Network security collaborative protection system based on Internet of Things equipment

Abstract

The invention relates to a network security collaborative protection system based on Internet of Things equipment in the field of data processing, which comprises a security system, the security system comprises a network monitoring and prevention module and equipment protection modules, and access modules are in signal connection between the multiple equipment protection modules and the network monitoring and prevention module. The network monitoring and prevention module is in signal connection with an Internet of Things module, the equipment protection module is in signal connection with Internet of Things equipment, and the equipment protection module is carried in the Internet of Things equipment. According to the method, the access authority in the security system is set, so that low-authority tourists and registered users do not have data interaction with the collaborative protection module, the risk that data of the collaborative protection module serving as dynamic protection crashes due to access of a large amount of data is reduced, and the overall reliability of the security system is improved.

Description

Technical Field

[0001] The present invention relates to a network security collaborative protection system, and in particular to a network security collaborative protection system based on Internet of Things devices applied in the field of data processing. Background Art

[0002] Network security protection is a network security technology that refers to technical means dedicated to solving problems such as how to effectively conduct intervention control and how to ensure the security of data transmission. It mainly includes physical security analysis technology, network structure security analysis technology, system security analysis technology, management security analysis technology, and other security services and security mechanism strategies.

[0003] The invention patent CN202311454852.3 specification discloses a big data network security protection method and system. The invention provides a big data network security protection method and system. The method adopts an improved SimHash algorithm to identify malicious content, including using the whale algorithm to optimize the security weight factor for network security judgment. The adjusted weight is calculated through the basic weight and the security weight factor, thereby realizing the accuracy of automatic judgment of insurance network security and greatly enhancing the security of insurance network data transactions.

[0004] In the above application, in view of the security of insurance network data transactions, a corresponding algorithm was designed to judge the environment where network data transactions are required. In the process of network data transactions, the security of the transaction environment can be increased and the amount of transaction data can be controlled by limiting the transaction equipment to reduce the burden on the network protection system. However, for the user group with an open network environment, if the above-mentioned network security detection is performed on all devices connected to the Internet of Things, it is very easy to cause the network security system to be directly overloaded and crashed under attacks such as DDOS, making it difficult to perform normal network protection work. Summary of the invention

[0005] In view of the above-mentioned prior art, the technical problem to be solved by the present invention is that for the user group with an open network environment, if the above-mentioned network security detection is performed on all devices connected to the Internet of Things, it is very easy to cause the network security system to be directly overloaded and crashed under attacks such as DDOS, making it difficult to carry out normal network protection work.

[0006] To solve the above problems, the present invention provides a network security collaborative protection system based on Internet of Things devices, including a security system, the security system includes a network monitoring module and a device protection module, multiple device protection modules are signal-connected with access modules between the network monitoring module, the network monitoring module is signal-connected with the Internet of Things module, the device protection module is signal-connected with the Internet of Things device, and the device protection module is mounted in the Internet of Things device; The access module signal is connected to the collaborative protection module, the collaborative protection module signal is connected to the safety zone, the collaborative protection module signal is connected to the emergency response module, and the emergency response module signal is connected to the security management module; The access module divides IoT devices into three levels according to their permissions: visitors, registered users and invited users. Visitors can only browse and try out the security system and cannot interact with the security system in any data except downloading the security system data installation package. Registered users can use the security system normally and upgrade the device protection module through the collaborative protection module to increase their own protection effect. Invited users can go a step further and interact directly with the collaborative protection module, directly using the collaborative protection module to assist in protecting the device protection module.

[0007] In the above-mentioned network security collaborative protection system based on IoT devices, IoT devices are classified according to their permissions, and their access rights in the security system are set according to their user levels, thereby reducing the risk of data collapse of the collaborative protection module as a dynamic protection due to large-scale data access.

[0008] As a further improvement of the present application, the connection between the device protection module and the network monitoring module and the collaborative protection module needs to be authenticated by the access module, and the level of the IoT device is determined by the authentication of the access module, and the authentication of the access module is a multi-factor authentication mechanism.

[0009] As a further improvement of the present application, for the IoT devices of invited users, the IoT data is transmitted to the IoT module via the device protection module for use after undergoing broad-spectrum detection by the network monitoring module. When the IoT module is operating normally, low-density naked data transmission is regularly performed through the device protection module and the collaborative protection module. When there are Trojans or viruses in the IoT module data and they break through the network monitoring module and the device protection module and attempt to attack the collaborative protection module, high-density data encrypted transmission is performed. After receiving the encrypted data, the collaborative protection module transmits it to the safe area for trial operation and detection processing, and marks the IoT module according to the access module for data transmission.

[0010] As a supplement to the further improvement of the present application, during the trial operation and testing process, once the traces of Trojans and viruses are found in the security zone, feedback is given to the collaborative protection module, and the corresponding problem data is fed back to the emergency response module for processing through the collaborative protection module. The processing plan is promptly fed back to the equipment protection module, and the processed data is uploaded to the security management module to form a security management log, which is convenient for subsequent traceability and analysis. At the same time, it also provides data support for the system upgrade of the network monitoring module. According to the data transmission density, high-density data that may have problems is encrypted and transmitted, which is counterintuitive. The detection and processing of problem data are dispersed to multiple areas to ensure the operation of the security system as much as possible and make it difficult to be directly hacked.

[0011] As a further improvement of the present application, the encryption transmission algorithm is preferably the AES-256 algorithm. The more complex the encryption transmission is, the lower the possibility of deconstruction within the collaborative protection module, thereby increasing the security of transmission of problematic data within the collaborative module.

[0012] As another improvement of the present application, the level of IoT devices can also be divided according to the importance of the devices themselves.

[0013] As another improvement of the present application, the level of IoT devices can also be divided according to the performance of the devices themselves.

[0014] In summary, in this application, IoT devices are divided into three levels according to their permissions: visitors, registered users, and invited users. Their access permissions in the security system are set according to their user levels, so that low-authority visitors and registered users will not have data interaction with the collaborative protection module, reducing the risk of data collapse of the collaborative protection module as a dynamic protection due to large-scale data access, and increasing the overall reliability of the security system.

[0015] Alternatively, IoT devices can be divided according to their importance, and protection resources can be devoted to those that need special protection to increase the overall security of the system.

[0016] At the same time, by dividing the IoT devices according to their own performance, we can utilize the excellent data processing capabilities of high-performance IoT devices, enable the network monitoring module and the device protection module to promptly discover new viruses and vulnerabilities that may exist on the IoT, facilitate the continued updating and upgrading of the network monitoring module and the device protection module, and effectively protect the IoT devices at the visitor level and the registered user level. The high-performance IoT devices of the high-performance invited users are provided by the security system operator to provide network security protection for the IoT devices of visitors and registered users. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1This is a schematic diagram of the main structure of the network security collaborative protection system of the first embodiment of the present application; Figure 2 A schematic diagram of a safety system according to a first embodiment of the present application; Figure 3 This is a schematic diagram of user types for the first implementation mode of the present application; Figure 4 A schematic diagram of the working of the security system for a registered user of the first embodiment of the present application; Figure 5 This is a schematic diagram of the working of the security system for inviting users according to the first implementation mode of the present application; Figure 6 This is a schematic diagram of the data flow for inviting users within the network security collaborative protection system of the first embodiment of the present application. DETAILED DESCRIPTION

[0018] Three implementation modes of the present application are described in detail below with reference to the accompanying drawings.

[0019] The first implementation method: Figure 1 - Figure 2 A network security collaborative protection system based on Internet of Things devices is shown, including a security system, the security system includes a network monitoring module and a device protection module, multiple device protection modules are signal-connected with access modules between the network monitoring module, the network monitoring module is signal-connected with the Internet of Things module, the device protection module is signal-connected with the Internet of Things device, and the device protection module is mounted in the Internet of Things device; The access module signal is connected to the collaborative protection module, the collaborative protection module signal is connected to the safety zone, the collaborative protection module signal is connected to the emergency response module, and the emergency response module signal is connected to the security management module; See also Figure 3 - Figure 5 The access module divides IoT devices into three levels according to their permissions: visitors, registered users, and invited users. Visitors can only browse and try out the security system, and cannot interact with the security system in any data except downloading the security system data installation package. Registered users can use the security system normally and upgrade the device protection module through the collaborative protection module to increase their own protection effect. Invited users can further interact with the collaborative protection module directly and directly use the collaborative protection module to assist in protecting the device protection module.

[0020] The network monitoring module is deployed at the network boundary of the security system to monitor and filter the traffic in and out of the security system, prevent malicious attacks and unauthorized access, monitor network traffic in real time, detect potential intrusion behaviors such as DDoS attacks, SQL injections, etc., deeply analyze network traffic, identify abnormal traffic and behavior, and implement the first layer of broad-spectrum defense for the input data of IoT devices, screen out potential general intrusion behaviors, and increase the security of the physical network device operating environment.

[0021] See also Figure 4 - Figure 5 The device protection module deploys security software and firmware on IoT devices to increase the security of IoT devices, and regularly updates and fixes vulnerabilities. The visitor-level device protection module is not updated or repaired, while the registered user-level device protection module is regularly updated and repaired according to the system version of the network monitoring module. The invited user's device protection module interacts with the collaborative module in real time, and uses the collaborative protection module to protect its own network environment security. On the basis of the broad-spectrum defense of the network monitoring module, it performs specialized protection based on IoT devices. At the same time, the collaborative protection module can also perform targeted upgrades to the network monitoring module based on its own specialized protection to ensure the safety of registered users, and implement layered protection for IoT devices of different levels and needs, to avoid the risk of the overall collapse of the security system due to a large amount of data intrusion in a local area of ​​the security system.

[0022] The connection between the device protection module and the network monitoring module and the collaborative protection module needs to be authenticated by the access module, which is used to determine the level of the IoT device. The authentication of the access module is a multi-factor authentication mechanism, including but not limited to biometric authentication (fingerprint, iris and face recognition, etc.), passwords and machine codes.

[0023] In this application, IoT devices are divided into three levels according to their permissions: visitors, registered users, and invited users. Their access permissions in the security system are set according to their user levels, so that low-authority visitors and registered users will not have data interaction with the collaborative protection module, reducing the risk of data collapse of the collaborative protection module as a dynamic protection due to large-scale data access, and increasing the overall reliability of the security system.

[0024] See also Figure 6For the IoT devices of invited users, the IoT data is transmitted to the IoT module for use through the device protection module after being broad-spectrum detected by the network monitoring module. When the IoT module is operating normally, it will regularly perform low-density naked data transmission through the device protection module and the collaborative protection module to reduce the amount of data transmission between the collaborative module and the IoT module. When there are Trojans or viruses in the IoT module data and they break through the network monitoring module and the device protection module and attempt to attack the collaborative protection module, they will attempt to interact with the collaborative protection module with high-density data to steal data or attack. At this time, the device protection module starts its own protection system and performs high-density data encryption transmission. After receiving the encrypted data and transmitting it to the security zone, the collaborative protection module performs trial operation and detection processing, and marks the IoT module according to the access module of the data transmission.

[0025] During the trial operation and testing process, once the traces of Trojans and viruses are found in the security zone, feedback will be given to the collaborative protection module, and the corresponding problem data will be fed back to the emergency response module for processing through the collaborative protection module. The processing plan will be promptly fed back to the equipment protection module, and the processed data will be uploaded to the security management module to form a security management log for subsequent tracing and analysis. At the same time, it also provides data support for the system upgrade of the network monitoring module. According to the data transmission density, high-density data that may have problems will be encrypted and transmitted counterintuitively, and the detection and processing of problem data will be dispersed to multiple areas to ensure the operation of the security system as much as possible and not easily directly breached.

[0026] The AES-256 algorithm is the preferred algorithm for encrypted transmission. The more complex the encrypted transmission is, the lower the possibility of deconstruction in the collaborative protection module, which increases the security of problematic data transmission in the collaborative module.

[0027] The second implementation method: The level of IoT devices can also be divided according to the importance of the devices themselves. Taking the industrial park management system as an example, the information display equipment is divided into the visitor level, which only displays the data transmitted by the IoT module, and there is no other data interaction. Basic equipment such as production equipment and monitoring equipment are divided into registered user levels. The network monitoring module is used to perform broad-spectrum retrieval of data before data interaction. Its own production logs and monitoring data will have limited data interaction with other devices, while the device control terminal is divided into invited users. The security of its operating environment is double-protected by the network monitoring module and the collaborative protection module, and at the same time, it has one-way data interaction with devices at the visitor level and registered user level.

[0028] Compared with the first implementation, this implementation divides IoT devices according to their importance, devotes protection resources to objects that require special protection, and increases the overall security of the system.

[0029] The third implementation method: The level of IoT devices can also be divided according to the performance of their own devices. Taking a user group composed of multiple users as an example, IoT devices without a large amount of IoT data interaction and with poor performance are classified as visitor levels to avoid excessive burden on the operation of visitor IoT devices caused by frequent system upgrade data interaction. IoT devices with a large amount of IoT data interaction and with poor performance are classified as registered user levels, and their security is ensured through real-time updates of the network monitoring module and the device protection module. High-performance IoT devices are classified as invited users, which use their high-performance devices to frequently interact with IoT data, promptly discover new viruses and vulnerabilities that may exist on the IoT, and facilitate continued updates and upgrades of the network monitoring module and the device protection module.

[0030] Compared with the first and second embodiments, in this embodiment, the excellent data processing capabilities of high-performance Internet of Things devices are utilized to enable the network monitoring module and the device protection module to timely discover new viruses and vulnerabilities that may exist on the Internet of Things, facilitate the continued updating and upgrading of the network monitoring module and the device protection module, and effectively protect the Internet of Things devices at the visitor level and the registered user level. The high-performance Internet of Things devices of high-performance invited users are provided by the security system operator to provide network security protection for the Internet of Things devices of visitors and registered users.

[0031] In view of current practical needs, the above-mentioned implementation mode adopted in this application is not limited to the scope of protection. Various changes made within the knowledge scope of technical personnel in this field without departing from the concept of this application still fall within the scope of protection of the present invention.

Claims

1. A network security collaborative protection system based on Internet of Things devices, characterized by: A security system is included, wherein the security system includes a network monitoring module and a device protection module, wherein a plurality of the device protection modules are signal-connected to an access module with respect to the network monitoring module, wherein the network monitoring module is signal-connected to an Internet of Things module, wherein the device protection module is signal-connected to an Internet of Things device, and the device protection module is mounted in the Internet of Things device; The access module is signal-connected to a collaborative protection module, the collaborative protection module is signal-connected to a safety zone, the collaborative protection module is signal-connected to an emergency response module, and the emergency response module is signal-connected to a security management module; The access module divides IoT devices into three levels according to the permissions of IoT devices: visitors, registered users and invited users. The visitors can only browse and try out the security system, and cannot interact with the security system in any data except downloading the security system data installation package. Registered users use the security system normally and upgrade the device protection module through the collaborative protection module to increase their own protection effect. Invited users directly interact with the collaborative protection module and directly use the collaborative protection module to assist in protecting the device protection module.

2. According to claim 1, a network security collaborative protection system based on Internet of Things devices is characterized by: The connection between the device protection module and the network monitoring module and the collaborative protection module needs to be authenticated by the access module, and the level of the IoT device is determined by the authentication of the access module, and the authentication of the access module is a multi-factor authentication mechanism.

3. According to claim 1, a network security collaborative protection system based on Internet of Things devices is characterized by: For the IoT devices of invited users, the IoT data is transmitted to the IoT module through the device protection module for use after undergoing broad-spectrum detection by the network monitoring module. When the IoT module is operating normally, low-density naked data transmission is regularly performed through the device protection module and the collaborative protection module. When there are Trojans or viruses in the IoT module data and they break through the network monitoring module and the device protection module and attempt to attack the collaborative protection module, high-density data encryption transmission is performed. After receiving the encrypted data, the collaborative protection module transmits it to the safe area for trial operation and detection processing, and marks the IoT module according to the access module of the data transmission.

4. A network security collaborative protection system based on Internet of Things devices according to claim 3, characterized in that: During the trial operation and testing process, once the security zone finds traces of Trojans and viruses, it will feedback to the collaborative protection module, and the corresponding problem data will be fed back to the emergency response module for processing through the collaborative protection module. The processing plan will be fed back to the equipment protection module in a timely manner, and the processed data will be uploaded to the security management module to form a security management log.

5. According to claim 3, a network security collaborative protection system based on Internet of Things devices is characterized by: The encrypted transmission adopts AES-256 algorithm.

6. A network security collaborative protection system based on Internet of Things devices according to claim 1, characterized in that: The levels of the IoT devices are divided according to the importance of the devices themselves.

7. A network security collaborative protection system based on Internet of Things devices according to claim 1, characterized in that: The IoT devices are classified according to their performance.

Images