50 results about "Software protection" patented technology

The invention relates to the technical field of computer security, in particular to an operating system kernel security protection system based on hardware virtualization, which comprises a hardware virtualization module, a kernel isolation module, a security monitoring module and a data protection module. And the system security is obviously improved. Traditional software protection depends on authority management and access control mechanisms of an operating system and is easily subjected to bypassing attacks of malicious programs, for example, protection is broken through by modifying a system call table, utilizing memory vulnerabilities and the like. According to the system, privilege level isolation of hardware virtualization is utilized, a kernel runs in an independent virtual machine with the highest privilege level, a user application program runs in a virtual machine with the low privilege level, and hardware directly prevents unauthorized access of the application program, so that direct attack of malicious codes of an application layer to the kernel is eradicated fundamentally.

The invention relates to the technical field of secret-related electronic file transmission and management, and discloses a secret-related electronic file secret transmission safety management system which comprises a safety management system. The security management system comprises a hardware security support layer, a distributed security storage layer, a file full life cycle security management layer, a user identity authentication and behavior auditing layer, a security auditing layer and an emergency response layer. The confidential electronic file secret transmission security management system integrates a trusted computing chip, security boot firmware, a physical unclonable function (PUF) and an optical isolation technology through a hardware security support layer, is different from a traditional system which only depends on software protection, constructs a trusted execution environment from a hardware bottom layer, guarantees the operation credibility by using the trusted computing chip, and improves the security of the confidential electronic file. The secure boot firmware blocks illegal program loading, the PUF endows the hardware with a unique uncounterfeited identity, and the optical isolation realizes physical level network isolation, so that threats such as hardware tampering and physical attacks are radically defended.

Systems and apparatuses include one or more processing circuits comprising one or more memory devices coupled to one or more processors, the one or more memory devices configured to store instructions thereon that, when executed by the one or more processors, cause the one or more processors to: monitor power electronics parameters; compare the parameters to a hardware protection threshold; activate software protection of the power electronics when the parameters are less than the hardware protection threshold; and activate hardware protection logic of the power electronics when the parameters are greater than or equal to the hardware protection threshold.

The invention belongs to the technical field of mowing robots, and discloses a fire protection method and system suitable for a mowing robot. The method comprises the following steps: acquiring a real-time internal temperature and a real-time external temperature; when it is judged that the real-time internal temperature is higher than the internal abnormal threshold value and lower than the thermal runaway threshold value, it is confirmed that internal high-temperature abnormity occurs, and a power-off instruction is sent to a power supply switch for software protection; or when it is judged that the real-time internal temperature is higher than the thermal runaway threshold value, it is determined that internal thermal runaway abnormity occurs, and hardware protection processing of a circuit protection device at the power supply end is fused; when it is judged that the real-time external temperature is higher than an external abnormal threshold value, it is confirmed that external high-temperature abnormity occurs, a stopping instruction is sent to a blade driver to stop mowing operation, and a transferring instruction is sent to a driving wheel to control the driving wheel to move until the real-time external temperature does not exceed the external abnormal threshold value; and sending a power-off instruction to the power supply switch to perform software protection processing. According to the invention, the occurrence of fire hazards can be effectively avoided.

The invention discloses a software protection method based on a virtual machine encryption mode and a storage medium, and the method comprises the steps: encrypting to-be-protected data through a key to obtain encrypted data, the to-be-protected data comprising an executable code, a configuration file and a resource file of to-be-protected software; constructing a virtual machine execution environment in the equipment memory, wherein the virtual machine execution environment comprises a virtual processor, a virtual memory space and a virtual register; loading the encrypted data to a virtual memory space, and configuring a virtual processor; after the protected software is started, performing anti-debugging monitoring, and if a debugging behavior is monitored, executing an anti-debugging operation; during the running period of the to-be-protected software, the MAC address of the equipment is obtained regularly, and the legality of the equipment is verified; and when a preset self-destruction triggering condition is met, executing a self-destruction operation. According to the method, various security threats can be effectively resisted, and software code and data security is protected.

A protection controller is provided for operation in a computer system that includes a process, an operating system, and at least one memory disk. The protection controller is further configured to receive a memory disk request for a file, determine that the memory disk request is a write request indicating a modification to the file, and in response, generate a backup copy of the file prior to the modification. Further, the protection controller is configured to determine that the process includes ransomware and, in response, recover the file based on the backup copy, thereby providing lossless ransomware protection for the computer system and improving overall data security.

The application discloses a kind of software protection system and method based on multidimensional coding, belong to software security technical field.System includes: multidimensional coding conversion module, multilayer obfuscated encryption module, runtime dynamic checking module, tamper self-destruction module, rule anchoring module.Multidimensional coding conversion module is converted into multinary coding with binary machine code;Multilayer obfuscated encryption module is based on preset obfuscated rule and carries out multilayer obfuscation to coding;Runtime dynamic checking module checks code integrity and running environment legality in real time;Tamper self-destruction module triggers self-destruction mechanism when detecting exception.The application fundamentally improves the strength of software anti-reverse engineering, and is suitable for the intellectual property protection of core software, algorithm, firmware.

The invention discloses an electric leakage protection circuit of a liquid chromatograph, the electric leakage protection circuit collects an electric leakage signal of the liquid chromatograph and sends the electric leakage signal to an MCU controller of the liquid chromatograph, the MCU controller is connected with and controls the on-off of an AC electric brake of the liquid chromatograph, and the AC electric brake is used for connecting an AC / 220V power supply to supply power to the liquid chromatograph. According to the leakage protection circuit of the liquid chromatograph, a low-cost scheme is adopted, the silicon controlled rectifier is used for maintaining current characteristic self-locking, and under the condition that software self-locking failure is prevented, hardware self-locking is still reliable. The safety coefficient of hardware protection is far larger than that of software protection, and it is ensured that a user is always in a safe state under various uncertain electric leakage conditions.

Systems and methods for ransomware protection in advanced injection-based attacks. Events from a driver are analyzed to identify a potentially malicious actor. A confidence level is calculated for the potentially malicious actor identification to weigh the probability that the actor is malware or a source of malware. Behavior associated with the potentially malicious actor can be collected, if it is likely that the potentially malicious actor is associated with malware, such as if the confidence level is over a predetermined threshold. Subsequently, one or more virtual honeypots are generated for the suspicious processes and the response to the virtual honeypots is included in anti-ransomware heuristic analysis.

The invention belongs to the technical field of electronic power, and particularly relates to a hardware protection circuit of a multi-cascade power system and a fault response method, and the circuit comprises a main controller, a plurality of fault signal generation branches, a public hardware fault bus and a plurality of isolation control branches. Each isolation control branch is composed of an optical coupling isolator and a switch tube, receives a fault signal of the corresponding subunit, and drives a common fault bus level to change. And the main controller detects the bus state in real time through hardware interruption, and directly triggers a protection action. Through hardware interconnection and electrical isolation design, microsecond-level fault response under a multi-level system is achieved, the defects that a traditional software protection mode is high in delay, and ground potentials among multiple levels are inconsistent and difficult to isolate are overcome, and the reliability and safety of a complex power system are remarkably improved.

1. The name of this design product: Fingerprint software protection lock shell (Ukey generation). 2. Purpose of this design product: used as the shell of a fingerprint software protection lock. 3. The key point of the design of this product lies in its shape. 4. The picture or photo that best illustrates the design points: three-dimensional picture.

The invention, which relates to the technical field of unmanned driving, discloses a 5G-based safe unmanned driving system for a large-scale mobile device used in a cold region, comprising an edge cloud system comprising a 5G base station, an MEC edge server and an enterprise network device. The electrical cabinet protection system comprises a corrosion-resistant cabinet, a temperature control frequency converter and a sealing module, the dual positioning system comprises an anti-freezing grating ruler array, a low-temperature-resistant Gray bus and a data fusion module; the anti-swing algorithm module integrates a Kalman / particle filtering unit, a position controller, a speed controller and an anti-swing control unit; the multiple safety system comprises a program soft protection unit, a 1 / 2 level laser sensor protection unit and a mechanical protection unit; the laser scanning system comprises a 905nm laser module, a WMS (Warehouse Management System) and a dynamic obstacle identification unit; the scheduling algorithm module comprises a genetic algorithm unit and an ant colony algorithm unit; according to the invention, efficient and safe unmanned driving of large-scale mobile equipment in cold regions can be realized.

The application discloses a hardware protection method for remote upgrade of a forklift controller program and prevention of brush death, and is based on a hardware structure of a forklift controller integrated with a main control MCU (U1), a main program storage module (U2), a redundant backup storage module (U3), a hardware power-off protection unit and a hardware one-key triggering unit. The application has extremely fast response speed, does not depend on the operation of the main control MCU, and completely avoids the fatal defect that software protection directly fails when power is cut off during upgrade. Two physically independent storage chips are adopted to realize complete isolation of main and backup programs, and meanwhile, a safe upgrade sequence of 'first brushing the backup disk and then brushing the main disk' is adopted to ensure that at least one complete program is available throughout the process. The system repair can be quickly completed without returning to the factory for shell disassembly and programming, and only a small amount of general electronic elements need to be added on the basis of the original controller, the main control chip does not need to be replaced, the incremental cost is extremely low, the new and old forklift models can be directly adapted, and the application is suitable for batch promotion and application.

The invention belongs to the technical field of software protection, and particularly relates to a control flow confusion method for improving a Circle mapping chaos control and state scheduling mechanism. The method comprises the following steps: firstly, constructing a finite-state machine model based on a program basic block, and representing an execution stage by a state node; generating a chaos angle sequence by using Circle mapping, and mapping the chaos angle sequence into an integer sequence as a dynamic control signal for driving state transition; the sequence of the basic blocks is rearranged through a random shuffling algorithm, a jump mapping table is constructed, and an original control flow structure is disturbed; and finally, the state machine is driven by the chaotic number to dynamically transfer, and the target basic block is executed by looking up the table, so that the uncertain reconstruction of the control path is realized. An analysis result shows that the method remarkably improves the information entropy and the control flow complexity of the execution path, has higher interference and safety in the aspects of reverse resistance, path restoration, symbol tracking and the like compared with a traditional static rearrangement or camouflage confusion mode, and is suitable for a program system for protecting core logic and sensitive operation.

The present disclosure provides a software protection method and apparatus, an electronic device and a storage medium. By identifying the sensitive data in the software source code and determining the point of use of the sensitive data; setting the sensitive data in the read-only section of the compilation product of the software source code so that the sensitive data is stored in the read-only area when the software is running; inserting the check code into the above point of use of the sensitive data, where the check code is used to check whether the sensitive data read is in the read-only area while the software is running, and determine whether to continue running the software according to the check result, embodiments of the present disclosure realize the integrity verification of the sensitive data, and thereby prevent the sensitive data from being corrupted with low performance overheads.

The invention discloses a multi-layer software protection system and method based on hardware fingerprints and timestamps, and belongs to the technical field of computer software protection, and the system mainly comprises a server authorization verification layer which is configured to collect hardware information of a running environment and communicates with a remote authorization server to obtain a dynamic authorization key; the hardware binding protection layer is in communication connection with the server authorization verification layer and is configured to perform local verification based on the hardware information and the timestamp and execute action permission verification after the local verification is passed; and the business core protection layer is in communication connection with the hardware binding protection layer and is configured to execute protected software core business logic after verification is passed. Through the technical means of three-layer architecture design, dynamic key generation, hardware binding verification and the like, the problems of insufficient security, poor user experience, high maintenance cost and the like in the existing software protection technology are effectively solved.

The application discloses an overcurrent protection device of a motor, the motor and an overcurrent protection method of the motor. The device comprises a sampling unit, which samples three-phase electric parameters of the motor; a hardware protection unit, which compares the three-phase electric parameters of the motor with preset electric parameters, and if the three-phase electric parameters of the motor are greater than or equal to the preset electric parameters, controls the motor to stop from the hardware, and sends a first overcurrent fault signal that the motor has an overcurrent fault; and a software protection unit, which, under the condition of receiving the first overcurrent fault signal, converts the first overcurrent fault signal into a brake protection signal, and according to the brake protection signal, cuts off the control signal of the motor, controls the motor to stop from the software, sends a second overcurrent fault signal that the motor has an overcurrent fault, and realizes the cooperative overcurrent protection of the motor. The scheme can achieve the purpose of the cooperative overcurrent protection of the software and the hardware, is timely in protection, and is simple in implementation and low in cost.

A protection controller configured to operate in a computer system, including a process, an operating system and at least one memory disk. The protection controller is further configured to receive a memory disk request for a file, determine that the memory disk request is a WRITE request indicating a modification to the file, and, in response thereto, generate a backup copy of the file prior to the modification. Furthermore, the protection controller is configured to determine that the process includes ransomware and, in response thereto, recover the file based on the backup copy to provide zero-loss ransomware protection to the computer system with an improved overall data security.

The invention relates to the technical field of software protection, and discloses a software security protection and vulnerability early warning management system. Comprising the following modules and components: a security situation awareness and risk pre-judgment core module, an active vulnerability mining and multi-dimensional grading module, a full-period protection strategy closed-loop management module, an intelligent early warning and emergency response linkage module, a repair effect quantitative evaluation module and a model iteration and security knowledge base upgrading module. The security situation awareness and risk pre-judgment core module is used for integrating multi-source data and predicting a vulnerability outbreak probability and a high-risk time period; the active vulnerability mining and multi-dimensional grading module is used for mining potential vulnerabilities of software and carrying out grading judgment; the invention aims to solve the problems that the existing early warning management system mostly takes passive response as the core, lacks the ability of pre-judging the outbreak of vulnerabilities in advance, often triggers early warning after the vulnerabilities are utilized or cause actual influence, and cannot reserve sufficient time for protection and repair work.

This application provides an analysis method and system for obfuscated PASS based on LLVM, relating to the field of software protection technology. The method includes: extracting the target function from the obfuscated binary program, locating the position of the encrypted string within the target function, and determining the decryption logic based on the position of the encrypted string; searching for the target expression in the target function, identifying the expression logic through pattern matching, and determining the string encryption algorithm parameters based on the decryption logic and the expression logic; constructing a control flow graph based on the expression logic, identifying the control variables in the control flow graph, and generating a state transition diagram of the control variables based on the assignment sequence of the control variables; identifying the identifiers of useless basic blocks in the target function based on the state transition diagram, and determining the obfuscation implementation logic of the obfuscated binary program based on the string encryption algorithm parameters and the identifiers of the useless basic blocks. The technical solution provided by this application can achieve reverse derivation of the obfuscation implementation logic.

The invention discloses a computer program security verification authentication system, which relates to the technical field of security authentication, and comprises a data acquisition module, an identity verification module, an environment security evaluation module, a program integrity module, a comprehensive evaluation module and an authority control module, the environment safety evaluation module comprises a safety software protection evaluation unit and a network stability evaluation unit, and the program integrity module comprises a code structure evaluation unit and a data transmission evaluation unit. The authority control module sets corresponding authority according to an evaluation result, so that the system can take countermeasures according to different use environments, and the data transmission security evaluation unit analyzes program transmission data, so that security of a transmission protocol and abnormality monitoring in a transmission process are realized, security of data transmission is ensured, and the system is safe and reliable. And data leakage or tampering is avoided.

The invention discloses a redundancy control circuit and method for a passive relay protection device, and belongs to the technical field of relay protection, and the control circuit comprises a current sampling loop, a main control chip, and a hardware redundancy overcurrent protection system. Wherein the current sampling loop is used for converting a three-phase current of a power grid into a sampling voltage signal and respectively inputting the sampling voltage signal into the main control chip and the hardware redundancy overcurrent protection system; the main control chip is used for realizing software protection of a power grid according to an input sampling voltage signal; and the hardware redundancy overcurrent protection system is used for realizing hardware redundancy protection of the power grid according to the input sampling voltage signal. According to the invention, based on the existing software protection process of the relay protection device, a redundant hardware protection loop is additionally designed, so that when a line fails, a software system can be effectively prevented from downtime.

The invention discloses a low-voltage system under-voltage protection circuit with a latch function, which relates to the field of under-voltage protection and comprises a resistance voltage division module, a software protection link, a link with a latch function and a high-side driver. The link with the latch function and the software protection link are in a parallel relationship; the link with the latch function at least comprises a comparator and a trigger; the trigger is a high-level latch; one end of the resistance voltage dividing module is connected with an under-voltage point needing to be monitored, and the under-voltage point is connected to a low-voltage system; the other end of the resistance voltage dividing module is respectively connected with one end of the software protection link and the inverted input end of the comparator; a reference voltage is input into the in-phase input end of the comparator; the output end of the comparator is connected with the CP end of the trigger; the Q end of the trigger and the other end of the software protection link are respectively connected with one end of the high-side driver; and the other end of the high-side driver is connected with controlled equipment. According to the invention, the response speed, safety and stability of undervoltage detection are improved.

The invention relates to the technical field of direct current fans, in particular to a small direct current fan with hardware and software dual protection, which comprises a fan body, a hard protection circuit, a soft protection circuit, a control unit and a driving circuit, the hard protection circuit is connected in series between an external power supply and the driving circuit, and comprises a fuse, a filter capacitor bank and a voltage-regulator tube; the filter capacitor group and the voltage-regulator tube are connected in parallel to a power input end; the soft protection circuit comprises a sampling resistor, an operational amplifier and a reference voltage module. The small direct-current fan with the hardware and software dual protection is simple in structure and compact in layout, the defects that an existing small direct-current fan lacks effective protection and is prone to being damaged due to overcurrent and overvoltage are overcome through cooperation of the hardware and software dual protection, the operation stability of the fan is improved, and the service life of the fan is prolonged. The method is suitable for aerospace, industry, power systems and other scenes with high reliability requirements.

The invention relates to a security system and method for strongly binding a program and a hardware identifier, and belongs to the technical field of software protection and equipment authentication. According to the invention, an'authorization certificate 'uniquely bound with specific equipment is generated through a scheme of'encrypting a hardware identifier by a secret key derived from the hardware identifier'. The credential cannot be correctly decrypted and verified on any other hardware. When a protected program and an authorization certificate thereof are completely copied to another non-authorized device, due to different local hardware identifications of a new device, a correct decryption key cannot be generated when a program verification preamble module of the new device performs self-inspection, so that decryption fails and program operation is forcibly stopped, and therefore, pirate behaviors are effectively prevented.

The invention discloses a block chain-based software protection method and a storage medium. The method comprises the following steps: software generates a master key in a local security environment and splits the master key into N key fragments; performing asymmetric encryption on each key fragment through a public key of a block chain node corresponding to each key fragment, and uploading encrypted data of each key fragment to a block chain; performing symmetric encryption on software core data through the master key to obtain ciphertext data, and uploading the ciphertext data to a distributed storage system; the software monitors the equipment state and the access behavior in real time to obtain monitoring data, and reports the monitoring data to the block chain smart contract regularly; the intelligent contract judges whether a preset self-destruction condition is met or not according to the monitoring data and the manual self-destruction instruction; if yes, the smart contract generates a destruction instruction, and broadcasts the destruction instruction to each block chain node; and after receiving the destruction instruction, each block chain node and software perform data destruction processing. According to the method, the security of the software data in the whole life cycle can be ensured.

The invention relates to the field of data security, in particular to a software protection method and device based on an encrypted signature technology and a medium. According to the method, a hardware encryption method is adopted, a core code segment is transformed, encrypted and compressed, invalid interference instructions are added, and the reverse cracking difficulty is greatly improved. The target file is prevented from being counterfeited and tampered by adding the signature, a credible mechanism of the target file is added, and the security of the target file after shell adding is greatly improved. The structure of the target file is not changed after the shell is added, and the method does not need to change a program entry address, so that the shell program is well hidden. According to the method, the credibility of the packed software is ensured in a signature mode, and the security of the target file is protected and is prevented from being reversely cracked by introducing a hardware encryption method. After the software is packed based on the method, the packed program appears in the form of ciphertext, and the anti-cracking difficulty is improved to a great extent.

The invention relates to the technical field of malicious software protection, in particular to a malicious firmware vulnerability utilization detection system based on sandbox behavior analysis, which comprises a protocol analysis constraint establishment module for loading to-be-detected firmware according to a sandbox environment, configuring a register address range of a virtual network card and a virtual USB controller, generating a virtual peripheral protocol analysis tree, and establishing a virtual peripheral protocol analysis result; and traversing leaf nodes in the virtual peripheral protocol parse tree. According to the method, in combination with interrupt time sequence discrete analysis, the hidden interrupt hooking behavior can be recognized from the microscopic time dimension by continuously recording the instruction execution clock cycle number corresponding to the target interrupt vector and calculating the time-consuming window and the dispersion value, and the limitation that a traditional sandbox only pays attention to the function level is overcome; malicious codes hidden in a bottom layer are pulled out by using the time sequence side channel characteristics, so that the detection success rate and the false alarm suppression capability aiming at unknown vulnerability utilization and persistent attacks of firmware are improved, and the deep security threat of embedded equipment is perceived.

The invention provides a protection circuit based on electromagnet anomaly detection, a protection method and a sewing machine, an electromagnet circuit comprises an electromagnet and an MOS tube connected in series with the electromagnet, and the circuit comprises a voltage detection module of the electromagnet circuit, which is configured to detect the detection voltage of a voltage detection point in the electromagnet circuit; the voltage comparison module is configured to compare the detection voltage with a preset reference comparison voltage and output a comparison result; the electromagnet control module responds to the comparison result to indicate that the electromagnet is abnormal and closes the output of an electromagnet driving signal; the software protection module is configured to execute an instruction for closing the electromagnet driving signal to act on the gate end of the MOS tube so as to turn off the MOS tube; and the hardware protection module responds to the comparison result to indicate that the electromagnet is abnormal, and acts on the grid electrode end of the MOS tube in a hardware mode to turn off the MOS tube. By detecting the voltages at the two ends of the MOS tube driven by the electromagnet, double turn-off protection of software and hardware is realized.

This invention discloses a data processing method, system, electronic device, and medium, relating to the field of data processing technology. The client receives encrypted data and an encrypted key from a first server, and also sends encrypted data and an encrypted key to a second server. Therefore, encryption protects both the data and the key. Furthermore, the first server does not directly distribute the first key to the client, meaning the client cannot obtain the first key used to encrypt the data. Thus, neither the first server nor the client will leak the first key, preventing unauthorized users from accessing it. Moreover, the software protection extension technology based on the second server protects the data by creating a secure container. When the client needs decrypted data, it can only access it from the software protection extension of the second server, and cannot retrieve the data from the client's internal storage. Therefore, data ownership protection is achieved.