A distributed network security monitoring system
By designing a distributed network security monitoring system, real-time monitoring and early warning of the working status of the central control module, the problem that existing systems cannot monitor the central control module is solved, ensuring the normal operation of the monitoring equipment and the reliability and security of the network system.
Patent Information
- Application Number
- CN202211000395.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-08-19
- Publication Date
- 2025-02-14
- Estimated Expiration
- 2042-08-19
AI Technical Summary
The existing network security monitoring system cannot monitor and warn the working status of the central control module in real time, resulting in the equipment not working normally.
Design a distributed network security monitoring system, including a central control module, a data storage module, a main server, a block server and a monitoring device. The central control module is monitored in real time through the equipment status monitoring module, temperature detection module, humidity detection module, network security detection module and power system detection module, and an alarm sound is issued through the equipment status warning module.
Real-time detection and early warning of the central control module is realized, ensuring the normal operation of the monitoring equipment, and improving the reliability and security of the network system.
Smart Images

Figure CN115460120B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of network security monitoring systems, and in particular to a distributed network security monitoring system. Background Art
[0002] Cyber Security refers to the protection of the hardware, software and information in the network system. It includes the continuous, reliable and normal operation of the system, uninterrupted network services, and the information in the system is not destroyed, changed or leaked due to accidental or malicious behavior.
[0003] At present, monitoring systems are widely used in various fields. Traffic monitoring, security monitoring, video conferencing, industrial monitoring, etc. are inseparable from network security monitoring systems. They can not only reduce the incidence of crimes, but also play a role in remote supervision. Therefore, monitoring systems can be seen in many places.
[0004] Network security monitoring is the process of continuously observing what is happening in the user's network, with the goal of detecting potential network threats and detecting the risk of system intrusion as early as possible. Security monitoring can be understood as the "whistleblower" in the network security community. It issues an alarm when a network attack is detected and helps users respond before serious damage is caused. Timely detection and management of potential threats helps protect users' business applications, data, and the entire network.
[0005] The network security monitoring systems currently in use usually rely on a central control module to control the monitoring equipment when in use. However, the central control module is easily damaged by the external environment. Currently, the network security monitoring systems cannot monitor the working status of the central control module, but can only display the temperature and humidity status of the central control module. At the same time, there is no equipment status early warning module installed, so it cannot play an early warning role for the equipment status. Once there is a problem with the central control module, the monitoring equipment will not be able to work normally. Summary of the invention
[0006] The purpose of the present invention is to provide a distributed network security monitoring system to monitor various devices of the network system in real time and issue early warnings in real time to ensure the reliability of network operation.
[0007] To achieve the above object, the present invention provides the following technical solution: a distributed network security monitoring system, comprising: a central control module and a data storage module, wherein the output end of the central control module is connected to a main server, the main server is connected to a block server through a data transmission module, the output end of the block server is connected to a monitoring device through a device control module, and the data storage module is connected to the transmission end of the central control module;
[0008] The central control module includes a power supply module and an equipment status monitoring module. The output end of the equipment status monitoring module is respectively connected to a temperature detection module, a network security detection module, a humidity detection module, and an equipment status early warning module. The output end of the power supply module is connected to a power system detection module.
[0009] Preferably, the central control module and the main server are interconnected, and the main server and the block server are interconnected.
[0010] Preferably, the humidity detection module, the equipment status early warning module, and the network security detection module are connected to the output end of the equipment status monitoring module.
[0011] Preferably, the output end of the main server is connected to a wireless transmission module, the output end of the wireless transmission module is connected to a local area network transmitting module, the output end of the local area network transmitting module is connected to a network security supervision module, the output end of the network security supervision module is respectively connected to a local area network receiving module and a network security early warning module, and the output end of the local area network receiving module is connected to a client receiving end.
[0012] Preferably, the network security supervision module and the network security early warning module are interconnected.
[0013] Preferably, the monitoring device includes a sound acquisition module, an image acquisition module and an infrared acquisition module, the input end of the monitoring device is connected to a device status detection module, and the input end of the block server is connected to a data display module and a network detection module.
[0014] Preferably, the input end of the device status detection module is connected to the block server.
[0015] Preferably, the sound acquisition module, the image acquisition module and the infrared acquisition module are all connected to the output end of the monitoring device.
[0016] Preferably, the data storage module includes a data management module and a data query module, the output end of the data management module is respectively connected to a data backup module, a data storage module and a data encryption module, the output end of the data backup module is connected to a cloud storage module, and the output end of the data storage module is connected to a data deletion module.
[0017] Preferably, the data deletion module is connected to the output ends of the data storage module and the cloud storage module, and the cloud storage module and the data backup module are connected in series to each other at the output end of the data management module.
[0018] Compared with the prior art, the beneficial effect of the present invention is that: when the distributed network security monitoring system needs to perform real-time detection on the central control module, it can detect the information on the working status of the central control module through the temperature detection module, the humidity detection module, the network security detection module and the power system detection module, and transmit various data to the central control module. When the equipment status monitoring module detects that a certain data is abnormal, it can sound an alarm and feed back the abnormal data to the central control module so that the user can handle it in time, thereby ensuring that the monitoring equipment can work normally. This is the characteristic of the distributed network security monitoring system.
[0019] 1. The distributed network security monitoring system, currently network monitoring equipment has been popularized in every region. When the monitoring equipment is in use, it is necessary to monitor the central control module of the monitoring equipment to ensure the stable and normal operation of the monitoring equipment. When the central control module needs to be monitored, the various data of the central control module can be detected through the stability monitoring module, humidity detection module, network security detection module and power system detection module. The alarm can be sounded through the equipment status early warning module, which has played a role in reminding users, so that the monitoring equipment can work normally and ensure the safety and reliability of the network system.
[0020] 2. The distributed network security monitoring system, the network security monitoring equipment can usually remotely transmit the data captured by the monitoring to the client, including protecting the mobile terminal and the PC terminal, etc. When data transmission is required, the data can be transmitted to the client receiving terminal through the LAN transmitting module and the LAN receiving module in the wireless transmission module, so that the client can observe the situation under the monitoring equipment in real time. At the same time, during the data transmission process, in order to ensure the security of data transmission, the network security of the data transmission process can be supervised by the network security supervision module to ensure the stability and security of the data transmission process. When an abnormal situation is detected, the network situation can be sent to the main server through the network security supervision module, so that the user can quickly understand the network situation and ensure the security and stability of the data transmission process.
[0021] 3. In this distributed network security monitoring system, many network monitoring devices will detect the status of the monitoring devices for the normal operation of the monitoring devices. When the working status of the monitoring devices needs to be detected, the data acquisition module can be used to collect images and sounds to play a role in real-time monitoring. At the same time, the monitoring devices are monitored in real time through the device status detection module during the working process. When a certain monitoring device fails, its corresponding device status detection module will send the fault information of the monitoring device to the block server. The block server can understand the cause of the failure of the monitoring device, so that the monitoring device can be maintained and repaired in time, thereby ensuring that the monitoring device can work normally and facilitating the user to maintain and repair the monitoring device.
[0022] 4. In order to facilitate users to view monitoring data, the distributed network security monitoring system and network monitoring equipment need to store monitoring data. When network data needs to be stored, the data can be stored through the data storage module through the central control module, and the data can be encrypted through the data management module. The encrypted data is then stored in the cloud device through the cloud storage module, and the data that has not been used for a long time is deleted through the data deletion module. By encrypting and backing up the data, the security of data storage can be effectively guaranteed, making it convenient for users to search for data. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] Figure 1 This is a schematic diagram of the structural framework of the network security monitoring system of the present invention;
[0024] Figure 2 This is a schematic diagram of the structure framework of the wireless transmission module of the present invention;
[0025] Figure 3 This is a schematic diagram of the block server structure framework of the present invention;
[0026] Figure 4 It is a schematic diagram of the structural framework of the data storage module of the present invention.
[0027] In the figure: 1. Central control module; 2. Main server; 3. Data transmission module; 4. Block server; 5. Equipment control module; 6. Monitoring equipment; 7. Data storage module; 101. Power supply module; 102. Equipment status monitoring module; 103. Temperature detection module; 104. Network security detection module; 105. Humidity detection module; 106. Equipment status warning module; 107. Power system detection module; 201. Wireless transmission module; 202. Local area network transmission module; 203. Network security supervision module; 204, LAN receiving module; 205, network security warning module; 206, client receiving end; 601, sound acquisition module; 602, image acquisition module; 603, infrared acquisition module; 604, device status detection module; 605, data display module; 606, network detection module; 701, data management module; 702, data query module; 703, data backup module; 704, data storage module; 705, data encryption module; 706, cloud storage module; 707, data deletion module. DETAILED DESCRIPTION
[0028] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0029] See also Figure 1-4 The present invention provides a technical solution: a distributed network security monitoring system, comprising: a central control module 1 and a data storage module 7, the output end of the central control module 1 is connected to a main server 2, the main server 2 is connected to a block server 4 through a data transmission module 3, the output end of the block server 4 is connected to a monitoring device 6 through a device control module 5, and the data storage module 7 is connected to the transmission end of the central control module 1;
[0030] During specific implementation, the central control module 1 includes a power supply module 101 and an equipment status monitoring module 102. The output end of the equipment status monitoring module 102 is respectively connected to a temperature detection module 103, a network security detection module 104, a humidity detection module 105, and an equipment status early warning module 106. The output end of the power supply module 101 is connected to a power system detection module 107. The central control module 1 and the main server 2 are interconnected, and the main server 2 and the block server 4 are interconnected. The humidity detection module 105, the equipment status early warning module 106, and the network security detection module 104 are also connected to the output end of the equipment status monitoring module 102.
[0031] In specific implementation, the distributed network security monitoring system controls the main server 2 through the central control module 1, and the main server 2 can control multiple different block servers 4, and the main server 2 can collect statistics on the data of each block server 4, and finally transmit the data to the central control module 1 through the data transmission module 3, and then the central control module 1 manages and stores the data in a unified manner, and each block server 4 can control multiple different monitoring devices 6, so that one central control module 1 can manage multiple monitoring devices 6, and play the role of multi-distributed monitoring, which can be achieved through the device status monitoring module 102 The working status of the central control module 1 is monitored in real time. The temperature of the central control module 1 is monitored by the temperature detection module 103, the network security detection module 104 monitors the network security of the central control module 1, and the humidity detection module 105 monitors the humidity of the central control module 1. The power supply module 101 can supply power to the central control module 1, and then the power system detection module 107 detects the power supply module 101 to ensure that the power supply of the central control module 1 is met. When the device status monitoring module 102 detects an abnormality of the device, an alarm can be sounded through the device status early warning module 106 to remind the user.
[0032] See also Figure 1 It can be seen that the various data of the central control module 1 are monitored in real time through the equipment status monitoring module 102. When a certain data is abnormal, the equipment status early warning module 106 will promptly sound an alarm to remind the user to quickly process the abnormal data, thereby ensuring the stability of the central control module 1 during operation.
[0033] During specific implementation, the output end of the main server 2 is connected to the wireless transmission module 201, the output end of the wireless transmission module 201 is connected to the local area network transmission module 202, the output end of the local area network transmission module 202 is connected to the network security supervision module 203, the output end of the network security supervision module 203 is respectively connected to the local area network receiving module 204 and the network security early warning module 205, the output end of the local area network receiving module 204 is connected to the client receiving end 206, and the network security supervision module 203 and the network security early warning module 205 are interconnected.
[0034] During specific implementation, the distributed network security monitoring system, when in use, can transmit the data captured by the monitoring device 6 to the main server 2 through the block server 4, and then transmit the data to the LAN receiving module 204 through the LAN through the LAN transmitting module 202 in the wireless transmission module 201, receive the data through the LAN receiving module 204, and then transmit the received data to the client receiving end 206, including the mobile end and the PC end, so that the user can observe the data. At the same time, during the data transmission process, the network status can be monitored by the network security supervision module 203. When the network security supervision module 203 detects an abnormal situation, the network abnormal data situation is fed back to the network security supervision module 203 through the network security early warning module 205, and the network security supervision module 203 sends it to the client receiving end 206 through the LAN receiving module 204, so as to facilitate the user and process the network.
[0035] See also Figure 2 It can be seen that the data is transmitted to the client receiving end 206 through the LAN transmitting module 202 and the LAN receiving module 204 in the wireless transmission module 201, and the security of the data transmission is monitored in real time through the network security supervision module 203 during the transmission process to ensure the security of the data transmission process.
[0036] The monitoring device 6 includes a sound acquisition module 601, an image acquisition module 602 and an infrared acquisition module 603. The input end of the monitoring device 6 is connected to a device status detection module 604, the input end of the block server 4 is connected to a data display module 605 and a network detection module 606, the input end of the device status detection module 604 is connected to the block server 4, and the sound acquisition module 601, the image acquisition module 602 and the infrared acquisition module 603 are all connected to the output end of the monitoring device 6.
[0037] During specific implementation, when the distributed network security monitoring system is in use, the sound acquisition module 601 and the image acquisition module 602 in the monitoring device 6 respectively acquire images and sounds, and at the same time, monitoring can be performed in a dark environment through the infrared acquisition module 603, and the monitoring device 6 can be controlled by the device control module 5 during monitoring, so that the user can adjust the monitoring device 6 conveniently. During operation, the monitoring device 6 can also monitor the working status of the monitoring device 6 in real time through the device status detection module 604. When a certain monitoring device 6 stops working, the specific data of the abnormal operation of the device will be transmitted to the block server 4 through the corresponding device status detection module 604. At the same time, the network of the corresponding block server 4 is detected through the network detection module 606, so that the user can perform maintenance and repair on the monitoring device 6, etc., to ensure the stability of the network. The block server 4 can transmit the data captured by the monitoring device 6 to the display device through the data display module 605, so as to facilitate the user to view the monitoring data.
[0038] See also Figure 1 and Figure 3 It can be seen that each block server 4 includes a monitoring device 6, and the data is monitored by the detection modules under different monitoring devices 6. At the same time, the normal operation of each monitoring device 6 is ensured by the device status detection module 604.
[0039] The data storage module 7 includes a data management module 701 and a data query module 702. The output end of the data management module 701 is respectively connected to a data backup module 703, a data storage module 704 and a data encryption module 705. The output end of the data backup module 703 is connected to a cloud storage module 706. The output end of the data storage module 704 is connected to a data deletion module 707. The data deletion module 707 is connected to the output ends of the data storage module 704 and the cloud storage module 706. The cloud storage module 706 and the data backup module 703 are connected in series at the output end of the data management module 701.
[0040] During specific implementation, when the distributed network security monitoring system needs to store data, the device captured by the monitoring device 6 can be transmitted to the data management module 701 through the data storage module 7, and the monitoring data can also be transmitted to the display device in real time through the data query module 702, so as to facilitate the user to view and search the data. The data is encrypted in the data management module 701 through the data encryption module 705 to ensure the security of the data, and then the data is stored and backed up through the data backup module 703 and the data storage module 704 respectively, and the data that has been backed up in the data backup module 703 is stored in the cloud device through the cloud storage module 706. When the data in the cloud device increases, the data with a longer storage time will be automatically deleted through the data deletion module 707. At the same time, the data in the data storage module 704 will be automatically deleted if it is not used for a long time to ensure the storage space of the data.
[0041] See also Figure 4 It can be seen that the monitoring data is managed through the data management module 701, the security of data storage is ensured through the data encryption module 705, and the data is backed up through the data backup module 703, which can effectively ensure data security.
[0042] When the present invention is used in a network system, it is first monitored through the data acquisition module of the monitoring device 6, and the status of the monitoring device 6 is monitored in real time through the device status detection module 604, and then the data captured by the monitoring device 6 is transmitted to the block server 4; then the block server 4 transmits it to the main server 2, and the main server 2 transmits the data to the client receiving end 206 through the LAN transmitting module 202 and the LAN receiving module 204 in the wireless transmission module 201, and the client can view the monitoring data in real time.
[0043] At the same time, during the transmission process, the security of data transmission is ensured by the network security supervision module 203, and the main server 2 transmits the data to the central control module 1, and the data storage module 704 in the central control module 1 stores, backs up and encrypts the data. At the same time, each block server 4 contains multiple monitoring devices 6, so it can play a role of distributed monitoring. This is the characteristic of the distributed network security monitoring system. The content not described in detail in this description belongs to the existing technology known to professional and technical personnel in this field.
[0044] Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments, or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.
Claims
1. A distributed network security monitoring system, comprising: A central control module (1) and a data storage module (7), characterized in that the output end of the central control module (1) is connected to a main server (2), the main server (2) is connected to a block server (4) via a data transmission module (3), the output end of the block server (4) is connected to a monitoring device (6) via a device control module (5), and the data storage module (7) is connected to the transmission end of the central control module (1); The central control module (1) comprises a power supply module (101) and a device status monitoring module (102); the output end of the device status monitoring module (102) is respectively connected to a temperature detection module (103), a network security detection module (104), a humidity detection module (105), and a device status early warning module (106); the output end of the power supply module (101) is connected to a power system detection module (107); the central control module (1) and the main server (2) are interconnected, and the main server (2) and the block server (4) are interconnected; the humidity detection module (105), the device status early warning module (106) and the device status early warning module (107) are connected to each other; 106), a network security detection module (104) and connected to the output end of the device status monitoring module (102), the output end of the main server (2) is connected to a wireless transmission module (201), the output end of the wireless transmission module (201) is connected to a local area network transmission module (202), the output end of the local area network transmission module (202) is connected to a network security supervision module (203), the output end of the network security supervision module (203) is respectively connected to a local area network receiving module (204) and a network security early warning module (205), and the output end of the local area network receiving module (204) is connected to a client receiving end (206); The main server (2) is controlled by the central control module (1), and the main server (2) can control a plurality of different block servers (4), and the main server (2) can collect statistics on the data of each block server (4), and finally transmit the data to the central control module (1) through the data transmission module (3), and then the central control module (1) uniformly manages and stores the data. Each block server (4) can control a plurality of different monitoring devices (6), so that a central control module (1) can be used to manage a plurality of monitoring devices (6), and a multi-distributed monitoring function can be achieved. The central control module (1) can be monitored by the device status monitoring module (102). ) is used to monitor the working status of the central control module (1) in real time, the temperature of the central control module (1) is monitored by the temperature detection module (103), the network security detection module (104) is used to monitor the network security of the central control module (1), the humidity detection module (105) is used to monitor the humidity of the central control module (1), the power supply module (101) can supply power to the central control module (1), and then the power system detection module (107) detects the power supply module (101) to ensure that the power supply of the central control module (1) is satisfied, and when the device status monitoring module (102) detects an abnormality of the device, an alarm sound can be issued through the device status early warning module (106) to serve as a reminder to the user; The data captured by the monitoring device (6) can also be transmitted to the main server (2) through the block server (4), and then the data can be transmitted to the local area network receiving module (204) through the local area network through the local area network transmitting module (202) in the wireless transmission module (201). The data is received by the local area network receiving module (204), and then the received data is transmitted to the client receiving end (206), including the mobile end and the PC end, so that the user can observe the data. At the same time, during the data transmission process, the network status can be monitored in time through the network security supervision module (203). When the network security supervision module (203) detects an abnormal situation, the network abnormal data situation is fed back to the network security supervision module (203) through the network security early warning module (205), and the network security supervision module (203) sends it to the client receiving end (206) through the local area network receiving module (204), so as to facilitate the user and the network processing.
2. A distributed network security monitoring system according to claim 1, characterized in that: The network security supervision module (203) and the network security early warning module (205) are interconnected.
3. A distributed network security monitoring system according to claim 1, characterized in that: The monitoring device (6) comprises: a sound acquisition module (601), an image acquisition module (602) and an infrared acquisition module (603); the input end of the monitoring device (6) is connected to a device status detection module (604); the input end of the block server (4) is connected to a data display module (605) and a network detection module (606).
4. A distributed network security monitoring system according to claim 3, characterized in that: The input end of the device status detection module (604) is connected to the block server (4).
5. A distributed network security monitoring system according to claim 3, characterized in that: The sound acquisition module (601), the image acquisition module (602) and the infrared acquisition module (603) are all connected to the output end of the monitoring device (6).
6. A distributed network security monitoring system according to claim 1, characterized in that: The data storage module (7) comprises a data management module (701) and a data query module (702); the output end of the data management module (701) is respectively connected to a data backup module (703), a data storage module (704) and a data encryption module (705); the output end of the data backup module (703) is connected to a cloud storage module (706); and the output end of the data storage module (704) is connected to a data deletion module (707).
7. A distributed network security monitoring system according to claim 6, characterized in that: The data deletion module (707) is connected to the output ends of the data storage module (704) and the cloud storage module (706), and the cloud storage module (706) and the data backup module (703) are connected in series to the output end of the data management module (701).
Citation Information
Patent Citations
Industrial Internet of Things control system and operation method thereof
CN111221308A
Information safety system based on social aspect monitoring
CN112769746A