Network security intrusion detection and defense method and device

Abstract

The invention discloses a network security intrusion detection and defense method and device, and relates to the technical field of network security. Comprising a behavior layer detection defense process and an equipment layer detection defense process; the system further comprises a camera and a physical defense mechanism, the camera is provided with an infrared sensor, the physical defense mechanism comprises an execution piece and a connecting piece, the execution piece is driven by a micro motor to achieve autorotation, a shielding assembly and a perspective protection assembly are arranged in the execution piece in parallel, and the shielding assembly is used for executing a shielding mode and a clearing mode. The perspective protection assembly is used for executing a perspective protection mode. According to the invention, rapid switching of a shielding mode, a perspective protection mode and a clearing mode can be accurately realized, multi-scene defense requirements are met, in addition, an accidental injury prevention mode is provided, interference on legal operations such as equipment maintenance and daily cleaning is effectively avoided, and defensive performance and operation convenience are considered.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a network security intrusion detection and defense method and device. Background Art

[0002] The current network security environment is becoming increasingly complex. Monitoring equipment, as a key node for information collection and security protection, is facing multi-dimensional intrusion threats. The existing defense system has significant shortcomings: On a physical level, cameras are vulnerable to malicious human damage, including spraying the lens at close range or covering it with foreign objects to block image capture. Traditional equipment lacks a real-time response mechanism and is often only discovered passively after the destructive behavior occurs, and has no function to automatically clear obstructions.

[0003] At the network level, the risk of unauthorized access has made monitoring equipment a major disaster area for information leakage. Attackers can illegally obtain real-time monitoring data through unauthorized IP. Existing access control mostly relies on single password authentication, and the authority barrier is weak and extremely easy to crack. When a network intrusion occurs, the device lacks an immediate image protection mechanism, resulting in direct leakage of sensitive information. Summary of the Invention

[0004] The purpose of the present invention is to solve the problems raised in the background technology and to propose a network security intrusion detection and defense method and device.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions: A network security intrusion detection and defense method, based on a network security intrusion detection and defense device comprising a camera and a physical defense mechanism, includes a behavior layer detection and defense process and a device layer detection and defense process: Behavioral layer detection and defense process: S11: The camera captures human behavior characteristics in real time and identifies abnormal behavior. When it detects behavior approaching the camera, it immediately issues a warning signal and triggers the physical defense mechanism to execute perspective protection mode to prevent the camera from being maliciously sprayed; S12: After detecting that the human body is away from the camera, the physical defense mechanism releases the perspective protection mode; S13: If it is detected that the camera is blocked, the physical defense mechanism is triggered to execute a clearing mode to clear or remove the blocking object; S14: Upload abnormal behavior characteristics and the work records of physical defense agencies to the blockchain evidence storage node to form an unalterable behavior audit chain.

[0006] Device-layer detection and defense process: S21: Establish a network access whitelist to monitor in real time RTSP protocol calls initiated by unauthorized IP addresses, image extraction backdoors caused by firmware tampering, and direct video stream connections that bypass authentication mechanisms. S22: When an unauthorized access attempt is detected, the real-time image automatically switches to a fuzzy processing mode or provides a preset false image source. At the same time, the physical defense mechanism executes a shielding mode to block the camera and cut off the real-time image acquisition path; S23: Start the identity authentication mechanism and build an access permission barrier through fingerprint authentication and face recognition. Only authorized users can lift the physical defense mechanism to execute the masking mode and obtain real-time image access permission.

[0007] A network security intrusion detection and defense device, applied to the above-mentioned network security intrusion detection and defense method, comprises a camera and a physical defense mechanism, wherein the camera is provided with an infrared sensor, and the physical defense mechanism comprises an actuator and a connector, wherein the connector is fixedly mounted on the camera, the actuator is rotatably connected to the connector, and the actuator is driven by a micro motor to achieve self-rotation; A shielding component and a perspective protection component are arranged in parallel inside the actuator, the shielding component is composed of multiple first blades and multiple third blades, and the perspective protection component is composed of multiple second blades. The first blades and the third blades are made of non-transparent materials and are rotated inwardly through gear transmission to execute the shielding mode. The second blades are made of transparent materials and are rotated inwardly through gear transmission to execute the perspective protection mode. The third blades are rotated outwardly through gear transmission to execute the clearing mode.

[0008] As a further solution of the present invention: the actuator is composed of a top cover, a first connecting plate and a second connecting plate fixedly connected, and a through hole is provided in the center of each of the top cover, the first connecting plate and the second connecting plate for exposing the camera; The shielding assembly is installed in a first connecting disk, and a first gear ring is rotatably installed in the first connecting disk. A first driving gear is provided on the outer side of the first gear ring and is meshed with the first driving gear, and a plurality of first driven gears are provided on the inner side and are meshed with the first driving gear. The plurality of first driven gears are distributed in a circular array along the circumference of the first gear ring, and a first blade or a third blade is correspondingly installed on each first driven gear.

[0009] As a further solution of the present invention: the perspective protection component is installed in a second connecting disk, a second gear ring is rotatably installed in the second connecting disk, a second driving gear is provided on the outer side of the second gear ring that is meshed with it, and a plurality of second driven gears are provided on the inner side that are meshed with it, the plurality of second driven gears are distributed in a circular array along the circumference of the second gear ring, and a second blade is correspondingly installed on each second driven gear.

[0010] As a further solution of the present invention: the first driven gear is rotatably mounted on the first connecting disk, a limit member is provided at the rotation center of the first driven gear, the limit member is rotatably mounted on the first connecting disk, the first blade is fixedly connected to the limit member, and the rotation range of the first blade is 0° to 90° inward rotation.

[0011] As a further solution of the present invention, the limiting member is provided with a plurality of limiting grooves along the circumferential direction on the outer side wall facing the first driven gear, a limiting block is installed in each limiting groove, the limiting block is fixed in the limiting groove by a spring, the limiting block is magnetic, and an electromagnet is provided in each limiting groove, and the first driven gear is provided with a plurality of grooves cooperating with the limiting blocks at positions corresponding to the limiting blocks; When the electromagnet is not energized, the limit block is embedded in the slot. At this time, when the first driven gear rotates, the limit member rotates synchronously with the first driven gear; when the electromagnet is energized, magnetic attraction is generated to separate the limit block from the slot and retract it into the limit slot. At this time, when the first driven gear rotates, the limit member remains stationary.

[0012] As a further solution of the present invention: the third blade is fixedly mounted on the first driven gear, and the rotation range of the third blade is 0° to 90° inward rotation and 0° to 90° outward rotation.

[0013] As a further solution of the present invention: the second driven gear is rotatably mounted on the second connecting disk, the second blade is fixedly mounted on the second driven gear, and the rotation range of the second blade is 0° to 90° inward rotation.

[0014] As a further solution of the present invention: the second driven gear is rotatably mounted on the second connecting disk, a worm is provided in the connecting member, the worm is driven by a micro motor, and a worm face gear meshing with the worm is provided on the side of the second connecting disk facing the connecting member. The micro motor drives the worm to rotate, and the worm drives the actuator to rotate through the worm face gear.

[0015] As a further solution of the present invention: the physical defense mechanism also has an anti-accidental injury mode. When the identity authentication mechanism verifies the identity of the authorized user, the physical defense mechanism automatically activates the anti-accidental injury mode. At this time, the third blade of the physical defense mechanism is locked and cannot perform the outward rotation clearing mode action. Even if it is detected that the camera is blocked, the third blade remains locked until the authorized user releases the anti-accidental injury mode through secondary identity authentication.

[0016] Compared with the existing technology, the advantages of the present invention are: 1. At the physical level, by capturing human behavioral characteristics in real time, when someone approaches, the perspective protection mode is immediately triggered to block malicious spraying. After the person moves away, if the camera is detected to be blocked, the clearing mode is automatically activated to remove the blockage and achieve self-recovery. At the network level, unauthorized access behavior is monitored in real time. Once an anomaly is detected, the real-time image will automatically switch to blurred processing or a preset false image, and the masking mode will be triggered to cut off the collection path. The restoration of access rights must be through a dual identity authentication mechanism of fingerprint authentication and face recognition.

[0017] 2. The physical defense mechanism integrates three functional blades, which can accurately realize the rapid switching between shielding mode (blocking image acquisition), perspective protection mode (anti-spraying) and clearing mode (removing obstructions) through gear transmission, meeting the defense needs of multiple scenarios. In addition, it also has an anti-accidental injury mode to effectively avoid interference with legitimate operations such as equipment maintenance and daily cleaning, taking into account both defense performance and operational convenience. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 Schematic diagram of the overall structure of the camera and physical defense mechanism of the present invention; Figure 2 It is a structural diagram of the physical defense mechanism of the present invention; Figure 3 This is a schematic structural diagram of the physical defense mechanism of the present invention from another angle; Figure 4 This is a schematic structural diagram of the actuator and connector of the present invention; Figure 5 This is a schematic structural diagram of the actuator of the present invention from another angle; Figure 6 This is a schematic diagram of the split structure of the executive component and the connecting component of the present invention; Figure 7 This is a schematic diagram of the installation structure of the shielding assembly of the present invention; Figure 8 This is a schematic diagram of the installation structure of the perspective protection component of the present invention; Figure 9 Schematic diagram of the installation structure of the worm and worm face gear of the present invention; Figure 10 This is a schematic diagram of the installation structure of the third blade, the limiting member, and the first driven gear of the present invention; Figure 11 for Figure 10 Schematic diagram of the local enlarged structure at A in the middle; Figure 12 This is a schematic diagram of the disassembled structure of the third blade, the limiting member, and the first driven gear of the present invention; Figure 13 Schematic diagram of the structure of the limiting member of the present invention.

[0019] In the figure: 1. Camera; 2. Physical defense mechanism; 3. Actuator; 4. Connector; 5. Micromotor; 6. Shielding assembly; 7. Perspective protection assembly; 8. First blade; 9. Third blade; 10. Second blade; 12. Top cover; 13. First connecting disk; 14. Second connecting disk; 15. Through hole; 16. First gear ring; 17. First drive gear; 18. First driven gear; 19. Second gear ring; 20. Second drive gear; 21. Second driven gear; 22. Limiting member; 23. Limiting slot; 24. Limiting block; 25. Spring; 26. Electromagnet; 27. Slot; 28. Worm; 29. ​​Worm face gear. DETAILED DESCRIPTION

[0020] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0021] Reference Figures 1 to 13 A network security intrusion detection and defense device includes a camera 1 and a physical defense mechanism 2. A threaded hole is reserved on the outer wall of the camera 1. The connecting piece 4 adopts an annular sleeve structure, and its inner wall is provided with a thread matching the threaded hole of the camera 1. The connecting piece 4 and the camera 1 are fixedly installed through a threaded connection. At the same time, an infrared sensor is embedded in the front end of the camera 1 (the infrared sensor can also be set on the physical defense mechanism 2). The infrared sensor can capture the surrounding human activity signals in real time.

[0022] The physical defense mechanism 2 includes an actuator 3 and a connector 4. The actuator 3 is composed of a top cover 12, a first connecting plate 13 and a second connecting plate 14 fixedly connected. A through hole 15 is set in the center of the three to ensure that the lens of the camera 1 can be exposed from the through hole without affecting normal image acquisition. A worm 28 is provided in the connector 4, and one end of the worm 28 is connected to the output shaft of the micro motor 5. The micro motor 5 is fixedly installed inside the connector 4 through a bracket. A worm face gear 29 engaged with the worm 28 is provided on the side of the second connecting plate 14 facing the connector 4. When the micro motor 5 is started, the worm 28 rotates and drives the actuator 3 as a whole to rotate around the axis of the camera 1 through the worm face gear 29, thereby realizing the self-rotation function of the actuator 3.

[0023] Reference Figures 4 to 13A shielding component 6 and a perspective protection component 7 are arranged in parallel inside the actuator 3. The shielding component 6 is composed of multiple first blades 8 and multiple third blades 9. The perspective protection component 7 is composed of multiple second blades 10. The first blades 8 and the third blades 9 are made of non-transparent materials. The first blades 8 and the third blades 9 are rotated inwardly through gear transmission to block the through holes 15 to execute the shielding mode. The second blades 10 are made of transparent material and are rotated inwardly through gear transmission to block the through holes 15 to execute the perspective protection mode. The third blades 9 are rotated outwardly through gear transmission to execute the clearing mode. It should be noted that when the clearing mode is executed, the actuator 3 rotates at high speed as a whole.

[0024] The shielding assembly 6 is installed in the first connecting disk 13, and the first gear ring 16 is rotatably installed on the first connecting disk 13. The outer side of the first gear ring 16 is provided with a first driving gear 17 that is meshed with it. The first driving gear 17 is connected to the output shaft of the driving motor installed inside the first connecting disk 13. The inner side of the first gear ring 16 is provided with a plurality of first driven gears 18 that are meshed with it. The plurality of first driven gears 18 are distributed in a circular array along the circumference of the first gear ring 16, and each first driven gear 18 is rotatably installed on the first connecting disk 13.

[0025] A limit member 22 is provided at the rotation center of the first driven gear 18, and the limit member 22 is rotatably mounted on the first connecting plate 13. The first blade 8 is fixedly connected to the limit member 22, and its rotation range is 0° to 90° inward rotation. The third blade 9 is fixedly mounted on the first driven gear 18, and its rotation range is 0° to 90° inward rotation and 0° to 90° outward rotation.

[0026] A plurality of limiting grooves 23 are circumferentially provided on the outer wall of the limiting member 22 facing the first driven gear 18. A limiting block 24 is installed in each limiting groove 23. The limiting block 24 is fixed in the limiting groove 23 by a spring 25. The limiting block 24 is magnetic. An electromagnet 26 is provided in each limiting groove 23. The first driven gear 18 is provided with a plurality of slots 27 that cooperate with the limiting block 24 at positions corresponding to the limiting block 24.

[0027] When the electromagnet 26 is not energized, the limit block 24 is engaged in the slot 27. At this time, when the first driven gear 18 rotates, the limit member 22 rotates synchronously with the first driven gear 18, and the first blade 8 and the third blade 9 as a whole are rotated inwardly through gear transmission to execute the shielding mode; when the electromagnet 26 is energized, it generates magnetic attraction and the limit block 24 disengages from the slot 27 and retracts into the limit slot 23. At this time, when the first driven gear 18 rotates, the limit member 22 remains stationary (suitable for the clearing mode, ensuring that when the third blade 9 rotates outward, the first blade 8 does not rotate with the first driven gear 18). Since the third blade 9 and the first driven gear 18 are fixedly installed, the third blade 9 can always rotate with the first driven gear 18 to realize the outward rotation to execute the clearing mode.

[0028] The perspective protection component 7 is installed in the second connecting disk 14, and the second gear ring 19 is rotatably installed in the second connecting disk 14. A second driving gear 20 is provided on the outside of the second gear ring 19 and is meshed with the second driving gear 20. The second driving gear 20 is connected to the output shaft of another driving motor installed inside the second connecting disk 14. A plurality of second driven gears 21 are provided on the inside of the second gear ring 19 and are meshed with the second driven gears 21. The plurality of second driven gears 21 are distributed in an annular array along the circumference of the second gear ring 19. Each second driven gear 21 is rotatably installed on the second connecting disk 14 through a bearing. The second blade 10 is fixedly mounted on the second driven gear 21. The rotation range of the second blade 10 is 0° to 90° inward rotation. Figure 8 The state shown in FIG. 1 is when the rotation angle of the second blade 10 is 0°.

[0029] When a person approaches, all the second blades 10 rotate inward to 90° and switch to the perspective protection mode. Since the second blades 10 are made of transparent material, in the perspective protection mode, it does not hinder the camera 1 from continuing to shoot, but can also block the camera 1. If paint spraying occurs, it can protect the camera 1.

[0030] When the physical defense mechanism 2 is in the initial state, the first blade 8, the second blade 10 and the third blade 9 are all at the 0° position, and do not block the lens of the camera 1, and the camera 1 performs image acquisition normally.

[0031] It should be noted that the physical defense mechanism 2 also has an anti-accidental injury mode. When the identity authentication mechanism (fingerprint authentication and face recognition) verifies the identity of the authorized user, the physical defense mechanism 2 automatically activates the anti-accidental injury mode. At this time, the drive motor that controls the rotation of the first drive gear 17 is locked, making it unable to perform the outward rotation clearing mode action. Even if the camera is detected to be blocked, the third blade 9 remains locked until the authorized user releases the anti-accidental injury mode through secondary identity authentication.

[0032] A network security intrusion detection and defense method, based on the above network security intrusion detection and defense device, includes a behavior layer detection and defense process and a device layer detection and defense process: Behavioral layer detection and defense process: S11: When the infrared sensor of camera 1 detects someone approaching, it immediately transmits the signal to the main control module, and the main control module sends out an early warning signal. Specifically, the early warning information including the intrusion time, real-time screen screenshots, and location coordinates is pushed to the preset authorized user terminal (including the management platform, mobile client and duty terminal) through an encrypted communication link. The early warning form includes pop-up prompts, sound and light alarms and SMS notifications; at the same time, the physical defense mechanism 2 is controlled to execute the perspective protection mode. At this time, the second drive gear 20 rotates to drive the second gear ring 19 to rotate, and the second gear ring 19 drives multiple second driven gears 21 to rotate synchronously, so that the second blade 10 rotates inward to a 90° position, forming a transparent protective barrier to prevent the camera from being maliciously sprayed. S12: When the infrared sensor detects that the human body is away from the camera 1, the main control module controls the second blade 10 to rotate in the opposite direction to the 0° position, thereby releasing the perspective protection mode.

[0033] S13: At this time, if the camera 1 detects that it is blocked, the main control module triggers the physical defense mechanism 2 to execute the clearing mode, controls the electromagnet 26 to be energized, and the limit block 24 disengages the slot 27. Then the first drive gear 17 drives the first gear ring 16 to rotate, causing the first driven gear 18 to rotate outward. At the same time, the micro motor 5 drives the worm 28 to rotate at high speed, and drives the actuator 3 to rotate at high speed as a whole through the worm face gear 29. At this time, the limit member 22 remains stationary, and only the third blade 9 rotates outward with the first driven gear 18. With the cooperation of the high-speed rotation of the actuator 3, the rotation action is used to more efficiently clear or remove the obstruction. After the clearing is completed, the third blade 9 returns to the 0° position, the actuator 3 stops rotating at high speed, the electromagnet 26 is powered off, and the limit block 24 is reset.

[0034] S14: During the entire process, abnormal behavior characteristics and the work records of physical defense organization 2 will be uploaded to the blockchain evidence storage node in real time, forming an unalterable behavior audit chain.

[0035] Device-layer detection and defense process: S21: Establish a network access whitelist to monitor in real time RTSP protocol calls initiated by unauthorized IP addresses, image extraction backdoors caused by firmware tampering, and direct video stream connections that bypass authentication mechanisms. S22: When an unauthorized access attempt is detected, the real-time image automatically switches to a fuzzy processing mode or provides a preset false image source. At the same time, the physical defense mechanism 2 executes a shielding mode. At this time, the electromagnet 26 is de-energized, the limit block 24 is engaged in the card slot 27, the first drive gear 17 drives the first gear ring 16 to rotate, causing the first driven gear 18 to rotate inward, the limit member 22 rotates synchronously with the first driven gear 18, and the first blade 8 and the third blade 9 rotate inward to a 90° position, blocking the camera 1 and cutting off the real-time image acquisition path; S23: Start the identity authentication mechanism and build an access permission barrier through fingerprint authentication and face recognition. Only authorized users can remove the shielding mode of physical defense mechanism 2 and obtain real-time image access permission.

[0036] The above description is only a preferred specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any technician familiar with the technical field, within the technical scope disclosed by the present invention, who makes equivalent replacements or changes based on the technical solution and inventive concept of the present invention, should be covered by the scope of protection of the present invention.

Claims

1. A network security intrusion detection and defense method, the method being based on a network security intrusion detection and defense device comprising a camera (1) and a physical defense mechanism (2), characterized in that: This includes both the behavioral layer detection and defense process and the device layer detection and defense process: Behavioral layer detection and defense process: S11: The camera (1) captures human behavior characteristics in real time and identifies abnormal behavior. When a behavior approaching the camera (1) is detected, an early warning signal is immediately issued, and the physical defense mechanism (2) is triggered to execute a perspective protection mode to prevent the camera (1) from being maliciously sprayed; S12: After detecting that the human body is away from the camera (1), the physical defense mechanism (2) releases the perspective protection mode; S13: If the camera is detected to be blocked, the physical defense mechanism (2) is triggered to execute the clearing mode to clear or remove the blocking object; S14: Upload the abnormal behavior characteristics and the work records of the physical defense organization (2) to the blockchain evidence storage node to form an unalterable behavior audit chain; Device-layer detection and defense process: S21: Establish a network access whitelist to monitor in real time RTSP protocol calls initiated by unauthorized IP addresses, image extraction backdoors caused by firmware tampering, and direct video stream connections that bypass authentication mechanisms. S22: When an unauthorized access attempt is detected, the real-time image automatically switches to a fuzzy processing mode or provides a preset false image source, and at the same time the physical defense mechanism (2) executes a shielding mode to block the camera (1) and cut off the real-time image acquisition path; S23: Start the identity authentication mechanism and build an access permission barrier through fingerprint authentication and face recognition. Only authorized users can remove the physical defense mechanism (2) to execute the masking mode and obtain real-time screen access permission.

2. A network security intrusion detection and defense device, applied to the network security intrusion detection and defense method according to claim 1, characterized in that: The invention comprises a camera (1) and a physical defense mechanism (2), wherein the camera (1) is provided with an infrared sensor, and the physical defense mechanism (2) comprises an actuator (3) and a connecting member (4), wherein the connecting member (4) is fixedly mounted on the camera (1), the actuator (3) is rotatably connected to the connecting member (4), and the actuator (3) is driven by a micro motor (5) to realize self-rotation; A shielding component (6) and a perspective protection component (7) are arranged in parallel inside the actuator (3). The shielding component (6) is composed of a plurality of first blades (8) and a plurality of third blades (9). The perspective protection component (7) is composed of a plurality of second blades (10). The first blades (8) and the third blades (9) are made of non-transparent materials and are driven by gears to rotate inwards to execute a shielding mode. The second blades (10) are made of transparent materials and are driven by gears to rotate inwards to execute a perspective protection mode. The third blades (9) are driven by gears to rotate outwards to execute a clearing mode.

3. A network security intrusion detection and prevention device according to claim 2, characterized in that: The actuator (3) is composed of a top cover (12), a first connecting plate (13), and a second connecting plate (14) that are fixedly connected. A through hole (15) is provided in the center of each of the top cover (12), the first connecting plate (13), and the second connecting plate (14) for exposing the camera (1). The shielding assembly (6) is installed in a first connecting disk (13), and a first gear ring (16) is rotatably installed in the first connecting disk (13). The first gear ring (16) is provided with a first driving gear (17) meshing with the first gear ring (16) on the outside, and a plurality of first driven gears (18) meshing with the first gear ring (16) on the inside. The plurality of first driven gears (18) are distributed in an annular array along the circumference of the first gear ring (16), and each first driven gear (18) is correspondingly installed with a first blade (8) or a third blade (9).

4. A network security intrusion detection and prevention device according to claim 3, characterized in that: The perspective protection component (7) is installed in a second connecting disk (14), and a second gear ring (19) is rotatably installed in the second connecting disk (14). The second gear ring (19) is provided with a second driving gear (20) meshing with the second gear ring (19) on the outside, and a plurality of second driven gears (21) meshing with the second gear ring (19) on the inside. The plurality of second driven gears (21) are distributed in an annular array along the circumference of the second gear ring (19), and a second blade (10) is correspondingly installed on each second driven gear (21).

5. A network security intrusion detection and prevention device according to claim 4, characterized in that: The first driven gear (18) is rotatably mounted on the first connecting disk (13); a limiting member (22) is provided at the rotation center of the first driven gear (18); the limiting member (22) is rotatably mounted on the first connecting disk (13); the first blade (8) is fixedly connected to the limiting member (22); and the rotation range of the first blade (8) is from 0° to 90° inward rotation.

6. A network security intrusion detection and prevention device according to claim 5, characterized in that: The limiting member (22) is provided with a plurality of limiting grooves (23) along the circumferential direction on the outer wall of the first driven gear (18), a limiting block (24) is installed in each limiting groove (23), the limiting block (24) is fixed in the limiting groove (23) by a spring (25), the limiting block (24) is magnetic, and an electromagnet (26) is provided in each limiting groove (23), and the first driven gear (18) is provided with a plurality of grooves (27) that match the limiting block (24) at positions corresponding to the limiting block (24); When the electromagnet (26) is not energized, the limit block (24) is engaged in the slot (27), and the first driven gear (18) rotates, and the limit member (22) rotates synchronously with the first driven gear (18); when the electromagnet (26) is energized, magnetic attraction is generated to cause the limit block (24) to disengage from the slot (27) and retract into the limit slot (23), and when the first driven gear (18) rotates, the limit member (22) remains stationary.

7. A network security intrusion detection and prevention device according to claim 6, characterized in that: The third blade (9) is fixedly mounted on the first driven gear (18), and the rotation range of the third blade (9) is 0° to 90° inward rotation and 0° to 90° outward rotation.

8. A network security intrusion detection and prevention device according to claim 7, characterized in that: The second driven gear (21) is rotatably mounted on the second connecting disk (14), and the second blade (10) is fixedly mounted on the second driven gear (21). The rotation range of the second blade (10) is 0° to 90° inward rotation.

9. A network security intrusion detection and prevention device according to claim 8, characterized in that: A worm (28) is provided in the connecting member (4), and the worm (28) is driven by a micro motor (5). A worm face gear (29) meshing with the worm (28) is provided on the side of the second connecting disk (14) facing the connecting member (4). The micro motor (5) drives the worm (28) to rotate, and the worm (28) drives the actuator (3) to rotate via the worm face gear (29).

10. The network security intrusion detection and prevention device according to claim 9, characterized in that: The physical defense mechanism (2) also has an anti-accidental injury mode. When the identity authentication mechanism verifies the identity of the authorized user, the physical defense mechanism (2) automatically activates the anti-accidental injury mode. At this time, the third blade (9) of the physical defense mechanism (2) is locked and cannot perform the clearing mode action of rotating outward. Even if it is detected that the camera (1) is blocked, the third blade (9) remains locked until the authorized user releases the anti-accidental injury mode through secondary identity authentication.

Images