An Internet of Things network security system and information security authentication method thereof

Abstract

The present invention discloses an Internet of Things network security system and an information security authentication method thereof, which specifically relates to the field of network security, and includes an authentication unit, a verification unit and an authority unit, wherein the authentication unit includes an identity detection module for detecting whether identity information is correct, the identity detection module is electrically connected to a short message detection module for detecting whether dynamic codes and mobile phone number information are accurate, the short message detection module is electrically connected to a person detection module for detecting whether person portraits and identity information are accurate, and the person detection module is electrically connected to a family retrieval module for retrieving family members. The present invention retrieves family members through the family retrieval module, distinguishes whether there are siblings, and the feature recording module and the information establishment module respectively record fingerprint and iris data, and establishes personal files of special personnel, and then can perform different levels of verification according to identity information and family background, thereby increasing the security of the system.

Description

Technical Field

[0001] The present invention relates to the field of network security, and in particular to an Internet of Things network security system and an information security authentication method thereof. Background Art

[0002] With the rapid development of information technology, the Internet of Things has become a core component of modern security systems. In the Internet of Things environment, traditional security systems face many challenges, including security, identity authentication, and authority management. In order to solve these challenges, the current security system needs to integrate a variety of advanced technologies to enhance its functions and performance. The existing verification methods are mostly a combination of face recognition and dynamic verification codes. However, for brothers and sisters, this method cannot be used for good identification. At the same time, the principle of least authority will lead to many events being processed. Personnel with insufficient authority cannot handle events, resulting in slow event processing. At this time, an Internet of Things network security system and its information security authentication method are needed to solve the above problems. Summary of the invention

[0003] The purpose of the present invention is to solve the shortcomings existing in the prior art. With the rapid development of information technology, the Internet of Things has become a core component of modern security systems. In the Internet of Things environment, traditional security systems face many challenges, including security, identity authentication, authority management, etc. In order to solve these challenges, the current security system needs to integrate a variety of advanced technologies to enhance its functions and performance. The existing verification methods are mostly a combination of face recognition and dynamic verification codes, but for siblings, this method cannot be well identified. At the same time, the principle of least authority will cause many events to be processed. Personnel with insufficient authority cannot handle events, resulting in slow event processing. A network security system of the Internet of Things and its information security authentication method are proposed.

[0004] In order to achieve the above object, the present invention adopts the following technical solutions:

[0005] An Internet of Things network security system comprises an authentication unit, a verification unit and an authority unit, wherein the authentication unit comprises an identity detection module for detecting whether identity information is correct, the identity detection module is electrically connected to a text message detection module for detecting whether dynamic code and mobile phone number information are accurate, the text message detection module is electrically connected to a person detection module for detecting whether a person's head portrait and identity information are accurate, the person detection module is electrically connected to a family search module for searching family members, the family search module is electrically connected to a feature recording module for recording feature data information of the person, the feature recording module is electrically connected to an information establishment module for establishing an information archive, and the information establishment module is electrically connected to an information storage module for storing information. The information storage module is electrically connected to the authentication unit, the family retrieval module is electrically connected to the information filing module, the verification unit includes an image recording module for recording character images, the image recording module is electrically connected to an image retrieval module for character image retrieval, the image retrieval module is electrically connected to a feature verification module for feature verification, the feature verification module is electrically connected to an error reporting module for generating an error report and a character verification module for checking whether the character verification is passed, the character verification module is electrically connected to the image retrieval module, the character verification module is electrically connected to the error reporting module, and the character verification module is electrically connected to the permission unit.

[0006] The present invention is further configured as follows: the authentication unit is provided with personal information data by big data; the identity detection module first detects whether the personal ID number information and name information are correct; the SMS detection module detects whether the mobile phone number held by the individual is accurate; the person detection module records the person image and collects dynamic person-related images, including but not limited to blinking, opening the mouth, looking left, etc.; if the identity detection module detects that the personal input information is correct, the SMS detection module performs SMS detection; if the identity detection module detects that the personal input information is incorrect, it needs to be re-entered; the SMS detection module will send a dynamic verification code to the personal mobile phone terminal, and the individual needs to interact with the SMS detection module to detect whether the SMS dynamic verification code is correct; if the SMS detection module detects that the personal mobile phone terminal is accurate, the person detection module collects the person image; if the SMS detection module detects that the personal mobile phone terminal is incorrect, it needs to be re-interactively verified.

[0007] The present invention is further configured as follows: the family retrieval module retrieves whether the individual's family members have siblings related to the individual based on the correct data information provided by the identity detection module, the text message detection module and the person detection module; when the family retrieval module retrieves that the individual has siblings, the feature recording module records the feature data of the characteristic person, records the fingerprint data and iris data of the person, and establishes a special personnel file based on the correct data information provided by the identity detection module, the text message detection module and the person detection module, and the information storage module stores the special personnel file data information; when the family retrieval module retrieves that the individual has no siblings, the information establishment module establishes a normal personnel file based on the correct data information provided by the identity detection module, the text message detection module and the person detection module, and the information storage module stores the normal personnel file data information.

[0008] The present invention is further configured as follows: the image recording module records a person image, and the image retrieval module retrieves whether the person image conforms to special person data information; when the image retrieval module detects that the person image belongs to special person data information, the feature verification module verifies the special person feature data, and performs detection and verification by selecting one of the iris detection method and the fingerprint detection method, and verifies whether the feature data verification is passed; when the feature verification module verifies that the feature data is correct, the person verification module verifies whether the person image can pass the person data verification, and the person feature verification includes face recognition, and includes blinking, opening the mouth, etc.; when the person verification module verifies correctly, the permission module performs permission control; when the person verification module and the feature verification module cannot pass, the error reporting module feeds back to inform the verification personnel to re-verify; when the image retrieval module detects that the person image belongs to normal person data information, the person verification module performs person verification.

[0009] The present invention is further configured as follows: the authority unit includes a definition module for defining authority responsibilities, the definition module is electrically connected to a restriction module for limiting the scope of authority, the restriction module is electrically connected to an application module for applying for a larger scope of authority, the application module is electrically connected to an evaluation module for evaluating whether application information is reasonable, the evaluation module is electrically connected to a rejection module for rejecting an application and an authorization module for granting authority, the authorization module is electrically connected to a monitoring module for detecting whether the authority processing is completed, and the monitoring module is electrically connected to a revocation module for revoking the granted authority.

[0010] The present invention is further configured as follows: the definition module determines the scope of personal authority and responsibility, and the restriction module limits the authority and responsibility outside the personal authority, the application module provides reasons for the required authority and applies for authority and responsibility outside the personal authority, and the evaluation module evaluates whether the application reasons are reasonable. When the application reasons are reasonable, the authorization module grants the required authority; when the application reasons are unreasonable, the rejection module rejects the application.

[0011] The present invention is further configured as follows: the monitoring module monitors the permission granting event processing process and monitors whether the permission processing is completed. When it is monitored that the permission processing is completed, the revocation module revokes the permission granted by the authorization module. When it is monitored that the permission processing is not completed, the monitoring module continues to monitor.

[0012] A method for authenticating Internet of Things network security information security, the specific operation includes the following steps:

[0013] S1, the authentication unit authenticates the personnel information and stores the personnel data information;

[0014] S2. The verification module verifies whether the person operating the permission unit is the person himself, and processes the event through the permission unit.

[0015] The present invention is further configured as follows: in step S1:

[0016] 1) The identity detection module receives the user's ID number and name, and verifies whether the identity information provided by the user is correct;

[0017] 2) If the identity information is correct, the SMS detection module sends a dynamic verification code to the user's mobile phone. The user enters the verification code on the SMS detection module interface, and the SMS detection module verifies the correctness of the verification code;

[0018] 3) After the verification code is verified correctly, the person detection module records the user's image and collects image features related to dynamics, such as blinking, opening the mouth, looking left and right, etc.

[0019] 4) Retrieve the user's family member information based on the correct data provided by the identity detection module, the text message detection module and the person detection module;

[0020] 5) If the family search module finds that there are siblings, the user's fingerprint and iris data will be recorded and a special personnel file will be established. If the family search module finds that there are no siblings, a normal personnel file will be established;

[0021] 6) Store the created special personnel or normal personnel files in the information storage module.

[0022] The present invention is further configured as follows: in step S1:

[0023] 1) The image recording module records the user's image, and the image retrieval module retrieves the recorded image to determine whether the user is a special person. If the user is a special person, the feature verification module selects one of the iris and fingerprint for feature verification to verify whether the user's feature data is correct;

[0024] 2) If the user is a normal person, the person verification module will directly perform person verification. If the feature verification module passes the verification, the person verification module will perform person verification. If the person verification passes, the permission unit controls the access rights. If the verification fails, the error reporting module will generate an error report and notify the user to re-verify.

[0025] 3) The definition module determines the scope of the user's authority and responsibilities, the restriction module restricts the user's operations beyond the defined authority scope, and when the application module applies for greater authority, the application module receives the application and records the reason for the application;

[0026] 4) The evaluation module evaluates the rationality of the application reason. If the application reason is reasonable, the authorization module grants the user the required permissions. If the application reason is unreasonable, the rejection module will reject the application.

[0027] 5) Monitor the permission processing process and check whether the permission processing is completed. After the permission processing is completed, the revocation module revokes the granted permission. If the permission processing is not completed, the monitoring module continues to monitor.

[0028] The beneficial effects of the present invention are:

[0029] The present invention retrieves family members through a family search module to distinguish whether there are siblings. The feature recording module and the information establishment module respectively record fingerprint and iris data and establish personal files for special persons, and then can perform different levels of verification according to identity information and family background, thereby increasing the security of the system. The authority unit defines the scope of authority responsibilities and limits the behavior exceeding the authority through the restriction module. The application module allows users to apply for greater authority, the evaluation module evaluates the rationality of the application reasons, the authorization module grants authority when the application is reasonable, and the rejection module handles unreasonable applications. The monitoring module continuously tracks the authority processing status, and the revocation module revokes the authority after the authority processing is completed, thereby providing floating authority and increasing the event processing speed. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 A schematic diagram of the system flow of an Internet of Things network security system and an information security authentication method thereof in the present invention;

[0031] Figure 2 A schematic diagram of the authentication unit system flow of an Internet of Things network security system and its information security authentication method in the present invention;

[0032] Figure 3 A schematic diagram of a verification unit system flow of an Internet of Things network security system and an information security authentication method thereof in the present invention;

[0033] Figure 4 The present invention is a schematic diagram of the authority unit system flow of an Internet of Things network security system and its information security authentication method. DETAILED DESCRIPTION

[0034] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments.

[0035] like Figure 1-4 As shown, an Internet of Things network security system includes an authentication unit, a verification unit and an authority unit, the authentication unit includes an identity detection module for detecting whether identity information is correct, the identity detection module is electrically connected to a text message detection module for detecting whether dynamic code and mobile phone number information are accurate, the text message detection module is electrically connected to a person detection module for detecting whether a person's head portrait and identity information are accurate, the person detection module is electrically connected to a family search module for retrieving family members, the family search module is electrically connected to a feature recording module for recording character feature data information, the feature recording module is electrically connected to an information establishment module for establishing an information archive, and the information establishment module is electrically connected to a useful An information storage module for information storage, an authentication unit and a verification unit are electrically connected, a family search module and an information file creation module are electrically connected, the verification unit includes an image recording module for recording images of people, the image recording module is electrically connected to an image retrieval module for retrieving images of people, the image retrieval module is electrically connected to a feature verification module for feature verification, the feature verification module is electrically connected to an error reporting module for generating an error report and a person verification module for checking whether the person verification is passed, the person verification module is electrically connected to the image retrieval module, the person verification module is electrically connected to the error reporting module, and the person verification module is electrically connected to the authority unit;

[0036] The authentication unit is provided with personal information data by big data. The identity detection module first detects whether the personal ID number and name information are correct. The SMS detection module detects whether the mobile phone number held by the individual is accurate. The person detection module records the person's image and collects dynamic person-related images, including but not limited to blinking, opening the mouth, looking left, etc. If the identity detection module detects that the personal input information is correct, the SMS detection module will perform SMS detection. If the identity detection module detects that the personal input information is wrong, it needs to be re-entered. The SMS detection module will send a dynamic verification code to the personal mobile phone terminal. The individual needs to interact with the SMS detection module to detect whether the SMS dynamic verification code is correct. If the SMS detection module detects that the personal mobile phone terminal is accurate, the person detection module will collect the person image. If the SMS detection module detects that the personal mobile phone terminal is wrong, it needs to be re-interactively verified.

[0037] Through the above embodiment, the identity detection module is responsible for verifying the ID card number and name, the SMS detection module detects the mobile phone number and verification code, and the person detection module verifies the actual person through image processing. The multiple authentication mechanisms improve the security of the system. At the same time, the SMS detection module not only verifies the mobile phone number, but also enhances the real-time nature of the verification process through a dynamic verification code. The person detection module further confirms the identity through dynamic image capture, combining the SMS verification code and biometrics technology to increase the data accuracy of the authenticated person.

[0038] The family search module searches for whether the individual's family members have siblings related to the individual according to the correct data information provided by the identity detection module, the short message detection module and the person detection module. When the family search module searches for the individual to have siblings, the feature recording module records the feature data of the characteristic person, records the fingerprint data and the iris data of the person, and establishes a special person file according to the correct data information provided by the identity detection module, the short message detection module and the person detection module, and the information storage module stores the special person file data information. When the family search module searches for the individual to have no siblings, the information establishment module establishes a normal person file according to the correct data information provided by the identity detection module, the short message detection module and the person detection module, and the information storage module stores the normal person file data information.

[0039] Through the above embodiment, the family search module is used to search for family members and distinguish whether there are siblings. The feature recording module and the information establishment module respectively record fingerprint and iris data and establish personal files of special persons. Then, different levels of verification can be performed according to identity information and family background, thereby increasing the security of the system.

[0040] The image recording module records the image of the person, and the image retrieval module retrieves whether the image of the person conforms to the special person data information. When the image retrieval module detects that the image of the person belongs to the special person data information, the feature verification module verifies the special person feature data, and performs detection and verification by selecting one of the iris detection method and the fingerprint detection method, and verifies whether it passes the feature data verification. When the feature verification module verifies that the feature data is correct, the person verification module verifies whether the person image can pass the person data verification. The person feature verification includes face recognition, and includes blinking, opening the mouth, etc. When the person verification module verifies correctly, the authority module performs authority control. When the person verification module and the feature verification module cannot pass, the error reporting module feeds back to inform the verification personnel to re-verify. When the image retrieval module detects that the person image belongs to normal person data information, the person verification module performs person verification.

[0041] Through the above embodiments, the verification unit forms a complete verification chain through the image recording module, the image retrieval module, the feature verification module, etc., and thus when performing authority control for special personnel and normal personnel, it can ensure that the person who controls the authority belongs to the certified person, further increasing the security of the system;

[0042] The authority unit includes a definition module for defining authority responsibilities, the definition module is electrically connected to a restriction module for limiting the scope of authority, the restriction module is electrically connected to an application module for applying for a larger scope of authority, the application module is electrically connected to an evaluation module for evaluating whether application information is reasonable, the evaluation module is electrically connected to a rejection module for rejecting an application and an authorization module for granting authority, the authorization module is electrically connected to a monitoring module for detecting whether the authority processing is completed, and the monitoring module is electrically connected to a revocation module for revoking the granted authority;

[0043] The definition module determines the scope of personal authority and responsibility, and the restriction module limits the authority and responsibility outside the personal authority. The application module provides the reason for the required authority and applies for the authority and responsibility outside the personal authority. The evaluation module evaluates whether the application reason is reasonable. When the application reason is reasonable, the authorization module grants the required authority. When the application reason is unreasonable, the rejection module rejects the application.

[0044] The monitoring module monitors the granting of permission event processing process and monitors whether the permission processing is completed. When it is detected that the permission processing is completed, the revocation module revokes the permission granted by the authorization module. When it is detected that the permission processing is not completed, the monitoring module continues to monitor;

[0045] Through the above embodiments, the authority unit defines the scope of authority and responsibilities, and limits the behavior exceeding the authority through the restriction module. The application module allows the user to apply for greater authority, the evaluation module evaluates the rationality of the application reason, the authorization module grants authority when the application is reasonable, and the rejection module handles unreasonable applications. The monitoring module continuously tracks the authority processing status, and the revocation module revokes the authority after the authority processing is completed, thereby providing floating authority and increasing the event processing speed;

[0046] A method for authenticating Internet of Things network security information security, the specific operation includes the following steps:

[0047] S1, the authentication unit authenticates the personnel information and stores the personnel data information;

[0048] S2. The verification module verifies whether the person operating the permission unit is the person himself, and processes the event through the permission unit.

[0049] In step S1:

[0050] 1) The identity detection module receives the user's ID number and name, and verifies whether the identity information provided by the user is correct;

[0051] 2) If the identity information is correct, the SMS detection module sends a dynamic verification code to the user's mobile phone. The user enters the verification code on the SMS detection module interface, and the SMS detection module verifies the correctness of the verification code;

[0052] 3) After the verification code is verified correctly, the person detection module records the user's image and collects image features related to dynamics, such as blinking, opening the mouth, looking left and right, etc.

[0053] 4) Retrieve the user's family member information based on the correct data provided by the identity detection module, the text message detection module and the person detection module;

[0054] 5) If the family search module finds that there are siblings, the user's fingerprint and iris data will be recorded and a special personnel file will be established. If the family search module finds that there are no siblings, a normal personnel file will be established;

[0055] 6) Store the created special personnel or normal personnel files in the information storage module.

[0056] In step S1:

[0057] 1) The image recording module records the user's image, and the image retrieval module retrieves the recorded image to determine whether the user is a special person. If the user is a special person, the feature verification module selects one of the iris and fingerprint for feature verification to verify whether the user's feature data is correct;

[0058] 2) If the user is a normal person, the person verification module will directly perform person verification. If the feature verification module passes the verification, the person verification module will perform person verification. If the person verification passes, the permission unit controls the access rights. If the verification fails, the error reporting module will generate an error report and notify the user to re-verify.

[0059] 3) The definition module determines the scope of the user's authority and responsibilities, the restriction module restricts the user's operations beyond the defined authority scope, and when the application module applies for greater authority, the application module receives the application and records the reason for the application;

[0060] 4) The evaluation module evaluates the rationality of the application reason. If the application reason is reasonable, the authorization module grants the user the required permissions. If the application reason is unreasonable, the rejection module will reject the application.

[0061] 5) Monitor the permission processing process and check whether the permission processing is completed. After the permission processing is completed, the revocation module revokes the granted permission. If the permission processing is not completed, the monitoring module continues to monitor.

[0062] Working principle: When the present invention is in use, the identity detection module receives the user's ID number and name, and checks whether the identity information provided by the user is correct. If the identity information is correct, the SMS detection module sends a dynamic verification code to the user's mobile phone. The user enters the verification code on the SMS detection module interface, and the SMS detection module verifies the correctness of the verification code. After the verification code is verified correctly, the person detection module records the user's image and collects dynamic image features, such as blinking, opening the mouth, looking left and right, etc. According to the correct data provided by the identity detection module, the SMS detection module and the person detection module, the user's family member information is retrieved. If the family retrieval module retrieves siblings, the user's fingerprint and iris data are recorded, and a special person file is established. If the family retrieval module retrieves no siblings, a normal person file is established, and the established special person or normal person file is stored in the information storage module. The image recording module records the user's image, and the image retrieval module retrieves the recorded image to retrieve whether the user is a special person. If the user is a special person, the feature verification module selects one of the iris and fingerprint for feature verification to verify whether the user's feature data is correct. If the user is a normal person, the person verification module directly performs person verification. If the feature verification module passes the verification, the person verification module performs person verification. If the person verification passes, the permission unit controls the access rights. If the verification fails, the error reporting module generates an error report and notifies the user to re-verify. The definition module determines the scope of the user's authority and responsibilities. The restriction module restricts the user's operations beyond the defined authority scope. When the application module applies for greater authority, the application module receives the application and records the reason for the application. The evaluation module evaluates the rationality of the application reason. If the application reason is reasonable, the authorization module grants the user the required authority. If the application reason is unreasonable, the rejection module will reject the application. The permission processing process is monitored to check whether the permission processing is completed. After the permission processing is completed, the revocation module revokes the granted authority. If the permission processing is not completed, the monitoring module continues to monitor.

[0063] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. An Internet of Things network security system, characterized in that: The system comprises an authentication unit, a verification unit and an authority unit, wherein the authentication unit comprises an identity detection module for detecting whether identity information is correct, the identity detection module is electrically connected to a text message detection module for detecting whether dynamic code and mobile phone number information are accurate, the text message detection module is electrically connected to a person detection module for detecting whether person portrait and identity information are accurate, the person detection module is electrically connected to a family search module for searching family members, the family search module is electrically connected to a feature recording module for recording character feature data information, the feature recording module is electrically connected to an information establishment module for establishing information archives, and the information establishment module is electrically connected to an information storage module for storing information Module, the authentication unit is electrically connected to the verification unit, the family retrieval module is electrically connected to the information archiving module, the verification unit includes an image recording module for recording character images, the image recording module is electrically connected to an image retrieval module for character image retrieval, the image retrieval module is electrically connected to a feature verification module for feature verification, the feature verification module is electrically connected to an error report module for generating an error report and a character verification module for checking whether the character verification is passed, the character verification module is electrically connected to the image retrieval module, the character verification module is electrically connected to the error reporting module, and the character verification module is electrically connected to the permission unit.

2. The Internet of Things network security system according to claim 1, characterized in that: The authentication unit is provided with personal information data by big data, the identity detection module first detects whether the personal ID number information and name information are correct, the SMS detection module detects whether the mobile phone number held by the individual is accurate, the person detection module records the person image, and collects dynamic person-related images, including but not limited to blinking, opening the mouth, looking left, etc., the identity detection module detects that the personal input information is correct, the SMS detection module performs SMS detection, the identity detection module detects that the personal input information is incorrect and needs to be re-entered, the SMS detection module will send a dynamic verification code to the personal mobile phone, and the individual needs to interact with the SMS detection module to detect whether the SMS dynamic verification code is correct, the SMS detection module detects that the personal mobile phone is accurate, the person detection module collects the person image, and the SMS detection module detects that the personal mobile phone is incorrect and needs to be re-interactively verified.

3. The Internet of Things network security system according to claim 2, characterized in that: The family retrieval module retrieves whether the individual's family members have siblings based on the correct data information provided by the identity detection module, the text message detection module and the person detection module. When the family retrieval module retrieves that the individual has siblings, the feature recording module records the feature data of the individual, the fingerprint data and the iris data of the individual, and establishes a special personnel file based on the correct data information provided by the identity detection module, the text message detection module and the person detection module, and the information storage module stores the special personnel file data information. When the family retrieval module retrieves that the individual has no siblings, the information establishment module establishes a normal personnel file based on the correct data information provided by the identity detection module, the text message detection module and the person detection module, and the information storage module stores the normal personnel file data information.

4. The Internet of Things network security system according to claim 1, characterized in that: The image recording module records the image of the person, and the image retrieval module retrieves whether the image of the person conforms to the special person data information. When the image retrieval module detects that the image of the person belongs to the special person data information, the feature verification module verifies the special person feature data, and performs detection and verification by either iris detection or fingerprint detection, and verifies whether the feature data verification is passed. When the feature verification module verifies that the feature data is correct, the person verification module verifies whether the person image can pass the person data verification. The person feature verification is face recognition, and includes blinking, opening the mouth, etc. When the person verification module verifies correctly, the permission module performs permission control. When the person verification module and the feature verification module cannot pass, the error reporting module feeds back to inform the verification personnel to re-verify. When the image retrieval module detects that the person image belongs to normal person data information, the person verification module performs person verification.

5. The Internet of Things network security system according to claim 1, characterized in that: The authority unit includes a definition module for defining authority responsibilities, the definition module is electrically connected to a restriction module for limiting the scope of authority, the restriction module is electrically connected to an application module for applying for a larger scope of authority, the application module is electrically connected to an evaluation module for evaluating whether application information is reasonable, the evaluation module is electrically connected to a rejection module for rejecting an application and an authorization module for granting authority, the authorization module is electrically connected to a monitoring module for detecting whether the authority processing is completed, and the monitoring module is electrically connected to a revocation module for revoking the granted authority.

6. The Internet of Things network security system according to claim 5, characterized in that: The definition module determines the scope of personal authority and responsibility, and the restriction module limits the authority and responsibility outside the personal authority. The application module provides the reason for the required authority and applies for the authority and responsibility outside the personal authority. The evaluation module evaluates whether the application reason is reasonable. When the application reason is reasonable, the authorization module grants the required authority. When the application reason is unreasonable, the rejection module rejects the application.

7. The Internet of Things network security system according to claim 6, characterized in that: The monitoring module monitors the granting of permission event processing process and monitors whether the permission processing is completed. When it is monitored that the permission processing is completed, the revocation module revokes the permission granted by the authorization module. When it is monitored that the permission processing is not completed, the monitoring module continues to monitor.

8. An Internet of Things network security information security authentication method, comprising an Internet of Things network security system as described in any one of claims 1 to 7, characterized in that: The specific operation includes the following steps: S1, the authentication unit authenticates the personnel information and stores the personnel data information; S2. The verification module verifies whether the person operating the permission unit is the person himself, and processes the event through the permission unit.

9. The method for authenticating Internet of Things network security information according to claim 8, characterized in that: In step S1: 1) The identity detection module receives the user's ID number and name, and verifies whether the identity information provided by the user is correct; 2) If the identity information is correct, the SMS detection module sends a dynamic verification code to the user's mobile phone. The user enters the verification code on the SMS detection module interface, and the SMS detection module verifies the correctness of the verification code; 3) After the verification code is verified correctly, the person detection module records the user's image and collects image features related to dynamics, such as blinking, opening the mouth, looking left and right, etc. 4) Retrieve the user's family member information based on the correct data provided by the identity detection module, the text message detection module and the person detection module; 5) If the family search module finds that there are siblings, the user's fingerprint and iris data will be recorded and a special personnel file will be established. If the family search module finds that there are no siblings, a normal personnel file will be established; 6) Store the created special personnel or normal personnel files in the information storage module.

10. The method for Internet of Things network security information security authentication according to claim 8, characterized in that: In step S1: 1) The image recording module records the user's image, and the image retrieval module retrieves the recorded image to determine whether the user is a special person. If the user is a special person, the feature verification module selects one of the iris and fingerprint for feature verification to verify whether the user's feature data is correct. 2) If the user is a normal person, the person verification module will directly perform person verification. If the feature verification module passes the verification, the person verification module will perform person verification. If the person verification passes, the permission unit controls the access rights. If the verification fails, the error reporting module will generate an error report and notify the user to re-verify. 3) The definition module determines the scope of the user's authority and responsibilities, the restriction module restricts the user's operations beyond the defined authority scope, and when the application module applies for greater authority, the application module receives the application and records the reason for the application; 4) The evaluation module evaluates the rationality of the application reason. If the application reason is reasonable, the authorization module grants the user the required permissions. If the application reason is unreasonable, the rejection module will reject the application. 5) Monitor the permission processing process and check whether the permission processing is completed. After the permission processing is completed, the revocation module revokes the granted permission. If the permission processing is not completed, the monitoring module continues to monitor.

Images