19 results about "Ubiquitous network" patented technology

The invention relates to the technical field of security authentication and ubiquitous networks, and discloses a ubiquitous-network-oriented cloud-side collaborative multi-factor identity authentication method and system, and the method comprises the steps: issuing an identity certificate based on an elliptic curve and a PUF challenge-response library of a parameter initialization edge node through a cloud, and achieving the cloud-side bidirectional authentication; when the terminal is accessed, multi-factor authentication combining PUF challenge and a dynamic threshold value is adopted, so that the capability of resisting counterfeiting and replay attacks is improved; after the authentication is passed, the edge node generates a group public key locally and constructs a binary tree group key structure with a preset depth, and post-quantum safe and efficient group signature management is supported; when a newly added terminal joins, generating a secret key based on an elliptic curve algorithm and distributing a group signature private key share to realize lightweight member management; the integrity, confidentiality and traceability are realized while the transmission efficiency is guaranteed, and safe communication and dynamic revocation in an edge resource limited environment are effectively supported.

The invention relates to the technical field of network communication, and discloses a ubiquitous network dynamic fair rate cooperative control method, which aims at link time varying, topology reconstruction and multi-source and multi-path concurrency characteristics of an air-space-ground-sea fusion network. A routing node periodically collects indexes such as a request satisfaction rate, a queue length and a multi-hop queuing-free proportion to obtain link transmission quality and dynamically update an interest packet forwarding table; deducing a queue upper limit, calculating a rate shaping value in combination with an interest packet forwarding proportion, and carrying out delayed transmission on an over-limit interest packet; when the interest queue exceeds a threshold value, a congestion feedback value is generated and goes down along with a data packet, and an uncongested interface obtains a release bandwidth through probability compensation; and if the whole path is still congested, the consumer multiplicatively shrinks the sending window according to the feedback proportion. According to the method, the throughput is remarkably improved and the queuing delay is reduced while fair allocation of bandwidth resources is ensured.

The invention relates to the technical field of network and information security, and discloses a cloud-side collaborative ubiquitous network ciphertext data security management system, which comprises a user side module, an edge node module, a cloud server module, a key server module and a backup and integrity verification module. The user side performs local de-duplication by using the simple tag and generates an attribute ciphertext and a multi-level de-duplication tag; the edge node judges duplication and then forwards; the cloud side matches the label in parallel to realize unique storage. The backup module fragments the ciphertext according to a Shamir secret sharing threshold value and carries out distributed encryption backup; and the integrity verification module adopts lattice signature based on learning with an error problem, cloud, edge and end multi-point verification, and dynamic access is realized in combination with a reputation threshold value. The system gives consideration to confidentiality, duplicate removal efficiency, disaster recovery capability and anti-quantum integrity, and is suitable for large-scale data scenes of the Internet of Vehicles, the Internet of Things and the like.

The invention relates to the technical field of big data processing and network security, and discloses a ubiquitous network data deduplication system supporting similarity data ownership verification, which comprises an encryption module, a label generation module, a deduplication judgment module, a challenge generation module, a certification calculation module, a verification module and an integrity evidence storage module. According to the system, a plaintext data block is encrypted by deriving a high-entropy session key through two-dimensional chaotic mapping, a similarity label with a threshold value is generated by adopting # imgabs0 #, and efficient de-duplication is realized based on three-section type Hamming distance judgment; a dynamic challenge-response mechanism is utilized to provide auditable ownership proof for each downloading request, and a # imgabs1 # tree and a block chain evidence storage technology are combined to realize data integrity multi-granularity verification and rapid damaged block positioning, so that storage efficiency, security and availability are considered.

This invention provides a ubiquitous network frequency offset estimation method, system, medium, and terminal. The method includes the following steps: receiving wireless signals from multiple carriers of multiple satellites; constructing the satellite-to-ground geometric relationship between each satellite and the terminal; constructing a frequency offset estimation equation based on the wireless signals and the satellite-to-ground geometric relationship; and obtaining a frequency offset estimate based on the frequency offset estimation equation. The ubiquitous network frequency offset estimation method, system, medium, and terminal of this invention can achieve accurate frequency offset estimation even in the absence of GNSS signals in the ubiquitous network, thereby ensuring the continuity and reliability of the ubiquitous network.

The present application relates to the technical field of network communication congestion control, in particular to an end-network cooperative ubiquitous network congestion control method. The method is applied to a ubiquitous network comprising end nodes, intermediate nodes and content production nodes. The end nodes generate and send interest packets. The intermediate nodes obtain queue usage state, pending interest table occupation state, available bandwidth state and interest packet satisfaction state when the data packets return, generate a first congestion score or a second congestion score, and generate a congestion marking probability in combination with the occupation contribution of the target interest flow in the pending interest table to mark the return data packets with congestion. The intermediate nodes perform interest flow splitting or rate shaping according to the congestion level, and the end nodes adjust the subsequent interest packet sending window according to the congestion score information and the congestion marking result. The present application is suitable for high dynamic and multi-path ubiquitous network congestion control.

The application relates to the technical field of big data processing and network security, and discloses a ubiquitous network data deduplication system supporting similarity data ownership verification, which comprises an encryption module, a label generation module, a deduplication decision module, a challenge generation module, a proof calculation module, a verification module and an integrity evidence module; the system derives a high-entropy session key through two-dimensional chaotic mapping to encrypt plaintext data blocks, generates a similarity label with a threshold, and realizes efficient deduplication based on three-stage Hamming distance determination; the dynamic challenge-response mechanism is used to provide an auditable ownership proof for each download request, and the tree and block chain evidence technology are combined to realize multi-granularity checking of data integrity and rapid positioning of damaged blocks, so that the storage efficiency, security and usability are considered.

The present invention provides a ubiquitous network data information middle platform service system, which relates to the field of electronic digital data processing and includes a data update module, a data storage module, a data management module, a service response module and a terminal network module. The data update module is used to receive new data and complete data updates, the data storage module is used to save data content, the data management module is used to evaluate and manage the data content in storage, the service response module is used to receive external service applications and respond with data, and the terminal network module is used to provide ubiquitous network services. This system can effectively improve the speed of data supply services by evaluating data and dispatching part of the data to an exclusive area based on the evaluation results, and combined with the ubiquitous network, it can lower the network threshold for obtaining services.

The application relates to the technical field of network communication, and discloses a ubiquitous network dynamic fair rate cooperative control method. The method is aimed at the time-varying, topology reconstruction and multi-source and multi-path concurrent characteristics of the space-air-ground-sea integrated network link. A routing node periodically collects indexes such as request satisfaction rate, queue length and multi-hop non-queuing proportion, obtains link transmission quality and dynamically updates an interest packet forwarding table; an upper limit of a queue is derived, a rate shaping value is calculated in combination with an interest packet forwarding proportion, and an over-limit interest packet is implemented with delayed sending; when the interest queue exceeds a threshold value, a congestion feedback value is generated and is sent down with a data packet, and a non-congestion interface obtains released bandwidth through probability compensation; if the whole path is still congested, a consumer performs multiplicative contraction on a sending window according to a feedback proportion. The method can guarantee fair distribution of bandwidth resources, significantly improve throughput and reduce queuing delay.

The present invention relates to the field of network data security technology, and discloses a ubiquitous network data security gateway that is resistant to quantum attacks, which includes a communication interface module, a verification module, a policy analysis module, an accumulator update module, a second signature module, and an output module. The verification module verifies the authenticity and member consistency of the signature based on the terminal public key and the accumulator public key; the policy analysis module dynamically filters fields according to predefined editable policies; the accumulator update module efficiently accumulates and witnesses subsets without calling private keys; the second signature module uses a lattice signature algorithm based on the SIS assumption and combines bounded rejection sampling to complete re-signing; the output module securely sends the re-signed data packet to the user; in addition, it also supports threshold sharding and Chinese remainder theorem reorganization to achieve distributed privacy protection and reliable recovery of highly sensitive fields. The present invention strikes a balance between quantum security and editability, and the re-signing and verification performance are controllable.

The present invention relates to the field of security authentication and ubiquitous network technology, and discloses a cloud-edge collaborative multi-factor identity authentication method and system for ubiquitous networks. The method realizes cloud-edge two-way authentication by issuing identity credentials based on elliptic curves and parameter initialization of the PUF challenge-response library of the edge node. When the terminal accesses, the multi-factor authentication combining PUF challenge and dynamic threshold is adopted to improve the resistance to forgery and replay attacks. After the authentication is passed, the edge node generates a group public key locally and constructs a binary tree group key structure of preset depth, supporting post-quantum security and efficient group signature management. When a new terminal joins, the method generates a key based on the elliptic curve algorithm and allocates a group signature private key share to realize lightweight member management. The method achieves integrity, confidentiality and traceability while ensuring transmission efficiency, effectively supporting secure communication and dynamic revocation in an edge resource-constrained environment.

Provided in the present invention are a frequency offset estimation method for a ubiquitous network, and a system, a medium and a terminal. The method comprises the following steps: receiving radio signals of a plurality of carriers from a plurality of satellites; constructing a satellite-to-ground geometric relationship between each satellite and a terminal; on the basis of the radio signals and the satellite-to-ground geometric relationship, constructing a frequency offset estimation equation; and on the basis of the frequency offset estimation equation, acquiring a frequency offset estimation value. The frequency offset estimation method for a ubiquitous network, the system, the medium and the terminal in the present invention can realize accurate frequency offset estimation when a ubiquitous network lacks GNSS signals, thereby ensuring the continuity and reliability of the ubiquitous network.

The invention provides a frequency offset estimation method and system for a ubiquitous network, a medium and a terminal, which support specific uplink frequency offset pre-compensation based on the terminal in an elastic GNSS (Global Navigation Satellite System) scene. The support of each terminal for pre-compensating the specific uplink frequency offset of each terminal based on the terminal specific uplink frequency offset pre-compensation means that the terminal realizes the separation estimation of two frequency offset parameters of Doppler frequency shift and crystal oscillator frequency offset based on a given method, and further calculates the specific uplink frequency offset value of the terminal. Pre-compensation is carried out before uplink transmission. The frequency offset estimation method comprises the following steps: receiving a plurality of reference signals from a network node; calculating a downlink total frequency offset corresponding to the network node based on the reference signal; and constructing a frequency offset estimation equation set based on the downlink total frequency offset and ephemeris information, and estimating a plurality of frequency offset parameters. According to the ubiquitous network-oriented frequency offset estimation method and system, the medium and the terminal, uplink frequency offset estimation of the terminal side can be effectively realized in an elastic GNSS scene.

The present invention relates to the field of network and information security technology, and discloses a cloud-edge collaborative ubiquitous network ciphertext data security management system, which includes six modules: user end, edge node, cloud server, key server, backup and integrity verification. The user end uses simple tags to locally deduplicate and generate attribute ciphertext and multi-level deduplication tags; the edge node forwards after duplication detection; the cloud parallel matches tags to achieve unique storage. The backup module shards the ciphertext according to the Shamir secret sharing threshold and distributes the encrypted backup; the integrity verification module adopts a lattice signature based on the learning error problem in the entire link, and multi-point verification of the cloud, edge and end is combined with reputation threshold for dynamic access. The system takes into account confidentiality, deduplication efficiency, disaster recovery capability and quantum integrity, and is suitable for large-scale data scenarios such as the Internet of Vehicles and the Internet of Things.

The present application relates to the technical field of data plane forwarding of named data network, in particular to a data plane forwarding enhancement method for ubiquitous network producer mobility. The method is used to solve the problems that interest packets are still transferred to the old path when the producer switches the access node in the ubiquitous network, the PIT back path is inconsistent, and the interest packets are discarded during the route convergence. A mobile binding table is established in the data plane. The old access node enters the proxy forwarding mode based on the local control interest packet. The recovery interest packet is generated for the unsatisfied interest entry. The recovery interest packet and the newly arrived interest packet are forwarded to the new access node according to the two-dimensional coordinate identification of the new access node. The new access node forwards the interest packet through the producer access link and returns the data packet based on the PIT record. Meanwhile, the previous hop node is triggered to re-express the backtracking interest packet through NACK, which is suitable for producer mobility scenarios such as low-orbit satellite networks.

The invention relates to the technical field of privacy data protection, and discloses a ubiquitous network multi-mode privacy data protection method, which comprises the following steps that: a client performs band-pass filtering, standardization and sliding window slice preprocessing on multi-mode physiological signals such as electroencephalogram, electro-oculogram and myoelectricity; extracting and fusing frequency band discrimination features from the obtained time sequence data window according to a preset frequency band; model training is executed locally, a parameter updating difference value is calculated, and differential privacy noise is injected; generating a non-interactive zero-knowledge proof based on a Groth16 protocol, and uploading the noise-containing difference value and the proof to a trusted third party; after the credible third party passes verification, the difference values are confused and forwarded to the central server; and the central server updates the global model according to the sample weight aggregation and issues the global model to the client. According to the method, efficient cooperation of multi-modal signal end-side adaptive fusion and distributed privacy protection is realized, and security and credibility of parameter interaction are guaranteed through a non-interactive proving mechanism.

The application relates to the technical field of privacy data protection, and discloses a ubiquitous network multi-modal privacy data protection method, which comprises the following steps: a client performs band pass filtering, standardization and sliding window slicing pretreatment on multi-modal physiological signals such as electroencephalogram, electrooculogram and electromyogram; frequency band discriminant features are extracted and fused from the obtained time sequence data window according to a preset frequency band; model training is performed locally, and a parameter update difference value is calculated, and differential privacy noise is injected; a non-interactive zero-knowledge proof is generated based on the Groth16 protocol, and the noisy difference value and the proof are uploaded to a trusted third party; after verification by the trusted third party, the difference value is confused and forwarded to a central server; and the central server aggregates and updates a global model according to sample weights and distributes the global model to the client. The method realizes efficient cooperation of multi-modal signal end-side adaptive fusion and distributed privacy protection, and guarantees the safety and credibility of parameter interaction through a non-interactive proof mechanism.

The invention relates to the technical field of network data security, and discloses an anti-quantum-attack ubiquitous network data security gateway which comprises a communication interface module, a verification module, a strategy analysis module, an accumulator updating module, a second signature module and an output module. The verification module verifies signature authenticity and member consistency based on the terminal public key and the accumulator public key; the strategy analysis module dynamically screens fields according to a predefined editable strategy; the accumulator updating module performs efficient accumulation and witness updating on the subsets on the premise of not calling a private key; the second signature module adopts a lattice signature algorithm based on SIS hypothesis and combines bounded rejection sampling to complete re-signature; the output module safely issues the re-signed data packet to the user; in addition, threshold fragmentation and Chinese remainder theorem recombination are supported, and distributed privacy protection and reliable recovery of high-sensitivity fields are achieved. According to the method, balance is achieved between quantum security and editability, and re-signing and verification performance is controllable.

A system and method for connecting a wireless device to a ubiquitous wireless network in which the ubiquitous network determines if the wireless device should be bound to a selection of access points for network connection. The ubiquitous network maintains a lookup table that links the Media Access Control (MAC) address of each wireless device with a selection of the most appropriate access points through which network connectivity is to be established. Accordingly, when each wireless device sends a probe request in an attempt to connect to the ubiquitous network, only the specified access points are configured to handle the response. In this manner, a high-quality network connection can be maintained. However, if no bound access points are available and within range to handle the response, a non-bound access point may temporarily provide a response to the probe request to ensure that some level of network connectivity is maintained.