60 results about "System integrity" patented technology

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

Systems and methods for secure and efficient user authentication on shared mobile devices, such as smartphones and tablets. This solution leverages the capabilities of RFID / NFC cards, access cards, and biometric sensors to establish seamless and personalized user authentication. An authenticator application communicates with a remote authentication service to either register passkeys locally for platform-wide use or forward authentication requests for remote processing, depending on configuration. The authenticator application orchestrates communication between the user, mobile device, and authentication service, creating a secure framework for various applications. Upon successful authentication, the system transforms the mobile device into a platform authenticator, making passkeys available across native apps and browsers. This system enhances security by integrating user identifiers with hosted authenticators that are securely managed by the authentication service. By tapping NFC-enabled cards or utilizing a bridge device for data extraction, users can seamlessly engage with the shared mobile device environment, benefitting from robust security measures associated with FIDO authentication. The system encompasses the bridge device, which serves as an intermediary for data transmission, efficiently communicating between RFID / NFC devices and mobile devices using Bluetooth Low Energy (BLE) technology. Biometric authentication operates similarly to RFID / NFC-based methods, where user identity is verified through an authentication service, and passkey support is provided for that specific user. The authentication service hosts user authenticators and passkeys in a secure, transportable format, configurable to be fetched to shared mobile devices or handled remotely. This system allows adaptable FIDO2 / WebAuthn security protocols across multiple devices, enhancing user convenience while ensuring system integrity and security in shared device scenarios.

Methods, systems, and computer storage media for providing brand-focused security administration in an item listing system are described. Using a brand-focused machine learning model, the brand-focused security administrator engine supports generating different comprehensive reports and analytics on brand-related security metrics, including brand compliance rates, infringement incidents, enforcement actions taken, and overall item listing system integrity. The brand-focused security administrator engine also supports visualizing the brand-focused security analytics results data in a manner that enhances usability and decision-making by presenting complex brand-focused security analytics results data in a clear, actionable format. In operation, brand-focused security data is accessed. The brand-focused security data is analyzed using a brand-focused machine learning model that is trained based on a multi-dimensional authenticity analysis dataset. Brand-focused security analytics results data is generated. The brand-focused security analytics results data is communicated to cause display of one or more visualizations based on the brand-focused security analytics results data.

The embodiment of the invention relates to the technical field of terminal security management, and discloses a kernel management method and device based on Hypervisor, and the method comprises the steps: obtaining abnormal event information of an operating system kernel of terminal equipment; determining virtual address field information corresponding to the abnormal event according to the abnormal event information; performing virtual memory measurement on the operating system kernel according to the virtual address field information to obtain a memory measurement result; and determining whether data in the kernel of the operating system is tampered or not according to the memory measurement result. According to the embodiment of the invention, effective detection and protection of data tampering in the kernel of the operating system are realized, and the overall security and system integrity of the terminal equipment are improved.

The invention relates to the technical field of mobile payment, in particular to a dynamic adjustment method for a mobile payment password-free limit, which comprises the following steps: when a payment terminal initiates a payment request, acquiring a network environment, an equipment unlocking mode, an SIM card state, system integrity and a discrete state of an application environment in real time, and establishing an equipment security state vector; according to the invention, multi-dimensional acquisition is carried out on the network environment, the equipment unlocking mode, the SIM card state, the system integrity and the discrete state of the application environment, and the security state vector is constructed, so that the equipment security can be subjected to structured description before the transaction is initiated, and the security fluctuation characteristics during the operation of the equipment are captured; by means of a security product attenuation value generated by a security state vector and in combination with a highest password-free quota reference value set by a user, a comprehensive equipment security score is output in a nonlinear function form, and quantitative filtering of equipment credibility is realized in a previous stage of quota calculation.

The invention discloses a large model security evaluation method based on multi-dimensional adversarial attack, and the method comprises the steps: generating an adversarial sample sequence through constructing multi-dimensional attack scene description and combining the characteristics of data availability damage and system integrity violation, optimizing sample parameters in a black box attack mode, and precisely positioning a weak link of a model. And meanwhile, based on a risk quantized value sequence and a safety portrait mechanism, reinforcing demand data is extracted and a protection path is generated through reverse optimization, and finally, the protection capability of the model is remarkably improved. Through a closed-loop mechanism of scene generation, sample optimization and risk assessment, a complex attack environment is effectively dealt with, and the safety and stability of the system are guaranteed.

The invention discloses an energy data management system based on a cloud platform, and relates to the technical field of energy data management, and the system comprises an energy data collection module which comprises equipment data, environment data and third-party demand data; according to the data transmission module, a communication network uses 4G / 5G, LoRaWAN, NB-IoT and optical fibers, and a message queue uses Kafka, RabbitMQ and the like to manage asynchronous data transmission. In the invention, the edge-cloud collaborative architecture module has the functions of task dynamic allocation, data consistency, resource optimization and system integrity, a traditional algorithm and a deep learning model are fused, the analysis precision and scene adaptability are improved, unnecessary data transmission is reduced and bandwidth resources are saved through data preprocessing of edge computing nodes; the dynamic data partitioning module reasonably distributes storage resources according to the data access frequency and importance, the storage efficiency is improved, hot area data is stored in a high-speed storage cluster, and it is ensured that data with the high real-time requirement can be rapidly accessed and processed.

This invention discloses a method for measuring the integrity of a spaceborne embedded system based on link symbol topology. In the static injection phase, a linker script is configured to inject symbols at critical memory segment boundaries, generating hierarchical hybrid fingerprints and redundantly persisting them to non-volatile storage. In the dynamic verification phase, a lightweight program is started before the operating system takes over, performing hierarchical dual-dimensional and SEU-resistant temporal redundancy verification, supporting multi-container dedicated isolation verification. In the linkage blocking phase, anomalies are forcibly blocked and primary / backup linkage is triggered, collecting eight types of fault contexts and supporting on-orbit updates. This invention solves the problems of traditional hash methods failing to detect layout anomalies and high time consumption, reducing complexity to O(K), achieving sub-millisecond-level measurement decoupled from image volume, adapting to spaceborne radiation-resistant, cloud-native, and redundancy scenarios, and meeting the high reliability requirements of aerospace.

The invention relates to a method for updating software of a target component of a security-critical system (SYS), the security-critical system (SYS) comprising a maintenance management component (MDM), a central authorization unit (A) and at least one persistently authorizable target component (TC-A, TC-B, TC-C), the initial system configuration comprises a first combination of target components and the target system configuration comprises a second combination of target components, having the following method steps: a) an external maintenance mechanism (M) requests an update to the system configuration; b) the authorization unit (A) transitions from a state "inactive" to a state "update"; c) informing the continuously authorized target component (TC-A, TC-B, TC-C) of the update to be made; d) the authorization unit (A) performs a system integrity pre-check and triggers a first state change and a version check of the persistently authorizable target component (TC-A, TC-B, TC-C); e) the continuously authorized target component (TC-A, TC-B, TC-C) performs a version check and if necessary a version update and notifies the authorization unit (A) of the result; f) the authorization unit (A) performs a system integrity check and triggers a second state transition of the continuously authorizable target component (TC-A, TC-B, TC-C) if the system integrity check has succeeded; g) the authorization unit (A) changes from the state "update" to the state "inactive".

The invention provides a GNSS train positioning method and system based on a two-out-of-three redundant structure, and belongs to the technical field of train navigation positioning. GNSS original observation data are independently received, and positioning fusion calculation and map matching processing are executed; performing multi-layer consistency judgment on GNSS original observation data of three channels, fusion positioning coordinates and map matching results; and on the basis of consistency judgment, outputting a final positioning result or an alarm abnormal state by adopting a majority voting mechanism. The method can effectively improve the positioning reliability and fault-tolerant capability of the GNSS train positioning system in a complex environment, has high system integrity and safety, and is suitable for a train positioning scene with a high safety level requirement.

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

The present invention relates to a method for constructing an integrity model of medium- and high-orbit navigation satellites based on low-orbit satellites, and is mainly used in the field of satellite navigation integrity monitoring. In view of the existing problems of spatiotemporal benchmark uncertainty and conservative estimation of integrity models in low-orbit satellite integrity monitoring, the present invention proposes a method for constructing an integrity model of medium- and high-orbit navigation satellites based on low-orbit satellites, including the construction of a one-way benchmark-related integrity monitoring network model and a benchmark-independent integrity monitoring network model. The present invention can provide a high-precision risk value estimation capability in real time according to the satellite geometric configuration, effectively improve the system integrity level, and has the characteristics of accurate monitoring, high real-time performance, and easy implementation.

The invention provides a credible video acquisition method and device and a readable storage medium, and the specific implementation scheme is as follows: executing system integrity measurement after system power-on is completed, and obtaining measurement log information; calling an internal private key to sign a PCR metric value in the metric log information to obtain a signature value; sending the signature value and a built-in digital certificate to a verification platform; and receiving an equipment verification result fed back by the verification platform after performing dual verification on the signature value and the digital certificate, and if the equipment verification result indicates that the verification is passed, enabling the system to enter a video acquisition state. According to the scheme, a verification mechanism of the video acquisition equipment is provided, the data acquisition credibility of the video acquisition equipment is improved, in addition, the verification platform executes dual verification including the digital certificate and the system integrity on the video acquisition equipment, the security intensity of verification of the video acquisition equipment is improved, and the user experience is improved. And the data acquisition credibility of the video acquisition equipment is fully ensured.

The application discloses an intelligent perception anchor rod system and a supporting state dynamic evaluation method, belongs to the technical field of underground engineering safety monitoring, and relates to the technical field of underground engineering safety monitoring.The system comprises a multi-physical perception unit, a power module, an edge processing and communication module and a data processing terminal.The multi-physical perception unit comprises a thermal pulse sensor, a three-dimensional stress perception unit and a distributed optical fiber acoustic wave sensor which are integrated in a hollow anchor rod body; the power module and the edge processing and communication module are installed in the inner cavity of the hollow anchor rod body; and the data processing terminal is installed in a roadway sidewall or a chamber and is connected with the edge processing and communication module in a wireless communication mode.The method comprises the following steps: a heterogeneous sensor array is synchronously triggered and collected; on-orbit demodulation and feature compression are carried out; a grouting body spatial form and thermal physical property evolution is reconstructed; an anchor rod axial force field and a transverse supporting stress field are reconstructed; an anchoring system integrity index is calculated; a surrounding rock and supporting structure interaction stability index is calculated; and multi-level early warning triggering and decision output are carried out.The application can realize synchronous perception of multi-source information, dynamic and accurate diagnosis of a supporting state and multi-level early warning.

The invention relates to a data storage and retrieval method and system, and belongs to the technical field of data processing.The method comprises the steps that the data structure of video data, the storage mode of the video data and the retrieval mode of the video data are obtained; under the condition that a storage request of the video data is received, determining a fragmentation rule based on the equipment identifier of the main document, and automatically distributing the video data to different fragmentation servers under the fragmentation rule; and under the condition that a retrieval request of the video data is received, performing retrieval from different fragment servers based on a retrieval condition. According to the data storage and retrieval method, an efficient, reliable and easy-to-expand data storage and retrieval scheme is realized through automatic fragmentation, flexible data retrieval and query, an optimized data storage structure and improvement of system integrity.

The invention relates to secure verification of firmware. A computing system is described for securely verifying system firmware and recovering firmware to ensure system integrity without relying on a proprietary verification process of manufacture, hardware-specific keys, or intrinsic write protection features of system memory. In one embodiment, a computing system relies on a security processor that maintains firmware management parameters that define a process for verifying and recovering firmware independent of a mask ROM (Read Only Memory) verification process of an integrated circuit manufacturer. The security processor ensures that the firmware or recovery firmware is properly signed and coincides with a previously executed version, or if different, generates a verification result (e.g., a generated hash value) that coincides with an expected result embedded in the firmware at the time of compilation. In this manner, the computing system improves availability, customization, and user control on firmware executing within the computing system and restoring firmware.

This invention relates to the field of mobile payment technology, specifically to a method for dynamically adjusting the password-free limit for mobile payments. The method includes the following steps: When a payment terminal initiates a payment request, it collects discrete data on the network environment, device unlocking method, SIM card status, system integrity, and application environment in real time to establish a device security state vector. This invention, by collecting data from multiple dimensions of the discrete states of the network environment, device unlocking method, SIM card status, system integrity, and application environment and constructing a security state vector, can structurally characterize device security before a transaction is initiated, capturing the security fluctuation characteristics during device operation. Using the security product decay value generated by the security state vector, and combined with the user-set maximum password-free limit benchmark value, a comprehensive device security score is output in the form of a non-linear function, achieving quantitative filtering of device trustworthiness before the limit calculation stage.

Embodiments described herein include a system, apparatus, article of manufacture, method and / or computer program product embodiments, and / or combinations and sub-combinations thereof, for delay-based physical unclonable functions (PUFs) for chiplets to verify system integrity. A die may include a plurality of chiplets including a first chiplet and a second chiplet. The first chiplet may be connected to the second chiplet via an interposer. As part of an authentication process, the first chiplet may request the second chiplet to transmit a signal via one or more wires of the interposer. A first signature based on the characteristics of the transmitted signal may be measured at a first time, which constitutes the first evaluation of the PUF. The first signature may be used as a baseline comparison for subsequent signatures as a means to confirm that the chiplets, interposers, and / or interconnects have not been altered or modified.

The invention discloses a digital equipment online leasing method and device based on security detection and user privacy protection, and the method specifically comprises the steps: enabling a platform to achieve the automatic recognition of an equipment Root behavior, system tampering and potential Trojan horse based on system integrity verification, hardware fingerprint verification and security policy model evaluation before equipment is delivered out of a warehouse; in the equipment returning process, the equipment returning link and state are recorded by combining equipment positioning, logistics track acquisition and returning photographing comparison means, and false returning and loss disputes are prevented; and after the equipment is returned, a data clearing mechanism and a data erasing verification mechanism are automatically triggered for the digital equipment returned by the user. The method has the characteristics of intelligence, automation and high security, effectively guarantees data privacy and asset security in digital leasing business, and is suitable for application scenes such as online equipment leasing platforms and intelligent terminal operation and maintenance systems.

Procedure for testing the system integrity of a self-service machine and thus the integrity of the self-service machine using a mobile device, comprising the following steps: - Transmitting digital information, which provides information about the system integrity, from the self-service machine to a central server and evaluating and storing the information together with identity information of the self-service machine on a data carrier; - Obtaining the identity information of the self-service machine through the mobile device; - Transmitting the identity information to the central server via the mobile device and querying the digital information from the self-service machine, which provides information about the system integrity; - Transmission of information allowing a statement about the system integrity from the central server to the mobile device; - Displaying information that allows a statement about system integrity on the mobile device.

Systems and methods for seamless network communication reconfiguration, comprising a device that includes physical media dependent (PMD) devices, incorporating a digital signal processor (DSP) configured to handle both in-band and out-of-band communication traffic, a plurality of primary analog crossbars connected to the DSPs for routing operational data, and a set of redundant analog crossbars configured to establish auxiliary communication channels. The system includes a controller operable to dynamically activate the auxiliary communication channels during reconfiguration events, enabling a make-before-break protocol by transitioning traffic from primary channels to auxiliary channels. The redundant crossbars support out-of-band signaling to coordinate transitions and maintain system integrity. The auxiliary channels remain in a low-power state during steady operation, ensuring resource efficiency, while the controller monitors signal integrity and initiates reconfiguration upon detecting a fault or network event, maintaining uninterrupted traffic flow.

The invention relates to a method for monitoring an integrity of a system by an monitoring system, comprising the steps of: Performing at least one hard constraint integrity check and depending on the hard constraint integrity check generating a Boolean value about the hard constraint integrity check by an electronic computing device of the monitoring system; Performing at least one soft constraint integrity check and depending on the soft constraint integrity check generating a floating P-value about the soft constraint integrity check by the electronic computing device; Generating a consensus value by rejecting outliers of the P-value and fusing non-outlier P-values to the consensus value by an estimator of the electronic computing device; and Monitoring the integrity depending on the Boolean value and the consensus value by the electronic computing device. Furthermore, the invention relates to a computer program product, as well as to a monitoring system.

A substation power transformer monitoring system having a transformer monitor that receives oil level signals, nitrogen flow rate signals, 52b breaker status signals, and valve actuator position signals, and then executes instructions based on those signals to determine when predefined radiator section isolation conditions are met. When the conditions are met, control signals are sent to valve actuators of the valves of each radiator section to close or open those valves based on the predefined radiator section isolation conditions, or based on remote manual commands, to isolate particular damaged radiator sections. Thus, the system can address terrorism and / or vandalism of a power transformer in a substation. If some radiator fins are shot or otherwise damaged, causing oil to flow out of the cooling system of the transformer, the system can quickly detect and isolate the leak to prevent further damage to the transformer, while also preventing a larger oil spill.

A constraint-driven trust state orchestration system intercepts proposed actions at execution boundaries prior to execution, deterministically evaluates trust states against constraints, enforces execution exclusively based on cryptographically verifiable qualification outcomes, and immutably records all decisions and outcomes to ensure consistency, auditability, reduced rollback costs, and improved system integrity across distributed decision networks.

The application discloses a kind of underground ultra-wideband system integrity threshold calculation method based on Gaussian mixture model, it is applicable to the new integrity evaluation system of underground large space.This method uses the hyperframe of Gaussian mixture model GMM to process the ultra-wideband ranging error sample based on TOA positioning, reflects the superiority of flexible Gaussian mixture model processing bimodal distribution, and fully considers the correlation between ranging error and distance under the environment of underground large space, introduces distance factor when establishing error model, clearly deduces the method for calculating protection level PL in position domain, continuously convolves double-component hyper GMM, obtains multi-component GMM, and the hyper nature still holds after convolution.This application solves the contradiction between traditional Gaussian hyper model and non-gaussian characteristic error under complex environment, tightens PL with small calculation cost, and improves system availability.

The invention discloses a seismic isolation system arrangement and standardized design method in the technical field of seismic isolation system design, the seismic isolation system arrangement comprises one or more rows of seismic isolation modules, each row of seismic isolation modules comprises more than one seismic isolation unit, and each seismic isolation unit comprises two seismic isolation devices and cross beams located on the seismic isolation devices; the method comprises the steps of obtaining a minimum installation threshold value of the shock isolation device, selecting a cross beam model, carrying out standardized design on the length of a cross beam according to the number of cabinets, carrying out standardized design on shock isolation units, determining the layout of the shock isolation units of the shock isolation system, constructing a force dispersing frame and the like. The method can be used for a multi-cabinet installation scene, the system design process is simplified under the condition that the bearing capacity, the shock isolation performance and the system integrity of the shock isolation system are guaranteed, the standardized design of the shock isolation system is achieved, the shock isolation system design is simpler and faster, and the shock isolation system application is safer.

Systems and methods for identifying session hijacking in computer networks and web applications. The systems / methods comprise a combination of algorithms and techniques that enable real-time detection and mitigation of unauthorized access to user sessions. The systems / methods provide a robust solution to safeguard user data and system integrity by proactively identifying and preventing session hijacking attempts. This is achieved by, first, collecting and storing TLS fingerprint components, using JA4, JA4H, and JA4L fingerprinting methods. Then the fingerprint components are analyzed and compared to previously stored fingerprint data that provide historical context to produce a context-based risk score. This risk score is provided to downstream applications for decision-making such as real-time session revoking, alerts, and security metrics.

The invention discloses an endogenous behavior constraint method and device for a dynamic physical system. The method comprises the following steps: fusing state confidence coefficients of a plurality of heterogeneous function units in a system in real time, and generating system integrity continuous scalar measurement; resolving the measurement into a dynamic constraint boundary parameter through a parameterized nonlinear mapping function; and the on-line instruction arbiter carries out optimized projection on the original instruction and outputs a safety instruction. Correspondingly, the invention provides a dynamic behavior constraint system which comprises a multi-source confidence fusion module, a nonlinear boundary mapping module and an online instruction arbitration module which are in communication connection in sequence. According to the method, security constraints are changed from dependence on external information into'endogenous attributes' derived from internal state evaluation, real-time, dynamic and non-linear adaptive adjustment of security boundaries is realized, the problem that a static model inevitably loses efficacy under system uncertainty is fundamentally solved, and a verifiable general technical framework is provided for meeting the requirement of'continuous security '.