10 results about "Token passing" patented technology

The invention provides a multi-ring state sensing communication network optimization method, relates to the field of industrial network communication, and solves the technical problems of communication uncertainty and insufficient system reliability caused by message conflicts in the prior art. The method comprises the following steps of: when a communication system is initialized, logically dividing a plurality of nodes into a plurality of data transmission rings by a centralized management node on a single physical bus, and initializing an annular frame for controlling a sending permission for each transmission ring; each node transmits a token based on the ring frame, and after the nodes in the ring obtain the token of the ring, the nodes obtain the bus sending authority, construct a data frame containing a target node address and send the data frame to the bus to perform data communication between the nodes; each node continuously detects communication states of adjacent nodes and a transmission ring through a heartbeat mechanism and a ring frame timeout mechanism; and automatically triggering a data ring reconstruction process and updating a token transmission path when detecting that the node fails, the node is added or the centralized management node is disconnected.

A building management system (BMS) includes building equipment operable to affect a physical state or condition of a building and a gateway device configured to couple to the building equipment via a wireless master slave / token passing (MS / TP) bus or a wired MS / TP bus. The gateway device is configured to communicate building data to a cloud-based platform including a hub configured to receive the building data, a plurality of cloud applications, wherein the plurality of cloud applications are configured to receive the building data from the hub and process the building data to provide a building data output. The cloud-based platform is configured to communicate the building data output to and receive a command based on the building data output from at least one of a control application, an analytic application, or a monitoring application. The gateway device is further configured to operate according to the command.

This invention provides a communication method, device, and system based on a CAN bus. The method includes: receiving a periodic start command broadcast by a master node; and, based on its topological position in the logical chain, executing the following transmission permission determination logic: if it is the first node in the logical chain, it determines that it has obtained bus transmission permission in response to the periodic start command; if it is not the first node, it listens in real time for token passing frames sent by predecessor nodes in the logical chain; within the communication period defined by the periodic start command, when it receives a token passing frame sent by a predecessor node, it determines that it has obtained bus transmission permission; within the obtained bus transmission permission, it sends service data to the CAN bus; after sending the service data, it broadcasts its own token passing frame containing the address of the next-hop successor node to pass the bus transmission permission to the successor nodes in the logical chain.

Methods provide device authentication for an intrusion detection system implementing building automation and control network (BACnet) Master-Slave / Token-Passing (MS / TP). An authentication protocol provides countermeasures to vulnerabilities in the BACnet MS / TP physical layer by utilizing an extended message format to cloak device identifiers (IDs). Adversaries are prevented from using known device IDs to gain access to the network. An authenticating device hashes a device identifier of a device to be authenticated combined with a random number. The authenticating device receives a hash of the random number plus the device identifier from the device. The authenticating device compares the hashes and authenticates the device if the hashes match. To transmit the hash, the BACnet MS / TP frame format includes an extended header cyclic redundancy check (CRC) field having bytes reallocated from the data field of the frame format. Another countermeasure utilizes a physical unclonable function (PUF) of the device in the extended header CRC.

A method of secure communication between a device and a computer program running on a server is disclosed. The method comprising the steps of: sending, from the device to the server, generic user identification information based on a current user account logged into on the device; identifying, by the server, the generic user identification information as corresponding to an allowed entity pre-registered with the server; sending, from the server to a remote management module, an identification token associated with the allowed entity, said remote management module having stored thereon a register of registered devices; running, by the remote management module, a remote action on the device using the stored register entry for that device, wherein the remote action passes the identification token to the device; sending, from the device to the server, the identification token; and allowing the device to access the computer program based at least in part on a match between the identification token sent by the server and the identification token received by the server from the device.

A computer system consists primarily of identical modular microcontroller units, interconnecting with one another in a three-dimensional lattice. During operation, each microcontroller communicates asynchronously by relying on token-passing between itself and its neighbors. Programming and construction of such microcontroller units occurs in one operation, through robotic pick-and-place operations that are configured through a graphical user interface. The graphical user interface includes simple drag and drop operations to facilitate a WYSIWYG depiction of the desired build and the final system. The design tools and automated assembly of the disclosed framework introduces system scalability and structural flexibility that are not available with existing supercomputing racks and chassis.

A login authorization method is applied to an authorization server, and includes: when a user logs in to a front-end application (app) installed on a user terminal, delivering an authorization credential to a background server of an H5 page in the front-end app in response to an authorization request sent on the H5 page; delivering a token to the background server in response to a token application request that carries the authorization credential and that is sent by the background server; and in response to user login information obtaining request that carries the token and that is sent by the background server, delivering user login information of the front-end app to the background server, wherein the background server completes login on the H5 page based on the user login information.

A device may queue a thread for execution by a thread pool, including configuring an ambient context with a cancellation token. Based on a call of a synchronous method by the thread, the device may determine that the thread uses a green threads model and identify the cancellation token from the ambient context. Based on the thread using the green threads model, the device may call an asynchronous method that uses an asynchronous operation to perform a task of the synchronous method, including passing the asynchronous method the cancellation token. Based on identifying a state change of the cancellation token, the device may terminate the asynchronous operation.

Methods provide device authentication for an intrusion detection system implementing building automation and control network (BACnet) Master-Slave / Token-Passing (MS / TP). An authentication protocol provides countermeasures to vulnerabilities in the BACnet MS / TP physical layer by utilizing an extended message format to cloak device identifiers (IDs). Adversaries are prevented from using known device IDs to gain access to the network. An authenticating device hashes a device identifier of a device to be authenticated combined with a random number. The authenticating device receives a hash of the random number plus the device identifier from the device. The authenticating device compares the hashes and authenticates the device if the hashes match. To transmit the hash, the BACnet MS / TP frame format includes an extended header cyclic redundancy check (CRC) field having bytes reallocated from the data field of the frame format. Another countermeasure utilizes a physical unclonable function (PUF) of the device in the extended header CRC.

The invention discloses a network security management method, system and device based on an array server and a storage medium, and the method comprises the steps: enabling a client device to be connected to a corresponding computing node, obtaining the login information of a client through a BMC system, and constructing a protocol text token based on the login information, the format of the protocol text token comprises a function type, a timestamp, an IP address, an on-off state and a verification value, the IP address is the IP address of the client equipment, then the protocol text token is transmitted to a corresponding computing node, the computing node performs timing verification on the protocol text token, the client equipment after successful verification is allowed to be accessed, and the protocol text token is transmitted to the corresponding computing node. The black list and the white list of the client equipment ip are precisely controlled through the self-defined protocol text token, and the attack surface of the computing unit board card in an open network environment is effectively reduced, so that the security protection capability of the computing unit board card is remarkably improved.