Air conditioner and safety protection system and method thereof
By introducing a security protection system into the air conditioner, abnormal data traffic can be identified and processed in real time, and the threat level can be assessed. This solves the problem of insufficient security in voice-activated air conditioners, and achieves the protection of user privacy and stable operation of the system.
Patent Information
- Application Number
- CN202410649314.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-05-23
- Publication Date
- 2025-11-25
AI Technical Summary
Existing voice-activated air conditioners have poor security, making users' privacy information vulnerable to theft and attacks, and lacking effective protection measures.
A security protection system is adopted, including an interception module, a warning logging module, a threat assessment module, and an execution module, to identify and intercept abnormal data traffic in real time, store and assess threat levels, and perform corresponding operations to prevent privacy leaks.
It enhances the security of air conditioners, prevents the leakage of user privacy information, detects and handles various attacks, and ensures the security of data transmission and system stability.
Smart Images
Figure CN121007384A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of air conditioning technology, specifically providing an air conditioner and its safety protection system and method. Background Technology
[0002] Voice-controlled air conditioners are becoming increasingly popular due to their convenience, allowing the elderly and children to operate them by voice without age restrictions. When using a voice-controlled air conditioner, the user needs to interact with the air conditioner through voice commands. The user issues commands via voice, and the air conditioner receives, recognizes, and executes the corresponding operations.
[0003] However, user interaction with air conditioners via voice is becoming increasingly frequent: users not only perform some operations but also store or exchange some private information. The amount of sensitive information generated during these voice interactions is also increasing, such as conversations between users and family or friends when issuing voice commands, and personal privacy information related to the user's voice interaction. Since voice-activated air conditioners use mobile data or Wi-Fi for interaction, malicious actors or service providers can use these methods to steal and attack privacy. To prevent malicious actors or service providers from stealing and attacking sensitive voice information, to prevent user privacy leaks, and to improve the security of voice-activated air conditioners, a new technical solution is needed to address these issues. Summary of the Invention
[0004] The present invention aims to solve the above-mentioned technical problems, namely, to solve the problem of poor security of existing voice-activated air conditioners.
[0005] In a first aspect, the present invention provides a security protection system for an air conditioner, the security protection system comprising: an interception module, a warning recording module, a threat assessment module, and an execution module; the interception module is configured to identify and intercept abnormal data traffic received by the air conditioner; the warning recording module is configured to receive and store the abnormal data traffic intercepted by the interception module; the threat assessment module is configured to assess the threat level of each abnormal data traffic; and the execution module is configured to perform corresponding operations based on the assessment results of the threat assessment module.
[0006] In the preferred technical solution of the above security protection system, the warning recording module includes an interception storage unit and an extraction storage unit. The interception storage unit can receive and store the abnormal category data traffic intercepted by the interception module; the extraction storage unit can extract the flag bits of the abnormal category data traffic and measure the throughput of the abnormal category data traffic, and store the extracted flag bits and throughput information; the threat assessment module can assess the threat level of the flag bits and throughput of the abnormal category data traffic one by one.
[0007] In a second aspect, the present invention also provides a protection method for an air conditioner, the air conditioner comprising: a safety protection system, the safety protection system including an interception module and a warning recording module; the interception module is configured to identify and intercept abnormal data traffic received by the air conditioner; the warning recording module is configured to receive and store the abnormal data traffic intercepted by the interception module; when the air conditioner receives data traffic, the protection method comprises: determining the category of the received data traffic; selectively controlling the interception module to intercept the data traffic according to the category of the data traffic; and controlling the warning recording module to store the data traffic after the interception module intercepts the data traffic.
[0008] In the preferred embodiment of the above protection method, the step of "selectively controlling the interception module to intercept the data traffic according to the category of the data traffic" specifically includes: if the category of the data traffic is an abnormal category, then controlling the interception module to intercept the abnormal category data traffic.
[0009] In the preferred embodiment of the above protection method, the step of "selectively controlling the interception module to intercept the data traffic according to the category of the data traffic" further includes: if the category of the data traffic is a non-abnormal category, then the interception module is prohibited from intercepting the non-abnormal category data traffic.
[0010] In the preferred embodiment of the above protection method, the security protection system further includes a threat assessment module and an execution module. The threat assessment module is configured to assess the threat level of each abnormal category of data traffic. The execution module is configured to perform corresponding operations based on the assessment results of the threat assessment module. The protection method includes: measuring the throughput of each abnormal category of data traffic to determine whether the throughput of the abnormal category of data traffic is greater than a preset value; if the throughput of the abnormal category of data traffic is greater than the preset value; determining its threat level based on the category and throughput of the abnormal category of data traffic; and controlling the execution module to perform corresponding operations based on the threat level.
[0011] In a preferred embodiment of the above protection method, the protection method includes: if the throughput of abnormal category data traffic is less than or equal to a preset value, then all information of the abnormal category data traffic is deleted.
[0012] In the preferred technical solution of the above protection method, the step of "determining the threat level based on the category and throughput of abnormal data traffic" specifically includes: determining the category of abnormal data traffic based on the flag bit, and determining the threat level based on the correspondence between throughput and threat level in the category.
[0013] In the preferred embodiment of the above protection method, the step of "controlling the execution module to perform corresponding operations according to the threat level" specifically includes: if the threat level is level 1, the execution module is controlled to provide backup false information; and / or, if the threat level is level 2, the execution module is controlled to issue a prompt; and / or, if the threat level is level 3, the execution module is controlled to perform an alarm operation.
[0014] In a third aspect, the present invention also provides an air conditioner, the air conditioner including the safety protection system of the air conditioner described in any one of the above preferred technical solutions, and the safety protection system being capable of performing the protection method described in any one of the above preferred technical solutions.
[0015] With the above technical solution adopted, the security protection system of the present invention includes: an interception module, a warning recording module, a threat assessment module, and an execution module; the interception module is configured to identify and intercept abnormal data traffic received by the air conditioner; the warning recording module is configured to receive and store the abnormal data traffic intercepted by the interception module; the threat assessment module is configured to assess the threat level of each abnormal data traffic; and the execution module is configured to perform corresponding operations based on the assessment results of the threat assessment module. The security protection system of the present invention can promptly intercept abnormal and suspicious data traffic received by the air conditioner, and can separate multiple categories of abnormal data traffic, processing and assessing them step by step, thereby detecting various attacks by unauthorized users on the air conditioner's cloud data, improving the security of the air conditioner, and protecting user privacy.
[0016] Furthermore, this invention intercepts and stores abnormal category data traffic intercepted by the interception module through an interception storage unit; the extraction storage unit can extract the flag bits of abnormal category data traffic and measure the throughput of abnormal category data traffic, and store the extracted flag bits and throughput information; the threat assessment module only performs threat assessment on the content stored in the extraction storage unit. Since the flag bits and throughput information are not a complete data traffic, the impact of abnormal category data traffic on the threat assessment module is reduced. After being intercepted, abnormal category data traffic cannot be transmitted between other modules, thus improving the security of the security protection system. Attached Figure Description
[0017] The preferred embodiments of the present invention are described below with reference to the accompanying drawings, in which:
[0018] Figure 1 This is a schematic diagram of the safety protection system of the present invention;
[0019] Figure 2 This is a flowchart of the main steps of the protection method of the present invention;
[0020] Figure 3 This is a detailed flowchart of the protection method according to a preferred embodiment of the present invention. Detailed Implementation
[0021] Preferred embodiments of the present invention will now be described with reference to the accompanying drawings. Those skilled in the art should understand that these embodiments are merely illustrative of the technical principles of the invention and are not intended to limit the scope of protection of the invention. Those skilled in the art can make adjustments as needed to adapt to specific applications.
[0022] First refer to Figure 1 ,like Figure 1 As shown, the security protection system of the present invention includes: an interception module, a warning recording module, a threat assessment module, and an execution module; the interception module is configured to identify and intercept abnormal data traffic received by the air conditioner; the warning recording module is configured to receive and store the abnormal data traffic intercepted by the interception module; the threat assessment module is configured to assess the threat level of each abnormal data traffic; and the execution module is configured to perform corresponding operations based on the assessment results of the threat assessment module.
[0023] Regardless of whether the data traffic is abnormal or normal, it first passes through the interception module. This module monitors the passing data traffic in real time and identifies it. If abnormal data traffic is identified, it is directly intercepted and stored in the warning log module to prevent its transmission to other critical or core components of the air conditioner, thus preventing the leakage of user privacy or sensitive information. If the data traffic is normal, it is allowed to pass through normally. For the intercepted and stored abnormal data traffic, the threat assessment module evaluates its threat level one by one and controls the execution module to perform corresponding operations based on the threat level. In summary, intercepting abnormal data traffic and performing a series of processing steps after interception improves the security of the air conditioner.
[0024] The interception module stores flags, codes, IP addresses, and protocol types for normal data traffic. If any item in the data traffic does not match, it is identified as abnormal data traffic.
[0025] Further reading Figure 1The warning logging module includes an interception storage unit and an extraction storage unit. The interception storage unit receives and stores abnormal data traffic intercepted by the interception module; the extraction storage unit extracts the flag bits of abnormal data traffic and measures its throughput, storing the extracted flag bits and throughput information; the threat assessment module assesses the threat level of each abnormal data traffic based on its flag bits and throughput. Since the flag bits and throughput information do not represent a complete data traffic flow, the impact of abnormal data traffic on the threat assessment module is reduced. Once intercepted, abnormal data traffic cannot flow between other modules, thus improving the security of the security protection system.
[0026] Meanwhile, the warning logging module can store abnormal data traffic categories. This storage function allows the threat assessment module to assess one type of data traffic first, and then assess the next type of data traffic. This avoids assessing multiple types of data traffic at the same time, alleviates the blocking pressure on the threat assessment module, and prevents the security protection system from lag.
[0027] In another feasible embodiment, the warning logging module only includes an intercept storage unit.
[0028] See next. Figure 3 ,like Figure 3 As shown, the main steps of the safety protection method for the air conditioner of the present invention are as follows:
[0029] Step S1: Determine the type of received data traffic;
[0030] Step S2: Selectively control the interception module to intercept data traffic based on the type of traffic volume;
[0031] Step S3: After the interception module intercepts the data traffic, the control warning recording module stores the data traffic.
[0032] In step S1, the interception module first identifies the category of the received data traffic, specifically identifying abnormal and non-abnormal data traffic. In other words, step S1 determines whether the received data traffic is abnormal. In step S2, based on the data traffic category determined in step S1, the interception module selectively controls the interception of data traffic. If it is abnormal data traffic, the interception module automatically intercepts it; if it is non-abnormal data traffic, it is not intercepted, allowing normal transmission. Then, in step S3, after the interception module intercepts abnormal data traffic, it controls the warning recording module to store the data traffic. That is, the interception module transmits the abnormal data traffic to the warning recording module, which stores it for later retrieval in the warning recording module for analysis, processing, threat assessment, etc.
[0033] Storing abnormal data traffic separately avoids the transmission of abnormal data traffic between different modules within the security protection system after interception, and does not affect the identification and interception functions of the interception module. When multiple abnormal data traffic types appear together, the interception module can systematically identify and intercept them and transmit them to the warning recording module for storage.
[0034] See next. Figure 3 ,like Figure 3 As shown, the detailed steps of a preferred embodiment of the protection method of the present invention are as follows:
[0035] Step S11: Determine the type of received data traffic;
[0036] Step S12: If the data traffic is classified as an abnormal category, the control interception module will intercept the abnormal category data traffic;
[0037] Step S13: If the data traffic category is non-abnormal, then the interception module is prohibited from intercepting non-abnormal data traffic;
[0038] Step S14: After the interception module intercepts the data traffic, the warning recording module stores the data traffic.
[0039] Step S15: Measure the throughput of data traffic for each anomaly category;
[0040] Step S16: Determine whether the throughput of abnormal category data traffic is greater than a preset value;
[0041] Step S17: Delete all information about abnormal category data traffic;
[0042] Step S18: Determine the threat level of the abnormal data traffic based on its category and throughput;
[0043] Step S19: Based on the threat level, the control execution module performs the corresponding operation.
[0044] In step S11, the interception module first identifies the category of the received data traffic. Here, it identifies abnormal data traffic and non-abnormal data traffic. That is, in step S11, it can determine whether the received data traffic is abnormal. If the data traffic identified in step S11 is abnormal, the interception module is controlled to intercept the abnormal data traffic, preventing it from being transmitted to other core components of the air conditioner. If the data traffic identified in step S11 is non-abnormal, that is, normal, meaning it will not affect the core components of the air conditioner, will not cause security problems, and will not cause user privacy leaks, step S13 is executed, prohibiting the interception module from intercepting the non-abnormal data traffic, allowing it to be transmitted normally to the air conditioner so as not to affect the normal interactive function of the air conditioner.
[0045] Further, after step S12, step S14 is executed. After the interception module intercepts abnormal category data traffic, the abnormal category data traffic is transmitted to the warning recording module and stored in the interception storage unit of the warning recording module. Then, step S15 is executed to measure the throughput of each abnormal category data traffic. The extraction storage unit of the warning recording module can extract the flag bits of the abnormal category data traffic and can measure the throughput of the abnormal category data traffic. Throughput usually refers to the amount of data transmitted through network devices (such as routers, switches, servers, or the entire network) within a specific time. It is an important indicator for measuring network performance and is usually measured in bits per second. After the throughput is measured, step S16 is executed.
[0046] In step S16, the extraction storage unit transmits the throughput information of abnormal category data traffic to the threat assessment module. The threat assessment module determines whether the throughput of abnormal category data traffic is greater than a preset value. In step S16, if the determination result is that the throughput of abnormal category data traffic is less than or equal to the preset value, then step S17 is executed, and all information of abnormal category data traffic is deleted from the interception storage unit. When the throughput of abnormal category data traffic is less than or equal to the preset value, it is considered to be a small risk, so it is deleted to reduce any potential threats. The low throughput may not have a significant impact on the air conditioner. Deleting these traffic can free up resources and prevent them from occupying the security protection system. Even if normal category data traffic is mistakenly deleted, its impact is limited due to its low throughput. In step S16, if the determination result is abnormal category... If the throughput of abnormal data traffic exceeds a preset value, it is not advisable to blindly delete abnormal data traffic. Due to the high throughput, it may involve more complex attacks or abnormal behaviors. Directly deleting abnormal data traffic would eliminate the opportunity to analyze the nature and source of the attack, which is crucial for subsequent forensic analysis and preventing future attacks. Abnormal data traffic with high throughput may also be a sudden change in normal data traffic, carrying mixed information, software updates, or network errors. Blindly deleting it might also delete normal data traffic, making it difficult to transmit user interaction information to the air conditioner. Therefore, step S18 is executed. In step S18, the threat level of abnormal data traffic is determined based on its category and throughput. Specifically, the category of abnormal data traffic is determined based on a flag bit, and the threat level is determined based on the correspondence between throughput and threat level within the category, as shown in the table below:
[0047] The table above shows the correspondence between category and throughput for threat levels. The letters in the table are for illustrative purposes only. If the flag of abnormal category data traffic is A, the threat assessment module first classifies it into category A1, and determines its threat level based on the relationship between the actual throughput of abnormal category data traffic and the throughput corresponding to category A1. For example, if the flag of abnormal category data traffic is A and the throughput is a1, the assessed threat level is D1; if the flag of abnormal category data traffic is A and the throughput is a2, the assessed threat level is D2; if the flag of abnormal category data traffic is A and the throughput is a3, the assessed threat level is D3.
[0048] Similarly, if the flag bit of the abnormal category data traffic is B, the threat assessment module first classifies it into category B1, and determines its threat level based on the relationship between the actual throughput of the abnormal category data traffic and the throughput corresponding to category B1. For example, if the flag bit of the abnormal category data traffic is B and the throughput is b1, the assessed threat level is F1; if the flag bit of the abnormal category data traffic is B and the throughput is b2, the assessed threat level is F2; if the flag bit of the abnormal category data traffic is B and the throughput is b3, the assessed threat level is F3.
[0049] It should be noted that this invention does not impose any restrictions on the number of flag bits in the correspondence between category and throughput threat level, or on the number of threat levels. a1, a2, a3, b1, b2, and b3 can be a single value or represent a range. Those skilled in the art can set them according to the actual situation.
[0050] After step S18, based on the threat level obtained by the threat assessment module, corresponding operations are performed. For example, if the threat level is Level 1, the control execution module provides backup false information; if the threat level is Level 2, the control execution module issues a prompt; if the threat level is Level 3, the control execution module performs an alarm operation. It should be noted that the control execution module may include only the three levels mentioned above, or it may include the six levels in the table in addition to the three levels, or it may include more levels. Those skilled in the art can set the specific levels and the processing operations of the execution modules corresponding to the levels according to the actual situation. Due to the different level settings and different processing operations, the execution module may involve the operation of multiple components. Those skilled in the art can set the execution components of the execution module themselves.
[0051] For example, if the threat level is level four, which means that normal data traffic is mistakenly identified as abnormal data traffic, then the execution module corresponding to level four is the interception storage unit. The interception storage unit can then transmit this data traffic normally to the air conditioner so that the air conditioner can respond.
[0052] It should be noted that the terms "first," "second," "third," and "fourth" in this invention are used for descriptive purposes only and should not be construed as indicating or implying relative importance.
[0053] In another preferred embodiment of the security protection system, the interception module is configured to detect both the data traffic received from outside the air conditioner and the data traffic transmitted inside the air conditioner in real time. If the detected data traffic is of an abnormal type, the protection control is performed according to the protection methods of steps S12, S14, S15, S16, S17, S18 and S19.
[0054] In a third aspect, the present invention also claims an air conditioner that includes a safety protection system for the air conditioner described in any of the above embodiments, and the safety protection system is configured to perform the protection method described in any of the above embodiments.
[0055] Furthermore, the interception module, warning recording module, threat assessment module, and execution module of the present invention do not require additional controllers. The interception module can automatically identify and judge the interception, and automatically transmit the intercepted traffic to the warning recording module. The warning recording module can automatically store the data traffic and extract the flag bits and throughput information. The warning recording module automatically transmits the flag bits and throughput information to the threat assessment module. The threat assessment module automatically determines the level based on the received information and transmits it to the corresponding execution module, so that the execution module can perform the matching operation.
[0056] In summary, this invention provides real-time monitoring of data traffic entering the security protection system, ensuring user information security; it divides the security protection system into multiple independent modules, reducing coupling between modules; it alleviates the blocking pressure on the threat assessment module, preventing the security protection system from causing excessively long delays for users; and it performs different operations for different threat levels, maintaining fault tolerance for access request data traffic.
[0057] The technical solution of the present invention has been described above with reference to the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after such changes or substitutions will all fall within the scope of protection of the present invention.
Claims
1. A safety protection system for an air conditioner, characterized in that, The security protection system includes: an interception module, a warning recording module, a threat assessment module, and an execution module; The interception module is configured to identify and intercept abnormal data traffic received by the air conditioner. The warning recording module is configured to receive and store abnormal category data traffic intercepted by the interception module; The threat assessment module is configured to assess the threat level of each abnormal category of data traffic individually. The execution module is configured to perform corresponding operations based on the assessment results of the threat assessment module.
2. The security protection system according to claim 1, characterized in that, The warning recording module includes an interception storage unit and an extraction storage unit. The interception storage unit can receive and store the abnormal category data traffic intercepted by the interception module; The extraction and storage unit can extract the flag bits of abnormal category data traffic and measure the throughput of abnormal category data traffic, and store the extracted flag bits and throughput information; The threat assessment module can assess the threat level of each abnormal category of data traffic by analyzing its flags and throughput.
3. A protection method for an air conditioner, characterized in that, The air conditioner includes a safety protection system, which includes an interception module and a warning recording module. The interception module is configured to identify and intercept abnormal data traffic received by the air conditioner. The warning recording module is configured to receive and store the abnormal data traffic intercepted by the interception module. When the air conditioner receives data traffic, the protection method includes: Determine the type of data traffic received; Based on the category of data traffic, the interception module is selectively controlled to intercept the data traffic. After the interception module intercepts the data traffic, it controls the warning recording module to store the data traffic.
4. The protection method according to claim 3, characterized in that, The step of "selectively controlling the interception module to intercept the data traffic according to the category of the traffic volume" specifically includes: If the data traffic is classified as an abnormal category, the interception module is controlled to intercept the abnormal data traffic.
5. The protection method according to claim 4, characterized in that, The step of "selectively controlling the interception module to intercept the data traffic according to the category of the traffic volume" further includes: If the data traffic is classified as a non-abnormal category, the interception module is prohibited from intercepting the non-abnormal category data traffic.
6. The protection method according to claim 3, characterized in that, The security protection system also includes a threat assessment module and an execution module. The threat assessment module is configured to assess the threat level of each abnormal category of data traffic. The execution module is configured to perform corresponding operations based on the assessment results of the threat assessment module. The protection method includes: Throughput measurements were performed on the data traffic for each anomaly category. Determine whether the throughput of abnormal data traffic exceeds a preset value; If the throughput of abnormal category data traffic is greater than the preset value; The threat level is then determined based on the category and throughput of the abnormal data traffic. Based on the threat level, the execution module is controlled to perform corresponding operations.
7. The protection method according to claim 6, characterized in that, The protection method includes: If the throughput of abnormal category data traffic is less than or equal to a preset value, then all information of the abnormal category data traffic is deleted.
8. The protection method according to claim 6, characterized in that, The steps to "determine the threat level based on the category and throughput of the abnormal data traffic" specifically include: The category of abnormal data traffic is determined based on the flag bits, and the threat level is determined based on the correspondence between throughput and threat level in the category.
9. The protection method according to claim 6, characterized in that, The steps of "controlling the execution module to perform corresponding operations according to the threat level" specifically include: If the threat level is Level 1, the control execution module will feed back backup false information; And / or, if the threat level is level two, the control execution module issues a prompt; And / or, if the threat level is level three, the control execution module will perform an alarm operation.
10. An air conditioner, characterized in that, The air conditioner includes the safety protection system of the air conditioner as described in claim 1 or 2. Furthermore, the security protection system is capable of performing the protection method as described in any one of claims 3 to 9.