Network information security maintenance management device and use method thereof
By designing network information security maintenance and management devices in the home network, using technical means such as user role definition, dynamic permission scoring model and data privacy protection, the problems of malicious advertisements, children's access to bad websites and neighbors' networks in the home network are solved, and efficient network security management and privacy protection are achieved.
Patent Information
- Application Number
- CN202510034901.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-01-09
- Publication Date
- 2025-04-15
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
There are malicious advertising in the home network, bad websites for children, and neighbors to freeze the network. The existing technology is difficult to effectively solve these special threats.
Design a network information security maintenance and management device, and achieve precise control and protection of home networks through technical means such as user role definition and permission template initialization, dynamic permission scoring model calculation, dynamic permission adjustment, permission prediction and optimization, data security and privacy protection.
It effectively improves the security of the home network, provides accurate parental control and access management functions, prevents bad content and malicious attacks, and protects the network security and privacy of family members.
Smart Images
Figure CN119835065A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of network information security maintenance, and in particular to a network information security maintenance management device and a use method thereof. Background Art
[0002] A network information security maintenance and management device is a comprehensive hardware or software system designed to protect the security of networks and information systems, prevent unauthorized access, data leakage, malicious attacks, and other potential threats. It usually combines multiple technologies and tools to achieve comprehensive security protection and management functions; In the application scenario of individual users, the network information security maintenance and management device is mainly used to protect the home network environment and personal privacy data. With the popularization of smart devices and network applications, home networks are facing more and more security threats, such as data leakage, device attacks, unauthorized access, etc. The network information security maintenance and management device ensures the user's home network security and privacy protection by using a variety of technical means; When a network information security maintenance and management device is used in a home scenario, there are problems such as malicious advertisements, children visiting bad websites, and neighbors surfing the Internet. How to design a special threat protection function for the home scenario to achieve parental control and network access management is an urgent problem to be solved when the network information security maintenance and management device is used in the home scenario. Therefore, a network information security maintenance and management device and a method of using the same are proposed to address the above problems. Summary of the invention
[0003] The purpose of the present invention is to provide a network information security maintenance management device and a method of using the same, so as to solve the problems of malicious advertisements, children visiting bad websites, and neighbors surfing the Internet when the network information security maintenance management device is used in a home scenario.
[0004] To achieve the above object, the present invention provides the following technical solutions: A network information security maintenance and management device and a method for using the same, comprising the following steps: Step 1: User role definition and permission template initialization: Setting user roles according to user name, age, and behavior preference, including children, adults, and visitors; configuring an initial permission template for each role, including basic rules such as access time period, allowed resource types, and bandwidth restrictions; user role weight Determined by role mapping, the default values are:
[0005] Step 2: Dynamic permission scoring model calculation: Build a user dynamic permission scoring model ; Step 3: Dynamically adjust permissions: set permission score thresholds , dynamically adjust user permissions based on the following criteria:
[0006] When user access rights are restricted, the system automatically notifies the administrator and provides adjustment suggestions; Step 4: Permission prediction and optimization: The system records user behavior logs and predicts future permission scores, which is achieved through the following formula:
[0007] In the formula, Score the rate of change of permissions, is the adjustment factor; Adjust permission configuration in advance based on prediction results to achieve dynamic optimization allocation of network resources; Analyze historical data through machine learning algorithms to optimize scoring model weights and thresholds ; Step 5: Data security and privacy protection: All permission scoring and behavior analysis calculations are completed locally to prevent data leakage; use differential privacy algorithms to protect sensitive data. The formula is:
[0008] In the formula, is random noise, used to protect privacy; Regularly clean up historical log data to reduce security risks and improve data processing efficiency.
[0009] As a further optimization of the present invention, the user dynamic authority scoring model The calculation formula is:
[0010] In the formula, is the user role weight, The weight of the device type, combined with the device credibility score It is calculated that The time period weight is dynamically adjusted according to the preset schedule. Score user behavior, , , and It is the weight coefficient, which is adjusted according to historical data or administrator configuration.
[0011] As a further optimization of the present invention, the device type weight is combined with the device credibility score The calculation formula is:
[0012] In the formula, The index of the device feature, indicating the Features, is the total number of device features, indicating the number of features used to calculate the credibility, For the The weight of a feature indicates the relative importance of the feature to the device credibility. The weight value is obtained through historical data training and satisfies , For the The value of a feature indicates the credibility of the feature, and its value range is [0, 1]. Indicates that the feature is completely credible. Indicates that the feature is not credible.
[0013] As a further optimization of the present invention, the user behavior score , calculated through resource access category and security assessment, the calculation formula is:
[0014] In the formula, is the resource type weight, Provide a security score for the corresponding resource.
[0015] As a further optimized content of the present invention, the user role management module supports automatic updating of user permission templates and dynamically adjusts role weights and permission settings based on behavior logs.
[0016] As a further optimization of the present invention, the dynamic permission adjustment module is provided with a threshold determination rule, and when the user permission score is lower than a preset threshold, the system automatically restricts network access and sends an administrator notification.
[0017] As a further optimization of the present invention, the network interface module supports a multi-network isolation function, and allocates different virtual network channels to children, adults and visitors respectively to ensure network security.
[0018] As further optimized content of the present invention, the display and interaction module has a behavior graphical analysis function for intuitively displaying the user authority score change trend and prediction results; the storage module stores user behavior logs through an encryption mechanism and regularly cleans up expired data.
[0019] As a further optimization of the present invention, the user role management module supports identity authentication through biometrics, multi-factor authentication and device fingerprint.
[0020] As further optimized content of the present invention, it includes: User role management module, used to classify user roles according to user identity information and behavior characteristics, and initialize corresponding permission templates; The permission scoring module is used to calculate the user permission score, including the user role weight, device credibility weight, time period weight and behavior score; A dynamic permission adjustment module is used to adjust the user's network access rights in real time based on the comparison result between the user's permission score and the preset threshold; Prediction and optimization module, which is used to record user behavior data and adjust future network resource allocation through prediction models; Data privacy protection module, used to protect user data through differential privacy algorithm; Storage module, used to store user permission templates, behavior data and log records; Network interface module, supporting Wi-Fi, Ethernet and smart home protocol connections, realizing multi-network isolation and permission allocation; The display and interaction module is used to display the current network status and user authority information, and supports administrator authority adjustment. The device realizes network information security maintenance and management based on user roles through a dynamic authority scoring model combined with device credibility, behavior analysis and differential privacy protection mechanism.
[0021] Compared with the prior art, the present invention has the following beneficial effects: 1. In the present invention, the network information security maintenance and management device of the present invention can effectively improve the security of the family network through the comprehensive application of multiple technical means, provide accurate parental control and access management functions, help protect family members from network threats, and realize comprehensive monitoring and management of the family network environment, meeting the high requirements of modern families for network security and privacy protection; 2. In the present invention, the network information security maintenance management device and the method of using the same can realize differentiated network access control according to the needs of different family members through precise dynamic permission control and user role management, especially for the network management of children and visitors. Through dynamic adjustment of permissions based on behavior analysis and device credibility score, the system can identify abnormal behaviors in real time and restrict improper access, ensuring that family members (especially children) will not be exposed to bad websites, malicious advertisements or inappropriate content. At the same time, parents can adjust and set access permissions and access time at any time through a convenient interface, effectively enhancing the security and applicability of the home network. 3. In the present invention, the present invention provides strong protection for the personal data of family members by integrating differential privacy algorithms and encryption technologies. The system encrypts and anonymizes sensitive data to effectively prevent data leakage and unauthorized access. At the same time, the device has real-time security threat monitoring and response capabilities, and can quickly take isolation measures when encountering network attacks or device intrusions to ensure that other devices and networks are not affected. This integrated protection mechanism not only improves the overall level of home network security, but also minimizes manual intervention through intelligent prediction and optimization functions, thereby improving the ease of operation and management efficiency. BRIEF DESCRIPTION OF THE DRAWINGS
[0022] Figure 1 A flowchart of a method for using a network information security maintenance and management device according to the present invention; Figure 2 The present invention is a system block diagram of a network information security maintenance and management device. DETAILED DESCRIPTION
[0023] See also Figure 1-2 , the present invention provides a technical solution: A network information security maintenance and management device and a method for using the same, comprising the following steps: Step 1: User role definition and permission template initialization: Setting user roles according to user name, age, and behavior preference, including children, adults, and visitors; configuring an initial permission template for each role, including basic rules such as access time period, allowed resource types, and bandwidth restrictions; user role weight Determined by role mapping, the default values are:
[0024] Step 2: Dynamic permission scoring model calculation: Build a user dynamic permission scoring model ; Step 3: Dynamically adjust permissions: set permission score thresholds , dynamically adjust user permissions based on the following criteria:
[0025] When user access rights are restricted, the system automatically notifies the administrator and provides adjustment suggestions; Step 4: Permission prediction and optimization: The system records user behavior logs and predicts future permission scores, which is achieved through the following formula:
[0026] In the formula, Score the rate of change of permissions, is the adjustment factor; Adjust permission configuration in advance based on prediction results to achieve dynamic optimization allocation of network resources; Analyze historical data through machine learning algorithms to optimize scoring model weights and thresholds ; Step 5: Data security and privacy protection: All permission scoring and behavior analysis calculations are completed locally to prevent data leakage; use differential privacy algorithms to protect sensitive data. The formula is:
[0027] In the formula, is random noise, used to protect privacy; Regularly clean up historical log data to reduce security risks and improve data processing efficiency. By defining personalized permission templates for different user roles (such as children, adults, and visitors), flexibility and accuracy of access control and resource allocation in the home network are ensured. By analyzing the user's behavioral preferences and age, the network access policy can be automatically adjusted according to different needs, thereby effectively preventing improper access and optimizing network resource allocation, improving the security of the home network and user experience.
[0028] As a technical solution for further implementation of this solution, the user dynamic authority scoring model The calculation formula is:
[0029] In the formula, is the user role weight, The weight of the device type, combined with the device credibility score It is calculated that The time period weight is dynamically adjusted according to the preset schedule. Score user behavior, , , and The weight coefficient is adjusted according to historical data or administrator configuration. The calculation formula of the user dynamic permission scoring model combines the user role weight, device type weight, time period weight and behavior score, making network access control more accurate and personalized. By adjusting the weight of the scoring model, network resource allocation can be optimized according to different environments and user needs, thereby improving network security and resource utilization efficiency. As a technical solution for further implementation of this solution, the device type weight is combined with the device credibility score The calculation formula is:
[0030] In the formula, The index of the device feature, indicating the Features, is the total number of device features, indicating the number of features used to calculate the credibility, For the The weight of a feature indicates the relative importance of the feature to the device credibility. The weight value is obtained through historical data training and satisfies , For the The value of a feature indicates the credibility of the feature, and its value range is [0, 1]. Indicates that the feature is completely credible. Indicates that the feature is untrustworthy. By combining the device credibility score to calculate the device type weight, the device access permission can be dynamically adjusted according to the device security assessment, thereby effectively preventing unsafe devices from accessing the home network, ensuring the security of the home network, reducing the potential threats of untrustworthy devices, and improving the intelligent level of device management; As a technical solution for further implementation of this plan, user behavior scoring , calculated through resource access category and security assessment, the calculation formula is:
[0031] In the formula, is the resource type weight, To provide corresponding resource security scores, the user behavior score is calculated, combined with resource access categories and security assessments, to accurately assess the impact of user behavior on the security of network resources, helping to promptly detect potential malicious behavior and restrict access to sensitive resources, thereby enhancing the overall security of the home network and preventing improper use of network resources; As a technical solution for further implementation of this solution, the user role management module supports automatic updating of user permission templates and dynamically adjusts role weights and permission settings based on behavior logs. The user role management module can continuously optimize role definitions and permission configurations based on user behavior logs by automatically updating permission templates and dynamically adjusting role weights, thereby improving the flexibility of home network management, ensuring that the needs of different members can be responded to at any time, and optimizing permission allocation; As a technical solution for further implementation of this solution, the dynamic permission adjustment module is equipped with a threshold judgment rule. When the user's permission score is lower than the preset threshold, the system automatically restricts network access and sends an administrator notification. The dynamic permission adjustment module is combined with the threshold judgment rule. When the user's permission score is lower than the preset value, the system can automatically restrict network access and notify the administrator. The adaptive adjustment mechanism effectively prevents unauthorized access, reduces potential security threats, and can promptly remind the administrator to intervene in the network status; As a technical solution for further implementation of this solution, the network interface module supports a multi-network isolation function, which allocates different virtual network channels to children, adults and visitors respectively to ensure network security. The network interface module supports a multi-network isolation function, so that different users in the family (such as children, adults and visitors) can be connected to different virtual network channels respectively, thereby ensuring the network security of each user, effectively avoiding mutual interference, and ensuring that the network activities of visitors and family members are properly managed; As a technical solution for further implementation of this solution, the display and interaction module has a behavior graphical analysis function, which is used to intuitively display the change trend and prediction results of user authority scores. The storage module stores user behavior logs through an encryption mechanism and regularly cleans up expired data. The display and interaction module uses the behavior graphical analysis function to display the change trend and prediction results of user authority scores in an intuitive manner. Administrators can quickly understand the user's authority status and network security through a graphical interface, so as to make timely and effective adjustments. In addition, the encryption mechanism of the storage module enhances data protection, improves data processing efficiency and reduces potential security risks. As a technical solution for further implementation of this solution, the user role management module supports identity authentication through biometrics, multi-factor authentication and device fingerprints. The user role management module performs identity authentication through biometrics, multi-factor authentication and device fingerprints, which can ensure that the identity of each user is accurately confirmed and avoid identity forgery and illegal access. This function effectively improves the security of the network, especially in a home environment, and can flexibly cope with complex situations of multiple users and multiple devices; The technical solutions for further implementation of this plan include: User role management module, used to classify user roles according to user identity information and behavior characteristics, and initialize corresponding permission templates; The permission scoring module is used to calculate the user permission score, including the user role weight, device credibility weight, time period weight and behavior score; A dynamic permission adjustment module is used to adjust the user's network access rights in real time based on the comparison result between the user's permission score and the preset threshold; Prediction and optimization module, which is used to record user behavior data and adjust future network resource allocation through prediction models; Data privacy protection module, used to protect user data through differential privacy algorithm; Storage module, used to store user permission templates, behavior data and log records; Network interface module, supporting Wi-Fi, Ethernet and smart home protocol connections, realizing multi-network isolation and permission allocation; The display and interaction module is used to display the current network status and user authority information, and supports administrator authority adjustment. The device realizes network information security maintenance and management based on user roles through a dynamic authority scoring model combined with device credibility, behavior analysis and differential privacy protection mechanism. The device can provide a comprehensive security protection mechanism by comprehensively adopting dynamic authority scoring model, device credibility assessment, user behavior analysis and differential privacy protection technology. Through intelligent prediction and optimization modules, the system can dynamically adjust network resource configuration according to user behavior and authority changes, and effectively prevent bad content and malicious attacks to ensure the security and privacy of the home network. In addition, the multi-network isolation function of the device and the interactive design of the administrator interface provide family members with efficient and flexible network management methods, further improving the convenience and security of network use.
[0032] This article uses specific examples to illustrate the principles and implementation methods of the present invention. The above examples are only used to help understand the method and core ideas of the present invention. The above is only a preferred implementation of the present invention. It should be pointed out that due to the limitations of textual expression and the objective existence of infinite specific structures, ordinary technicians in this technical field can make several improvements, modifications or changes without departing from the principles of the present invention, and can also combine the above technical features in an appropriate manner; these improvements, modifications, changes or combinations, or the direct application of the inventive concept and technical solution to other occasions without improvement, should be regarded as the protection scope of the present invention.
Claims
1. A method for using a network information security maintenance and management device, characterized in that: The following steps are involved: Step 1: User role definition and permission template initialization: Set user roles based on user name, age, and behavior preferences. The roles include children, adults, and visitors. Configure an initial permission template for each role. The permission template includes basic rules such as access time period, allowed resource types, bandwidth restrictions, etc.; user role weight Determined by role mapping, the default values are: ； Step 2: Dynamic permission scoring model calculation: Build a user dynamic permission scoring model ; Step 3: Dynamically adjust permissions: set permission score thresholds , dynamically adjust user permissions based on the following criteria: ； When user access rights are restricted, the system automatically notifies the administrator and provides adjustment suggestions; Step 4: Permission prediction and optimization: The system records user behavior logs and predicts future permission scores, which is achieved through the following formula: ； In the formula, Score the rate of change of permissions, is the adjustment factor; Adjust permission configuration in advance based on prediction results to achieve dynamic optimization allocation of network resources; Analyze historical data through machine learning algorithms to optimize scoring model weights and thresholds ; Step 5: Data security and privacy protection: All permission scoring and behavior analysis calculations are completed locally to prevent data leakage; use differential privacy algorithms to protect sensitive data. The formula is: ； In the formula, is random noise, used to protect privacy; Regularly clean up historical log data to reduce security risks and improve data processing efficiency.
2. The method for using a network information security maintenance and management device according to claim 1, characterized in that: The user dynamic authority scoring model The calculation formula is: ； In the formula, is the user role weight, The weight of the device type, combined with the device credibility score It is calculated that The time period weight is dynamically adjusted according to the preset schedule. Score user behavior, , , and It is the weight coefficient, which is adjusted according to historical data or administrator configuration.
3. The method for using the network information security maintenance and management device according to claim 2, characterized in that: The device type weight is combined with the device credibility score The calculation formula is: ； In the formula, The index of the device feature, indicating the Features, is the total number of device features, indicating the number of features used to calculate the credibility, For the The weight of a feature indicates the relative importance of the feature to the device credibility. The weight value is obtained through historical data training and satisfies , For the The value of a feature indicates the credibility of the feature, and its value range is [0, 1]. Indicates that the feature is completely credible. Indicates that the feature is not credible.
4. The method for using a network information security maintenance and management device according to claim 1, characterized in that: User behavior score , calculated through resource access category and security assessment, the calculation formula is: ； In the formula, is the resource type weight, Provide a security score for the corresponding resource.
5. The method for using a network information security maintenance and management device according to claim 1, characterized in that: The user role management module supports automatic updating of user permission templates and dynamically adjusts role weights and permission settings based on behavior logs.
6. The method for using a network information security maintenance and management device according to claim 1, characterized in that: The dynamic permission adjustment module is provided with a threshold determination rule. When the user permission score is lower than the preset threshold, the system automatically restricts network access and sends an administrator notification.
7. The method for using a network information security maintenance and management device according to claim 1, characterized in that: The network interface module supports a multi-network isolation function, and allocates different virtual network channels to children, adults and visitors to ensure network security.
8. The method for using a network information security maintenance and management device according to claim 1, characterized in that: The display and interaction module has a behavior graphical analysis function, which is used to intuitively display the user authority score change trend and prediction results. The storage module stores user behavior logs through an encryption mechanism and regularly cleans up expired data.
9. The method for using a network information security maintenance and management device according to claim 1, characterized in that: The user role management module supports identity authentication through biometrics, multi-factor authentication and device fingerprint.
10. A network information security maintenance management method according to any one of claims 1 to 9, characterized in that: include: User role management module, used to classify user roles according to user identity information and behavior characteristics, and initialize corresponding permission templates; The permission scoring module is used to calculate the user permission score, including the user role weight, device credibility weight, time period weight and behavior score; A dynamic permission adjustment module is used to adjust the user's network access rights in real time based on the comparison result between the user's permission score and the preset threshold; Prediction and optimization module, which is used to record user behavior data and adjust future network resource allocation through prediction models; Data privacy protection module, used to protect user data through differential privacy algorithm; Storage module, used to store user permission templates, behavior data and log records; Network interface module, supporting Wi-Fi, Ethernet and smart home protocol connections, realizing multi-network isolation and permission allocation; The display and interaction module is used to display the current network status and user authority information, and supports administrator authority adjustment. The device realizes network information security maintenance and management based on user roles through a dynamic authority scoring model combined with device credibility, behavior analysis and differential privacy protection mechanism.