188 results about "Transmission security" patented technology

The invention belongs to the technical field of cross-border data security, and provides a cross-border personal data transmission security detection method and system based on differential privacy, and the method comprises the steps of multi-dimensional situation awareness, privacy budget allocation, interpretability and audit, and execution and response. By synchronously sensing technical environment risks, multi-national regulation constraints and multi-modal data features, comprehensive control of the cross-border transmission security situation is realized, and one-sidedness of single-dimensional sensing is avoided; privacy budget is dynamically allocated under multiple constraints based on a deep Q network algorithm, so that the protection intensity of high-sensitivity data is ensured, and excessive loss of effectiveness of low-sensitivity data is avoided; an interpretable report is generated in combination with causal analysis, full-process evidence storage is realized by relying on an alliance chain, the problems of decision black box and audit tracing are solved, cross-border supervision requirements are met, and the balance of cross-border transmission in the aspects of safety, compliance and availability is improved.

The invention provides a distributed photovoltaic data acquisition method and device based on adaptive encryption communication and multi-link redundancy, and the method comprises the steps: collecting real-time power generation data, equipment state data and environment parameters of a photovoltaic system through a multi-source sensor, and forming original data; an MQTT over TLS adaptive encryption communication protocol is adopted to perform end-to-end encryption on original data, and dynamic key management is combined to ensure transmission security; based on a dynamic link selection algorithm, encrypted data is transmitted to a power master station through 4G and LoRaWAN double-link redundancy, so that the transmission reliability is improved; and the master station side decrypts the data and then integrates the data to a database to support power grid dispatching and predictive analysis. According to the invention, the problems of safety and reliability in distributed photovoltaic data acquisition are solved, and the method is suitable for a smart power grid monitoring scene with high reliability and high real-time performance requirements.

The invention provides a TBOX-based vehicle fault diagnosis system, which is characterized in that a TBOX is installed in a vehicle and is used for acquiring vehicle data and judging whether the vehicle has a fault based on the vehicle data, and when the vehicle has the fault, the TBOX enters a diagnosis and maintenance mode, and the diagnosis and maintenance mode comprises a field diagnosis mode and a remote diagnosis mode; the diagnosis end is used for establishing a data communication channel with the TBOX in a diagnosis maintenance mode; and the TBOX is also used for transmitting the vehicle fault data to the diagnosis end through the data communication channel, receiving a vehicle configuration instruction issued by the diagnosis end, and issuing the vehicle configuration instruction to a target ECU unit of the vehicle to realize vehicle fault diagnosis full-link diagnosis operation. According to the scheme, a traditional fault diagnosis instrument is omitted, hardware cost of vehicle service diagnosis is reduced, usability and convenience of vehicle diagnosis are provided, and transmission safety and reliability between the TBOX and a platform or a terminal are guaranteed through a self-developed data transmission protocol.

The invention discloses a shipborne communication data encryption transmission method and system based on a satellite 5G fusion network, and relates to the technical field of satellite communication encryption. Data classification and priority division: dividing the data into five types of navigation instructions according to service types, marking P1-P4 priorities, and adding information; encryption strategy selection: adding random salt values by using algorithms such as hybrid encryption, AES, DES, TEA and the like according to priorities; network routing is fused, satellite and 5G state parameters are collected, and paths are selected according to priorities; real-time encryption transmission, fragmentation and information addition are carried out, FEC is used for satellites, and HARQ is used for 5G; the transmission state is monitored and dynamically adjusted, and the parameters are synchronously encrypted during over-limit time adjustment and switching; decrypting and verifying, namely decrypting and verifying after verifying and recombining; secret key updating management, life cycle setting, KDC distribution and emergency updating are carried out. According to the method, the shipborne data transmission security and network adaptability are improved, the encryption efficiency and continuity are optimized, the cost is reduced, multiple scenes are adapted, and the security and high efficiency of maritime communication are ensured.

The invention relates to the field of mine wireless communication security, and discloses a wireless instruction encryption method and system for mining intrinsic safety type equipment. The method comprises the following steps: collecting historical mine environment data and extracting features to obtain characterization environment description; constructing a nonlinear mapping function of the multipath propagation characteristic and the interference degree of the signal; collecting current environment data to calibrate the nonlinear mapping function to obtain a calibrated model; obtaining an encryption strength prediction value based on the current environment data in combination with the calibrated model; if the predicted value is lower than the encryption strength threshold value, key parameters are adjusted to generate optimized encryption configuration; based on the configuration, a support vector machine is adopted to classify the dynamic environment data, an interference area is divided, and an adjustment coefficient of the interference area is determined; and adjusting the encryption parameter in real time according to the coefficient to obtain an encryption strength adjustment scheme matched with the actual demand. According to the method, the problem that the wireless instruction encryption strength is not matched in a complex mine environment is solved, and the wireless instruction transmission safety and adaptability are improved.

The invention discloses a remote communication method for a surgical robot, a storage medium and a program product, and the method comprises the steps: receiving first control data sent by a remote control end which carries out the remote control of the surgical robot in response to the starting of a remote mode; wherein the first control data is obtained by encrypting original control data by the remote control end by adopting a preset encryption algorithm; the preset encryption algorithm comprises a symmetric encryption algorithm and / or an asymmetric encryption algorithm; decrypting the first control data by adopting a target decryption algorithm corresponding to the preset encryption algorithm to obtain second control data, and determining a target response mode of the surgical robot for the second control data according to the second control data and preset control logic; wherein the preset control logic at least comprises the adjustment logic of the working state of the surgical robot, so that the transmission safety of the remote surgical data and the operation safety of the surgical robot are improved.

The embodiment of the invention discloses an energy storage control system information transmission and index evaluation method and system. The method comprises the following steps: acquiring signal data of a lower computer of a hydropower station unit and transmitting the signal data to a remote centralized control target center; obtaining the integrity of unit lower computer signal data received by the target center; obtaining the availability of unit lower computer signal data received by the target center; acquiring the transmission safety of the acquired hydropower station unit lower computer signal data to a target center; and based on integrity, availability and transmission security, determining evaluation information of the acquired hydropower station unit lower computer signal data. According to the method, by comprehensively considering integrity, usability and safety, powerful support can be provided for a remote centralized control operation on-duty mode, an operator can accurately monitor the operation state of a unit in a remote centralized control center in real time and perform remote operation and control, centralized management and optimal scheduling of a hydropower station are achieved, and the production efficiency and the management level are improved.

The invention discloses a sensitive information secure transmission system, which comprises an information sending end and an information receiving end, and is characterized in that after receiving an original image and sensitive information, the information sending end generates a secret-containing carrier image through multi-scale frequency domain decomposition, sensitive information encryption scattering embedding, wavelet inverse transformation reconstruction and dual-channel processing architecture processing and sends the secret-containing carrier image; and the information receiving end extracts the encrypted sensitive information after receiving the encrypted carrier image, and analyzes and outputs the sensitive information after three-level integrity verification. According to the system, the defects of limited information hiding capacity, weak anti-interference capability, unreliable integrity detection and difficulty in self-adaption of an embedding strategy in the prior art can be overcome, high-density embedding of sensitive information, strong anti-interference performance, complete protection and self-adaption of the embedding strategy are realized, and visual concealment, image quality and transmission safety are balanced.

The invention provides a code execution method and device, electronic equipment and a storage medium, relates to the technical field of computers, and is used for improving response speed, code transmission safety and concurrency performance and stability of a sandbox system, effectively multiplexing process resources and reducing resource overhead. The method comprises the following steps: in a sandbox system starting stage, creating and initializing a sandbox process pool for operating environments of different programming languages according to predefined process parameters; preheating the process in an initialization stage of the sandbox system; after a code execution request is received each time, distributing a target sandbox process from a corresponding sandbox process pool according to the target programming language type; the code to be executed is encrypted and transmitted to the target sandbox process, decryption is carried out in the isolation environment of the target sandbox process, and code execution and execution result asynchronous return are carried out; and before the target sandbox process is returned, performing health check on the target sandbox process, and determining to destroy or recycle the target sandbox process to the corresponding sandbox process pool for reuse.

The invention relates to the technical field of secret-related electronic file transmission and management, and discloses a secret-related electronic file secret transmission safety management system which comprises a safety management system. The security management system comprises a hardware security support layer, a distributed security storage layer, a file full life cycle security management layer, a user identity authentication and behavior auditing layer, a security auditing layer and an emergency response layer. The confidential electronic file secret transmission security management system integrates a trusted computing chip, security boot firmware, a physical unclonable function (PUF) and an optical isolation technology through a hardware security support layer, is different from a traditional system which only depends on software protection, constructs a trusted execution environment from a hardware bottom layer, guarantees the operation credibility by using the trusted computing chip, and improves the security of the confidential electronic file. The secure boot firmware blocks illegal program loading, the PUF endows the hardware with a unique uncounterfeited identity, and the optical isolation realizes physical level network isolation, so that threats such as hardware tampering and physical attacks are radically defended.

The invention discloses an electric vehicle charging pile data encryption processing method, a storage medium and electronic equipment. The method comprises the following steps: acquiring multiple pieces of electric vehicle charging pile data; based on the multiple pieces of electric vehicle charging pile data, sensitivity corresponding to the multiple attributes is determined; determining a plurality of sensitive attributes from the plurality of attributes based on the sensitivities corresponding to the plurality of attributes; determining sensitive levels corresponding to the plurality of sensitive attributes; based on the sensitive levels corresponding to the sensitive attributes, determining encryption strategies corresponding to the sensitive attributes; and according to encryption strategies corresponding to the sensitive attributes, encrypting corresponding attribute values in the plurality of pieces of electric vehicle charging pile data to obtain a plurality of pieces of encrypted charging pile data, and sending the plurality of pieces of encrypted charging pile data to a main server. According to the invention, the technical problem of low sensitive data transmission safety of the electric vehicle charging pile data in the prior art is solved.

The invention provides a method and device for transmitting financial management service files based on a block chain, and relates to the technical field of file transmission. The method comprises the following steps: a sender puts a financial business file in a shared medium, instructs a file sending processing system to obtain the file from the shared medium, and analyzes and verifies the file to obtain transaction data; and then calling the smart contract to link the transaction data, and finally feeding back a link result to the sender. And a receiver monitors the block data through the long connection, analyzes and verifies the block data to obtain multiple transaction data when new block data is monitored, processes each transaction through a file receiving and processing system, generates file data and places the file data in a shared medium. And then notifying a receiver to obtain the file from the shared medium and processing the file according to the service logic. According to the invention, the transmission security and timeliness of the financial business file are improved, and safe, efficient, timely, accurate and flexible file transmission can be realized.

The invention relates to the technical field of data transmission, in particular to an unmanned equipment data encryption transmission method based on a block chain, which specifically comprises the following steps: dividing an unmanned equipment communication network into a plurality of areas according to communication links, and predicting a data transmission path of each unit area in the next communication period; comparing to obtain a first safety evaluation factor and a second safety evaluation factor; extracting a channel interference level, evaluating an electromagnetic environment fluctuation effect in real time, dynamically predicting an encryption key updating demand, and deducing a third security evaluation factor through the key updating demand; establishing a data encryption transmission security level prediction model, and predicting and outputting a security level estimated value of data transmission in a next communication time period; and comparing the security level predicted value of data transmission in the next communication period with the actual security level measured value to determine whether to trigger a security abnormality warning. The problem that in the prior art, an unmanned equipment data encryption transmission technology needs to be further improved in the aspects of high efficiency, self-adaptability and safety is solved.

The invention relates to the technical field of HDMI (High Definition Multimedia Interface) transmission, and provides an HDMI one-way transmission security enhancement method and device, and the method comprises the steps: determining the version, interface type and pin serial number and definition of an HDMI used in an application scene, and identifying whether an HDMI transmission channel is a one-way channel or a two-way channel; for a bidirectional channel which is not needed in an application scene, one-way transmission security enhancement is realized by adopting a physical cutting mode; for a bidirectional channel required by an application scene, one-way transmission security enhancement is realized by adopting a physical cutting-off and receiving end simulation substitution mode; for a one-way channel, a signal amplifier is adopted to realize one-way transmission security enhancement. According to the invention, unidirectional transmission security enhancement can be carried out on the HDMI native interface, so that the HDMI native interface has a pure unidirectional transmission characteristic, security risks such as sensitive data leakage of a receiving end are blocked, and the unidirectional transmission security of the HDMI is improved. Moreover, the system is improved based on a native interface, and has the advantages of low power consumption, small size, low cost and the like.

This invention discloses a method, apparatus, and medium for processing secure network elements, applicable to the field of computer technology. Utilizing the characteristic of north-south traffic data passing through routers, the corresponding packet data is parsed to obtain address data. When the address data meets the preset conditions of policy-based routing, policy-based routing is used to guide north-south traffic into a predetermined secure service chain. This secure service chain is determined by the address data, the secure network element address data corresponding to the policy-based routing, and the single / dual-arm mode. After processing by the secure network elements in the secure service chain, the traffic is forwarded to the external network. Alternatively, traffic entering the cloud platform from the external network also undergoes processing by the secure network elements in the secure service chain, allowing for a customizable network element arrangement order. This saves labor costs, reduces the complexity of secure network element processing and arrangement, and simultaneously improves data transmission security.

The invention discloses a remote key security management method and device for a cloud virtualization cryptographic module, and aims to solve the problems of cloud key trust root, transmission security and the like. The core of the method is to keep the master key control right of a user locally, and through cooperative work of a local client, a cloud management platform and a distributed vHSM instance, through the four steps of system initialization and key fragmentation distribution, remote certification and secure channel establishment, distributed cooperative operation and local result synthesis, and by utilizing IBE, Shamir secret sharing, a threshold cryptographic algorithm and TEE technologies, the user master key control right and the distributed vHSM instance are subjected to remote certification and secure channel establishment, distributed cooperative operation and local result synthesis. And the key is available and invisible. The device comprises three modules, namely a local client, a cloud management platform and a vHSM cluster. The method guarantees secret key confidentiality and completeness, supports a national secret algorithm, meets compliance requirements, adapts to cloud native elasticity requirements, and is suitable for cloud secret key management in industries such as electric power and the like.

The invention discloses a security test method and device for an industrial real-time database and a storage medium, and relates to the technical field of industrial internet. The method comprises the following steps: based on a three-security partition architecture, realizing security test on the industrial real-time database by verifying the transmission security of each interval. The logic isolation test between the first security zone and the second security zone emphatically checks access control strategies, industrial protocol transmission integrity and abnormal traffic filtering. The physical isolation test between the first security area or the second security area and the third security area comprises the steps of verifying one-way transmission and data integrity of the forward isolation device and verifying formats and security policies by the reverse isolation device. The cross-three-zone linkage transmission test covers end-to-end data transmission security verification, a simulation attack penetration test from a third security zone to a first security zone, and an emergency mechanism test under an isolation device fault. According to the method, the safety of the industrial real-time database can be improved through a three-partition testing method.

The embodiment of the application provides an anti-quantum mixing password gateway and a data transmission method, and belongs to the technical field of network security. The gateway comprises: a quantum key management module, which is used for acquiring quantum keys generated by a quantum key distribution network and quantum random numbers; an entity authentication module, which is used for performing challenge-response authentication on a communication terminal; a mixed certificate management module, which is used for performing mixed certificate authentication processing; a mixed key negotiation module, which is used for performing mixed key negotiation processing to generate a communication session key; and an encrypted tunnel module, which is used for establishing an anti-quantum encrypted communication tunnel based on the communication session key and performing encrypted transmission processing of communication data through the anti-quantum encrypted communication tunnel. The anti-quantum encrypted communication tunnel with the key derivation and quantum key dynamic refreshing mechanism is constructed, and the transmission security and stability of communication data in an anti-quantum attack environment are improved.

The invention relates to the technical field of financial data privacy protection, and discloses a financial data privacy protection method based on a reversible desensitization technology. The method comprises the following steps of: acquiring a multi-source financial data stream, wherein the multi-source financial data stream comprises a transaction data stream and a user data stream; performing feature extraction and privacy risk estimation on the multi-source financial data stream to determine a financial sensitive position and desensitization intensity estimation; setting a reversible desensitization processing mechanism, and generating desensitization financial data based on the desensitization intensity estimation; constructing a distributed secure transmission architecture, and adaptively selecting a data transmission strategy according to a real-time security condition; and transmitting the desensitized financial data through the distributed secure transmission architecture, and realizing reversible desensitization recovery. According to the method, while the privacy of the financial data is effectively protected, the availability and transmission security of the data are guaranteed, and the method is suitable for financial data processing and sharing in multiple scenes.

This invention discloses an image transmission method, client, server, and storage medium, relating to the field of data transmission technology. The method includes: the client obtaining request parameters, generating an interaction request based on the request parameters, and sending the interaction request to the server; the server, when a first digest and a second digest match, generating a first image based on the request parameters and obtaining a second image, and generating a third image based on the first and second images using an obfuscation algorithm; the client decrypting the third image sent by the server using the obfuscation algorithm to obtain the decrypted third image, generating a target image based on the decrypted third image and a fourth image, and displaying the target image. This invention solves the problem of low security in image transmission between the client and server, achieving the effect of ensuring image transmission security and preventing data tampering.

The present application relates to the field of image transmission, and more particularly to a face image transmission method and system for security door. The method comprises the steps of: segmenting a face image into a plurality of image blocks, and performing a plurality of rounds of exchange on the image blocks until the degree of damage to the topological relationship of the face image after exchange is greater than a preset damage degree threshold, thereby obtaining a final exchanged face image; obtaining a key sequence of each gray co-occurrence pair according to the statistical values of each gray co-occurrence pair in the gray co-occurrence matrix of the final exchanged face image, adding the offset values of each element in the key sequence to the mean values of each gray co-occurrence pair in turn, adding the span adjustment values of each element in the key sequence to the span values of each gray co-occurrence pair in turn to obtain adjusted gray co-occurrence pairs, and adjusting the pixel values of each pixel in the final exchanged face image based on the adjusted gray co-occurrence pairs to obtain an encrypted face image, thereby achieving transmission processing. The face encryption effect is improved, and the transmission security is ensured.

The invention provides a multi-target tracking method and system for a cross-border transmission encrypted video, and relates to the technical field of encrypted video target tracking. Firstly, motion features are directly extracted from an encrypted video code stream, and an encrypted domain feature set is constructed, so that a cloud can obtain target motion related information on the premise of not recovering a video plaintext, and video content privacy and cross-border transmission security are ensured. Secondly, multi-target detection is executed based on the encryption domain feature set, effective target position identification can be realized under the condition of keeping the encryption structure unchanged, and the adaptability of target detection is improved. Furthermore, by tracking a detection result set and stably outputting a multi-target trajectory, a system can still obtain a continuous target motion trajectory under the condition that a video is not decrypted in the whole process, the reliability of cross-frame association is improved, and finally, efficient and accurate target detection and tracking can be realized in a video encryption state.

Embodiments of the present application relate to the technical field of communication transmission security, and in particular, to a method and a device for mining a security vulnerability of an air interface protocol, and a mobile terminal. The method for mining the security vulnerability of the air interface protocol includes: obtaining mutation data, the mutation data being generated according to a fuzzing task; obtaining a service message of the air interface protocol; modifying the service message according to the mutation data; sending the modified service message to a base station; and monitoring a state of the base station, and recording a security vulnerability log according to the state of the base station.

The invention discloses a dynamic optimization control method and system for operation of a waste heat boiler, and relates to the technical field of transmission security. According to the method, binary conversion operation is executed on real-time operation data of the waste heat boiler, and a plurality of plaintext arrays cut each time are determined based on the grouping length of a selected encryption algorithm; the method comprises the following steps: creating a reference chain table of each time of cutting in combination with an encrypted document, traversing a plaintext array of each time of cutting to determine all cycle numbers corresponding to each node in the reference chain table so as to determine a last node and a last subscript of each time of cutting, and dynamically cutting running plaintext data according to the last node and the last subscript. The dynamic plaintext data can be supplemented by characters 1 and 0 randomly based on the packet length, so that the data encrypted by the encryption key is dynamic and contains verification logic while the underlying mathematical logic and packet length requirements of the encryption algorithm are not damaged, and the data tampering difficulty is improved.

The invention relates to the field of industrial internet-of-things data transmission, in particular to an industrial internet-of-things data secure transmission method, system, device and medium, and the method comprises the steps: pre-registering client information at a server, and generating a client unique identifier; the client generates a client key according to the public key obtained from the server and the unique identifier of the client, and registers the key to the server; the client uses the registered key to initiate security authentication to the server, and after the authentication is passed, the server generates or negotiates with the client to generate a session key for data encryption transmission, and distributes the session key to the client; the client and the server encrypt or decrypt interaction data by using the session key; according to the method, the data transmission security of the industrial Internet of Things can be ensured, the real-time performance, the reliability and the usability are considered, and the method is particularly suitable for industrial control, monitoring and cooperative processing scenes with relatively high requirements on the security and the real-time performance, and has relatively high practical value and popularization prospect.

Approaches are described herein for secure masking of channel activity for transmission security (TRANSEC) enabled terminals in satellite communication networks. Embodiments include techniques for masking channel activity at the link-layer in the outroute and / or in the inroute. For example, in the outroute, embodiments encapsulate packet data units (PDUs) using a TRANSEC-compatible stream encapsulation protocol. In the inroute, embodiments encapsulate burst transmissions using a TRANSEC-compatible inroute burst encapsulation protocol. Outroute and / or inroute activity can be further masked by creating the impression of constant-rate traffic, constant-rate bandwidth allocations, and the like.

The application discloses a private protocol transmission security management system and method based on a one-way communication device, and relates to the technical field of network security. The method comprises the following steps: extracting the communication characteristics of a private protocol and performing normalization processing, and constructing a private protocol feature library; deploying a protocol analysis engine on the low-security side of a one-way optical shutter, performing deep detection on the out-domain data stream, identifying the private protocol, and extracting the current session protocol characteristics; matching the extracted characteristics with the feature library, and performing compliance verification and content filtering according to a security policy after successful matching; the verified data is encapsulated into a transmission format allowed to pass through the one-way optical shutter, and is sent to the high-security side through the one-way optical shutter; the received data is reorganized, and integrity and consistency verification is performed on the high-security side, and after the verification is passed, an audit log is recorded and forwarded to a target system; the protocol behavior and the session state are monitored in real time, and a security alarm is triggered and the transmission is blocked for unknown protocols or abnormal behaviors.

The invention relates to the technical field of communication security of an intelligent power grid. In operation of a smart power grid, transmission security is increasingly important, communication blind areas occur when a gateway or a base station fails due to severe environmental conditions, eavesdroppers exist in a wireless environment, and how to improve the security capacity of legal users in the smart power grid under the worst communication condition can be solved. And the higher algorithm convergence speed becomes an urgent problem to be solved. The invention provides a method for improving the safety capacity in a reconfigurable intelligent surface and unmanned aerial vehicle assisted smart power grid, and the method comprises the steps: applying a dual-soft actor-commentator framework to a scene in which an unmanned aerial vehicle serves as a mobile gateway, and carrying out the combined optimization of the active beam forming of the unmanned aerial vehicle, the RIS passive beam forming and the trajectory of the unmanned aerial vehicle, according to the method, the continuous and stable growth characteristic, the optimal final performance and the good training stability can be kept in the aspect of safety capacity optimization.

The application discloses a kind of non-coherent optical phase disturbance encryption method, device, storage medium and equipment, belong to optical communication technical field, method includes: obtaining first plaintext image and second plaintext image;Chaotic encryption is obtained by the first plaintext image by chaos system, and the key of chaotic encryption process is saved to the second plaintext image;The gray value of the first ciphertext image is mapped into pseudo-random phase map;The second plaintext image is encrypted by non-coherent image encryption as the phase map in the non-coherent image encryption process of pure phase disturbance, and the second ciphertext image is obtained;The application can improve transmission security.

The invention discloses a data communication system and method based on same-level areas. The system comprises a first first-level area and a second first-level area which are connected with each other, the first primary area is used for performing data encryption operation on to-be-sent data, generating a relay key with the second primary area, generating a transmission ciphertext from the encrypted data ciphertext by using the relay key, and sending the transmission ciphertext to the second primary area; and the second primary region decrypts the transmission ciphertext by using the relay key, and decrypts the decrypted data again by using the decrypted key to finally obtain the data to be sent. According to the invention, the relay key is negotiated in real time and cannot be predicted, so that the transmission security of the encryption key is ensured; moreover, the relay key file is simultaneously related to local key files of the first-level key centers in the two first-level areas, and a bad user needs to attack the two key centers at the same time and also needs to know a splicing scheme negotiated by the two key centers in real time, which is very difficult.