1124 results about "Security level" patented technology

The invention relates to the technical field of safety monitoring, in particular to a building bearing capacity detection system based on the Internet of Things, which comprises a strain load module, an offset gradient module, a rhythm risk module, a threshold judgment module and a map reconstruction module. According to the method, the maximum strain excursion and direction reversal characteristics of adjacent time windows are analyzed and captured through the dynamic frequency excursion gradient, the response sensitivity to microcosmic bearing capacity fluctuation is improved, a strain jump rhythm map is constructed, sudden change time point time difference, amplitude difference and direction continuity parameters are extracted, and an abnormal load section is accurately positioned. The method comprises the following steps: identifying sudden strain jump events, performing cross-level rhythm map multi-dimensional comparison by applying a dynamic time warping algorithm, screening synchronous mutation nodes to generate a risk set, performing density clustering sorting based on direction consistency parameters, reconstructing a security level topological map, and improving visual spatial relevance and dynamic evolution characteristics of a structural instability path.

The invention relates to the technical field of cores, and discloses a method and a system for realizing USB flash disk equipment interaction based on a flash memory encryption technology, which comprises the following steps of: dividing an encryptable data block of a flash memory controller, and determining a dynamic entropy weight of the encryptable data block by utilizing an equipment interaction instruction and a random noise characteristic signal; generating a self-adaptive key generation sequence capable of encrypting data blocks through an address allocation mode and a dynamic entropy weight of a flash memory controller; calculating a side channel leakage risk index of the flash memory controller, and setting a security level label of an encryptable data block in combination with a self-adaptive key generation sequence; the method comprises the following steps: setting a differentiated security protection mechanism of an encipherable data block by constructing an access control matrix of the encipherable data block and an encryption risk area of a flash memory controller; and generating a secure interaction scheme of the USB flash disk equipment based on the self-adaptive key generation sequence in combination with the differential security protection mechanism and the access control matrix. According to the invention, the interaction safety and reliability of the USB flash disk equipment can be improved.

The invention discloses a data asset credible circulation method and system based on intelligent contract dynamic assessment, and relates to the technical field of data asset circulation security, and the method comprises the steps: extracting the type, sensitivity and source authentication level of a data asset, calculating a comprehensive risk score based on a security risk assessment model, and dynamically dividing the security level; matching an intelligent contract template according to the grade, setting a circulation authority, and binding an asset fingerprint and a contract address; identity authentication and dynamic reputation management are carried out on the block chain nodes, and the access authority is adjusted in real time; after a circulation request is received, on-chain dynamic verification is performed by integrating node qualification, asset state and purpose matching, compliance score decision circulation permission is calculated, an intelligent contract is called to execute circulation operation, an on-chain circulation track is generated, and a circulation safety state is monitored in real time. The method has better effects in the aspects of safety, flexibility and credibility.

The invention discloses a multi-factor authentication trusted data space access control method, platform and medium, and relates to the technical field of data security, the method comprises the following steps: analyzing the authority, record, path and target of a request access user, and obtaining access parameters; generating a verification gradient based on the security levels of parameter matching permissions, records, paths and targets; in combination with the gradient and the user authentication record, creating an authentication demand factor with gradient constraint; and generating a space access permission according to the authentication result, and controlling the trusted data access permission. According to the scheme, the data security protection capability is enhanced through a dynamic multi-factor verification mechanism. According to the method and the device, the technical problem of insufficient data security protection capability caused by lack of a multi-factor dynamic authentication and fine-grained access control mechanism in a data space access process in the prior art is solved; the technical effects that the access authority is dynamically adjusted based on multi-factor authentication, and the data security and credibility in the data space access process are effectively improved are achieved.

The invention discloses a trusted cloud security confidential privacy level product service method, and relates to the technical field of design of cloud computing security. The method comprises the following steps: acquiring a trusted cloud privacy security level and a hierarchical core security mechanism, establishing a binding relationship with a product, extracting technical features and performing quantitative scoring, and constructing a three-dimensional security matrix; obtaining a privacy grading service demand of the user, and establishing a demand matching model to screen a security preference grade product; obtaining different-dimension technical grade improvement times of the user security preference grade product, and carrying out synergistic effect analysis; if significant positive correlation exists, correlation analysis is carried out to obtain a dynamic correlation coefficient, a product optimization strategy is made, a three-dimensional security matrix is dynamically updated, and the trusted cloud security confidential privacy level product service system comprises a feature classification module, a product optimization module, a collaborative analysis module and an optimization updating module. According to the method, more accurate security product recommendation can be provided for the user, and the trusted cloud security service level is improved.

The invention discloses a machine learning method and system based on privacy protection enhancement, and relates to the technical field of data processing. The method comprises the steps of monitoring real-time data streams of a plurality of data sources based on real-time input data, analyzing relationships among various data, drawing a data association network diagram, evaluating information leakage risks and privacy sensitivity of a plurality of data points by analyzing interconnection density and path distribution of nodes in the network diagram, and generating sensitivity evaluation indexes. According to the method, the security and privacy protection level in the data processing process are improved by identifying the risk points in the data in real time and specifically adjusting the noise level of the data points, and the encryption processing efficiency and security are improved by comprehensively considering the data processing efficiency, security level requirements and computing resource consumption; the stability of encrypted data is tested by simulating network attack conditions, the capability of coping with network attacks is enhanced, input data is enabled to support various data analysis tasks, and the privacy and security of the data are ensured.

Systems, devices, methods, and circuits for managing data security in storage devices. In one aspect, a storage device includes at least one memory device and a controller coupled to the at least one memory device. The controller is configured to: encrypt first data with a first type of cryptographic algorithm and encrypt second data with a second type of cryptographic algorithm. The first data is associated with a first security level, and the second data is associated with a second security level that is higher than the first security level. The second type of cryptographic algorithm has a greater encryption strength than the first type of cryptographic algorithm.

The invention relates to the technical field of communication data processing, and discloses an AI intelligent communication data processing method based on edge computing, which comprises the following steps: dividing a communication region into three regions, deploying an edge computing node in each region, actually collecting signal data, environmental data and historical signal data of the region by the edge computing node, and transmitting the signal data, the environmental data and the historical signal data to a server; analyzing the preprocessed signal data to generate a regional fluctuation index, extracting multi-dimensional features such as behavior entropy and physical offset from the signal data, generating the regional fluctuation index in combination with a dual-core dynamic baseline and environment data, and performing two-dimensional analysis, radio frequency authentication and other processes to obtain the regional fluctuation index. The method can accurately identify the disguised Wi-Fi signal similar to the normal signal, dynamically judges based on the cooperative verification coefficient, blocks and defends according to the regional security level, effectively prevents the disguised signal from permeating, prevents data from being stolen, and guarantees the security and processing efficiency of campus communication data.

The invention discloses an edge computing-based industrial Internet of Things equipment data encryption transmission method, which comprises the following steps of: constructing an edge node alliance comprising at least two cross-regional edge gateways, completing bidirectional identity authentication through an alliance root certificate, and establishing an encrypted communication link; industrial equipment collects original data and then transmits the original data to an edge gateway which the industrial equipment belongs to, and the gateway extracts data features and divides the data features into a core control level, a process parameter level, a common monitoring level and a security level; differential encryption strategies are adopted for different levels of data; each edge gateway uploads the encrypted data to a distributed key management node, and obtains and synchronizes a periodically updated key chain; during cross-region transmission, performing secondary packaging and encryption to generate a data packet containing identifications such as a security level and the like; and the receiving end verifies the legality of the node, decrypts and verifies the integrity of the data, distributes the data if the decryption is passed, and blocks the alarm if the decryption The method is suitable for scenes such as single-area monitoring and multi-area manufacturing, data security and transmission efficiency balance are achieved, and all-weather stable transmission is guaranteed.

The invention discloses a data acquisition method and device for an energy management system, equipment and a medium. The energy management system is used for managing multiple power plants. The method comprises the following steps: creating a to-be-constructed big data platform which comprises a data acquisition layer, a data processing layer and a data storage layer; deploying a multi-protocol adapter cluster on a data acquisition layer; constructing a data standardization pipeline in a data processing layer, and generating a multi-level security label in combination with a data source security level, a service association degree and an updating frequency; a hierarchical storage framework is designed in a data storage layer and used for constructing a redundant index table crossing storage nodes and a data blood relationship graph based on a graph database; and deploying a dynamic security gateway between the data acquisition layer and the data processing layer, dynamically selecting a corresponding encryption algorithm according to the data security label, and completing the construction of a big data platform, so as to complete the data acquisition of the plurality of power plants based on the big data platform. And high-reliability, traceable and safe data support is provided for cooperative management of multiple power plants.

The invention provides a dynamic encryption communication method, system and device for an Internet of Things device, and a storage medium, and the method comprises the steps: obtaining the current geographic position information of the Internet of Things device, and determining the security demand level of the Internet of Things device according to the current geographic position information and a preset geographic position list of different security levels; acquiring a network performance index of a mobile network shared channel at the position of the Internet of Things equipment, and determining a congestion degree parameter of a surrounding network environment according to the network performance index; classifying according to the service type of the Internet of Things equipment to obtain a service volume level; and integrating the obtained security demand level, the congestion degree parameter and the service volume level, dynamically selecting a corresponding encryption algorithm to encrypt sensitive data of the Internet of Things equipment, and transmitting the encrypted data to a cloud server. By dynamically selecting the encryption algorithm and adjusting according to the location information, the security and the energy efficiency can be balanced in different scenes.

The invention provides a data classification and grading method and device based on an artificial intelligence large model technology, and relates to the field of data security. The method comprises the following steps: constructing a data classification and grading catalog according to a preset classification rule, and storing each row of the classification and grading catalog as a document record in a target vector database; respectively carrying out first retrieval operation, second retrieval operation and third retrieval operation on the data classification and grading catalog by taking the business system name, the data table name and the field name as first query conditions so as to obtain a first matching document, a second matching document and a third matching document in the target vector database; sorting the first matching document, the second matching document and the third matching document according to a preset sorting mode, and obtaining a sorting result; and inputting a sorting result into the large language model, and performing data security early warning through the large language model. According to the method and the device, the security problems that corresponding security measures cannot be taken, sensitive data is leaked and the like when a data governance engineer identifies the metadata according to the data classification and classification catalog and judges the classification and security level of the metadata are solved.

The invention relates to an intelligent hierarchical access control method and device for railway knowledge and electronic equipment, and the method comprises the steps: registering key certificates for national railway group nodes, railway bureau group nodes and basic-level station nodes, and generating global trusted identity chain certificates; dividing the to-be-accessed railway knowledge assets into four levels, and establishing a relationship between the security level and the user role; loading a railway exclusive strategy expression, and supporting hierarchical inheritance and timeliness logic combination; in response to a user data access request, based on an identity certificate and role attributes, matching a security level of request data with a user role permission threshold, analyzing a railway service dynamic combination condition, judging a current service scene access permission, generating a decryption key or calling an edge gateway to execute outsourcing decryption; and storing the encrypted data to a distributed file system, and recording data hash, a security level and an access operation log. According to the method, the problems of weak identity credibility mechanism, low efficiency of authority management coarse granularity and insufficient industrial characteristic adaptation are solved.

The invention relates to the technical field of data encryption, and discloses a data encryption method, encryption equipment and a storage medium. In the method, an encryption device obtains to-be-encrypted data uploaded by a terminal, and extracts a plurality of data features from the to-be-encrypted data, the data features including a data sensitive feature, a business risk feature and a user behavior feature; performing quantitative scoring on the plurality of data features to obtain a plurality of feature scores, and calculating a total data score according to the plurality of feature scores; inputting the total data score into a preset trained decision tree model to determine the security level of the to-be-encrypted data; according to the security level, determining a target encryption algorithm from a preset corresponding relationship between the security level and the encryption algorithm; and encrypting the to-be-encrypted data according to the target encryption algorithm and the dynamically generated encryption key. By means of the method, the problems that differential protection is difficult to achieve according to data characteristics in a related encryption method, and security risks are caused by key management staticization are solved.

The invention discloses a multi-dimensional evaluation method for credential environment migration, and particularly relates to the field of evaluation. According to the method, an evaluation index system covering infrastructure, an application system, data resources and security compliance is constructed, and comprehensive scanning is realized through instruction set detection, binary analysis and equal security compliance inspection; dynamically calculating the weight by adopting an AHP-entropy weight hybrid model, and triggering weight rebalance based on the volatility; through combination of static scanning and a dynamic probe, the compatibility, performance and safety differences are quantitatively analyzed; and finally, generating a visual risk assessment report, integrating data of each stage to calculate a compatibility score, a performance loss rate and a security level, providing instruction level difference comparison, a performance flame graph and a vulnerability attack path interaction view, and outputting a migration suggestion comprising a priority reconstruction list, an NEON instruction optimization scheme and a staged reinforcement plan.

The invention discloses a train on-board network security protection method and device and electronic equipment, and relates to the field of train on-board network security protection. Comprising the following steps: determining a firmware information hash value by using a national cryptographic algorithm, and verifying by using a firmware reference value; measuring a mirror image of an operating system by using a cryptographic algorithm and a dynamic measurement engine, and executing TRDP protocol information deep filtering based on a white list on vehicle-mounted communication data by using a vehicle-mounted firewall; encrypting the filtered communication data by using a national cryptographic algorithm; detecting the filtered communication data by using bypass mirror image monitoring equipment; updating a blocking strategy of the vehicle-mounted firewall to obtain a dynamic defense result; based on the system operation data and the dynamic defense result, using an event restoration record in a security database to verify the defense effectiveness, and obtaining a verification result; and updating the dynamic measurement engine according to the verification result. According to the invention, the trusted environment of the vehicle-mounted network can be perfected, the security level of the vehicle-mounted network is improved, and the defense capability and efficiency of the vehicle-mounted network to unknown threats are enhanced.

The invention provides a switch security protocol interaction method and device, equipment and a storage medium, and the method comprises the steps: carrying out the protocol type recognition of a received network data frame, and generating first intermediate data according to the recognized protocol type; according to the protocol type identifier of the first intermediate data, converting the format of the network data frame through a protocol mapping rule to generate second intermediate data; determining a security processing strategy corresponding to a preset strategy rule set according to the strategy identification field of the second intermediate data; reconstructing the original content of the second intermediate data into a target data frame conforming to a target protocol format according to a security processing strategy; and according to the security level field and the communication direction of the target data frame, performing path screening through the trusted path list, and determining a target interaction path. According to the scheme, the trusted interaction path can be dynamically screened based on the protocol type and the security level field of the target data frame, and controllable data transmission between switches under security protocol cooperation is realized.

The invention discloses a computer file protection method, which relates to the technical field of computer information security, and comprises the following steps of: S1, classifying files and marking security levels based on content characteristics and sensitivity; s2, dividing system user permission levels and configuring a multi-factor authentication mechanism; s3, constructing a file access control matrix and setting a fine-grained operation authority rule; s4, deploying an access behavior monitoring module, and recording a file operation behavior log in real time; s5, performing dynamic risk analysis based on behavior modeling and an anomaly recognition algorithm; s6, performing hierarchical response according to the risk level, wherein the hierarchical response comprises measures such as warning, limiting, network disconnection and locking; and S7, encrypting and storing the log information, and providing an auditing interface for behavior traceability. According to the method, static permission control and a dynamic behavior recognition mechanism are fused, full-process intelligent protection of files from creation, access, transmission to storage is achieved, and the method has the advantages of being high in safety, timely in response, capable of achieving self-adaptive evolution of strategies and the like.

The invention discloses an aviation airborne software test case intelligent generation and closed-loop optimization method, which comprises the following steps of: knowledge graph construction: analyzing a DO-178C standard document and a related field document, extracting entities and relationships defined in the DO-178C standard document and the related field document, and constructing a field knowledge graph fused with DO-178C standard knowledge; initial test case generation: based on the domain knowledge graph, combining a static analysis result of the source code of the tested airborne software, and utilizing a large language model to drive and generate an initial test case set; and closed-loop iterative optimization: executing the test case, evaluating whether the structural coverage rate reaches the standard or not, automatically identifying uncovered codes when the structural coverage rate does not reach the standard, generating a supplementary test case for iterative optimization, and outputting a final test case set until a coverage rate target corresponding to the software security level is met. According to the method, the test quality and efficiency of the aviation airborne software can be improved.

The invention relates to an audit log processing method and device, equipment and a storage medium, in the scheme, an audit log, sequence information, time information and a hash value of a previous audit log need to be subjected to chained hash operation together to generate a target data fingerprint, and through the mode, the target data fingerprint can be obtained. According to the method, data fingerprints can be associated with sequence information, time information and a previous audit log, and if one of the factors changes, the data fingerprints can be changed, so that the security problems of disordered sequence, log import, log loss, malicious deletion and the like of the audit log can be effectively checked out; moreover, the auditing log is processed based on the TPCM module, so that the overall security level of the system is greatly improved.

The invention discloses a remote power supply operation and maintenance virtual conference cooperation method and system and electronic equipment, and particularly relates to the field of power operation and maintenance scheduling, and the method comprises the following steps: I, accessing various data of a power supply network, constructing a three-dimensional topology energy flow diagram in real time, and dynamically generating a security level matrix in combination with real-time equipment working conditions; iI, establishing a temporary operation authority tunnel, starting a virtual conference space, and automatically matching a most suitable interaction mode according to behaviors and intentions of participants; according to the method, the operation compliance and safety can be improved, key leakage and instruction tampering are effectively prevented, the encryption strength of remote operation is enhanced, permission abuse is prevented, the system toughness is improved, and safe closed-loop management from access to execution is realized; the comprehensiveness and timeliness of state monitoring of the power supply network are effectively improved, more accurate abnormal event identification can be realized, the problem positioning efficiency is improved, and a user is ensured to preferentially acquire the most reliable and most representative abnormal propagation chain.

The invention relates to the technical field of network security, in particular to a satellite internet threat identification method and system and electronic equipment, and the method comprises the steps: constructing a node reputation evaluation model through a block chain technology, obtaining trusted nodes, constructing a satellite network, and collecting inter-satellite link information in real time; acquiring a satellite network topology change in real time, constructing an inter-satellite link security evaluation model, and generating a self-adaptive security policy matched with the inter-satellite link security level; dynamically calculating and optimizing a data transmission path through a mixed integer linear programming algorithm; constructing an inter-satellite link rapid switching model to analyze inter-satellite link information, generating inter-satellite link abnormal information, and rapidly switching to a standby inter-satellite link according to a self-adaptive security policy and network topology information; performing data transmission according to the inter-satellite link, and monitoring and acquiring transmission behavior data; a data exception recognition model is constructed to analyze the transmission behavior, and a data exception response is obtained; and identifying the satellite network threat according to the data exception response.

The invention provides a molecular identity authentication system and method based on DNA origami framework layered assembly. The molecular identity authentication system comprises a disclosed skeleton chain and a plurality of shared staple chains, the shared staple chain comprises staple chains shared by three groups of single bodies and staple chains shared in pairs, and the staple chains are used as secret keys to be distributed to three participants so as to prepare the three groups of single bodies respectively, and then the three groups of single bodies are combined and spliced into a tripolymer with a dot matrix pattern, so that multi-user collaborative layered chain type assembly is realized. According to the molecular identity authentication system based on DNA origami framework layered assembly, the system combination complexity is improved to the information theory security level, so that the biological information security protection capability is improved, and brute force cracking is prevented.

According to the user sensitive data protection system based on the cloud service and the block chain, an SM3 algorithm is adopted to fuse biological characteristics and dynamic tokens to generate an encryption credential, high-security identity authentication is achieved, differential fragmentation encryption is carried out on data based on semantic classification, Rabin threshold fragmentation and AES + ECC double-layer encryption is adopted for data of the highest security level, and the security level of the data is improved. A dynamic node optimization model is designed; an optimization coefficient is calculated according to the capacity, the transmission rate and the fault rate; the storage efficiency is improved by more than 40% in combination with a time period regulation factor; the node temperature and the vibration frequency are monitored in real time through a sensor; and verifying the validity period of the dynamic token and the fragment permission mark by using an intelligent contract to realize GDPR compliance fine-grained access control. The system remarkably improves the anti-attack capability and storage reliability of data, and is suitable for high-sensitivity scenes such as highway toll collection, finance and medical treatment.

A method includes receiving and analyzing data items to generate a weight for each data item. In response to determining that a first weight of a first data item is within a first weight range, the method determines that the first data item has a high security level. In response to determining that a second weight of a second data item is within a second weight range, the method determines that the second data item has a medium security level. A first subset of the data items having the high security level are encrypted with a first cryptography algorithm to generate first encrypted data items. A second subset of the data items having the medium security level are encrypted with a second cryptography algorithm to generate second encrypted data items. An artificial intelligence / machine learning model is trained using the first and second encrypted data items as a training data set.

The invention belongs to the technical field of Internet of Things security, and particularly relates to a multi-level Internet of Things equipment security management and access control method, which comprises the following steps of: performing bidirectional verification on a digital certificate and a hardware fingerprint through an edge node when equipment is accessed; calculating credibility in real time and dynamically dividing security levels by using a hybrid evaluation algorithm based on equipment operation context data; a fine-grained access strategy is generated in combination with equipment attributes and environmental risks, and cross-level collaboration is realized through a lightweight protocol; abnormal behaviors are detected in real time in the access process, and high-risk operation is blocked within milliseconds; and strategy conflict resolution and adaptive optimization are realized through formalized verification and deep reinforcement learning. According to the technical scheme, the identity authentication reliability, the authority dynamic adaptability, the strategy consistency and the threat response speed of the Internet of Things equipment are remarkably improved, and a systematic security guarantee is provided for large-scale Internet of Things applications with high security requirements.

The invention relates to the technical field of network security monitoring, in particular to a multipath network communication security guarantee method based on an adaptive encryption algorithm, comprising: acquiring a network undirected graph corresponding to a target network, the network undirected graph comprising a first node set, a second node set and an undirected edge set, the first node is used for collecting and managing data, the second node is used for monitoring the safety state of the first node, and the undirected edge is used for connecting the first node and the second node. According to the method, the behavior of the second node in the network is subjected to feature extraction, the trust level of each node can be dynamically evaluated and adjusted in combination with the pre-trained trust classification model, and the self-adaptive feature can effectively adjust the communication security level according to the actual situation, so that the security of the network is improved, and the user experience is improved. And potential security threats or malicious nodes can be identified by monitoring and analyzing the behavior of the second node.

The invention discloses a communication security monitoring system and method based on a block chain technology, and relates to the technical field of communication security. The method comprises the following steps: S1, initializing a system; s2, collecting communication data; step S3, block chain storage; s4, data security monitoring is carried out; s5, updating the dynamic strategy; step S6, cross-chain tracing is carried out; and S7, a maintenance stage. According to the method, node identity registration and dynamic fragmentation are created, a main chain creation block is generated, double-flow features are analyzed, abnormal index calculation is performed, real-time alarm is performed, a tracking path is generated, and an evidence chain is generated and packaged, so that the security level of the system and the evidence chain generation efficiency are improved, and the storage space and cost are reduced.

The invention provides a data cross-network exchange method, device and system. The system comprises an application data receiving module, a first public buffer area, a security detection module, a data routing configuration library, a first data exchange processing module, a data security encryption module, a sending cache library, a first message queue, an exchange data sending module, a first exchange equipment integration module, a second exchange equipment integration module and an exchange data receiving module. The cooperation among the second public buffer area, the data format conversion module, the second data exchange processing module, the data security decryption module, the distribution cache library, the second message queue and the application data distribution module can be compatible with various hardware devices, the unified cross-network data exchange service is realized, the flexibility and the expandability are improved, and the data exchange efficiency is improved. And safe, efficient and reliable transmission of data among different networks is ensured. The maintenance cost of networks with different security levels under the condition of physical isolation is reduced, and the security protection capability of the confidential network is further enhanced.

The invention provides an access control access management system and method based on remote APP control management, which combines an access control terminal, an APP (visitor terminal) and a cloud control platform, realizes that a visitor logs in a property management platform (cloud control platform) through the APP, and the cloud control platform performs multi-modal information authentication on the visitor and drives an access control machine to open a door. Therefore, intelligent and automatic access control access management can be realized, the labor cost of property management can be saved, and a secure access control mechanism is realized. And identity leakage is avoided through combined verification of the biological information and the secret key. And the process that the visitor logs in the platform and controls the access control to unlock is carried out under the supervision of the property platform, so that not only can authorized buildings be avoided, but also the problems that paper authorization certificates are easy to lose and access control congestion is caused by manual verification can be solved. The platform records access records, authentication records and access control passing records of visitors in real time, system traceability management is facilitated, and the property management level and the security level are improved.