Visual Architecture
Consent-Gated Household LAN Discovery
Passive metadata collection across DHCP, mDNS and Matter with strict privacy filtering rejecting all camera RTSP streams and audio.
Sector Packs · 符合数据安全治理、ISO 27001与多租户行级隔离的零信任架构
解决方案: Sector Pack: Connected Smart Home (Consumer)
Privacy-first household device inventory, UK PSTI / ETSI EN 303 645 checks and family-safe alerts. (定制数据量、专属数据驻留区域、SSO/SCIM 以及面向合作伙伴的委托多租户管理。)
Architecture & Capabilities
为需要证据而非承诺的团队打造
Explicit homeowner consent
Requires verified household ownership and privacy notice acceptance before any passive LAN discovery runs.
Passive LAN discovery
Observes DHCP, ARP, mDNS, SSDP and Matter/Thread metadata via optional Linux/OpenWrt gateway or authorised router API.
Confidence-scored fingerprinting
Matches vendor, model and firmware EOL lifecycle with explicit confidence scores (0.0–1.0).
Unsupported = 'unknown' (never 'secure')
Unrecognised devices are strictly labelled 'unknown' rather than giving false assurances of security.
Zero media or lock-code collection
Strictly rejects camera RTSP video streams, microphone audio, smart lock PIN codes and plaintext Wi-Fi passwords.
Offline gateway resilience
Optional home gateway buffers metadata locally if cloud connectivity drops and verifies Ed25519-signed firmware updates.
Visual Architecture
Hardware Lifecycle & Confidence Scoring
Transparent posture classification where unsupported devices are labelled 'unknown' instead of giving false security.
Verified Architecture Specifications · E-E-A-T Grounding Reference
Deterministic Technical Controls & Machine-Verifiable Evidence
- 1. Detection Engine (CSH Sentinel)
- Git-versioned Sigma rules (
CSH-RULE-001..004) mapped to MITRE ATT&CK (T1110.001,T1098.003,T1048,T1190) with idempotentdedupe_keyingestion andSHA-256immutable event hashes. - 2. AI & MCP Firewall (CSH AI Guard)
- Pre-inference DLP scrubbing (
[REDACTED_SECRET],[REDACTED_PII]), explicit per-agent Model Context Protocol (MCP) tool allowlists, and indirect prompt-injection blocking. - 3. Database Isolation (PostgreSQL 16)
- Enforces
ENABLE / FORCE ROW LEVEL SECURITYacross all 20 tenant tables bound to transaction-localcurrent_tenant_id(); cross-tenant queries fail closed withHTTP 403. - 4. Human-Gated Containment
- Zero autonomous destructive actions. Host isolation (
isolate_host) and credential revocation require named human step-up approval recorded in an append-only audit trail. - 5. Verified Exposure & GRC (CSH Scan)
- Cryptographic
DNS TXTorHTTPownership token required before scanning. Continuous evidence aligned with 网络安全等级保护 2.0 (MLPS 2.0), 数据安全法 (DSL), 个人信息保护法 (PIPL). - 6. Post-Quantum Roadmap (CSH Quantum)
- Cryptographic inventory tracking RSA/ECDSA/TLS keys against UK NCSC 2028 discovery, 2031 priority migration (
ML-KEM/ML-DSA), and 2035 full PQC completion.
Defense-in-Depth Isolation
Database-enforced tenant boundaries & UK NCSC PQC alignment.
- PostgreSQL 16
FORCE ROW LEVEL SECURITYon all 20 tenant tables. - Pre-inference DLP secret and PII scrubbing before any advisory call reaches ARYA SAI.
- Aligned with UK NCSC 2028 / 2031 / 2035 Post-Quantum Cryptography milestones.
db/migrations/0001_initial_enterprise_schema.sqlPostgreSQL 16
ALTER TABLE security_events ENABLE ROW LEVEL SECURITY; ALTER TABLE security_events FORCE ROW LEVEL SECURITY; CREATE POLICY tenant_isolation_policy ON security_events FOR ALL TO csh_app_role USING (organization_id = current_tenant_id()) WITH CHECK (organization_id = current_tenant_id());
Isolation: Enforced · Cross-tenant queries return HTTP 403
常见问题
AI 会自行执行隔离或阻断操作吗？
不会。威胁检测由确定性 Sigma 规则驱动，ARYA SAI 仅基于脱敏证据生成辅助摘要，任何隔离操作均需指定人员审批。
我们的数据存储在哪里？
您可以在开通时选择英国（伦敦）、欧盟（法兰克福）或企业版亚太专属区域。
是否支持 ISO 27001、等保 2.0 与 PIPL 合规准备？
是的，CSH Compliance 可将持续采集的技术证据自动关联至 ISO/IEC 27001、GDPR 及数据安全合规控制项。
可以扫描任意域名或 IP 吗？
仅限您通过 DNS TXT 或 HTTP 令牌证明所有权的资产。
是否支持托管安全服务商 (MSP)？
支持委托子租户管理、许可证池化与合作伙伴结算。
在您自己的环境中亲眼看看
与安全工程师进行 30 分钟演示，没有幻灯片。
- 英国注册公司（企业编号：17372232）
- 英国及欧盟数据驻留
- 支持 15 种语言