Switch security communication method based on artificial intelligence big data

Abstract

The invention discloses a switch secure communication method based on artificial intelligence big data, and relates to the technical field of artificial intelligence big data. Obtaining a multi-source data packet based on the big data switch, obtaining flow data corresponding to the multi-source data packet, and generating a source address table data packet according to the flow data; setting a barrier encryption mechanism for performing barrier encryption on the source address table to obtain a source address information abstract library; obtaining a target address, setting an automatic verification mechanism according to the source address information abstract library, verifying the target address based on the automatic verification mechanism, and obtaining a target forwarding port; setting a port data network, obtaining a port abnormal value corresponding to each port of the port data network according to the source flow data, and obtaining a target forwarding port evaluation value corresponding to the target forwarding port according to the port abnormal value; setting an automatic response mechanism according to the target forwarding port evaluation value, and performing safety response on the data packet according to the automatic response mechanism; according to the invention, the communication security of the switch is improved.

Description

Technical Field

[0001] The present invention relates to the field of artificial intelligence big data technology, and in particular to a switch security communication method based on artificial intelligence big data. Background Art

[0002] Artificial intelligence refers to the ability to simulate human intelligence using computers and machines, and big data refers to a collection of data that is huge in scale, diverse in variety, and fast in processing speed. Big data provides a large amount of data support for artificial intelligence, enabling artificial intelligence systems to analyze and predict more accurately.

[0003] Switches are basic devices that constitute a network. They are mainly used to connect multiple devices in the network and forward data packets to the correct destination based on the MAC address. However, in the prior art, switches are still facing some network security threats. For example, during the communication process, the switch source will first obtain the source address database. When the capacity of the source address database is expanded, the security of the source address database cannot be guaranteed, which in turn causes the attacker to store the attack address in the source address database. As a result, when the switch matches the target address in the source address database, it will match the attack address, and then send the data packet to the device port corresponding to the attack address, resulting in data packet loss. Therefore, a switch security communication method based on artificial intelligence big data is provided. Summary of the invention

[0004] In order to solve the above technical problems, the present invention provides a switch security communication method based on artificial intelligence big data;

[0005] The purpose of the present invention can be achieved by the following technical solution: a switch security communication method based on artificial intelligence big data, the method comprising the following steps:

[0006] Step S1: Based on the big data switch, a multi-source data packet is obtained, and flow data corresponding to the multi-source data packet is obtained, source address data and source flow data are obtained according to the flow data, and mapping is performed to generate a source address table data packet;

[0007] Step S2: setting a barrier encryption mechanism, barrier encrypting the source address table based on the barrier encryption mechanism, and obtaining a source address information summary library;

[0008] Step S3: Obtain the target address, and set an automatic verification mechanism according to the source address information summary library, verify the target address based on the automatic verification mechanism, and obtain the target forwarding port;

[0009] Step S4: setting a port data network, obtaining port abnormality values ​​corresponding to each port of the port data network according to the source traffic data, and obtaining a target forwarding port evaluation value corresponding to the target forwarding port according to the port abnormality values;

[0010] Step S5: setting an automatic response mechanism according to the target forwarding port evaluation value, and performing a security response to the data packet according to the automatic response mechanism.

[0011] Furthermore, the process of generating the source traffic data packet includes:

[0012] The source address data includes source IP address, source MAC address and device port; the source traffic data includes data packet size, data packet frequency and data packet time;

[0013] Obtain several user devices connected to the switch, and connect the source IP address, source MAC address and device port in the source address data corresponding to the user device in sequence, obtain the corresponding source address table, and connect it with the corresponding source traffic data to generate a source address table data packet.

[0014] Furthermore, the setting process of the automatic verification mechanism includes:

[0015] Extract the source address data in the source address table data packet, and map the corresponding source IP address, source MAC address and device port in pairs to obtain a triangle address mapping relationship, and then encrypt the source address data in the triangle address mapping relationship to generate the corresponding encrypted source address data, obtain the source address information summary corresponding to the user device according to the corresponding encrypted source address data, and generate the source address information summary library corresponding to the user device;

[0016] Replace the source address data in the source address table data packet with the source address information summary, and lock the corresponding source address data to generate the corresponding source address data lock, and then generate the source address data lock library corresponding to the user device, obtain the private key corresponding to the source address data lock, recorded as source address data lock-private key, and map it with the encrypted source address data corresponding to the device port to obtain the source address data private key library, and then obtain the barrier encryption mechanism;

[0017] The process of generating the encrypted source address data includes:

[0018] Convert the source IP address and source MAC address into decimal at the same time, and number the addresses starting from the rightmost of the decimal, denoted as i IP and i MAC , where i=1, 2, 3, ..., n, and n is a positive integer; the address code of the address number corresponding to the source IP address is set cyclically based on the 26 uppercase letters in sequence, and similarly, the address code of the address number corresponding to the source MAC address is set cyclically based on the 26 lowercase letters in sequence, and then the encrypted source address data corresponding to the source IP address and the source MAC address are obtained according to the address number and the address code;

[0019] That is, the specific formula is:

[0020]

[0021] Among them, D IP and D MAC It is represented as the encrypted source address data corresponding to the source IP address and the source MAC address; and Represented as source IP address and source MAC address, the corresponding address number is i IP and i MAC The data value of; μ and θ represent the source IP address and source MAC address respectively, and the corresponding address number is i IP and i MAC If i≤26, μ and θ index 26 uppercase letters and lowercase letters respectively to get i IP and i MAC The corresponding address codes μ and θ; if i>26, then obtain (i IP mod 26) and (i MAC mod 26), and then use the remainder to index the 26 uppercase letters and lowercase letters to get i IP and i MAC The corresponding address codes are μ and θ; “.” indicates the split point;

[0022] The encrypted source address data corresponding to the device port is recorded as #d 设备 , where d 设备 The value is a positive integer greater than 0.

[0023] Furthermore, the setting process of the automatic verification mechanism includes:

[0024] The target address includes a target IP address and a target MAC address. The target IP address and the target MAC address are used to obtain corresponding encrypted target address data based on a barrier encryption mechanism, and a connection is performed to generate a target address information summary. The target address information summary is matched with a source address information summary library to obtain a target forwarding port, thereby generating an automatic verification mechanism.

[0025] Furthermore, the process of acquiring the target forwarding port includes:

[0026] If all the source address information summaries are matched successfully, the encrypted source address data corresponding to the device port is obtained based on the triangle address mapping relationship and sent to the source address data private key library for matching. If the match is successful, the corresponding source address data lock-private key is obtained, and the source address data lock is unlocked to obtain the device port corresponding to the target MAC address and record it as the target forwarding port; otherwise, the encrypted source address data corresponding to the device port is marked as an abnormal device port;

[0027] Otherwise, the target IP address is obtained, and several verification target MAC addresses mapped to the target IP address are obtained based on big data, and then the target MAC address is matched with several verification target MAC addresses. If the match is successful, the corresponding verification target MAC address is extracted and connected with the target IP address to generate verification target address data; the remaining verification target MAC addresses are marked as abnormal verification MAC addresses; if the match is unsuccessful, several verification target MAC addresses are marked as abnormal verification MAC addresses, and the verification target MAC is re-obtained and matched. If the match is unsuccessful for three consecutive times, the corresponding target IP address is marked as an abnormal target IP address;

[0028] According to the verification target address data, the corresponding verification target device port is obtained, and the verification target address data is mapped to obtain the verification target address data lock, and sent to the source address data lock library for storage, and then the private key corresponding to the verification target address data lock is obtained, which is recorded as the verification target address data lock-private key;

[0029] Based on the barrier encryption mechanism, the verification target address data lock generates a verification target address information summary and sends it to the source address information summary database for storage; and the verification target address data lock-private key and the encrypted source address data corresponding to the verification target device port are connected and sent to the source address data private key library for storage, and then the verification target device port generates a target forwarding port.

[0030] Furthermore, the process of obtaining the port abnormal value includes:

[0031] Connect the user port in the source address data lock library and the verification target device port to obtain the port data network, obtain a number of source flow data corresponding to each port of the port data network, and then obtain the port anomaly value corresponding to each port according to the meta-flow data;

[0032] That is, the specific formula is:

[0033]

[0034] Wherein, φ represents the port abnormal value corresponding to each port; ρ represents the number of source flow data corresponding to each port, where ρ = 1, 2, 3, ..., λ, and λ is a positive integer greater than or equal to 1; Q t It is expressed as the weight corresponding to the packet time t; W t It is expressed as the size of the data packet corresponding to the data packet time t; f t It is expressed as the packet frequency corresponding to the packet time t; σ t It is expressed as the anomaly factor corresponding to the packet time t; where Q t , W tand f t The value is a natural number greater than 0.

[0035] Furthermore, the process of obtaining the target forwarding port evaluation value includes:

[0036] Set the port outlier threshold range [φ1, φ2], and obtain the target forwarding port evaluation value corresponding to the target forwarding port according to the port outlier interception range;

[0037] When φ<φ1, the corresponding target forwarding port evaluation value is marked as 90%, and the corresponding target forwarding port is marked as a safe target forwarding port;

[0038] When φ∈[φ1, φ2], the corresponding target forwarding port evaluation value is marked as 60%, and the corresponding target forwarding port is marked as a target forwarding port to be verified;

[0039] When φ>φ2, the corresponding target forwarding port evaluation value is marked as 20%, and the corresponding target forwarding port is marked as an interception target forwarding port.

[0040] Furthermore, the security response process includes:

[0041] The security target forwarding port, the target forwarding port to be verified and the interception target forwarding port generate an automatic forwarding signal, a signal to be verified and an interception signal respectively, and connect them with the corresponding target forwarding port evaluation value to generate an automatic response mechanism;

[0042] Receiving corresponding signals based on the automatic response mechanism;

[0043] If an automatic forwarding signal is received, the data packet is securely forwarded to the corresponding secure target forwarding port;

[0044] If a signal to be verified is received, the data packet is first intercepted, and several source flow data corresponding to the target forwarding port to be verified are obtained again, and then the corresponding target forwarding port evaluation value is obtained again, and the corresponding signal is obtained according to the target forwarding port evaluation value. If it is an automatic forwarding signal, the data packet is safely forwarded to the corresponding target forwarding port to be verified, otherwise, the data packet is intercepted;

[0045] If an interception signal is received, the data packet is intercepted at the corresponding interception target forwarding port. Compared with the prior art, the beneficial effects of the present invention are:

[0046] 1. Lock the source address data to obtain the source address data lock, obtain the source address data private key library, and then obtain the source address information summary library based on the barrier encryption mechanism. Obtain the corresponding target address information summary based on the barrier encryption mechanism and match it with the source address information summary library to obtain a fully matched source address information summary library, and then verify the device port to obtain the target forwarding port, obtain the corresponding target IP address that is not fully matched, and obtain the verification target address data and the corresponding verification target address data lock, and send them to the source address data lock library; this process improves the security of the source address database while increasing the capacity of the switch source address database;

[0047] 2. Set up a port data network, obtain the port abnormality value corresponding to each port of the port data network according to the source traffic data, and obtain the target forwarding port evaluation value corresponding to the target forwarding port according to the port abnormality value; set up an automatic response mechanism according to the target forwarding port evaluation value, and respond securely to the data packet according to the automatic response mechanism, thereby improving the communication security of the switch. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0049] Figure 1 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0050] To make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be described in detail below. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other implementation methods obtained by ordinary technicians in this field without creative work belong to the scope of protection of the present invention.

[0051] Embodiment 1,

[0052] like Figure 1 As shown, a switch security communication method based on artificial intelligence big data, the method comprises the following steps:

[0053] Step S1: obtaining a multi-source data packet based on a big data switch, and obtaining flow data corresponding to the multi-source data packet, obtaining a source address table and source flow data according to the flow data, and performing mapping to generate a source address table data packet;

[0054] Step S2: setting a barrier encryption mechanism, barrier encrypting the source address table based on the barrier encryption mechanism, and obtaining a source address information summary library;

[0055] Step S3: Obtain the target address, and set an automatic verification mechanism according to the source address information summary library, verify the target address based on the automatic verification mechanism, and obtain the target forwarding port;

[0056] Step S4: setting a port data network, obtaining port abnormality values ​​corresponding to each port of the port data network according to the source traffic data, and obtaining a target forwarding port evaluation value corresponding to the target forwarding port according to the port abnormality values;

[0057] Step S5: setting an automatic response mechanism according to the target forwarding port evaluation value, and performing a security response to the data packet according to the automatic response mechanism.

[0058] Embodiment 2,

[0059] This embodiment is a further limitation of Embodiment 1, and Step S1 is implemented by the following process:

[0060] The process of generating the source traffic data packet includes:

[0061] The flow data includes source address data and source flow data; the source address data includes source IP address, source MAC address and device port; the source flow data includes data packet size, data packet frequency and data packet time;

[0062] Obtain several user devices connected to the switch, and connect the source IP address, source MAC address and device port in the source address data corresponding to the user device in sequence, obtain the corresponding source address table, and connect it with the corresponding source traffic data to generate a source address table data packet.

[0063] Embodiment 3,

[0064] This embodiment is a further limitation of Embodiment 1, and Step S2 is implemented by the following process:

[0065] The setting process of the barrier encryption mechanism includes:

[0066] Extract the source address data in the source address table data packet, and map the corresponding source IP address, source MAC address and device port to each other to obtain a triangle address mapping relationship, and then encrypt the source address data in the triangle address mapping relationship to generate the corresponding encrypted source address data, obtain the source address information summary corresponding to the user device according to the corresponding encrypted source address data, and merge them to generate a source address information summary library;

[0067] It should be further explained that, in the specific implementation process, the triangle address mapping relationship includes source IP address-source MAC address, source IP address-device port and source MAC address-device port;

[0068] Replace the source address data in the source address table data packet with the source address information summary, and lock the corresponding source address data to generate the corresponding source address data lock, and merge them to generate a source address data lock library, obtain the private key corresponding to the source address data lock, record it as source address data lock-private key, and map it with the device port to obtain the source address data private key library;

[0069] The process of generating the encrypted source address data includes:

[0070] Convert the source IP address and source MAC address into decimal at the same time, and number the addresses starting from the rightmost of the decimal, denoted as i IP and i MAC , where i=1, 2, 3, ..., n, and n is a positive integer; the address code of the address number corresponding to the source IP address is set cyclically based on the 26 uppercase letters in sequence, and similarly, the address code of the address number corresponding to the source MAC address is set cyclically based on the 26 lowercase letters in sequence, and then the encrypted source address data corresponding to the source IP address and the source MAC address are obtained according to the address number and the address code;

[0071] That is, the specific formula is:

[0072]

[0073] Among them, D IP and D MAC It is represented as the encrypted source address data corresponding to the source IP address and the source MAC address; and Represented as source IP address and source MAC address, the corresponding address number is i IP and i MAC The data value of; μ and θ represent the source IP address and source MAC address respectively, and the corresponding address number is i IP and i MAC If i≤26, μ and θ index 26 uppercase letters and lowercase letters respectively to get i IP and i MAC The corresponding address codes μ and θ; if i>26, then obtain (i IP mod 26) and (i MAC mod 26), and then use the remainder to index the 26 uppercase letters and lowercase letters to get i IP and i MAC The corresponding address codes are μ and θ; “.” indicates the split point;

[0074] The encrypted source address data corresponding to the device port is recorded as #d 设备 , where d 设备 The value is a positive integer greater than 0.

[0075] In the above embodiment, it needs to be further explained that the purpose of barrier encrypting the source address table is to prevent attackers from attacking the source address and changing the source address table, thereby preventing the source address from changing and causing the data packet to be forwarded to the attacker's port.

[0076] Embodiment 4,

[0077] This embodiment is a further limitation of Embodiment 1, and step S3 is implemented by the following process:

[0078] The process of setting up the automatic verification mechanism includes:

[0079] The target address includes a target IP address and a target MAC address, and the target IP address and the target MAC address are used to obtain corresponding encrypted target address data based on a barrier encryption mechanism, and are connected to generate a target address information summary;

[0080] Match the target address information summary with the source address information summary library to obtain an automatic verification mechanism;

[0081] The process of obtaining the target forwarding port includes:

[0082] If all the source address information summaries are matched successfully, the encrypted source address data corresponding to the device port is obtained based on the triangle address mapping relationship and sent to the source address data private key library for matching. If the match is successful, the corresponding source address data lock-private key is obtained, and the source address data lock is unlocked to obtain the device port corresponding to the target MAC address and record it as the target forwarding port; otherwise, the encrypted source address data corresponding to the device port is marked as an abnormal device port;

[0083] Otherwise, the target IP address is obtained, and several verification target MAC addresses mapped to the target IP address are obtained based on big data, and then the target MAC address is matched with several verification target MAC addresses. If the match is successful, the corresponding verification target MAC address is extracted and connected with the target IP address to generate verification target address data; the remaining verification target MAC addresses are marked as abnormal verification MAC addresses; if the match is unsuccessful, several verification target MAC addresses are marked as abnormal verification MAC addresses, and the verification target MAC is re-obtained and matched. If the match is unsuccessful for three consecutive times, the corresponding target IP address is marked as an abnormal target IP address;

[0084] According to the verification target address data, the corresponding verification target device port is obtained, and the verification target address data is mapped to obtain the verification target address data lock, and sent to the source address data lock library for storage, and then the private key corresponding to the verification target address data lock is obtained, which is recorded as the verification target address data lock-private key;

[0085] Based on the barrier encryption mechanism, the verification target address data lock generates a verification target address information summary and sends it to the source address information summary database for storage; and the verification target address data lock-private key and the encrypted source address data corresponding to the verification target device port are connected and sent to the source address data private key library for storage, and then the verification target device port generates a target forwarding port.

[0086] In the above embodiment, it is further explained that the source address data is locked to obtain a source address data lock, a source address data private key library is obtained, and then a source address information summary library is obtained based on a barrier encryption mechanism, and the target address is obtained based on the barrier encryption mechanism. The corresponding target address information summary is obtained and matched with the source address information summary library to obtain a fully matched source address information summary library, and then the device port is verified to obtain the target forwarding port, the corresponding target IP address that is not fully matched is obtained, and the verification target address data and the corresponding verification target address data lock are obtained, and sent to the source address data lock library, so as to improve the accuracy of the source address data in the source address data lock library and the accuracy of the target address retrieval, and prevent the attack address from entering; it is further explained that an authorization library is added to the source address data lock library, and the authorization library is used to add authorized contacts, and a source address data mapping relationship is added to the source address data lock library according to the authorization library;

[0087] Embodiment 5,

[0088] This embodiment is a further limitation of Embodiment 1, and step S4 is implemented by the following process:

[0089] The process of obtaining the port abnormal value includes:

[0090] Connect the user port in the source address data lock library and the verification target device port to obtain the port data network, obtain a number of source flow data corresponding to each port of the port data network, and then obtain the port anomaly value corresponding to each port according to the meta-flow data;

[0091] That is, the specific formula is:

[0092]

[0093] Wherein, φ represents the port abnormal value corresponding to each port; ρ represents the number of source flow data corresponding to each port, where ρ = 1, 2, 3, ..., λ, and λ is a positive integer greater than or equal to 1; Qt It is expressed as the weight corresponding to the packet time t; W t It is expressed as the size of the data packet corresponding to the data packet time t; f t It is expressed as the packet frequency corresponding to the packet time t; σ t It is expressed as the anomaly factor corresponding to the packet time t; where Q t , W t and f t All values ​​are natural numbers greater than 0;

[0094] The process of obtaining the target forwarding port evaluation value includes:

[0095] Set the port outlier threshold range [φ1, φ2], and obtain the target forwarding port evaluation value corresponding to the target forwarding port according to the port outlier interception range;

[0096] When φ<φ1, the corresponding target forwarding port evaluation value is marked as 90%, and the corresponding target forwarding port is marked as a safe target forwarding port;

[0097] When φ∈[φ1, φ2], the corresponding target forwarding port evaluation value is marked as 60%, and the corresponding target forwarding port is marked as a target forwarding port to be verified;

[0098] When φ>φ2, the corresponding target forwarding port evaluation value is marked as 20%, and the corresponding target forwarding port is marked as an interception target forwarding port;

[0099] In the above embodiment, it is further explained that, similarly, the port abnormality value corresponding to the abnormal device port is obtained, and compared with the port abnormality value interception range, to obtain the safe target forwarding port, the target forwarding port to be verified and the interception target forwarding port;

[0100] Embodiment 6,

[0101] This embodiment is a further limitation of Embodiment 1, and step S5 is implemented by the following process:

[0102] The security response process includes:

[0103] The security target forwarding port, the target forwarding port to be verified and the interception target forwarding port generate an automatic forwarding signal, a signal to be verified and an interception signal respectively, and connect them with the corresponding target forwarding port evaluation value to generate an automatic response mechanism;

[0104] Receiving corresponding signals based on the automatic response mechanism;

[0105] If an automatic forwarding signal is received, the data packet is securely forwarded to the corresponding secure target forwarding port;

[0106] If a signal to be verified is received, the data packet is first intercepted, and several source flow data corresponding to the target forwarding port to be verified are obtained again, and then the corresponding target forwarding port evaluation value is obtained again, and the corresponding signal is obtained according to the target forwarding port evaluation value. If it is an automatic forwarding signal, the data packet is safely forwarded to the corresponding target forwarding port to be verified, otherwise, the data packet is intercepted;

[0107] If an interception signal is received, the data packet is intercepted at the corresponding interception target forwarding port;

[0108] In the above embodiment, it needs to be further explained that the abnormal verification MAC address and the abnormal target IP address are used to generate corresponding historical MAC address database and historical IP address database; the target address is first matched with the historical MAC address database and the historical IP address database. If the match is successful, the target address is marked as an abnormal address. Otherwise, the security target forwarding port is judged to improve security communication.

[0109] In the above embodiment, it needs to be further explained that the abnormal verification MAC address and the abnormal target IP address are used to generate corresponding historical MAC address database and historical IP address database; the target address is first matched with the historical MAC address database and the historical IP address database. If the match is successful, the target address is marked as an abnormal address. Otherwise, the security target forwarding port is judged to improve security communication.

[0110] The features and exemplary embodiments of various aspects of the present application are described in detail above. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is further described in detail in combination with the drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application rather than to limit the present application. For those skilled in the art, the present application can be implemented without some of these specific details. The above description of the embodiments is merely to provide a better understanding of the present application by showing examples of the present application.

[0111] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A switch security communication method based on artificial intelligence big data, characterized in that: The method comprises the following steps: Step S1: Based on the big data switch, a multi-source data packet is obtained, and flow data corresponding to the multi-source data packet is obtained, source address data and source flow data are obtained according to the flow data, and mapping is performed to generate a source address table data packet; Step S2: setting a barrier encryption mechanism, barrier encrypting the source address table based on the barrier encryption mechanism, and obtaining a source address information summary library; Step S3: Obtain the target address, and set an automatic verification mechanism according to the source address information summary library, verify the target address based on the automatic verification mechanism, and obtain the target forwarding port; Step S4: setting a port data network, obtaining port abnormality values ​​corresponding to each port of the port data network according to the source traffic data, and obtaining a target forwarding port evaluation value corresponding to the target forwarding port according to the port abnormality values; Step S5: setting an automatic response mechanism according to the target forwarding port evaluation value, and performing a security response to the data packet according to the automatic response mechanism.

2. According to claim 1, a switch security communication method based on artificial intelligence big data is characterized in that: The generation process of the source address table data packet includes: The source address data includes source IP address, source MAC address and device port; the source traffic data includes data packet size, data packet frequency and data packet time; Obtain several user devices connected to the switch, and connect the source IP address, source MAC address and device port in the source address data corresponding to the user device in sequence, obtain the corresponding source address table, and connect it with the corresponding source traffic data to generate a source address table data packet.

3. A switch secure communication method based on artificial intelligence big data according to claim 2, characterized in that: The process of setting up the automatic verification mechanism includes: Extract the source address data in the source address table data packet, and map the corresponding source IP address, source MAC address and device port in pairs to obtain a triangle address mapping relationship, and then encrypt the source address data in the triangle address mapping relationship to generate the corresponding encrypted source address data, obtain the source address information summary corresponding to the user device according to the corresponding encrypted source address data, and generate the source address information summary library corresponding to the user device; The source address data in the source address table data packet is replaced with the source address information summary, and the corresponding source address data is locked to generate the corresponding source address data lock, and then the source address data lock library corresponding to the user device is generated, and the private key corresponding to the source address data lock is obtained, recorded as source address data lock-private key, and mapped with the encrypted source address data corresponding to the device port to obtain the source address data private key library, thereby obtaining a barrier encryption mechanism.

4. A switch secure communication method based on artificial intelligence big data according to claim 3, characterized in that: The process of setting up the automatic verification mechanism includes: The target address includes a target IP address and a target MAC address. The target IP address and the target MAC address are used to obtain corresponding encrypted target address data based on a barrier encryption mechanism, and a connection is performed to generate a target address information summary. The target address information summary is matched with a source address information summary library to obtain a target forwarding port, thereby generating an automatic verification mechanism.

5. A switch secure communication method based on artificial intelligence big data according to claim 4, characterized in that: The process of obtaining the target forwarding port includes: The target address information digest is matched with the source address information digest library based on the automatic verification mechanism: If the source address information digest matches the source address information digest in the source address information digest library, the encrypted source address data corresponding to the device port is obtained based on the triangle address mapping relationship and sent to the source address data private key library for matching. If the match is successful, the corresponding source address data lock-private key is obtained, and the source address data lock is unlocked to obtain the device port corresponding to the target MAC address and record it as the target forwarding port; otherwise, the encrypted source address data corresponding to the device port is marked as an abnormal device port; Otherwise, the target IP address is obtained, and several verification target MAC addresses mapped to the target IP address are obtained based on big data, and then the target MAC address is matched with several verification target MAC addresses. If the match is successful, the corresponding verification target MAC address is extracted and connected with the target IP address to generate verification target address data; the remaining verification target MAC addresses are marked as abnormal verification MAC addresses; if the match is unsuccessful, several verification target MAC addresses are marked as abnormal verification MAC addresses, and the verification target MAC is re-obtained and matched. If the match is unsuccessful for three consecutive times, the corresponding target IP address is marked as an abnormal target IP address; According to the verification target address data, the corresponding verification target device port is obtained, and the verification target address data is mapped to obtain the verification target address data lock, and sent to the source address data lock library for storage, and then the private key corresponding to the verification target address data lock is obtained, which is recorded as the verification target address data lock-private key; Based on the barrier encryption mechanism, the verification target address data lock generates a verification target address information summary and sends it to the source address information summary database for storage; and the verification target address data lock-private key and the encrypted source address data corresponding to the verification target device port are connected and sent to the source address data private key library for storage, and then the verification target device port generates a target forwarding port.

6. A switch secure communication method based on artificial intelligence big data according to claim 5, characterized in that: The process of obtaining the port abnormal value includes: Connect the user port in the source address data lock library and the verification target device port to obtain the port data network, obtain a number of source flow data corresponding to each port of the port data network, and then obtain the port anomaly value corresponding to each port according to the meta-flow data; That is, the specific formula is: Wherein, φ represents the port abnormal value corresponding to each port; ρ represents the number of source flow data corresponding to each port, where ρ = 1, 2, 3, ..., λ, and λ is a positive integer greater than or equal to 1; Q t It is expressed as the weight corresponding to the packet time t; W t It is expressed as the size of the data packet corresponding to the data packet time t; f t It is expressed as the packet frequency corresponding to the packet time t; σ t It is expressed as the anomaly factor corresponding to the packet time t; where Q t , W t and f t The value is a natural number greater than 0.

7. A switch secure communication method based on artificial intelligence big data according to claim 6, characterized in that: The process of obtaining the target forwarding port evaluation value includes: Set the port outlier threshold range [φ1, φ2], and obtain the target forwarding port evaluation value corresponding to the target forwarding port according to the port outlier interception range; When φ<φ1, the corresponding target forwarding port evaluation value is marked as 90%, and the corresponding target forwarding port is marked as a safe target forwarding port; When φ∈[φ1, φ2], the corresponding target forwarding port evaluation value is marked as 60%, and the corresponding target forwarding port is marked as a target forwarding port to be verified; When φ>φ2, the corresponding target forwarding port evaluation value is marked as 20%, and the corresponding target forwarding port is marked as an interception target forwarding port.

8. A switch secure communication method based on artificial intelligence big data according to claim 7, characterized in that: The security response process includes: The security target forwarding port, the target forwarding port to be verified and the interception target forwarding port generate an automatic forwarding signal, a signal to be verified and an interception signal respectively, and connect them with the corresponding target forwarding port evaluation value to generate an automatic response mechanism; Receiving corresponding signals based on the automatic response mechanism; If an automatic forwarding signal is received, the data packet is securely forwarded to the corresponding secure target forwarding port; If a signal to be verified is received, the data packet is first intercepted, and several source flow data corresponding to the target forwarding port to be verified are obtained again, and then the corresponding target forwarding port evaluation value is obtained again, and the corresponding signal is obtained according to the target forwarding port evaluation value. If it is an automatic forwarding signal, the data packet is safely forwarded to the corresponding target forwarding port to be verified, otherwise, the data packet is intercepted; If an interception signal is received, the data packet is intercepted at the corresponding interception target forwarding port.

Images