1052 results about "Security level" patented technology

The invention relates to the technical field of cores, and discloses a method and a system for realizing USB flash disk equipment interaction based on a flash memory encryption technology, which comprises the following steps of: dividing an encryptable data block of a flash memory controller, and determining a dynamic entropy weight of the encryptable data block by utilizing an equipment interaction instruction and a random noise characteristic signal; generating a self-adaptive key generation sequence capable of encrypting data blocks through an address allocation mode and a dynamic entropy weight of a flash memory controller; calculating a side channel leakage risk index of the flash memory controller, and setting a security level label of an encryptable data block in combination with a self-adaptive key generation sequence; the method comprises the following steps: setting a differentiated security protection mechanism of an encipherable data block by constructing an access control matrix of the encipherable data block and an encryption risk area of a flash memory controller; and generating a secure interaction scheme of the USB flash disk equipment based on the self-adaptive key generation sequence in combination with the differential security protection mechanism and the access control matrix. According to the invention, the interaction safety and reliability of the USB flash disk equipment can be improved.

The invention discloses a data asset credible circulation method and system based on intelligent contract dynamic assessment, and relates to the technical field of data asset circulation security, and the method comprises the steps: extracting the type, sensitivity and source authentication level of a data asset, calculating a comprehensive risk score based on a security risk assessment model, and dynamically dividing the security level; matching an intelligent contract template according to the grade, setting a circulation authority, and binding an asset fingerprint and a contract address; identity authentication and dynamic reputation management are carried out on the block chain nodes, and the access authority is adjusted in real time; after a circulation request is received, on-chain dynamic verification is performed by integrating node qualification, asset state and purpose matching, compliance score decision circulation permission is calculated, an intelligent contract is called to execute circulation operation, an on-chain circulation track is generated, and a circulation safety state is monitored in real time. The method has better effects in the aspects of safety, flexibility and credibility.

The invention discloses a multi-factor authentication trusted data space access control method, platform and medium, and relates to the technical field of data security, the method comprises the following steps: analyzing the authority, record, path and target of a request access user, and obtaining access parameters; generating a verification gradient based on the security levels of parameter matching permissions, records, paths and targets; in combination with the gradient and the user authentication record, creating an authentication demand factor with gradient constraint; and generating a space access permission according to the authentication result, and controlling the trusted data access permission. According to the scheme, the data security protection capability is enhanced through a dynamic multi-factor verification mechanism. According to the method and the device, the technical problem of insufficient data security protection capability caused by lack of a multi-factor dynamic authentication and fine-grained access control mechanism in a data space access process in the prior art is solved; the technical effects that the access authority is dynamically adjusted based on multi-factor authentication, and the data security and credibility in the data space access process are effectively improved are achieved.

The invention discloses a trusted cloud security confidential privacy level product service method, and relates to the technical field of design of cloud computing security. The method comprises the following steps: acquiring a trusted cloud privacy security level and a hierarchical core security mechanism, establishing a binding relationship with a product, extracting technical features and performing quantitative scoring, and constructing a three-dimensional security matrix; obtaining a privacy grading service demand of the user, and establishing a demand matching model to screen a security preference grade product; obtaining different-dimension technical grade improvement times of the user security preference grade product, and carrying out synergistic effect analysis; if significant positive correlation exists, correlation analysis is carried out to obtain a dynamic correlation coefficient, a product optimization strategy is made, a three-dimensional security matrix is dynamically updated, and the trusted cloud security confidential privacy level product service system comprises a feature classification module, a product optimization module, a collaborative analysis module and an optimization updating module. According to the method, more accurate security product recommendation can be provided for the user, and the trusted cloud security service level is improved.

The invention discloses a machine learning method and system based on privacy protection enhancement, and relates to the technical field of data processing. The method comprises the steps of monitoring real-time data streams of a plurality of data sources based on real-time input data, analyzing relationships among various data, drawing a data association network diagram, evaluating information leakage risks and privacy sensitivity of a plurality of data points by analyzing interconnection density and path distribution of nodes in the network diagram, and generating sensitivity evaluation indexes. According to the method, the security and privacy protection level in the data processing process are improved by identifying the risk points in the data in real time and specifically adjusting the noise level of the data points, and the encryption processing efficiency and security are improved by comprehensively considering the data processing efficiency, security level requirements and computing resource consumption; the stability of encrypted data is tested by simulating network attack conditions, the capability of coping with network attacks is enhanced, input data is enabled to support various data analysis tasks, and the privacy and security of the data are ensured.

The invention relates to the technical field of communication data processing, and discloses an AI intelligent communication data processing method based on edge computing, which comprises the following steps: dividing a communication region into three regions, deploying an edge computing node in each region, actually collecting signal data, environmental data and historical signal data of the region by the edge computing node, and transmitting the signal data, the environmental data and the historical signal data to a server; analyzing the preprocessed signal data to generate a regional fluctuation index, extracting multi-dimensional features such as behavior entropy and physical offset from the signal data, generating the regional fluctuation index in combination with a dual-core dynamic baseline and environment data, and performing two-dimensional analysis, radio frequency authentication and other processes to obtain the regional fluctuation index. The method can accurately identify the disguised Wi-Fi signal similar to the normal signal, dynamically judges based on the cooperative verification coefficient, blocks and defends according to the regional security level, effectively prevents the disguised signal from permeating, prevents data from being stolen, and guarantees the security and processing efficiency of campus communication data.

The invention discloses an edge computing-based industrial Internet of Things equipment data encryption transmission method, which comprises the following steps of: constructing an edge node alliance comprising at least two cross-regional edge gateways, completing bidirectional identity authentication through an alliance root certificate, and establishing an encrypted communication link; industrial equipment collects original data and then transmits the original data to an edge gateway which the industrial equipment belongs to, and the gateway extracts data features and divides the data features into a core control level, a process parameter level, a common monitoring level and a security level; differential encryption strategies are adopted for different levels of data; each edge gateway uploads the encrypted data to a distributed key management node, and obtains and synchronizes a periodically updated key chain; during cross-region transmission, performing secondary packaging and encryption to generate a data packet containing identifications such as a security level and the like; and the receiving end verifies the legality of the node, decrypts and verifies the integrity of the data, distributes the data if the decryption is passed, and blocks the alarm if the decryption The method is suitable for scenes such as single-area monitoring and multi-area manufacturing, data security and transmission efficiency balance are achieved, and all-weather stable transmission is guaranteed.

The invention discloses a data acquisition method and device for an energy management system, equipment and a medium. The energy management system is used for managing multiple power plants. The method comprises the following steps: creating a to-be-constructed big data platform which comprises a data acquisition layer, a data processing layer and a data storage layer; deploying a multi-protocol adapter cluster on a data acquisition layer; constructing a data standardization pipeline in a data processing layer, and generating a multi-level security label in combination with a data source security level, a service association degree and an updating frequency; a hierarchical storage framework is designed in a data storage layer and used for constructing a redundant index table crossing storage nodes and a data blood relationship graph based on a graph database; and deploying a dynamic security gateway between the data acquisition layer and the data processing layer, dynamically selecting a corresponding encryption algorithm according to the data security label, and completing the construction of a big data platform, so as to complete the data acquisition of the plurality of power plants based on the big data platform. And high-reliability, traceable and safe data support is provided for cooperative management of multiple power plants.

The invention provides a data classification and grading method and device based on an artificial intelligence large model technology, and relates to the field of data security. The method comprises the following steps: constructing a data classification and grading catalog according to a preset classification rule, and storing each row of the classification and grading catalog as a document record in a target vector database; respectively carrying out first retrieval operation, second retrieval operation and third retrieval operation on the data classification and grading catalog by taking the business system name, the data table name and the field name as first query conditions so as to obtain a first matching document, a second matching document and a third matching document in the target vector database; sorting the first matching document, the second matching document and the third matching document according to a preset sorting mode, and obtaining a sorting result; and inputting a sorting result into the large language model, and performing data security early warning through the large language model. According to the method and the device, the security problems that corresponding security measures cannot be taken, sensitive data is leaked and the like when a data governance engineer identifies the metadata according to the data classification and classification catalog and judges the classification and security level of the metadata are solved.

The invention relates to an intelligent hierarchical access control method and device for railway knowledge and electronic equipment, and the method comprises the steps: registering key certificates for national railway group nodes, railway bureau group nodes and basic-level station nodes, and generating global trusted identity chain certificates; dividing the to-be-accessed railway knowledge assets into four levels, and establishing a relationship between the security level and the user role; loading a railway exclusive strategy expression, and supporting hierarchical inheritance and timeliness logic combination; in response to a user data access request, based on an identity certificate and role attributes, matching a security level of request data with a user role permission threshold, analyzing a railway service dynamic combination condition, judging a current service scene access permission, generating a decryption key or calling an edge gateway to execute outsourcing decryption; and storing the encrypted data to a distributed file system, and recording data hash, a security level and an access operation log. According to the method, the problems of weak identity credibility mechanism, low efficiency of authority management coarse granularity and insufficient industrial characteristic adaptation are solved.

The invention relates to the technical field of data encryption, and discloses a data encryption method, encryption equipment and a storage medium. In the method, an encryption device obtains to-be-encrypted data uploaded by a terminal, and extracts a plurality of data features from the to-be-encrypted data, the data features including a data sensitive feature, a business risk feature and a user behavior feature; performing quantitative scoring on the plurality of data features to obtain a plurality of feature scores, and calculating a total data score according to the plurality of feature scores; inputting the total data score into a preset trained decision tree model to determine the security level of the to-be-encrypted data; according to the security level, determining a target encryption algorithm from a preset corresponding relationship between the security level and the encryption algorithm; and encrypting the to-be-encrypted data according to the target encryption algorithm and the dynamically generated encryption key. By means of the method, the problems that differential protection is difficult to achieve according to data characteristics in a related encryption method, and security risks are caused by key management staticization are solved.

The invention discloses a multi-dimensional evaluation method for credential environment migration, and particularly relates to the field of evaluation. According to the method, an evaluation index system covering infrastructure, an application system, data resources and security compliance is constructed, and comprehensive scanning is realized through instruction set detection, binary analysis and equal security compliance inspection; dynamically calculating the weight by adopting an AHP-entropy weight hybrid model, and triggering weight rebalance based on the volatility; through combination of static scanning and a dynamic probe, the compatibility, performance and safety differences are quantitatively analyzed; and finally, generating a visual risk assessment report, integrating data of each stage to calculate a compatibility score, a performance loss rate and a security level, providing instruction level difference comparison, a performance flame graph and a vulnerability attack path interaction view, and outputting a migration suggestion comprising a priority reconstruction list, an NEON instruction optimization scheme and a staged reinforcement plan.

The invention discloses a train on-board network security protection method and device and electronic equipment, and relates to the field of train on-board network security protection. Comprising the following steps: determining a firmware information hash value by using a national cryptographic algorithm, and verifying by using a firmware reference value; measuring a mirror image of an operating system by using a cryptographic algorithm and a dynamic measurement engine, and executing TRDP protocol information deep filtering based on a white list on vehicle-mounted communication data by using a vehicle-mounted firewall; encrypting the filtered communication data by using a national cryptographic algorithm; detecting the filtered communication data by using bypass mirror image monitoring equipment; updating a blocking strategy of the vehicle-mounted firewall to obtain a dynamic defense result; based on the system operation data and the dynamic defense result, using an event restoration record in a security database to verify the defense effectiveness, and obtaining a verification result; and updating the dynamic measurement engine according to the verification result. According to the invention, the trusted environment of the vehicle-mounted network can be perfected, the security level of the vehicle-mounted network is improved, and the defense capability and efficiency of the vehicle-mounted network to unknown threats are enhanced.

The invention provides a switch security protocol interaction method and device, equipment and a storage medium, and the method comprises the steps: carrying out the protocol type recognition of a received network data frame, and generating first intermediate data according to the recognized protocol type; according to the protocol type identifier of the first intermediate data, converting the format of the network data frame through a protocol mapping rule to generate second intermediate data; determining a security processing strategy corresponding to a preset strategy rule set according to the strategy identification field of the second intermediate data; reconstructing the original content of the second intermediate data into a target data frame conforming to a target protocol format according to a security processing strategy; and according to the security level field and the communication direction of the target data frame, performing path screening through the trusted path list, and determining a target interaction path. According to the scheme, the trusted interaction path can be dynamically screened based on the protocol type and the security level field of the target data frame, and controllable data transmission between switches under security protocol cooperation is realized.

The invention discloses a computer file protection method, which relates to the technical field of computer information security, and comprises the following steps of: S1, classifying files and marking security levels based on content characteristics and sensitivity; s2, dividing system user permission levels and configuring a multi-factor authentication mechanism; s3, constructing a file access control matrix and setting a fine-grained operation authority rule; s4, deploying an access behavior monitoring module, and recording a file operation behavior log in real time; s5, performing dynamic risk analysis based on behavior modeling and an anomaly recognition algorithm; s6, performing hierarchical response according to the risk level, wherein the hierarchical response comprises measures such as warning, limiting, network disconnection and locking; and S7, encrypting and storing the log information, and providing an auditing interface for behavior traceability. According to the method, static permission control and a dynamic behavior recognition mechanism are fused, full-process intelligent protection of files from creation, access, transmission to storage is achieved, and the method has the advantages of being high in safety, timely in response, capable of achieving self-adaptive evolution of strategies and the like.

The invention discloses an aviation airborne software test case intelligent generation and closed-loop optimization method, which comprises the following steps of: knowledge graph construction: analyzing a DO-178C standard document and a related field document, extracting entities and relationships defined in the DO-178C standard document and the related field document, and constructing a field knowledge graph fused with DO-178C standard knowledge; initial test case generation: based on the domain knowledge graph, combining a static analysis result of the source code of the tested airborne software, and utilizing a large language model to drive and generate an initial test case set; and closed-loop iterative optimization: executing the test case, evaluating whether the structural coverage rate reaches the standard or not, automatically identifying uncovered codes when the structural coverage rate does not reach the standard, generating a supplementary test case for iterative optimization, and outputting a final test case set until a coverage rate target corresponding to the software security level is met. According to the method, the test quality and efficiency of the aviation airborne software can be improved.

The invention discloses a remote power supply operation and maintenance virtual conference cooperation method and system and electronic equipment, and particularly relates to the field of power operation and maintenance scheduling, and the method comprises the following steps: I, accessing various data of a power supply network, constructing a three-dimensional topology energy flow diagram in real time, and dynamically generating a security level matrix in combination with real-time equipment working conditions; iI, establishing a temporary operation authority tunnel, starting a virtual conference space, and automatically matching a most suitable interaction mode according to behaviors and intentions of participants; according to the method, the operation compliance and safety can be improved, key leakage and instruction tampering are effectively prevented, the encryption strength of remote operation is enhanced, permission abuse is prevented, the system toughness is improved, and safe closed-loop management from access to execution is realized; the comprehensiveness and timeliness of state monitoring of the power supply network are effectively improved, more accurate abnormal event identification can be realized, the problem positioning efficiency is improved, and a user is ensured to preferentially acquire the most reliable and most representative abnormal propagation chain.

The invention provides a molecular identity authentication system and method based on DNA origami framework layered assembly. The molecular identity authentication system comprises a disclosed skeleton chain and a plurality of shared staple chains, the shared staple chain comprises staple chains shared by three groups of single bodies and staple chains shared in pairs, and the staple chains are used as secret keys to be distributed to three participants so as to prepare the three groups of single bodies respectively, and then the three groups of single bodies are combined and spliced into a tripolymer with a dot matrix pattern, so that multi-user collaborative layered chain type assembly is realized. According to the molecular identity authentication system based on DNA origami framework layered assembly, the system combination complexity is improved to the information theory security level, so that the biological information security protection capability is improved, and brute force cracking is prevented.

According to the user sensitive data protection system based on the cloud service and the block chain, an SM3 algorithm is adopted to fuse biological characteristics and dynamic tokens to generate an encryption credential, high-security identity authentication is achieved, differential fragmentation encryption is carried out on data based on semantic classification, Rabin threshold fragmentation and AES + ECC double-layer encryption is adopted for data of the highest security level, and the security level of the data is improved. A dynamic node optimization model is designed; an optimization coefficient is calculated according to the capacity, the transmission rate and the fault rate; the storage efficiency is improved by more than 40% in combination with a time period regulation factor; the node temperature and the vibration frequency are monitored in real time through a sensor; and verifying the validity period of the dynamic token and the fragment permission mark by using an intelligent contract to realize GDPR compliance fine-grained access control. The system remarkably improves the anti-attack capability and storage reliability of data, and is suitable for high-sensitivity scenes such as highway toll collection, finance and medical treatment.

The invention belongs to the technical field of Internet of Things security, and particularly relates to a multi-level Internet of Things equipment security management and access control method, which comprises the following steps of: performing bidirectional verification on a digital certificate and a hardware fingerprint through an edge node when equipment is accessed; calculating credibility in real time and dynamically dividing security levels by using a hybrid evaluation algorithm based on equipment operation context data; a fine-grained access strategy is generated in combination with equipment attributes and environmental risks, and cross-level collaboration is realized through a lightweight protocol; abnormal behaviors are detected in real time in the access process, and high-risk operation is blocked within milliseconds; and strategy conflict resolution and adaptive optimization are realized through formalized verification and deep reinforcement learning. According to the technical scheme, the identity authentication reliability, the authority dynamic adaptability, the strategy consistency and the threat response speed of the Internet of Things equipment are remarkably improved, and a systematic security guarantee is provided for large-scale Internet of Things applications with high security requirements.

The invention relates to the technical field of network security monitoring, in particular to a multipath network communication security guarantee method based on an adaptive encryption algorithm, comprising: acquiring a network undirected graph corresponding to a target network, the network undirected graph comprising a first node set, a second node set and an undirected edge set, the first node is used for collecting and managing data, the second node is used for monitoring the safety state of the first node, and the undirected edge is used for connecting the first node and the second node. According to the method, the behavior of the second node in the network is subjected to feature extraction, the trust level of each node can be dynamically evaluated and adjusted in combination with the pre-trained trust classification model, and the self-adaptive feature can effectively adjust the communication security level according to the actual situation, so that the security of the network is improved, and the user experience is improved. And potential security threats or malicious nodes can be identified by monitoring and analyzing the behavior of the second node.

The invention discloses a communication security monitoring system and method based on a block chain technology, and relates to the technical field of communication security. The method comprises the following steps: S1, initializing a system; s2, collecting communication data; step S3, block chain storage; s4, data security monitoring is carried out; s5, updating the dynamic strategy; step S6, cross-chain tracing is carried out; and S7, a maintenance stage. According to the method, node identity registration and dynamic fragmentation are created, a main chain creation block is generated, double-flow features are analyzed, abnormal index calculation is performed, real-time alarm is performed, a tracking path is generated, and an evidence chain is generated and packaged, so that the security level of the system and the evidence chain generation efficiency are improved, and the storage space and cost are reduced.

The invention provides an access control access management system and method based on remote APP control management, which combines an access control terminal, an APP (visitor terminal) and a cloud control platform, realizes that a visitor logs in a property management platform (cloud control platform) through the APP, and the cloud control platform performs multi-modal information authentication on the visitor and drives an access control machine to open a door. Therefore, intelligent and automatic access control access management can be realized, the labor cost of property management can be saved, and a secure access control mechanism is realized. And identity leakage is avoided through combined verification of the biological information and the secret key. And the process that the visitor logs in the platform and controls the access control to unlock is carried out under the supervision of the property platform, so that not only can authorized buildings be avoided, but also the problems that paper authorization certificates are easy to lose and access control congestion is caused by manual verification can be solved. The platform records access records, authentication records and access control passing records of visitors in real time, system traceability management is facilitated, and the property management level and the security level are improved.

The invention provides a cloud storage method and system for Internet of Things equipment data, and relates to the technical field of Internet of Things data storage and processing, and the method comprises the steps: collecting metadata of a plurality of Internet of Things equipment in an Internet of Things environment; performing tagging processing on the metadata to form a standardized data packet; performing hierarchical compression processing on the standardized data packet, and extracting multi-dimensional features from the data packet after the hierarchical compression processing; inputting the multi-dimensional features into a multi-modal neural network model based on deep learning, analyzing the multi-dimensional features through the multi-modal neural network model, generating a target storage priority index, and determining a corresponding security level according to the target storage priority index; and based on the security level, performing differential encryption processing on the data packet after hierarchical compression processing by using a lightweight encryption algorithm, and transmitting the encrypted data packet to a storage area corresponding to the cloud. According to the invention, the efficiency and security of Internet of Things data storage are improved.

The present invention relates to the technical field of power information security, and particularly to a method and device for dynamically adjusting data keys for power information security protection, which can effectively cope with the challenges brought by the complex and changeable operation environment of the power system and significantly improve data security and system reliability; the method is applied to a data key management system including a key control center and data security terminal devices, and the method includes: collecting the grid operation parameters of the target area in real time; dynamically evaluating the risks of the grid operation parameters based on a preset multi-dimensional risk assessment model to generate a real-time risk assessment value; determining the security level and the basic key aging period of the target data security terminal device according to the device type mapping table, and calculating the dynamic key aging period by combining the real-time risk assessment value with a preset risk threshold; the key control center sends an aging adjustment command including the dynamic key aging period to the target data security terminal device.

The invention discloses a simulator supporting multiple debugging permissions. According to the embodiment of the invention, the simulator supporting multiple debugging permissions comprises a simulator management module which comprises a configuration unit, and the configuration unit is used for configuring the debugging permissions; a storage unit of the simulator hardware module is divided into a safe area and a non-safe area; the security area is used for storing security data, the non-security area is used for storing non-security data, and the debugging permission comprises a security mode and a limited mode; in the security mode, allowing access to the security area and the non-security area; and in the limited mode, the access to the safe area is prohibited, and the access to the non-safe area is allowed. According to the emulator supporting the multiple debugging permissions, debugging requirements of different security levels can be effectively distinguished, and flexible access control is provided for development and maintenance while data security is guaranteed.

The invention relates to a method for authentication, designed to allow access and may find application for the purpose of ensuring a higher level of security in electronic identification and / or communication and protection against unauthorized access, including visual, video or another surveillance of the process. The method is applicable and works successfully in various physical, virtual and operational environments, the protection being achieved by combining secret elements with decoys and implicit rules, that can be further changed by hidden instructions. The method significantly limits the possibilities of using standard methods for tracking user actions by recording key strokes and / or cursor movements (keyloggers), or taking screenshots (screen recorders), or surveillance, as visible actions do not reveal the secret combination. Also, the method does not require the use of additional security devices / keys of any kind.

A computer-implemented system for routing artificial intelligence (AI) queries. The system utilizes a zero-copy data pipeline, which processes prompts in memory-mapped buffers to eliminate at least one memory copy operation, thereby reducing latency relative to conventional serialization pipelines. The system continuously verifies AI provider compliance by injecting synthetic prompts containing invisible, Ed25519-signed Unicode watermarks. Algorithmic bias is detected by generating counterfactual “digital twin” prompts and applying Fisher exact statistical testing.Routing decisions for multi-tier autonomous systems are governed by safety-level requirements (ASIL-D, ASIL-B, QM) and may be constrained by external routing directives received via a meta-identifier. A hash-chained manifest, cryptographically signed using Ed25519 and consumed by downstream gateways, is generated for each routing decision, with its Merkle root asynchronously anchored to a blockchain to create a tamper-evident audit trail for regulatory compliance.

The invention belongs to the technical field of optical communication, and relates to an adaptive key pool and real-time key collaborative resource optimization method and device, and the method comprises the steps: generating a key on a time slot of a quantum signal channel between every two adjacent quantum nodes, and storing the key in a quantum key pool; generating a communication path for each service request, and when the service security level of the service request is the highest, generating a real-time key on a time slot of a quantum signal channel between every two adjacent quantum nodes in the communication path; when the service security level of the service request is enhanced, a key is obtained from a quantum key pool between every two adjacent quantum nodes in a communication path of the service request, and when the number of keys in the quantum key pool is smaller than the key demand quantity of the service request, the service security level of the service request is enhanced; a real-time key is generated on a time slot of a quantum signal channel between every two adjacent quantum nodes in a communication path; and when the service security level of the service request is based on the service security level, a key is acquired from a quantum key pool between every two adjacent quantum nodes in a communication path of the service request.

The invention provides a satellite internet endogenous security grading identity authentication method based on dynamic trust evaluation, which comprises the following steps: a user registration stage: collecting and storing all identity information of a satellite internet user and information of entity equipment used for login; in a user login stage, performing identity authentication on the user according to a security level identity authentication process corresponding to the user login authentication identity, and allowing the user to log in after successful authentication; and determining an initial trust value based on the user identity information, obtaining a dynamic trust score based on the dynamic behavior and the initial trust value, and judging that the identity is abnormal when the dynamic trust score is lower than a set security threshold.