17 results about "Security specification" patented technology

This application discloses a ship-to-shore information communication method and apparatus, relating to the technical field of coastal communication. The method includes: responding to receiving an encrypted data packet from a ship-based or shore-based IPSec security gateway device; if the packet's message structure is an ESP protocol message, then searching for an encryption algorithm and security specification according to the security parameter index; after verifying the integrity of the ESP message in the data packet according to the encryption algorithm and security specification, detecting whether the data packet is a replay attack; if the data packet is not a replay attack, then decrypting the data packet in reverse according to the encryption algorithm and security specification, obtaining and sending the original IP data to the core network layer for subsequent processing and forwarding. This method ensures the integrity and privacy of transmitted data in high-security scenarios such as ship-to-shore communication.

The present invention provides an application installation suitability evaluation method and application installation suitability evaluation apparatus that mitigate potential security threats that may arise from the installation and operation of application software before the application software is installed in a vehicle. [Solution] The application installation suitability evaluation method based on the vehicle's security profile includes the steps of: downloading application software to be installed on the vehicle; comparing the minimum security requirements of the application software with the vehicle's security specification profile to evaluate the installation suitability of the application software; and, if the installation suitability of the application software is determined, installing the application software on the vehicle.

The invention provides a dual-mode online anti-misoperation communication switching method and system, and aims to improve the operation efficiency and safety of a power system. The system architecture is composed of an intelligent anti-misoperation host and an on-site anti-misoperation device, integrates core functions of sequential control operation, anti-misoperation checking and the like, and constructs a whole-process anti-misoperation system. Under the normal working condition of communication, the comprehensive intelligent anti-misoperation host is used as an instruction center to accurately control each module of the system; when abnormal conditions such as communication interruption occur, the system starts a dual-redundancy guarantee mechanism: on one hand, an intelligent key is linked with a related subsystem to complete emergency unlocking operation; and on the other hand, the edge intelligent anti-misoperation agent device automatically triggers a control instruction to drive an intelligent lock control subsystem, a maintenance isolation subsystem and other subsystems to cooperatively execute switching operation, so that stable operation of the power system is ensured. According to the invention, refined management and control of multiple subsystems are realized through a dual-mode switching mechanism, the'five-prevention 'safety specification requirement of the power system is comprehensively met, and a solid guarantee is provided for safe operation of the power system.

(Main claim) 1. Integrated security and computing chip, comprising: a) a starter chip card module with an unalterable identity matrix, b) an attack protection module with local AI analysis hardware, c) a high-security specification module with a physically separate sandbox, d) a parallel computing unit (TRI-AI-CORE™) wherein all modules are hardware-separated but coupled via an isolated internal security bus, and wherein the chip operates entirely without a network connection.

The invention discloses a fuzzy question answer recommendation method for the hydropower industry, which is characterized in that a term dictionary of the hydropower specialty is preset in a Neo4j atlas database, and the following links are executed: S1, analyzing a natural language input by a user to generate a preliminary word sequence; s2, key entities are extracted from the initial word sequence for matching recognition; s3, performing rule engine processing, and triggering a predefined intention classification rule; s4, dynamically complementing missing context data from the Neo4j atlas database according to the entity list and the intention label; s5, based on the complemented context data, performing multi-hop inference engine processing to generate interpretable fault diagnosis logic; and S6, converting the reasoning result into a natural language answer readable by the user according to a preset template. The method is suitable for scenes with high data sensitivity and fixed terminologies in the hydropower industry, key entities can be accurately extracted from fuzzy problems, implicit information is automatically complemented, and a reasoning conclusion conforming to industry safety specifications is generated.

The application discloses a GIS spatial data topology checking and fusion processing method for an industrial pipe network, and comprises the following steps: constructing a four-dimensional topology rule library of the industrial pipe network; performing pre four-dimensional topology pre-checking, completing error repairing and standardization processing of a single data source, and outputting a standardized single-source data set; completing accurate matching and multi-source data fusion connection of pipe section and pipe point entities, and generating an initial fusion pipe network data set; performing full-dimensional closed-loop topology checking on the initial fusion pipe network data set, and outputting a hierarchical checking result set; and generating a final compliant pipe network data set. The application deeply binds four dimensions of geometric topology, safety specification, business logic and operation state, and realizes upgrading from "geometric correctness checking" to "full-dimensional compliant management and control" in view of high safety requirements of the industrial plant pipe network.

This invention discloses a formal verification method for processor branch prediction attack vulnerabilities, comprising the following steps: S1, establishing the security attributes violated by the branch prediction attack, wherein the security attributes describe the security specifications that a secure branch predictor design should comply with; S2, establishing a branch prediction behavior model, describing the branch prediction attack as a combination of a series of abstract branch operations; wherein the branch operation is a quintuple consisting of operator, operation type, operation address, jump direction, and jump address, which is an abstract representation of a certain branch instruction; S3, modeling the branch predictor design as accepting branch prediction behavior instructions, and designing different variations of the branch prediction model state machine according to different input instructions, outputting the prediction result, checking the security specifications, and converting the branch prediction attack into a path specification on the state machine; S4, performing model verification on the state machine of the branch predictor design to determine whether it has a branch prediction attack vulnerability.

A method of evaluating application installation suitability based on a vehicle security profile according to one embodiment of the present invention may include downloading application software to be installed in a vehicle, comparing the minimum security requirements of the application software with a vehicle security specification profile and evaluating installation suitability of the application software, and installing the application software in the vehicle when the installation suitability of the application software is approved.

The application discloses a kind of concurrent system information flow safety refinement relationship verification method and device.This method relates to computer security field, especially the verification of information flow safety refinement relationship of concurrent system.Aiming at the technical defects that traditional refinement technology cannot guarantee the security of information flow, the method abstracts concurrent system at design level and implementation level into concurrent event system, and then proves that the concurrent event system at design level and implementation level satisfies the security preserving simulation relationship.It is proved that the security preserving simulation relationship ensures that if the concurrent system at design level satisfies the security specification, the concurrent system at implementation level also satisfies the security specification.In addition, the application provides a general programming language interface, so that the method is applicable to different programming languages.The application strictly verifies the information flow safety refinement relationship of concurrent system using formal verification and machine proof technology, which can be used to prove the information security of large-scale concurrent system and prevent problems from happening.

The application provides a security component generation method based on a low-code development framework and related equipment, which comprises the following steps: selecting at least one security policy method associated with each front-end control from a pre-defined front-end security parameter table according to different security protection requirements of different front-end controls; meanwhile, selecting at least one security policy method associated with each back-end interface from a pre-defined back-end security parameter table according to different security protection requirements of different back-end interfaces; and generating a security component according to all security policy methods associated with all front-end controls and back-end interfaces involved in the software code in response to determining that the low-code development framework generates the software code, so that the software code finally output by the low-code development framework contains the security component, the risk of information of a service object being monitored, stolen and tampered with is reduced, and the security specification and security function of the software code finally output by the low-code development framework are improved.

The invention discloses an integrated joint test environment system based on a hierarchical structure and a construction method. The system comprises an LVC resource layer, a basic platform service layer, an integrated joint test application layer, a standard specification and a protection specification, wherein the LVC resource layer provides basic equipment, test data and simulation resources for the test system by integrating live, virtualizing and constructing resources; the basic platform service layer provides management and control services for the test system through designed and developed tool software; the integrated joint test application layer is connected with the basic platform service layer through a service interface and middleware, and supports an integrated joint test task scene; the standard specification formulates a unified interface protocol, a data format and a test flow in each layer and between layers according to a live equipment communication flow; a protection specification runs through the LVC resource layer, the basic platform service layer and the integrated joint test application layer to formulate a protection strategy. According to the scheme, from system framework design to equipment test application, efficient, safe and standard construction of an integrated joint test environment is achieved.

The invention discloses a privacy protection framework based on zero knowledge proof. The privacy protection framework is used for a plurality of mechanical arms to cooperate to complete tasks. The method comprises the steps that S1, position data, speed data, angle data and the like of all the mechanical arms in the collaborative operation process are collected; s2, on the basis of an index mechanism of differential privacy, noise disturbance is carried out on the collected data according to privacy budget; s3, zero-knowledge proof is generated for the disturbed data, so that the learning end verifies the data on the premise of not obtaining the original data; s4, the learning end confirms that the transmitted data conforms to the security specification through zero-knowledge proof; s5, performing reconstruction processing on the noise data by adopting an auto-encoder, and reducing the influence of noise on model training and decision to the greatest extent; and S6, the reinforcement learning strategy is updated through the recovered data and issued to all the mechanical arms, and the mechanical arms are made to cooperatively complete the task. The method is good in performance effect on a multi-mechanical-arm simulation platform.

The invention discloses an IPSec VPN security gateway system, and relates to the technical field of security gateways, and the technical scheme is characterized in that an extraction module is used for extracting access subject information and a target data identifier of a data access request; a security access reference set is set, the security access reference set comprises a protocol standard, a key hierarchy rule and a hardware acceleration configuration parameter, the protocol standard corresponds to a compliance interval, the key hierarchy rule corresponds to a key life cycle threshold, and the hardware acceleration configuration parameter corresponds to a computing power adaptation range; performing comparative analysis on access characteristic parameters corresponding to the access subject information and the target data identifier with a compliance interval of a protocol standard in a security access reference set and a key life cycle threshold of a key hierarchy rule to obtain a target authentication mechanism conforming to the protocol standard and a target key system conforming to the key hierarchy rule; the method has the effect of promoting efficient operation of data access under a security specification.

A system enhances a system design to include security measures. The system receives a system design for processing through various stages of design using design tools, such as electronic design automation tools for introducing security features in circuit design. The system receives security requirements for the system design, the security requirements specifying security measures for the system design. The system generates security specifications from the security requirements, the security specifications storing a set of commands. The system generates the system design enhanced with the security measures. The enhanced system design is generated for at least a subset of a plurality of tools. The tools process the generated security specifications to implement the security measures in the system design according to the received security requirements.

A method of evaluating application installation suitability based on a vehicle security profile according to one embodiment of the present invention may include downloading application software to be installed in a vehicle, comparing the minimum security requirements of the application software with a vehicle security specification profile and evaluating installation suitability of the application software, and installing the application software in the vehicle when the installation suitability of the application software is approved.