106results about How to "Avoid malicious access" patented technology

The invention provides a car networking CAN data collection method. The method comprises the steps that a DBC file and a configuration file for car body information collection are generated according to the collection item of the car body information; a car networking back-end server sends the configuration file to a vehicle-mounted terminal; the vehicle-mounted terminal collects the car body information data on a bus according to the configuration file; a data package is generated for a car body information data group; the data package is transmitted back to the car networking back-end server; and the car networking back-end server parses the data package to acquire the car body information. According to the invention, the method has the advantages of high adaptability, small dependence on the terminal, high data security and rapid and efficient acquisition of the car body information, is free of manual field operation, is simple and efficient, and is not error-prone; the configuration file is universal, can dynamically match different vehicle models in a car networking system, and can meet the collection requirements of multiple CAN bus interfaces in a vehicle model; and the car networking system has high compatibility.

The invention discloses a multi-dimensional personnel and equipment intelligent positioning wearable device, and the device comprises a wireless communication module which is used for collecting related positioning data and enables the related positioning data to be remotely transmitted; a Beidou / GPS positioning module which is used for collecting and analyzing a Beidou / GPS satellite signals, carrying out position calculation, and outputting latitude and longitude information; a BLE data collection module which is used for collecting the MAC, field intensity and TxPower of a Ibeacon Bluetooth signal; a WIFI data collection module which is used for collecting the MAC and radio frequency signal intensity of a WIFI host; an RFID data collection module which is used for collecting the ID and radio frequency signal intensity of an RFID host; a rotating speed and acceleration measurement module which is used for collecting the acceleration and rotating speed of the device; and a CPU module which is used for the management of the whole unit. The device is suitable for the whole-course positioning of the personnel and equipment in different geographic environments, such as an open environment, an indoor environment, commuting ports, and the like.

The invention relates to an access control method of a multimedia system on a secure operating system and a mobile terminal for achieving the method.The method comprises the steps that an application access request for selecting dependable applications is initiated for the secure operating system from client side applications of the multimedia system; whether the current client applications initiating calling are vicious applications or not is judged, if not, the next step continues, and if yes, the information that selection fails is returned to the client side applications, and processing is interrupted; the application access request is sent to the secure operating system from the multimedia system; the dependable applications are obtained in the secure operating system according to the application access request and returned to the multimedia system.According to the method, vicious access initiated by the vicious applications to the dependable applications in the secure operating system can be prevented under the condition of not switching the systems, and the problem that access to the dependable applications cannot be achieved due to vicious access can be avoided.

The invention provides an isolation method and an isolation device for an application program. The method comprises steps as follows: when a to-be-isolated application program stored in a storage path in a non-isolation region is detected, the storage path of application data of the to-be-isolated application program is modified to be a storage path in an isolation region; the access right of the application data in the storage path in the isolation region is modified, and only the application program has the access right to the application data. According to the technical scheme, the application data of the application program which needs to be protected are independently stored in the isolation region, so that only the isolated application program in the isolation region has the access right to the application data, and any application program outside the isolation region has no access right to the application data of the isolated application program in the isolation region; the probability that a malicious application program in the non-isolation region has access to private data of a user in the application data of the isolated application program is avoided; the safety of the isolated application program and the data safety and the property safety of a user are protected better.

The invention belongs to the technical field of control flow obfuscation, and discloses a program control flow obfuscation method and system, a storage medium, a cloud server and an application. Branch statement judgment conditions in an original program are hidden, and a control flow query function is used for replacing the branch statement judgment conditions; the control flow is further obfuscated by inserting a pseudo-branch statement into the program; the conversion program is sent to an untrusted public cloud, and a control flow matrix is sent to a trusted private cloud; and the conversion program is run on the public cloud based on the control flow matrix. According to the invention, the variable of each branch statement condition can be hidden, so that application program logic isprevented from being maliciously acquired and utilized by an external attacker; a pseudo branch statement is inserted to increase the difficulty of reconstructing a program control flow by an attacker; and a relation constraint statement is inserted, and data flow consistency check is carried out, so that an attacker is resisted to actively change the running process of a program, and new data ispurposefully added in the program running process to collect effective information.

The invention relates to an intelligent device control method, an intelligent device and a server. The method comprises steps: receiving and storing an identification code sent by the server; acquiring a control operation to be executed and generating a data operation request, the data operation request comprising: the identification code and operation information of the control operation to be executed; sending the data operation request so that the server verifies the data operation request and feeds back the verification passing message to the intelligent terminal after the verification passes; when the verification pass message is received, the control operation to be performed being completed. The invention completes the first verification through the setting of the identification code, and completes the second verification through the processing of the data operation request. The intelligent device control method of the invention can effectively prevent the user information frombeing accessed maliciously, avoid data leakage, and ensure the safety of the user information through secondary verification.

The invention discloses a binning data processing method, device, equipment, a storage medium and a program product, and the method comprises the steps: obtaining a plurality of data IDs sent by a target variable provider, an encrypted target variable corresponding to each data ID, and an encrypted opposite variable, and calculating an encrypted positive sample proportion and an encrypted negative sample proportion corresponding to each sub-box, multiplying the encrypted positive sample proportion and the encrypted negative sample proportion by corresponding random numbers, and sending multiplication results to a target variable provider, and obtaining an intermediate result corresponding to each sub-box determined by the target variable provider according to the multiplication result, and sending the encrypted information value and / or a result obtained by adding the random number to the evidence weight to the target variable provider according to the intermediate results corresponding to the plurality of sub-boxes and the corresponding random number. According to the method, the security of solving the information value and the evidence weight can be improved.

The invention belongs to the electric power system field and discloses an electric power system basic data lean processing method. The method comprises the following steps that electric power organizations at all levels have Qt basic databases of various levels input in a classified and authority-diversified way and perform remote data exchanges with a centralized scheduling system real-time database and a centralized scheduling system historic database through the Qt basic databases of various levels; when corresponding data are to be retrieved, authority authentication is performed on a query person; the query person passing the authority authentication can inquire classified statistical graphically-displayed basic data within the corresponding authority; and the basic data are displayed on templates of corresponding diversified types. By means of the method with the above-mentioned technical scheme, personnel authority determination and access range setting of input data and access data can be achieved. Rapid visualized statistics of the basic data can be also realized. Modularized management is further achieved. The basic data statistical analysis efficiency can be further improved. The workload of workers is further reduced.

The invention discloses a novel cross-network data exchange mode and a communication method, the novel cross-network data communication method comprises the following steps: firstly, uploading data bya source data end, then creating a digital package, then carrying out technical auditing, then carrying out manual auditing, then carrying out data local caching and encryption, and then carrying outcross-network ferry; and performing data packet local caching, then performing analysis and verification, and finally performing access control and data receiving. According to the invention, the Ftrans cross-network file security exchange system is adopted to carry out cross-network transmission of the file, compared with the traditional exchange mode, the transmission speed is faster, and in addition, the anti-virus and sensitive information detection functions are realized. According to the invention, the encryption unit is arranged in the communication method, so that the security in thefile transmission process can be further improved; and the novel cross-network data exchange mode and the communication method have a temporary storage function, file exchange does not need to be carried out again in a short time, and when the time from last exchange is too long, only the cloud needs to be logged in to download data.

The embodiment of the invention provides a method for accessing a cloud terminal to a home cloud system. The method comprises the following steps: receiving an access request information of the cloud terminal; judging whether the access request information includes the content of pre-set information standardization or not, wherein the pre-set information standardization comprises an access manner, a request content and an authentication identification code; judging whether the authentication identification code in the access request information is the same to a pre-set identification code in the home cloud system or not if the access request information includes the content of the pre-set information standardization; and allowing to access the cloud terminal if the authentication identification code in the access request information is the same to the pre-set identification code in the home cloud system. The embodiment of the invention further provides cloud access control equipment and the home cloud system. By means of the manner, the cloud terminal can be prevented from being maliciously accessed to the home cloud system, and therefore, the security of the home cloud system is improved.

The invention provides a data request processing method. The method comprises the following steps: receiving a data request sent by a client, wherein the data request carries a request parameter; determining a requested interface according to the request parameter; encrypting the request parameter by using a preset encryption algorithm in the requested interface; and obtaining request data according to the encrypted request parameter. In the embodiment of the invention, the request parameter is encrypted by the preset encryption algorithm in the requested interface, so that the security of therequest parameter is improved. In the process of obtaining the request data by using the request parameter, the request parameter is not easily revealed or stolen by the others, thereby preventing the others from maliciously obtaining the request data by using the request parameter.

The invention provides a book value-added resource management method and management apparatus. The book value-added resource management method comprises the steps of receiving an obtaining request sent by a user end and used for obtaining value-added resources of specified books, wherein the obtaining request contains identifier information of the specified books; judging whether the identifier information of the specified books passes the verification or not; when it is judged that the identifier information of the specified books passes the verification, obtaining the value-added resources associated with the identifier information of the specified books; and sending the value-added resources associated with the identifier information of the specified books to the user end. Through the technical scheme, a user can conveniently and quickly obtain the value-added resources of the books when using the books to obtain more information in combination with the value-added resources of the books, and the information is not limited to contents of paper books, so that the rights and interests of copyrighted books are ensured and the value-added resources of the books are prevented from being maliciously obtained.

The invention discloses an expressway mobile terminal monitoring system and an expressway mobile terminal monitoring method. A main monitoring module is used for acquiring data information of expressway external-field equipment; the data information comprises running state data of the external-field equipment and running state data of an expressway, which is detected by the external-field equipment; a mobile sub monitoring module can acquire the data information through a network. Therefore, according to the expressway mobile terminal monitoring system and the expressway mobile terminal monitoring method, the running state information of the expressway, which is detected by the external-field equipment can be acquired, and a running state of the external-field equipment can be monitored; when the running state of the external-field equipment is abnormal, the mobile sub monitoring module can acquire the information immediately; a holder with the mobile sub monitoring module can reasonably select the information detected by the external-field equipment, so that the phenomenon that the abnormal information detected by the abnormal external-field equipment is used for managing or commanding scheduling is avoided.

This invention provides a method for providing trusted display to security sensitive applications on untrusted computing platforms. This invention has a minimal trusted code base and maintains full compatibility with the computing platforms, including their software and hardware. The core of our invention is a GPU separation kernel that (1) defines different types of GPU objects, (2) mediates access to security-sensitive GPU objects, and (3) emulates accesses to security-sensitive GPU objects whenever required by computing platform compatibility.