1252 results about "Security service" patented technology

The invention discloses a comprehensive service system and method for intelligent safety protection, and relates to the technical field of safety service systems.After state data of a park are intelligently analyzed, potential risk event types are identified, the risk propagation trend is judged through a space-time association algorithm, the risk level of each area in the park is evaluated, and the risk level of each area in the park is evaluated. And generating a risk level map, performing path planning and scheduling optimization on the inspection equipment according to the current available inspection resources and the risk level map, and cooperatively controlling all the inspection equipment to operate based on path planning and scheduling optimization results. The service system generates a high-credibility regional risk level map, takes a current available resource state and the risk level map as input conditions, dynamically generates a routing inspection path and task allocation, effectively improves reasonable utilization and allocation of routing inspection resources, automatically adjusts a scheduling task under the condition that individual routing inspection equipment fails, has sudden obstacles or is limited in path, and improves the routing inspection efficiency. And stable proceeding of the inspection task is ensured.

The invention provides an industrial control network security service security guarantee system based on behavior analysis, which belongs to the technical field of industrial control network security, and comprises a multi-source data fusion acquisition module, a dynamic behavior modeling engine, a federal learning analysis cluster, an attack chain prediction module, a self-adaptive protection strategy executor and a model evolution feedback ring, wherein the multi-source data fusion acquisition module synchronously acquires industrial control network flow (including OPC UA / Modbus / DNP3 protocol analysis), equipment operation logs, user operation behavior fingerprints and physical interface state data, and the physical interface state data comprises electrical characteristic fluctuation monitoring of USB / network interfaces. According to the scheme, through multi-technology fusion and closed-loop design, the problems of static performance, single-dimension analysis defects and response lag of a traditional industrial control security scheme are effectively solved, a comprehensive protection system with dynamic modeling, intelligent decision making, privacy protection and continuous optimization is constructed, and the security and service reliability of an industrial control network are remarkably improved.

A data-driven dynamic energy management system for the adaptive coordination of renewable and conventional energy sources, consisting of: a processing unit configured to perform real-time calculations to optimize the generation, storage, and distribution of electrical energy by continuously analyzing operational data, forecasting future energy demand, and generating control instructions to match available generation resources with forecasted consumption demand; a storage unit connected to the processing unit, configured to store records of historical energy production and consumption, environmental data, operating thresholds and learned model parameters, and to provide said data as input for the forecasting and optimization routines performed by the processing unit; a multitude of IoT-based monitoring units, each comprising at least one sensor configured to measure instantaneous parameters of generation, storage level, consumption rate and environmental conditions, with each monitoring unit being configured to periodically transmit measurement packets to the processing unit via a secure communication network; a forecasting unit implemented in the processing unit, configured to process historical and real-time data to create forecast curves for demand and generation using statistical and probabilistic forecasting techniques, and to dynamically update the weights of the forecasting model in response to observed deviations between forecasted and actual output; an optimization control unit implemented in the processing unit and configured to evaluate the outputs of the forecasting unit together with current operational data to determine a set of optimized control variables representing the target generation contribution of each energy source, and to pass these targets to a lower-level controller for execution; a controller that is communicatively connected to the processing unit and the multiple energy generation sources and is configured to regulate the operation of each source by adjusting the activation state, output level and operating priority based on the control signals received from the processing unit; an energy storage management unit comprising at least one battery array and a power conditioning circuit, configured to receive control instructions from the processing unit, store excess generated energy, release stored energy when forecasted demand exceeds available generation, and report charging and discharging characteristics in real time to the processing unit for continuous recalibration; an alarm and notification control unit connected to the processing unit, configured to continuously compare storage levels and generation reserves with stored operating thresholds, trigger predefined responses when critical or abnormal conditions are detected, and transmit acoustic, visual, and digital remote alerts to designated operators; a user interface terminal connected to the processing unit, configured to display real-time generation statistics, demand forecasts, energy storage status, and system alerts, and to accept operator-defined parameter inputs that are transmitted to the processing unit for recalibration of forecast or optimization parameters; and a secure server interface configured to synchronize operational logs, learning data, and performance indicators with a remote monitoring or analysis server for centralized monitoring, long-term data analysis, and distributed decision support.

Various techniques for LLM powered detection reasoning solutions are disclosed. In some embodiments, a system, a process, and / or a computer program product for an LLM powered detection reasoning solution includes monitoring network traffic at a security platform, wherein the security platform generates a sample based on the monitored network traffic; sending the sample to a security service to generate a Large Language Model (LLM) powered detection and reason, wherein the LLM is prompted to automatically generate a malware or benign verdict and a reason for explaining the verdict; and reporting the LLM powered detection and reason.

Techniques for detecting and protecting claimable non-existent domains are disclosed. A system, process, and / or computer program product for detecting and protecting claimable non-existent domains includes monitoring network activity using a network security device, detecting that a session is querying a claimable non-existent domain using a domain name system (DNS) security service, and performing an action in response to the session querying the claimable non-existent domain.

The invention belongs to the technical field of cloud security services, and provides a trusted cloud security confidential privacy three-dimensional level product service method, which comprises the following steps that: a cloud service provider matches products and services with different security levels by separating differentiated demands of an application development service provider and a final user in confidential, privacy and security dimensions; configuring different security modules for the product, performing hardware and software type selection matching, and determining a product type in combination with an end-to-end scene; then deploying a dynamic strategy adjustment mechanism, monitoring abnormal access in real time and adaptively adjusting a protection strategy; and continuously optimizing the security configuration. The invention discloses a trusted cloud security confidential privacy three-dimensional grade product service system, which is used for realizing a trusted cloud security confidential privacy three-dimensional grade product service method. The method is beneficial for transparently solving the security demand and conflict problem of the cloud service provider, the application development service provider and the final user, and promoting the healthy development of the cloud computing market.

A system and method are provided for communicating security service context within a network. Intermediary nodes located along the path of a data flow apply various security services to the data flow, and keep a record of the security services by generating in-band and out-of-band information. The in-band information is limited, e.g., by the maximum transmission unit (MTU) to short attestations that fit within optional IPv6 extension headers. The out-of-bound information, which is recorded, e.g., in a ledger using an overlay network, provides additional information fully describing the security services. Based on the in-band and out-of-band information (e.g., using the attestations to retrieve the additional information from the ledger), the data flow is either allowed or denied entrance to a particular workload. Applying the security services and generating the in-band and out-of-band information can be performed using data processing units (DPUs) and / or an extended Berkley packet filters (eBPFs).

Apparatuses, systems, and techniques for classifying one or more computer programs executed by a host device as being ransomware using a machine learning (ML) detection system. An integrated circuit is coupled to physical memory of a host device via a host interface. The integrated circuit hosts a hardware-accelerated security service to protect one or more computer programs executed by the host device. The security service obtains a series of snapshots of data stored in the physical memory and extracts a set of features from each snapshot of the series of snapshots, each snapshot representing the data at a point in time. The security service classifies a process of the one or more computer programs as ransomware or non-ransomware using the set of features and outputs an indication of ransomware responsive to the process being classified as ransomware.

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Specifically, the present disclosure relates to an O-RAN based network system.

The invention discloses a trusted cloud security confidential privacy level product service method, and relates to the technical field of design of cloud computing security. The method comprises the following steps: acquiring a trusted cloud privacy security level and a hierarchical core security mechanism, establishing a binding relationship with a product, extracting technical features and performing quantitative scoring, and constructing a three-dimensional security matrix; obtaining a privacy grading service demand of the user, and establishing a demand matching model to screen a security preference grade product; obtaining different-dimension technical grade improvement times of the user security preference grade product, and carrying out synergistic effect analysis; if significant positive correlation exists, correlation analysis is carried out to obtain a dynamic correlation coefficient, a product optimization strategy is made, a three-dimensional security matrix is dynamically updated, and the trusted cloud security confidential privacy level product service system comprises a feature classification module, a product optimization module, a collaborative analysis module and an optimization updating module. According to the method, more accurate security product recommendation can be provided for the user, and the trusted cloud security service level is improved.

The present invention discloses a communication data backup method and system based on Internet of Things security service, which relates to the technical field of communication data backup. The backup period is set for each type of communication data according to the importance evaluation of the communication data; the backup request of each type of communication data is triggered according to the backup period of each type of communication data, and the communication data triggering the backup request is preliminarily screened; the preliminarily screened communication data is processed in blocks, and then the backup is performed in sequence according to the backup requirement information of each data block; when the backup of the last data block is triggered, the backup data is integrity checked and risk predicted; the communication data is fully backed up according to the integrity check result; the risk of attack and the possibility of loss of the backup data are evaluated according to the risk prediction result, and then the backup strategy is adjusted. Efficient and accurate backup operation is achieved, and data security is enhanced through integrity check and risk prediction.

The invention provides a multi-mode unified identity authentication method based on an OAuth2.0 technology, and the method comprises the steps: constructing a unified organization and user management system based on an OAuth2.0 protocol, and enabling the organization and user management system to integrate a unified account, authorization, authentication, application and audit management module; single sign-on, security access and centralized management and control are provided for an application system according to a plurality of preset authentication and authorization modes, wherein the preset authentication and authorization modes comprise an authorization code mode, an implicit mode, a password mode and a client mode. The system and the method have the beneficial effects that through a centralized digital identity management, authentication, authorization, monitoring and auditing platform, a legal user is ensured to access a trusted system and equipment with proper authority, and real-time early warning and effective prevention are performed on abnormal access behaviors, so that all-around security service and support are provided for an application system and related personnel; and the workload of system operation and maintenance is reduced while the user experience is improved.

The disclosure relates to a communication technique and system therefor for converging an Internet of Things (IoT) technology and a 5th generation (5G) communication system for supporting a high data rate after a 4th generation (4G) system. The disclosure is applicable to intelligent services (e.g., smart home, smart building, smart city, smart car or connected car, health care, digital education, retail, security, and safety services) based on a 5G communication technology and IoT-related technology. The disclosure provides a method and apparatus for uplink (UL) data repetition transmission by a user equipment (UE) in a next-generation communication system.

Systems and methods for securing agent communications in a multi-agent system including deploying an agent to communicate with external servers, instantiating a sidecar security service in communication with the agent and including at least one of a guardrails service, a security layer, an encryption module, and an integrity checker configured to validate resources tools using hash-based verification mechanisms. Communications including messages between the primary and the external servers are intercepted by the sidecar security service, which then performs at least one of filtering the one or more messages by the guardrails service, authenticating one or more server connections by the security layer, encrypting one or more outbound requests by the encryption module, or verifying an integrity of resources and tool definitions by the integrity checker.

Techniques for beacon and threat intelligence based Advanced Persistent Threat (APT) detection are disclosed. In some embodiments, a system / process / computer program product for beacon and threat intelligence based APT detection includes collecting firewall log data from monitored network traffic; analyzing the firewall log data at a cloud security service to identify beacon traffic based on a plurality of heuristics; performing a risk evaluation of the beacon traffic to detect malicious beacon traffic; and performing an action in response to detecting the malicious beacon traffic.

Systems, methods, and instrumentalities are provided for a network control node for connecting a wireless transmit / receive unit (WTRU) to a network slice in a network. The network control node may receive service information associated with a service being requested by the WTRU, wherein the service information comprises one or more of a service class, a quality of service (QoS) requirement, or a mobility characteristic. The network control node may determine slice information associated with a plurality of network slices, wherein the slice information comprises one or more of an identifier of the network slice, priority of the network slice, a service class served by the network slice, a target device class, a QoS target, mobility support, security service, charging information, and / or performance information. The network control node may determine subscriber information for the WTRU. The network control node may select at least a first network slice of the plurality of network slices to serve the WTRU, wherein the network control node selects the first network slice based on the service information, the slice information associated with the first network slice, and the subscriber information for the WTRU. The network control node may determine whether the network control node or another network control node should service the WTRU for accessing the first network slice. On condition that the network control node determines that the network control node should service the WTRU for accessing the first network slice, the network control node may provide at least one network service associated with the first network slice to the WTRU. Or, on condition that the network control node determines that the another network control node should service the WTRU for accessing the first network slice, the network control node may send a request to the another network control node that indicates that the another network control node should service the WTRU for accessing the first network slice.

Systems and methods are provided to enable a user to conduct a transaction using their credentials stored on a secure server computer (e.g., a computer associated with a partner such as another merchant) by merely presenting their authentication data at a physical location via an auxiliary device. An auxiliary device may be provided for interfacing with a partner's backend server (e.g., the secure server computer). In some embodiments, biometric authentication may provide a mechanism for a true seamless and potentially frictionless (in the case of modalities that do not require physical contact) interaction. Payment can occur without any need for a card, phone, wearable, or any other user device as long as the auxiliary device is able to recognize the user and retrieve a credential that can be linked to that user.

Methods, systems and apparatuses for sharing video data across tenants of a multi-tenant security system. The methods may include maintaining a first tenant account of a security server and a second tenant account of the security server. The first tenant account is unrelated to the second tenant account. The second tenant account is configured to include partner account privileges for the first tenant account. A request from the second tenant account to access a resource associated with video data included in a resource registry of the first tenant account is accessed. The resource registry is made accessible to the second tenant account based on the partner account privileges. The request may be approved or denied. The video data is stored in a tenant database in association with the second tenant account based on the request being approved. The request may be processed by an image processing device.

Various techniques for security controls across SaaS apps are disclosed. In some embodiments, a system / method / computer program product for providing security controls across SaaS apps includes collecting configuration settings for each of a plurality of Software as a Service (SaaS) applications (apps) for a SaaS security service, wherein the configuration settings are related to security for one or more of the plurality of SaaS apps; grouping each of the configuration settings into one of a plurality of categories and one of a plurality of subcategories; and determining that a configuration setting associated with at least one of the plurality of SaaS apps is not in compliance with a rule of a security policy.

The disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as a smart home, a smart building, a smart city, a smart car, a connected car, health care, digital education, smart retail, security and safety services. Various embodiments of the disclosure provide a method for repeatedly transmitting / receiving uplink data in a network cooperative communication system, and an apparatus capable of performing the same.

A system and method provide streamlined restricted access to a secure server through a communications network. A client identifier parameter value is established and uniquely associated with a user registering with an authentication server, and is stored in at least first and second predetermined storage forms within a data storage system, the first form readable exclusively by a client device of the user and the second form readable by the authentication server. The client device then authenticates by retrieving the client identifier parameter value from the data storage system and providing it to the authentication server, which independently retrieves the client identifier parameter value from the data storage system for comparison, and initiates an interactive communication session between the client device and the secure server responsive to the comparison. Between comparisons, the client identifier parameter values are stored exclusively on the data storage system and deleted from all other devices.

A system and method for providing credentials device unique credentials to a chip is disclosed. In one embodiment, the method comprises receiving the credentials in credential provisioning server (CPS), the credentials having information encrypted according to a secure server key (SSK) securely stored in a hardware security module (HSM) communicatively coupled to the CPS, the hardware security module also securely storing a master key; receiving a credential request in the CPS, the credential request comprising a chip identifier that identifies the chip; securely decrypting the encrypted information in the HSM according to the SSK; securely computing a chip-unique key in the HSM, according to the chip identifier and the master key; re-encrypting the decrypted information according to the computed chip-unique key; and providing the credentials having the re-encrypted information to the device.

The invention discloses a service processing method and device, relates to the technical field of security, can meet the information security requirement of a functional security operating system, improves the security of service processing, and is easy to implement. According to the method, a functional security operating system (a first security operating system) with high functional security and high information security requirements can be migrated to a security world, and high-security and high-credibility services can be processed in the security world. A functional secure operating system (second secure operating system) deployed in a non-secure world can access a TEEOS to execute services through a secure TEE proxy technology, or access a local secure service to execute services.

The invention discloses a distributed denial of service (DDOS)-based artificial intelligence (AI) acceleration solution using a data processing unit (DPU). Apparatuses, systems, and techniques are described for detecting whether a host device is attacked by distributed denial of service (DDOS) using a machine learning (ML) detection system. A computing system includes a data processing unit (DPU) having a network interface and a hardware acceleration engine. The DPU hosts a hardware acceleration security service to extract features from the network data and metadata from the hardware acceleration engine, and sends the extracted features to the ML detection system. The ML detection system determines whether the host device is subjected to a DDOS attack using the extracted features. The ML detection system may send enforcement rules to the hardware acceleration engine in response to determining that the host device is subject to the DDOS attack.

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Disclosed is a method of operating a non-terrestrial network comprising the step of: configuring a Timing Advance, TA, value comprising a cell-specific common TA and a residual TA, wherein the cell-specific common TA is broadcast by a satellite in connection with a particular cell.

Techniques for a data centric approach for supporting multiple inline cloud services are disclosed. In some embodiments, a system, a process, and / or a computer program product for a data centric approach for supporting multiple inline cloud services includes processing a set of data for network security analysis; determining whether to offload the set of data to a cloud security entity for security processing; and in response to determining to offload the set of data to the cloud security entity, sending the set of data from the inline security entity to a cloud service portal, wherein: the cloud service portal receives a data upload from the inline security entity and processes the data upload to determine content to send to one or more of a plurality of cloud security services for offload processing based on a data type associated with the content; and the cloud service portal receives a result from the one or more of the plurality of cloud security services and forwards the result to the inline security entity, wherein the inline security entity performs an action based on a security policy associated with the inline security entity.

The invention discloses an RSIC-V CPU security chip based on authority management, and belongs to the technical field of security startup. Comprising an embedded RSIC-V CPU core, and the embedded RSIC-V CPU core is connected with an ROM authority management module, a safety management system register and a safety authority management module. The ROM authority management module is connected with the secure ROM firmware; the security authority management module is connected with a plurality of security modules; when users with different identities access the secure ROM firmware, identity recognition is carried out, and security services with different levels are provided according to the permission of the recognized user identities. According to the method, only the request passing signature verification and security authority management authentication is allowed to access the security module, the service uniqueness of the security module is ensured, the chip security module can be pertinently accessed only through authorized upper software, the access is non-direct access, security service is carried out through ROM firmware, and a service result is fed back to the upper software, so that the security module can be accessed in a targeted manner. The security of the security module is ensured from the circuit, and the attack difficulty of the chip is greatly increased.

Techniques for providing centralized identity redistribution for security services are disclosed. In some embodiments, a system / process / computer program product for providing centralized identity redistribution for security services includes receiving, at a security platform from a cloud security service, user context information (e.g., user context information); iP-user mapping, user-label mapping, IP-label mapping, IP-port-user mapping, IP-device ID mapping, 5G user context information and / or other user context information / data); and applying the security policy at the security platform using the user context information.

The invention relates to a mine safety early warning emergency management decision and linkage response system based on'scene-quick response chain-response ', and belongs to the technical field of mine safety early warning emergency management decision and linkage response. The system comprises a multivariate information acquisition and input module, a multi-chain data fusion module, a disaster situation analysis and evaluation display module, an emergency knowledge platform based on a knowledge graph, a command scheduling and emergency capability evaluation display module, an emergency information intelligent receiving and issuing module, an emergency drilling and training module and the like. And an emergency management closed loop based on knowledge, expert group intelligence, an emergency process and an intelligent decision rule set is realized. According to the invention, the scientificity, compliance and timeliness of mine safety emergency management decision and linkage response can be effectively improved, and the mine safety service guarantee level and the working efficiency are improved.

Techniques for unknown exploit detection using attack traffic analysis and real-time attack event streaming are disclosed. In some embodiments, a system / process / computer program product for exploit detection using attack traffic analysis and real-time attack event streaming includes receiving a stream that includes a plurality of attack events from a security platform at a cloud security service; generating a cluster of attack events from the stream; and tagging the cluster with an unknown attack pattern for further automated security analysis at the cloud security service, wherein the tagged unknown attack pattern cluster does not match a preexisting signature for a known attack pattern.