69 results about "Software protection" patented technology

The invention discloses a BIOS mirror image verification and recovery method and device, equipment and a storage medium, and relates to the field of software protection.The method includes the steps that after a main mirror image of a BIOS is started, the main mirror image and a standby mirror image of the current BIOS are verified through a preset Hash algorithm; and when one of the main mirror image and the standby mirror image of the BIOS fails to be checked, recovering the mirror image failed to be checked by utilizing the mirror image successfully checked. The method aims at solving the problem that in an existing method, when BIOS mirror images fail to be verified, the mirror images failing to be verified are difficult to recover, the main mirror images and the standby mirror images of the BIOS are verified through the Hash algorithm, when the main mirror images or the standby mirror images of the BIOS fail to be verified, the mirror images failing to be verified are rapidly and accurately recovered, and the recovery efficiency of the BIOS is improved. According to the method, the security risk of the system caused by firmware attack or damage can be effectively reduced.

The invention relates to the technical field of computer security, in particular to an operating system kernel security protection system based on hardware virtualization, which comprises a hardware virtualization module, a kernel isolation module, a security monitoring module and a data protection module. And the system security is obviously improved. Traditional software protection depends on authority management and access control mechanisms of an operating system and is easily subjected to bypassing attacks of malicious programs, for example, protection is broken through by modifying a system call table, utilizing memory vulnerabilities and the like. According to the system, privilege level isolation of hardware virtualization is utilized, a kernel runs in an independent virtual machine with the highest privilege level, a user application program runs in a virtual machine with the low privilege level, and hardware directly prevents unauthorized access of the application program, so that direct attack of malicious codes of an application layer to the kernel is eradicated fundamentally.

The invention relates to the technical field of secret-related electronic file transmission and management, and discloses a secret-related electronic file secret transmission safety management system which comprises a safety management system. The security management system comprises a hardware security support layer, a distributed security storage layer, a file full life cycle security management layer, a user identity authentication and behavior auditing layer, a security auditing layer and an emergency response layer. The confidential electronic file secret transmission security management system integrates a trusted computing chip, security boot firmware, a physical unclonable function (PUF) and an optical isolation technology through a hardware security support layer, is different from a traditional system which only depends on software protection, constructs a trusted execution environment from a hardware bottom layer, guarantees the operation credibility by using the trusted computing chip, and improves the security of the confidential electronic file. The secure boot firmware blocks illegal program loading, the PUF endows the hardware with a unique uncounterfeited identity, and the optical isolation realizes physical level network isolation, so that threats such as hardware tampering and physical attacks are radically defended.

The present application discloses a blockchain system and its communication method, storage medium, and program product, which are used to improve the security and correctness of communication between nodes in the blockchain. A communication method for a blockchain system provided in an embodiment of the present application includes: a client node sends a verification request to an authentication node based on a software guard extension (SGX) application; wherein the verification request includes encrypted verification information; the authentication node based on the SGX application includes an SGX untrusted execution environment and an SGX trusted execution environment; the SGX trusted execution environment includes an SGX secure enclave; the SGX secure enclave decrypts the encrypted verification information carried in the verification request to obtain decrypted verification information; wherein the SGX secure enclave stores at least part of a smart contract; the SGX secure enclave processes the verification information according to the smart contract, obtains a processing result, encrypts the processing result, and sends the encrypted processing result to the client node.

The invention provides a safety protection method and system for an intelligent electric energy meter, and relates to the technical field of data processing, and the method comprises the steps: determining a multi-dimensional safety protection mechanism; obtaining a monitoring data set of the target electric energy meter, and performing risk prediction on the communication protection mechanism; introducing a first operator of a risk tree topology, and performing risk prediction on a hardware protection mechanism; introducing a second operator of the risk tree topology, and performing risk prediction on the software protection mechanism; performing risk inspection according to the protection risk coefficients of communication, hardware and software, and generating an electric energy meter protection optimization factor; and performing adaptive protection optimization on the multi-dimensional security protection mechanism to obtain an optimized security protection mechanism. According to the invention, the technical problem that the safety protection capability is insufficient due to the fact that the safety protection of the electric energy meter is mainly based on a single level and lacks multi-dimensional safety protection in the prior art is solved, and the safety protection capability of the electric energy meter in a complex application scene is improved by introducing a multi-dimensional safety protection mechanism.

Host IO write operations on a given storage group are grouped into cycles of a write destage pipeline for the storage group. Host writes are collected during a capture cycle, while host writes from a previous capture cycle are analyzed and destaged during an apply cycle. After the previous apply cycle has completed, a cycle switch occurs and the current capture cycle becomes the new apply cycle. Anomaly detection is implemented before any IO write operations are destaged during the apply cycle, and if an anomaly is detected the write destage is stopped. The entire apply cycle is either destaged to disk, or is discarded, depending on whether the anomaly is confirmed. By maintaining the order of writes across different cycles, which act as consistency points, it is possible to implement ransomware protection in real time on host write operations, while using ordered write destage to maintain data consistency.

Systems and apparatuses include one or more processing circuits comprising one or more memory devices coupled to one or more processors, the one or more memory devices configured to store instructions thereon that, when executed by the one or more processors, cause the one or more processors to: monitor power electronics parameters; compare the parameters to a hardware protection threshold; activate software protection of the power electronics when the parameters are less than the hardware protection threshold; and activate hardware protection logic of the power electronics when the parameters are greater than or equal to the hardware protection threshold.

The present invention belongs to the field of CNC safety protection for dual-turret machine tools and provides a collision avoidance protection method for dual-turret machine tools based on a programmable logic controller (PLC). The CNC machine tool involved in the present invention is equipped with a position measurement feedback encoder or grating ruler, which can determine the real-time position of the machine tool's CNC axes. The tool turret moving axis also uses a CNC servo axis. The position of the machine tool's coordinate axis can be read by the PLC, and the spacing between the two tool turrets is calculated using a formula. This spacing is then compared with the minimum and maximum allowable spacing between the two tool turrets. When the minimum or maximum spacing is exceeded, the tool turret axis is stopped and the system issues an alarm to alert the user. The collision avoidance protection method of the present invention provides dual hardware and software protection for the dual-turret CNC machine tool. Even if the hardware protection fails, the software protection remains in effect, effectively enhancing the safety and reliability of the machine tool.

The invention belongs to the technical field of mowing robots, and discloses a fire protection method and system suitable for a mowing robot. The method comprises the following steps: acquiring a real-time internal temperature and a real-time external temperature; when it is judged that the real-time internal temperature is higher than the internal abnormal threshold value and lower than the thermal runaway threshold value, it is confirmed that internal high-temperature abnormity occurs, and a power-off instruction is sent to a power supply switch for software protection; or when it is judged that the real-time internal temperature is higher than the thermal runaway threshold value, it is determined that internal thermal runaway abnormity occurs, and hardware protection processing of a circuit protection device at the power supply end is fused; when it is judged that the real-time external temperature is higher than an external abnormal threshold value, it is confirmed that external high-temperature abnormity occurs, a stopping instruction is sent to a blade driver to stop mowing operation, and a transferring instruction is sent to a driving wheel to control the driving wheel to move until the real-time external temperature does not exceed the external abnormal threshold value; and sending a power-off instruction to the power supply switch to perform software protection processing. According to the invention, the occurrence of fire hazards can be effectively avoided.

The invention discloses a software protection method based on a virtual machine encryption mode and a storage medium, and the method comprises the steps: encrypting to-be-protected data through a key to obtain encrypted data, the to-be-protected data comprising an executable code, a configuration file and a resource file of to-be-protected software; constructing a virtual machine execution environment in the equipment memory, wherein the virtual machine execution environment comprises a virtual processor, a virtual memory space and a virtual register; loading the encrypted data to a virtual memory space, and configuring a virtual processor; after the protected software is started, performing anti-debugging monitoring, and if a debugging behavior is monitored, executing an anti-debugging operation; during the running period of the to-be-protected software, the MAC address of the equipment is obtained regularly, and the legality of the equipment is verified; and when a preset self-destruction triggering condition is met, executing a self-destruction operation. According to the method, various security threats can be effectively resisted, and software code and data security is protected.

A protection controller is provided for operation in a computer system that includes a process, an operating system, and at least one memory disk. The protection controller is further configured to receive a memory disk request for a file, determine that the memory disk request is a write request indicating a modification to the file, and in response, generate a backup copy of the file prior to the modification. Further, the protection controller is configured to determine that the process includes ransomware and, in response, recover the file based on the backup copy, thereby providing lossless ransomware protection for the computer system and improving overall data security.

A software-RAID-protected boot data vSAN system includes a chassis housing a software RAID subsystem coupled to storage devices and to controller devices. The software RAID subsystem designates a RAID controller device and a vSAN controller device from the controller devices, and configures a first subset of the storage devices for boot storage and a second subset of the storage devices for vSAN storage. The software RAID subsystem then provides a RAID path from the RAID controller device to the boot storage provided by the first subset of the storage devices, and provides a vSAN path from the vSAN controller device to the vSAN storage provided by the second subset of the storage devices. The software RAID subsystem then routes boot storage commands along the RAID path, and routes vSAN storage commands along the vSAN path.

The application discloses a kind of software protection system and method based on multidimensional coding, belong to software security technical field.System includes: multidimensional coding conversion module, multilayer obfuscated encryption module, runtime dynamic checking module, tamper self-destruction module, rule anchoring module.Multidimensional coding conversion module is converted into multinary coding with binary machine code;Multilayer obfuscated encryption module is based on preset obfuscated rule and carries out multilayer obfuscation to coding;Runtime dynamic checking module checks code integrity and running environment legality in real time;Tamper self-destruction module triggers self-destruction mechanism when detecting exception.The application fundamentally improves the strength of software anti-reverse engineering, and is suitable for the intellectual property protection of core software, algorithm, firmware.

Embodiments of the present invention disclose a software protection method, apparatus, system, CPU chip, and electronic device. The software protection method is applied to the computing core of a user device's CPU chip. The method includes: upon detecting a user triggering the use of software, instructing a security processor (SP) to identify the user device. This identification includes verifying the user certificate using the public key in the signature certificate, and verifying the public key in the user certificate using a private key derived from the CPU chip's identity key. If the SP successfully identifies the user device, the user is permitted to use the software. The technical solutions provided by the embodiments of the present invention are applicable to scenarios involving security defense of computer software, reducing the cost of software protection design and enhancing its security.

The invention discloses an electric leakage protection circuit of a liquid chromatograph, the electric leakage protection circuit collects an electric leakage signal of the liquid chromatograph and sends the electric leakage signal to an MCU controller of the liquid chromatograph, the MCU controller is connected with and controls the on-off of an AC electric brake of the liquid chromatograph, and the AC electric brake is used for connecting an AC / 220V power supply to supply power to the liquid chromatograph. According to the leakage protection circuit of the liquid chromatograph, a low-cost scheme is adopted, the silicon controlled rectifier is used for maintaining current characteristic self-locking, and under the condition that software self-locking failure is prevented, hardware self-locking is still reliable. The safety coefficient of hardware protection is far larger than that of software protection, and it is ensured that a user is always in a safe state under various uncertain electric leakage conditions.

The invention discloses an active short-circuit system applied to a motor controller, and the system comprises a bus overvoltage detection circuit which is used for detecting whether the bus voltage is overvoltage; the driving logic circuit is connected with the bus overvoltage detection circuit and is used for directly controlling the inverter circuit to enter a lower bridge arm ASC mode when the bus is overvoltage; the fault clearing signal circuit is used for generating a fault clearing signal, and the fault clearing signal is used for controlling whether the driving logic circuit responds to the bus overvoltage signal or not; when the fault clearing signal is effective, the overvoltage fault signal is shielded, the hardware protection logic is shielded at the moment, and the software protection logic is executed; when the fault clearing signal is invalid, an overvoltage fault occurs, and hardware protection logic is directly entered; the single-chip microcomputer fault detection circuit is used for detecting whether the single-chip microcomputer breaks down or not and triggering the driving logic circuit to enter an ASC mode when the single-chip microcomputer breaks down. According to the invention, the protection capability of the motor controller under various fault conditions is enhanced, and system damage and potential safety hazards caused by faults are avoided.

Systems and methods for ransomware protection in advanced injection-based attacks. Events from a driver are analyzed to identify a potentially malicious actor. A confidence level is calculated for the potentially malicious actor identification to weigh the probability that the actor is malware or a source of malware. Behavior associated with the potentially malicious actor can be collected, if it is likely that the potentially malicious actor is associated with malware, such as if the confidence level is over a predetermined threshold. Subsequently, one or more virtual honeypots are generated for the suspicious processes and the response to the virtual honeypots is included in anti-ransomware heuristic analysis.

The invention belongs to the technical field of electronic power, and particularly relates to a hardware protection circuit of a multi-cascade power system and a fault response method, and the circuit comprises a main controller, a plurality of fault signal generation branches, a public hardware fault bus and a plurality of isolation control branches. Each isolation control branch is composed of an optical coupling isolator and a switch tube, receives a fault signal of the corresponding subunit, and drives a common fault bus level to change. And the main controller detects the bus state in real time through hardware interruption, and directly triggers a protection action. Through hardware interconnection and electrical isolation design, microsecond-level fault response under a multi-level system is achieved, the defects that a traditional software protection mode is high in delay, and ground potentials among multiple levels are inconsistent and difficult to isolate are overcome, and the reliability and safety of a complex power system are remarkably improved.

1. The name of this design product: Fingerprint software protection lock shell (Ukey generation). 2. Purpose of this design product: used as the shell of a fingerprint software protection lock. 3. The key point of the design of this product lies in its shape. 4. The picture or photo that best illustrates the design points: three-dimensional picture.

The invention, which relates to the technical field of unmanned driving, discloses a 5G-based safe unmanned driving system for a large-scale mobile device used in a cold region, comprising an edge cloud system comprising a 5G base station, an MEC edge server and an enterprise network device. The electrical cabinet protection system comprises a corrosion-resistant cabinet, a temperature control frequency converter and a sealing module, the dual positioning system comprises an anti-freezing grating ruler array, a low-temperature-resistant Gray bus and a data fusion module; the anti-swing algorithm module integrates a Kalman / particle filtering unit, a position controller, a speed controller and an anti-swing control unit; the multiple safety system comprises a program soft protection unit, a 1 / 2 level laser sensor protection unit and a mechanical protection unit; the laser scanning system comprises a 905nm laser module, a WMS (Warehouse Management System) and a dynamic obstacle identification unit; the scheduling algorithm module comprises a genetic algorithm unit and an ant colony algorithm unit; according to the invention, efficient and safe unmanned driving of large-scale mobile equipment in cold regions can be realized.

The application discloses a hardware protection method for remote upgrade of a forklift controller program and prevention of brush death, and is based on a hardware structure of a forklift controller integrated with a main control MCU (U1), a main program storage module (U2), a redundant backup storage module (U3), a hardware power-off protection unit and a hardware one-key triggering unit. The application has extremely fast response speed, does not depend on the operation of the main control MCU, and completely avoids the fatal defect that software protection directly fails when power is cut off during upgrade. Two physically independent storage chips are adopted to realize complete isolation of main and backup programs, and meanwhile, a safe upgrade sequence of 'first brushing the backup disk and then brushing the main disk' is adopted to ensure that at least one complete program is available throughout the process. The system repair can be quickly completed without returning to the factory for shell disassembly and programming, and only a small amount of general electronic elements need to be added on the basis of the original controller, the main control chip does not need to be replaced, the incremental cost is extremely low, the new and old forklift models can be directly adapted, and the application is suitable for batch promotion and application.

The invention belongs to the technical field of software protection, and particularly relates to a control flow confusion method for improving a Circle mapping chaos control and state scheduling mechanism. The method comprises the following steps: firstly, constructing a finite-state machine model based on a program basic block, and representing an execution stage by a state node; generating a chaos angle sequence by using Circle mapping, and mapping the chaos angle sequence into an integer sequence as a dynamic control signal for driving state transition; the sequence of the basic blocks is rearranged through a random shuffling algorithm, a jump mapping table is constructed, and an original control flow structure is disturbed; and finally, the state machine is driven by the chaotic number to dynamically transfer, and the target basic block is executed by looking up the table, so that the uncertain reconstruction of the control path is realized. An analysis result shows that the method remarkably improves the information entropy and the control flow complexity of the execution path, has higher interference and safety in the aspects of reverse resistance, path restoration, symbol tracking and the like compared with a traditional static rearrangement or camouflage confusion mode, and is suitable for a program system for protecting core logic and sensitive operation.

The present disclosure provides a software protection method and apparatus, an electronic device and a storage medium. By identifying the sensitive data in the software source code and determining the point of use of the sensitive data; setting the sensitive data in the read-only section of the compilation product of the software source code so that the sensitive data is stored in the read-only area when the software is running; inserting the check code into the above point of use of the sensitive data, where the check code is used to check whether the sensitive data read is in the read-only area while the software is running, and determine whether to continue running the software according to the check result, embodiments of the present disclosure realize the integrity verification of the sensitive data, and thereby prevent the sensitive data from being corrupted with low performance overheads.

The invention discloses a multi-layer software protection system and method based on hardware fingerprints and timestamps, and belongs to the technical field of computer software protection, and the system mainly comprises a server authorization verification layer which is configured to collect hardware information of a running environment and communicates with a remote authorization server to obtain a dynamic authorization key; the hardware binding protection layer is in communication connection with the server authorization verification layer and is configured to perform local verification based on the hardware information and the timestamp and execute action permission verification after the local verification is passed; and the business core protection layer is in communication connection with the hardware binding protection layer and is configured to execute protected software core business logic after verification is passed. Through the technical means of three-layer architecture design, dynamic key generation, hardware binding verification and the like, the problems of insufficient security, poor user experience, high maintenance cost and the like in the existing software protection technology are effectively solved.

The application discloses an overcurrent protection device of a motor, the motor and an overcurrent protection method of the motor. The device comprises a sampling unit, which samples three-phase electric parameters of the motor; a hardware protection unit, which compares the three-phase electric parameters of the motor with preset electric parameters, and if the three-phase electric parameters of the motor are greater than or equal to the preset electric parameters, controls the motor to stop from the hardware, and sends a first overcurrent fault signal that the motor has an overcurrent fault; and a software protection unit, which, under the condition of receiving the first overcurrent fault signal, converts the first overcurrent fault signal into a brake protection signal, and according to the brake protection signal, cuts off the control signal of the motor, controls the motor to stop from the software, sends a second overcurrent fault signal that the motor has an overcurrent fault, and realizes the cooperative overcurrent protection of the motor. The scheme can achieve the purpose of the cooperative overcurrent protection of the software and the hardware, is timely in protection, and is simple in implementation and low in cost.

A protection controller configured to operate in a computer system, including a process, an operating system and at least one memory disk. The protection controller is further configured to receive a memory disk request for a file, determine that the memory disk request is a WRITE request indicating a modification to the file, and, in response thereto, generate a backup copy of the file prior to the modification. Furthermore, the protection controller is configured to determine that the process includes ransomware and, in response thereto, recover the file based on the backup copy to provide zero-loss ransomware protection to the computer system with an improved overall data security.

The invention relates to the technical field of software protection, and discloses a software security protection and vulnerability early warning management system. Comprising the following modules and components: a security situation awareness and risk pre-judgment core module, an active vulnerability mining and multi-dimensional grading module, a full-period protection strategy closed-loop management module, an intelligent early warning and emergency response linkage module, a repair effect quantitative evaluation module and a model iteration and security knowledge base upgrading module. The security situation awareness and risk pre-judgment core module is used for integrating multi-source data and predicting a vulnerability outbreak probability and a high-risk time period; the active vulnerability mining and multi-dimensional grading module is used for mining potential vulnerabilities of software and carrying out grading judgment; the invention aims to solve the problems that the existing early warning management system mostly takes passive response as the core, lacks the ability of pre-judging the outbreak of vulnerabilities in advance, often triggers early warning after the vulnerabilities are utilized or cause actual influence, and cannot reserve sufficient time for protection and repair work.

This application provides an analysis method and system for obfuscated PASS based on LLVM, relating to the field of software protection technology. The method includes: extracting the target function from the obfuscated binary program, locating the position of the encrypted string within the target function, and determining the decryption logic based on the position of the encrypted string; searching for the target expression in the target function, identifying the expression logic through pattern matching, and determining the string encryption algorithm parameters based on the decryption logic and the expression logic; constructing a control flow graph based on the expression logic, identifying the control variables in the control flow graph, and generating a state transition diagram of the control variables based on the assignment sequence of the control variables; identifying the identifiers of useless basic blocks in the target function based on the state transition diagram, and determining the obfuscation implementation logic of the obfuscated binary program based on the string encryption algorithm parameters and the identifiers of the useless basic blocks. The technical solution provided by this application can achieve reverse derivation of the obfuscation implementation logic.

The invention belongs to the technical field of software protection, and particularly relates to a control flow confusion method based on Gilbreath conjecture. According to the method, the opaque predicate based on the Gilbreath sequence is constructed, and a control flow flattening and dynamic assignment mechanism is combined, so that the control flow structure is recombined, and the code logic shows the characteristics of high complexity and difficulty in analysis. According to the method, the mathematical characteristics of the Gilbreath conjecture are utilized, so that the generated opaque predicate has the characteristics of pseudo-randomness and low predictability, and the anti-analysis capability of control flow confusion is enhanced. Experimental results show that compared with a traditional confusion method depending on simple grammar replacement or rearrangement, the opaque predicate based on the Gilbreath conjecture constructed by the method can effectively enhance the complexity of control flow confusion, so that a reverse analysis tool is difficult to recover original execution logic. Meanwhile, compared with a traditional confusion method, on the premise that high safety is guaranteed, the influence of confusion on the program running efficiency is reduced, and good practicability and adaptability are achieved.

The invention discloses a computer program security verification authentication system, which relates to the technical field of security authentication, and comprises a data acquisition module, an identity verification module, an environment security evaluation module, a program integrity module, a comprehensive evaluation module and an authority control module, the environment safety evaluation module comprises a safety software protection evaluation unit and a network stability evaluation unit, and the program integrity module comprises a code structure evaluation unit and a data transmission evaluation unit. The authority control module sets corresponding authority according to an evaluation result, so that the system can take countermeasures according to different use environments, and the data transmission security evaluation unit analyzes program transmission data, so that security of a transmission protocol and abnormality monitoring in a transmission process are realized, security of data transmission is ensured, and the system is safe and reliable. And data leakage or tampering is avoided.