76 results about "Security pattern" patented technology

Systems and methods for securing agent communications in a multi-agent system including deploying an agent to communicate with external servers, instantiating a sidecar security service in communication with the agent and including at least one of a guardrails service, a security layer, an encryption module, and an integrity checker configured to validate resources tools using hash-based verification mechanisms. Communications including messages between the primary and the external servers are intercepted by the sidecar security service, which then performs at least one of filtering the one or more messages by the guardrails service, authenticating one or more server connections by the security layer, encrypting one or more outbound requests by the encryption module, or verifying an integrity of resources and tool definitions by the integrity checker.

The invention belongs to the technical field of network security, and particularly relates to a network security analysis system based on an AI algorithm. Comprising a data acquisition and preprocessing module, an abnormal behavior characteristic index construction module, a safety mode evolution law index construction module and a threat risk comprehensive evaluation module. According to the system, multi-source heterogeneous data such as network flow, equipment logs, threat intelligence and user behaviors are analyzed through deep learning, a graph neural network and an attention mechanism, potential attack time periods are recognized in real time, the threat evolution trend is predicted, and dynamic early warning is achieved by fusing multi-dimensional risk factors. Compared with a traditional detection mode based on rules, the method has higher unknown threat detection capacity, interpretability and real-time performance, the network security protection level can be greatly improved, and the method is suitable for various complex network environments.

The invention discloses a simulator supporting multiple debugging permissions. According to the embodiment of the invention, the simulator supporting multiple debugging permissions comprises a simulator management module which comprises a configuration unit, and the configuration unit is used for configuring the debugging permissions; a storage unit of the simulator hardware module is divided into a safe area and a non-safe area; the security area is used for storing security data, the non-security area is used for storing non-security data, and the debugging permission comprises a security mode and a limited mode; in the security mode, allowing access to the security area and the non-security area; and in the limited mode, the access to the safe area is prohibited, and the access to the non-safe area is allowed. According to the emulator supporting the multiple debugging permissions, debugging requirements of different security levels can be effectively distinguished, and flexible access control is provided for development and maintenance while data security is guaranteed.

The invention relates to the technical field of energy storage power station safety monitoring, and discloses an energy storage power station safety assessment method and system, and the method comprises the steps: collecting historical operation data and regular sampling inspection sample data of an energy storage power station, and carrying out the data preprocessing and feature extraction; and respectively constructing a security evaluation model A based on a decision tree algorithm and a security prediction model B based on a long short-term memory (LSTM) network algorithm. A model A learns a safety mode and a fault mode in historical data, and a model B predicts a future safety state change trend. Sampling inspection data are input into the two models to obtain evaluation and prediction results, and a preliminary fusion evaluation result is obtained through comprehensive analysis of a fusion algorithm. And according to a set safety threshold, determining a power station safety level and a potential risk point. And finally generating a safety assessment report including the overall safety condition, the potential risk points and the suggested measures. According to the invention, the accuracy and timeliness of safety assessment of the energy storage power station are effectively improved.

The invention relates to the technical field of communication, and discloses a communication method and device. The method comprises: a terminal device sending a first de-registration request message to a network device, and receiving a security mode command message from the network device, the security mode command message being used for starting a first security context; sending a response message of the security mode command message to the network device according to the security mode command message, and enabling the first security context; receiving a response message of the first de-registration request message from the network equipment; according to the present NAS security context (the first security context) and the non-present NAS security context (the second security context), integrity protection verification is attempted to be performed on the response message of the de-registration request message, so that it is convenient to ensure that the terminal device completes de-registration under the condition that the security mode control process conflicts with the de-registration process.

A method for managing a plurality of imaging devices in a vehicle includes determining that a change of data security mode is indicated for frames of image data transmitted over a first data communication link, determining whether a sensor management system has sufficient processing capacity to support the change of data security mode, increasing the processing capacity of the sensor management system by modifying data security settings for at least one other data communication link when the processing capacity of the sensor management system is insufficient to support the change of data security mode, and initiating the change of data security mode when the sensor management system has sufficient processing capacity to support the change of data security mode. The change of data security mode may include a change from an application-based to a link-based data security mode or a change from the link-based to the application-based data security mode.

Systems and methods for securing agent communications in a multi-agent system including deploying an agent to communicate with external servers, instantiating a sidecar security service in communication with the agent and including at least one of a guardrails service, a security layer, an encryption module, and an integrity checker configured to validate resources tools using hash-based verification mechanisms. Communications including messages between the primary and the external servers are intercepted by the sidecar security service, which then performs at least one of filtering the one or more messages by the guardrails service, authenticating one or more server connections by the security layer, encrypting one or more outbound requests by the encryption module, or verifying an integrity of resources and tool definitions by the integrity checker.

The invention provides a high-reliability on-orbit reconstruction method for large satellite-borne software, which is characterized in that a BootLoader program solidified on a PROM (programmable read-only memory) is designed with a function of reconstructing any software at a low speed by using a bus, so that the BootLoader program serves as the most fundamental guarantee for the reliability of a reconstruction scheme; a high-speed self-reconfiguration function is designed for the satellite-borne software, so that the high-speed channel self-reconfiguration software can be utilized after the satellite-borne software is started in a normal process; security mode software which is small in size and can exist on an MRAM in a triple modular redundancy mode is constructed, and the main function of the security mode software is to complete high-speed reconstruction of satellite-borne software. And when self-reconfiguration of the satellite-borne software fails and the satellite-borne software cannot be normally started, a special instruction is sent to the BootLoader to start the security mode software, so that high-speed reconfiguration of the satellite-borne software can be continued. The whole satellite-borne software can be reconstructed in a measurement and control arc section through a high-speed channel. Compared with a mode that a comprehensive electronic system spends several measurement and control arc segments to collect data and then distributes the data at a low speed through a bus channel, the method has the advantages that the required time is greatly shortened, and the reliability is high.

A method is disclosed. The method includes monitoring, by a security system, a security pattern of a building based on security data corresponding to the building. The method further includes monitoring, by the security system, an energy pattern of the building based on energy information corresponding to the building. The method further includes identifying, based on the security pattern and the energy pattern, a potential reduction in the energy pattern resulting from a change in at least one of the security pattern or the energy pattern. The method further includes identifying an insight comprising an action to at least partially achieve the potential reduction in the energy pattern. The method further includes transmitting the insight to a device in communication with the security system.

A method of inkjet printer operation produces a security pattern in a printed document. In one embodiment, the security feature is printed in the document as a line target with printheads that have been rotated so the rows of inkjets in the printhead are not aligned in the cross-process direction. The line target in the original document has a frequency response to that differs from a copy formed with a device that does not have rotated printheads. In another embodiment, a sneeze pattern is modified by shifting pixels of at least one color separation in the sneeze pattern in a cross-process direction or a process direction. A copy is identified because it does not contain the shifted pixels.

The present disclosure relates to an apparatus configured to perform: receiving, from a base station, a first message comprising: an authentication and key agreement challenge packet, an access stratum security mode command packet, and a non-access stratum security mode command packet; performing successful verification of the authentication and key agreement challenge packet, the access stratum security mode command packet, and the non-access stratum security mode command packet; and transmitting, to the base station, a second message comprising: an authentication and key agreement response packet, an access stratum security mode command complete packet, and a non-access stratum security mode command complete packet.

The invention relates to a security mode command transmission method and device, electronic equipment, a chip and a medium, and the method comprises the steps: receiving a 5G system non-access layer 5GS NAS message transmitted by network equipment, and the 5GS NAS message carries a security mode command; the initiation purpose of the security mode command is distinguished by combining the security header type of the 5GS NAS message; the security header type comprises integrity protection and encryption; wherein the partial security mode command is subjected to integrity protection and encryption, so that the security of the partial security mode command can be improved, the partial security mode command is prevented from being maliciously attacked, and the security of the NAS message is improved.

This invention discloses a hardware-triggered security mode switching device and method for artificial intelligence agents, belonging to the fields of G06F21 / 71 and G11C17 / 14. Addressing the shortcomings of existing technologies that rely on software / main control chips, this invention employs an independent hardware module design, including a non-electrically erasable storage structure (such as mask ROM, OTP) for storing a security rule set, a hardware instruction monitoring unit for physically intercepting and parsing instruction streams, a hardware anomaly detection unit for comparing security rules, a hardware security mode triggering unit for generating trigger signals, and a physically isolated security mode execution interface for transmitting signals. The device is completely independent of the agent's main control chip and any externally loadable and modifiable software, ensuring that security mode switching can still be performed even if the main control chip fails or is attacked. This solution effectively prevents the execution of harmful commands sent from data centers, provides hardware-level tamper-proof security protection, 100% resists malicious instruction tampering, and significantly improves the security of artificial intelligence agents.

The application relates to the technical field of ecological safety optimization, and discloses an ecological safety pattern intelligent simulation optimization system based on reinforcement learning. An experience pool forming module of the system divides historical optimization strategies into multiple experience layers to form a multilayer experience pool based on the gap between ecological indexes and strategy confidence of the historical optimization strategies. A strategy determining module determines intelligent optimization strategies at each stage based on a set ecological safety target state, and screens the multilayer experience pool to obtain experience optimization strategies in combination with strategy confidence and target matching degree. A strategy adjusting module adjusts the two strategies by using a dynamic mechanism to cope with real-time ecological changes, and determines a target optimization strategy. A simulation optimization module simulates and optimizes the ecological safety pattern based on the target optimization strategy. A state acquisition module acquires an actual state. An experience pool updating module updates the content of the experience layers based on the difference factors between the actual state and the target state, and perfects the multilayer experience pool data. The system can improve the dynamics and adaptability of ecological safety pattern optimization.

The present application provides a secure data processing method and apparatus, which can improve system security and reduce the attack risk on the basis of supporting the SMT function. The method includes: a first processing core executes a first thread in a normal mode, a second processing core executes a second thread in the normal mode, the first processing core suspends the execution of the first thread when it needs to switch to a secure mode, the first processing core instructs the second processing core to suspend the execution of the second thread, then the second processing core suspends the execution of the second thread according to the instruction of the first processing core, and the first processing core switches from the normal mode to the secure mode to process the first information.

An example embodiment includes one or more processors configured to execute computer executable instructions stored in a memory to determine a device property of a mobile device including a location of the mobile device using a geographic positioning system detection component, select a security mode for the mobile device based on a device property where a high security mode is selected when the mobile device is located in a first location, and a low security mode is selected when the mobile device is located in a second location where the second location is specified as part of a preference associated with a user account associated with the mobile device, and selectively provide a visualization on a user interface that masks a portion of the visualization in the high security mode and does not mask the portion of the visualization in the low security mode.

The invention relates to a method for printing an image on a security document, said method using invisible inks that are fluorescent and visible under ultraviolet radiation, characterised in that it comprises a step of additive colour synthesis, consisting in: - decomposing a visible digital image into three (red, green and blue (R, G, B)) digital image masks (13) such that the superposition of the three masks (13) corresponds to the base image; - applying to each R, G, B digital colour mask (13) computer processing (14) consisting in introducing security patterns into each of the R, G, B digital masks; - printing on a (paper, polycarbonate) physical medium, on top of one another, these three red, green and blue masks provided with their security patterns, using invisible luminescent inks so as to form, on the medium, an invisible image () containing the security patterns () previously introduced into the three RGB digital masks.

To provide a security system, server, security device, and work robot, which enable more appropriately providing security in a work area where the work robot performs predetermined work.SOLUTION: A security system provided herein comprises: an autonomously movable work robot for performing predetermined work in a work area; and a security device for monitoring moving bodies according to a preset security mode. The security system further includes: monitoring means provided in the security device, and configured to monitor the work area and a predetermined area outside the work area; setting means for switching between multiple security modes; and determination means for determining whether or not it is possible to change the security mode in the work area to allow the work robot to perform the predetermined work on the basis of a security mode which is set for the predetermined area.SELECTED DRAWING: Figure 5

A fraudulent image detector including a first segmenter configured to compute first probability data from an image showing personal identifiable information of an individual, the first probability data indicating, for each pixel of the image, a probability that the pixel shows a security pattern, a second segmenter configured to compute second probability data from the image, the second probability data indicating, for each pixel of the image, a probability that the pixel is part of a foreground region showing the personal identifiable information or part of a backdrop region showing no personal identifiable information, and a classifier configured to compute score data from the first probability data and the second probability data.

An embodiment of the present disclosure provides an electronic device for compensating for burn-in in a display, an operating method thereof, and a recording medium. The electronic device can: generate a de-burn-in layer for a normal screen in a normal mode; identify an event of switching from the normal mode to a security mode; switch from the normal mode to the security mode in response to the switching event; acquire the de-burn-in layer in the security mode; and display, through at least a part of a display, a security screen to which the de-burn-in layer is applied in the security mode. Various embodiments are possible.

The application provides a security pattern generation method with an arbitrary image distance, comprising the following steps: S1, designing pattern data processing; S2, calculating a basic imaging microstructure; S3, obtaining an axis core coordinate according to an array rule; S4, calculating an anisotropic imaging microstructure; and S5, cyclically generating the anisotropic imaging microstructure array according to an arrangement rule, so that the security pattern is realized when a point light source irradiates on the anisotropic imaging microstructure array. The security pattern film with the arbitrary image distance prepared by the method can realize the effects of floating in the air at an arbitrary distance and sinking at the bottom of the film, is not inferior to the double-layer micro-lens imaging technology, and is single-layer in structure, so that the method is not different from the preparation of the traditional holographic security film in process, and thus is easy to realize industrialization and mass production.

The present invention discloses a method for automatically generating a social engineering attack defense strategy based on a security model, comprising the following steps: step (1) modeling an input attack threat scenario; step (2) formalizing the scenario model; step (3) generating a candidate model for each attack threat; step (4) generating a defense plan and sorting the generated defense plans. The method is suitable for generating a social attack defense strategy based on a security model for a known attack threat.

This disclosure discloses a configuration method, a configuration device, and a configuration system of security mode and a computer readable storage medium, relating to mobile communications technologies. The configuration method of security mode includes: acquiring an integrity protection algorithm, an encryption algorithm, an original key and an operator identification of a core network from the core network, wherein the original key is also sent to a user to start a security mode, the core network is a core network of a first operator or a second operator, and the first operator and the second operator use a same shared carrier in a co-construction and sharing base station; determining a key generation algorithm preset by an operator to which the user belongs according to the operator identification; generating an integrity protection key and an encryption key of the user according to the key generation algorithm and the original key; and sending a security mode command to a terminal of the user, wherein the security mode command comprises verification information encrypted by the integrity protection key of the user, the integrity protection algorithm and the encryption algorithm, and the terminal has the key generation algorithm preset by the operator to which the user belongs.

A controller may receive a set of messages provided by one or more network nodes included in an in-vehicle communication network. The controller may determine a security pattern associated with generating a tunnel frame including the set of messages. The controller may identify one or more messages from the set of messages based on the security pattern. The controller may compute a tunnel frame message authentication code (TMAC) based on one or more characteristics of the one or more messages. The controller may generate the tunnel frame, the tunnel frame including the TMAC and the set of messages.

The invention relates to a method for printing an image on a security document, said method using invisible inks that are fluorescent and visible under ultraviolet light, characterized in that it comprises an additive color synthesis step, consisting of: decomposing a visible digital image into three digital image masks Red, Green, and Blue (R, G, B) such that the superposition of the three masks corresponds to the base image; applying to each digital color mask R, G, B a computer processing consisting of introducing security patterns into each of the digital masks R, G, B; printing these three Red, Green, and Blue masks one on top of the other on a physical substrate (paper, polycarbonate), using luminescent invisible inks so as to form on the substrate an invisible image containing the security patterns previously introduced into the three RGB digital masks. Figure for the Abstract: Figure 2

The present disclosure relates to a method and apparatus for transmitting a security mode command, an electronic device, a chip and a medium, wherein the method comprises: receiving a 5G system non-access layer (5GS NAS) message transmitted by a network device, wherein the 5GS NAS message carries a security mode command; the initiation purpose of the security mode command is distinguished in combination with the security header type of the 5GS NAS message; the security header type includes integrity protection and encryption; wherein part of the security mode command is integrity protected and encrypted, thereby improving the security of the part of the security mode command, avoiding the part of the security mode command from being maliciously attacked, and thereby improving the security of the NAS message.

This invention discloses a security enhancement method and system for the IEC 104 protocol on the master station side of a power monitoring system, comprising: generating input data, dynamically selecting a security mode and issuing configuration commands, generating original ASDU messages, calling application-layer security plugins to generate enhanced ASDU messages, encapsulating them into complete APDUs, generating security messages via transport-layer security plugins, and sending them to the station. This invention adopts a plug-in embedded architecture, integrating IEC 62351-5 application-layer and IEC 62351-3 transport-layer security plugins into the protocol processing module and communication processing module respectively, achieving decoupling of security functions and business functions; establishing a policy-driven mechanism, adding a security policy management module and an operation monitoring module, and providing port differentiation to adapt to different terminals to meet the needs of gradual transformation; controlling terminal concurrent connection latency at the millisecond level to meet the needs of large-scale high-concurrency access at the master station, and establishing a layered security protection system that coordinates the transport layer and application layer, ensuring message security even if transport layer security fails.

The application discloses a solid state disk assembly with data security function, and relates to the technical field of solid state disk security protection.The assembly comprises a solid state disk shell and a circuit board, wherein the circuit board is integrated with a master control unit, a NAND flash memory array, an environment sensing module and an interface module, and the modules are electrically connected through the circuit board wiring;the application integrates the environment sensing module composed of three types of sensors of temperature and humidity, vibration and electromagnetic radiation in the solid state disk assembly, matches the safety strategy control module built in the master control unit, realizes real-time collection of working environment parameters and threshold comparison, simultaneously designs the linkage control logic of encryption level control, interface locking, data temporary backup and storage area read-only protection in the master control unit, presets multiple safety modes and environment parameter thresholds and realizes dynamic switching, and performs differentiated safety protection operation on different environment abnormal scenes such as high temperature, strong electromagnetic interference and violent vibration.

Embodiments of the present disclosure provide a method and an apparatus for dynamically changing security algorithm. An apparatus operating as a terminal device comprises: at least one processor; and at least one memory including computer program code. The at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus operating as the terminal device at least to perform: receiving, from a network entity, a first message for configuring security mode, wherein the first message comprises a list of security algorithms and an indication of a change pattern of security algorithm; and transmitting, to the network entity, an accept message, when the apparatus operating as the terminal device supports the list of security algorithms and the change pattern of security algorithm. With the dynamical change, the number of permutations and combinations of algorithms and keys may be increased. The security level may be further improved.

A method and apparatus for security handling for subsequent mobility procedure is provided. A wireless device receives a security mode command including a security configuration from a network, receives information informing whether a target cell belongs to a security group from the network, and continues using the security configuration based on the information informing that the target cell belongs to the security group.