93 results about "Security solution" patented technology

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

The invention discloses a communication method and device, which are used for realizing a security scheme in the process of establishing MPQUIC connection between a terminal device and a user plane function. In the present application, the method comprises: after a first MA PDU session of a first terminal device is established, the first terminal device negotiates with a first user plane function to establish a first MPQUIC connection, and the first MPQUIC connection is associated with the first MA PDU session. The first terminal device deduces a key for protecting data of the first MPQUIC connection according to the pre-configured key, and the data of the first MPQUIC connection is transmitted through a plurality of paths between the first terminal device and the first user plane function. Wherein the pre-configured key is also used for the first terminal device to establish a second MPQUIC connection with the second user plane function, and the first user plane function and the second user plane function are located in the same public land mobile network.

The invention relates to the technical field of smart home security and protection, and discloses a smart home security and protection system based on a body, and the method comprises the steps: collecting real-time sensing data through Wi-Fi multipath scattered waves, constructing a body sensing network, recognizing behavior feature information, optimizing a preset security and protection model decision architecture, and obtaining an optimized security and protection process. The method comprises the following steps: firstly, generating a security response path, determining a personnel activity space-time distribution state, calculating a security efficiency value, then determining an optimization direction according to the security efficiency value, generating a dynamic protection organization unit, calculating a misjudgment attenuation rate, and finally determining a security state and analyzing a security dimension according to the misjudgment attenuation rate, thereby constructing a more accurate and intimate intelligent security scheme. According to the invention, the intelligent level of autonomous decision making and active protection of home security can be improved.

A method for providing quantum computation-based security solutions for generative artificial intelligence content includes generating an item of new content based on an input, and using a generative artificial intelligence foundation model that has been trained to generate items of new content having characteristics that mimic characteristics of content included in a set of training data, storing the item of new content in a quantum temporal blockchain, detecting an action performed by the generative artificial intelligence foundation model against the item of new content, and logging the action in the quantum temporal blockchain.

The invention provides a weak password detection method based on multi-modal feature fusion and dynamic behavior analysis. According to the method, multi-dimensional feature extraction is innovatively introduced, including password entropy, semantic relevance, user historical behaviors, system login frequency and the like, so that user feature adaptation is improved, and dependency on a static dictionary is reduced; in addition, through real-time interactive feedback, instant pushing of password strength evaluation and safety suggestions can be realized. Therefore, by means of the method, the problems that in an existing weak password detection technology, the static dictionary dependency is high, the user feature adaptation is insufficient, and real-time feedback is lacked can be solved, the weak password detection precision and defense efficiency of colleges and universities are remarkably improved, and an efficient and easy-to-deploy password security solution is provided for the education industry.

The invention discloses a data security management device based on a medical data operation mode, and relates to the technical field of data security management, and the device comprises a management background system, a data encryption module, a data desensitization module, a sensitive identification module, a data authority module, a data security auditing module and a database. According to the application, the technical means of data desensitization, encryption and the like are adopted to enhance the protection of the data in the processes of acquisition, transmission, storage, processing, retrieval, exchange, display and propagation, so that the data are ensured to be used according to laws and regulations in each link and are not illegally pretended, stolen, tampered, deleted and denied, the confidentiality, authenticity, integrity and non-repudiation of data information are ensured, and the security and reliability of the data are improved. And a security solution integrating identity authentication, access control, data encryption, data desensitization, communication encryption, resource control and security audit is provided.

A method to manage domain-based security profiles in a content delivery network (CDN) is disclosed. The method includes receiving security events detected by one or more security solutions implemented by one or more CDN instances of the CDN, determining, for each of a plurality of domains, a risk score for the domain based on the security events, determining possible next level domains for a CDN instance of the CDN, determining an updated order of an auto-adjusting list maintained by the CDN instance based on risk scores for the domains included in the auto-adjusting list and the possible next level domains for the CDN instance, and sending an update to the CDN instance to cause the CDN instance to update the order of the auto-adjusting list to reflect the updated order, wherein the order of the auto-adjusting list indicates an eviction priority for the domains included in the auto-adjusting list.

The invention discloses a privacy enhanced access control method for an industrial internet of things. The method comprises the following steps: step 1, generating and registering a key; step 2, data encryption and storage; step 3, access control and verification; and step 4, data calculation and decryption. According to the method, the security of a private key is protected through the uniqueness and non-replicability of a physical unclonable function (PUF), encryption state data operation is realized in combination with Paillier homomorphic encryption, and distributed access control and auditing are performed by using a block chain smart contract, so that security storage, access management and privacy protection of device data are realized, the security and efficiency of a system are effectively improved, and the security of the system is improved. The problems of security and privacy protection in the prior art are solved, and a more perfect security solution is provided for an industrial Internet of Things environment.

In some embodiments, a system, process, and / or computer program product includes encapsulating an original traffic header for a monitored flow from / to an entity in a virtualized environment; rerouting the flow from the entity in the virtualized environment to a security platform of a security service, wherein the security platform includes a virtualized firewall; performing security analysis at the security platform using the original traffic header; and rerouting the flow back to the entity in the virtualized environment for routing to an original destination based on the original traffic header, wherein the flow is rerouted over a network tunneling protocol to the security platform of the security service to isolate and protect workloads, application stacks, and / or services, and wherein an enforcement point is remote from a decision point using distributed traffic steering and enforcement via a distributed set of virtualized firewalls provided by the security service to facilitate application level segmentation.

Provided are techniques for a secure IaC solution for deploying cloud resources. A signed Infrastructure as Code (IaC) solution is received. A policy check is performed to determine that the signed IaC solution conforms to one or more policies. An automated validation of the signed IaC solution is performed to check for one or more compliance or security issues. A signature check of the signed IaC solution is performed to determine that the signed IaC solution has not been tampered with. It is determined that the signed IaC solution is authorized to be deployed by checking a trusted profile. The signed IaC solution is executed to deploy cloud resources.

The present invention relates to a system and method for enhancing the security of smart contracts within blockchain networks by utilizing a hardware secure enclave for monitoring and suspending contract activities in response to detected security breaches. The system establishes a trust relationship between the hardware secure enclave and the smart contract, providing the smart contract with a unique enclave signature to ensure secure communications. A modular data monitoring application within the enclave is configured to detect suspicious activities, while an attestation process ensures the integrity of the enclave's code. Upon detecting a security threat, the system initiates a pause function to suspend contract operations and mitigate potential damage. The invention further leverages blockchain relayer modules to witness and transmit contract activity, and consensus mechanisms such as Proof-of-Work (PoW) or Proof-of-Stake (PoS) for transaction verification. This method provides a scalable, secure solution for preventing attacks on smart contracts and safeguarding digital assets in decentralized applications.

The invention relates to the field of network security, and particularly provides a security cooperation system and method in a hybrid cloud environment. The system comprises a unified security management module, a security solution cooperation module and a security function module. The unified security management module analyzes a self-healing algorithm through a policy graph, carries out graph modeling on a multi-cloud security policy, automatically identifies policy conflicts and drifts through graph difference analysis, and realizes continuous consistency and self-healing of a cross-cloud policy. And the security solution cooperation module is embedded into a reinforcement learning agent, dynamically decides an optimal deployment scheme of security resources according to a reward function by sensing a threat situation, a resource utilization rate and response delay, and realizes intelligent self-adaptive arrangement of protection resources. The security function module is used for micro-servitizing and containerizing security capability based on a cloud native technology, transparent injection is realized through a service grid, an automatic compliance repair and verification mechanism is built in, and a compliance closed loop for detection, repair and verification is formed. And the management efficiency and the protection accuracy of the security policy are improved.

The present disclosure provides for systems and methods for assessing security in a computing environment. The system may comprise two or more attacks simultaneously. The system may comprise one or more attack simulations wherein the results are displayed in substantially real time. The system may comprise one or more performance indicators. The performance indicators may provide insight into what attacks are blocked, detected, logged, or alerted. The system may comprise one or more prioritized recommendations for security solutions, which may comprise one or more tool recommendations. The attack path may comprise an aggregation of one or more attack techniques. The system may comprise one or more endpoint solutions or recommendations. The system may integrate as a third-party software into an existing company or security infrastructure. The system may comprise at least one security validation test configured to target at least one security infrastructure of a scoped computing environment.

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

The invention discloses a binocular recognition all-in-one machine, and relates to the technical field of intelligent security and protection. Comprising a bifocal binocular vision acquisition module, a self-supervised dynamic calibration module, a heterogeneous intelligent calculation module, a multi-modal fusion identification module and a linkage response module, and the identification method comprises the steps of multi-source data acquisition, dynamic calibration, feature extraction and fusion, multi-task parallel processing and intelligent decision and response. According to the invention, cooperation of large-range monitoring and long-distance detail identification is realized through a bifocal lens group, environmental interference is eliminated in combination with a self-supervised dynamic calibration mechanism, personnel identification, vehicle identification and unmanned aerial vehicle detection tasks are efficiently processed in parallel by adopting a CPU + GPU + FPGA heterogeneous architecture, depth, motion and semantic features are fused to construct a multi-target threat assessment model, and the multi-target threat assessment model is established. And a hierarchical linkage response is triggered. According to the invention, the problems of limited field of view, poor environmental adaptability, low multi-task processing efficiency and the like of traditional equipment are solved, and a full-scene, high-reliability and intelligent security solution can be provided for key areas.

To prevent inconsistencies in the quality of response work related to elevator car troubles, which can arise due to differences in the experience and abilities of workers, by using a simple configuration, thereby achieving high-quality remote monitoring and improving the safety of elevator users. [Solution] The remote monitoring support device 120 acquires a signal output from a pressure sensor 137 installed in the elevator car 131 of the elevator 130, determines the position of the car 131 based on the acquired signal, and transmits notification information regarding the determination result to the management server computer 110. This makes it possible to properly determine the position of the car 131 with a simple configuration, and to properly determine whether the car 131 is operating normally, whether it is stopped between floors, etc.

Achieve both cost and safety. [Solution] An information processing system that utilizes a generation AI that generates answers to prompts acquires a prompt, determines whether an on-premise generation AI or a cloud-based generation AI will be the destination generation AI for the prompt, inputs the prompt into the destination generation AI based on the determination result, acquires an answer to the prompt from the destination generation AI that input the prompt, and outputs the answer.

To provide a system for improving the safety of an area by quickly and efficiently detecting and coping with abnormal behavior.SOLUTION: The system includes means for patrolling crime prone areas with drones, means for mounting sensors and generating AI to detect unusual behaviors and situations, means for alerting and advising upon detection of unusual situations, and means for reporting to police in emergencies.SELECTED DRAWING: Figure 1

Disclosed is a blockchain-based security method that is performed by an integrated web security solution (web application and API protection, WAAP) and using WAAP and application programming interface (API) level management. The blockchain-based security method may comprise: receiving an API safety grade check request from the blockchain under a session establishment with the blockchain, wherein, in the checking of the API safety grade, a security level for vulnerability of the API is checked by itself in management API data of the WAAP with a highest level of safety; and transmitting information on the API safety grade to the blockchain.

The invention discloses a quantum hybrid security chip based on an integrated real-time quantum random source and a security processing unit and a key management method, the chip binds a quantum random stream with security data from a PUFF / encryption chip through a cryptographic binding processing unit to obtain an equipment binding result, and derives an anti-quantum key according to the equipment binding result. The corresponding method protects key generation and equipment authentication processes. According to the security chip and the key management method, a full-stack security scheme from a physical entropy source to an application is provided, and the security chip and the key management method have anti-quantum computing and anti-physical cloning capabilities.

The invention belongs to the technical field of robot control, and discloses an intelligent control method and related equipment for a sweeping robot, home safety monitoring of elderly people living alone is realized through a non-visual sensor carried by the sweeping robot, the elderly people can intelligently adjust a security strategy according to the activity space of the elderly people, safety monitoring and privacy protection are both considered, and the safety of the elderly people is improved. The method has the advantages that resources in the prior art are fully utilized, the development cost is reduced, and a more friendly and natural intelligent security solution is provided for the elderly living alone.

The invention discloses a container isolation application method and device for electric power data micro-service, and relates to the technical field of electric power system micro-service architecture. According to the main technical scheme, under the micro-service architecture of the electric power system, the service function of the electric power system is correspondingly divided into a plurality of micro-services, each micro-service is deployed in an independent container, after the container is started, for a to-be-called target file, a configuration file of the container is used for detecting whether the target file is a sensitive file or not, and then the sensitive file is called. The target access permission of the target file is further determined based on the pre-mapped hash table to verify whether the access path corresponding to the target access permission is in the preset blacklist or not, so that the limitation check of active file calling of the container is realized through the two steps of file check; a safe solution is achieved for cooperative implementation of data sharing and isolation between micro-services of an electric power system, and the safe solution is a container isolation application solution which gives consideration to data sharing and isolation between micro-services of the electric power system.

To provide an information processing apparatus and a control method that, when locking a system in response to the absence of a person, control not to lock the system in response to the short-term absence of a person while ensuring security.SOLUTION: An information processing apparatus comprises: a first processor that controls an operation of a system; and a second processor that performs detection processing of performing detection of a person present in a direction facing a display part on the basis of a picked-up image and detection as to whether the person gazes the display part, and face authentication processing of collating a face image of the person with a face image of a user registered in advance. When the presence of the person gazing the display part is no longer detected, the first processor causes the system to transit to a low power consumption mode, when subsequently the presence of the person paying attention to the display part is detected and the person is determined to be the user registered in advance on the basis of the face authentication processing, causes the system to return from the low power consumption mode, and when the person is determined not to be the user registered in advance, locks the system.SELECTED DRAWING: Figure 6

Systems and methods are disclosed for technical user classification using group membership. User accounts with a more enterprise-related responsibilities may pose a higher risk of being targeted by a malicious external attacker. Classifying users based on enterprise groups associated with more enterprise-related responsibilities may allow more selective application of resource-expensive security solutions for high-risk users.

This provides a blockchain-based security system and method that can defend against a variety of attacks on public and private networks by assigning a lifecycle to APIs and managing WAAP / API levels using a cloud-based integrated web security solution (WAAP). [Solution] The security method includes a step S550 in which WAAP receives an API security rating confirmation request from the blockchain while a session is established between the user and the blockchain, a step S560 in which the API security rating is confirmed, and a step S580 in which the blockchain transmits confirmation information regarding the API security rating to the user.

Disclosed are systems and methods for a computerized framework that provides advanced privacy and security solutions to computer networks and the data housed and transferred therein. The disclosed framework provides multi-key encryption over a distributed, secure architecture that operates by protecting and ensuring the authorized use of an individual or entity's data. The disclosed computerized functionality can validate that a request for, access to and / or usage of private or restricted information is legitimate and approved, whereby approval can be required, provided and / or requested in real-time (e.g., near-real time and / or substantially simultaneous with the request), and / or or via pre-approved access for a defined period. Therefore, the disclosed framework provides a centralized service for management of user and / or entity data across multiple businesses and service providers via multi-key encryption operations that enable parties to audit control over access to their private, restricted or otherwise confidential data.

This disclosure describes techniques for orchestrating implementation of a security solution among network devices. The techniques include determining capabilities of routers of the network and capabilities of a cloud security service to perform security features of a security solution. Based at least in part on the capabilities, the techniques include configuring a router of the network to execute a first subset of the security features on data traffic of the network, and configuring the cloud security service to execute a second subset of the security features on the data traffic. The techniques may also include causing the security solution to be presented to a security administrator via a display, the display providing representations of the first subset and the second subset of the security features.

The present disclosure relates generally to security solutions. More specifically, techniques (e.g., systems, methods, and devices) are provided to implement an incentivized-based intrusion detection system to detect malicious acts against an asset. The incentive may lure or facilitate the actor to provide information detecting malicious actions against an asset.

A control system is provided that can achieve both convenience and security when visitors from service providers or the like enter each floor of a facility such as an apartment building. [Solution] When the controller 20 (controller 21) of the control system 1 receives a first unlock request to unlock an outer door 71 installed at the entrance of an apartment building, and if authentication of the first unlock request is successful, it sends an unlock instruction to an outer door controller 70 that controls the locking and unlocking of the outer door 71 and an elevator controller 80 that controls the operation of an elevator 81 installed in the apartment building. When the controller 21 receives a second unlock request to unlock the elevator 81, and if authentication of the second unlock request is successful, it does not send an unlock instruction to the outer door controller 70, but sends an unlock instruction only to the elevator controller 80.