9 results about "Trusted path" patented technology

The application discloses an artificial intelligence-based network security data analysis system and method, relates to the technical field of network security, and constructs a structured triple, is mapped into a graph node and an edge, and is stored into a graph database; graph data is extracted from the graph database, a node feature matrix, an adjacency matrix and an edge feature matrix are generated; a node representation vector is trained by using a graph attention mechanism, and a semantic propagation matrix is constructed; a predicted attack path model is obtained; a candidate attack path set is generated; a trusted scoring model is constructed and optimized, high-trust paths with scores exceeding a threshold value are screened; a multilayer perception machine model is constructed, an attack source prediction model is obtained; real-time graph data is acquired, nodes exceeding the threshold value are marked as risk nodes, and are uploaded to a protection system to trigger an alarm and an inspection, and the automation and real-time performance of attack source identification are improved.

This invention belongs to the interdisciplinary fields of edge computing, privacy and security, and machine learning. It discloses a trust management method for fog nodes in edge computing. First, it calculates the fog node's trust value based on subjective trust value, indirect trust value, and capability trust value. The Bellman equation is used to solve for the shortest trust path, resulting in an initial dataset containing the three trust attributes of the fog node. This initial dataset is divided into a training set and a test set. The dataset is preprocessed by blurring the distribution range of the trust values. The trust attribute with the largest information gain in the training set is calculated as the splitting attribute. The training set is then divided into several subsets. The partitioning terminates if all fog nodes in a subset belong to the same category or if all candidate attributes of a fog node have been used. After generating a decision tree, a loss function is used to prune the decision tree. This invention demonstrates reliability and effectiveness in detecting malicious nodes and internal attacks.

The invention relates to a digital asset cross-platform circulation processing method. The method comprises the steps of obtaining digital assets to be circulated and original platform structure description information; whether structure decomposition processing is executed or not is judged according to the structure support capacity of the target platform, if the structure support capacity contains fields or functions incompatible with the target platform, assets are divided into a compatible part and an incompatible part, the compatible part is packaged as standard transfer assets, and the incompatible part generates a delay compensation instruction; for the decomposed assets, state binding snapshots before and after decomposition are generated on an original platform, an irreversible mapping relation is established, and meanwhile, a state commitment lock is started to freeze the original assets; and dynamically evaluating a selectable target platform set based on the network load, trust level and compliance region information of the target platform, and selecting a trusted path to initiate an asset transmission request to the target platform. According to the method, through full-process intelligent analysis of the asset structure, the execution logic and the dependency relationship, safe, controllable and high-precision circulation of cross-platform assets is realized.

This invention discloses a method and system for experience inheritance and collective wisdom evolution based on an AI agent social network, belonging to the field of artificial intelligence knowledge management. The AI ​​agent extracts methodologies accumulated in tasks into structured experience cards containing problem descriptions, solution steps, key insights, preconditions, and effect verification; it employs a four-layer storage architecture to hierarchically manage the visibility of experience; it achieves experience retrieval through a comprehensive ranking based on semantic similarity and superimposed with social trust path factors; it adopts feedback-driven continuous updates to experience quality scores, forming an evolutionary mechanism of survival of the fittest; and it links experience contribution data with credit scores to create sharing incentives.

The invention discloses a private cloud-oriented trusted multi-cluster unified management method and system. The method comprises the following steps: receiving an access request, verifying a certificate and trusted measurement, and generating clusters, resources and strategy objects; the method comprises the following steps: collecting multi-source data, preprocessing and forming association; constructing a multi-cluster trusted graph to form a multi-cluster trusted graph; constructing a credible path risk assessment module, and generating a node risk label; grapporter model training is improved, and a node risk label is used to supervise a training model; a risk-driven scheduling decision is made, and a cross-cluster service scheduling decision is generated. According to the method, the trusted path risk assessment module is constructed, and the improved Grapher model is combined, so that trusted unified management and security perception scheduling of the private cloud multi-cluster are realized.

The invention discloses a real estate registration data exception identification processing method, and particularly relates to the technical field of real estate data management.The method comprises the steps that a field fingerprint database is built by generating field fingerprints, a data credibility weight model is built based on multiple dimension indexes, and a high-risk channel in data propagation is identified by building a trust path diagram; semantic consistency verification is carried out before calling, distributed reverse cleaning operation is executed after initial pollution nodes are backtracked and recognized, finally, a sweep range coefficient is calculated according to pollution propagation characteristics, field control and a cross-system protection strategy are executed according to risk levels, and penetrating recognition and dynamic treatment of pollution data are achieved. According to the method, data tracing is realized through field fingerprints, the data credibility weight model and the trust path diagram are constructed to realize abnormal propagation chain identification, and semantic consistency verification and a distributed reverse cleaning strategy are combined, so that high-precision abnormal identification, pollution blocking and dynamic treatment of real estate registration data are realized, and the credibility and consistency of the whole process of the data are ensured.

Approaches presented herein provide for the attestation of devices in managed networks, in order to verify state and establish trust in those devices as well as in the managed network and / or subnets. The devices in a network, including devices such as network switches, can perform self-attestation by transmitting attestation evidence using one or more network messages. One or more verifiers can verify the attestation evidence and determine which devices or subnets are trusted. Data and messages can then be routed along trusted paths through a trusted network or subnet, such that all devices along those paths are trusted devices. In order to reduce the volume of attestation traffic for large networks, a network device can provide attestation evidence to a verifier that is connected to that device, rather than propagating all evidence for all devices to a single verifier. Once verified, a list of trusted devices can be propagated rather than the instances of evidence that were used for the verification.

This application provides a trusted path establishment system, method, apparatus, device, and storage medium, relating to the field of computer technology. It effectively improves the reliability of trusted paths and ensures the security and privacy of data within the trusted paths. The system includes a network orchestrator, a device verification network element connected to the network orchestrator, and a link management platform. The link management platform is used to obtain the trusted status of the corresponding network links and send the trusted status to the network orchestrator; the trusted status describes the reliability of the network links. The device verification network element is used to obtain the trusted status of the corresponding network devices and send the trusted status to the network orchestrator; the trusted status describes the reliability of the network devices. The network orchestrator receives the trusted status of the links and the trusted status of the devices; based on the trusted status of the links and the trusted status of the devices, it obtains a trusted path topology, which includes at least one trusted path.

A system for establishing a trusted path for secure communication between client devices and server devices, such as between an account holder and a financial institution, can provide the core security attributes of confidentiality (of the parties), integrity (of the information), anti-replay (protection against replay fraud) and / or anti-tampering (protection against unauthorized changes to information being exchanged and / or modules that generate and communicate such information). A messaging layer implementation in favor of a transport layer implementation can provide a trusted path. This infrastructure features secure cryptographic key storage, and implementation of a trusted path built using the cryptographic infrastructure. The trusted path protects against unauthorized information disclosure, modification, or replays. These services can effectively protect against Man-in-the-Middle, Man-in-the-Application, and other attacks.