation exists, correlation analysis is carried out to obtain a dynamic correlation coefficient, a product optimization strategy is made, a three-dimensional security matrix is dynamically updated, and the trusted cloud security confidential privacy level product service system comprises a feature classification module, a product optimization module, a collaborative analysis module and an optimization updating module. According to the method, more accurate security product recommendation can be provided for the user, and the trusted cloud security service level is improved.

The invention discloses an information security management method and system for enterprise customers, and relates to the technical field of information security, and the method comprises the steps: collecting equipment identification information data and operation behavior data, carrying out the security scoring of the equipment identification information data and the operation behavior data through a security baseline model, generating a security level, and dividing a security control region. An access permission and a data encryption strategy are configured; establishing a dynamic session channel for data transmission of the security control area, and performing key updating according to a preset time period; and monitoring data transmission characteristics of the dynamic session channel, triggering multi-factor identity authentication, and recording an audit log. According to the method, an accurate quantitative evaluation mechanism of equipment and user behaviors is established through the security baseline model, and comprehensive perception of security risks is realized; the differentiated management and control region division based on the security level enables the security resource configuration to be finer and more intelligent; and the multi-factor identity authentication and the audit log record cooperate with each other, so that the reliability of identity authentication is improved.

The invention discloses a machine learning method and system based on privacy protection enhancement, and relates to the technical field of data processing. The method comprises the steps of monitoring real-time data streams of a plurality of data sources based on real-time input data, analyzing relationships among various data, drawing a data association network diagram, evaluating information leakage risks and privacy sensitivity of a plurality of data points by analyzing interconnection density and path distribution of nodes in the network diagram, and generating sensitivity evaluation indexes. According to the method, the security and privacy protection level in the data processing process are improved by identifying the risk points in the data in real time and specifically adjusting the noise level of the data points, and the encryption processing efficiency and security are improved by comprehensively considering the data processing efficiency, security level requirements and computing resource consumption; the stability of encrypted data is tested by simulating network attack conditions, the capability of coping with network attacks is enhanced, input data is enabled to support various data analysis tasks, and the privacy and security of the data are ensured.

Systems, devices, methods, and circuits for managing data security in storage devices. In one aspect, a storage device includes at least one memory device and a controller coupled to the at least one memory device. The controller is configured to: encrypt first data with a first type of cryptographic algorithm and encrypt second data with a second type of cryptographic algorithm. The first data is associated with a first security level, and the second data is associated with a second security level that is higher than the first security level. The second type of cryptographic algorithm has a greater encryption strength than the first type of cryptographic algorithm.

The invention relates to the technical field of communication data processing, and discloses an AI intelligent communication data processing method based on edge computing, which comprises the following steps: dividing a communication region into three regions, deploying an edge computing node in each region, actually collecting signal data, environmental data and historical signal data of the region by the edge computing node, and transmitting the signal data, the environmental data and the historical signal data to a server; analyzing the preprocessed signal data to generate a regional fluctuation index, extracting multi-dimensional features such as behavior entropy and physical offset from the signal data, generating the regional fluctuation index in combination with a dual-core dynamic baseline and environment data, and performing two-dimensional analysis, radio frequency authentication and other processes to obtain the regional fluctuation index. The method can accurately identify the disguised Wi-Fi signal similar to the normal signal, dynamically judges based on the cooperative verification coefficient, blocks and defends according to the regional security level, effectively prevents the disguised signal from permeating, prevents data from being stolen, and guarantees the security and processing efficiency of campus communication data.

The invention discloses an edge computing-based industrial Internet of Things equipment data encryption transmission method, which comprises the following steps of: constructing an edge node alliance comprising at least two cross-regional edge gateways, completing bidirectional identity authentication through an alliance root certificate, and establishing an encrypted communication link; industrial equipment collects original data and then transmits the original data to an edge gateway which the industrial equipment belongs to, and the gateway extracts data features and divides the data features into a core control level, a process parameter level, a common monitoring level and a security level; differential encryption strategies are adopted for different levels of data; each edge gateway uploads the encrypted data to a distributed key management node, and obtains and synchronizes a periodically updated key chain; during cross-region transmission, performing secondary packaging and encryption to generate a data packet containing identifications such as a security level and the like; and the receiving end verifies the legality of the node, decrypts and verifies the integrity of the data, distributes the data if the decryption is passed, and blocks the alarm if the decryption The method is suitable for scenes such as single-area monitoring and multi-area manufacturing, data security and transmission efficiency balance are achieved, and all-weather stable transmission is guaranteed.

The invention discloses a data acquisition method and device for an energy management system, equipment and a medium. The energy management system is used for managing multiple power plants. The method comprises the following steps: creating a to-be-constructed big data platform which comprises a data acquisition layer, a data processing layer and a data storage layer; deploying a multi-protocol adapter cluster on a data acquisition layer; constructing a data standardization pipeline in a data processing layer, and generating a multi-level security label in combination with a data source security level, a service association degree and an updating frequency; a hierarchical storage framework is designed in a data storage layer and used for constructing a redundant index table crossing storage nodes and a data blood relationship graph based on a graph database; and deploying a dynamic security gateway between the data acquisition layer and the data processing layer, dynamically selecting a corresponding encryption algorithm according to the data security label, and completing the construction of a big data platform, so as to complete the data acquisition of the plurality of power plants based on the big data platform. And high-reliability, traceable and safe data support is provided for cooperative management of multiple power plants.

The invention provides an API (Application Program Interface) calling management and control system and authentication method for different security protection levels in a specific field. According to the system, APIs are isolated and deployed to matched API gateways according to security levels, so that the requirement of a specific field for resource isolation of different security protection levels is met. The core component comprises an API gateway management and control module, a caller registration module, an API subscription module, an authentication module and a display center module. In order to ensure the security and credibility of an API caller, an API calling authentication method for different security protection levels in a specific field is designed, and multi-level authentication control is carried out on the basis of an authorization certificate, an IP address, a security level attribute and an access authority. According to the technical scheme, the authorization range of the API resources is controlled, it is ensured that an API caller can only access the API resources matched with the safety protection level of the API caller, confidential data leakage caused by unauthorized access or unauthorized access is effectively prevented, and the high safety requirement for API protection in the specific field is met.

The invention provides a dynamic encryption communication method, system and device for an Internet of Things device, and a storage medium, and the method comprises the steps: obtaining the current geographic position information of the Internet of Things device, and determining the security demand level of the Internet of Things device according to the current geographic position information and a preset geographic position list of different security levels; acquiring a network performance index of a mobile network shared channel at the position of the Internet of Things equipment, and determining a congestion degree parameter of a surrounding network environment according to the network performance index; classifying according to the service type of the Internet of Things equipment to obtain a service volume level; and integrating the obtained security demand level, the congestion degree parameter and the service volume level, dynamically selecting a corresponding encryption algorithm to encrypt sensitive data of the Internet of Things equipment, and transmitting the encrypted data to a cloud server. By dynamically selecting the encryption algorithm and adjusting according to the location information, the security and the energy efficiency can be balanced in different scenes.

The invention provides a data classification and grading method and device based on an artificial intelligence large model technology, and relates to the field of data security. The method comprises the following steps: constructing a data classification and grading catalog according to a preset classification rule, and storing each row of the classification and grading catalog as a document record in a target vector database; respectively carrying out first retrieval operation, second retrieval operation and third retrieval operation on the data classification and grading catalog by taking the business system name, the data table name and the field name as first query conditions so as to obtain a first matching document, a second matching document and a third matching document in the target vector database; sorting the first matching document, the second matching document and the third matching document according to a preset sorting mode, and obtaining a sorting result; and inputting a sorting result into the large language model, and performing data security early warning through the large language model. According to the method and the device, the security problems that corresponding security measures cannot be taken, sensitive data is leaked and the like when a data governance engineer identifies the metadata according to the data classification and classification catalog and judges the classification and security level of the metadata are solved.

The invention relates to an intelligent hierarchical access control method and device for railway knowledge and electronic equipment, and the method comprises the steps: registering key certificates for national railway group nodes, railway bureau group nodes and basic-level station nodes, and generating global trusted identity chain certificates; dividing the to-be-accessed railway knowledge assets into four levels, and establishing a relationship between the security level and the user role; loading a railway exclusive strategy expression, and supporting hierarchical inheritance and timeliness logic combination; in response to a user data access request, based on an identity certificate and role attributes, matching a security level of request data with a user role permission threshold, analyzing a railway service dynamic combination condition, judging a current service scene access permission, generating a decryption key or calling an edge gateway to execute outsourcing decryption; and storing the encrypted data to a distributed file system, and recording data hash, a security level and an access operation log. According to the method, the problems of weak identity credibility mechanism, low efficiency of authority management coarse granularity and insufficient industrial characteristic adaptation are solved.

The invention relates to the technical field of data encryption, and discloses a data encryption method, encryption equipment and a storage medium. In the method, an encryption device obtains to-be-encrypted data uploaded by a terminal, and extracts a plurality of data features from the to-be-encrypted data, the data features including a data sensitive feature, a business risk feature and a user behavior feature; performing quantitative scoring on the plurality of data features to obtain a plurality of feature scores, and calculating a total data score according to the plurality of feature scores; inputting the total data score into a preset trained decision tree model to determine the security level of the to-be-encrypted data; according to the security level, determining a target encryption algorithm from a preset corresponding relationship between the security level and the encryption algorithm; and encrypting the to-be-encrypted data according to the target encryption algorithm and the dynamically generated encryption key. By means of the method, the problems that differential protection is difficult to achieve according to data characteristics in a related encryption method, and security risks are caused by key management staticization are solved.

The invention discloses a multi-dimensional evaluation method for credential environment migration, and particularly relates to the field of evaluation. According to the method, an evaluation index system covering infrastructure, an application system, data resources and security compliance is constructed, and comprehensive scanning is realized through instruction set detection, binary analysis and equal security compliance inspection; dynamically calculating the weight by adopting an AHP-entropy weight hybrid model, and triggering weight rebalance based on the volatility; through combination of static scanning and a dynamic probe, the compatibility, performance and safety differences are quantitatively analyzed; and finally, generating a visual risk assessment report, integrating data of each stage to calculate a compatibility score, a performance loss rate and a security level, providing instruction level difference comparison, a performance flame graph and a vulnerability attack path interaction view, and outputting a migration suggestion comprising a priority reconstruction list, an NEON instruction optimization scheme and a staged reinforcement plan.

The invention discloses a train on-board network security protection method and device and electronic equipment, and relates to the field of train on-board network security protection. Comprising the following steps: determining a firmware information hash value by using a national cryptographic algorithm, and verifying by using a firmware reference value; measuring a mirror image of an operating system by using a cryptographic algorithm and a dynamic measurement engine, and executing TRDP protocol information deep filtering based on a white list on vehicle-mounted communication data by using a vehicle-mounted firewall; encrypting the filtered communication data by using a national cryptographic algorithm; detecting the filtered communication data by using bypass mirror image monitoring equipment; updating a blocking strategy of the vehicle-mounted firewall to obtain a dynamic defense result; based on the system operation data and the dynamic defense result, using an event restoration record in a security database to verify the defense effectiveness, and obtaining a verification result; and updating the dynamic measurement engine according to the verification result. According to the invention, the trusted environment of the vehicle-mounted network can be perfected, the security level of the vehicle-mounted network is improved, and the defense capability and efficiency of the vehicle-mounted network to unknown threats are enhanced.

The invention provides a switch security protocol interaction method and device, equipment and a storage medium, and the method comprises the steps: carrying out the protocol type recognition of a received network data frame, and generating first intermediate data according to the recognized protocol type; according to the protocol type identifier of the first intermediate data, converting the format of the network data frame through a protocol mapping rule to generate second intermediate data; determining a security processing strategy corresponding to a preset strategy rule set according to the strategy identification field of the second intermediate data; reconstructing the original content of the second intermediate data into a target data frame conforming to a target protocol format according to a security processing strategy; and according to the security level field and the communication direction of the target data frame, performing path screening through the trusted path list, and determining a target interaction path. According to the scheme, the trusted interaction path can be dynamically screened based on the protocol type and the security level field of the target data frame, and controllable data transmission between switches under security protocol cooperation is realized.

The invention discloses a computer file protection method, which relates to the technical field of computer information security, and comprises the following steps of: S1, classifying files and marking security levels based on content characteristics and sensitivity; s2, dividing system user permission levels and configuring a multi-factor authentication mechanism; s3, constructing a file access control matrix and setting a fine-grained operation authority rule; s4, deploying an access behavior monitoring module, and recording a file operation behavior log in real time; s5, performing dynamic risk analysis based on behavior modeling and an anomaly recognition algorithm; s6, performing hierarchical response according to the risk level, wherein the hierarchical response comprises measures such as warning, limiting, network disconnection and locking; and S7, encrypting and storing the log information, and providing an auditing interface for behavior traceability. According to the method, static permission control and a dynamic behavior recognition mechanism are fused, full-process intelligent protection of files from creation, access, transmission to storage is achieved, and the method has the advantages of being high in safety, timely in response, capable of achieving self-adaptive evolution of strategies and the like.

Techniques for optimizing routing decisions based on security metrics within a network environment are described herein. In some cases, by using various security metrics, such as encryption indicators, attestation indicators, secureness metrics, and reliability metrics, an exemplary system can assess the security level and reliability of network paths. These metrics may provide valuable insights into the trustworthiness and integrity of participating nodes and links and enable informed decision-making regarding path selection.

The invention discloses an aviation airborne software test case intelligent generation and closed-loop optimization method, which comprises the following steps of: knowledge graph construction: analyzing a DO-178C standard document and a related field document, extracting entities and relationships defined in the DO-178C standard document and the related field document, and constructing a field knowledge graph fused with DO-178C standard knowledge; initial test case generation: based on the domain knowledge graph, combining a static analysis result of the source code of the tested airborne software, and utilizing a large language model to drive and generate an initial test case set; and closed-loop iterative optimization: executing the test case, evaluating whether the structural coverage rate reaches the standard or not, automatically identifying uncovered codes when the structural coverage rate does not reach the standard, generating a supplementary test case for iterative optimization, and outputting a final test case set until a coverage rate target corresponding to the software security level is met. According to the method, the test quality and efficiency of the aviation airborne software can be improved.