19 results about "Wireless network security" patented technology

The invention discloses a wireless network security management method and system. In the method, a system initialization module completes initialization, calls a key management module to generate signatures of a platform end and wireless equipment and encrypts asymmetric key pairs, and a wireless equipment management module records basic information of storage equipment. Before wireless equipment accesses, an authentication request containing first encryption information and first signature information is initiated through a request gateway module, after a platform end decrypts and verifies the signature to complete equipment authentication, second encryption information and second signature information are returned, and an equipment end decrypts and verifies the signature to complete bidirectional authentication. And network access is allowed in combination with the white list and the equipment registration state, and an administrator completes identity authentication and authority verification through the user authority management module and the request gateway module. After the equipment accesses the network, heartbeat communication and bidirectional authentication are carried out at regular intervals, equipment communication is controlled through a network communication strategy, and operation monitoring, situation analysis and log auditing are synchronously carried out. According to the invention, the problems of high access and operation and maintenance management security risk and the like in the prior art are solved.

The application discloses a radio frequency fingerprint identification strategy suitable for a low signal-to-noise ratio environment for the purpose of protecting wireless network security. In an Internet of Things system, how to avoid attacks such as illegal monitoring, tampering and impersonation by intruders is a prerequisite for guaranteeing user security. Therefore, a radio frequency fingerprint identification technology without password authentication is proposed to guarantee the security of a wireless network. However, in a low signal-to-noise ratio environment, the existing radio frequency fingerprint identification technology may not have good performance, and therefore it is an urgent problem to be solved to improve the radio frequency fingerprint identification accuracy in a low signal-to-noise ratio environment. The application converts the denoising problem of a one-dimensional radio frequency signal into a denoising problem of a two-dimensional time-frequency graph, and denoises the Wigner-Ville time-frequency graph of the radio frequency signal through a Swin-Conv-UNet denoising network, so as to reduce the influence of noise on the radio frequency fingerprint and greatly improve the accuracy of device identification.

The application discloses a kind of open network in distributed DDC controller collaborative management method and system, belong to wireless network security technical field, including according to open network in Wi-Fi channel state information constructs the three-dimensional topological map of controller and carries out dynamic trust evaluation, lightweight communication protocol stack is built in each distributed DDC controller node, generates distributed key pool based on elliptic curve encryption algorithm and implements dynamic key distribution;Distributed DDC controller resolves input instruction and switches communication interface;Task pre-allocation is carried out, and dynamic adjustment is carried out to the execution state of continuous monitoring task, and starts arbitration mechanism to carry out dynamic adjustment.The application not only optimizes the collaborative work capacity of distributed DDC controller, but also improves the security and resource utilization efficiency of network, so that the controller can be more flexible and efficient when coping with complex network environment, to bring more reliable use experience and higher security guarantee for users.

The present invention relates to a method and apparatus for wired / wireless network security patching of a ship. Since a method for updating CBS patching for a ship and an apparatus for the same are required to be established, the present invention proposes a method and system for wired / wireless network security patching of a ship, which can perform patching update according to IACS UR E26 requirements.

MACHINE LEARNING BASED WIRELESS NETWORK SECURITY HUB

The application provides a wireless network security protection method applied to a mobile terminal, and the wireless network security protection method comprises the following steps: obtaining network information of a to-be-connected wireless network, and judging whether the to-be-connected wireless network belongs to a white list based on the network information; when the to-be-connected wireless network belongs to the white list and a wireless network switch is in an on state, controlling the mobile terminal to access the to-be-connected wireless network; when the to-be-connected wireless network belongs to the white list and the wireless network switch is in an off state, judging whether the to-be-connected wireless network meets preset conditions based on the network information; and when the to-be-connected wireless network meets the preset conditions, outputting prompt information to prompt a user that the to-be-connected wireless network can be accessed. The application further provides a mobile terminal and a computer readable storage medium. In this way, the safety of wireless network use can be ensured.

The invention relates to the technical field of network complete monitoring, and discloses a wireless network safety monitoring device which comprises a monitoring device body, heat dissipation grooves communicated with the interior of the monitoring device body are formed in the four corners of the monitoring device body, each heat dissipation groove is formed in the vertical direction, and a filter screen cylinder is rotationally arranged in each heat dissipation groove; an external cleaning brush making contact with the surface of the filter screen cylinder is arranged in the heat dissipation groove. According to the dust removal device, dust can be effectively prevented from entering the device while the heat dissipation effect is guaranteed, the dust removal convenience is improved, and the workload is reduced.

The invention discloses a wireless network disaster recovery method and device, a wireless access point, a wireless controller and a storage medium, and relates to the technical field of wireless networks. The method is applied to a wireless access point, the wireless access point is in communication connection with a wireless controller, and the method comprises the steps that if a disaster recovery state notification sent by the wireless controller is received, configuration information for a wireless network is acquired from the wireless controller, the disaster recovery state notification is generated when the wireless controller monitors that an authentication server cannot access, and the configuration information is sent to the wireless controller; and according to the configuration information, controlling the terminal to access the wireless network in a manner of not interacting with the authentication server. According to the method and the device, the terminal can be controlled to access the wireless network in a mode of not interacting with the authentication server even if the authentication server cannot access, so that the normal use of the wireless network is ensured on the premise of not influencing the safety of the wireless network.

The invention relates to the technical field of wireless networks, in particular to a method for detecting safety of a wireless network, which comprises the following steps of: capturing wireless communication flow of a frequency band in real time through a hardware module of a radio product, and extracting four-time interaction data in a WPA3-SAE handshake process; handshake processes of all frequency bands are compared, the consistency of hardware generation logic is verified, the uniqueness and hash matching of random numbers are detected, the number of handshake failures is counted, and when the number exceeds a dynamic threshold value, it is judged that the attack is a potential attack; if it is detected that the 6GHz frequency band uses the WPA2 authentication mode, triggering an alarm and forbidding communication of the frequency band; and if any rule is violated, determining that the risk is abnormal, and outputting a corresponding risk score. And the system dynamically adjusts a defense strategy according to the score: refreshing a PMK or forbidding a frequency band when the risk is high, performing protocol compatibility negotiation when the risk is medium, and only recording a log when the risk is low. According to the invention, efficient real-time monitoring of the wireless network equipment can be realized.

The application discloses a wireless network security access method and device, and belongs to the field of wireless communication. The method comprises the following steps: receiving a beacon frame sent by a second device, wherein the beacon frame comprises a first data field generated and encrypted by the second device, the first data field comprises product identification, a first random number obtained based on a random number generation algorithm and dynamic key data; the first device parses the first data field from the beacon frame and decrypts the first data field to obtain plaintext, and determines the legality of the beacon frame according to the product identification in the plaintext; when the beacon frame is legal, the dynamic key data is stored in a security module, a second random number is obtained by using a random number processing algorithm on the first random number, a second data field is generated by using the product identification, the second random number and a key installation result state code and is encrypted, and the beacon response frame is packaged and sent. In the method, the random number carried by the beacon response frame simulated and sent by an intruder cannot pass the verification of the second device, so that the legality of the first device can be effectively determined.

The scheme belongs to the technical field of wireless network security, and specifically relates to an intelligent building wireless module networking communication system and method for improving network security. The intelligent building wireless module networking communication method for improving network security comprises the following steps: S10: storing the secret key corresponding to each MAC address of a node in the communication networking as a node secret key in the local storage of a center node together with the MAC address; S20: a transmission node divides transmission data into multiple data packets, the transmission node uses the local node key to encrypt the division mode and division time of the data packets into first encrypted data, generates a first secret key according to the division mode and division time of the data packets, and uses the first secret key to encrypt the data packets into first encrypted packets; S30: the transmission node uses the first encrypted data and the first encrypted packets as transmission data, adds the digest of the transmission data to the transmission data, and appends the local MAC address after the transmission data. The scheme solves the problem of insufficient security of data transmission in the communication networking.

The invention discloses a certificateless aggregation signature authentication method and system for a vehicle-mounted ad hoc network, and relates to the technical field of wireless network security, and the method comprises the steps: generating a public parameter through a key generation center and a trust mechanism; generating a secret value based on the common parameter; generating a pseudonym for the vehicle; generating a partial private key of the vehicle; generating a key pair of the vehicle; generating a signature for the message; checking whether the signature is valid or not, if not, refusing the signature, and ending the program; otherwise, receiving the signature; generating an aggregation signature; verifying whether the aggregated signature is valid, if not, refusing the aggregated signature, and ending the program; otherwise, the aggregation signature is accepted. The invention provides a new aggregation algorithm, in the aggregation algorithm, only when all signatures are valid, the aggregated signature can be generated, that is, as long as an invalid signature exists, the valid aggregated signature cannot be aggregated, so that the scheme can significantly improve the security.

The application discloses a kind of wisdom campus wireless network security protection method, system, equipment and medium, belong to network security technical field, including the following steps, establish the security benchmark library of campus wireless hotspot, record the characteristic information of authorized wireless access point;Real-time monitoring and evaluation are carried out to the wireless hotspot around terminal equipment, and the matching degree of the security benchmark library is generated based on the evaluation result and can be trusted hotspot list;By comparing hotspot real-time characteristics and the data in the security benchmark library, identify the suspicious wireless hotspot of characteristic deviation;For the suspicious wireless hotspot identified, start protection measures.The application ensures that only the hotspot passing through static identity verification and dynamic behavior analysis at the same time can be finally confirmed as a safe hotspot by two-way verification, greatly reducing the risk of misjudgment that may be caused by relying on a single dimension.

The application provides a smart reflection method for wireless security access of multiple two-way eavesdroppers, comprising the following steps: step 1, establishing a wireless network security access system; step 2, designing an asymmetric two-way smart metasurface reflection beam direction; step 3, detecting channel state information related to the smart metasurface reflection unit; step 4, calculating the null space of the wireless channel; step 5, calculating the beam pointing of the maximum channel gain of the legal wireless communication in the null space; step 6, the access point AP and the legal terminal respectively send data symbols to the smart metasurface reflection unit, and the smart metasurface reflection unit reflects the two-way data symbols reaching at the moment to the access point AP and the legal terminal according to the beam pointing obtained in step 5; and step 7, the access point AP and the legal terminal respectively decode the received data stream as receivers. The application can significantly improve the security performance and data transmission performance of the wireless network security access network.

The invention relates to the technical field of wireless network security, in particular to a low-power-consumption radio frequency network data integrity verification method and system, and the method comprises the following steps: writing a configuration parameter and an initial vector into a shift register, constructing a binary key stream, bit-by-bit XOR data, a key and a feedback bit by using a seed and a random number to calculate a feedback value, and shifting and writing a feedback value into the register, adjusting a tap state, and outputting an integrity label composed of register values. According to the method, configuration parameters and non-zero initial vectors are written into a shift register, a shared secret seed is combined to construct a binary key stream, XOR operation is performed on sensor data, the key stream and feedback bits bit by bit according to a clock period, feedback is dynamically calculated by using a true value state, and the shift of the register is adjusted. And the integrity label is synchronously generated in transmission, so that resource occupation caused by complex Hash operation is avoided, power consumption is greatly reduced, the speed is increased, and communication delay and congestion caused by limitation of low-power-consumption nodes are effectively relieved.

The invention discloses a wireless threat dynamic countering method, device and equipment and a readable medium. The invention relates to the technical field of wireless network security. The method comprises the following steps: detecting a to-be-accessed point, and determining whether the to-be-accessed point is a legal access point; if the to-be-accessed point is a legal access point, accessing the to-be-accessed point to a legal client in an active mode; and if the to-be-accessed point is an illegal access point, executing a countering task by adopting a sentry mode according to the threat type. By adopting the technical scheme, the problems of limited countering effect and incomplete threat coverage of a traditional wireless intrusion detection system can be solved, a directional countering protocol is designed for complex threats, countering tasks are intelligently distributed based on threat types, and the system efficiency is optimized.

The application relates to the technical field of wireless networks, in particular to a method for detecting wireless network security, which comprises the following steps: capturing wireless communication traffic of frequency bands in real time through a hardware module of a radio product, and extracting four-interaction data in a WPA3-SAE handshake process; comparing handshake processes of various frequency bands, verifying hardware generation logic consistency, detecting random number uniqueness and hash matching, counting the number of handshake failures, and determining a potential attack when the number of handshake failures exceeds a dynamic threshold; if it is detected that a 6GHz frequency band uses a WPA2 authentication mode, an alarm is triggered and the frequency band communication is disabled; if any rule is violated, a security anomaly is determined, and a corresponding risk score is output. The system dynamically adjusts a defense strategy according to the score: when the risk is high, the PMK is refreshed or the frequency band is disabled; when the risk is medium, protocol compatibility negotiation is performed; and when the risk is low, only logs are recorded. The application can realize efficient real-time monitoring of wireless network equipment.

The application discloses a robust wireless key generation method based on timeout selective discard and automatic calibration, and belongs to the field of wireless network security. In the application, a key is generated by measuring channel characteristics of received data frames during node communication. The node has five states, i.e. a state of sending and receiving data frames, a state of sending data frames attached with a key error correction code and a hash value, and a state of sending and receiving data frames attached with a key hash value. The node is switched among the five states, and only a small amount of overhead is added to realize wireless key generation and autonomous update. An automatic calibration reset mechanism is used to enable both communication parties to still synchronously collect channel characteristic data after unexpected restart of the node. A timeout retransmission scheme and a timeout selective discard channel characteristic data mechanism are used to solve the problem of unpaired channel characteristic data of both communication parties after packet loss. The application can realize key generation and autonomous update between two communication nodes, and can significantly improve the robustness of a wireless key generation system.