CN102299790A - Green firewall control system beneficial to Internet application information safety - Google Patents
Green firewall control system beneficial to Internet application information safety Download PDFInfo
- Publication number
- CN102299790A CN102299790A CN2011102438801A CN201110243880A CN102299790A CN 102299790 A CN102299790 A CN 102299790A CN 2011102438801 A CN2011102438801 A CN 2011102438801A CN 201110243880 A CN201110243880 A CN 201110243880A CN 102299790 A CN102299790 A CN 102299790A
- Authority
- CN
- China
- Prior art keywords
- unit
- green
- green shield
- control system
- password
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Landscapes
- Storage Device Security (AREA)
Abstract
The invention discloses a green firewall control system beneficial to Internet application information safety, comprising a PC (Personal Computer) unit and a green firewall unit which both transfer data through a serial bus, wherein the PC unit comprises a cipher setting unit, a green firewall processing unit, a network card control unit and a command control unit which are connected pairwise. In addition, the green firewall unit comprises a single chip microcomputer and a USB (Universal Serial Bus)/serial port conversion unit. The single chip microcomputer serves as a core processing module of the green firewall unit and also comprises a cipher storer and an input unit, wherein the cipher storer is used for storing system ciphers, and the input unit is used for inputting commands to the command control unit of the PC unit. The green firewall control system can be used for effectively managing network application, is also very convenient for parents of the teenaged to master and use, and can more effectively play the role of a network filtering monitoring system and restore a green network environment so that teenaged users are not interfered by bad information when learning knowledge from the network.
Description
Technical field
The invention belongs to information security application system technical field, especially relate to a kind of green shield prevention and control system that benefits the internet, applications information security.
Background technology
Internet technology is propagated to information and has been brought revolutionary variation, for example, " the no centralization " of network, Free entry for all for it, has unlimited information source, and everyone both can be that the user of information also can be its supplier.And network also has interactivity, and the information that the user can accept oneself is independently selected and controlled.
These characteristics have broken through passing all communication forms, for the variation of information and the expansion in freedom of speech space provide very big facility.But network need be got in touch freely with the relative of the external world, so can be subjected to the threat of many aspects easilier, for example threat that causes of physical threaten, system vulnerability, identity are differentiated and threatened, cable connects and threatens and aspects such as harmful program threaten.
Though though, really, can not on sound lines come entirely true safe use network owing to the deficiency of self computer knowledge and ability along with whole people's universalness of Back ground Information knowledge makes a lot of people all understand very much these harm of network.Therefore, with a kind of technology, allow computer unconditionally accept network security and guide that using just becomes is necessary very much from chip controls.
And at present, the technology of this respect is compared ripe not enough, there are problems such as service efficiency is not high, for example be embodied in, the network that a lot of parentss of student will use network filtering system to control children uses, but as the deficiency of teen-age children owing to self-control itself, and can hide or cancel the use of this type of software at an easy rate, so that the head of a family can't reach the purpose of control, also lost simultaneously the real meaning of using a little type systematics.
Summary of the invention
In order to address the above problem, the invention provides a kind of based on the mutual green shield prevention and control system that benefits the internet, applications information security in green shield unit and PC unit.
Purpose of the present invention is achieved by the following technical programs:
A kind of green shield prevention and control system that benefits the internet, applications information security comprises PC unit and green shield unit, and PC unit and green shield unit are by the universal serial bus Data transmission, and simultaneity factor is that exclusive hardware ID is set in green shield unit.
Green shield unit need just can become key by carry in the PC unit of prevention and control system, in application, the PC unit of a prevention and control system can corresponding a plurality of green shields unit, green shield unit also can be mounted in the PC unit of a plurality of different prevention and control systems, thereby strengthened the autgmentability of system, be beneficial to practical application.
When the prevention and control system installs for the first time, need administrator's password be set in the PC unit side, be used for the management of whole prevention and control system.
Wherein, the PC unit comprises password setting unit, green shield processing unit, network interface card control unit and instruction control unit; Password setting unit, green shield processing unit, network interface card control unit link to each other in twos with instruction control unit.
The password setting unit is used for being provided with and revising system password.
The carry that green shield processing unit is used for carry green shield unit and deletes green shield unit.After the green shield processing unit of PC unit is deleted the carry of green shield unit, this green shield unit will lose efficacy in the PC unit, and the encrypted message about the PC unit in this green shield unit also can be eliminated simultaneously.
The network interface card control unit is used to control network interface card; Instruction control unit is used for receiving instruction.
In addition, green shield unit comprises single-chip microcomputer and USB/ serial ports converting unit.
Single-chip microcomputer is the core processing module of green shield unit, and single-chip microcomputer comprises encryption memory and input unit simultaneously; Encryption memory is used for the saved system password, and input unit is used for the instruction control unit input instruction to the PC unit.Because system password is kept on the encryption memory of green shield unit, so even use other machine or refitting machine, system password can not be changed.
Because the output of single-chip microcomputer is rs 232 serial interface signal, therefore need add a USB/ serial ports conversion chip, to carry out communication with the PC unit by USB.
USB/ serial ports converting unit is connected with usb bus, and single-chip microcomputer carries out communication by USB/ serial ports converting unit and PC unit.
Install after the driver of system, the PC unit can preestablish a virtual serial port, and carries out communication by this virtual serial port and green shield unit.Set virtual serial port, PC unit and the green shield unit ability normal communication of communication in the PC unit side.
Simultaneously, behind the PC unit starting, can send instruction to the virtual serial port that presets, when green shield unit effectively was connected with the PC unit, green shield unit can be received the instruction that the PC unit is sent and send it back and answer message to the PC unit; After PC receives the unit receiveing the response of green shield unit, promptly think effectively to be connected with green shield unit, proceed remaining operation; Whether simultaneously, the PC unit can repeat above step, detect effectively to be connected with green shield unit.
After the system start-up, when having only the hardware ID stored when green shield unit and password to mate with the setting in the PC unit, network interface card is just enabled by system, and when not matching with the setting of PC unit for green shield unit does not exist or green shield unit is stored hardware ID and password, system will forbid network interface card.When green shield unit successfully is connected with the PC unit, send hardware ID and encrypted message, send instruction to the PC unit, enable network interface card with information matches success back in the PC unit to the PC unit.
The password setting unit is encrypted system password by the MD5 algorithm, the password after will encrypting simultaneously stores on the encryption memory of green shield unit.
The PC unit is provided with buffer circle in the connection with green shield unit, joining end to end of buffer circle forms an annulus, and the each reading of data buffering of system all can search for whether there is complete Frame in buffer circle.
It is two spcial characters that preceding two bytes of Frame fixedly install, and as the beginning of valid data, assistant software is by seeking the starting point of two spcial character specified data frames; Wherein, in the agreement of native system, preceding two identification codes that byte is exactly a Frame of Frame.
PC seeks error in data by check code in the unit, and concrete check code algorithm is: begin to the arithmetic sum of all bytes of data field end from order in the Frame, the radix-minus-one complement of getting the arithmetic sum lowest byte is a check code.
The network interface card control unit obtains hardware list by the hardware storehouse of access system, and enumerate the interface that hardware to need, obtain the property value of hardware afterwards, thereby find network card equipment, realize the forbidding of network interface card and enable operation according to the object oriented of device name and hardware device.
The PC unit need guarantee oneself not to be forced closed, and could guarantee the effective control to network.Whether the PC unit carries out self-protection by the mode of intercepting system api function, is specially, be the handle of PC unit program process by prejudging in the system call function, and then realize the function forbid positive closing.
The present invention compared with prior art has the following advantages:
The present invention can use network and effectively manage, simultaneously the unusual teen-age head of a family of being convenient to grasps and uses again, can more effectively bring into play the effect of network filtering supervisory control system, can reduce the network environment of a green, the unlikely interference that is subjected to flame when making teenager user from network, obtain knowledge.
Description of drawings
The present invention is described in further detail below in conjunction with embodiment and accompanying drawing:
Fig. 1 for a specific embodiment of the present invention the system configuration schematic diagram.
Embodiment
The present invention is described in further detail below in conjunction with drawings and Examples, but should be clear and definite be that embodiments of the present invention are not limited thereto.
Be illustrated in figure 1 as a kind of green shield prevention and control system that benefits the internet, applications information security provided by the invention, comprise PC unit and green shield unit, PC unit and green shield unit are by the universal serial bus Data transmission, and simultaneity factor is that unique exclusive hardware ID is set in green shield unit.Because green shield unit has unique hardware ID, so fundamentally stopped the possibility that is forged or is replicated.
Green shield unit need just can become key by carry in the PC unit of prevention and control system, in application, the PC unit of a prevention and control system can corresponding a plurality of green shields unit, green shield unit also can be mounted in the PC unit of a plurality of different prevention and control systems, thereby strengthened the autgmentability of system, be beneficial to practical application.
When the prevention and control system installs for the first time, need administrator's password be set in the PC unit side, be used for the management of whole prevention and control system.
Wherein, the PC unit comprises password setting unit, green shield processing unit, network interface card control unit and instruction control unit; Password setting unit, green shield processing unit, network interface card control unit link to each other in twos with instruction control unit.
The password setting unit is used for being provided with and revising system password.
The carry that green shield processing unit is used for carry green shield unit and deletes green shield unit.After the green shield processing unit of PC unit is deleted the carry of green shield unit, this green shield unit will lose efficacy in the PC unit, and the encrypted message about the PC unit in this green shield unit also can be eliminated simultaneously.
The network interface card control unit is used to control network interface card; Instruction control unit is used for receiving instruction.
In addition, green shield unit comprises single-chip microcomputer and USB/ serial ports converting unit.Green shield unit adopts USB not have the mode of driving, and has improved availability, and is very easy to use.
Single-chip microcomputer is the core processing module of green shield unit, and single-chip microcomputer comprises encryption memory and input unit simultaneously; Encryption memory is used for the saved system password, and input unit is used for the instruction control unit input instruction to the PC unit.Because system password is kept on the encryption memory of green shield unit, so even use other machine or refitting machine, system password can not be changed, and has improved the operation stability of system.
Because the output of single-chip microcomputer is rs 232 serial interface signal, therefore need add a USB/ serial ports conversion chip, to carry out communication with the PC unit by USB.
USB/ serial ports converting unit is connected with usb bus, and single-chip microcomputer carries out communication by USB/ serial ports converting unit and PC unit.
Install after the driver of system, the PC unit can preestablish a virtual serial port, and carries out communication by this virtual serial port and green shield unit.Set virtual serial port, PC unit and the green shield unit ability normal communication of communication in the PC unit side.
The service processes that becomes operating system can be registered in the PC unit when starting for the first time, later on each start-up system, the PC unit all with the form of service with system start-up.
Simultaneously, behind the PC unit starting, can send instruction to the virtual serial port that presets, when green shield unit effectively was connected with the PC unit, green shield unit can be received the instruction that the PC unit is sent and send it back and answer message to the PC unit; After PC receives the unit receiveing the response of green shield unit, promptly think effectively to be connected with green shield unit, proceed remaining operation; Whether simultaneously, the every certain interval of time in PC unit can repeat above step, detect effectively to be connected with green shield unit.
After the system start-up, when having only the hardware ID stored when green shield unit and password to mate with the setting in the PC unit, network interface card is just enabled by system, and when not matching with the setting of PC unit for green shield unit does not exist or green shield unit is stored hardware ID and password, system will forbid network interface card.When green shield unit successfully is connected with the PC unit, send hardware ID and encrypted message, send instruction to the PC unit, enable network interface card with information matches success back in the PC unit to the PC unit.
The password setting unit is encrypted system password by the MD5 algorithm, the password after will encrypting simultaneously stores on the encryption memory of green shield unit.
Concrete, the password setting unit is mapped as " byte serial " of random length the big integer of a 128bit.By the anti-original character string that pushes away of the big integer of this 128bit is difficult, generally speaking, even see source program and arthmetic statement, also the big integer transform of this 128bit can't be returned original character string.From mathematical principle, be because original character string have infinite a plurality of, this a bit picture do not have contrafunctional mathematical function, promptly its process is irreversible.The information of input is handled in the password setting unit with 512 groupings, and each grouping is divided into 16 32 seat groupings again, after having passed through a series of processing, the output of algorithm is formed by four 32, will will generate 128 hashed values after these four 32 packet concatenation.
From the angle of safety, the password setting unit is output as 128, if the dyscalculia that adopts message of pure heavy attack searching to have given hash value is 2128, the computer that can test 1000000000 message with per second takes 1.07 * 1022 years.If adopt the birthday attack method, seeking has two message of identical hash value need test 264 message, and the computer that can test 1000000000 message with per second takes 585 years.
System of the present invention has guaranteed the fail safe of entire system more by the mode of multiple means combination.
Adopt serial communication mode to communicate between PC unit and the green shield unit, adopt the various software strategy to guarantee the validity and the correctness of transfer of data, specific as follows.
1) loop buffer.The PC unit is provided with buffer circle in the connection with green shield unit, joining end to end of buffer circle forms an annulus, and the each reading of data buffering of system all can search for whether there is complete Frame in buffer circle.So just can effectively prevent in transmission course, at the leading portion of Frame or terminal because the situation that is interfered and is added mess code and whole segment data frame is abandoned.
2) Frame identification code.Fixedly installing in preceding two bytes of Frame is two spcial characters, and as the beginning of valid data, assistant software is by seeking the starting point of two spcial character specified data frames; Wherein, in the agreement of native system, preceding two identification codes that byte is exactly a Frame of Frame.
3) data verification sign indicating number.In the process of transfer of data, might be interfered causes middle some part of data to change, and runs into this situation, and loop buffer and Frame identification code all can't be found mistake, and at this moment the PC unit just need be used check code and seek error in data.And for the extra load of reduction system owing to the calculation check sign indicating number, the check code algorithm of native system does not adopt the CRC scheduling algorithm of more complicated, but adopted following check code algorithm: begin to the arithmetic sum of all bytes of data field end from order in the Frame, the radix-minus-one complement of getting the arithmetic sum lowest byte is a check code.
The network interface card control unit obtains hardware list by the hardware storehouse of access system, and enumerate the interface that hardware to need, obtain the property value of hardware afterwards, thereby find network card equipment, realize the forbidding of network interface card and enable operation according to the object oriented of device name and hardware device.
The PC unit need guarantee oneself not to be forced closed, and could guarantee the effective control to network.Whether the PC unit carries out self-protection by the mode of intercepting system api function, is specially, be the handle of PC unit program process by prejudging in the system call function, and then realize the function forbid positive closing.
Usually the self-protecting method that adopts is to create a thread not stop detection procedure name (by enumerating process list), but that this method takies resource is more serious, so the present invention adopts the method for intercepting system api function.
Illustrate, system call is when closing a process by force
BOOL?WINAPI?TerminateProcess(
HANDLE?hProcess，
UINT?uExitCode
)；
If utilize this api function of hook interception TerminateProcess, the function that the handle that first judgement is our PC unit program process in this function of system call just can realize forbidding positive closing.
Operating system is being called:
BOOL?WINAPI?TerminateProcess(
HANDLE?hProcess，
UINT?uExitCode
)；
Must call earlier before:
HANDLE?WINAPI?OpenProcess(
DWORD?dwDesiredAccess，
BOOL?bInheritHandle，
DWORD?dwProcessId
)；
Therefore driving the handle of journey into, if first parameter is the PROCESS_TERMINATE mode, explanation is to finish this process by force, also can analyze the calling process of opening in this way, checks that process ID is that system does not allow the ID of the process of closing.
Create a DLL engineering, use the APIHOOK class of windows kernel programming the inside, in the DLL engineering, add the hook of a WH_SHELL, when its effect is process creation dll file is inserted into inside each process, thereby reach the purpose of tackling api function.Dll file is inserted in other process, then the OpenProcess function is replaced to the OpenProcess function of user oneself definition.The process ID of user's process when operation is by lpData-＞dwProcessId=::GetCurrentProcessId (); Obtain and pass to the DLL engineering in the mode of memory-mapped.
DLL has tackled the inside DWORD dwProcessId parameter of OpenProcess function the inside, if these data are the just direct NULL values of backspace of the ID of the own process of user, just open the consumer process failure, system just has no idea to have closed user's process by force with TerminateProcess like this.
In the application, on the PC unit, install earlier and be used for the software that network filtering detects, set simultaneously the path and the filename of filter software in green shield unit, whether the PC unit is used for the software that network filtering detects and it is come into force by detecting this software and start and then judging whether system has installed.Whether the PC unit just starts to judge whether system has installed the software and the software that are used for the network filtering detection and whether entered into force by detecting this software later on.
Claims (10)
1. a green shield prevention and control system that benefits the internet, applications information security is characterized in that comprising PC unit and green shield unit, and PC unit and green shield unit are by the universal serial bus Data transmission, and simultaneity factor is that exclusive hardware ID is set in green shield unit:
Wherein, the PC unit comprises password setting unit, green shield processing unit, network interface card control unit and instruction control unit; Password setting unit, green shield processing unit, network interface card control unit link to each other in twos with instruction control unit;
The password setting unit is used for being provided with and revising system password;
The carry that green shield processing unit is used for carry green shield unit and deletes green shield unit;
The network interface card control unit is used to control network interface card; Instruction control unit is used for receiving instruction;
In addition, green shield unit comprises single-chip microcomputer and USB/ serial ports converting unit;
Single-chip microcomputer is the core processing module of green shield unit, and single-chip microcomputer comprises continuous encryption memory and input unit simultaneously; Encryption memory is used for the saved system password, and input unit is used for the instruction control unit input instruction to the PC unit;
USB/ serial ports converting unit is connected with usb bus, and single-chip microcomputer carries out communication by USB/ serial ports converting unit and PC unit.
2. the green shield prevention and control system that benefits the internet, applications information security according to claim 1 is characterized in that described PC unit preestablishes a virtual serial port, and carries out communication by this virtual serial port and green shield unit; Simultaneously, behind the PC unit starting, can send instruction to the virtual serial port that presets, when green shield unit effectively was connected with the PC unit, green shield unit can be received the instruction that the PC unit is sent and send it back and answer message to the PC unit; After PC receives the unit receiveing the response of green shield unit, promptly think effectively to be connected with green shield unit, proceed remaining operation; Whether simultaneously, the PC unit can repeat above step, detect effectively to be connected with green shield unit.
3. the green shield prevention and control system that benefits the internet, applications information security according to claim 1, after it is characterized in that system start-up, when having only the hardware ID stored when described green shield unit and password to mate with the setting in the PC unit, network interface card is just enabled by system, when not matching with the setting of PC unit for green shield unit does not exist or green shield unit is stored hardware ID and password, system will forbid network interface card.
4. the green shield prevention and control system that benefits the internet, applications information security according to claim 1, it is characterized in that described password setting unit encrypts system password by the MD5 algorithm, the password after will encrypting simultaneously stores on the encryption memory of green shield unit.
5. the green shield prevention and control system that benefits the internet, applications information security according to claim 1, it is characterized in that described PC unit is provided with buffer circle in the connection with green shield unit, joining end to end of buffer circle, form an annulus, the each reading of data buffering of system all can search for whether there is complete Frame in buffer circle.
6. the green shield prevention and control system that benefits the internet, applications information security according to claim 5, it is two spcial characters that preceding two bytes that it is characterized in that described Frame fixedly install, as the beginning of valid data, assistant software is by seeking the starting point of two spcial character specified data frames; Wherein, in the agreement of native system, preceding two identification codes that byte is exactly a Frame of Frame.
7. the green shield prevention and control system that benefits the internet, applications information security according to claim 1, it is characterized in that described PC unit seeks error in data by check code, concrete check code algorithm is: begin to the arithmetic sum of all bytes of data field end from order in the Frame, the radix-minus-one complement of getting the arithmetic sum lowest byte is a check code.
8. the green shield prevention and control system that benefits the internet, applications information security according to claim 1, it is characterized in that described network interface card control unit obtains hardware list by the hardware storehouse of access system, and enumerate the interface that hardware to need, obtain the property value of hardware afterwards, thereby the object oriented according to device name and hardware device finds network card equipment, realizes the forbidding of network interface card and enables operation.
9. the green shield prevention and control system that benefits the internet, applications information security according to claim 1, after it is characterized in that described green shield processing unit is deleted the carry of green shield unit, this green shield unit will lose efficacy in the PC unit, and the encrypted message about the PC unit in this green shield unit also can be eliminated simultaneously.
10. the green shield prevention and control system that benefits the internet, applications information security according to claim 1; it is characterized in that described PC unit carries out self-protection by the mode of intercepting system api function; be specially; whether by prejudging in the system call function is the handle of PC unit program process, and then realizes the function forbid positive closing.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2011102438801A CN102299790A (en) | 2011-08-23 | 2011-08-23 | Green firewall control system beneficial to Internet application information safety |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2011102438801A CN102299790A (en) | 2011-08-23 | 2011-08-23 | Green firewall control system beneficial to Internet application information safety |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN102299790A true CN102299790A (en) | 2011-12-28 |
Family
ID=45359979
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2011102438801A Withdrawn CN102299790A (en) | 2011-08-23 | 2011-08-23 | Green firewall control system beneficial to Internet application information safety |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102299790A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105634843A (en) * | 2014-10-31 | 2016-06-01 | 江苏威盾网络科技有限公司 | Network monitoring filtering system based on hardware control |
-
2011
- 2011-08-23 CN CN2011102438801A patent/CN102299790A/en not_active Withdrawn
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105634843A (en) * | 2014-10-31 | 2016-06-01 | 江苏威盾网络科技有限公司 | Network monitoring filtering system based on hardware control |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11122022B2 (en) | Network connection automation | |
| CN101252439B (en) | System and method for increasing information safety equipment security | |
| CN102842001B (en) | System and method for detecting computer security information based on U disc authentication | |
| KR20190033716A (en) | Apparatus and method for communication using message history-based security key using blockchain | |
| CN113014444B (en) | Internet of things equipment production test system and safety protection method | |
| CN105099705B (en) | A kind of safety communicating method and its system based on usb protocol | |
| CN113014539A (en) | Internet of things equipment safety protection system and method | |
| CN106055932A (en) | MCU program anti-plagiarizing method and system with Boost loader function | |
| CN110324820A (en) | A kind of Internet of Things safety right appraisal method, system and readable medium | |
| CN106878336A (en) | A kind of data interactive method and device | |
| WO2021042736A1 (en) | Encryption method for application data unit in water conservancy industrial control system | |
| Durante et al. | CVS: A compiler for the analysis of cryptographic protocols | |
| CN106326736A (en) | Data processing method and system | |
| CN104021351B (en) | The access method and device of a kind of data resource | |
| CN102299790A (en) | Green firewall control system beneficial to Internet application information safety | |
| CN107172078B (en) | Security management and control method and system of core framework platform based on application service | |
| Zou et al. | Information Security Transmission Technology in Internet of Things Control System. | |
| CN112422223B (en) | TCP/IP-based time synchronization device, time synchronization method and time mark monitoring system | |
| Gu et al. | IoT security and new trends of solutions | |
| US20190258801A1 (en) | Soft-wired radio (swr) web machine | |
| CN112532586A (en) | Network communication method, system, computer equipment and storage medium | |
| Wang et al. | An access control method against unauthorized and non-compliant behaviors of real-time data in industrial iot | |
| CN110046946A (en) | Electronic certificate management equipment and system | |
| CN2927185Y (en) | Data safety transmission equipment | |
| Humayed | Securing CAN-based cyber-physical systems |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C04 | Withdrawal of patent application after publication (patent law 2001) | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20111228 |
|
| DD01 | Delivery of document by public notice |
Addressee: Zhang Shiliang Document name: Notification of Passing Examination on Formalities |
|
| DD01 | Delivery of document by public notice |
Addressee: Zhang Shiliang Document name: Notice of conformity |