297 results about "Storage security" patented technology

The invention provides an unstructured data storage optimization method and system based on information entropy and a block chain, and relates to the technical field of data storage, and the method comprises the steps: building a block chain storage network to obtain data, recognizing redundant data through dimension reduction, mapping and hyperplane construction, and removing the redundant data based on fuzzy similarity. The to-be-stored data is partitioned, the access frequency is calculated, the consistent Hash algorithm is executed to determine the storage position, the access index and the verification sequence are established, and the data integrity verification is executed, so that the data access efficiency can be improved, and the storage security can be enhanced.

The invention relates to the technical field of medical data circulation and storage, in particular to a block chain-based medical data circulation and storage method, which comprises the following steps of data storage, data circulation and data auditing. The medical data storage security is remarkably improved, the blockchain storage performance bottleneck is avoided, the non-tampering property of the blockchain ensures that the data operation record is traceable in the whole process, the malicious tampering risk of internal personnel is completely eradicated, a mixed encryption mechanism is adopted, a session key is chained after being encrypted by a public key of a patient, a private key is only held by the patient, the cracking difficulty is extremely high, and the safety is high. According to the method, high-efficiency and de-intermediary data circulation is achieved, patient privacy control and compliance are enhanced, fragmented PBFT consensus is adopted, the medical transaction throughput can reach 2000 + TPS, clinical real-time requirements are met, breakthrough is achieved in the aspects of safety, efficiency and privacy protection, and a trusted infrastructure is provided for medical data value circulation.

The invention discloses a multi-level access control and authority synchronization method for secure mobile storage, and belongs to the field of mobile storage security. Aiming at the problems of data leakage, poor authority management and the like of the mobile storage device, a multi-level access control framework, a decentralized authority synchronization mechanism and a dynamic token and zero-knowledge proof system are constructed. Generating a plurality of layers of sub-keys from a master key by using a PBKDF2 algorithm through hierarchical key generation, and associating different encryption areas and authority strategies; incremental synchronization is carried out based on a Merkle tree, and data consistency is guaranteed through a consistency verification protocol; a temporary token is generated by using a Schnorr protocol, and the permission is verified in combination with zero-knowledge proof, so that the privacy security is ensured. In scene application of a power grid and the like, a master key is activated through biological recognition, permission is loaded according to a strategy, and permission change is efficiently synchronized. According to the method, the mobile storage security and the management efficiency are improved, and accurate authority control and reliable synchronization are realized.

The invention provides a configuration parameter processing method, electronic equipment and a storage medium, and relates to the field of distributed technologies. The method is applied to a configuration center, and comprises the following steps: receiving key packaging information, a configuration parameter ciphertext and storage request information sent by an application server; randomly selecting an unused target unique identifier according to the storage request information, and inputting the target unique identifier, the key packaging information and the configuration parameter ciphertext into a trusted execution environment for processing to obtain an unpackaging result; determining a storage key according to the deblocking result; when it is detected that the hash value to be verified is equal to the encrypted hash value, an identifier ciphertext and a backup ciphertext of the target unique identifier are obtained through calculation, and the identifier ciphertext is sent to the application server side; and storing the identification hash value and the configuration parameter ciphertext into a parameter database, and storing the backup ciphertext and the pre-stored application identification code into a backup database. According to the method, the storage security of the configuration parameters is improved.

The invention discloses a firmware-level security protection system and method for a hard disk of industrial automation equipment, particularly relates to the technical field of storage security protection, and is used for solving the problem of abnormal tampering of firmware. According to the method, instruction calling, interface access and interrupt timestamps are collected in a sliding window, a behavior sequence set containing an instruction sequence, calling frequency and sensitive marks is constructed and compared with a reference sequence library, firmware-level judgment on operation abnormity, access border crossing and tampering risks is triggered based on a transfer relation and an offset index, and the operation safety is improved. The method comprises the following steps of: dividing firmware into a control domain, a data domain and a configuration domain, realizing minimum permission and dynamic isolation by relying on state and permission mapping and permission register and interface shielding, forming a flow from detection to isolation to closed loop recovery by combining protected segment integrity verification and local copy hot switching, writing an exception into a protected loop log area for threshold updating, and performing protection on the protected loop log area. And the tamper-proof performance, the operation safety and the maintainability of the firmware are integrally improved.

The invention relates to a big data security management system, and provides a security management system covering a whole life cycle aiming at the problems of untrusted source end, link leakage, centralized storage of single points, extensive authorization, disposal lag and the like. The system comprises an acquisition security module, a transmission encryption module, a storage security module, an access control module, a threat detection module, a situation awareness module, a traceability module and an emergency response module. A session basis is generated through multi-factor authentication, a dynamic key is derived according to time slices, and data fragments are encrypted one by one; distributed storage is adopted, and metadata is chained to be non-tampered; implementing fine-grained authorization by taking the attribute as a core; utilizing a sequence model linkage knowledge graph to identify abnormity and calculate a risk index; and when the threshold is exceeded, automatically reconstructing a log chain and executing isolation, alarm or recording. According to the system, trusted acquisition, confidential transmission, traceable storage, fine authorization and automatic disposal are realized, and the safety and compliance are remarkably improved.

The invention relates to the field of computer security, and discloses a data storage security protection method and system based on a solid-state hard disk, which comprises the following steps: identifying the inherent physical difference of a flash memory chip in the solid-state hard disk so as to calculate the read-write time sequence micro-deviation of the solid-state hard disk; performing hash operation on the device root key and the unique identifier of the controller corresponding to the solid state disk to obtain a bound master control key; generating a temporary encryption key of the write-in operation to encrypt plaintext data of the host system to obtain ciphertext data; writing the ciphertext data into a flash memory physical page corresponding to the physical page address to obtain a ciphertext physical page address; when the access mode is a hostile attack mode, secretly updating the ciphertext physical page address into a new physical page address, and deleting the ciphertext physical page address; and when the access mode is a secure access mode and the verification key is consistent with the bound master control key, normal loading and data access requests of the solid state disk are allowed. According to the invention, the security and integrity of data storage can be improved.

The invention relates to the technical field of intelligent construction, and discloses an intelligent construction collaborative management platform and method based on digital twinning, and the method comprises the steps: firstly obtaining the practical operation data of a target engineering machine, analyzing the data safety level of the practical operation data to generate a distributed storage path, extracting storage node identifiers in the path, and deploying the storage node identifiers to a digital twinning platform; analyzing a node storage state index, querying a data backup demand and constructing a storage backup framework; then identifying an access request of the storage security framework, verifying a user identity, calculating an authority level index, analyzing an access range, and determining a platform multi-layer access regulation; then monitoring a permission change event, collecting a log, identifying a risk access behavior and calculating an access risk index; and finally, adjusting node encryption configuration according to the risk index, identifying an authority control key, and generating a self-adaptive security policy of the target engineering machinery on the platform. According to the invention, the integrity and safety of construction management can be improved.

The invention discloses a multi-level security protection method taking a persistent memory as a core level, and relates to the technical field of computer storage security. The method comprises the following steps: constructing a cross-level security abstract model, and implementing NUMA perception encryption on the basis of the cross-level security abstract model, including a localization encryption strategy and an intelligent key distribution system; based on a cross-hierarchy security abstract model and NUMA perception encryption, dynamic key hierarchical derivation is realized, a tree topology structure is adopted in the derivation process, generation of a root key and sub-keys of each hierarchy depends on a hierarchical key derivation engine, and cross-node synchronization is completed through an intelligent key distribution system during key cascade update; a side channel attack resisting system is constructed, support for CXL equipment is matched with establishment of a CXL metadata consistency group in NUMA perception encryption, and the security of data transmission and storage of the CXL equipment is guaranteed. According to the invention, the encryption performance is obviously improved.

The invention provides a warehouse management method for emergency materials of a smart station, and the method comprises the steps: obtaining a production date, an expiration date and an initial environment parameter through the analysis of an electronic tag of the emergency materials, and generating a dynamic temperature suitable range based on the nonlinear mapping of the expiration date and an initial temperature value; generating a dynamic humidity suitable range based on a correlation model of the production date and the initial humidity value; the overlap ratio of the remaining days of the shelf life and the temperature suitable range is calculated to serve as a first priority factor, a second dynamic allocation factor is generated in combination with the real-time load rate of the warehouse, and a material allocation matrix is generated through integration of a priority fusion algorithm; according to the method, target warehouse environment parameters are monitored in real time, a multi-stage adjustment strategy is triggered when the target warehouse environment parameters exceed a suitable range, a parameter self-learning engine is started when verification fails, intelligent regulation and optimization of the storage environment are achieved, and the emergency material storage safety and management efficiency are improved. The method can dynamically adapt to the material characteristic change, and optimizes the warehouse environment control precision.

The invention discloses a power transmission line image video analyzing and monitoring system, and relates to the field of power transmission line monitoring. The multi-modal acquisition module adopts a 4K camera, a thermal infrared imager and the like to acquire data and perform time-space synchronization; the edge processing module operates YOLOv6s to detect defects and upload compressed features; the cloud analysis module analyzes and predicts by means of 3D-CNN and digital twinning technologies; the early warning linkage module gives a multi-stage alarm and dispatches a work order; the storage security module encrypts the storage data. The power transmission line is intelligently monitored, defects are detected in a multi-mode mode, and real-time early warning and quick response are achieved; the cloud edge collaboratively improves the operation and maintenance efficiency and shortens the work order processing period; reliable operation in a complex environment reduces storage and annual average operation and maintenance cost, and ensures power grid safety.

The invention discloses a mobile storage security access control system and method based on a microkernel architecture, and relates to the technical field of data storage security. The system comprises a host end and a mobile storage device end. And the host end is provided with a special device driver and is used for sending the generated authentication data and the storage access instruction to the mobile storage device end through the virtual storage front-end device created by the special device driver. And the mobile storage device end is deployed with an operating system based on a microkernel architecture, creates a virtual storage rear-end device corresponding to the virtual storage front-end device, and is used for performing host identity and capability verification on the authentication data received by the virtual storage rear-end device, and receiving and executing a storage access instruction from the host end after the verification is passed. Communication connection is established between the virtual storage front-end device and the virtual storage rear-end device through a USB bus. According to the system, active and fine-grained power control of access to the mobile storage equipment end is realized.

The invention discloses a multi-dimensional storage environment monitoring platform driven by the Internet of Things. The multi-dimensional storage environment monitoring platform comprises a multi-dimensional environment data acquisition unit, a wireless data transmission unit, a multi-dimensional heterogeneous data fusion processing unit, an environment data prediction unit, an intelligent decision and control instruction generation unit and an execution mechanism driving unit. Multi-dimensional parameters such as storage environment temperature and humidity and gas concentration are collected in real time through a distributed sensor array, and after self-adaptive anti-interference wireless transmission, data fusion and feature extraction are completed through a multi-dimensional heterogeneous environment parameter analysis model; and based on the optimized long-short-term memory network prediction environment data, generating a control instruction through reasoning in combination with a preset rule, and driving an execution mechanism to adjust the storage environment. According to the platform, comprehensive monitoring, accurate prediction and intelligent regulation and control of multi-dimensional parameters of the storage environment are realized, and the storage management efficiency and the cargo storage safety are effectively improved.

The invention relates to the field of distributed storage, in particular to a method for safely transmitting and storing file fragments in a distributed storage system, and solves the problem that data are tampered or leaked in the transmission, storage and decryption process in the existing distributed storage field. The method comprises the following steps: step 1, data fragmentation; 2, data are uploaded before being uploaded; step 3, storing; 4, encrypting file link generation and forwarding; and 5, receiving and decrypting the file. According to the method, fragmented data, secret keys and parameters of each storage node in the distributed storage system are mastered by multiple parties, and encryption and decryption processing of organization, transmission and storage of the fragmented data is realized by adopting a stream encryption and parallel processing mode; the transmission and storage security of the file in the distributed system is effectively guaranteed, and the file is prevented from being tampered.

The invention discloses an automobile part data life cycle safety test system, and relates to the technical field of automobile part data safety. Comprising a data classification and label module, a storage security test module, a transmission security test module, a use and destruction security module, a compliance and risk assessment module, a full-link linkage test engine, a digital twin drive module and an adaptive test process engine. The method has the advantages that data classification, storage, transmission, use and destruction links are dynamically connected in series by a directed acyclic graph through an event-driven workflow orchestrator of a full-link linkage test engine, and fault injection and risk evolution deduction are executed; a three-dimensional twin space link risk propagation path comprising a physical entity model and a data flow topology is constructed by means of a digital twin driving module, full-link detection of cross-link vulnerabilities such as'mismatching of classification labels and encryption strategies' 'permission combination attack ''and the like is realized, and the systematic risk omission ratio is reduced.

The invention provides a data storage security monitoring method and system, and belongs to the field of data storage security, and the method comprises the steps: carrying out the multi-dimensional statistical feature extraction of historical operation feature data of a storage system, and constructing a historical security feature vector set; real-time operation feature data of the system is obtained, multi-dimensional semantic feature extraction is carried out, and a real-time security feature vector set is generated; by innovatively adopting a metric learning algorithm, the semantic distance between real-time and historical feature vector sets is calculated, and the abnormal deviation degree of the system is accurately determined. Based on the abnormal deviation degree and a predefined risk classification rule, the method dynamically evaluates the risk level of the storage system. And when the risk level reaches an early warning threshold value, the system automatically generates a safety risk early warning and executes a corresponding grading risk relief operation according to the risk level. According to the method, the security state of the storage system can be monitored in real time, potential risks can be actively identified, and the security protection capability of the data storage system is improved.

The invention provides a number card distribution system based on message middleware, relates to the field of data management, and solves the technical problem of high data storage security risk of an existing number card distribution system. The system comprises a message center module which is used for processing asynchronous communication and data transmission in the system by adopting a distributed message middleware cluster; the data security module is used for managing distribution data of each region by adopting a data fragmentation storage mechanism; and the demand prediction module is used for predicting the number card demand quantity of the next period according to the sales data and the demographic data of each region, and guiding the formulation of a sales strategy of the next period. The method and the device are used in the whole-process management process of the number card distribution service.

The invention relates to the technical field of data storage security, in particular to an access protection method for a solid state disk, which comprises a dynamic authentication module and a hierarchical encryption module, the dynamic authentication module generates a temporary access token through multi-dimensional identity authentication, and a behavior analysis component dynamically adjusts the strict degree of a security policy according to the operation habit of a user; the hierarchical encryption module adopts a partition storage structure, performs hierarchical encryption according to data sensitivity and allocates access authority, and a built-in data erasure trigger can quickly clear sensitive data under abnormal access. According to the access protection method for the solid state disk, the reliability and flexibility of data protection of the solid state disk can be improved, the problems that a traditional method is insufficient in safety and complex in operation are solved, meanwhile, user experience and the service life of equipment are considered, and remarkable technical advantages and application value are achieved.

The invention provides an encrypted data storage and key management protection method for a blue-ray disc, which relates to the technical field of data storage security and comprises the following steps of: performing multi-frequency data block division by extracting access time sequence characteristics of original data, calculating a multi-dimensional entropy value to determine an encryption algorithm parameter and a key; and extracting physical characteristic signals of the blue-ray disc to obtain sector defect distribution and evaluate reliability, thereby realizing optimal mapping storage of encrypted data and a multi-dimensional reliability sector group. According to the invention, the data storage security is effectively improved, the key management mechanism is optimized, and the physical characteristics of the blue-ray disc are fully utilized to enhance the data protection capability.

The invention provides an airborne high-speed image hierarchical compression and encrypted storage method and system, electronic equipment and a storage medium, and relates to the technical field of airborne image processing and data security storage. The method comprises the following steps: acquiring an airborne high-speed image sequence, synchronously monitoring surface pneumatic pressure pulsation data of an aircraft, converting the surface pneumatic pressure pulsation data into a deformable mirror surface group curvature control signal, adjusting mirror surface deformation parameters to compensate optical path wavefront distortion, and generating a stable image; air vortex characteristics are extracted to calculate an intensity distribution diagram, turbulence levels are divided, and corresponding compression strategies are adopted; extracting vortex phase features of each level to generate a dynamic key, and encrypting the layered compressed data stream; according to the invention, layered high-efficiency compression and dynamic encryption storage of airborne high-speed images in a turbulent environment can be realized, and data processing effectiveness and storage security are guaranteed.

The invention discloses a satellite data storage safety monitoring method, system and device and a medium, and belongs to the technical field of safety monitoring, and the method comprises the steps: collecting satellite data, preprocessing the satellite data, generating a chaotic mapping initial seed according to the preprocessed satellite data, and storing the chaotic mapping initial seed in a database; setting a mapping parameter based on the chaotic mapping initial seed and generating a key, and encrypting an access path by using the key; storing the satellite data and the encrypted access path to a database, calculating a stability index based on the encrypted access path, and performing abnormality judgment according to the stability index; feedback data in the safety monitoring process are collected, the mapping parameters are adjusted based on the feedback data, and the adjusted safety monitoring result is displayed through a visual interface. According to the method, the security of data encryption is improved, the capability of detecting and responding to abnormal behaviors in the storage process is enhanced, and the anti-cracking capability of the encryption method is improved.

The utility model discloses a portable hard disk bridging encryption circuit and equipment based on quantum random numbers, and belongs to the technical field of hard disk bridging encryption. According to the portable hard disk bridging encryption circuit based on the quantum random number, data of an upper computer reaches the SoC storage security chip through the upper computer interface, the SoC storage security chip obtains a secret key through the quantum random number generator and encrypts the data, and finally the encrypted data is written into a hard disk through the hard disk interface. All the data written into the hard disk can be completely encrypted, so that all the data written into the hard disk are ciphertexts, and the encryption safety of the mobile hard disk is improved. Besides, the circuit is in pluggable connection with the upper computer through the upper computer interface and in pluggable connection with the mobile hard disk through the hard disk interface, all the interfaces are connected when encryption is needed, the mobile hard disk skips the circuit to be directly connected with the upper computer when encryption is not needed, and the flexibility of hard disk encryption design is improved.

The invention discloses a data security defense method and device for a financial management system, and relates to the technical field of data security. The method comprises the following steps: performing hierarchical encryption on financial data of a client by using a hierarchical encryption mechanism, and uploading the obtained hierarchical encrypted financial data to a distributed network of a financial management system for storage; using a data security defense engine of the financial management system to collect multi-source monitoring data of the client accessing the financial management system, and performing attack detection on the multi-source monitoring data to obtain an attack detection result; and generating a data security defense strategy by using a defense strategy generation model of the financial management system according to the attack detection result, and adjusting a data security defense mechanism of the financial management system according to the data security defense strategy. The problems that in the prior art, data transmission and storage security is insufficient, the attack detection capacity is limited, and defense strategy response is lagged are solved.

The invention discloses a logistics warehouse cargo storage method and system and a storage medium, relates to the field of logistics warehouse cargo storage, realizes intelligent warehouse management through multi-module cooperation, remarkably improves inventory monitoring and cargo scheduling efficiency, and improves the cargo scheduling efficiency based on video image recognition and contour matching technologies in combination with database information. Accurate inventory data is generated in real time, unregistered goods are effectively identified, manual inventory errors are reduced, goods flow indexes are quantified through a dynamic time decay model, and goods turnover rules are accurately reflected by combining weighted analysis of carrying proportion and quantity, so that data support is provided for scheduling decision making. Multi-dimensional factors such as environmental parameters, transportation distance and storage capacity are integrated, a callout-storage staged optimization model is established, environmental adaptability, storage safety and scheduling rationality are organically combined, manual intervention is reduced, the warehouse turnover efficiency is improved, the storage cost is reduced, and a full-process closed-loop intelligent warehouse management system is formed.

The invention discloses a block chain-based distributed forest and grass Internet of Things data sharing method and system, and relates to the technical field of data storage, and the method comprises the steps: collecting multiple types of data in a forest and grass ecological environment, extracting feature parameters to construct a multi-dimensional feature vector, inputting the multi-dimensional feature vector into a preset data value evaluation model, and outputting a value score. And dividing the data into a first level, a second level and a third level according to the score threshold, and adopting a corresponding block chain storage strategy. And further dividing the first-level data into flowable data and non-flowable data. And for the first-level flowable data, the second-level data and the third-level data, dynamically adjusting and updating the data level and the block chain storage mode at regular intervals. According to the method, hierarchical management of forest and grass Internet of Things data can be realized, a one-step uplink strategy is avoided, and waste of storage resources on a chain and response delay are reduced. Meanwhile, the uplink strategy can be adjusted in time according to the dynamic change of the data content, the information leakage risk is reduced, and the data utilization efficiency and the storage safety are improved.

The invention discloses a key management method and a storage device, and belongs to the field of storage security, the method comprises the following steps: deriving different types of key fragments from an authentication key according to different preset classification strategies, and respectively storing the different types of key fragments in different storage partitions corresponding to the preset classification strategies; receiving a data access request, wherein the data access request comprises data index information; based on different preset classification strategies, reading candidate key fragments matched with the data index information from the different storage partitions respectively, verifying the legality of the candidate key fragments matched with the data index information, and determining the candidate key fragments passing the verification as effective key fragments; and aggregating the effective key fragments of different types to generate the authentication key, and obtaining target access data of the data access request through the authentication key. According to the invention, the security of key storage and the flexibility of key management can be effectively improved.

The invention relates to the technical field of warehouse storage location management methods, in particular to a warehouse storage location management method oriented to intelligent distribution and path optimization. The invention discloses a warehouse storage location management method oriented to intelligent distribution and path optimization. The method comprises the steps of data acquisition and processing, total turnover quantity prediction, storage path planning, intelligent storage location distribution and placement scheme design. According to the invention, the number of carrying times required by each type of goods is calculated based on the basic data of each type of goods and the predicted total turnover amount, and the goods shelf closer to the entrance and exit of the warehouse is allocated to the goods with more carrying times, so that the driving distance and time of carrying equipment can be reduced to the greatest extent; therefore, the operation cost of the warehouse is effectively reduced, the overall operation efficiency and operation efficiency of the warehouse are improved, the driving frequency of the carrying equipment in the internal channel of the warehouse can be greatly reduced, the risk that the carrying equipment collides with a goods shelf or other equipment is remarkably reduced, and the storage safety of the warehouse is improved.

The invention discloses a hard disk state monitoring method and device, a hard disk bracket and computer equipment, and relates to the technical field of computers, and the method comprises the steps: determining a hard disk state evaluation value through a hard disk state parameter and a first evaluation parameter, and determining a hard disk risk evaluation value through the hard disk state parameter and a second evaluation parameter, and determining a hard disk in a fault risk state by using the hard disk state assessment value and the hard disk risk assessment value, and generating alarm information. The problems that whether the hard disk is endangered to a fault or not cannot be pre-judged, fault warning cannot be conducted in time, and data storage safety is affected are solved. The technical effects of performing real-time and accurate health assessment on the hard disk, monitoring the state of the hard disk, pre-judging the fault of the hard disk in time, guaranteeing the data storage safety and enhancing the stability and reliability of the hard disk are achieved.

The invention belongs to the field of data security, and particularly relates to a time sequence encrypted storage and expired crushing method for monitoring data of external equipment, which comprises the following steps: acquiring a monitoring data stream of the external equipment, segmenting the monitoring data stream according to a preset time window, and deriving a unique encryption key for each segment; encrypting and storing the corresponding window data by using the key to obtain a time sequence encrypted data block; when the conjoint analysis request is responded, a specified window secret key is distributed to a calculation party according to a preset authorization strategy, so that the calculation party executes secure multi-party calculation on the window data block; meanwhile, the life cycle of the data block is monitored in real time, data is automatically erased when the data block expires, a corresponding secret key is destroyed, and a shredded verifiable evidence is generated and uploaded to a storage chain constructed by combining a root secret key of the general data platform and secret keys of all calculation parties with a block chain; according to the application, data storage security and conjoint analysis compliance are guaranteed, the risk of residual keys is avoided, the traceability of crushing operation is ensured, and the credibility of cooperation of multiple participants is improved.

The invention discloses a real-time active early warning system and method for a network security situation, and aims to solve the problems that an existing early warning system is insufficient in unknown threat coverage, large in early warning time delay, weak in encrypted data processing capability and poor in response collaboration. Multi-dimensional data acquisition, anti-quantum encryption protection, double-engine intelligent analysis, dynamic risk prediction and a cloud network end collaborative response mechanism are integrated, and full-period perception and active early warning of a network security situation are realized. The system adopts a GAN to expand a threat sample space, combines attack chain time sequence analysis to construct a dynamic early warning model, can accurately identify known threats and unknown variants, and shortens early warning response time delay. And meanwhile, an anti-quantum encryption technology is introduced to guarantee data transmission and storage security, and system performance is optimized through adaptive resource scheduling. According to the method, the initiative and timeliness of network security defense are effectively improved, and the method is suitable for security protection requirements of multiple scenes such as government and enterprise, finance and key information infrastructures.