370 results about "Storage security" patented technology

The invention discloses a distributed storage method and system for data security, and belongs to the technical field of data storage security, the method comprises the following steps: firstly, fragmenting original data, and generating a unique identifier for each data fragment; for each fragment, an encryption algorithm and key credentials are adaptively selected, and the key credentials are stored in a key management system. By performing homomorphic encryption on the key voucher, an encryption handle is generated, and efficient positioning and retrieval of the key are realized. According to the method, a differentiated encryption strategy is adopted, a most suitable encryption scheme is selected according to fragment characteristics, and encrypted data fragments are dispersed and stored in a plurality of distributed storage nodes. A global mapping index is constructed in a metadata management server, and a corresponding relation between an original data global identifier and metadata of each data fragment is recorded, including information such as identifiers before and after encryption, a storage position, an encryption algorithm, a key handle and the like. According to the method, the data leakage risk is effectively reduced, and the safety and reliability of the storage system are improved.

The invention relates to the technical field of information security, in particular to an archive electronic information security system which comprises an archive operation behavior prediction module, an archive data encryption and security storage module, an archive security protection strategy execution module and an archive resource scheduling and security monitoring module. According to the method, through time series data analysis, potential risk behaviors can be recognized in advance, illegal access and abnormal operation can be prevented, losses caused by human errors or malicious behaviors are reduced, data integrity and confidentiality are guaranteed, archive data are stored in blocks, encryption is carried out according to sensitivity and access frequency, and the security of the archive data is improved. Multi-factor identity verification is executed, the flexibility and accuracy of protection measures are enhanced, security vulnerabilities are reduced, priority protection of sensitive archives is ensured through real-time monitoring and resource scheduling optimization, resource waste and risk exposure are avoided, and the security of the sensitive archives is improved. And the overall safety protection capability of archive management in a complex threat environment is improved by collaborative measures.

The invention discloses a storage security protection and fire-fighting early warning method based on an edge AI mode, and belongs to the technical field of safety monitoring, and the early warning method employs an edge AI artificial intelligence video data processing analysis method to carry out intelligent security protection behavior identification early warning and intelligent fire-fighting behavior identification early warning; the edge AI artificial intelligence video data processing analysis method comprises the steps that a data center pushes a trained model to an edge AI server, and the edge AI server analyzes streaming data collected by edge Internet of Things equipment in real time and carries out AI reasoning; the edge AI server uploads the received new condition related data to the cloud to train the model, and the trained model is pushed to the edge AI server again; according to the invention, security and protection and fire-fighting applications are deeply fused, an information island is thoroughly broken, data sharing and interconnection are realized, unified output of early warning signals is ensured, and the emergency response speed and accuracy are improved.

The invention provides an unstructured data storage optimization method and system based on information entropy and a block chain, and relates to the technical field of data storage, and the method comprises the steps: building a block chain storage network to obtain data, recognizing redundant data through dimension reduction, mapping and hyperplane construction, and removing the redundant data based on fuzzy similarity. The to-be-stored data is partitioned, the access frequency is calculated, the consistent Hash algorithm is executed to determine the storage position, the access index and the verification sequence are established, and the data integrity verification is executed, so that the data access efficiency can be improved, and the storage security can be enhanced.

The invention, which relates to the technical field of data security, discloses a power grid enterprise power data storage security risk assessment system comprising the following components: a virtual environment monitoring module, a risk assessment and isolation module, an early warning and response module and a security policy management module. According to the invention, omnibearing real-time monitoring is carried out on a virtual server and a virtual network of a power grid enterprise data center through the virtual environment monitoring module, an abnormal behavior detection model is continuously optimized by using a machine learning algorithm, and high-precision identification of novel abnormal behaviors is realized. Meanwhile, the risk assessment and isolation module introduces a specific risk factor weight in combination with the unique characteristics of the power data of the power grid enterprise, ensures that an assessment result highly accurately reflects the actual safety risk of power data storage, and remarkably improves the safety and stability of power data storage of the power grid enterprise.

Embodiments of the invention relate to a data encryption method and apparatus, a computer device and a storage medium. The method comprises the steps of generating a target key for to-be-encrypted target data; after encrypting and storing the target data according to the target key, dividing the target key into a plurality of key segments; generating a corresponding key fragment ciphertext for each key fragment to obtain a plurality of key fragment ciphertexts; and respectively storing the plurality of key segment ciphertexts to first storage areas in a plurality of different nodes. Therefore, after the target data is encrypted, the target key can be divided into a plurality of key fragment ciphertexts which are respectively stored in different storage areas, the risk of single-point failure and centralized attack on the data is avoided through the fragmentation and scattered storage design of the key, and the data storage security is greatly improved.

The invention relates to the technical field of medical data circulation and storage, in particular to a block chain-based medical data circulation and storage method, which comprises the following steps of data storage, data circulation and data auditing. The medical data storage security is remarkably improved, the blockchain storage performance bottleneck is avoided, the non-tampering property of the blockchain ensures that the data operation record is traceable in the whole process, the malicious tampering risk of internal personnel is completely eradicated, a mixed encryption mechanism is adopted, a session key is chained after being encrypted by a public key of a patient, a private key is only held by the patient, the cracking difficulty is extremely high, and the safety is high. According to the method, high-efficiency and de-intermediary data circulation is achieved, patient privacy control and compliance are enhanced, fragmented PBFT consensus is adopted, the medical transaction throughput can reach 2000 + TPS, clinical real-time requirements are met, breakthrough is achieved in the aspects of safety, efficiency and privacy protection, and a trusted infrastructure is provided for medical data value circulation.

The embodiment of the invention provides a data transmission method, electronic equipment, a storage medium and a program product. The method comprises the following steps: acquiring timestamp information and to-be-encrypted transmission data; according to an HKDF key derivation algorithm, a first dynamic derived key is determined according to the timestamp information and a first identifier of a sending end device; performing encryption processing on the to-be-encrypted transmission data according to the first dynamic derived key to obtain target encrypted data; and sending the target encrypted data, the timestamp information and the first identifier of the sending end equipment to the receiving end equipment. According to the embodiment of the invention, a dynamic encryption scheme based on an HKDF key derivation algorithm is used for protecting end-to-end authentication and transmission and storage data encryption, the deployment project amount is simplified, and meanwhile, the data transmission and storage security is ensured.

The invention discloses a multi-level access control and authority synchronization method for secure mobile storage, and belongs to the field of mobile storage security. Aiming at the problems of data leakage, poor authority management and the like of the mobile storage device, a multi-level access control framework, a decentralized authority synchronization mechanism and a dynamic token and zero-knowledge proof system are constructed. Generating a plurality of layers of sub-keys from a master key by using a PBKDF2 algorithm through hierarchical key generation, and associating different encryption areas and authority strategies; incremental synchronization is carried out based on a Merkle tree, and data consistency is guaranteed through a consistency verification protocol; a temporary token is generated by using a Schnorr protocol, and the permission is verified in combination with zero-knowledge proof, so that the privacy security is ensured. In scene application of a power grid and the like, a master key is activated through biological recognition, permission is loaded according to a strategy, and permission change is efficiently synchronized. According to the method, the mobile storage security and the management efficiency are improved, and accurate authority control and reliable synchronization are realized.

The invention discloses a blockchain-based intelligent video monitoring data storage security sharing method for an iron and steel plant. The method comprises the following steps of: generating a public key PKS and a master key TMK based on an attribute encryption algorithm; distributing shares of the shared key S by constructing a matrix and defining a function, wherein the shares are distributed in different rows of the matrix; re-encrypting the data by using a hybrid proxy re-encryption algorithm based on a ciphertext strategy; secure data storage and access control are realized based on a secure storage mode of revocable attribute-based encryption RABE and a block chain; and in combination with a block chain technology, a consensus algorithm is adopted to verify transactions, so that the security and robustness of the system are enhanced. According to the invention, the utilization rate of the data is improved, the cooperation efficiency is enhanced, the security and transparency of the video monitoring data are improved, and the cost of information transmission and storage is reduced. The distributed storage and access control of the data are realized, the confidentiality and integrity of the cloud center data are ensured, and the security and efficiency of the steel plant video monitoring system in the storage and transmission process are enhanced.

The invention provides a configuration parameter processing method, electronic equipment and a storage medium, and relates to the field of distributed technologies. The method is applied to a configuration center, and comprises the following steps: receiving key packaging information, a configuration parameter ciphertext and storage request information sent by an application server; randomly selecting an unused target unique identifier according to the storage request information, and inputting the target unique identifier, the key packaging information and the configuration parameter ciphertext into a trusted execution environment for processing to obtain an unpackaging result; determining a storage key according to the deblocking result; when it is detected that the hash value to be verified is equal to the encrypted hash value, an identifier ciphertext and a backup ciphertext of the target unique identifier are obtained through calculation, and the identifier ciphertext is sent to the application server side; and storing the identification hash value and the configuration parameter ciphertext into a parameter database, and storing the backup ciphertext and the pre-stored application identification code into a backup database. According to the method, the storage security of the configuration parameters is improved.

The invention discloses a secure storage method and device for power grid privileged access credentials and a storage medium. The method comprises the following steps: acquiring a privileged access credential, a target access resource and a target privileged access object of a power grid; performing hierarchical encryption processing to obtain a target encryption key of the target privileged access object; based on the target encryption key, performing hierarchical decryption processing on an initial password corresponding to the privileged access credential, an initial password corresponding to the target access resource and an initial password corresponding to the target privileged access object to obtain a target decryption key of the target privileged access object; and storing the initial password corresponding to the privileged access credential, the initial password corresponding to the target access resource, the initial password corresponding to the target privileged access object, the target encryption key and the target decryption key in a data security access system of the power grid. The technical problem of low storage security of the power grid privilege access credential is solved.

The invention relates to the technical field of warehouse management, in particular to a data storage method and system based on intelligent warehouse management, and the method comprises the steps: forming a comprehensive data storage structure through creating a three-dimensional shelf index and formulating a storage strategy, and improving the data access speed; by generating the intelligent cargo packaging information, the storage cost can be reduced, and the storage efficiency can be improved; the access efficiency of goods data is improved by adaptively planning a goods picking path and dynamically adjusting goods picking task distribution; through a block chain technology, a unique hash value is generated for each cargo, and transactions are recorded on key nodes, so that the security of data storage is improved, the data is prevented from being maliciously modified or deleted, and meanwhile, a chain storage structure ensures the integrity and historical traceability of the data. The method is used for solving the technical problems of low data storage efficiency, insufficient storage security, lack of efficient order picking paths and task allocation and the like in current warehouse management.

The invention relates to the technical field of solid state disks, and provides a solid state disk data storage security test method and device, and the method comprises the steps: generating original test data of a solid state disk in a preset test environment; performing a simulation attack on the solid state disk according to a preset strength grade and preset duration, and obtaining a data block after the simulation attack of the original test data after the simulation attack is finished; recovering the data block after the simulation attack based on the verification data, and obtaining a primary data recovery rate, a secondary data recovery rate and a data error rate of the data block after the simulation attack in the recovery process; calculating a data storage security score of the solid state disk according to the primary data recovery rate, the secondary data recovery rate and the data error rate; and determining a data storage security level of the solid state disk according to the data storage security score. According to the method, the data storage security of the solid state disk under various complex environments and security threats can be comprehensively, systematically and deeply evaluated.

The invention discloses a firmware-level security protection system and method for a hard disk of industrial automation equipment, particularly relates to the technical field of storage security protection, and is used for solving the problem of abnormal tampering of firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence library, firmware-level judgment on operation abnormity, access border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to closed loop recovery by combining protected segment integrity verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the operation safety and the maintainability of the firmware are integrally improved.

The invention relates to a big data security management system, and provides a security management system covering a whole life cycle aiming at the problems of untrusted source end, link leakage, centralized storage of single points, extensive authorization, disposal lag and the like. The system comprises an acquisition security module, a transmission encryption module, a storage security module, an access control module, a threat detection module, a situation awareness module, a traceability module and an emergency response module. A session basis is generated through multi-factor authentication, a dynamic key is derived according to time slices, and data fragments are encrypted one by one; distributed storage is adopted, and metadata is chained to be non-tampered; implementing fine-grained authorization by taking the attribute as a core; utilizing a sequence model linkage knowledge graph to identify abnormity and calculate a risk index; and when the threshold is exceeded, automatically reconstructing a log chain and executing isolation, alarm or recording. According to the system, trusted acquisition, confidential transmission, traceable storage, fine authorization and automatic disposal are realized, and the safety and compliance are remarkably improved.

The invention relates to the field of computer security, and discloses a data storage security protection method and system based on a solid-state hard disk, which comprises the following steps: identifying the inherent physical difference of a flash memory chip in the solid-state hard disk so as to calculate the read-write time sequence micro-deviation of the solid-state hard disk; performing hash operation on the device root key and the unique identifier of the controller corresponding to the solid state disk to obtain a bound master control key; generating a temporary encryption key of the write-in operation to encrypt plaintext data of the host system to obtain ciphertext data; writing the ciphertext data into a flash memory physical page corresponding to the physical page address to obtain a ciphertext physical page address; when the access mode is a hostile attack mode, secretly updating the ciphertext physical page address into a new physical page address, and deleting the ciphertext physical page address; and when the access mode is a secure access mode and the verification key is consistent with the bound master control key, normal loading and data access requests of the solid state disk are allowed. According to the invention, the security and integrity of data storage can be improved.

The invention belongs to the technical field of enterprise information management, and particularly relates to an enterprise information security management system based on big data analysis, which comprises a data acquisition and processing module, a big data analysis module, an enterprise information security evaluation module, a risk defense module and a visual supervision module. The data acquisition and processing module acquires security data from an enterprise network and performs data preprocessing, the big data analysis module analyzes the preprocessed data by using a big data analysis technology to identify potential safety hazards, and the enterprise information security assessment module generates a security assessment report based on a big data analysis result. And the risk defense module takes corresponding defense measures according to the security assessment report to ensure the security of the enterprise information, and ensures the storage security and export security of the enterprise information by carrying out risk monitoring analysis on all storage devices and carrying out export monitoring on the enterprise information, thereby realizing effective supervision on the security of the enterprise information.

The invention relates to the technical field of intelligent construction, and discloses an intelligent construction collaborative management platform and method based on digital twinning, and the method comprises the steps: firstly obtaining the practical operation data of a target engineering machine, analyzing the data safety level of the practical operation data to generate a distributed storage path, extracting storage node identifiers in the path, and deploying the storage node identifiers to a digital twinning platform; analyzing a node storage state index, querying a data backup demand and constructing a storage backup framework; then identifying an access request of the storage security framework, verifying a user identity, calculating an authority level index, analyzing an access range, and determining a platform multi-layer access regulation; then monitoring a permission change event, collecting a log, identifying a risk access behavior and calculating an access risk index; and finally, adjusting node encryption configuration according to the risk index, identifying an authority control key, and generating a self-adaptive security policy of the target engineering machinery on the platform. According to the invention, the integrity and safety of construction management can be improved.

The invention discloses a multi-level security protection method taking a persistent memory as a core level, and relates to the technical field of computer storage security. The method comprises the following steps: constructing a cross-level security abstract model, and implementing NUMA perception encryption on the basis of the cross-level security abstract model, including a localization encryption strategy and an intelligent key distribution system; based on a cross-hierarchy security abstract model and NUMA perception encryption, dynamic key hierarchical derivation is realized, a tree topology structure is adopted in the derivation process, generation of a root key and sub-keys of each hierarchy depends on a hierarchical key derivation engine, and cross-node synchronization is completed through an intelligent key distribution system during key cascade update; a side channel attack resisting system is constructed, support for CXL equipment is matched with establishment of a CXL metadata consistency group in NUMA perception encryption, and the security of data transmission and storage of the CXL equipment is guaranteed. According to the invention, the encryption performance is obviously improved.

The invention provides a warehouse management method for emergency materials of a smart station, and the method comprises the steps: obtaining a production date, an expiration date and an initial environment parameter through the analysis of an electronic tag of the emergency materials, and generating a dynamic temperature suitable range based on the nonlinear mapping of the expiration date and an initial temperature value; generating a dynamic humidity suitable range based on a correlation model of the production date and the initial humidity value; the overlap ratio of the remaining days of the shelf life and the temperature suitable range is calculated to serve as a first priority factor, a second dynamic allocation factor is generated in combination with the real-time load rate of the warehouse, and a material allocation matrix is generated through integration of a priority fusion algorithm; according to the method, target warehouse environment parameters are monitored in real time, a multi-stage adjustment strategy is triggered when the target warehouse environment parameters exceed a suitable range, a parameter self-learning engine is started when verification fails, intelligent regulation and optimization of the storage environment are achieved, and the emergency material storage safety and management efficiency are improved. The method can dynamically adapt to the material characteristic change, and optimizes the warehouse environment control precision.

The invention discloses a power transmission line image video analyzing and monitoring system, and relates to the field of power transmission line monitoring. The multi-modal acquisition module adopts a 4K camera, a thermal infrared imager and the like to acquire data and perform time-space synchronization; the edge processing module operates YOLOv6s to detect defects and upload compressed features; the cloud analysis module analyzes and predicts by means of 3D-CNN and digital twinning technologies; the early warning linkage module gives a multi-stage alarm and dispatches a work order; the storage security module encrypts the storage data. The power transmission line is intelligently monitored, defects are detected in a multi-mode mode, and real-time early warning and quick response are achieved; the cloud edge collaboratively improves the operation and maintenance efficiency and shortens the work order processing period; reliable operation in a complex environment reduces storage and annual average operation and maintenance cost, and ensures power grid safety.

The invention discloses a mobile storage security access control system and method based on a microkernel architecture, and relates to the technical field of data storage security. The system comprises a host end and a mobile storage device end. And the host end is provided with a special device driver and is used for sending the generated authentication data and the storage access instruction to the mobile storage device end through the virtual storage front-end device created by the special device driver. And the mobile storage device end is deployed with an operating system based on a microkernel architecture, creates a virtual storage rear-end device corresponding to the virtual storage front-end device, and is used for performing host identity and capability verification on the authentication data received by the virtual storage rear-end device, and receiving and executing a storage access instruction from the host end after the verification is passed. Communication connection is established between the virtual storage front-end device and the virtual storage rear-end device through a USB bus. According to the system, active and fine-grained power control of access to the mobile storage equipment end is realized.

The invention discloses a multi-dimensional storage environment monitoring platform driven by the Internet of Things. The multi-dimensional storage environment monitoring platform comprises a multi-dimensional environment data acquisition unit, a wireless data transmission unit, a multi-dimensional heterogeneous data fusion processing unit, an environment data prediction unit, an intelligent decision and control instruction generation unit and an execution mechanism driving unit. Multi-dimensional parameters such as storage environment temperature and humidity and gas concentration are collected in real time through a distributed sensor array, and after self-adaptive anti-interference wireless transmission, data fusion and feature extraction are completed through a multi-dimensional heterogeneous environment parameter analysis model; and based on the optimized long-short-term memory network prediction environment data, generating a control instruction through reasoning in combination with a preset rule, and driving an execution mechanism to adjust the storage environment. According to the platform, comprehensive monitoring, accurate prediction and intelligent regulation and control of multi-dimensional parameters of the storage environment are realized, and the storage management efficiency and the cargo storage safety are effectively improved.

The invention discloses a data governance security solution method based on artificial intelligence, and relates to the technical field of data management, and the method comprises the following steps: S1, data asset list and classification; s2, data risk assessment; s3, making a data access control strategy; s4, performing data encryption and desensitization processing; s5, data transmission security management; s6, performing data storage security management; s7, performing data use and sharing security management; s8, monitoring and responding to a data security event; and S9, performing data governance security compliance auditing. According to the data governance security solution based on artificial intelligence, by introducing an AI-driven dynamic label management mechanism, a self-adaptive transmission protocol selection mechanism and a dynamic authorization mechanism based on behavior analysis, real-time adjustment and fine management of a data security policy are realized, and potential threats can be quickly responded and prevented; therefore, the security, flexibility and efficiency of data management are greatly improved.

The invention provides a key processing method, which comprises the following steps: requesting to distribute a quantum key to a quantum security service platform so as to obtain a target quantum key fed back by the quantum security service platform. And taking the target quantum key as an authentication key of the mobile device to call an SIM card of the mobile device to store the target quantum key. According to the invention, the storage security of the authentication key at the mobile equipment side can be provided.

The invention relates to the field of distributed storage, in particular to a method for safely transmitting and storing file fragments in a distributed storage system, and solves the problem that data are tampered or leaked in the transmission, storage and decryption process in the existing distributed storage field. The method comprises the following steps: step 1, data fragmentation; 2, data are uploaded before being uploaded; step 3, storing; 4, encrypting file link generation and forwarding; and 5, receiving and decrypting the file. According to the method, fragmented data, secret keys and parameters of each storage node in the distributed storage system are mastered by multiple parties, and encryption and decryption processing of organization, transmission and storage of the fragmented data is realized by adopting a stream encryption and parallel processing mode; the transmission and storage security of the file in the distributed system is effectively guaranteed, and the file is prevented from being tampered.

The invention discloses an automobile part data life cycle safety test system, and relates to the technical field of automobile part data safety. Comprising a data classification and label module, a storage security test module, a transmission security test module, a use and destruction security module, a compliance and risk assessment module, a full-link linkage test engine, a digital twin drive module and an adaptive test process engine. The method has the advantages that data classification, storage, transmission, use and destruction links are dynamically connected in series by a directed acyclic graph through an event-driven workflow orchestrator of a full-link linkage test engine, and fault injection and risk evolution deduction are executed; a three-dimensional twin space link risk propagation path comprising a physical entity model and a data flow topology is constructed by means of a digital twin driving module, full-link detection of cross-link vulnerabilities such as'mismatching of classification labels and encryption strategies' 'permission combination attack ''and the like is realized, and the systematic risk omission ratio is reduced.

The invention provides a data storage security monitoring method and system, and belongs to the field of data storage security, and the method comprises the steps: carrying out the multi-dimensional statistical feature extraction of historical operation feature data of a storage system, and constructing a historical security feature vector set; real-time operation feature data of the system is obtained, multi-dimensional semantic feature extraction is carried out, and a real-time security feature vector set is generated; by innovatively adopting a metric learning algorithm, the semantic distance between real-time and historical feature vector sets is calculated, and the abnormal deviation degree of the system is accurately determined. Based on the abnormal deviation degree and a predefined risk classification rule, the method dynamically evaluates the risk level of the storage system. And when the risk level reaches an early warning threshold value, the system automatically generates a safety risk early warning and executes a corresponding grading risk relief operation according to the risk level. According to the method, the security state of the storage system can be monitored in real time, potential risks can be actively identified, and the security protection capability of the data storage system is improved.

The invention provides a number card distribution system based on message middleware, relates to the field of data management, and solves the technical problem of high data storage security risk of an existing number card distribution system. The system comprises a message center module which is used for processing asynchronous communication and data transmission in the system by adopting a distributed message middleware cluster; the data security module is used for managing distribution data of each region by adopting a data fragmentation storage mechanism; and the demand prediction module is used for predicting the number card demand quantity of the next period according to the sales data and the demographic data of each region, and guiding the formulation of a sales strategy of the next period. The method and the device are used in the whole-process management process of the number card distribution service.