71 results about "Session ID" patented technology

The invention relates to a security management and control method and system for a mobile terminal of a visitor in a secret-related area and a medium, and the security management and control method comprises the steps: obtaining visitor identity information inputted by the mobile terminal, and generating a session ID and a first dynamic two-dimensional code; in response to the reading of the code scanning verification device on the first dynamic two-dimensional code, the server verifies the legality of the session ID, and issues a preset management and control strategy after the verification is passed; when the mobile terminal is in the controlled state, monitoring violation operation violating the control strategy and generating a violation log containing violation operation information; generating a second dynamic two-dimensional code in response to a leaving instruction of the mobile terminal; in response to the reading of the code scanning verification device on the second dynamic two-dimensional code, triggering the mobile terminal to upload the violation log to the server; and after confirming that the summary information is consistent with the data of the violation log, the server sends a control releasing instruction to the mobile terminal, so that the mobile terminal is recovered to a normal state. According to the invention, the information protection capability of the secret-related place is improved.

The invention discloses an abnormal traffic cooperative detection method and system, and relates to the field of network communication, and the method comprises the steps: carrying out the protocol adaptive recognition and dynamic attack detection at a north-south WAF layer, generating an attack fingerprint, and binding a global session ID; full-link monitoring is carried out on application behaviors on an east-west RASP layer, and context association and threat analysis are realized through a session ID; aggregating WAF and RASP data based on the session ID, constructing an attack feature propagation atlas and evaluating attack chain confidence; when the confidence exceeds a threshold value, the RASP layer extracts attack features and generates a virtual patch rule, and feeds back the attack features and the virtual patch rule to the WAF layer for real-time updating; and finally, collaborative blocking is realized through bidirectional confidence fusion decision of the WAF and the RASP. The problem that in the prior art, detection in the north-south direction and detection in the east-west direction are separated, and a cross-layer attack chain cannot be effectively blocked is solved, and precise and dynamic protection on complex attacks, especially encrypted traffic and transverse penetration is achieved.

A telecommunications system includes: a user equipment; one or more access networks (ANs); a core network (CN); and one or more data networks (DNs). The one or more ANs are configured to provide the UE access to the CN. The CN is configured to provide connectivity to the one or more DNs. The UE is configured to access the one or more DNs by using different protocol data unit (PDU) sessions, established between the UE and the CN via the one or more ANs, providing connectivity to the one or more DNs, each PDU session comprising a respective PDU session identifier (ID). The CN is configured to signal the UE, via the one or more ANs, an established PDU session, wherein the established PDU session is identified by a PDU session ID and at least one PDU session group ID. The same PDU session group ID is assigned to different PDU sessions and indicates that the different PDU sessions belong together.

The invention provides a Spring Session performance optimization method based on partition cache, and relates to the technical field of session management and cache optimization in a distributed system, and the method comprises the steps: storing a mapping relation between a session ID and a final access timestamp by designing concurrent hash mapping caches C1 and C2 which are alternately used, and identifying an active cache by using a current cache label; configuring a timed task to periodically scan the cache, judging a session state according to the critical zone time, and dynamically updating or cleaning cache data; a session object obtained by a thread local variable cache Redis is introduced in Http request processing, so that repeated access is avoided; and a Spring session filter and a warehouse are rewritten to reconstruct session access logic, so that the dependence on Redis is effectively reduced, and the concurrency performance and response efficiency of the system are improved.

Disclosed is a method of operating a User Equipment, UE, where the UE is in a non-allowed area, or the UE is not in an allowed area and wherein the UE wishes to request User Plane, UP, resources for a Protocol Data Unit, PDU, in a Non-Access Stratum, NAS, message, the UE includes a specified Information Element, IE, only when the UP resources are for a PDU session for emergency service and wherein the specified IE only indicates a PDU session ID associated with emergency access.

The disclosure provides a multicast switching data transmission method and device, and a storage medium, relates to the technical field of mobile communication, and can be applied to the scene that a source base station and a target base station both receive same multicast messages from a same MB-UPF. The multicast switching data transmission method comprises the following steps: receiving a switching request message sent by the source base station, wherein the switching request message comprises a terminal identifier of a first to-be-switched terminal, an MBS session ID and a multicast caching instruction; in response to the PDU having the MBS session ID, caching a multicast data packet corresponding to the MBS session ID based on the multicast caching instruction; and in response to being connected with the first to-be-switched terminal, sending the multicast data packet to the first to-be-switched terminal. The technical scheme of the embodiment of the disclosure can improve the network resource utilization rate and reduce the probability of data packet loss.

A request is generated including a session identification (ID), an access code, and a sign ID. A lookup key is created using the sign ID and the access code. A contents key is created using the access code, the session ID, and the sign ID. The contents key encrypts content associated with the request. The encrypted content, the look up key, and the contents key are stored at a database. A link is sent to a client device. The link includes the sign ID and the session ID. The access code is received at the facilitation webpage. The sign ID, session ID, and the access code are sent from the facilitation webpage to the database. The content is decrypted based on the contents key, the sign ID, the session ID, and the access code. A captured signature is encrypted using the contents key and stored at the database.

This invention discloses a functional verification system, method, device, and storage medium for a replacement TBOX. The system includes an OBD (On-Board Diagnostics) system, a cloud platform, and a TBOX. The OBD encapsulates TBOX replacement information, vehicle identification information, and operational status information into a standard information packet. The cloud extracts the vehicle VIN and TBOX-ICCID from the standard information packet, performs binding verification on the VIN and ICCID, and generates a session ID upon successful verification. The replacement type is determined using the session ID, and the corresponding diagnostic level instruction set is matched based on the replacement type. The diagnostic level instruction set is then broken down into functional instructions, and these fragments are sent to the OBD. After receiving the fragments, the OBD sequentially sends each functional instruction fragment to the TBOX for functional verification based on the session ID. This invention establishes a collaborative link between the OBD and the cloud, issuing dynamic diagnostic instructions to achieve accurate TBOX functional verification.

A method for handling a reactivation request from the network for an MA PDU session with session and service continuity (SSC) mode 3 is proposed. When UE receives a PDU SESSION MODIFICATION COMMAND message which includes 5GSM cause #39 “reactivation requested” for an existing MA PDU session, UE handles the network-requested PDU session modification procedure, and UE re-initiates the UE-requested PDU session establishment procedure with a new MA PDU session ID. UE determines how to proceed with a PDU session reestablishment procedure for the new MA PDU session based on different scenarios of UE registration and user plane resources of the existing MA PDU session, and / or also based on whether the PDU SESSION MODIFICATION COMMAND message is sent over 3GPP access type or non-3GPP access type.

We provide the system. [Solution] A means for receiving user information input by the user and storing it in a user authentication database, A means of authenticating a user using authentication information, A means for generating a session ID to initiate a conversational session for an authenticated user and providing the user with the session ID, A means for transmitting user input to an artificial intelligence having natural language processing capabilities and receiving a response from the artificial intelligence, A means for displaying the response from the artificial intelligence to the user, A means to save the logs of the dialogue session and analyze them as needed, Means of ending a dialogue session, A system that includes this.

The invention provides a session management method and device for a server cluster, equipment and a storage medium, and the method comprises the steps: obtaining and responding to a user access request in a load balancing manner, calculating the weight coefficient of each service node, and routing the access request to a target service node based on the weight coefficient of each service node; the target service node analyzes the session ID and the session timestamp in the access request, determines a virtual bucket identifier of the session based on the session ID and the session timestamp, and stores the virtual bucket identifier in a current active area of a session storage table based on the virtual bucket identifier of the session; and the database performs partition rotation on the current active area and the future partition in the session storage table, when the current active area is rotated to the future partition, session data stored in the current active area is migrated to the archiving partition for caching, and the current active area of new rotation is started for storage of new session data. By means of the method, on the premise that service data access is not affected, effective management of the session data is achieved, and system response delay is reduced.

The application discloses an abnormal flow cooperative detection method and system, relates to the field of network communication, and comprises the following steps: protocol adaptive identification and dynamic attack detection are carried out on a north-south WAF layer, attack fingerprints are generated, and global session IDs are bound; the application behavior is monitored in a whole link on an east-west RASP layer, context association and threat analysis are realized through the session IDs; WAF and RASP data are aggregated based on the session IDs, an attack feature propagation graph is constructed, and attack chain confidence is evaluated; when the confidence exceeds a threshold value, attack features are extracted by the RASP layer, virtual patch rules are generated, and feedback is fed back to the WAF layer for real-time updating; finally, bidirectional confidence fusion decision is realized through the WAF and the RASP, and cooperative blocking is realized. The application solves the problem that the north-south and east-west detection are split in the prior art, and cross-layer attack chains cannot be effectively blocked, realizes accurate and dynamic protection on complex attacks, especially encrypted flow and horizontal penetration.

This provides a new online authentication method that does not rely on traditional passwords or authentication codes and cannot be breached by real-time phishing scams. [Solution] The authentication processing device stores a first identifier of the user terminal included in the authentication application information received from the user terminal, and sends an authentication URL for launching the application provided to the user terminal via SMS to the user terminal. The authentication processing device determines whether the first identifier matches a second identifier of the user terminal included in the authentication processing information received from the user terminal, and if they match, provides the user terminal with a message indicating that the authentication process has been successfully completed. The authentication processing device determines whether the first session ID included in the authentication application information matches a second session ID included in the authentication processing information, and if they match, provides the user terminal with a message indicating that the authentication process has been successfully completed.

The invention discloses a distribution network binding method and system for an intelligent door lock and a system platform, and the method comprises the steps: a client obtains the unique identification information of a target intelligent door lock, and transmits the unique identification information and user account information to the system platform; the system platform generates a unique binding session ID and sends a binding request to the target intelligent door lock; after the target intelligent door lock receives the binding request, a confirmation prompt is sent to the user through an interactive interface of the target intelligent door lock, and after the user observes the confirmation prompt, field physical confirmation operation is executed on the target intelligent door lock; the target intelligent door lock sends a binding confirmation signal to the system platform after receiving a confirmation action of the user; after the system platform receives the binding confirmation signal and passes verification, the binding relation between the user account and the target intelligent door lock is completed, and binding result notifications are sent to the client side and the target intelligent door lock respectively. According to the invention, the binding accuracy and safety of the intelligent door lock are improved.

A request is generated including a session identification (ID), an access code, and a sign ID. A lookup key is created using the sign ID and the access code. A contents key is created using the access code, the session ID, and the sign ID. The contents key encrypts content associated with the request. The encrypted content, the look up key, and the contents key are stored at a database. A link is sent to a client device. The link includes the sign ID and the session ID. The access code is received at the facilitation webpage. The sign ID, session ID, and the access code are sent from the facilitation webpage to the database. The content is decrypted based on the contents key, the sign ID, the session ID, and the access code. A captured signature is encrypted using the contents key and stored at the database.

This disclosure describes systems, methods, and devices related to augmented reality (XR) perceptual assistance. The device may initiate transmission of a UE assistance information message to provide uplink traffic information. For each protocol data unit (PDU) session, the device may set a PDU session identification (ID) to a PDU session ID value. For each quality of service (QoS) flow within the PDU session, the device may set a QoS flow identifier (QFI) to a QFI value. The device may determine whether XR-aware information is available. The device may set the XR perception to the most recent known value. The device may have memory that stores QoS notifications.

A method and apparatus for enhancing session continuity for interworking system interaction is presented. When a UE performs inter-system handover from A / Gb mode or Iu mode to S1 mode, the UE identifies some PDN connections that are not associated with a PDU session ID (PSI). In one novel aspect, the UE locally deactivates all EPS bearer contexts for such PDN connections, includes an EPS bearer context status IE in a tracking area update request message of a tracking area update (TAU) procedure upon inter-system handover from A / Gb mode or Iu mode to S1 mode, and then initiates a UE-requested PDN connection procedure for such PDN connection. Moreover, if there is no EPS bearer after local deactivation and the UE does not support EMM registration without PDN connection, the UE initiates a re-attach procedure for a subsequent UE-requested PDN connection procedure for this PDN connection.

The application relates to a load balancing method and system of a server cluster, and belongs to the technical field of server performance optimization. The method solves the problem that the load balancing strategy in the prior art is difficult to balance the server and maintain the session. The method comprises the following steps: receiving an access request, extracting a session ID, and judging whether the session ID exists; when the session ID does not exist or has expired, informing a Web application server to generate a new session ID of the access request, obtaining a service node specified by a first load balancing strategy, and judging whether a hash result of the new session ID points to the service node; when the hash result of the new session ID does not point to the service node, repeatedly generating an access new session ID until the hash result of the new session ID points to the service node; and when the session ID exists or the hash result of the new session ID points to the service node, executing a default load balancing strategy. Through the effective combination of the two strategies, the application realizes the flow distribution which takes into account the session maintenance and the load balancing.

The invention provides a face-to-face simultaneous interpretation method, a face-to-face simultaneous interpretation system and a Bluetooth earphone, the face-to-face simultaneous interpretation system comprises a mobile terminal and a Bluetooth earphone pair, and the Bluetooth earphone pair comprises a first Bluetooth earphone and a second Bluetooth earphone. In the translation mode, the mobile terminal only maintains the existing Bluetooth data connection with the first earphone, and the second earphone does not directly interact with the mobile terminal, but sends the uplink voice to the first earphone through inter-ear communication. The first earphone converges and encapsulates the two paths of voice to form an uplink composite frame and sends the uplink composite frame to the mobile terminal; the composite frame comprises a session ID, a source identifier, a serial number, a timestamp and an acoustic state mark, and the terminal splits the voice stream according to the composite frame and executes recognition, error correction and translation to generate two translations. And the terminal establishes a routing binding table and issues a downlink data packet containing two translations to the first earphone, the first earphone filters and plays the translations according to the binding relation and forwards the translations belonging to the second earphone to the second earphone through the inter-ear link, and bidirectional directional playing and self-listening filtering are realized.

The application provides an infrared code pairing method and an electronic device. In the method, a session ID is generated when a preset trigger event is acquired, the session ID is stored, and the session ID is sent to a remote controller. The remote controller stores the session ID when the session ID is acquired. When voice pairing information sent by the remote controller is acquired and the session ID in the voice pairing information is consistent with the session ID stored by the set top box, a pairing request is generated based on the voice pairing information and the device identifier of the set top box. When an infrared code and a session ID sent by a cloud platform are acquired and the session ID is consistent with the session ID stored by the set top box, the infrared code is sent to the remote controller, so that the remote controller is paired with a television based on the infrared code. The security and accuracy of the infrared code pairing process can be improved.

Systems and methods are provided for extending authentication. An example computer-implemented method includes, during a checkout session at a mobile device specific to a user, and in response to a lookup request from a first party, confirming a user profile for the user and an existing passkey for the user profile and a mobile device associated with the user. The method also includes, during the checkout session, initiating a passkey authentication of the user, through a fast identity online (FIDO) server at the mobile device; receiving a proof of authentication for the user from the FIDO server; providing the proof of authentication to the first party; receiving an instruction to initiate checkout from the first party; validating the proof of authentication based on a session ID, without a further passkey authentication of the user, and compiling an authentication payload based on the validated proof of authentication.

A system and method for real-time creation and streaming of customized videos are disclosed. The system comprises a decision engine that processes user requests and / or session ID requests containing data parameters to generate an Edit Decision List (EDL) specifying a sequence of personalized media components. Media is represented through a multi-layer composition model combining pre-rendered content, reusable canonical segments, and intermediate layers with viewer-specific overlays or live data sources. A rendering module generates dynamic video segments in real-time, incorporating live data such as weather updates or location information. A streaming core translates the EDL into instructions for assembling a coherent video stream, stitching together pre-rendered content and dynamically generated elements. Edge workers at Content Delivery Network (CDN) nodes adjust Presentation Time Stamps (PTS) and Decoding Time Stamps (DTS) of video segments, whether cached or uncached, combining them into a seamless playback experience. The system dynamically selects between client-side and server-side rendering based on real time assessment of client capabilities and network conditions, and mixes different rendering strategies within a single video stream. Just-in-time transcoding ensures frame-accurate cuts and smooth transitions between segments. The system as described herein enables highly personalized, efficient, and scalable delivery of customized video content across various use cases and protocols.

The invention relates to the technical field of data processing, in particular to a mass log data archiving method for a cross-border e-commerce platform, which comprises the following steps: receiving cross-border e-commerce transaction log streams, analyzing and extracting user session IDs and commodity SKU codes in logs, counting the frequency of sharing the user session IDs or the commodity SKU codes among different log entries in a buffer area, and storing the user session IDs or the commodity SKU codes in the buffer area. And establishing a log attribute association frequency table, and calculating log clustering coefficient indexes of different log entries on the clustering dimension according to the log attribute association frequency table. According to the method, the compressed sequence is generated through line number difference calculation, difference distribution density is counted to serve as a storage format decision basis, an array container format is selected to reduce storage space occupation when the distribution density is lower than a threshold value, and a bitmap container format is automatically switched to improve bit operation efficiency when the distribution density is higher than the threshold value. And the established adaptive sparse bitmap index can dynamically balance the storage cost and the retrieval speed in different data sparseness scenes.

This application discloses a configuration method, system, and network device for multicast broadcast services. The method includes: a base station centralized entity control plane sending a first configuration request message to the base station centralized entity user plane, wherein the configuration information in the first configuration request message includes at least one of the following: PDCP synchronization indication information, PDCP count value, PDCP synchronization time information, MRB ID, MBS session ID, and MBS area identification information; the base station centralized entity control plane receiving a first configuration response message sent by the base station centralized entity user plane, wherein the configuration information in the first configuration response message includes at least one of the following: QoS flow list, PDCP count value, and MRB ID. This application solves the technical problem that related communication protocols cannot meet the need for flexible scheduling of MBS services based on PDCP synchronization status and service requirements.

The application relates to a static address allocation method and device, a core network and a storage medium, and relates to the technical field of communication. The method comprises the following steps: in the case of receiving a subscription information acquisition request initiated by an SMF network element, analyzing a session ID field in the subscription information acquisition request to obtain a session ID value, wherein the session ID value is configured by a user terminal when the user terminal initiates a session creation request, and the session ID value is sent to the SMF network element through the session creation request; determining a static address corresponding to the session ID value according to preset static address subscription information; and returning the static address to the SMF network element, so that the user terminal creates a session based on the static address. In this way, the service continuity of different sessions can be ensured, and the problem that multiple sessions of the user terminal exist in conflict due to different session and service continuity modes caused by mixed use of dynamic and static addresses can be avoided.

A method, UPF function / node, computer program, and computer program product to classify traffic of a user equipment, UE by a UPF is provided. A PFCP session establishment request comprising a session ID and a flow information profile is received. Responsive to the flow information profile indicating that flow information is to be stored for sessions by the UE, whether or not there is stored flow information for a session associated with the session ID is determined. UE application traffic is received, the UE application traffic including the session ID. Responsive to there being stored flow information for the session, the UE application traffic is classified based on the stored flow information. Responsive to there not being stored flow information for the session, the UE application traffic for a corresponding packet detection rule of the session; is classified and flow information for the session based on the classifying is stored.

A method for handling the joining and leaving an MBS session via a PDU session establishment or modification procedure is provided. Upon receipt of a back-off timer in the Received MBS Container IE (with the operation / decision “MBS join is rejected” or “Remove UE from the MBS session”), the UE shall associate the MBS back-off timer with the MBS session ID (e.g., TMGI). If the timer value is neither zero nor deactivated, the UE should not request to join the MBS session with the same MBS session ID before the timer expiry. If the timer value is deactivated, the UE should not request to join the MBS session with the same MBS session ID until the UE is switched off, the USIM is removed, an entry in the “list of subscriber data” for the current SNPN is updated, or an event / notification is triggered by the network.

Network authentication, that is more resistant to cyberattacks, uses verification of subscriber identity modules (SIMs) in user equipment (UEs) such as cellphones. A person visits a website with a computer, or calls customer service, to access their user account and their UE receives an interaction identifier (ID) that includes a session ID, an identifier of the customer ID or their UE, and a time indicator. This may be in the form of a QR code displayed on the computer screen or a text message from customer service. The UE forwards the interaction ID to a verification website, providing the IP address or ID stored in the SIM. The verification website compares the UE-provided information with what has been stored earlier by the UE's home wireless carrier to verify the SIM in the UE, providing a proxy for verifying the identity of the person.

This application relates to the field of artificial intelligence control, providing an intelligent agent management system and method based on a large language model. The system includes a session-level sub-agent management unit, derived from the sub-agent manager of the intelligent agent framework, used to configure a traceable and unique identity (session ID) for each child intelligent agent connected to the parent intelligent agent. Events of the child intelligent agents are recorded in the namespace corresponding to the identity ID in a shared database. Parent and child intelligent agents sharing the same session are connected to the same shared database. Events generated when a child intelligent agent runs its execution chain are stored in the namespace corresponding to the identity ID in the shared space. Event records corresponding to different identity IDs in the shared database are independent of each other, avoiding conflicts and eliminating the need to create a separate session directory for each child intelligent agent at the file system level.

The application provides a cache-based network flow packet writing method, device and medium, and relates to the technical field of data writing. The method comprises the following steps: storing the network flow packet received by the network card queue in a preset network card cache area for temporary storage; if the writing cache area has idle capacity, the network flow packet in the network card cache area is transferred to the writing cache area in the order of time stamp; for any network flow packet RQ, the hard disk ID corresponding to the network session ID of RQ in the unfinished network session ID table is allocated to RQ; according to the current single residual writing data amount of each hard disk, a hard disk ID is allocated to RQ; for the network flow packet in the writing cache area which has completed hard disk allocation, the network flow packet is grouped according to the hard disk ID, and the writing operation is performed; the application can realize the unified improvement of reliability, efficiency and analyzability in a complex high-throughput scene.