Internet of Things-based Smart City Network Monitoring Methods and Systems

Abstract

This invention discloses a smart city network monitoring method and system based on the Internet of Things (IoT), relating to the field of IoT technology, and solves the technical problem of secure data transmission. The system works as follows: If a terminal under test malfunctions, the terminal detection module sends a terminal malfunction signal to the data upload unit; if the terminal under test is not malfunctioning, the terminal detection module sends a terminal security signal to the data upload unit; if the data under test is abnormal, the data detection module sends a data malfunction signal to the data upload unit; if the data under test is secure, the data detection module sends a data security signal to the data upload unit; the data upload unit receives both the terminal security signal and the data security signal; the data upload unit uploads the data to the cloud platform; the data upload unit receives either the terminal malfunction signal or the data malfunction signal; the data upload unit sends a data deletion command to the data storage unit. This achieves dual detection of both the smart terminal and the data, improving the security of data transmission.

Description

Technical Field

[0001] This invention belongs to the field of smart cities and involves Internet of Things (IoT) technology, specifically a smart city network monitoring method and system based on IoT. Background Technology

[0002] A smart city refers to the integration and interconnection of urban systems and services through various information technologies or innovative concepts to improve resource utilization efficiency, optimize urban management and services, and enhance the quality of life for citizens. A smart city is an advanced form of urban informatization that fully utilizes next-generation information technologies across all sectors of the city, based on next-generation innovation (Innovation 2.0) in a knowledge society. It achieves deep integration of informatization, industrialization, and urbanization, helping to alleviate "big city problems," improve the quality of urbanization, achieve refined and dynamic management, and enhance urban management effectiveness and improve the quality of life for citizens. While specific definitions of smart cities are broad, the internationally accepted definition is that a smart city is a new urban form supported by next-generation information technologies and operating within the context of next-generation innovation (Innovation 2.0) in a knowledge society. It emphasizes that a smart city is not merely the application of next-generation information technologies such as the Internet of Things and cloud computing, but more importantly, the construction of a sustainable urban innovation ecosystem characterized by user innovation, open innovation, mass innovation, and collaborative innovation through the application of Innovation 2.0 methodologies oriented towards a knowledge society.

[0003] The Internet of Things (IoT) is one of the most important technologies in smart cities. In cloud-platform-managed IoT, cloud platform operators obtain large amounts of user data through information interaction with users and profit by transmitting the information users need to users via the network. The open sharing of information inevitably brings information protection issues. Constrained by the terminal equipment, communication methods, and network application scenarios of cloud platform operators, this process involves numerous risks, such as whether the source of the information data required by users is legally authorized and registered; whether the information content obtained by users is stolen, hijacked, tampered with, or destroyed; and whether the service fees provided by cloud platform operators using information resources are reasonable and legal. While the general public obtains information services from cloud platforms, they also have many concerns about their information security, cloud data storage, and privacy protection. Conversely, closed information protection increases the difficulty of data sharing on cloud platforms, hindering the fulfillment of user information needs in cloud-platform-managed IoT systems.

[0004] To address this, a smart city network monitoring method and system based on the Internet of Things is proposed. Summary of the Invention

[0005] This invention aims to address at least one of the technical problems existing in the prior art. To this end, this invention proposes a smart city network monitoring method and system based on the Internet of Things (IoT), which solves the problem of secure data transmission.

[0006] To achieve the above objectives, an Internet of Things-based smart city network monitoring system is proposed according to an embodiment of the first aspect of the present invention, including a cloud platform, and a terminal detection module, a data detection module, and a temporary storage module connected thereto; the modules interact with each other based on digital signals;

[0007] The temporary storage module is used for temporary data storage and for uploading data to the cloud platform;

[0008] The terminal detection module is used to detect the security of the terminal;

[0009] The data detection module is used to detect the security of the data;

[0010] The temporary storage module includes a data storage unit and a data upload unit;

[0011] The data storage unit is used to store data uploaded by the user;

[0012] The data upload unit is used to upload the data in the data storage unit to the cloud platform.

[0013] Preferably, the data storage unit stores user-uploaded data, including the following steps:

[0014] Users upload data to the data storage unit via smart terminals;

[0015] The data is marked as data to be detected, and the user's smart terminal is marked as a terminal to be detected.

[0016] Preferably, the data upload unit is used to upload data from the data storage unit to the cloud platform, including the following steps:

[0017] The data upload unit receives the terminal security signal and the data security signal;

[0018] The data upload unit acquires data from the data storage unit and uploads the data to the cloud platform;

[0019] The data upload unit receives either a terminal abnormal signal or a data abnormal signal.

[0020] The data upload unit sends a data deletion command to the data storage unit;

[0021] After receiving the data deletion instruction, the data storage unit deletes the stored data, marks the user's smart terminal as an abnormal terminal, and refuses the abnormal terminal from uploading data.

[0022] Preferably, the smart terminal includes smartphones and computers.

[0023] Preferably, the terminal detection module detects the security of the terminal by including the following steps:

[0024] The terminal detection module determines the attribute information of the terminal to be detected; wherein, the attribute information includes hardware configuration attribute information, software configuration attribute information, network configuration attribute information, and device identification information;

[0025] The attribute information is analyzed using multiple status indicator databases to determine whether the attribute information matches the abnormal status conditions corresponding to each status indicator database. Each status indicator database records terminal status indicators statistically analyzed by different security devices. The multiple status indicator databases include at least two of the following: baseline database, vulnerability database, security event database, and threat intelligence database.

[0026] If the attribute information matches any abnormal state condition in the state indicator library, it is determined that the terminal to be detected is abnormal; the terminal detection module sends a terminal abnormality signal to the temporary storage module.

[0027] If the attribute information does not match any of the abnormal state conditions corresponding to any state indicator library, it is determined that the terminal to be detected has not experienced any abnormality; the terminal detection module sends a terminal security signal to the data upload unit.

[0028] Preferably, the data detection module detects data security by including the following steps:

[0029] A security detection model is obtained from the data detection module; wherein the security detection model is based on an artificial intelligence model.

[0030] The data to be detected is input into the security detection model to obtain a security label;

[0031] The security tag is identified, and if the data to be detected is in an abnormal state, the data to be detected is determined to be abnormal data; the data detection module sends a data abnormality signal to the temporary storage module.

[0032] If the data to be detected is in a safe state, then the data to be detected is determined to be safe data; the data detection module sends a data security signal to the data upload unit.

[0033] Preferably, the security detection model is established based on an artificial intelligence model and includes the following steps:

[0034] Obtain standard training data from the data detection module;

[0035] The artificial intelligence model is trained using standard training data, and the trained artificial intelligence model is then labeled as a security detection model.

[0036] Preferably, the temporary storage module is communicatively and / or electrically connected to the terminal detection module;

[0037] The temporary storage module is communicatively and / or electrically connected to the data detection module;

[0038] The temporary storage module communicates with and / or is electrically connected to the cloud platform.

[0039] The IoT-based smart city network monitoring method includes the following steps:

[0040] S1: The user uploads data to the data storage unit via a smart terminal; the uploaded data is marked as data to be detected, and the user's smart terminal is marked as a terminal to be detected;

[0041] S2: An abnormality has occurred in the terminal under test; the terminal detection module sends a terminal abnormality signal to the data upload unit;

[0042] The terminal under test showed no abnormalities; the terminal detection module sent a terminal security signal to the data upload unit.

[0043] S3: The data to be detected is abnormal; the data detection module sends a data abnormality signal to the data upload unit.

[0044] The data to be detected is secure data; the data detection module sends a data security signal to the data upload unit.

[0045] S4: The data upload unit receives terminal security signals and data security signals; the data upload unit acquires data from the data storage unit and uploads the data to the cloud platform;

[0046] The data upload unit receives either a terminal error signal or a data error signal; the data upload unit sends a data deletion command to the data storage unit.

[0047] Compared with the prior art, the beneficial effects of the present invention are:

[0048] This invention uploads data to a data storage unit via a smart terminal; marks the uploaded data as data to be detected, and marks the user's smart terminal as a terminal to be detected; if the terminal to be detected malfunctions, the terminal detection module sends a terminal malfunction signal to the data upload unit; if the terminal to be detected does not malfunction, the terminal detection module sends a terminal security signal to the data upload unit; if the data to be detected is abnormal, the data detection module sends a data malfunction signal to the data upload unit; if the data to be detected is safe, the data detection module sends a data security signal to the data upload unit; the data upload unit receives both the terminal security signal and the data security signal; the data upload unit acquires data from the data storage unit and uploads the data to a cloud platform; the data upload unit receives either the terminal malfunction signal or the data malfunction signal; the data upload unit sends a data deletion command to the data storage unit; this achieves dual detection of the smart terminal and the data, improving the security of data transmission. Attached Figure Description

[0049] Figure 1 This is a schematic diagram of the present invention;

[0050] Figure 2 This is a flowchart of the present invention. Detailed Implementation

[0051] The technical solution of the present invention will be clearly and completely described below with reference to the embodiments. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0052] like Figure 1 As shown, the smart city network monitoring system based on the Internet of Things includes a cloud platform, as well as terminal detection modules, data detection modules, and temporary storage modules connected to it; the modules interact with each other based on digital signals.

[0053] The temporary storage module is used for temporary data storage and for uploading data to the cloud platform;

[0054] The terminal detection module is used to detect the security of the terminal;

[0055] The data detection module is used to detect the security of the data.

[0056] The temporary storage module includes a data storage unit and a data upload unit;

[0057] The data storage unit is used to store data uploaded by the user;

[0058] The data upload unit is used to upload the data in the data storage unit to the cloud platform.

[0059] The data storage unit stores user-uploaded data, including the following steps:

[0060] Users upload data to the data storage unit via smart terminals;

[0061] The data is marked as data to be detected, and the user's smart terminal is marked as a terminal to be detected.

[0062] The data upload unit is used to upload data from the data storage unit to the cloud platform, including the following steps:

[0063] The data upload unit receives the terminal security signal and the data security signal;

[0064] The data upload unit acquires data from the data storage unit and uploads the data to the cloud platform;

[0065] The data upload unit receives either a terminal abnormal signal or a data abnormal signal.

[0066] The data upload unit sends a data deletion command to the data storage unit;

[0067] After receiving the data deletion instruction, the data storage unit deletes the stored data, marks the user's smart terminal as an abnormal terminal, and refuses the abnormal terminal from uploading data.

[0068] In this embodiment, the smart terminal includes smart devices such as smartphones and computers.

[0069] The terminal detection module detects the security of the terminal, including the following steps:

[0070] The terminal detection module determines the attribute information of the terminal to be detected; wherein, the attribute information includes hardware configuration attribute information, software configuration attribute information, network configuration attribute information, and device identification information;

[0071] The attribute information is analyzed using multiple status indicator databases to determine whether the attribute information matches the abnormal status conditions corresponding to each status indicator database. Each status indicator database records terminal status indicators statistically analyzed by different security devices. The multiple status indicator databases include at least two of the following: baseline database, vulnerability database, security event database, and threat intelligence database.

[0072] If the attribute information matches any abnormal state condition in the state indicator library, it is determined that the terminal to be detected is abnormal; the terminal detection module sends a terminal abnormality signal to the temporary storage module.

[0073] If the attribute information does not match any of the abnormal state conditions corresponding to any state indicator library, it is determined that the terminal to be detected has not experienced any abnormality; the terminal detection module sends a terminal security signal to the data upload unit.

[0074] In this embodiment, the step of analyzing the attribute information using multiple state indicator libraries to determine whether the attribute information matches the abnormal state conditions corresponding to each state indicator library includes at least two of the following four steps:

[0075] The configuration baseline of the terminal to be detected is searched in the baseline library. The hardware configuration attribute information is compared and analyzed with the configuration baseline to determine whether the deviation of the hardware configuration attribute information from the configuration baseline exceeds a preset threshold. The baseline library records the configuration baselines set by the gateway device for different terminals.

[0076] Traverse the vulnerability database and determine whether the software configuration attribute information is recorded in the vulnerability database. The vulnerability database records the software configuration attribute information containing vulnerabilities obtained by the vulnerability scanning device.

[0077] Traverse the security event database and determine whether the network configuration attribute information is recorded in the security event database. The security event database records the network configuration attribute information of the attacked terminal in the existing attack events detected by the firewall device.

[0078] Traverse the threat intelligence database to determine whether the device identification information is recorded in the threat intelligence database. The threat intelligence database records device identification information of suspected attacked terminals as statistically analyzed by external intelligence devices.

[0079] In this embodiment, determining that the terminal to be detected is abnormal if the attribute information matches any abnormal state condition in the state indicator library includes:

[0080] If the deviation exceeds the preset threshold, it is determined that the terminal to be detected is abnormal;

[0081] If the vulnerability database records the software configuration attribute information, it is determined that the terminal to be tested is abnormal.

[0082] If the network configuration attribute information is recorded in the security event database, it is determined that the terminal to be detected has malfunctioned.

[0083] If the device identification information is recorded in the threat intelligence database, it is determined that the terminal to be detected is abnormal.

[0084] In this embodiment, after analyzing the attribute information using multiple state indicator libraries and determining whether the attribute information matches the abnormal state conditions corresponding to each state indicator library, the method further includes:

[0085] If the attribute information matches the abnormal state condition corresponding to any state indicator library, then the element corresponding to any state indicator library in the pre-constructed terminal state vector is set as an abnormal state, wherein each element in the terminal state vector represents the terminal operating state obtained by analyzing different state indicator libraries at the same time.

[0086] If the attribute information matches any abnormal state condition in the state indicator library, then it is determined that the terminal to be detected is abnormal, including:

[0087] If there is an element in the terminal state vector that is in an abnormal state, then it is determined that the terminal to be detected is abnormal.

[0088] The data detection module detects data security, including the following steps:

[0089] A security detection model is obtained from the data detection module; wherein the security detection model is based on an artificial intelligence model.

[0090] The data to be detected is input into the security detection model to obtain a security label;

[0091] The security tag is identified, and if the data to be detected is in an abnormal state, the data to be detected is determined to be abnormal data; the data detection module sends a data abnormality signal to the temporary storage module.

[0092] If the data to be detected is in a safe state, then the data to be detected is determined to be safe data; the data detection module sends a data security signal to the data upload unit.

[0093] In this embodiment, the security tag has a value of 0 or 1. When the security tag is 0, it indicates that the corresponding data to be detected is in a safe state. When the security tag is 1, it indicates that the corresponding data to be detected is in an abnormal state. In some other preferred embodiments, the security tag can also be distinguished by other markers, such as the security tag having a value of A or B. When the security tag is A, it indicates that the corresponding data to be detected is in a safe state. When the security tag is B, it indicates that the corresponding data to be detected is in an abnormal state.

[0094] In this embodiment, the security detection model is established based on an artificial intelligence model and includes the following steps:

[0095] Obtain standard training data from the data detection module;

[0096] The artificial intelligence model is trained using standard training data, and the trained artificial intelligence model is then labeled as a security detection model.

[0097] In this embodiment, the standard training data includes several sets of input data and corresponding security labels, and the content attributes of the input data and the data to be detected are consistent.

[0098] In this embodiment, the artificial intelligence model includes models with strong nonlinear fitting capabilities, such as deep convolutional neural network models or RBF neural network models.

[0099] In this embodiment, the temporary storage module is communicatively and / or electrically connected to the terminal detection module;

[0100] The temporary storage module is communicatively and / or electrically connected to the data detection module;

[0101] The temporary storage module communicates with and / or is electrically connected to the cloud platform.

[0102] like Figure 2 As shown, the IoT-based smart city network monitoring method includes the following steps:

[0103] S1: The user uploads data to the data storage unit via a smart terminal; the uploaded data is marked as data to be detected, and the user's smart terminal is marked as a terminal to be detected;

[0104] S2: An abnormality has occurred in the terminal under test; the terminal detection module sends a terminal abnormality signal to the data upload unit;

[0105] The terminal under test showed no abnormalities; the terminal detection module sent a terminal security signal to the data upload unit.

[0106] S3: The data to be detected is abnormal; the data detection module sends a data abnormality signal to the data upload unit.

[0107] The data to be detected is secure data; the data detection module sends a data security signal to the data upload unit.

[0108] S4: The data upload unit receives terminal security signals and data security signals; the data upload unit acquires data from the data storage unit and uploads the data to the cloud platform;

[0109] The data upload unit receives either a terminal error signal or a data error signal; the data upload unit sends a data deletion command to the data storage unit.

[0110] The above embodiments are only used to illustrate the technical methods of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical methods of the present invention without departing from the spirit and scope of the technical methods of the present invention.

Claims

1. The Internet of Things-based smart city network supervision system is characterized in that, The cloud platform is connected with a terminal detection module, a data detection module and a temporary storage module; information interaction is carried out between the modules based on digital signals; The temporary storage module is used for temporarily storing data and uploading the data to the cloud platform; The terminal detection module is used for detecting the security of a terminal; The data detection module is used for detecting the security of data; The temporary storage module comprises a data storage unit and a data uploading unit; The data storage unit is used for storing data uploaded by a user; The data uploading unit receives a terminal security signal and a data security signal; The data uploading unit acquires data in the data storage unit and uploads the data to the cloud platform; The data uploading unit receives any one of a terminal abnormal signal or a data abnormal signal; The data uploading unit sends a data deletion instruction to the data storage unit; After receiving the data deletion instruction, the data storage unit deletes the stored data and marks the user's intelligent terminal as an abnormal terminal, and refuses the abnormal terminal to upload data. 2.The IoT-based smart city network supervision system according to claim 1, characterized in that, The data storage unit stores data uploaded by a user, including the following steps: A user uploads data to the data storage unit through an intelligent terminal; The data is marked as to-be-detected data, and the user's intelligent terminal is marked as a to-be-detected terminal. 3.The IoT-based smart city network supervision system according to claim 2, characterized in that, The intelligent terminal comprises a smart phone and a computer. 4.The IoT-based smart city network supervision system according to claim 2, characterized in that, The terminal detection module detects the security of a terminal, including the following steps: The terminal detection module determines attribute information of the to-be-detected terminal; wherein the attribute information comprises hardware configuration attribute information, software configuration attribute information, network configuration attribute information and device identification information; A plurality of state index libraries are used to analyze the attribute information respectively, to determine whether the attribute information matches abnormal state conditions corresponding to each state index library; each state index library records terminal state indexes counted by different security devices; wherein the plurality of state index libraries comprise at least two of a baseline library, a vulnerability library, a security event library and a threat intelligence library; If the attribute information matches the abnormal state condition corresponding to any state index library, it is determined that the to-be-detected terminal is abnormal; the terminal detection module sends a terminal abnormal signal to the temporary storage module; If the attribute information does not match the abnormal state condition corresponding to any state index library, it is determined that the to-be-detected terminal is not abnormal; the terminal detection module sends a terminal security signal to the data uploading unit. 5.The IoT-based smart city network monitoring system of claim 2, wherein, The data detection module detects the security of data, including the following steps: A security detection model is acquired from the data detection module; wherein the security detection model is established based on an artificial intelligence model; The to-be-detected data is input into the security detection model to acquire a security label; The security label is identified; if the to-be-detected data is in an abnormal state, it is determined that the to-be-detected data is abnormal data; the data detection module sends a data abnormal signal to the temporary storage module; If the to-be-detected data is in a safe state, it is determined that the to-be-detected data is safe data; the data detection module sends a data security signal to the data uploading unit. 6.The IoT-based smart city network supervision system according to claim 5, characterized in that, The safety detection model is established based on an artificial intelligence model, and includes the following steps: Obtaining standard training data from the data detection module; Training the artificial intelligence model through the standard training data, and marking the trained artificial intelligence model as a safety detection model. 7.The IoT-based smart city network monitoring system of claim 1, wherein, The temporary storage module is in communication and / or electrical connection with the terminal detection module; The temporary storage module is in communication and / or electrical connection with the data detection module; The temporary storage module is in communication and / or electrical connection with the cloud platform. 8.The method of the Internet of Things based smart city network supervision system according to any one of claims 1-7, characterized in that, The method includes the following steps: S1: A user uploads data to a data storage unit through an intelligent terminal; the uploaded data is marked as to-be-detected data, and the user's intelligent terminal is marked as a to-be-detected terminal; S2: The to-be-detected terminal is abnormal; the terminal detection module sends a terminal abnormal signal to the data uploading unit; The to-be-detected terminal is not abnormal; the terminal detection module sends a terminal safety signal to the data uploading unit; S3: The to-be-detected data is abnormal data; the data detection module sends a data abnormal signal to the data uploading unit; The to-be-detected data is safe data; the data detection module sends a data safety signal to the data uploading unit; S4: The data uploading unit receives the terminal safety signal and the data safety signal; the data uploading unit obtains the data in the data storage unit and uploads the data to the cloud platform; The data uploading unit receives any one of the terminal abnormal signal or the data abnormal signal; the data uploading unit sends a data deletion instruction to the data storage unit.

Images