836 results about "Security service" patented technology

The invention discloses a comprehensive service system and method for intelligent safety protection, and relates to the technical field of safety service systems.After state data of a park are intelligently analyzed, potential risk event types are identified, the risk propagation trend is judged through a space-time association algorithm, the risk level of each area in the park is evaluated, and the risk level of each area in the park is evaluated. And generating a risk level map, performing path planning and scheduling optimization on the inspection equipment according to the current available inspection resources and the risk level map, and cooperatively controlling all the inspection equipment to operate based on path planning and scheduling optimization results. The service system generates a high-credibility regional risk level map, takes a current available resource state and the risk level map as input conditions, dynamically generates a routing inspection path and task allocation, effectively improves reasonable utilization and allocation of routing inspection resources, automatically adjusts a scheduling task under the condition that individual routing inspection equipment fails, has sudden obstacles or is limited in path, and improves the routing inspection efficiency. And stable proceeding of the inspection task is ensured.

The invention provides an industrial control network security service security guarantee system based on behavior analysis, which belongs to the technical field of industrial control network security, and comprises a multi-source data fusion acquisition module, a dynamic behavior modeling engine, a federal learning analysis cluster, an attack chain prediction module, a self-adaptive protection strategy executor and a model evolution feedback ring, wherein the multi-source data fusion acquisition module synchronously acquires industrial control network flow (including OPC UA / Modbus / DNP3 protocol analysis), equipment operation logs, user operation behavior fingerprints and physical interface state data, and the physical interface state data comprises electrical characteristic fluctuation monitoring of USB / network interfaces. According to the scheme, through multi-technology fusion and closed-loop design, the problems of static performance, single-dimension analysis defects and response lag of a traditional industrial control security scheme are effectively solved, a comprehensive protection system with dynamic modeling, intelligent decision making, privacy protection and continuous optimization is constructed, and the security and service reliability of an industrial control network are remarkably improved.

A data-driven dynamic energy management system for the adaptive coordination of renewable and conventional energy sources, consisting of: a processing unit configured to perform real-time calculations to optimize the generation, storage, and distribution of electrical energy by continuously analyzing operational data, forecasting future energy demand, and generating control instructions to match available generation resources with forecasted consumption demand; a storage unit connected to the processing unit, configured to store records of historical energy production and consumption, environmental data, operating thresholds and learned model parameters, and to provide said data as input for the forecasting and optimization routines performed by the processing unit; a multitude of IoT-based monitoring units, each comprising at least one sensor configured to measure instantaneous parameters of generation, storage level, consumption rate and environmental conditions, with each monitoring unit being configured to periodically transmit measurement packets to the processing unit via a secure communication network; a forecasting unit implemented in the processing unit, configured to process historical and real-time data to create forecast curves for demand and generation using statistical and probabilistic forecasting techniques, and to dynamically update the weights of the forecasting model in response to observed deviations between forecasted and actual output; an optimization control unit implemented in the processing unit and configured to evaluate the outputs of the forecasting unit together with current operational data to determine a set of optimized control variables representing the target generation contribution of each energy source, and to pass these targets to a lower-level controller for execution; a controller that is communicatively connected to the processing unit and the multiple energy generation sources and is configured to regulate the operation of each source by adjusting the activation state, output level and operating priority based on the control signals received from the processing unit; an energy storage management unit comprising at least one battery array and a power conditioning circuit, configured to receive control instructions from the processing unit, store excess generated energy, release stored energy when forecasted demand exceeds available generation, and report charging and discharging characteristics in real time to the processing unit for continuous recalibration; an alarm and notification control unit connected to the processing unit, configured to continuously compare storage levels and generation reserves with stored operating thresholds, trigger predefined responses when critical or abnormal conditions are detected, and transmit acoustic, visual, and digital remote alerts to designated operators; a user interface terminal connected to the processing unit, configured to display real-time generation statistics, demand forecasts, energy storage status, and system alerts, and to accept operator-defined parameter inputs that are transmitted to the processing unit for recalibration of forecast or optimization parameters; and a secure server interface configured to synchronize operational logs, learning data, and performance indicators with a remote monitoring or analysis server for centralized monitoring, long-term data analysis, and distributed decision support.

Various techniques for LLM powered detection reasoning solutions are disclosed. In some embodiments, a system, a process, and / or a computer program product for an LLM powered detection reasoning solution includes monitoring network traffic at a security platform, wherein the security platform generates a sample based on the monitored network traffic; sending the sample to a security service to generate a Large Language Model (LLM) powered detection and reason, wherein the LLM is prompted to automatically generate a malware or benign verdict and a reason for explaining the verdict; and reporting the LLM powered detection and reason.

The invention belongs to the technical field of cloud security services, and provides a trusted cloud security confidential privacy three-dimensional level product service method, which comprises the following steps that: a cloud service provider matches products and services with different security levels by separating differentiated demands of an application development service provider and a final user in confidential, privacy and security dimensions; configuring different security modules for the product, performing hardware and software type selection matching, and determining a product type in combination with an end-to-end scene; then deploying a dynamic strategy adjustment mechanism, monitoring abnormal access in real time and adaptively adjusting a protection strategy; and continuously optimizing the security configuration. The invention discloses a trusted cloud security confidential privacy three-dimensional grade product service system, which is used for realizing a trusted cloud security confidential privacy three-dimensional grade product service method. The method is beneficial for transparently solving the security demand and conflict problem of the cloud service provider, the application development service provider and the final user, and promoting the healthy development of the cloud computing market.

The invention discloses a trusted cloud security confidential privacy level product service method, and relates to the technical field of design of cloud computing security. The method comprises the following steps: acquiring a trusted cloud privacy security level and a hierarchical core security mechanism, establishing a binding relationship with a product, extracting technical features and performing quantitative scoring, and constructing a three-dimensional security matrix; obtaining a privacy grading service demand of the user, and establishing a demand matching model to screen a security preference grade product; obtaining different-dimension technical grade improvement times of the user security preference grade product, and carrying out synergistic effect analysis; if significant positive correlation exists, correlation analysis is carried out to obtain a dynamic correlation coefficient, a product optimization strategy is made, a three-dimensional security matrix is dynamically updated, and the trusted cloud security confidential privacy level product service system comprises a feature classification module, a product optimization module, a collaborative analysis module and an optimization updating module. According to the method, more accurate security product recommendation can be provided for the user, and the trusted cloud security service level is improved.

The disclosure relates to a communication technique and system therefor for converging an Internet of Things (IoT) technology and a 5th generation (5G) communication system for supporting a high data rate after a 4th generation (4G) system. The disclosure is applicable to intelligent services (e.g., smart home, smart building, smart city, smart car or connected car, health care, digital education, retail, security, and safety services) based on a 5G communication technology and IoT-related technology. The disclosure provides a method and apparatus for uplink (UL) data repetition transmission by a user equipment (UE) in a next-generation communication system.

Systems and methods for securing agent communications in a multi-agent system including deploying an agent to communicate with external servers, instantiating a sidecar security service in communication with the agent and including at least one of a guardrails service, a security layer, an encryption module, and an integrity checker configured to validate resources tools using hash-based verification mechanisms. Communications including messages between the primary and the external servers are intercepted by the sidecar security service, which then performs at least one of filtering the one or more messages by the guardrails service, authenticating one or more server connections by the security layer, encrypting one or more outbound requests by the encryption module, or verifying an integrity of resources and tool definitions by the integrity checker.

Techniques for beacon and threat intelligence based Advanced Persistent Threat (APT) detection are disclosed. In some embodiments, a system / process / computer program product for beacon and threat intelligence based APT detection includes collecting firewall log data from monitored network traffic; analyzing the firewall log data at a cloud security service to identify beacon traffic based on a plurality of heuristics; performing a risk evaluation of the beacon traffic to detect malicious beacon traffic; and performing an action in response to detecting the malicious beacon traffic.

Systems, methods, and instrumentalities are provided for a network control node for connecting a wireless transmit / receive unit (WTRU) to a network slice in a network. The network control node may receive service information associated with a service being requested by the WTRU, wherein the service information comprises one or more of a service class, a quality of service (QoS) requirement, or a mobility characteristic. The network control node may determine slice information associated with a plurality of network slices, wherein the slice information comprises one or more of an identifier of the network slice, priority of the network slice, a service class served by the network slice, a target device class, a QoS target, mobility support, security service, charging information, and / or performance information. The network control node may determine subscriber information for the WTRU. The network control node may select at least a first network slice of the plurality of network slices to serve the WTRU, wherein the network control node selects the first network slice based on the service information, the slice information associated with the first network slice, and the subscriber information for the WTRU. The network control node may determine whether the network control node or another network control node should service the WTRU for accessing the first network slice. On condition that the network control node determines that the network control node should service the WTRU for accessing the first network slice, the network control node may provide at least one network service associated with the first network slice to the WTRU. Or, on condition that the network control node determines that the another network control node should service the WTRU for accessing the first network slice, the network control node may send a request to the another network control node that indicates that the another network control node should service the WTRU for accessing the first network slice.

Systems and methods are provided to enable a user to conduct a transaction using their credentials stored on a secure server computer (e.g., a computer associated with a partner such as another merchant) by merely presenting their authentication data at a physical location via an auxiliary device. An auxiliary device may be provided for interfacing with a partner's backend server (e.g., the secure server computer). In some embodiments, biometric authentication may provide a mechanism for a true seamless and potentially frictionless (in the case of modalities that do not require physical contact) interaction. Payment can occur without any need for a card, phone, wearable, or any other user device as long as the auxiliary device is able to recognize the user and retrieve a credential that can be linked to that user.

Methods, systems and apparatuses for sharing video data across tenants of a multi-tenant security system. The methods may include maintaining a first tenant account of a security server and a second tenant account of the security server. The first tenant account is unrelated to the second tenant account. The second tenant account is configured to include partner account privileges for the first tenant account. A request from the second tenant account to access a resource associated with video data included in a resource registry of the first tenant account is accessed. The resource registry is made accessible to the second tenant account based on the partner account privileges. The request may be approved or denied. The video data is stored in a tenant database in association with the second tenant account based on the request being approved. The request may be processed by an image processing device.

A system and method for providing credentials device unique credentials to a chip is disclosed. In one embodiment, the method comprises receiving the credentials in credential provisioning server (CPS), the credentials having information encrypted according to a secure server key (SSK) securely stored in a hardware security module (HSM) communicatively coupled to the CPS, the hardware security module also securely storing a master key; receiving a credential request in the CPS, the credential request comprising a chip identifier that identifies the chip; securely decrypting the encrypted information in the HSM according to the SSK; securely computing a chip-unique key in the HSM, according to the chip identifier and the master key; re-encrypting the decrypted information according to the computed chip-unique key; and providing the credentials having the re-encrypted information to the device.

Techniques for a data centric approach for supporting multiple inline cloud services are disclosed. In some embodiments, a system, a process, and / or a computer program product for a data centric approach for supporting multiple inline cloud services includes processing a set of data for network security analysis; determining whether to offload the set of data to a cloud security entity for security processing; and in response to determining to offload the set of data to the cloud security entity, sending the set of data from the inline security entity to a cloud service portal, wherein: the cloud service portal receives a data upload from the inline security entity and processes the data upload to determine content to send to one or more of a plurality of cloud security services for offload processing based on a data type associated with the content; and the cloud service portal receives a result from the one or more of the plurality of cloud security services and forwards the result to the inline security entity, wherein the inline security entity performs an action based on a security policy associated with the inline security entity.

The invention discloses an RSIC-V CPU security chip based on authority management, and belongs to the technical field of security startup. Comprising an embedded RSIC-V CPU core, and the embedded RSIC-V CPU core is connected with an ROM authority management module, a safety management system register and a safety authority management module. The ROM authority management module is connected with the secure ROM firmware; the security authority management module is connected with a plurality of security modules; when users with different identities access the secure ROM firmware, identity recognition is carried out, and security services with different levels are provided according to the permission of the recognized user identities. According to the method, only the request passing signature verification and security authority management authentication is allowed to access the security module, the service uniqueness of the security module is ensured, the chip security module can be pertinently accessed only through authorized upper software, the access is non-direct access, security service is carried out through ROM firmware, and a service result is fed back to the upper software, so that the security module can be accessed in a targeted manner. The security of the security module is ensured from the circuit, and the attack difficulty of the chip is greatly increased.

The invention relates to a mine safety early warning emergency management decision and linkage response system based on'scene-quick response chain-response ', and belongs to the technical field of mine safety early warning emergency management decision and linkage response. The system comprises a multivariate information acquisition and input module, a multi-chain data fusion module, a disaster situation analysis and evaluation display module, an emergency knowledge platform based on a knowledge graph, a command scheduling and emergency capability evaluation display module, an emergency information intelligent receiving and issuing module, an emergency drilling and training module and the like. And an emergency management closed loop based on knowledge, expert group intelligence, an emergency process and an intelligent decision rule set is realized. According to the invention, the scientificity, compliance and timeliness of mine safety emergency management decision and linkage response can be effectively improved, and the mine safety service guarantee level and the working efficiency are improved.

Techniques for unknown exploit detection using attack traffic analysis and real-time attack event streaming are disclosed. In some embodiments, a system / process / computer program product for exploit detection using attack traffic analysis and real-time attack event streaming includes receiving a stream that includes a plurality of attack events from a security platform at a cloud security service; generating a cluster of attack events from the stream; and tagging the cluster with an unknown attack pattern for further automated security analysis at the cloud security service, wherein the tagged unknown attack pattern cluster does not match a preexisting signature for a known attack pattern.

Apparatuses, systems, and techniques for classifying a candidate uniform resource locator (URL) as a malicious URL using a machine learning (ML) detection system. An integrated circuit is coupled to physical memory of a host device via a host interface. The integrated circuit hosts a hardware-accelerated security service that obtains a snapshot of data stored in the physical memory and extracts a set of features from the snapshot. The security service classifies the candidate URL as a malicious URL using the set of features and outputs an indication of the malicious URL.

In general, techniques are described that enable a computing system to execute an artificial intelligence model for data security analysis. A computing system that includes a memory and processing circuitry may be configured to implement the techniques. The memory may store a query from an end user regarding security services provided by the data platform. The processing circuitry may parse the query to identify one or more intents, and process the one or more intents to retrieve data for formulating a natural language response to the query. The processing circuitry may also process, using a large language model, the intents and the data to generate the natural language response, and output the natural language response to a user interface for display to the end user.

An example method may include booting, by a host computer system, an operating system (OS) kernel; locking, by a security service running on the host computer system, a plurality of physical pages in a memory of the host computer system, wherein the plurality of physical pages is designated for use by the OS kernel, wherein the plurality of physical pages, upon locking, are unmodifiable by the OS kernel, and wherein the security service is associated with a privilege level higher than a privilege level of the OS kernel; performing, by the security service, a cryptographic measurement on the plurality of the physical pages; and generating, by the host computer system, a measurement report based on the cryptographic measurement.

Systems, devices, and methods are disclosed for enforcing relational database security policies with respect to database components stored in a data lake. The techniques may include receiving, by a data lake security service associated with a data lake, a file system call comprising a uniform resource identifier and a credential. The service may obtain relational database metadata and identify, from the metadata, a relational database component corresponding to the uniform resource identifier of the file system call. A relational security policy corresponding to that component may be obtained and access to a storage location at which the data associated with the relational database component may be authorized (e.g., based on the credential received).

The invention discloses an auditing key management method based on a trusted execution environment, which comprises the following steps that: a data provider encrypts original data by using k to obtain a ciphertext C, and calculates a hash value id of the C; t; id, kgt; storing the result in association locally, and storing the result; d, Cgt; uploading to a cloud server; the data provider formulates and signs a data use strategy, the data processor formulates and signs a data processing strategy, and the data use strategy and the data processing strategy are both sent to the security service program of the trusted execution environment; verifying the signature and the authorization state of the processing strategy, and sending a key request and a remote authentication report to a data provider; after the data provider remotely verifies the remote report, if the request is agreed, the key k is sent to the security service program through the security channel, and a key use record is stored in the block chain; and the security service program downloads the ciphertext C, decrypts the data after verification, executes processing operation, and returns an encryption result to a specified receiver. According to the invention, real-time auditing and evidence storage can be carried out on the use process of the secret key, and cross-domain management and control of data can be realized.

The invention provides a fusion type secure storage system, electronic equipment, a data management method and a computer readable storage medium. The system comprises a hardware security layer, an encryption processing layer, a verification error correction layer, a data stream processing layer and an intelligent management layer which are in communication connection, the hardware security layer provides a physical trusted root for the system and executes a security policy; the encryption processing layer is used for carrying out encryption processing on data based on the security service provided by the physical trusted root; the verification and error correction layer is used for carrying out integrity verification and self-adaptive error correction coding on the encrypted data; the data stream processing layer is used for executing a near data calculation task on the data subjected to verification and error correction; and the intelligent management layer collects real-time state data from the hardware security layer, the encryption processing layer, the check error correction layer and the data stream processing layer, and performs dynamic strategy configuration and global optimization decision, thereby improving the active calculation, dynamic adaptation and intelligent optimization capabilities of the system.

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services.Embodiments herein provide a method for switching between a plurality of SIM networks by a multi SIM UE in a wireless communication network. The method includes determining, by the multi SIM that the multi SIM UE needs to initiate an active data session on a second SIM network based on one of a paging message received by the multi SIM UE from the second SIM network and at least one MO activity which needs to be delivered using the second SIM network. Further, the method includes sending, by the multi SIM UE, a leaving operator message to the first SIM network indicating that the multi SIM UE is leaving the first SIM network; and switching, by the multi SIM UE, from the first SIM network to the second SIM network by triggering procedures to initiate the active data session on the second SIM network.

Various embodiments include systems and methods to implement predictive scan engine runtime durations by a security platform to predict runtime durations associated with computing resources. Predictive scan engine runtime durations may be determined by training a prediction model using a multiple linear regression analysis. For example, the security platform may determine a prediction model using training data that associates runtime durations with configuration inputs associated with a security service that operates with respect to a computing resource. Based on the prediction model, the security platform may determine a runtime estimate for a security service run that is configured similarly to a previous security service run used to train the prediction model.

Systems and methods for performing fingerprint-based data loss prevention (DLP) using information obtained from a cloud-native service are provided. In one example, DLP fingerprints are obtained by a security enforcement system (e.g., a network security appliance, a secure access service edge (SASE) platform, or a security service edge (SSE)). The DLP fingerprints may be generated locally by the security enforcement system or generated remotely from the security service edge based on a set of files stored in a cloud-native service, representing, for example, infrastructure-as-a-service (IaaS) (e.g., an object storage service) or Software-as-a-service (SaaS) (e.g., a file hosting service or a productivity platform). Based at least in part on the DLP fingerprints, DLP is performed on a file by a DLP service of the security enforcement system, in which the file is at rest on an endpoint protected by the security enforcement system or in transit through the security enforcement point.

Various embodiments include systems and methods pertaining to a security service platform that detects security threats based on a security service that operates on structurally deduplicated network data. The security service may operate within a cloud environment and perform the security analysis that includes compiling a ruleset to generate an executable, where the executable is run over the structurally deduplicated event data. If the executable identifies a rule match for a given portion of structurally deduplicated event data, then the security service platform may reconstruct the structurally deduplicated event data to access all portions of a network event associated with the structurally deduplicated event data that triggered the rule match. The security service platform may use the reconstructed event data to generate and provide an alert that indicates a detected cyberattack.

The present disclosure relates to a method of enrolling an individual at a secure server and subsequently authenticating and identifying the individual at an authenticating party using an authentication token created during the enrolment and a secure server performing the method. The method comprises engaging, via a user device, in an enrolment process with the individual, registering the user device by receiving a public key, the public key being created by the user device along with a private key corresponding to the public key, acquiring a trusted identifier of the individual, associating the acquired trusted identifier of the individual with at least one database index to create an authentication token, the database index being utilized for look-up at the secure server, signing the authentication token, and sending the signed authentication token to the user device, while deleting the acquired trusted identifier at the secure server.

Systems and methods for secure communications in a firmware framework. In some embodiments, an Information Handling System (IHS) may include: a controller, wherein the controller comprises firmware that, upon execution by a processing core, causes the processing core to instantiate an orchestrator; and a plurality of devices coupled to the controller, where each device comprises firmware that, upon execution by a corresponding processing core, causes the corresponding processing core to instantiate a node as part of a firmware framework, and where a given node is configured to communicate with the orchestrator, at least in part, using a security service of the firmware framework without any involvement by any Operating System (OS) of the IHS.

There is provided a system, method, and computing device for distribution of cryptographic key generation data in a secure network, the secure network comprising a security server and one or more clients. The method including: receiving or generating indexed random data; communicating at least a portion of the indexed random data to one of the clients; and receiving or communicating the indices of the portions of the indexed random data shared with the client, a portion of the indexed random data is used for cryptographic key generation for encrypted communication between the client and another client. In some cases, the above is repeated for each client, wherein the indexed random data is unique for each client.