43 results about "System integrity" patented technology

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

Methods, systems, and computer storage media for providing brand-focused security administration in an item listing system are described. Using a brand-focused machine learning model, the brand-focused security administrator engine supports generating different comprehensive reports and analytics on brand-related security metrics, including brand compliance rates, infringement incidents, enforcement actions taken, and overall item listing system integrity. The brand-focused security administrator engine also supports visualizing the brand-focused security analytics results data in a manner that enhances usability and decision-making by presenting complex brand-focused security analytics results data in a clear, actionable format. In operation, brand-focused security data is accessed. The brand-focused security data is analyzed using a brand-focused machine learning model that is trained based on a multi-dimensional authenticity analysis dataset. Brand-focused security analytics results data is generated. The brand-focused security analytics results data is communicated to cause display of one or more visualizations based on the brand-focused security analytics results data.

The invention relates to the technical field of mobile payment, in particular to a dynamic adjustment method for a mobile payment password-free limit, which comprises the following steps: when a payment terminal initiates a payment request, acquiring a network environment, an equipment unlocking mode, an SIM card state, system integrity and a discrete state of an application environment in real time, and establishing an equipment security state vector; according to the invention, multi-dimensional acquisition is carried out on the network environment, the equipment unlocking mode, the SIM card state, the system integrity and the discrete state of the application environment, and the security state vector is constructed, so that the equipment security can be subjected to structured description before the transaction is initiated, and the security fluctuation characteristics during the operation of the equipment are captured; by means of a security product attenuation value generated by a security state vector and in combination with a highest password-free quota reference value set by a user, a comprehensive equipment security score is output in a nonlinear function form, and quantitative filtering of equipment credibility is realized in a previous stage of quota calculation.

The invention discloses a large model security evaluation method based on multi-dimensional adversarial attack, and the method comprises the steps: generating an adversarial sample sequence through constructing multi-dimensional attack scene description and combining the characteristics of data availability damage and system integrity violation, optimizing sample parameters in a black box attack mode, and precisely positioning a weak link of a model. And meanwhile, based on a risk quantized value sequence and a safety portrait mechanism, reinforcing demand data is extracted and a protection path is generated through reverse optimization, and finally, the protection capability of the model is remarkably improved. Through a closed-loop mechanism of scene generation, sample optimization and risk assessment, a complex attack environment is effectively dealt with, and the safety and stability of the system are guaranteed.

This invention discloses a method for measuring the integrity of a spaceborne embedded system based on link symbol topology. In the static injection phase, a linker script is configured to inject symbols at critical memory segment boundaries, generating hierarchical hybrid fingerprints and redundantly persisting them to non-volatile storage. In the dynamic verification phase, a lightweight program is started before the operating system takes over, performing hierarchical dual-dimensional and SEU-resistant temporal redundancy verification, supporting multi-container dedicated isolation verification. In the linkage blocking phase, anomalies are forcibly blocked and primary / backup linkage is triggered, collecting eight types of fault contexts and supporting on-orbit updates. This invention solves the problems of traditional hash methods failing to detect layout anomalies and high time consumption, reducing complexity to O(K), achieving sub-millisecond-level measurement decoupled from image volume, adapting to spaceborne radiation-resistant, cloud-native, and redundancy scenarios, and meeting the high reliability requirements of aerospace.

The invention relates to a method for updating software of a target component of a security-critical system (SYS), the security-critical system (SYS) comprising a maintenance management component (MDM), a central authorization unit (A) and at least one persistently authorizable target component (TC-A, TC-B, TC-C), the initial system configuration comprises a first combination of target components and the target system configuration comprises a second combination of target components, having the following method steps: a) an external maintenance mechanism (M) requests an update to the system configuration; b) the authorization unit (A) transitions from a state "inactive" to a state "update"; c) informing the continuously authorized target component (TC-A, TC-B, TC-C) of the update to be made; d) the authorization unit (A) performs a system integrity pre-check and triggers a first state change and a version check of the persistently authorizable target component (TC-A, TC-B, TC-C); e) the continuously authorized target component (TC-A, TC-B, TC-C) performs a version check and if necessary a version update and notifies the authorization unit (A) of the result; f) the authorization unit (A) performs a system integrity check and triggers a second state transition of the continuously authorizable target component (TC-A, TC-B, TC-C) if the system integrity check has succeeded; g) the authorization unit (A) changes from the state "update" to the state "inactive".

The invention provides a GNSS train positioning method and system based on a two-out-of-three redundant structure, and belongs to the technical field of train navigation positioning. GNSS original observation data are independently received, and positioning fusion calculation and map matching processing are executed; performing multi-layer consistency judgment on GNSS original observation data of three channels, fusion positioning coordinates and map matching results; and on the basis of consistency judgment, outputting a final positioning result or an alarm abnormal state by adopting a majority voting mechanism. The method can effectively improve the positioning reliability and fault-tolerant capability of the GNSS train positioning system in a complex environment, has high system integrity and safety, and is suitable for a train positioning scene with a high safety level requirement.

Systems and methods for mathematical modeling of the hardware and software stack of commodity computer platforms are provided, enabling provable guarantees on memory, device, and program execution. This approach addresses the technical problem of reliance on system agents that rely on implicit trust in the operating environment, which can be exploited by sophisticated attackers using complex threats such as memory access exploits and code / data integrity exploits. The solution provides a proactive, mathematically-backed security solution that eliminates entire classes of cyberattacks by design, ensuring realizable guarantees on commodity computer platforms running hardware and software stack elements at the lowest operating level. This approach has significant advantages over current reactive cybersecurity methods, including reduced complexity and overhead, and increased confidence in the integrity of the system. The solution's main uses include providing mathematically-backed security and availability guarantees for critical infrastructure, financial institutions, and other organizations vulnerable to cyberattacks.

The application discloses an intelligent perception anchor rod system and a supporting state dynamic evaluation method, belongs to the technical field of underground engineering safety monitoring, and relates to the technical field of underground engineering safety monitoring.The system comprises a multi-physical perception unit, a power module, an edge processing and communication module and a data processing terminal.The multi-physical perception unit comprises a thermal pulse sensor, a three-dimensional stress perception unit and a distributed optical fiber acoustic wave sensor which are integrated in a hollow anchor rod body; the power module and the edge processing and communication module are installed in the inner cavity of the hollow anchor rod body; and the data processing terminal is installed in a roadway sidewall or a chamber and is connected with the edge processing and communication module in a wireless communication mode.The method comprises the following steps: a heterogeneous sensor array is synchronously triggered and collected; on-orbit demodulation and feature compression are carried out; a grouting body spatial form and thermal physical property evolution is reconstructed; an anchor rod axial force field and a transverse supporting stress field are reconstructed; an anchoring system integrity index is calculated; a surrounding rock and supporting structure interaction stability index is calculated; and multi-level early warning triggering and decision output are carried out.The application can realize synchronous perception of multi-source information, dynamic and accurate diagnosis of a supporting state and multi-level early warning.

This invention relates to the field of mobile payment technology, specifically to a method for dynamically adjusting the password-free limit for mobile payments. The method includes the following steps: When a payment terminal initiates a payment request, it collects discrete data on the network environment, device unlocking method, SIM card status, system integrity, and application environment in real time to establish a device security state vector. This invention, by collecting data from multiple dimensions of the discrete states of the network environment, device unlocking method, SIM card status, system integrity, and application environment and constructing a security state vector, can structurally characterize device security before a transaction is initiated, capturing the security fluctuation characteristics during device operation. Using the security product decay value generated by the security state vector, and combined with the user-set maximum password-free limit benchmark value, a comprehensive device security score is output in the form of a non-linear function, achieving quantitative filtering of device trustworthiness before the limit calculation stage.

Embodiments described herein include a system, apparatus, article of manufacture, method and / or computer program product embodiments, and / or combinations and sub-combinations thereof, for delay-based physical unclonable functions (PUFs) for chiplets to verify system integrity. A die may include a plurality of chiplets including a first chiplet and a second chiplet. The first chiplet may be connected to the second chiplet via an interposer. As part of an authentication process, the first chiplet may request the second chiplet to transmit a signal via one or more wires of the interposer. A first signature based on the characteristics of the transmitted signal may be measured at a first time, which constitutes the first evaluation of the PUF. The first signature may be used as a baseline comparison for subsequent signatures as a means to confirm that the chiplets, interposers, and / or interconnects have not been altered or modified.

The invention discloses a digital equipment online leasing method and device based on security detection and user privacy protection, and the method specifically comprises the steps: enabling a platform to achieve the automatic recognition of an equipment Root behavior, system tampering and potential Trojan horse based on system integrity verification, hardware fingerprint verification and security policy model evaluation before equipment is delivered out of a warehouse; in the equipment returning process, the equipment returning link and state are recorded by combining equipment positioning, logistics track acquisition and returning photographing comparison means, and false returning and loss disputes are prevented; and after the equipment is returned, a data clearing mechanism and a data erasing verification mechanism are automatically triggered for the digital equipment returned by the user. The method has the characteristics of intelligence, automation and high security, effectively guarantees data privacy and asset security in digital leasing business, and is suitable for application scenes such as online equipment leasing platforms and intelligent terminal operation and maintenance systems.

Procedure for testing the system integrity of a self-service machine and thus the integrity of the self-service machine using a mobile device, comprising the following steps: - Transmitting digital information, which provides information about the system integrity, from the self-service machine to a central server and evaluating and storing the information together with identity information of the self-service machine on a data carrier; - Obtaining the identity information of the self-service machine through the mobile device; - Transmitting the identity information to the central server via the mobile device and querying the digital information from the self-service machine, which provides information about the system integrity; - Transmission of information allowing a statement about the system integrity from the central server to the mobile device; - Displaying information that allows a statement about system integrity on the mobile device.

Systems and methods for seamless network communication reconfiguration, comprising a device that includes physical media dependent (PMD) devices, incorporating a digital signal processor (DSP) configured to handle both in-band and out-of-band communication traffic, a plurality of primary analog crossbars connected to the DSPs for routing operational data, and a set of redundant analog crossbars configured to establish auxiliary communication channels. The system includes a controller operable to dynamically activate the auxiliary communication channels during reconfiguration events, enabling a make-before-break protocol by transitioning traffic from primary channels to auxiliary channels. The redundant crossbars support out-of-band signaling to coordinate transitions and maintain system integrity. The auxiliary channels remain in a low-power state during steady operation, ensuring resource efficiency, while the controller monitors signal integrity and initiates reconfiguration upon detecting a fault or network event, maintaining uninterrupted traffic flow.

The invention relates to a method for monitoring an integrity of a system by an monitoring system, comprising the steps of: Performing at least one hard constraint integrity check and depending on the hard constraint integrity check generating a Boolean value about the hard constraint integrity check by an electronic computing device of the monitoring system; Performing at least one soft constraint integrity check and depending on the soft constraint integrity check generating a floating P-value about the soft constraint integrity check by the electronic computing device; Generating a consensus value by rejecting outliers of the P-value and fusing non-outlier P-values to the consensus value by an estimator of the electronic computing device; and Monitoring the integrity depending on the Boolean value and the consensus value by the electronic computing device. Furthermore, the invention relates to a computer program product, as well as to a monitoring system.

A substation power transformer monitoring system having a transformer monitor that receives oil level signals, nitrogen flow rate signals, 52b breaker status signals, and valve actuator position signals, and then executes instructions based on those signals to determine when predefined radiator section isolation conditions are met. When the conditions are met, control signals are sent to valve actuators of the valves of each radiator section to close or open those valves based on the predefined radiator section isolation conditions, or based on remote manual commands, to isolate particular damaged radiator sections. Thus, the system can address terrorism and / or vandalism of a power transformer in a substation. If some radiator fins are shot or otherwise damaged, causing oil to flow out of the cooling system of the transformer, the system can quickly detect and isolate the leak to prevent further damage to the transformer, while also preventing a larger oil spill.

A constraint-driven trust state orchestration system intercepts proposed actions at execution boundaries prior to execution, deterministically evaluates trust states against constraints, enforces execution exclusively based on cryptographically verifiable qualification outcomes, and immutably records all decisions and outcomes to ensure consistency, auditability, reduced rollback costs, and improved system integrity across distributed decision networks.

The application discloses a kind of underground ultra-wideband system integrity threshold calculation method based on Gaussian mixture model, it is applicable to the new integrity evaluation system of underground large space.This method uses the hyperframe of Gaussian mixture model GMM to process the ultra-wideband ranging error sample based on TOA positioning, reflects the superiority of flexible Gaussian mixture model processing bimodal distribution, and fully considers the correlation between ranging error and distance under the environment of underground large space, introduces distance factor when establishing error model, clearly deduces the method for calculating protection level PL in position domain, continuously convolves double-component hyper GMM, obtains multi-component GMM, and the hyper nature still holds after convolution.This application solves the contradiction between traditional Gaussian hyper model and non-gaussian characteristic error under complex environment, tightens PL with small calculation cost, and improves system availability.

The invention discloses a seismic isolation system arrangement and standardized design method in the technical field of seismic isolation system design, the seismic isolation system arrangement comprises one or more rows of seismic isolation modules, each row of seismic isolation modules comprises more than one seismic isolation unit, and each seismic isolation unit comprises two seismic isolation devices and cross beams located on the seismic isolation devices; the method comprises the steps of obtaining a minimum installation threshold value of the shock isolation device, selecting a cross beam model, carrying out standardized design on the length of a cross beam according to the number of cabinets, carrying out standardized design on shock isolation units, determining the layout of the shock isolation units of the shock isolation system, constructing a force dispersing frame and the like. The method can be used for a multi-cabinet installation scene, the system design process is simplified under the condition that the bearing capacity, the shock isolation performance and the system integrity of the shock isolation system are guaranteed, the standardized design of the shock isolation system is achieved, the shock isolation system design is simpler and faster, and the shock isolation system application is safer.

The invention discloses an endogenous behavior constraint method and device for a dynamic physical system. The method comprises the following steps: fusing state confidence coefficients of a plurality of heterogeneous function units in a system in real time, and generating system integrity continuous scalar measurement; resolving the measurement into a dynamic constraint boundary parameter through a parameterized nonlinear mapping function; and the on-line instruction arbiter carries out optimized projection on the original instruction and outputs a safety instruction. Correspondingly, the invention provides a dynamic behavior constraint system which comprises a multi-source confidence fusion module, a nonlinear boundary mapping module and an online instruction arbitration module which are in communication connection in sequence. According to the method, security constraints are changed from dependence on external information into'endogenous attributes' derived from internal state evaluation, real-time, dynamic and non-linear adaptive adjustment of security boundaries is realized, the problem that a static model inevitably loses efficacy under system uncertainty is fundamentally solved, and a verifiable general technical framework is provided for meeting the requirement of'continuous security '.

A security system and method implements proactive defense through host operating system isolation and virtualization. The security system and method include a host computer running a host operating system and multiple hosted virtual machines that serve as intermediate connections to isolate the host operating system from external networks. The virtual machines systematically back up data to cloud services having indirect connections to the host computer. An internal virtual private network interconnects the virtual machines, with a designated virtual machine serving as a network gateway to manage traffic flow. A secure controller within the host computer functions as a bridge between user applications and the host operating system, enforcing security protocols and managing core operations to ensure system integrity. The secure controller manages interactions between the virtual machines and cloud services, providing security measures while maintaining operational efficiency through parallel processing architecture.

A monitoring system for a system, may comprise: thickness sensors and vibration sensors disposed on the monitored system, controller processors coupled to the sensors to receive and geo-tag sensor data, communication devices for transmitting geo-tagged data, a communication device receiving the geo-tagged data, and servers to analyze the data from the sensors to determine, e.g., element thickness and / or vibration producing events, and to compare same to standardized exception data therefor; wherein when an exception exists, to generate and communicate an alert therefrom via a display, a human interface device and / or the communication device of the central facility. Additional sensors such as temperature sensors, strain gages, flow sensors, leak sensors and / or other sensors may also be disposed on the system, and data therefrom processed to determine exceptions.

The application provides a kind of intelligent question and answer method, device, equipment and medium, it is related to computer technical field, the method includes: to multiple source data executes pre-processing, and based on the multiple source data of pre-processing adopts multi-level attention mechanism to build knowledge representation;Based on the intention modeling of attention guide, the intention of user question is parsed, and the intention of user question parsed is matched with knowledge representation;Based on the knowledge retrieval of user question intention and knowledge representation matched, by semantic compression and index strategy, output corresponding target answer with user question.The application can realize knowledge dynamic incremental update, cross unit semantic association, multi-modal deep fusion, accurate understanding of intention, improve the integrity, coherence and accuracy of intelligent question and answer system.

The application discloses a kind of drive-by-wire steering control method, system, electronic equipment and medium, the scheme includes: by obtaining system fault code, system fault code is analyzed, determines first fault information;First fault information is matched with preset fault relationship, to determine second fault information;Second fault information includes fault state information, system integrity information, steering function information and feedback function information;According to the state of the current drive-by-wire steering system determined by second fault information, corresponding control operation is executed when drive-by-wire steering fails;Different faults of drive-by-wire steering system are set to corresponding control operation, and the corresponding control operation of the fault is executed when the drive-by-wire steering system fails, to control the different faults of drive-by-wire steering, reduce the risk of damage caused by system failure, improve driving safety.The application embodiment can be widely applied to vehicle steering control technical field.

The invention relates to a monitoring system (1) for checking the integrity of a reconfigurable system (2), the reconfigurable system (2) having a plurality of components (21), the monitoring system (1) having: a receiving unit designed to receive a plurality of data sets, wherein each data set (23) of the plurality of data sets originates from one component (21) of the plurality of components of the reconfigurable system (2), wherein each data set (23) of the plurality of data sets describes, by means of change information, at least one configuration change occurring on a respective one of the plurality of components (21) of the reconfigurable system (2), the change information respectively specifying a type of the at least one configuration change occurring; a checking unit configured to check the permissibility of the correspondingly occurring configuration change on the basis of the change information; and an output unit configured to output according to a result of the inspection. Furthermore, the invention relates to a superordinate system and an associated method.

The present disclosure generally relates to systems and methods for fault detection and management in power network connections. An autonomy computing system analyzes test signals to identify cable conditions and decides on actions based on a fault database. Additionally, a power management system, equipped with a processor, monitors power networks, evaluates fault severity, and implements remedial actions to ensure system integrity. A method for detecting power network faults involves transmitting test signals, assessing signal degradation, and initiating appropriate responses to maintain the operation of autonomy systems. These innovations enhance the reliability and efficiency of power network management.

The present invention provides a testing method for the boundaries of a secure database cryptographic module, comprising: installing cryptographic card hardware and verifying its compatibility, including authority management, key performance, and random number primality testing; using the M1 algorithm and SM3 checksum combination to verify data security for storage encryption testing; establishing an encrypted channel through the SSL protocol and implementing a dual-session test for communication encryption verification; performing identity authentication verification based on a comparison between a hash-encrypted password and a database table field; using the SM3 digest algorithm and the SM2 signature algorithm for multi-level protection verification for system integrity testing; and verifying basic database functions through functional regression testing and performance monitoring tools. The present invention has the following beneficial effects: through a hierarchical strategy of hardware compatibility verification, cryptographic module function decoupling testing, and independent testing of non-cryptographic modules, precise isolation and verification of security functions and business functions is achieved, providing a systematic testing solution for database deployment in high-security scenarios.

A system and method for secure execution of proprietary algorithms and secure communication between a secure enclave and a GPU, particularly suited for protecting sensitive data in Large Language Model (LLM) marketplaces. The system employs a trusted environment with an SGX enclave, a library operating system (LibOS), and a trusted initialization component to manage encrypted communication. A novel re-encryption process, performed in a separate execution context, further enhances security. The method involves establishing a virtualized connection, intercepting communications, encrypting data, and requesting re-encryption before GPU processing. A chained attestation strategy, with the GPU, trusted initialization component, and SGX enclave attesting to each other, ensures system integrity. This architecture protects models and data from unauthorized access, enabling secure GPU-accelerated computing while maintaining confidentiality and trustworthiness, promoting secure data processing in LLM marketplaces and various computing environments.

The invention discloses a flexible simulation agent configuration software implementation method and device, and belongs to the technical field of simulation system information interaction. Through a three-level visual interface of a communication protocol parameter configuration module, a simulation resource protocol packaging module and a simulation agent protocol configuration module, protocol definition, resource input / output protocol packaging and agent data interaction relation generation are completed in sequence, and automatic conversion and flexible adaptation of data protocols among heterogeneous simulation resources are achieved. Compared with the traditional method for customizing and developing agent software for each type of resources, the method has the advantages that programming is replaced by configuration, dynamic generation and multiplexing of parameters, protocols and agent levels are supported, the joint test preparation period is remarkably shortened, the system universality, adaptability and maintainability are improved, and the system development cost is reduced. Interconnection and intercommunication of cross-domain and cross-level simulation resources can be rapidly completed on the premise that the integrity of an original system is kept.