A network security protection system based on artificial intelligence

Abstract

The present invention relates to an artificial intelligence-based network security protection system applied in the field of computer data security. On the basis of the traditional network layer, application layer and data layer, a reversible variable and a security variable system for actively changing and repairing the original data are added. By replacing the key features in the original data in advance and changing them into false data, when abnormal access occurs in the application layer, the false data is used to cover the original data. On the basis of the existing protection means, a protection barrier is added for data security. When necessary, the false data can be verified and repaired and restored to the original data, thereby reducing the possibility of data loss. In addition, multiple connectors are arranged on the reversible variable, and the multiple connectors are respectively corresponding to the functions of data change, repair, query, etc. When the use of the connector does not correspond to the function, the selected function is automatically frozen and the use of other connectors is restricted, thereby effectively improving the security of the data in the reversible variable.

Description

Technical Field

[0001] The present invention relates to a network security protection system, and in particular to an artificial intelligence-based network security protection system applied in the field of computer data security. Background Art

[0002] With the continuous development of information technology, the risk of data leakage is also increasing. Some hackers or malware can obtain sensitive data through network attacks, data sniffing, social engineering, etc., resulting in data leakage. Many users do not pay enough attention to data security and lack the necessary data security awareness. For example, users may arbitrarily store personal information or corporate secrets on unprotected computer devices or in the cloud.

[0003] To solve the above problems, the Chinese patent CN202311609768.4 specification discloses a data security protection system, including: an access control module for implementing an access control mechanism; a data encryption module for encrypting and decrypting data using an encryption algorithm; a data storage module for storing encrypted data from the data encryption module; a security audit module, including an account audit unit, a system audit unit, and a security early warning unit; a system protection module for real-time monitoring and detection of network attacks, malware, and virus threats; a data backup and recovery module for regular data backup. By regularly conducting security audits on each account, taking appropriate measures to prevent and respond, and conducting real-time security audits on the entire system, we can prevent attacks from causing further damage to the system and discover potential threats in a timely manner.

[0004] Although existing technologies have provided a certain degree of protection for system data through data encryption, identity authentication and other means, there is still the possibility that criminals can obtain data through sophisticated technical attacks or cracking. Therefore, the existing security protection for network data is still relatively low. Summary of the invention

[0005] In view of the above-mentioned prior art, the technical problem to be solved by the present invention is that the existing protection means have low security protection for network data, and there is still a possibility that criminals can obtain data through technical attacks or cracking.

[0006] To solve the above problems, the present invention provides a network security protection system based on artificial intelligence, including a network layer, an application layer and a data layer mounted on a computer terminal, wherein the network layer includes an intelligent traffic analysis module for real-time monitoring of traffic entering the network, the application layer includes an access authentication module for authenticating access users, the data layer includes a data storage library, the data layer also includes a reversible variable for falsely changing and truly repairing original data, and a security variable system mounted inside the reversible variable, and the application layer also includes an access audit module and a data exchange module;

[0007] The safety variable system includes a data bidirectional transmission module, a query module, a data change module, a data repair module and a single database, the data change module includes a feature extraction unit, a feature change unit and a change database, and the data repair module includes a change proofreading unit and a feature repair unit;

[0008] The method for using the above-mentioned artificial intelligence-based network security protection system includes the following steps:

[0009] S1. Change data:

[0010] S1-1, the user connects the reversible variable to the computer terminal, and then inputs the original data A in the computer terminal into the reversible variable;

[0011] S1-2, extracting n key features from the original data A through the feature extraction unit, the user designs n false features corresponding to the key features according to the key features, and then replaces the n key features with the corresponding n false features through the feature change unit, thereby changing the original data A into false data a, and storing them in a single database, overwriting the original original data A;

[0012] S2. Data protection: Import the false data a into the computer terminal and store it together with the original data A. When the access audit module identifies abnormal access behavior, the data exchange module deletes the original data A of the computer terminal and retains the false data a.

[0013] S3, Data Repair:

[0014] S3-1. Similarly, the reversible variable is connected to the computer terminal, and m key features and false features corresponding to each other are input, where m is an integer greater than 1 and less than n;

[0015] S3-2. The m false features and key features are verified by changing the proofreading unit. When they completely correspond to each other, it indicates that the verification is successful. Then the feature repair unit repairs the n false features in the false data a into the corresponding n key features, thereby repairing the false data a into the original data A, and storing them in a single database, covering the false data a.

[0016] As a further supplement to the present application, a single database stores one of the original data A or the false data a.

[0017] As another improvement of the present application, the reversible inverter includes a main body and a protective cover slidably mounted on the outer end of the main body, and multiple side ends of the main body are respectively fixedly connected with joint one, joint two and joint three.

[0018] As another improved supplement of the present application, the safety variable system also includes a function selection module, which is connected to a connector proofreading module. The function selection module is used to make a single function selection among the data change module, the data repair module, the query module and the data bidirectional transmission module. The data change module, the data repair module and the query module correspond one to one with connector one, connector two and connector three respectively, and connector one, connector two and connector three all correspond to the data bidirectional transmission module.

[0019] As another improved supplement of the present application, the reversible inverter realizes hardware connection with the computer terminal through any one of connector one, connector two or connector three, and the connector calibration module is used to detect whether the hardware connection method between the reversible inverter and the computer terminal corresponds to the single function selection.

[0020] As another improvement of the present application, the inner top end of the protective cover is fixedly connected to limited use plate one, limited use plate two and limited use plate three, limited use plate one is located on the upper side of joint one, limited use plate two is located on the upper side of joint two, and limited use plate three is located on the upper side of joint three.

[0021] As another improvement supplement of the present application, the upper end of the main body is provided with vertical grooves and horizontal grooves which are vertically cross-distributed, and the inner top end of the protective cover is fixedly connected with a T-shaped slider, which is slidably connected to the inside of the vertical groove and the horizontal groove.

[0022] As another improvement supplement to the present application, the upper end of the main body is further provided with plate placing groove one, plate placing groove two and plate placing groove three. Plate placing groove one is located directly above joint one and matches with limited use plate one, plate placing groove two is located directly above joint two and matches with limited use plate two, and plate placing groove three is located directly above joint three and matches with limited use plate three.

[0023] As another improvement supplement of the present application, the intersection of the vertical groove and the horizontal groove is located at the midpoint of the horizontal groove. When the T-shaped slider is located at the above-mentioned intersection, the limited-use plate one, limited-use plate two and limited-use plate three are respectively located at the edge positions of joint one, joint two and joint three away from the main body.

[0024] As another improvement supplement of the present application, a plurality of cylinders are fixedly connected inside the main body, wherein the telescopic end of one cylinder is movably extended from the inner wall of the horizontal groove away from the joint 2, and the telescopic ends of another pair of cylinders are movably extended from the inner walls at both ends of the vertical groove respectively, and the joint proofreading module is connected to the mechanical locking module, and the cylinder is connected to the mechanical locking module.

[0025] In summary, on the basis of the traditional network layer, application layer and data layer, the present application adds a reversible variable and a safety variable system for actively making false changes and truly repairing the original data, thereby replacing multiple key features in the original data in advance and changing them into false data. When abnormal access behavior occurs in the application layer, false data is used to cover the original data for storage, thereby adding a protective barrier to data security on the basis of existing protection measures. Moreover, the false data can also be verified and repaired by the reversible variable and the safety variable system to restore it to the original data, thereby reducing the possibility of data loss on the basis of protecting the data. In addition, multiple connectors are set on the reversible variable, and the connectors are made to correspond one by one with functions such as data change, repair, and query. When in use, when the use of the connector does not correspond to the function, the selected function is automatically frozen and the use of other connectors is restricted, thereby effectively improving the security of the reversible variable and its internal data. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 This is a system block diagram of the first, second and third implementation modes of the present application;

[0027] Figure 2 This is a flow chart of the first, second and third implementation modes of this application;

[0028] Figure 3 A three-dimensional diagram of a reversible converter according to the second and third embodiments of the present application;

[0029] Figure 4 This is a three-dimensional diagram of the reversible converter of the second and third embodiments of the present application when disassembled;

[0030] Figure 5 This is a diagram showing the relationship between the connector and the functional module in the second and third embodiments of the present application;

[0031] Figure 6 A partial three-dimensional diagram of a reversible converter according to a third embodiment of the present application;

[0032] Figure 7 The third embodiment of the reversible converter of the present application is a three-dimensional Figure 1 ;

[0033] Figure 8 This is a partial stereoscopic diagram of the reversible converter according to the third embodiment of the present application when in use;

[0034] Fig. 9 The third embodiment of the reversible converter of the present application is a three-dimensional Figure 2 ;

[0035] Fig.10 This is a partial stereoscopic view of a reversible converter according to the third embodiment of the present application.

[0036] Description of the numbers in the figure:

[0037] 1 main body, 101 plate slot 1, 102 plate slot 2, 103 plate slot 3, 104 vertical slot, 105 horizontal slot, 2 protective cover, 31 joint 1, 32 joint 2, 33 joint 3, 41 limited-use plate 1, 42 limited-use plate 2, 43 limited-use plate 3, 5 T-shaped slide block, 6 cylinder. DETAILED DESCRIPTION

[0038] The following is a detailed description of three implementation methods of the present application in conjunction with the accompanying drawings.

[0039] The first implementation method:

[0040] The present invention provides a network security protection system based on artificial intelligence, please refer to Figure 1 , including a network layer, an application layer and a data layer mounted on a computer terminal. The network layer includes an intelligent traffic analysis module for real-time monitoring of traffic entering the network. When suspicious traffic is detected, it is intercepted in a timely manner. The application layer includes an access authentication module for authenticating the identity of the accessing user. The data layer includes a data repository. The data layer also includes a reversible variable for making false changes and real repairs to the original data, and a security variable system mounted inside the reversible variable. The application layer also includes an access audit module and a data exchange module.

[0041] See also Figure 1 The safety variable system includes a data bidirectional transmission module, a query module, a data change module, a data repair module and a single database. The data bidirectional transmission module can realize bidirectional data transmission between the reversible variable and the computer terminal. The data change module includes a feature extraction unit, a feature change unit and a change database. The data repair module includes a change proofreading unit and a feature repair unit.

[0042] Combination Figure 2 As shown, the method for using the above-mentioned artificial intelligence-based network security protection system includes the following steps:

[0043] S1. Change data:

[0044] S1-1, the user connects the reversible variable device to the computer terminal (data connectivity is achieved through hardware connection, such as connection through a USB interface), and then inputs the original data A in the computer terminal into the reversible variable device;

[0045] S1-2, extracting n key features from the original data A through the feature extraction unit, the user designs n false features corresponding to the key features according to the key features, and then replaces the n key features with the corresponding n false features through the feature change unit, thereby changing the original data A into false data a, and storing them in a single database, overwriting the original original data A;

[0046] S2. Data protection: Import false data a into the computer terminal and store it together with the original data A. When the access audit module identifies abnormal access behavior, the data exchange module deletes the original data A of the computer terminal and retains the false data a, that is, the false data a is used to cover the original data A;

[0047] S3, Data Repair:

[0048] S3-1. Similarly, the reversible variable is connected to the computer terminal, and m key features and false features corresponding to each other are input, where m is an integer greater than 1 and less than n;

[0049] S3-2. The m false features and key features are verified by changing the proofreading unit. When they completely correspond to each other, it indicates that the verification is successful. Then the feature repair unit repairs the n false features in the false data a into the corresponding n key features, thereby repairing the false data a into the original data A, and storing them in a single database, covering the false data a.

[0050] A single database stores one of the original data A or the false data a, that is, as recorded in step S1-2 and step S3-2, when the false data a is stored, the original data A will be overwritten and deleted, and when the restored original data A is stored, the false data a will be overwritten and deleted.

[0051] The change database is used to store the corresponding n key features and n false features, so that the change proofreading unit can verify the m key features and m false features input by the user according to the information in the change database.

[0052] Based on the traditional network layer, application layer and data layer, the present application adds a reversible variable and a safety variable system for actively making false changes and truly repairing the original data, thereby replacing multiple key features in the original data in advance and changing them into false data. When abnormal access behavior occurs in the application layer, false data is used to cover the original data for storage, thereby adding a protective barrier to data security on the basis of existing protection measures. In addition, the reversible variable and the safety variable system can also verify and repair the false data to restore it to the original data, thereby reducing the possibility of data loss while protecting the data.

[0053] Second implementation method:

[0054] Based on the first embodiment, the present embodiment makes the following specific configurations for the structure of the reversible converter: Figure 3 and Figure 4 The reversible converter includes a main body 1 and a protective cover 2 slidably mounted on the outer end of the main body 1. The multiple side ends of the main body 1 are respectively fixedly connected with a connector 1 31, a connector 2 32 and a connector 33. Figure 1 As shown, the safety variable system also includes a function selection module, the function selection module is connected to the joint proofreading module, and the function selection module is used to select a single function in the data modification module, the data repair module, the query module and the data bidirectional transmission module. Figure 5 As shown, the data change module, the data repair module and the query module correspond one to one with connector 1 31, connector 2 32 and connector 3 33 respectively. For example, connector 1 31 corresponds to the data change module, connector 2 32 corresponds to the data repair module, connector 3 33 corresponds to the query module, and connector 1 31, connector 2 32 and connector 3 33 all correspond to the data bidirectional transmission module.

[0055] Connector 1 31, connector 2 32 and connector 3 33 have the same structure and are all in the form of USB connectors. The reversible converter is connected to the computer terminal by hardware through any one of connector 1 31, connector 2 32 or connector 3 33. The connector calibration module is used to detect whether the hardware connection method between the reversible converter and the computer terminal corresponds to the single function selection.

[0056] When using the reversible variable, the user needs to select the connector corresponding to the function module to be used according to the function module to be used. For example, when the user needs to change the initial data, the data change module needs to be selected. Therefore, when the user connects to the computer terminal, the user needs to select connector 1 31 to connect to the computer terminal, so as to achieve the correspondence between the hardware connection method and the function selection;

[0057] When the connector check module detects that the hardware connection method between the reversible variable converter and the computer terminal (i.e., the connector used) does not correspond to the function selection, it indicates that the user has not used the reversible variable converter in a standardized manner. At this time, in order to improve the safety of the reversible variable converter, the function module selected by the user can be frozen and suspended through the function selection module. A specific example is as follows: When the user uses connector 31 to connect to the computer terminal, and selects the data modification module for use, since connector 31 does not correspond to the data modification module, it indicates that the user has not used the reversible variable converter in a standardized manner. Therefore, the function selection module automatically freezes the data modification module and temporarily prevents the user from using it, thereby effectively improving the security of the reversible variable and its internal data.

[0058] The third implementation method:

[0059] This embodiment further configures the structure of the reversible converter based on the embodiment 2 as follows: Figure 3 and Figure 4 The inner top end of the protective cover 2 is fixedly connected to the limited plate 1 41, the limited plate 2 42 and the limited plate 3 43. The limited plate 1 41 is located on the upper side of the joint 1 31, the limited plate 2 42 is located on the upper side of the joint 2 32, and the limited plate 3 43 is located on the upper side of the joint 3 33.

[0060] See also Figure 4 and Figure 6 The upper end of the main body 1 is provided with vertical grooves 104 and horizontal grooves 105 which are vertically cross-distributed. The inner top of the protective cover 2 is fixedly connected with a T-shaped slider 5, and the T-shaped slider 5 is slidably connected to the inside of the vertical groove 104 and the horizontal groove 105. The upper end of the main body 1 is also provided with a plate placement groove 101, a plate placement groove 2 102 and a plate placement groove 3 103. The plate placement groove 101 is located on the upper side of the joint 1 31 and matches the limited use plate 1 41. The plate placement groove 2 102 is located on the upper side of the joint 2 32 and matches the limited use plate 2 42. The plate placement groove 3 103 is located on the upper side of the joint 3 33 and matches the limited use plate 3 43.

[0061] Combination Figure 3 and Figure 6 As shown, the intersection of the vertical groove 104 and the horizontal groove 105 is located at the midpoint of the horizontal groove 105. When the T-shaped slider 5 is located at the above intersection, the limiting plate 1 41, the limiting plate 2 42 and the limiting plate 3 43 are respectively located at the edge positions of the connector 1 31, the connector 2 32 and the connector 3 33 away from the main body 1, which restricts the use of the connector 1 31, the connector 2 32 and the connector 3 33, making it difficult to insert them into the interface of the computer terminal. Please refer to Figures 7 to 9 When one of the connector 1 31, connector 2 32 or connector 3 33 is needed, the protective cover 2 can be moved in the opposite direction, such as Figure 7When the connector 31 is needed, the protective cover 2 can be moved away from the connector 31. At this time, the T-shaped slider 5 moves along the horizontal groove 105 until the restricted plate 41 enters the plate placement groove 101. The use of the connector 31 is not restricted, and the connector 31 can be connected to the interface of the computer terminal. Fig. 9 When the second connector 32 is needed, the protective cover 2 is first moved back to the initial position so that the T-shaped slider 5 is located at the intersection of the vertical groove 104 and the horizontal groove 105, and then the protective cover 2 is moved away from the second connector 32. At this time, the T-shaped slider 5 moves along the vertical groove 104 until the second limiting plate 42 enters the second plate placement groove 102, and the use of the second connector 32 is not restricted. The second connector 32 can be connected to the interface of the computer terminal.

[0062] Combination Figure 8 and Fig.10 As shown, a plurality of cylinders 6 are fixedly connected inside the main body 1, wherein the telescopic end of one cylinder 6 is movably extended from the inner wall of the transverse groove 105 away from the joint 2 32, and the telescopic ends of another pair of cylinders 6 are movably extended from the inner walls at both ends of the vertical groove 104, respectively, and the joint calibration module is connected to the mechanical locking module, and the cylinder 6 is connected to the mechanical locking module.

[0063] In the initial state, the cylinder 6 is in a retracted state, and the length of its telescopic end entering the vertical groove 104 and the horizontal groove 105 is extremely small, which is not easy to cause obstruction and influence on the movement of the T-shaped slider 5, and the protective cover 2 can move smoothly. When the user is in use, if the joints recorded in Implementation Example 2 do not correspond to the function selection, on the basis of freezing the function module, the mechanical locking module is started to extend a pair of cylinders 6 farther away from the T-shaped slider 5 until they are close to the intersection of the vertical groove 104 and the horizontal groove 105, so that the T-shaped slider 5 is difficult to move in the other two directions, that is, the movement of the protective cover 2 is restricted, so that the other pair of interfaces are still in a state of restricted use. Even if the function selection module fails and the corresponding function module is not frozen in time and effectively, this implementation method limits the movement of the T-shaped slider 5 and the protective cover 2 to maintain the use restriction of the remaining joints. On the basis of Implementation Example 2, it further prevents the user from continuing to use it, which plays a further safety protection role for the security of the reversible variable and its internal data.

[0064] In view of current practical needs, the above-mentioned implementation mode adopted in this application is not limited to the scope of protection. Various changes made within the knowledge scope of technical personnel in this field without departing from the concept of this application still fall within the scope of protection of the present invention.

Claims

1. A network security protection system based on artificial intelligence, comprising a network layer, an application layer and a data layer mounted on a computer terminal, wherein the network layer comprises an intelligent traffic analysis module for real-time monitoring of traffic entering the network, the application layer comprises an access authentication module for authenticating access users, and the data layer comprises a data storage library, characterized in that: The data layer also includes a reversible variable for making false changes and real repairs to the original data, and a safety variable system mounted inside the reversible variable, and the application layer also includes an access audit module and a data exchange module; The safety variable system includes a data bidirectional transmission module, a query module, a data modification module, a data repair module and a single database, wherein the data modification module includes a feature extraction unit, a feature modification unit and a modification database, and the data repair module includes a modification proofreading unit and a feature repair unit; The method for using the above-mentioned network security protection system based on artificial intelligence includes the following steps: S1. Change data: S1-1, the user connects the reversible variable to the computer terminal, and then inputs the original data A in the computer terminal into the reversible variable; S1-2, extracting n key features from the original data A through the feature extraction unit, the user designs n false features corresponding to the key features according to the key features, and then replaces the n key features with the corresponding n false features through the feature change unit, thereby changing the original data A into false data a, and storing them in a single database, overwriting the original original data A; S2. Data protection: Import the false data a into the computer terminal and store it together with the original data A. When the access audit module identifies abnormal access behavior, the data exchange module deletes the original data A of the computer terminal and retains the false data a. S3, Data Repair: S3-1. Similarly, the reversible variable is connected to the computer terminal, and m key features and false features corresponding to each other are input, where m is an integer greater than 1 and less than n; S3-2, verifying the m false features and key features by changing the proofreading unit. When they completely correspond to each other, it indicates that the verification is passed. Then, the feature repairing unit repairs the n false features in the false data a into the corresponding n key features, thereby repairing the false data a into the original data A, and storing them in a single database, covering the false data a; The reversible variable device comprises a main body (1) and a protective cover (2) slidably mounted on the outer end of the main body (1); the plurality of side ends of the main body (1) are respectively fixedly connected with a first connector (31), a second connector (32) and a third connector (33); the safety variable system further comprises a function selection module, the function selection module is connected with a connector checking module, the function selection module is used to select a single function among a data modification module, a data repair module, a query module and a data bidirectional transmission module; the data modification module, the data repair module and the query module respectively correspond to the first connector (31), the second connector (32) and the third connector (33); the first connector (31), the second connector (32) and the third connector (33) all correspond to the data bidirectional transmission module; the reversible variable device realizes a hardware connection with a computer terminal through any one of the first connector (31), the second connector (32) or the third connector (33); the connector checking module is used to detect whether the hardware connection mode between the reversible variable device and the computer terminal corresponds to the single function selection; The inner top end of the protective cover (2) is fixedly connected to the limited use plate 1 (41), the limited use plate 2 (42) and the limited use plate 3 (43); the upper end of the main body (1) is provided with a vertical groove (104) and a horizontal groove (105) which are vertically cross-distributed; the inner top end of the protective cover (2) is fixedly connected to a T-shaped slider (5); the T-shaped slider (5) is slidably connected to the inside of the vertical groove (104) and the horizontal groove (105); the inside of the main body (1) is fixedly connected to a plurality of cylinders (6); the telescopic end of one of the cylinders (6) is movably extended from the inner wall of the horizontal groove (105) away from the joint 2 (32); the telescopic ends of another pair of the cylinders (6) are movably extended from the inner walls of both ends of the vertical groove (104); the joint calibration module is connected to a mechanical locking module; the cylinders (6) are connected to the mechanical locking module.

2. The network security protection system based on artificial intelligence according to claim 1 is characterized by: The single database stores either original data A or false data a.

3. The network security protection system based on artificial intelligence according to claim 1 is characterized in that: The restriction plate 1 (41) is located on the upper side of the joint 1 (31), the restriction plate 2 (42) is located on the upper side of the joint 2 (32), and the restriction plate 3 (43) is located on the upper side of the joint 3 (33).

4. The network security protection system based on artificial intelligence according to claim 1 is characterized by: The upper end of the main body (1) is also provided with a plate placement groove 1 (101), a plate placement groove 2 (102) and a plate placement groove 3 (103), wherein the plate placement groove 1 (101) is located directly above the joint 1 (31) and matches the use restriction plate 1 (41), the plate placement groove 2 (102) is located directly above the joint 2 (32) and matches the use restriction plate 2 (42), and the plate placement groove 3 (103) is located directly above the joint 3 (33) and matches the use restriction plate 3 (43).

5. The network security protection system based on artificial intelligence according to claim 1 is characterized in that: The intersection of the vertical groove (104) and the horizontal groove (105) is located at the midpoint of the horizontal groove (105). When the T-shaped slider (5) is located at the intersection, the limiting plate 1 (41), the limiting plate 2 (42) and the limiting plate 3 (43) are respectively located at the edge positions of the joint 1 (31), the joint 2 (32) and the joint 3 (33) away from the main body (1).

Images