A network security intrusion detection and prevention method and device

Abstract

The application discloses a network security intrusion detection and defense method and device, and relates to the technical field of network security; the method comprises a behavior layer detection and defense process and a device layer detection and defense process; the method further comprises a camera and a physical defense mechanism; the camera is provided with an infrared sensor; the physical defense mechanism comprises an execution part and a connecting part; the execution part is driven by a micro motor to realize self-rotation; a shielding assembly and a perspective protection assembly are arranged in parallel in the execution part; the shielding assembly is used for executing a shielding mode and a cleaning mode; and the perspective protection assembly is used for executing a perspective protection mode; the application can accurately realize the quick switching of the shielding mode, the perspective protection mode and the cleaning mode, meets the defense requirements in multiple scenes, and further has a mistaken injury prevention mode, effectively avoids the interference caused by legal operations such as equipment maintenance and daily cleaning, and balances the defense performance and the operation convenience.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of network security, and in particular to a network security intrusion detection and defense method and device. BACKGROUND

[0002] The current network security environment is becoming increasingly complex, and monitoring devices, as key nodes for information collection and security protection, are facing multi-dimensional intrusion threats. The existing defense system has significant shortfalls:

[0003] At the physical level, the camera is vulnerable to malicious human damage, including close-range lens spraying or covering the lens with foreign matter to block picture collection. Traditional devices lack real-time response mechanisms and are often passively discovered after the damage occurs, and have no automatic clearing function for the blocking object.

[0004] At the network level, unauthorized access risks have made monitoring devices a major area of information leakage. Attackers can illegally obtain real-time monitoring data through unauthorized IP. Existing access control relies heavily on single password authentication, and the permission barrier is weak and easily cracked. When network intrusion occurs, the device lacks immediate picture protection mechanisms, resulting in direct leakage of sensitive information. SUMMARY

[0005] The purpose of the present application is to solve the problems raised in the background art and to provide a network security intrusion detection and defense method and device.

[0006] In order to achieve the above-mentioned purpose, the present application adopts the following technical solutions:

[0007] A network security intrusion detection and defense method based on a network security intrusion detection and defense device comprising a camera and a physical defense mechanism, including a behavior layer detection and defense process and a device layer detection and defense process:

[0008] Behavior layer detection and defense process:

[0009] S11: The camera captures human behavior features in real time and identifies abnormal behavior. When the behavior of approaching the camera is detected, an early warning signal is immediately sent out, and the physical defense mechanism is triggered to execute a see-through protection mode to prevent the camera from being maliciously sprayed;

[0010] S12: After detecting that the human body is away from the camera, the physical defense mechanism cancels the see-through protection mode;

[0011] S13: If the camera is detected to be blocked at this time, the physical defense mechanism is triggered to execute a cleaning mode to remove or remove the blocking object;

[0012] S14: Upload the abnormal behavior features and the working record of the physical defense mechanism to the block chain storage node to form an unalterable behavior audit chain.

[0013] Device layer detection defense process:

[0014] S21: Establish a network access white list, and monitor behaviors such as RTSP protocol calls initiated by unauthorized IP, picture extraction backdoors caused by firmware tampering, and video stream direct connection bypassing the authentication mechanism in real time;

[0015] S22: When an unauthorized access attempt is detected, automatically switch the real-time picture to a blur processing mode or provide a preset false picture source, and at the same time, the physical defense mechanism executes a shielding mode for shielding the camera and cutting off the real-time picture acquisition path;

[0016] S23: Start the identity authentication mechanism, build an access permission barrier through fingerprint authentication and face recognition, and only authorized users can remove the physical defense mechanism to execute the shielding mode and obtain real-time picture access permission.

[0017] A network security intrusion detection and defense device applied to the network security intrusion detection and defense method, comprising a camera and a physical defense mechanism, the camera is provided with an infrared sensor, the physical defense mechanism comprises an execution part and a connecting part, the connecting part is fixedly installed on the camera, the execution part is rotatably connected with the connecting part, and the execution part is driven to rotate by a micro motor;

[0018] The execution part is internally provided with a shielding assembly and a perspective protection assembly, the shielding assembly is composed of a plurality of first blades and a plurality of third blades, the perspective protection assembly is composed of a plurality of second blades, the first blades and the third blades are made of non-transparent materials, and the first blades and the third blades are driven to rotate inward by a gear transmission to execute a shielding mode, the second blades are made of transparent materials, and the second blades are driven to rotate inward by a gear transmission to execute a perspective protection mode, and the third blades are driven to rotate outward by a gear transmission to execute a cleaning mode.

[0019] As a further scheme of the application, the execution part is fixedly connected by a top cover, a first connecting disc and a second connecting disc, and the top cover, the first connecting disc and the second connecting disc are all provided with through holes in the center for exposing the camera;

[0020] The shielding assembly is installed in the first connecting disc, the first connecting disc is rotatably provided with a first gear ring, the first gear ring is provided with a first driving gear meshing with the first gear ring on the outer side, and a plurality of first driven gears meshing with the first gear ring on the inner side, the plurality of first driven gears are distributed in a ring array along the circumference of the first gear ring, and one first blade or one third blade is installed on each first driven gear.

[0021] As a further scheme of the present application, the perspective protection assembly is installed in the second connecting disc, the second gear ring is rotatably installed in the second connecting disc, the second driving gear meshing with the second gear ring is arranged outside the second gear ring, and a plurality of second driven gears meshing with the second gear ring are arranged inside the second gear ring, and the plurality of second driven gears are arranged in a ring array along the circumference of the second gear ring, and one second vane is correspondingly installed on each second driven gear.

[0022] As a further scheme of the present application, the first driven gear is rotatably installed on the first connecting disc, the limiting piece is arranged at the rotation center of the first driven gear, the limiting piece is rotatably installed on the first connecting disc, the first vane is fixedly connected with the limiting piece, and the rotation range of the first vane is 0° to 90° inward rotation.

[0023] As a further scheme of the present application, the limiting piece is provided with a plurality of limiting grooves along the circumference of the outer side wall of the first driven gear, a limiting block is installed in each limiting groove, the limiting block is fixed in the limiting groove through a spring, the limiting block has magnetism, an electromagnet is arranged in the limiting groove, and the first driven gear is provided with a plurality of clamping grooves matched with the limiting blocks at positions corresponding to the limiting blocks.

[0024] When the electromagnet is not powered, the limiting block is embedded in the clamping groove, at this time, when the first driven gear rotates, the limiting piece rotates synchronously with the first driven gear; when the electromagnet is powered, the limiting block is attracted by the magnetism of the electromagnet and is separated from the clamping groove and retracted into the limiting groove, at this time, when the first driven gear rotates, the limiting piece remains stationary.

[0025] As a further scheme of the present application, the third vane is fixedly installed on the first driven gear, and the rotation range of the third vane is 0° to 90° inward rotation and 0° to 90° outward rotation.

[0026] As a further scheme of the present application, the second driven gear is rotatably installed on the second connecting disc, and the second vane is fixedly installed on the second driven gear, and the rotation range of the second vane is 0° to 90° inward rotation.

[0027] As a further scheme of the present application, the second driven gear is rotatably installed on the second connecting disc, the connecting piece is provided with a worm, the worm is driven by a micro motor, the second connecting disc is provided with a worm face gear meshing with the worm on the side facing the connecting piece, the micro motor drives the worm to rotate, and the worm drives the executing piece to rotate through the worm face gear.

[0028] As a further scheme of the present application: the physical defense mechanism further has a mistaken injury prevention mode, when the identity authentication mechanism verifies the authorized user identity, the physical defense mechanism automatically activates the mistaken injury prevention mode, at this time, the third blade of the physical defense mechanism is locked and cannot execute the outward rotating cleaning mode action, even if the camera exists the shielding situation is detected, the third blade remains in the locked state until the authorized user removes the mistaken injury prevention mode through the secondary identity verification.

[0029] Compared with the prior art, the present application has the advantages that:

[0030] 1. At the physical level, the human body behavior characteristics are captured in real time, when someone approaches, the see-through protection mode is triggered immediately to block malicious spraying, after the human body moves away, if the camera exists the shielding, the cleaning mode is automatically started to complete the removal of the shielding object, realizing self-recovery; at the network level, unauthorized access behavior is monitored in real time, once the abnormality is found, the real-time picture will be automatically switched to the blurred processing or the preset false picture, and the shielding mode is triggered to cut off the collection path, and the recovery of the access permission must pass through the fingerprint authentication and the face recognition dual identity authentication mechanism.

[0031] 2. The physical defense mechanism is internally integrated with three functional blades, through the gear transmission, the shielding mode (blocking the picture collection), the see-through protection mode (preventing spraying) and the cleaning mode (removing the shielding object) can be accurately and quickly switched, meeting the defense requirements in multiple scenes, in addition, the mistaken injury prevention mode is also provided, effectively avoiding the interference to the legal operations such as equipment maintenance and daily cleaning, and the defense performance and the operation convenience are considered. BRIEF DESCRIPTION OF DRAWINGS

[0032] Figure 1 It is a whole structure schematic view of the camera and the physical defense mechanism of the present application;

[0033] Figure 2 It is a structure schematic view of the physical defense mechanism of the present application;

[0034] Figure 3 It is a structure schematic view of the physical defense mechanism of the present application from another angle;

[0035] Figure 4 It is a structure schematic view of the execution member and the connecting member of the present application;

[0036] Figure 5 It is a structure schematic view of the execution member of the present application from another angle;

[0037] Figure 6 It is a split structure schematic view of the execution member and the connecting member of the present application;

[0038] Figure 7 It is an installation structure schematic view of the shielding assembly of the present application;

[0039] Figure 8 It is the installation structure schematic view of the perspective protection assembly of the present application;

[0040] Figure 9 It is the installation structure schematic view of the worm, worm face gear of the present application;

[0041] Figure 10 It is the installation structure schematic view of the third blade, limiting piece, first driven gear of the present application;

[0042] Figure 11 It is Figure 10 It is the local enlarged structure schematic view of A in the middle;

[0043] Figure 12 It is the split structure schematic view of the third blade, limiting piece, first driven gear of the present application;

[0044] Figure 13 It is the structure schematic view of the limiting piece of the present application.

[0045] In the figure: 1, camera; 2, physical defense mechanism; 3, execution piece; 4, connecting piece; 5, micro motor; 6, shielding assembly; 7, perspective protection assembly; 8, first blade; 9, third blade; 10, second blade; 12, top cover; 13, first connecting disc; 14, second connecting disc; 15, through hole; 16, first gear ring; 17, first drive gear; 18, first driven gear; 19, second gear ring; 20, second drive gear; 21, second driven gear; 22, limiting piece; 23, limiting groove; 24, limiting block; 25, spring; 26, electromagnet; 27, clamping groove; 28, worm; 29, worm face gear. DETAILED DESCRIPTION

[0046] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0047] Referring to Figures 1 to 13 A network security intrusion detection and defense device includes a camera 1 and a physical defense mechanism 2. The outer side wall of the camera 1 is provided with a threaded hole. The connecting piece 4 adopts a ring sleeve structure, and the inner side wall thereof is provided with threads matched with the threaded hole of the camera 1. The fixed installation of the connecting piece 4 and the camera 1 is realized through threaded connection. Meanwhile, an infrared sensor is embedded and installed at the front end of the camera 1 (the infrared sensor can also be arranged on the physical defense mechanism 2). The infrared sensor can capture human activity signals around in real time.

[0048] The physical defense mechanism 2 comprises an execution member 3 and a connecting member 4, the execution member 3 is fixedly connected by a top cover 12, a first connecting disc 13 and a second connecting disc 14, and a through hole 15 is arranged in the center of the three, which ensures that the lens of the camera 1 can be exposed from the through hole without affecting normal picture collection, the connecting member 4 is internally provided with a worm 28, one end of the worm 28 is connected with the output shaft of a micro motor 5, the micro motor 5 is fixedly installed in the connecting member 4 through a support, and the side of the second connecting disc 14 facing the connecting member 4 is provided with a worm face gear 29 meshing with the worm 28, when the micro motor 5 is started, the worm 28 rotates and drives the execution member 3 as a whole to rotate around the axis of the camera 1 through the worm face gear 29, so as to realize the rotation function of the execution member 3.

[0049] Referring to Figures 4 to 13 , the execution member 3 is internally provided with a shielding assembly 6 and a perspective protection assembly 7, the shielding assembly 6 is composed of a plurality of first blades 8 and a plurality of third blades 9, the perspective protection assembly 7 is composed of a plurality of second blades 10, the first blades 8 and the third blades 9 are made of non-transparent materials, the first blades 8 and the third blades 9 are rotated inwards through gear transmission to shield the through hole 15 to execute the shielding mode, the second blades 10 are made of transparent materials and are rotated inwards through gear transmission to shield the through hole 15 to execute the perspective protection mode, the third blades 9 are rotated outwards through gear transmission to execute the cleaning mode, it should be noted that when the cleaning mode is executed, the execution member 3 rotates as a whole at high speed.

[0050] The shielding assembly 6 is installed in the first connecting disc 13, a first tooth ring 16 is rotatably installed on the first connecting disc 13, the outer side of the first tooth ring 16 is provided with a first driving gear 17 meshing therewith, the first driving gear 17 is connected with the output shaft of a driving motor installed in the first connecting disc 13, the inner side of the first tooth ring 16 is provided with a plurality of first driven gears 18 meshing therewith, the plurality of first driven gears 18 are distributed in a ring array along the circumference of the first tooth ring 16, and each first driven gear 18 is rotatably installed on the first connecting disc 13.

[0051] A limiting piece 22 is arranged at the rotation center of the first driven gear 18, the limiting piece 22 is rotatably installed on the first connecting disc 13, the first blade 8 is fixedly connected with the limiting piece 22, and the rotation range thereof is 0° to 90° inwards, the third blade 9 is fixedly installed on the first driven gear 18, and the rotation range thereof is 0° to 90° inwards and 0° to 90° outwards.

[0052] A plurality of limiting grooves 23 are circumferentially formed on the outer side wall of the limiting member 22 towards the first driven gear 18, and a limiting block 24 is installed in each limiting groove 23. The limiting block 24 is fixed in the limiting groove 23 by a spring 25, and has magnetism. An electromagnet 26 is arranged in the limiting groove 23, and the first driven gear 18 is provided with a plurality of clamping grooves 27 corresponding to the limiting block 24.

[0053] When the electromagnet 26 is not powered, the limiting block 24 is fitted in the clamping groove 27. At this time, when the first driven gear 18 rotates, the limiting member 22 rotates synchronously with the first driven gear 18, and the first blade 8 and the third blade 9 rotate inward as a whole by the gear transmission mode to perform the shielding mode. When the electromagnet 26 is powered, the limiting block 24 is attracted by the magnetism and retracted into the limiting groove 23 from the clamping groove 27. At this time, when the first driven gear 18 rotates, the limiting member 22 remains stationary (applicable to the cleaning mode, to ensure that the first blade 8 does not rotate with the first driven gear 18 when the third blade 9 rotates outward), and the third blade 9 can always rotate outward to perform the cleaning mode by rotating with the first driven gear 18.

[0054] The perspective protection assembly 7 is installed in the second connecting disc 14, and the second tooth ring 19 is rotatably installed in the second connecting disc 14. The second tooth ring 19 is provided with a second driving gear 20 engaged therewith on the outer side thereof, and the second driving gear 20 is connected with another driving motor output shaft installed inside the second connecting disc 14. The second tooth ring 19 is provided with a plurality of second driven gears 21 engaged therewith on the inner side thereof, and the plurality of second driven gears 21 are arranged in a ring array along the circumference of the second tooth ring 19. Each second driven gear 21 is rotatably installed on the second connecting disc 14 by a bearing, and the second blade 10 is fixedly installed on the second driven gear 21. The rotation range of the second blade 10 is 0° to 90° inward rotation. Figure 8 Fig. 4 shows the state when the rotation angle of the second blade 10 is 0°.

[0055] When it is detected that someone approaches, all the second blades 10 rotate inward to 90°, and the perspective protection mode is switched. Since the second blade 10 is made of transparent material, in the perspective protection mode, the camera 1 can continue to shoot without being hindered, and the camera 1 can be shielded. If a paint spraying behavior occurs, the camera 1 can be protected.

[0056] In the initial state of the physical defense mechanism 2, the first blade 8, the second blade 10 and the third blade 9 are all in the 0° position, and do not shield the lens of the camera 1, so that the camera 1 can normally collect pictures.

[0057] It should be noted that the physical defense mechanism 2 also has a mistaken injury prevention mode. When the identity authentication mechanism (fingerprint authentication and face recognition) verifies the authorized user identity, the physical defense mechanism 2 automatically activates the mistaken injury prevention mode. At this time, the drive motor that controls the first drive gear 17 is locked, so it cannot execute the outward rotating cleaning mode action. Even if the camera is detected to be blocked, the third blade 9 remains in the locked state until the authorized user removes the mistaken injury prevention mode through secondary identity verification.

[0058] A network security intrusion detection and defense method based on the above network security intrusion detection and defense device, including behavior layer detection and defense process and device layer detection and defense process:

[0059] Behavior layer detection and defense process:

[0060] S11: When the infrared sensor of the camera 1 detects that someone is approaching, immediately transmit the signal to the main control module, and the main control module sends a warning signal. Specifically, it pushes the warning information including the intrusion time, real-time screenshot, and location coordinates to the preset authorized user terminal (including the management platform, mobile client, and on-duty terminal) through an encrypted communication link. The warning forms include pop-up prompts, sound and light alarms, and SMS notifications. At the same time, the physical defense mechanism 2 executes the see-through protection mode. At this time, the second drive gear 20 rotates to drive the second gear ring 19 to rotate, and the second gear ring 19 drives multiple second driven gears 21 to rotate synchronously, causing the second blade 10 to rotate inward to 90° position, forming a transparent protective barrier to prevent the camera from being maliciously sprayed.

[0061] S12: When the infrared sensor detects that the human body is away from the camera 1, the main control module controls the second blade 10 to rotate reversely to 0° position, and the see-through protection mode is removed.

[0062] S13: At this time, if the camera 1 detects that it is blocked, the main control module triggers the physical defense mechanism 2 to execute the cleaning mode, controls the electromagnet 26 to be powered on, the limiting block 24 is separated from the clamping groove 27, then the first drive gear 17 drives the first gear ring 16 to rotate, causing the first driven gear 18 to rotate outward, and the micro motor 5 drives the worm 28 to rotate at high speed, which drives the actuator 3 to rotate as a whole at high speed through the worm face gear 29. At this time, the limiting piece 22 remains stationary, only the third blade 9 rotates outward with the first driven gear 18. Under the cooperation of the high-speed rotation of the actuator 3, the blocking object is more efficiently removed through the rotating action. After cleaning is completed, the third blade 9 returns to 0° position, the actuator 3 stops high-speed rotation, the electromagnet 26 is powered off, and the limiting block 24 is reset.

[0063] S14: During the entire process, the abnormal behavior characteristics and the working record of the physical defense mechanism 2 are uploaded to the block chain storage node in real time, forming an unalterable behavior audit chain.

[0064] Device layer detection defense process:

[0065] S21: Establish a network access whitelist, and monitor behaviors such as RTSP protocol calls initiated by unauthorized IP, picture extraction backdoors caused by firmware tampering, and video stream direct connection bypassing the authentication mechanism in real time;

[0066] S22: When an unauthorized access attempt is detected, automatically switch the real-time picture to a blur processing mode or provide a preset false picture source, and at the same time, the physical defense mechanism 2 executes a shielding mode. At this time, the electromagnet 26 is not powered, the limiting block 24 is embedded in the clamping groove 27, the first driving gear 17 drives the first gear ring 16 to rotate, the first driven gear 18 rotates inward, the limiting member 22 rotates synchronously with the first driven gear 18, the first blade 8 and the third blade 9 rotate inward to a 90° position, shielding the camera 1 and cutting off the real-time picture acquisition path;

[0067] S23: Start the identity authentication mechanism, build an access permission barrier through fingerprint authentication and face recognition, and only authorized users can remove the shielding mode of the physical defense mechanism 2 to obtain real-time picture access permission.

[0068] The above is only a preferred specific embodiment of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can make equivalent replacements or changes within the technical scope disclosed by the present application according to the technical solution and inventive concept of the present application, which should be covered within the protection scope of the present application.

Claims

1. A method for network security intrusion detection and prevention, based on a network security intrusion detection and prevention device comprising a camera (1) and a physical defense mechanism (2), characterized in that, The behavior layer detection defense process and the device layer detection defense process are included. The behavior layer detection defense process is as follows: S11: The camera (1) captures human behavior features in real time and identifies abnormal behaviors. When behaviors close to the camera (1) are detected, a warning signal is immediately sent out, and the physical defense mechanism (2) is triggered to execute the see-through protection mode to prevent the camera (1) from being maliciously sprayed; S12: After detecting that the human body is away from the camera (1), the physical defense mechanism (2) releases the see-through protection mode; S13: If it is detected that the camera is blocked at this time, the physical defense mechanism (2) is triggered to execute the cleaning mode to remove or remove the blocking object; S14: Upload the abnormal behavior features and the working record of the physical defense mechanism (2) to the block chain storage node to form an unalterable behavior audit chain; The device layer detection defense process is as follows: S21: Establish a network access whitelist, and monitor RTSP protocol calls initiated by unauthorized IPs, picture extraction backdoors caused by firmware tampering, and video stream direct connection behaviors bypassing the authentication mechanism in real time; S22: When unauthorized access attempts are detected, automatically switch the real-time picture to a blurred processing mode or provide a preset false picture source, and at the same time, the physical defense mechanism (2) executes the shielding mode to shield the camera (1) and cut off the real-time picture acquisition path; S23: Start the identity authentication mechanism, build an access permission barrier through fingerprint authentication and face recognition, and only authorized users can release the shielding mode of the physical defense mechanism (2) to obtain real-time picture access permission.

2. A network security intrusion detection and prevention apparatus applied in the network security intrusion detection and prevention method of claim 1, characterized in that, The camera (1) and the physical defense mechanism (2) are included, the camera (1) is provided with an infrared sensor, the physical defense mechanism (2) includes an execution member (3) and a connecting member (4), the connecting member (4) is fixedly installed on the camera (1), the execution member (3) is rotationally connected with the connecting member (4), and the execution member (3) is driven to rotate by a micro motor (5); The execution member (3) is internally provided with a shielding assembly (6) and a see-through protection assembly (7) in parallel, the shielding assembly (6) is composed of a plurality of first blades (8) and a plurality of third blades (9), the see-through protection assembly (7) is composed of a plurality of second blades (10), the first blades (8) and the third blades (9) are made of non-transparent materials and are driven to rotate inward to execute the shielding mode through gear transmission, the second blades (10) are made of transparent materials and are driven to rotate inward to execute the see-through protection mode through gear transmission, and the third blades (9) are driven to rotate outward to execute the cleaning mode through gear transmission.

3. The network security intrusion detection and prevention device of claim 2, wherein, The execution member (3) is fixedly connected by a top cover (12), a first connecting disc (13) and a second connecting disc (14), and the top cover (12), the first connecting disc (13) and the second connecting disc (14) are all provided with through holes (15) in the center for exposing the camera (1). The shielding assembly (6) is installed in the first connecting disc (13), the first connecting disc (13) is rotatably installed with a first gear ring (16), the first gear ring (16) is provided with a first driving gear (17) engaged with the first gear ring (16) on the outer side, and a plurality of first driven gears (18) engaged with the first gear ring (16) on the inner side, the plurality of first driven gears (18) are arranged in a ring array along the circumference of the first gear ring (16), and one first blade (8) or one third blade (9) is correspondingly installed on each first driven gear (18).

4. The network security intrusion detection and prevention device of claim 3, wherein, The perspective protection assembly (7) is installed in the second connecting disc (14), the second connecting disc (14) is rotatably installed with a second gear ring (19), the second gear ring (19) is provided with a second driving gear (20) engaged with the second gear ring (19) on the outer side, and a plurality of second driven gears (21) engaged with the second gear ring (19) on the inner side, the plurality of second driven gears (21) are arranged in a ring array along the circumference of the second gear ring (19), and one second blade (10) is correspondingly installed on each second driven gear (21).

5. The network security intrusion detection and prevention device of claim 4, wherein, The first driven gear (18) is rotatably installed on the first connecting disc (13), the center of rotation of the first driven gear (18) is provided with a limiting piece (22), the limiting piece (22) is rotatably installed on the first connecting disc (13), the first blade (8) is fixedly connected with the limiting piece (22), and the rotation range of the first blade (8) is 0° to 90° inward rotation.

6. The network security intrusion detection and prevention device of claim 5, wherein, A plurality of limiting grooves (23) are formed in the limiting piece (22) along the circumference towards the outer side wall of the first driven gear (18), one limiting block (24) is installed in each limiting groove (23), the limiting block (24) is fixed in the limiting groove (23) through a spring (25), the limiting block (24) has magnetism, an electromagnet (26) is arranged in each limiting groove (23), and the first driven gear (18) is provided with a plurality of clamping grooves (27) matched with the limiting block (24) at positions corresponding to the limiting block (24); When the electromagnet (26) is not powered, the limiting block (24) is fitted in the clamping groove (27), at this time, the first driven gear (18) rotates, and the limiting piece (22) rotates synchronously with the first driven gear (18); when the electromagnet (26) is powered, the limiting block (24) is attracted by the magnetism to separate from the clamping groove (27) and retract into the limiting groove (23), at this time, when the first driven gear (18) rotates, the limiting piece (22) remains stationary.

7. The network security intrusion detection and prevention device of claim 6, wherein, The third blade (9) is fixedly installed on the first driven gear (18), and the rotation range of the third blade (9) is 0° to 90° inward rotation and 0° to 90° outward rotation.

8. The network security intrusion detection and prevention device of claim 7, wherein, The second driven gear (21) is rotatably installed on the second connecting disc (14), the second blade (10) is fixedly installed on the second driven gear (21), and the rotation range of the second blade (10) is 0° to 90° inward rotation.

9. The network security intrusion detection and prevention device of claim 8, wherein, The connecting piece (4) is internally provided with a worm (28), the worm (28) is driven by a micro motor (5), one side of the second connecting disc (14) towards the connecting piece (4) is provided with a worm face gear (29) engaged with the worm (28), the micro motor (5) drives the worm (28) to rotate, the worm (28) drives the executing piece (3) to rotate through the worm face gear (29).

10. The network security intrusion detection and prevention device of claim 9, wherein, The physical defense mechanism (2) also has a mistaken injury prevention mode, when the identity authentication mechanism verifies the authorized user identity, the physical defense mechanism (2) automatically activates the mistaken injury prevention mode, at this time, the third blade (9) of the physical defense mechanism (2) is locked and cannot execute the outward rotating cleaning mode action, even if the camera (1) is detected to be blocked, the third blade (9) remains in the locked state until the authorized user removes the mistaken injury prevention mode through secondary identity verification.

Images