708 results about "Source address" patented technology

The invention discloses a door lock and card cooperative processing method and system, and the method comprises the steps: triggering a robot calling process according to preset times of doorbell button operation detected by a first door lock and read neighbor RFID card information, verifying a matching result of an RFID card and a resident registration form, and generating an authority verification passing signal; calculating a target multicast address based on the ID number of the RFID card, and converting the ID number of the RFID card into a false source IP address to obtain a communication parameter set; sending an IGMPv3 report message to the router according to the communication parameter set; according to the triggering operation of the same RFID card detected by the assisted second door lock, an assistance multicast request message is generated, the (S, G) forwarding table item is matched through the router and forwarded to the first door lock, the first door lock sends an assistance confirmation message to the second door lock, and robot calling authorization is completed. By utilizing the embodiment of the invention, efficient, safe and low-delay cross-door-lock cooperative operation can be realized.

The invention relates to a data replication method and device based on DMA, equipment and a storage medium. The method comprises the following steps: receiving a data copying instruction, wherein the data copying instruction comprises an initial source address, an initial destination address and a copying data length; determining an alignment difference between the initial source address and the initial destination address; an association ID table is determined according to the data copying instruction and the alignment difference, and in the association ID table, the association ID of one write request corresponds to the association ID of one or two read requests; and for one write request, obtaining a corresponding read request according to the associated ID table and the alignment difference, and writing a target result corresponding to the read request into a target storage medium according to the address of the write request. By adopting the method, the problem that the initial address is not aligned during data copying can be effectively solved.

According to the kernel indirect control flow transfer dynamic verification method based on the eBPF, an eBPF attachment point of an indirect call instruction is positioned, a verification program is dynamically attached, a source address and a target address are captured to generate a compound key, and the legality of a control flow is verified in a pre-constructed BPF hash table; and meanwhile, three indirect addressing modes of a differential strategy adaptive register, an immediate operand and a memory are adopted. Based on an eBPF technology, an EV program can be dynamically loaded into a running kernel as required during running, and the characteristic of dynamic expansion of a modern kernel can be perfectly adapted; all the capabilities are constructed on a universal software mechanism of a Linux kernel and do not depend on any hardware extension; while powerful security defense is provided, extremely low overhead during operation is realized. Benefited from an innovative hybrid verification strategy and an efficient CFG storage scheme, control flow hijacking attacks in the real world can be effectively defended with extremely low performance loss.

A data processing method using a scatter gather direct memory access (SG DMA), the method comprising: obtaining information for a rule table for specific subtasks of a SG DMA from a host, deriving the rule table for the specific subtasks based on the information, deriving source addresses, destination addresses and data sizes for the specific subtasks based on the rule table, and performing a SG DMA operation to transfer data of the data sizes located at the source addresses of a first memory to data spaces of the data sizes located at the destination addresses of a second memory.

The embodiment of the invention provides a trusted IoT (Internet of Things) access method and equipment based on a block chain. The method is applied to the technical field of communication, and comprises the following steps: firstly, generating a key for the Internet of Things in a TEE environment of an intelligent gateway, encrypting a resource address of an Internet of Things device, preventing the key from being acquired by malicious software, preventing the key from being counterfeited, and ensuring the security of the Internet of Things device accessing a block chain network, and a block chain stores a key index instead of the key, so that the security of the Internet of Things device accessing a block chain network is ensured. The risk of key leakage is further reduced; by setting a device management contract and a policy authority contract, the authority of a user for accessing the Internet of Things device is inquired and managed, fine control of the access authority is realized, and only the user having the authority can obtain a corresponding secret key from an intelligent gateway to decrypt an encrypted resource address provided in a block chain. According to the arrangement, leakage of the resource address is effectively prevented, and sensitive information is prevented from being leaked.

The invention discloses a public opinion home address standardization method and system, and the method comprises the following steps: S1, obtaining and processing multi-source address original data to obtain an address data block, processing the data block based on a pre-trained text embedding model to obtain a corresponding semantic vector, and storing the address data block and the corresponding semantic vector, establishing a multi-source address knowledge base; s2, processing public opinion text data through the text embedding model to obtain a query vector of the public opinion text data; s3, querying the multi-source address knowledge base based on the query vector to obtain a plurality of address data blocks related to the query vector; and S4, constructing a cue word template based on the public opinion text data and the address data blocks, and inputting the cue word template into a large language model to perform public opinion attribution address standardization analysis.

The invention discloses an industrial AI model security management and control system, and the system comprises a permission granularity control module which is used for declaring a required minimum permission set when an AI model is registered, and generating a dynamic access token containing a permission list for the model; wherein the identifier is a resource operation authority identifier; the permission mapping table module is used for maintaining a mapping relation from the resource operation permission identifier to the actual resource address; the access verification module is used for verifying the validity and the permission range of the dynamic access token when the model requests the system resources, and refusing the non-permission access; and the dynamic permission recovery module is used for removing the target permission identifier in the authorized permission set of the model in real time to update the permission set, marking that the old token is invalid, and generating a new token containing a timestamp based on the new permission set. According to the method, the industrial AI model can be effectively prevented from abusing the authority, and the system security is improved.

The invention provides an intelligent computing center path distribution method, a data transmission method and a network system. According to the technical scheme, based on the time sequence characteristics of the AI training data flow and the characteristic that each set communication library only selects one communication algorithm to drive data flow transmission in the same communication period, the data flow identification capable of identifying the data flow and the communication algorithm corresponding to the data flow identification are obtained, and path planning is carried out based on the communication algorithm. In this way, during actual communication, data streams driven by different communication algorithms on the same path cannot be transmitted at the same time, the link congestion risk is reduced, and idle links are reserved for subsequent data streams of the same communication algorithm; different links are allocated to data flow identifiers with the same source IP address or the same destination IP address corresponding to the same communication algorithm in the same set communication domain, multi-path load sharing is carried out, data flow dispersed transmission based on the same communication algorithm drive is ensured, the congestion risk of a single link is further reduced, and the transmission efficiency is improved. The communication efficiency of an intelligent computing center network is expected to be improved.

Embodiments of the invention provide a data processing method and apparatus, an electronic device and a storage medium. The method comprises the steps of obtaining a unit vector operation width supported by hardware; obtaining a source address to be aligned and the number of object data to be operated; in response to the fact that the width of the object data is larger than or equal to a first threshold value, the remainder obtained after the to-be-aligned source address is aligned with the unit vector operation width is calculated so as to obtain the data width of which the addresses are not aligned in the object data, and the width of the object data is equal to the product of the unit data width of the object data and the number of the object data; the width of the address misalignment data is equal to the difference value between the unit vector operation width and the remainder; determining the number of the address misalignment data according to the unit data width of the object data and the width of the address misalignment data, and determining first mask information based on the number of the address misalignment data and the unit vector operation width; and according to the first mask information, loading and processing the data of which the addresses are not aligned, and the method improves the data processing performance.

The invention relates to a data loading method and device, a storage medium and equipment, the method is used in an intelligent calculation data processing system comprising a host, a CSD and a SmartNIC, and a PCIe P2P data path is established between the CSD and the SmartNIC; the method comprises the steps that a host generates collaborative descriptors and respectively issues the collaborative descriptors to a CSD and a SmartNIC; the CSD reads source data from a storage medium according to source address information in the collaborative descriptor, executes a processing operation corresponding to the first operator identifier to obtain intermediate data, and directly transmits the intermediate data to a storage area of the SmartNIC through a PCIe P2P data path; and the SmartNIC executes a processing operation corresponding to the second operator identifier on the intermediate data to obtain target data, and transmits the target data to the computing device according to the target address information in the collaborative descriptor.

The invention relates to a software bill of material generation method and device, and belongs to the technical field of computers.The method comprises the steps that a software source address is obtained, and a software source type is recognized according to the software source address; positioning and downloading a warehouse metadata file according to a software source type; calling a corresponding parser to parse the warehouse metadata file according to the software source type to obtain software package metadata; and according to the software package metadata, extracting an original field required by the generation of the software bill of material, and converting the original field required by the generation of the software bill of material into a standard field of the software bill of material, thereby generating the software bill of material conforming to the specification of the software bill of material. According to the software bill of material generation method and device provided by the invention, the self-adaptive generation of software bills of material of different software source types can be realized, the universal adaptation capability for multi-source and multi-architecture in the software bill of material generation is improved, and the preposition, lightweight and efficient generation of the software bill of material is realized.

The invention relates to the technical field of network communication, in particular to an intelligent network card data forwarding method and system based on an FPGA, and the method comprises the steps: after the FPGA receives a data stream, firstly extracting a time interval standard deviation of N data packets as a time feature, executing parallel hash operation on a source IP address and a destination IP address, and mapping the source IP address and the destination IP address into three-dimensional coordinates; splicing the time features and the space coordinates into a two-dimensional matrix; a time vector T and a space vector S are separated from the two-dimensional matrix, the time feature similarity is calculated through cosine similarity, the space similarity is calculated through an Euclidean distance normalization algorithm, and affinity is obtained after weighted fusion; the condition that the affinity exceeds a first preset threshold value is used as a triggering condition for micro-flow slice splitting, and a data label is added to the slice; the FPGA intelligent network card implements heterogeneous channel binding based on slice affinity, and the global crossbar switch realizes non-blocking channel switching according to priority. And the slice splitting is triggered according to the affinity threshold, so that the high-speed transmission efficiency is improved.

The invention discloses a mimicry camouflage defense method, a mimicry camouflage defense system and electronic equipment. The method comprises the steps that a TCP connection request at a mimicry port is monitored, the TCP connection request carries quintuple information, and the mimicry port is a port used for simulating a real service behavior; in response to the TCP connection request, obtaining a network source address parameter and an attack behavior parameter corresponding to an attacker according to the quintuple information; sending the preset port fingerprint information to an attacker according to the network source address parameter; and executing a defense strategy corresponding to the attacker to defend the attack behavior of the attacker, the defense strategy being determined according to the network source address parameter and the attack behavior parameter. According to the method and the device, the technical problem of low reliability of the made mimicry defense strategy during mimicry defense in related technologies is solved.

The invention belongs to the technical field of computers, and particularly relates to a data transmission method, a data transmission device, a computer readable medium, electronic equipment and a computer program product. The method comprises the steps that path information used for transmitting data on one or more computing nodes is obtained, each computing node comprises a plurality of computing modules, the path information comprises a source address and a destination address, the source address is the address of the computing module sending the data, and the destination address is the address of the computing module receiving the data; if the source address and the destination address are located at the same computing node, storing the path information to a specified memory space; and when a preset triggering condition is met, transmitting data among the plurality of computing modules in the same computing node according to the path information stored in the memory space. The data transmission efficiency can be improved.

The Computationally Efficient Transfer Processing, Auditing, and Search Apparatuses, Methods and Systems (“SOCOACT”) transforms smart contract request, crypto currency deposit request, crypto collateral deposit request, crypto currency transfer request, crypto collateral transfer request inputs via SOCOACT components into transaction confirmation outputs. Also, SOCOACT transforms transaction record inputs via SOCOACT components into matrix and list tuple outputs for computationally efficient auditing. A blockchain transaction data auditing apparatus comprises a blockchain recordation component, a matrix Conversion component, and a bloom filter component. The blockchain recordation component receives a plurality of transaction records for each of a plurality of transactions, each transaction record comprising a source address, a destination address, a transaction amount and a timestamp of a transaction; the source address comprising a source wallet address corresponding to a source digital wallet, and the destination address comprising a destination wallet address corresponding to a destination virtual currency wallet; verifies that the transaction amount is available in the source virtual currency wallet; and when the transaction amount is available, cryptographically records the transaction in a blockchain comprising a plurality of hashes of transaction records. The Bloom Filter component receives the source address and the destination address, hashes the source address using a Bloom Filter to generate a source wallet address, and hashes the destination address using the Bloom Filter to generate a destination wallet address. The Matrix Conversion component adds the source wallet address as a first row and a column entry to a stored distance matrix representing the plurality of transactions, adds the destination wallet address as a second row and column entry to the stored distance matrix representing the plurality of transactions, adds the transaction amount and the timestamp as an entry to the row corresponding to the source wallet address and the column corresponding to the destination wallet address; and generate a list representation of the matrix, where each entry in the list comprises a tuple having the source wallet address, the destination wallet address, the transaction amount and the timestamp.

The present application relates to the technical field of data processing, and is used for realizing universal and efficient processing of a multi-dimensional tensor. Provided are a processor, a tensor processing method, and a device. A tensor processing unit in the processor comprises: a preprocessing circuit, which is used for adjusting first dimension information of a multi-dimensional tensor, so as to obtain second dimension information, wherein the product of the size of any dimension in the second dimension information and the capacity of a unit access storage space is smaller than or equal to the capacity of a data cache; an address generation circuit, which is used for generating, on the basis of the second dimension information, a plurality of source addresses corresponding to a plurality of pieces of data in the multi-dimensional tensor; an access control circuit, which is used for determining a plurality of pieces of cache mapping information corresponding to the plurality of source addresses, and sending a plurality of access requests on the basis of the plurality of source addresses, and is used for acquiring from a first memory the plurality of pieces of data of the multi-dimensional tensor; and the data cache, which is used for caching the plurality of pieces of data on the basis of the plurality of pieces of cache mapping information.

A WLAN station (110; 120) for communicating with a further WLAN station (120; 110) is disclosed. The WLAN station (110; 120) is configured to encrypt a MAC Service Data Unit, MSDU, payload, wherein the MSDU payload comprises a MSDU, an aggregate MSDU, A-MSDU, or a MAC Management Protocol Data Unit, MMPDU, wherein the MSDU, the A-MSDU, or the MMPDU comprises one or more source address values, SAs, and one or more destination address values, DAs. Moreover, the WLAN station (110; 120) is configured to generate a MAC Protocol Data Unit, MPDU, or an aggregate MPDU, A-MPDU, based on the encrypted MSDU payload, and to transmit the MPDU or A-MPDU to the further WLAN station (120; 110).

The invention belongs to the technical field of data security and passwords, and provides an information encryption management method and system. After the system receives the access request, calling user historical behaviors, and calculating behavior baseline stability; obtaining a time deviation degree based on the difference between the current access time and the historical time distribution, obtaining a geographic deviation degree based on the difference between the source address and the geographic attribution, combining the time deviation degree and the geographic deviation degree into a comprehensive deviation degree, and modulating according to the behavior baseline stability to obtain a context disturbance factor. Fusing the context disturbance factor with the static risk index of the target data to obtain a session risk calibration value; and mapping the key length to the step set according to the session risk calibration value to obtain a final key length, and performing encryption. According to the method, the encryption strength can be adaptively improved when abnormal access occurs, the performance is kept under normal access, and the method has real-time performance, context sensing and good generalization ability.

The invention relates to the technical field of anomaly detection, in particular to an anomaly detection method for plant station automation network data packets, which comprises the following steps of: extracting a source MAC address, a destination MAC address, a protocol type, a communication frequency and an average packet length of each data packet based on the plant station automation network data packets captured in real time; according to the method, the source MAC address, the destination MAC address, the protocol type, the communication frequency and the average packet length of a plant station automation network data packet are extracted in real time, a weighted directed communication map is established according to the relation between intelligent electronic equipment and a gateway, and further, a network steady-state behavior baseline is formed through quantification from the communication behavior characteristic value of a node, so that the network steady-state behavior is realized. And a sliding time window mechanism is adopted to continuously calculate a behavior deviation metric value, and a topology behavior fluctuation index is generated by comprehensively analyzing communication frequency change, protocol type change and centrality change of an SV message, so that the time and the position of network abnormity can be determined.

Provided in the present invention is a low-latency redundant communication protocol based on an improved PRP, which protocol is compatible with the PRP standard of IEC 62439-3-2016 and operates at a link layer. Two redundant ports are connected to an upper-layer protocol by means of a link redundancy entity, and are transparent to the upper-layer protocol; a network-end node has two or three redundant network ports, which are respectively connected to networks that are independent of each other and have the same topological structure, and the networks operate in parallel; and network ports belonging to PRP-supporting end nodes are configured with the same IP address and MAC address. The improvements in the present invention are as follows: a redundancy discarding algorithm is modified to a mode of directly uploading a first-arriving communication frame to an application layer; {source IP address, source MAC address and frame sequence number} is used as a determination condition for a redundant frame; by means of file pre-configuration, the IP address of a single-network-port node in a network is written into a configuration file in advance in a node; and statistics for the number of network port link up / down events, out-of-receive-window statistics, statistics for non-sequential frame sequence numbers, and statistics for the number of out-of-sync redundant frames are added.

The invention discloses an inter-satellite routing processing method and device based on a controller, related equipment, a product and a storage medium. Comprising the following steps: receiving a hypertext transfer protocol (HTTP)-based addressing request sent by at least one satellite; the addressing request comprises source address information, destination address information and to-be-transmitted data information; sending an HTTP-based addressing response to the at least one satellite based on the addressing request; determining a control instruction issued by a switch on each satellite according to the source address information, the destination address information and preset mapping information; sending a control instruction to at least one satellite; the control instruction is used for the at least one satellite to judge whether the forwarding time delay of at least one route between the first satellite and the second satellite exceeds the effective time of a preset forwarding route, and if the forwarding time delay of the at least one route does not exceed the effective time of the preset forwarding route, forwarding the at least one route to the second satellite. And carrying out IP packet forwarding on the to-be-transmitted data information according to the control instruction.

A method for providing stream control transmission protocol (SCTP) multihoming between a Kubernetes environment and a non-Kubernetes environment includes receiving, at an SCTP multihoming router (SMR) deployed as a pod within the Kubernetes environment and from a client in the non-Kubernetes environment, an SCTP INIT message for establishing a multi-homed SCTP association between first and second Internet protocol (IP) addresses of the client and first and second local IP addresses of the SMR. The first and second local IP addresses of the SMR are added to an SCTP header of the SCTP INIT message. Source and destination network address translations (NATs) are performed to change a source IP address and a destination IP address in an IP header of an IP datagram carrying the SCTP INIT message to a third local IP address of the SMR and a service IP address of a service in the Kubernetes environment, respectively.

The invention provides a flow forwarding method and device based on a configuration file, equipment and a medium, and the method comprises the steps: initializing a configuration processor, loading a forwarding rule from the configuration file, and storing the forwarding rule in an eBPF mapping table; the Linux server receives a flow packet, and captures the flow packet through an eBPF program; analyzing the traffic packet to obtain a source address and a destination address; matching a source address and a destination address with a forwarding rule in the eBPF mapping table, and if the source address and the destination address are matched with the forwarding rule in the eBPF mapping table, modifying the source address and the destination address of the flow packet and forwarding the flow packet; if not, the data packet is not forwarded, so that the data packet can be efficiently processed on a kernel level, and the delay is reduced; and forwarding rule matching is directly carried out, iptables forwarding is not needed any more, the forwarding efficiency is greatly improved, the forwarding rule can be configured in the flow forwarding period through the configuration file, and use by a user is facilitated.

The invention relates to the technical field of network security, in particular to a network security data analysis method and system based on a large model and a medium. According to the technical scheme, the network security data analysis method based on the large model comprises the following steps: acquiring a multi-source heterogeneous log in real time from a firewall, an intrusion detection system or an intrusion prevention system, a Web application firewall, a server operating system and a service application through a distributed acquisition agent; performing data cleaning on the original log: removing repeated entries, filling missing fields, unifying a timestamp format, and extracting key structured fields including a source IP address, a target IP address, an operation type and a user ID; and performing deep semantic analysis on the cleaned log by using a pre-training large model based on a Transform architecture, and generating vectorized feature representation fused with context semantics. The semantic understanding accuracy of security terminologies is remarkably improved, and the misjudgment defect caused by domain knowledge deficiency of a traditional model is thoroughly overcome.

A method for random data distribution from a source row to a destination row in a memory array includes receiving a plurality of address pairs, where each address pair includes a source address of a source cell in a source row and a destination address of a destination cell in a destination row, storing the source addresses in cells of a column associated with the destination cell, creating a Boolean algebraic expression that defines a dependency between each of the source addresses and a value stored in each of the source cells, where applying the Boolean algebraic expression to any one of the source addresses provides the value of one of the source cells, applying the Boolean algebraic expression simultaneously to the plurality of columns storing the source addresses, and writing a plurality of results simultaneously to the destination row.

A multimodal information interaction method, an intelligent agent, an electronic device, and a storage medium are provided, which relate to a field of artificial intelligence technology, and in particular, to fields of large model and human-computer interaction technology. The method includes: performing intention recognition on a media resource request from a terminal to obtain an intention recognition result, where the intention recognition result represents whether the media resource request hits a predetermined processing mode; in response to the media resource request hitting the predetermined processing mode, determining a media resource address corresponding to the media resource request; and rendering a media resource in the media resource address, and outputting the rendered media stream to the terminal.

The application discloses an IP governance method based on SAVA suitable for a cloud native system and belongs to the technical field of network security, and is characterized in that the method comprises the following steps: S1, a virtual SAVA device is used to abstract the function of the SAVA device into a capability in the cloud native system; S2, the capability is combined into a micro-service chain; S3, in a false source identification stage of source address identification, a false source address is identified; S4, in a real source identification stage of source address identification, an existing real source identification function is abstracted into a capability, and real source identification is performed; S5, in a black and white list generation stage, an IP address black and white list is generated according to intelligence of source address identification; S6, the cloud native system blocks a black list IP address according to the generated IP address black and white list; and S7, finally, intelligence is shared. The application can break through the restriction of an existing network structure, realize IP address governance based on SAVA in the cloud native system, and improve efficiency and flexibility.

The application discloses an object processing method and device, electronic equipment and storage medium, and relates to the technical field of network. An object sharing request of an object sharing initiator is received, the object sharing request carries identification information of an object, content information of the object is obtained based on the identification information, the content information of the object is processed by format conversion by using an object processing system, resource address generation and storage processing are performed, activity information is returned to an object sharing acquirer in response to an activity information acquisition request sent by the object sharing acquirer, and a resource address of the object is returned to the object sharing acquirer in response to an object acquisition request sent by the object sharing acquirer. The above method can split the activity information and the content information of the object after format conversion into two data packets to be delivered, reduce the size of a single data packet, and reduce the possibility of being discarded by a long link system.

This disclosure provides a method and apparatus for planning Equivalent Multipath (ECMP) load balancing. The method includes: a control device establishing a remote login connection with a device to be configured and setting up Equivalent Multipath (ECMP) to reach the destination device; sequentially traversing each hash algorithm in a hash algorithm list; controlling the device to be configured to switch to the currently traversed hash algorithm via the remote login connection, sending it a hash factor type, a set of candidate source IP addresses, and the IP address of the destination device; controlling the device to be configured to initiate the construction of multiple data packets based on the hash factor type, each with a candidate source IP address and a destination device IP address; causing the device to be configured to calculate and record the transmission ratio of each member path of ECMP associated with each candidate source IP address; and obtaining this ratio via the remote login connection to select service IP addresses for the device to be configured and load balance the data packets sent to the destination device based on the member paths selected by the hash algorithm from ECMP.

The application provides a method, device, terminal, server and storage medium for targeted traffic flow exemption. The method comprises the following steps: monitoring whether an application program triggers a traffic data access request by using a software development kit (SDK) embedded in the application program; if yes, generating a targeted traffic data access request when a source address corresponding to the traffic data access request is determined as a targeted traffic whitelist address by using the SDK, and sending the targeted traffic data access request to a proxy server corresponding to the SDK, so that the proxy server sends the targeted traffic data access request to a first server corresponding to the source address when the targeted traffic data access request meets a preset traffic flow exemption access condition. The method of the application determines whether to allow traffic flow exemption through the embedded SDK and re-authenticates through the proxy server, and does not need to configure the IP address of the application program of the targeted traffic flow through the GGSN, so that the demand for a large amount of targeted traffic flow can be met, and a relatively complex configuration process is avoided.