46 results about "Wireless network security" patented technology

The invention relates to the technical field of industrial wireless networks, in particular to an industrial wireless network security communication method based on a national cryptographic algorithm, which comprises the following steps that: identity authentication is required before equipment accesses the network, and gateway equipment and field equipment finish bidirectional identity authentication through the national cryptographic algorithm SM2. The secure communication method provided by the invention comprises three stages of identity authentication, key negotiation and data encryption and decryption, identity authentication is carried out by adopting a national cryptographic algorithm SM2, and transmitted data is encrypted and data integrity is verified by adopting a hash-based message authentication code SM3 (HMAC-SM3) and an SM4 block cipher algorithm (SM4). According to the secure communication method, how to save the storage space and the communication overhead of a WIA-FA network is considered, and meanwhile, a set of secure transmission protocol which is autonomously controllable on the industrial wireless network standard and the cryptographic algorithm is realized, so that the security, the reliability and the controllability in the industrial communication process are fundamentally guaranteed.

The invention discloses a verifiable timed batch key release method, which relates to the technical field of wireless network security, and comprises the following steps: S1, setting key parameters; s2, key parameters are initialized through a Setup algorithm; s3, generating a commitment C and a time lock puzzle Z through a Commit algorithm; s4, verifying the commitment C through a Verify algorithm; s5, the time puzzle is unlocked through a ForceOp algorithm, and the complete private key is decrypted and recovered; through mutual cooperation of algorithms, reasonable parameter configuration and reasonable calculation process planning, batch processing of verifiable timing time release is realized, calculation complexity is greatly reduced, through a one-step encryption algorithm, all'secret 'unlocking conditions are unified, a time lock is generated for the unlocking conditions, and the unlocking efficiency is improved. Therefore, the effect that one time lock locks a plurality of'secrets' is achieved, and the problems that secret keys cannot be processed in batches, calculation is complex and communication overhead is too high in verifiable timing cryptography technologies such as VTS and VTD are effectively solved.

The invention discloses a wireless network security management method and system. In the method, a system initialization module completes initialization, calls a key management module to generate signatures of a platform end and wireless equipment and encrypts asymmetric key pairs, and a wireless equipment management module records basic information of storage equipment. Before wireless equipment accesses, an authentication request containing first encryption information and first signature information is initiated through a request gateway module, after a platform end decrypts and verifies the signature to complete equipment authentication, second encryption information and second signature information are returned, and an equipment end decrypts and verifies the signature to complete bidirectional authentication. And network access is allowed in combination with the white list and the equipment registration state, and an administrator completes identity authentication and authority verification through the user authority management module and the request gateway module. After the equipment accesses the network, heartbeat communication and bidirectional authentication are carried out at regular intervals, equipment communication is controlled through a network communication strategy, and operation monitoring, situation analysis and log auditing are synchronously carried out. According to the invention, the problems of high access and operation and maintenance management security risk and the like in the prior art are solved.

The invention discloses a batch message verification method and system applied to an industrial internet of things, and relates to the technical field of wireless network security communication. According to the message authentication method, the compute-intensive tasks are unloaded to the edge server, the certificateless aggregation signature algorithm is adopted for message batch verification, system server computing resources are fully utilized, and the message processing efficiency is remarkably improved. Identity-based pseudonym information is adopted to encrypt the message, the complexity of key management and the requirement for verifying a public key certificate are eliminated, the required identity information amount is reduced, compared with a certificate-based system, the key storage, distribution, generation and verification processes are simplified, the processing efficiency of the system is improved, meanwhile, the anonymity requirement is met, and the safety of the system is improved. And the safety of the system is improved.

The invention discloses a smart campus wireless network security protection method, system, device and medium, and belongs to the technical field of network security, and the method comprises the following steps: establishing a security reference library of campus wireless hotspots, and recording feature information of authorized wireless access points; performing real-time monitoring and evaluation on wireless hotspots around the terminal equipment, and generating a credible hotspot list based on the matching degree of an evaluation result and the safety reference library; identifying suspicious wireless hotspots with deviated features by comparing the real-time features of the hotspots with data in a safety reference library; and starting protection measures for the identified suspicious wireless hotspots. According to the invention, through bidirectional verification, it is ensured that only hotspots passing static identity verification and dynamic behavior analysis at the same time can be finally confirmed as safe hotspots, and the risk of misjudgment possibly caused by only depending on a single dimension is greatly reduced.

The application discloses a radio frequency fingerprint identification strategy suitable for a low signal-to-noise ratio environment for the purpose of protecting wireless network security. In an Internet of Things system, how to avoid attacks such as illegal monitoring, tampering and impersonation by intruders is a prerequisite for guaranteeing user security. Therefore, a radio frequency fingerprint identification technology without password authentication is proposed to guarantee the security of a wireless network. However, in a low signal-to-noise ratio environment, the existing radio frequency fingerprint identification technology may not have good performance, and therefore it is an urgent problem to be solved to improve the radio frequency fingerprint identification accuracy in a low signal-to-noise ratio environment. The application converts the denoising problem of a one-dimensional radio frequency signal into a denoising problem of a two-dimensional time-frequency graph, and denoises the Wigner-Ville time-frequency graph of the radio frequency signal through a Swin-Conv-UNet denoising network, so as to reduce the influence of noise on the radio frequency fingerprint and greatly improve the accuracy of device identification.

Techniques for improved wireless network security are provided. A probe request is receiving at an AP and from a client device. A probe response comprising a time-lock puzzle is transmitted by the AP and to the client device. An authentication request comprising a solution for the time-lock puzzle is received at the AP and from the client device. In response to determining that the first solution is correct, authentication of the first client device is facilitated.

The application discloses a kind of open network in distributed DDC controller collaborative management method and system, belong to wireless network security technical field, including according to open network in Wi-Fi channel state information constructs the three-dimensional topological map of controller and carries out dynamic trust evaluation, lightweight communication protocol stack is built in each distributed DDC controller node, generates distributed key pool based on elliptic curve encryption algorithm and implements dynamic key distribution;Distributed DDC controller resolves input instruction and switches communication interface;Task pre-allocation is carried out, and dynamic adjustment is carried out to the execution state of continuous monitoring task, and starts arbitration mechanism to carry out dynamic adjustment.The application not only optimizes the collaborative work capacity of distributed DDC controller, but also improves the security and resource utilization efficiency of network, so that the controller can be more flexible and efficient when coping with complex network environment, to bring more reliable use experience and higher security guarantee for users.

Machine Learning Based Wireless Network Security Device

The invention relates to the field of wireless network security communication, and discloses an anonymous identity authentication method, system and device in 5G-V2V and a medium, and the method comprises the steps: an AMF selects and generates a system common parameter; the on-board unit entering the 5G network coverage area registers in the AMF based on the system public parameters to generate a public key, a private key and a pseudonym corresponding to the on-board unit; the two vehicle-mounted units carry out mutual authentication based on the corresponding public keys, private keys and pseudonyms, and start a session key establishment process after mutual authentication succeeds, if the session key is successfully established, the two vehicle-mounted units carry out data transmission, and otherwise, the two vehicle-mounted units stop establishing the session key. By means of the method, identity verification can be conducted on the vehicle locally, and participation of a trusted mechanism or other infrastructures is not needed.

The invention discloses a distributed DDC controller collaborative management method and system in an open network, and belongs to the technical field of wireless network security, and the method comprises the steps: building a three-dimensional topological map of a controller according to Wi-Fi channel state information in the open network, carrying out the dynamic trust evaluation, and setting a lightweight communication protocol stack in each distributed DDC controller node, generating a distributed key pool based on an elliptic curve encryption algorithm to implement dynamic key distribution; the distributed DDC controller analyzes the input instruction and switches a communication interface; and performing task pre-allocation, dynamically adjusting and continuously monitoring a task execution state, and starting an arbitration mechanism to perform dynamic adjustment. According to the method, the collaborative operation capability of the distributed DDC controller is optimized, the network security and the resource utilization efficiency are also improved, so that the controller can be more flexible and efficient when coping with a complex network environment, and more reliable use experience and higher security guarantee are brought to a user.

The present invention belongs to the field of indoor wireless positioning in industrial scenarios, and proposes an indoor AP positioning method for industrial enterprise wireless network security and threats. The method first builds an indoor wireless simulation environment and deploys the AP nodes to be located and measurement points to collect the received RSS signal strength; then estimates the logarithmic distance path loss model parameters by deploying two auxiliary AP nodes and measurement points, and uses the estimated logarithmic distance path loss model parameters for the conversion between signal and node spacing; then enters the AP positioning, the stage of locking the smaller boundary range of the AP node to be located and the stage of predicting the position of the AP node. The present invention improves the data quality and the accuracy of indoor AP positioning; when the experimental environment is in a factory workshop environment with a large area, the invention will greatly improve the data quality by preliminarily locking the positioning area, reduce the cost of later data collection, and improve positioning accuracy.

The invention belongs to the field of network security control, relates to a data analysis technology, and is used for solving the problem that the network security of the whole data transmission process cannot be ensured in the prior art, in particular to a wireless network security control system and method based on event trigger control. Comprising a mechanism test module, a safety monitoring module, a mechanism analysis module and a safety control module which are in communication connection in sequence; the mechanism test module is used for performing test analysis on an event trigger mechanism of the wireless network: marking the wireless network as a test object, generating a plurality of test periods, and randomly allocating event trigger types to the test object at the starting time of the test periods; according to the invention, the event triggering mechanism of the wireless network can be tested and analyzed, and the attack tendency and the data transmission security of the test period are counted by combining the security monitoring module, so that data support is provided for the analysis of the adaptation mechanism.

The invention provides a kana replacement method based on vehicle similarity for the Internet of Vehicles, and relates to the technical field of wireless network security, a kana replacement system is used for obtaining a vehicle kana, and the kana replacement system comprises three layers of structures: a cloud layer, a fog layer and an edge layer. The pseudonym replacement method can be divided into a vehicle pseudonym acquisition stage, a pseudonym replacement area determination stage and a vehicle cooperation pseudonym replacement stage. According to the method, potential attacking and tracking capabilities of malicious attackers are fully considered, and a dynamic region division strategy based on vehicle similarity is supported. The method supports a kana replacement scheme independent of the road infrastructure (RSU), can improve the efficiency of kana replacement, reduces the dependence on the road infrastructure (RSU), improves the anonymity and safety of the system, and has a good application value.

The present invention relates to a method and apparatus for wired / wireless network security patching of a ship. Since a method for updating CBS patching for a ship and an apparatus for the same are required to be established, the present invention proposes a method and system for wired / wireless network security patching of a ship, which can perform patching update according to IACS UR E26 requirements.

MACHINE LEARNING BASED WIRELESS NETWORK SECURITY HUB

The application provides a wireless network security protection method applied to a mobile terminal, and the wireless network security protection method comprises the following steps: obtaining network information of a to-be-connected wireless network, and judging whether the to-be-connected wireless network belongs to a white list based on the network information; when the to-be-connected wireless network belongs to the white list and a wireless network switch is in an on state, controlling the mobile terminal to access the to-be-connected wireless network; when the to-be-connected wireless network belongs to the white list and the wireless network switch is in an off state, judging whether the to-be-connected wireless network meets preset conditions based on the network information; and when the to-be-connected wireless network meets the preset conditions, outputting prompt information to prompt a user that the to-be-connected wireless network can be accessed. The application further provides a mobile terminal and a computer readable storage medium. In this way, the safety of wireless network use can be ensured.

The invention relates to the technical field of network complete monitoring, and discloses a wireless network safety monitoring device which comprises a monitoring device body, heat dissipation grooves communicated with the interior of the monitoring device body are formed in the four corners of the monitoring device body, each heat dissipation groove is formed in the vertical direction, and a filter screen cylinder is rotationally arranged in each heat dissipation groove; an external cleaning brush making contact with the surface of the filter screen cylinder is arranged in the heat dissipation groove. According to the dust removal device, dust can be effectively prevented from entering the device while the heat dissipation effect is guaranteed, the dust removal convenience is improved, and the workload is reduced.

The present application provides a security inspection method and system for wireless secure communication, which relates to the technical field of wireless network security. The method comprises: obtaining data to be transmitted, recorded as first data; obtaining an IP address of a sender of the first data and an IP address of a receiver; obtaining n network links between two IP addresses; selecting the ith network link as a transmission link for the first data; verifying whether the ith network link is legal, and if so, verifying the two IP addresses; if not, replacing the transmission link; the verification of the two IP addresses refers to: verifying whether the two IP addresses are legal, and if so, transmitting data; if not, issuing an early warning. The present application can improve the reliability of data transmission.

The invention discloses a wireless network disaster recovery method and device, a wireless access point, a wireless controller and a storage medium, and relates to the technical field of wireless networks. The method is applied to a wireless access point, the wireless access point is in communication connection with a wireless controller, and the method comprises the steps that if a disaster recovery state notification sent by the wireless controller is received, configuration information for a wireless network is acquired from the wireless controller, the disaster recovery state notification is generated when the wireless controller monitors that an authentication server cannot access, and the configuration information is sent to the wireless controller; and according to the configuration information, controlling the terminal to access the wireless network in a manner of not interacting with the authentication server. According to the method and the device, the terminal can be controlled to access the wireless network in a mode of not interacting with the authentication server even if the authentication server cannot access, so that the normal use of the wireless network is ensured on the premise of not influencing the safety of the wireless network.

The invention belongs to the technical field of network security authentication, and particularly provides a wireless network security authentication method and system based on burst signal fingerprint identification, and the method comprises the steps: employing a maximum likelihood detection algorithm, and carrying out the detection of a transient process of a radiation source burst signal; calculating the instantaneous amplitude of the signal transient process; extracting a radiation source fingerprint feature implied in the instantaneous amplitude of the signal transient process by adopting a least square estimation algorithm; in the training stage, fingerprints of legal radiation sources are trained by using a support vector description algorithm, and a wireless communication network security authentication model is established; and an authentication stage: identifying the radiation source fingerprint by using the trained radiation source identification model to complete the authentication of the equipment identity. According to the method, the transient process of a burst signal is accurately detected, mathematical modeling is carried out on the transient distortion process of a transmitter, and the estimation and identification of the fingerprint characteristics of the radiation source in the transient process are realized, so that the authentication of wireless communication network access equipment is completed.

The invention provides a detection method and system for an unknown wifi unmanned aerial vehicle. The method comprises the following steps: when a hotspot which is not in a white list is detected through a first wifi wireless network card, determining the hotspot as a suspected target, and sending a communication parameter of the suspected target to a second wifi wireless network card; according to the serial number of the channel where the suspected target is located, data sniffing and packet capturing are carried out on the channel where the suspected target is located through a second wifi wireless network card to obtain a data packet, all messages containing the mac address of the suspected target in a preset time are screened out from the data packet, and the mac address of the suspected target is a source mac address; and under the condition that the target mac addresses in all the messages containing the mac addresses of the suspected target are the mac address of the same communication terminal, determining whether the suspected target is an unknown wifi unmanned aerial vehicle according to the network type created by the suspected target and a wifi unmanned aerial vehicle judgment strategy corresponding to the network type. According to the technical scheme provided by the invention, the wireless network security monitoring capability is improved.

Techniques for improved wireless network security are provided. A probe request is receiving at an AP and from a client device. A probe response comprising a time-lock puzzle is transmitted by the AP and to the client device. An authentication request comprising a solution for the time-lock puzzle is received at the AP and from the client device. In response to determining that the first solution is correct, authentication of the first client device is facilitated.

The invention relates to the technical field of wireless networks, in particular to a method for detecting safety of a wireless network, which comprises the following steps of: capturing wireless communication flow of a frequency band in real time through a hardware module of a radio product, and extracting four-time interaction data in a WPA3-SAE handshake process; handshake processes of all frequency bands are compared, the consistency of hardware generation logic is verified, the uniqueness and hash matching of random numbers are detected, the number of handshake failures is counted, and when the number exceeds a dynamic threshold value, it is judged that the attack is a potential attack; if it is detected that the 6GHz frequency band uses the WPA2 authentication mode, triggering an alarm and forbidding communication of the frequency band; and if any rule is violated, determining that the risk is abnormal, and outputting a corresponding risk score. And the system dynamically adjusts a defense strategy according to the score: refreshing a PMK or forbidding a frequency band when the risk is high, performing protocol compatibility negotiation when the risk is medium, and only recording a log when the risk is low. According to the invention, efficient real-time monitoring of the wireless network equipment can be realized.

The invention discloses a vehicle formation anonymous authentication method and system, a storage medium and a vehicle, and relates to the technical field of wireless network security communication. According to the method, the public key certificate and the authentication scheme based on the identity signature are combined, only the formation leader vehicle needs to be equipped with the public key certificate, other common vehicles use the identity signature to initiate the encryption authentication request to the formation leader vehicle, the dependence of the formation authentication system on the traditional digital certificate is effectively reduced, and the authentication efficiency is improved. According to the method, the complexity of public key certificate management is obviously reduced, the calculation and communication overhead is low, and a portable, efficient, high-safety and high-reliability identity authentication scheme is provided for a vehicle formation system with limited calculation and cruising ability.

The present invention belongs to the field of network security control and relates to data analysis technology, which is used to solve the problem that the existing technology cannot guarantee the network security of the entire data transmission process. Specifically, it is a wireless network security control system and method based on event trigger control, including a mechanism test module, a security monitoring module, a mechanism analysis module and a security control module, wherein the mechanism test module, the security monitoring module, the mechanism analysis module and the security control module are sequentially connected for communication; the mechanism test module is used to test and analyze the event trigger mechanism of the wireless network: the wireless network is marked as a test object, a plurality of test cycles are generated, and an event trigger type is randomly assigned to the test object at the beginning of the test cycle; the present invention can test and analyze the event trigger mechanism of the wireless network, and combine the security monitoring module to perform statistics on the attack tendency and data transmission security of the test cycle, so as to provide data support for the adaptation mechanism analysis.

The present invention discloses a method for measuring the interruption performance of a cognitive vehicle networking system, which belongs to the field of wireless network security transmission technology. In view of the problems of poor transmission reliability, high latency and shortage of spectrum resources in complex channels caused by the dense density of vehicles in the vehicle network, the present invention jointly considers the influence of actual NOMA non-ideal serial interference cancellation (ipSIC) and residual hardware impairment (RHI), and considers the non-ideal characteristics of the actual channel caused by actual vehicle movement. Based on the double Rayleigh fading channel model suitable for mobile scenarios, the interruption performance of the NOMA system under consideration is analyzed. The method of the present invention provides a practical reference for effectively measuring V2X communication performance under actual non-ideal channel conditions.

The application discloses a wireless network security access method and device, and belongs to the field of wireless communication. The method comprises the following steps: receiving a beacon frame sent by a second device, wherein the beacon frame comprises a first data field generated and encrypted by the second device, the first data field comprises product identification, a first random number obtained based on a random number generation algorithm and dynamic key data; the first device parses the first data field from the beacon frame and decrypts the first data field to obtain plaintext, and determines the legality of the beacon frame according to the product identification in the plaintext; when the beacon frame is legal, the dynamic key data is stored in a security module, a second random number is obtained by using a random number processing algorithm on the first random number, a second data field is generated by using the product identification, the second random number and a key installation result state code and is encrypted, and the beacon response frame is packaged and sent. In the method, the random number carried by the beacon response frame simulated and sent by an intruder cannot pass the verification of the second device, so that the legality of the first device can be effectively determined.

The scheme belongs to the technical field of wireless network security, and specifically relates to an intelligent building wireless module networking communication system and method for improving network security. The intelligent building wireless module networking communication method for improving network security comprises the following steps: S10: storing the secret key corresponding to each MAC address of a node in the communication networking as a node secret key in the local storage of a center node together with the MAC address; S20: a transmission node divides transmission data into multiple data packets, the transmission node uses the local node key to encrypt the division mode and division time of the data packets into first encrypted data, generates a first secret key according to the division mode and division time of the data packets, and uses the first secret key to encrypt the data packets into first encrypted packets; S30: the transmission node uses the first encrypted data and the first encrypted packets as transmission data, adds the digest of the transmission data to the transmission data, and appends the local MAC address after the transmission data. The scheme solves the problem of insufficient security of data transmission in the communication networking.