32 results about "Security Measure" patented technology

The application discloses a kind of power grid Internet of Things platform gateway equipment access security control systems and methods, it is related to the field of security control, including: equipment is generated digital certificate by submitting unique identifier and hardware feature code, and carries out two-way identity authentication with platform;According to device type and business demand, the operating authority is divided for equipment by hierarchical permission model and the real-time data is encrypted protection;System predicts future device access quantity and service type by training LSTM neural network model;Based on the prediction result, the resource allocation proportion of each permission level is dynamically adjusted to meet the demand;When detecting device behavior anomaly, the platform will locate abnormal device and take corresponding security measures.The application has the advantages that: through two-way identity authentication, hierarchical permission model and LSTM prediction, the security access management of power grid Internet of Things platform is realized, the resource allocation is optimized, and the sudden traffic and abnormal behavior are effectively dealt with, the security and efficiency of the platform are improved.

A security measure support device (100) comprises an input unit (181) that inputs security measure information that indicates security measures against cyber-attacks on systems that include a plurality of devices, a storage unit (120) that stores attack scenarios (see attack scenario database (140)) that indicate attack sequences for the cyber-attacks, an update unit (113) that, on the basis of an updated system that is a system that includes devices to which security measures have been applied in accordance with the security measure information, identifies devices to which security measures have been applied that are included in the attack scenarios stored at the storage unit (120), substitutes the devices to which security measures have been applied for the devices of other systems to update the attack scenarios and create updated attack scenarios, and an output unit (182) that outputs the updated attack scenarios.

To facilitate the detection and response status of system security issues, thereby simplifying security measures. [Solution] The system evaluation device includes a generation unit that uses detection result information representing the detection results of vulnerabilities possessed by multiple information processing devices included in the system to evaluate the vulnerability status in the system for each different type of evaluation method and generates evaluation result information representing the evaluation results for each evaluation method, and an output unit that causes an output device to output vulnerability trend information representing the vulnerability trend corresponding to the worst evaluation result among the evaluation result information for each evaluation method.

A system and method for simultaneous compression and encryption of data. The system analyzes input data to determine its properties and creates a transformation matrix based on these properties. Using this matrix, the input data is transformed into a modified distribution, generating a main data stream of transformed data and a secondary stream of transformation information. The main data stream is compressed, and both streams are combined into a single output. The system implements security measures to protect against various attacks, including side-channel vulnerabilities. By using a dyadic distribution algorithm, the system achieves both compression and encryption in a single pass over the data, offering significant efficiency gains. The system can operate in both lossless and lossy modes, providing flexibility for different application requirements. This approach offers a unique solution for data transmission and storage scenarios where both data reduction and security are critical concerns.

This invention provides a method, apparatus, and device for access control of power data, relating to the field of power data technology. The method includes: acquiring a data request instruction sent by a user when performing a power data access operation; performing a risk rating on the power data access operation based on the data request instruction to obtain an initial risk level; collecting real-time context information corresponding to the power data access operation, and determining a dynamic risk score corresponding to the power data access operation based on the initial risk level and the real-time context information; determining risk mitigation measures based on the dynamic risk score, processing the original data requested in the data request instruction according to the risk mitigation measures, and sending the processed data to the user. This invention effectively solves the problem of the disconnect between security measures and instantaneous risks in traditional static models, avoiding inefficiency due to excessive protection for low-risk access, or leakage due to insufficient protection for high-risk access.

This invention discloses an intelligent management control cabinet and operation and maintenance method for wind power, relating to the field of wind turbine operation and maintenance technology. The control cabinet includes a cabinet body, an intelligent control unit, and modules for work order reception, personnel identification, and safety equipment detection. Each module is electrically connected to the intelligent control unit. After approval, the work order is transmitted to the control cabinet. The intelligent control unit controls the power supply of the climbing aid / elevator through a full-process verification process, including personnel identity verification, safety equipment wearing detection, and warning sign management. The operation and maintenance method includes eight steps: work order transmission locking, identity verification, safety equipment detection, work order confirmation, warning sign management, equipment unlocking, maintenance return, and system reset. This invention uses intelligent means to enforce standardized operation and maintenance processes, implement safety measures, and achieve remote visual monitoring and data traceability. It solves the problems of lax qualification review, inadequate safety measures, and crude process management in existing technologies, improving operation and maintenance safety and efficiency, and is suitable for the harsh environment of wind power sites.

This invention discloses a data access control method based on identity recognition, comprising: collecting request data and preprocessing it to obtain unified input data; constructing an improved Mask2Former model to obtain evidence results; performing evidence variable processing to construct an observation evidence set; outputting the posterior results of identity credibility and risk level based on a joint tree algorithm; performing policy mapping processing to generate dynamic authorization results; performing security measures on target data and outputting response data; and performing association solidification to generate and store audit records. This invention, by combining the inference of the improved Mask2Former model and the joint tree algorithm, achieves a closed loop of dynamic fine-grained authorization, security measures linkage, and audit record retention based on the posterior results of identity credibility and risk level.

Provide a system. 【Solution means】 Means for analyzing data acquired by a detector and an image sensor mounted on a vehicle to detect abnormalities, Means for notifying the detected abnormalities to the owner terminal in real time, Means for stopping the power unit of the vehicle based on the detection of abnormalities, Means for tracking the position of the vehicle using a position information system and providing the information to the owner, Communication network means for jointly implementing security measures by sharing security information with other users, Means for providing the owner with information to support safe driving based on past operation data, Means for transmitting information to the owner in real time when abnormal vibrations or impacts are detected during driving, A system including the above.

A security system and method implements proactive defense through host operating system isolation and virtualization. The security system and method include a host computer running a host operating system and multiple hosted virtual machines that serve as intermediate connections to isolate the host operating system from external networks. The virtual machines systematically back up data to cloud services having indirect connections to the host computer. An internal virtual private network interconnects the virtual machines, with a designated virtual machine serving as a network gateway to manage traffic flow. A secure controller within the host computer functions as a bridge between user applications and the host operating system, enforcing security protocols and managing core operations to ensure system integrity. The secure controller manages interactions between the virtual machines and cloud services, providing security measures while maintaining operational efficiency through parallel processing architecture.

This invention discloses a method and system for data security situation awareness and access control based on multimodal data, belonging to the fields of network security and data governance technology. The method includes: real-time capture of multimodal data and vectorization encoding of the captured multimodal data to obtain multimodal vectors; construction of a multimodal cross-attention network, inputting the multimodal vectors into the multimodal cross-attention network and mapping them to a unified semantic space; automatic learning of the correlation weights between different modalities through an attention mechanism to achieve multimodal feature fusion and situation awareness, generating a comprehensive situation feature vector; inputting the comprehensive situation feature vector into a classifier or anomaly detection model to output the current risk score in real time; and dynamically adjusting access policies based on the risk score through an access control gateway, and implementing corresponding security measures for access requests according to different risk levels.

The application discloses a safety measure generation method, device and equipment of a voltage loop and a medium, and belongs to the field of power grid safety operation and maintenance. The method is as follows: based on a preset transformer substation physical model, a plurality of voltage full loops associated with each first work screen cabinet to be overhauled are determined; taking the first work screen cabinet as a starting point, the topological connection type of each voltage full loop is determined according to the loop node and loop flow direction of the voltage full loop in the corresponding first work screen cabinet; according to the topological connection type, the safety measure object in each voltage full loop is determined, and the work screen cabinet to which the safety measure object belongs is taken as a second work screen cabinet; according to the second work screen cabinet, the circuit switching category of each voltage full loop is determined, and the safety measures corresponding to each voltage full loop are generated according to the circuit switching category. The application can solve the problem of low accuracy of safety measure generation in a complex circuit topology scene.

Providing secure secrets for encryption consistency enables rotating security measures (e.g., encryption access keys in users' certificate) for encrypted data at rest, without either needing to retain any prior certificates or requiring decryption and re-encryption. This provides enhanced security and enhanced speed since no decryption / re- encryption is needed. Examples generate a primary encryption key, which is retained on a secure remote computing node, such as in a key vault, and is not shared outside the key vault. Access to the primary encryption key is restricted to users who possess the current encryption access key, which is rotated on some trigger event. The remote node receives incoming messages to encrypt or decrypt files and performs the encryption / decryption using the primary encryption key - but only if a message contains the current encryption access key. Rotating the encryption access key preserves security.

The application discloses a kind of cutter wear data monitoring system and method based on big data, belong to big data technical field.The application includes: acquisition and processing module: real-time acquisition cutter wear related data, carry out data cleaning and timeline alignment, extract cutter wear characteristics;Big data storage and analysis module: using HDFS stores cutter wear characteristics, implements data management strategy, introduces data security measures, establishes data index, analyzes the relevance between cutter wear characteristics;Wear rehearsal module: obtain historical data set, train linear regression model to calculate the influence of current cutter wear characteristics on cutter wear state, carry out model evaluation, and predict the features collected in real time;Parameter adjustment module: compare the vector group of predicted cutter wear with time variation with the optimal trend of cutter wear with time variation, and adjust the cutter wear characteristics using gradient optimization algorithm.

We provide information processing systems and other tools that present security evaluation results. [Solution] According to one aspect of the present invention, an information processing system is provided, comprising at least one processor, the processor configured to perform the following steps by reading a program, wherein in the acquisition step, an evaluation value of representative answer data selected for each category to be classified from a plurality of answer data created by the person being evaluated, the answer data includes the person being evaluated's answers to questions about security, and in the index assignment step, an index indicating the level of security measures is assigned to the person being evaluated for each category based on the evaluation value of the acquired representative answer data.

Techniques are described herein that are capable of performing a security action based on cross-tenant security threat analysis using a multi-tenant identifier. First and second security data are gathered from first and second resources in first and second security-bounded tenants and stored in a tenant-shared store using first and second tenant-specific identifiers. A cross-tenant security threat analysis is performed with regard to the first and second security-bounded tenants by using a multi-tenant identifier to obtain multi-tenant permission to access the first security data and the second security data in the tenant-shared store. As a result of the cross-tenant security threat analysis indicating a security threat with regard to the first security-bounded tenant and / or the second security-bounded tenant, execution of an instruction is triggered, which causes a security action to be performed with regard to the first security-bounded tenant and / or the second security-bounded tenant.

Various aspects related to methods, systems, and computer readable media for detection and blocking of security threats for network-accessible devices. Methods may include monitoring a plurality of processes executing on the user device to identify a pre-execution flag associated with at least one process of the plurality of processes, and, responsive to identifying the pre-execution flag: receiving an indication of a security threat to the user device, the indication of security threat associated with the at least one process and a device threat type, responsive to the receiving the indication of the security threat, elevating security measures associated with the user device for a first time period, and after the elevating, automatically remediating the security threat on the user device within the first time period.

Systems and processes enhance cybersecurity by dynamically generating a decoy sub-application that operates parallel to the primary application using generative design and a large language model. The core feature involves real-time anomaly detection within application traffic, utilizing AI to assess threats and orchestrate appropriate responses. Upon identifying potential security threats, the system employs generative design principles to architect a restricted-functionality sub-application, deploying it instantly to engage and analyze the attack vectors without compromising sensitive production data. The sub-application is isolated through software-defined networking, ensuring that its operations do not affect the primary application's functionality. Additionally, sophisticated traffic redirection mechanisms are employed to divert suspicious traffic from the primary to the decoy application, thereby protecting the integrity while allowing detailed threat analysis. This dual-capability system not only safeguards against disruptions but also enhances adaptive security measures through continuous learning and system adjustments.

The application provides a kind of monitoring protection circuit of control signal, for protecting safety chip, the circuit includes: signal monitoring unit and alarm processing unit, wherein: the signal monitoring unit is used to detect the state of SEN control signal containing sensitive logic in real time, when safety chip is attacked, if the level of the SEN control signal is detected to occur abnormal mutation, then high level alarm signal is generated;The alarm processing unit is used to control the safety chip to respond and process according to the high level alarm signal, to strengthen the security mechanism of the safety chip.The application generates an alarm after the key signal is attacked and changed, and the related circuit responds to the alarm signal, takes over the system control signal of the chip, ensures that sensitive data will not be obtained by abnormal attack, so as to ensure the safety of the chip and avoid the problem that the related security measures are invalid due to the attack on the key signal.

This invention discloses a method and system for power operation risk identification and decision-making based on large-scale model intelligent reasoning, belonging to the field of power operation management technology. The method includes: acquiring relevant data from power operation tickets and using a hazard point database and a safety measure database as knowledge support; cleaning, structuring, and semantically parsing the data to construct a semantic feature vector for the operation; inputting the semantic feature vector into a preset large-scale language model and performing enhanced retrieval analysis in conjunction with the hazard point database and historical operation ticket data to identify potential hazards and generate a candidate hazard point set; assessing the risk level by combining equipment operating status data and historical risk event data to obtain the operation risk level and risk influencing factors; matching safety measures and generating a risk control plan; performing compliance verification and conflict detection on the risk control plan and outputting it to the operation ticket management system. This invention improves the accuracy and intelligence level of power operation risk identification.

A distributed power supply-oriented information security strategy evaluation method and system, the method comprising: acquiring a network topology of a distributed power supply power monitoring system, constructing a threat graph, querying and analyzing threat intelligence for the threat graph, defining baseline attributes of each threat node to be evaluated in the distributed power supply power monitoring system, and assigning attribute values to each node in the threat graph according to the query and analysis results by using each baseline attribute; calculating the attribute value of each path based on the attribute value of each node, and solving the execution difficulty of the node attribute and the execution difficulty of the path attribute by using the attribute value of each node and the attribute value of each path, respectively, to obtain the execution difficulty range of the threat graph; analyzing the security measures of the current scene and substituting the analysis results into the threat nodes to be evaluated, recalculating the execution difficulty of the threat graph, and combining the execution difficulty range of the threat graph to generate a security strategy evaluation result.

Disclosed are systems and methods that provide a novel framework for centralized management of a location (e.g., jobsite, for example) and / or the users operating therein. The disclosed framework can operate so as to monitor the performance of tasks performed by users at a location, which can enable the determination of how effective, efficient, compliant and / or safe the user is being. Such information can be utilized to train machine learning and / or artificial intelligence (ML / AI) models that can be recursively applied to ensure performance levels and safety measures of each users'operation at the location. The framework can further be applied to compile learned activity behaviors into computer-executable instructions that can be used to automate certain tasks at the location via specifically configured real-world and / or digital assets (e.g., machinery or robotics at the jobsite, for example).

We provide the system. [Solution] A means for integrating weather information, operational information, road surface condition information, and information on past accidents, A means for analyzing operational risks based on the aforementioned integrated information, A means for selecting appropriate safety measures based on the aforementioned risk analysis, A means of generating selected safety measures in multiple languages, Means for transmitting the generated information to the transporter or pilot, A means of proposing alternative routes in real time, A system that includes this.

Techniques are presented for detecting and remediating security events. One method includes ingesting signals and telemetry from various tools like Software as a Service (SaaS), Endpoint Detection and Response (EDR), Mobile Device Management (MDM), and Secure Access Service Edge (SASE). Live session graphs are created for users, mapping all application token sessions. The system collects data from multiple sources to construct detailed graphs that represent user sessions, application usage, device employment, and third-party application tokens. This helps identify both legitimate and suspicious sessions, reducing false positives and enhancing effectiveness. Session graphs are analyzed to detect security threats, identify suspicious activities, and determine appropriate responses. Further, remediation tools are provided to address security events manually or automatically through established policies. The policy engine of the system distributes policies across diverse applications, enforcing them on various platforms like SaaS, identity management, and EDR applications, ensuring a comprehensive control point for security measures.

This invention discloses a knowledge graph-based electromechanical safety measure recommendation system, comprising: a heterogeneous safety data acquisition module for collecting heterogeneous raw safety data and safety scenario data to be analyzed; a safety semantic decoupling and association reorganization module for performing safety semantic decoupling, cross-source association, and scenario reorganization; an electromechanical safety knowledge graph construction module for constructing an electromechanical safety knowledge graph; a TimeMixer scenario representation module for extracting scenario features using an improved TimeMixer network; a safety risk analysis module for performing safety risk analysis and obtaining initial measure recommendation results; a rule constraint correction module for constraining and correcting the initial measure recommendation results, eliminating conflicts, and making decisions; and a safety measure parsing module for generating electromechanical safety measure content. This invention improves the relevance and executability of recommended electromechanical safety measures through an improved TimeMixer network.

The inputs and / or outputs of a generative artificial intelligence model are monitored to determine whether they contain or otherwise elicit undesired behavior by the model such as bypassing security measures, leaking sensitive information, or generating or consuming malicious content. This determination can be used to selectively trigger remediation processes to protect the model from malicious actions. Related apparatus, systems, techniques and articles are also described.

We provide information processing systems and other tools that present security evaluation results. [Solution] According to one aspect of the present invention, an information processing system is provided, comprising at least one processor, the processor configured to perform the following steps by reading a program, wherein in the acquisition step, an evaluation value of representative answer data selected for each category to be classified from a plurality of answer data created by the person being evaluated, the answer data includes the person being evaluated's answers to questions about security, and in the index assignment step, an index indicating the level of security measures is assigned to the person being evaluated for each category based on the evaluation value of the acquired representative answer data.

This invention discloses a comprehensive rapid detection system for a hazardous materials security gate with facial recognition, comprising a security gate body, a facial recognition module, a hazardous materials detection module, a central data processing module, an alarm module, and a human-computer interaction module, which work together. This invention integrates three major technology modules—facial recognition, gas chromatography-ion mobility spectrometry (GC-IMS) gas detection, and active X-ray fluorescence (XRF) metal detection—into a single modular gate structure. This fundamentally solves the shortcomings of traditional metal detector gates with their single function, enabling a single security gate to simultaneously complete three core tasks: identity verification, flammable and explosive material screening, and toxic metal detection. This covers a wider range of hazardous materials and significantly improves the breadth and depth of security measures.

This invention relates to the field of intelligent security technology, specifically to a security early warning method based on a visual large model, comprising the following steps: identifying the visual correspondence between the current work object and visible safety measures in the image using the visual large model, generating a work-measure anchoring unit; determining whether the visible safety measures are actually acting on the current work object; and generating a mismatch compliance risk unit when the visible safety measures only correspond to adjacent objects, historical work objects, or non-current work locations; and generating a security early warning result based on the mismatch compliance risk unit. This invention solves the mismatch compliance problem commonly found in industrial sites but difficult to detect by existing vision systems, i.e., situations where safety measures are visually present and appear compliant on the surface, but the actual protection relationship has been mismatched.

The application discloses a composite function accelerometer in the field of micro-electro-mechanical system technology, and aims to solve the problem of poor integration and miniaturization in the prior art. The accelerometer comprises: when a MEMS generates acceleration, relative sliding occurs between a first substrate and a plate-shaped proof mass; the relative sliding between the first substrate and the plate-shaped proof mass will reduce the effective area between a first electrode plate and a proof electrode plate, and then the detection capacitor releases the electric charge; an overload detector detects the current, and then judges the acceleration of the MEMS according to the size of the current; when the acceleration reaches a degree at which security measures need to be executed, the sliding distance between the first substrate and the plate-shaped proof mass reaches a degree at which a first substrate round hole and a proof mass hole are overlapped; at this time, micro energy emitted by a micro energy emission unit can pass through the first substrate round hole and the proof mass hole; and a security mechanism triggering unit executes security disconnect measures after receiving the micro energy. The composite function accelerometer is not only small in size, but also has the security judgment function.