Multi-band intelligent wireless safety protection equipment, system and method

Abstract

The invention discloses a multi-band intelligent wireless safety protection device, system and method, and belongs to the field of wireless communication safety. The device comprises a main control module, a multi-band radio frequency front end module, an antenna array, a signal monitoring module, a power amplification module and a storage module. The main control module is configured to automatically scan an environment signal and adaptively adjust power based on a scanning result; air interface clock synchronization is realized by analyzing PSS / SSS of a public network LTE signal, and dependence of an external synchronization source is eliminated; controlling the multi-band radio frequency front end to transmit a shielding signal under time sequence synchronization; a feature matching and behavior analysis two-dimensional mechanism is adopted to identify intrusion in real time and give an alarm; and implementing authority management, operation locking and security auditing. According to the invention, multi-frequency-band synchronous shielding, power self-adaption, intelligent intrusion identification and integrated safety management are realized, the problems of incomplete frequency band coverage, complex configuration and lack of active protection capability of existing equipment are solved, and the system is suitable for various scenes such as secret-related places, examination centers and the like.

Description

A multi-band intelligent wireless security protection device, system and method Technical Field

[0001] This invention relates to the field of wireless communication security technology, and in particular to a multi-band intelligent wireless security protection device, system and method, which is applicable to scenarios with strict control requirements for wireless signals, such as confidential locations, examination centers, corporate office areas, and computer rooms. It is used to achieve simultaneous shielding, real-time monitoring, intrusion identification and security auditing of multiple wireless signals such as WiFi, 2G / 3G / 4G / 5G and Bluetooth. Background Technology

[0002] With the rapid development of wireless communication technology, Wi-Fi, 2G / 3G / 4G / 5G, and Bluetooth are widely used in various scenarios, but they also bring security risks such as information leakage and signal interference. In certain specific locations, such as confidential conference rooms, national examination centers, and financial data centers, it is necessary to effectively shield wireless signals in specific areas to prevent information from being leaked or stolen wirelessly.

[0003] The main problems with current wireless signal jamming devices on the market are as follows: 1. Incomplete frequency band coverage and device stacking: Most jamming devices are designed for only a single or limited frequency band. When protection against multi-frequency signals is required, multiple devices with different frequency bands need to be deployed, resulting in high hardware costs, large space occupation, and difficulties in coordination between multiple devices, leading to high management complexity.

[0004] 2. Fixed power and lack of adaptability: Traditional equipment has a fixed output power or a narrow adjustment range (usually less than 25dB), which cannot be flexibly adjusted according to the size, shape and environmental signal strength of the protected space, which can easily lead to insufficient shielding or excessive power waste.

[0005] 3. Limited functionality and lack of intelligent monitoring: Most devices only have passive shielding capabilities and lack real-time signal monitoring and intrusion detection mechanisms, making it difficult to detect new malicious signals such as fake base stations and illegal hotspots, resulting in serious lag in security protection.

[0006] 4. Complex configuration, reliant on manual operation and external sources: Equipment deployment requires professional technicians to manually configure parameters such as operating frequency and power, which is time-consuming and prone to errors. Furthermore, to achieve multi-band signal synchronization, external synchronization sources such as GPS are often required, limiting deployment in indoor or signal-obstructed environments.

[0007] 5. Insufficient management security: There is a lack of strict access control and operation auditing functions, which poses a risk of unauthorized operations and makes it impossible to effectively trace security incidents afterward.

[0008] Therefore, there is an urgent need for a wireless security protection solution that can achieve multi-band synchronous shielding, adaptive power adjustment, intelligent monitoring and identification capabilities, and is easy to deploy and manage. Summary of the Invention

[0009] This invention aims to overcome the shortcomings of existing technologies and solve the problems of traditional wireless shielding devices, such as difficulty in multi-band coverage, inflexible power adjustment, lack of intelligent monitoring, complex configuration management, and reliance on external synchronization sources. It provides an integrated, intelligent, adaptive, and efficient wireless security protection solution.

[0010] To achieve the above objectives, the present invention provides the following technical solution: In a first aspect, the present invention provides a multi-band intelligent wireless security protection device, comprising: a main control module; and a core control unit as the device.

[0011] The multi-band radio frequency front-end module includes independent WiFi radio frequency units, 2G / 3G / 4G / 5G radio frequency units, and Bluetooth radio frequency units. Each radio frequency unit is equipped with an independent oscillator, filter, and power amplifier. A broadband omnidirectional antenna array includes a receiving antenna for receiving environmental signals and a transmitting antenna for transmitting shielded signals, physically separated by an electromagnetic isolation shielding layer to avoid inter-band interference. A signal monitoring module integrates a high-performance spectrum analysis chip for real-time acquisition and analysis of the frequency band, power, MAC address, and protocol type characteristics of wireless signals in the environment. A power amplification module, connected to the output of each radio frequency unit, amplifies the shielded signals, with an output power adjustment range of no less than 29dB and adjustment steps of 1dB. A storage module stores audit logs, configuration parameters, whitelists, and an intrusion signal signature database.

[0012] The main control module is configured to perform the following core functions: signal feature extraction and analysis: based on the input of the signal monitoring module, perform signal feature extraction and analysis; intelligent configuration: automatically perform environmental signal scanning, and based on the scanning results and preset models, adaptively adjust the output power of the power amplifier module, and achieve system clock synchronization by analyzing public network signals; based on the analysis results, perform intrusion behavior identification and alarm triggering; implement authentication-based access control, operation timeout locking, and security event audit log recording.

[0013] Furthermore, the method of achieving system clock synchronization by analyzing public network signals includes: capturing the primary synchronization signal PSS and secondary synchronization signal SSS in the public network 4G or 5G LTE signals through the signal monitoring module, extracting the clock reference using the Costas loop phase-locked loop algorithm, and generating a local synchronization clock signal to be distributed to the multi-band radio frequency front-end module and the main control module.

[0014] Further, an electromagnetic isolation shielding layer is provided between the frequency band units in the multi-band RF front-end module. The main control module further includes a timing synchronization control circuit for uniformly coordinating the startup timing and signal transmission timing of each RF unit to eliminate inter-band interference.

[0015] Further, the intrusion recognition adopts a two-dimensional recognition mechanism: Feature matching dimension: Compare the signal features collected in real time with the preset intrusion signal feature library. When the matching degree ≥ 95%, it is determined as an intrusion signal; Behavior analysis dimension: Monitor sudden changes in signal strength (increase ≥ 30dBm within 10 seconds), frequent MAC address changes (change ≥ 3 times within 1 minute), or unauthorized protocol interaction behaviors. Triggering an intrusion determination when any abnormal rule is met; Among them, the alarm response time is less than 800 milliseconds.

[0016] Further, automatically perform environmental signal scanning and adaptively adjust the output power. After the device is powered on, the following process is automatically executed: The control signal monitoring module scans the full-band signals; Based on the preset scenario adaptation model and power-distance mapping relationship, calculate the optimal shielding parameters for each frequency band through the fuzzy PID algorithm; Automatically issue configuration instructions to complete full-automatic parameter configuration. The time from power-on to readiness is less than 75 seconds.

[0017] In a second aspect, the present invention provides a distributed wireless security protection system, including: a central server, and a plurality of wireless security protection nodes communicatively connected thereto; The node is the device described in the first aspect, serving as a distributed acquisition and execution probe; The central server is configured to: centrally analyze the data uploaded by each node, uniformly issue a collaborative shielding strategy, and achieve multi-region linkage protection. The system may further include a mobile management APP for remote monitoring and management.

[0018] In a third aspect, the present invention provides a multi-band wireless security protection method, applied to the device described in the first aspect, including: S1: After power-on initialization, automatically scan the full-band wireless signals in the environment; S2: Extract the synchronization signal from the public network LTE signal through the air interface synchronization technology, and use the Costas loop phase-locked algorithm to restore the clock reference to achieve full-system timing synchronization; S3: Based on the scanning results and the preset model, adaptively calculate and configure the shielding power and frequency points of each frequency band through the fuzzy PID algorithm; S4: Real-time monitor the environmental signals, and combine the two-dimensional recognition of feature matching and behavior analysis to identify intrusion behaviors; S5: Trigger an alarm when an intrusion is determined, and record security events at the same time; S6: Execute permission management based on identity authentication and operation timeout locking.

[0019] Compared with the prior art, the beneficial effects of the present invention are: 1. Multi-band integrated synchronous shielding: Through independent RF front-end design, physical isolation layer and main control timing synchronization control, efficient and interference-free synchronous shielding of multi-band signals such as WiFi, 2G / 3G / 4G / 5G, and Bluetooth is achieved, solving the cost and management problems caused by multi-device deployment.

[0020] 2. Power Adaptive and Wide-Area Coverage: The power amplifier module has a wide range and high precision (1dB step) adjustment capability of ≥29dB. Combined with an adaptive algorithm based on environmental scanning, it can flexibly optimize the shielding effect according to the size of the space. In an unobstructed environment, the shielding distance for operator mobile signals is no less than 28 meters, balancing effectiveness and energy efficiency.

[0021] 3. Intelligent proactive security protection: It adopts a two-dimensional intrusion identification mechanism of "feature database matching + abnormal behavior analysis", which has a high identification accuracy (≥99.2%) and fast response speed (<800ms). It can proactively detect threats such as fake base stations and illegal hotspots, turning passive shielding into proactive protection.

[0022] 4. High degree of automation and easy deployment: The device takes less than 75 seconds to go from power-on to ready, and the initial deployment and configuration time is reduced from more than 30 minutes to less than 5 minutes, requiring no professional knowledge.

[0023] 5. Eliminate external synchronization dependence: Innovative air interface synchronization technology generates a local clock by capturing and locking the synchronization signal (PSS / SSS) of the public network LTE signal, eliminating the need for external synchronization sources such as GPS and broadening the applicable scenarios for the device. Flexibility is increased by over 60%.

[0024] 6. Comprehensive security management system: It integrates hierarchical access control, custom timeout locking, and full audit log functions, effectively preventing unauthorized operations, improving equipment operation security by more than 80%, and significantly improving management efficiency. Attached Figure Description

[0025] The accompanying drawings are provided to further illustrate the invention and form part of the specification. They are used together with the embodiments of the invention to explain the invention and do not constitute a limitation thereof.

[0026] Figure 1 is a hardware system architecture block diagram of a multi-band intelligent wireless security protection device provided in an embodiment of the present invention.

[0027] Figure 2 is a functional module structure diagram of a device provided in an embodiment of the present invention. Detailed Implementation

[0028] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0029] Example 1: As shown in Figure 1, the integrated multi-band intelligent wireless security protection device of the present invention has a main control module as the core and is connected to a multi-band radio frequency front-end module, a broadband omnidirectional antenna array, a signal monitoring module, a power amplification module and a storage module.

[0030] Main control module: It adopts a high-performance embedded processor (such as the ARM Cortex-A series) and is responsible for overall control, algorithm operation and logic scheduling.

[0031] Multi-band RF front-end module: This module adopts a multi-channel independent design.

[0032] WiFi RF unit: Covers 2.4GHz & 5.8GHz ISM bands, with built-in oscillator, bandpass filter and driver amplifier.

[0033] Cellular communication radio frequency unit: covering 2G / 3G / 4G / 5G operator frequency bands from 700MHz to 3.5GHz, and also includes independent oscillator chain and filter amplifier circuit.

[0034] Bluetooth radio frequency unit: covers the 2.4GHz band.

[0035] Each unit is separated by an electromagnetic isolation shielding layer made of copper foil, and sufficient spacing is ensured in the PCB layout to suppress mutual interference.

[0036] Antenna array: It adopts a broadband omnidirectional antenna, including a high-sensitivity receiving antenna and a high-power transmitting antenna.

[0037] Signal monitoring module: Integrates a high-performance spectrum analysis chip (such as ADI's AD9361), continuously collects ambient radio frequency signals through the receiving antenna, performs Fast Fourier Transform (FFT) analysis, and outputs characteristic information such as frequency band, center frequency, power, and modulation type of the signal in real time. It can also obtain higher-level information such as MAC address and protocol type through decoding.

[0038] In the power adaptive adjustment module, the inputs of the fuzzy PID controller include the signal strength of each frequency band, the target shielding distance, and the ambient noise level. The output is the gain control value of the power amplification unit of each frequency band. Fast convergence is achieved through table lookup and iterative calculation.

[0039] Power Amplifier Module: Employs a power amplifier array based on GaN (Gallium Nitride) devices, with an independent power amplifier unit following each RF channel. The main control module controls its gain via a digital attenuator, achieving linear adjustment within the range of 0-32dBm (≥29dB) with a step accuracy of 1dB.

[0040] Storage module: Employs eMMC flash memory to store system programs, intrusion signal feature library (pre-stored signal fingerprints of fake base stations and illegal hotspots), whitelist, audit logs (recording all operations and alarm events), and configuration parameters (such as scene models and power-distance mapping tables).

[0041] The main control module runs an embedded operating system and the core software logic of this invention, and is configured to perform the following functions: 1. Intelligent configuration and synchronization: After the device is powered on, the power module supplies power to each hardware module, and the main control module immediately starts the automatic configuration process. First, the control signal monitoring module quickly scans the full-band signals (from 700MHz to 6GHz) in the environment to obtain the signal spectrum of the current space.

[0042] Air Interface Synchronization: Simultaneously, the signal monitoring module locks onto a 4G / 5G LTE public network signal with optimal signal quality and extracts the primary synchronization signal (PSS) and secondary synchronization signal (SSS) through its built-in quadrature demodulator. A high-precision 10MHz local clock reference is recovered using the Costas loop phase-locked loop algorithm. This clock signal is distributed via the FPGA to the DAC / ADC of each RF front-end module and the main control module, ensuring that the timing synchronization error of the entire system is less than ±50ns. This ensures that the operating timing of the entire device is strictly synchronized with the public network base station, eliminating the need for a GPS module.

[0043] Power Adaptive Calculation: The main control module has a built-in scene adaptation model (e.g., different shielding strength strategies are preset for "conference room", "computer room", "open examination room") and a power-distance mapping model. Combining the spectral intensity obtained from the scan and the target shielding distance (e.g., 28 meters), and the pre-stored "power-distance mapping table" (e.g., 28 meters corresponds to an EIRP of 27 dBm), a fuzzy PID control algorithm is used to dynamically calculate the optimal transmit power and precise operating frequency required for each frequency band, so as to minimize power consumption and avoid excessive interference to legitimate signals while ensuring the shielding effect.

[0044] During equipment operation, the signal analysis engine continuously works, analyzing environmental signals in real time. The alarm engine compares the extracted features with the whitelist and intrusion signature database in the storage module and monitors for abnormal behavior. Once an intrusion is detected, an audible and visual alarm is immediately triggered, and the event information (type, time, characteristics, and level) is stored in the audit log.

[0045] The configuration management engine authenticates all user actions, allowing only authorized administrators to modify critical configurations. If a user remains inactive for a set period (e.g., 60 minutes), the interface will automatically lock to prevent unauthorized access.

[0046] Actual measurements show that in a standard open area, the shielding radius of this device against 4G LTE signals reaches 28.3 meters (terminal receiving power ≤ -85dBm), and the time from power-on to full-band readiness is 72 seconds, fully meeting the design specifications.

[0047] 2. Synchronous shielding transmission: The timing synchronization control circuit of the main control module generates precise trigger pulses to ensure that the three radio frequency front-end units of WiFi, cellular and Bluetooth can start and transmit shielding signals simultaneously within microsecond error according to the synchronized clock.

[0048] The shielding signal is a modulated broadband noise signal or a shielding signal of a specific format, which is amplified by a power amplifier module and then radiated by the transmitting antenna. Due to the physical isolation and timing synchronization of each frequency band unit, efficient and clean multi-band synchronous shielding is achieved. Tests show that in open environments, the shielding radius for 4G / 5G signals can stably reach over 28 meters.

[0049] 3. Real-time monitoring and intrusion detection: While shielding, the receiving antenna and signal monitoring module continue to work to monitor residual or newly emerging signals within the protected area.

[0050] The main control module's signal analysis engine performs real-time analysis of the monitoring data and extracts signal features (such as fingerprint features).

[0051] The alarm engine performs two-dimensional intrusion detection: Feature matching: Extracted features are compared with an intrusion signal feature library stored in the module to calculate similarity. The feature library includes frequency band offset features of known fake base stations, specific broadcast identifiers (such as fake MNC / MCC), SSID naming patterns of illegal hotspots, and forged MAC address prefixes. When the matching degree reaches 95%, it is determined to be a known threat. Extensive experimental verification shows that this threshold can achieve a high detection rate while maintaining a low false alarm rate (<0.8%).

[0052] Behavioral Analysis: Monitors abnormal dynamic behavior of signals. Rules include: a sudden increase in signal strength of more than 30dBm within 10 seconds (potentially indicating an approaching attacking device); the MAC address of the same signal source changing more than 3 times within 1 minute (suspected MAC address spoofing); and the capture of protocol packets attempting unauthorized handshakes with the internal network (such as specific ARP requests or non-standard port connection attempts). Meeting any of these behavioral rules triggers a judgment.

[0053] Once an intrusion is detected, the system immediately triggers an alarm (a pop-up window appears in the management interface and can activate an audible and visual alarm), with an alarm response delay of less than 800 milliseconds. Simultaneously, detailed information about the intrusion event (type, time, signal characteristics, threat level) is sent to the audit log.

[0054] 4. Security Management and Auditing: The configuration management engine provides hierarchical access control based on username / password or digital certificate. Only users with "administrator" privileges can modify device configurations, update whitelists, or access the intrusion signature database.

[0055] The timeout lockout feature allows administrators to customize the lockout period for inactivity (range 10-120 minutes). If a user does not perform any operation within the specified time, the system will automatically lock the management interface. Re-operation requires identity verification. The lockout trigger accuracy is ±1 minute.

[0056] The audit log engine records and stores all critical events, including user login / logout, configuration changes, all triggered intrusion alerts (regardless of level) and their details, system errors, etc., in a structured format (such as JSON) in the storage module. Logs support querying, exporting, and statistical analysis by time, event type, keywords, etc., facilitating post-incident traceability and security review.

[0057] Users can access the debugging management module through the device's built-in web management interface or serial port command-line interface to view real-time status, adjust parameters, and manage whitelists and feature libraries.

[0058] Example 2: Distributed wireless security protection system. For scenarios such as large parks and multi-story buildings, a distributed system architecture can be adopted.

[0059] Multiple wireless security protection nodes are deployed at several key points in the area requiring protection. Each node is the device described in Example 1, but its main control module's complex functions such as intelligent analysis and policy generation can be partially simplified, mainly responsible for signal acquisition, shielding execution, and communication with the center.

[0060] All nodes are connected to a central server via Ethernet or 5G networks, uploading the collected environmental signal data in real time or periodically.

[0061] The central server centrally runs a powerful signal analysis engine, intelligent configuration engine, alarm engine, and configuration management engine. The server has a global view, comprehensively analyzing data from all nodes, identifying cross-regional mobile threats, and uniformly distributing optimized collaborative shielding strategies. For example, when a node detects a strong intrusion signal, the server can instruct surrounding nodes to temporarily increase their shielding power, forming a locally enhanced protection zone.

[0062] Administrators can view the operating status of any device, real-time alarm list, and complete audit logs anytime, anywhere through the central server console or through a mobile management APP (running on a mobile phone or tablet). They can also remotely update the whitelist or adjust the blocking policy and intrusion signature database, greatly improving the convenience of management in unattended scenarios.

[0063] Example 3: Multi-band wireless security protection method Based on the device in Example 1, the protection method process is shown in Figure 2, which mainly includes the following steps: 1. Power-on and automatic scanning: The device is powered on, the hardware is initialized, and then the full-band environmental signal scanning is automatically started.

[0064] 2. Air Interface Synchronization and Clock Establishment: The PSS / SSS synchronization signal is captured from the scanned public network LTE signal, and the system master clock is generated using the Costas loop phase-locked algorithm to achieve timing synchronization with the public network.

[0065] 3. Intelligent Parameter Calculation and Configuration: Combining scan data, a preset scene model, and power-distance relationships, a fuzzy PID algorithm is used. The fuzzy PID takes environmental signal strength and target shielding distance as input and outputs the optimal transmit power for each frequency band. The membership function is constructed based on the preset scene model. The optimal operating parameters for each frequency band are calculated, and the device configuration is completed automatically.

[0066] 4. Synchronous shielded transmission: Under unified timing control, each radio frequency unit synchronously transmits shielded signals with adjusted power.

[0067] 5. Continuous monitoring and feature extraction: During shielding operations, environmental signals are continuously received and analyzed and features are extracted in real time.

[0068] 6. Two-dimensional intrusion identification and alarm: Extracted features are matched with the feature database and signal behavior is analyzed. The intrusion behavior is judged comprehensively from two dimensions, and an alarm is triggered immediately once confirmed.

[0069] 7. Security Management and Log Recording: Implement full access control and automatically lock the interface after no operation timeout; and record all security events and operations in the audit log.

[0070] Technical Performance Test Data Table: Specific Parameters and Test Conditions: 2G Signal Shielding Depth ≤ -88dBm, Open Environment, Distance 28 meters; 3G Signal Shielding Depth ≤ -86dBm, Open Environment, Distance 28 meters; 4G Signal Shielding Depth ≤ -85dBm, Open Environment, Distance 28 meters; 5G Sub-6GHz Signal Shielding Depth ≤ -82dBm, Open Environment, Distance 28 meters; WiFi (2.4GHz / 5GHz) Shielding Depth ≤ -87dBm, Open Environment, Distance 28 meters; Bluetooth Signal Shielding Depth ≤ -89dBm, Open Environment, Distance 28 meters; Power Adjustment Range 0-32dBm (≥29dB), Full Frequency Band Range; Power Adjustment Accuracy 1dB Step, Full Frequency Band Range; Signal Recognition Accuracy ≥ 99.2%; Alarm Response Time for 12 Common Intrusion Signals (including fake base stations, illegal hotspots, etc.) < 800ms; Time from Intrusion Recognition to Alarm Triggering to Power-On Ready < 75 seconds. Automatic configuration mode in seconds, no manual intervention required, air interface synchronization success rate ≥ 99.5%, continuous operation stability in environments with public 4G / 5G signal coverage ≥ 1000 hours of fault-free operation, powered by normal temperature (0-45℃) and rated voltage, access control verification response time < 500ms, administrator login verification timeout lock trigger accuracy ± 1 minute, customizable no-operation timeout time (10-120 minutes). This table illustrates that: 1. The device possesses comprehensive and effective shielding capabilities. At a distance of 28 meters in an open environment, it can suppress the signal strength of all mainstream wireless signals (2G / 3G / 4G / 5G / WiFi / Bluetooth) to an extremely low level of -82dBm to -89dBm. This depth is far below the threshold required for normal mobile phone communication (typically > -70dBm), meaning that terminal devices cannot normally access public or local area networks within this range, achieving effective shielding.

[0071] 2. The equipment features high-precision, wide-range power control capabilities. Output power can be adjusted within a range of ≥29dB (e.g., from 0dBm to 32dBm), with a minimum increment of 1dB. This allows the equipment to precisely adapt to different space sizes (e.g., small conference rooms vs. large examination rooms), avoiding power waste or insufficient shielding.

[0072] 3. The equipment has fast and accurate intelligent security perception capabilities with a signal recognition accuracy rate of ≥99.2%: it can distinguish legitimate signals from 12 types of typical intrusion signals (such as fake base stations and illegal hotspots) with high precision; alarm response time <800ms: it takes less than 1 second from the detection of a threat to the issuance of an alarm, achieving near real-time protection.

[0073] 4. The equipment is extremely easy to deploy and highly automated. The power-on to readiness time is less than 75 seconds: No manual configuration of parameters such as frequency and power is required. After power-on, it automatically completes full-band scanning and optimal strategy deployment, which greatly reduces the threshold for use.

[0074] 5. Strong equipment synchronization capability and stable and reliable operation with an air interface synchronization success rate of ≥99.5%: In areas with public network signal coverage, the clock reference can almost always be successfully extracted to achieve full system synchronization without external synchronization sources; continuous fault-free operation for ≥1000 hours: This proves that the equipment has industrial-grade stability and is suitable for long-term operation scenarios.

[0075] 6. The equipment operation safety mechanism is comprehensive, with fast access control (<500ms) and accurate timeout locking (±1 minute) to prevent unauthorized operations and meet the management requirements of high-security locations.

[0076] Compared with existing technologies: Existing Technology A (Single-band Wireless Jammer) vs. Existing Technology B (Multi-band AP with Basic Monitoring) This invention supports multi-band synchronous jamming but only supports a single band (e.g., WiFi or 2G / 3G), not multi-band synchronization. It supports multi-band monitoring but has no jamming function. It supports WiFi, 2G / 3G / 4G / 5G, and Bluetooth multi-band synchronous jamming, providing complete coverage. Its power adjustment range is narrow (typically 10-20dBm) and has low accuracy (2-3dB steps). It has no jamming power adjustment function. Its adjustment range is ≥29dBm (0-32dBm), with 1dB high-precision steps, adaptable to different spaces. Automatic air interface synchronization is not available; manual frequency setting is required, and it is easily affected by changes in public network signals. It does not involve jamming synchronization, relying solely on its own clock. It supports capturing public network 4G / 5G signals to achieve air interface synchronization without an external synchronization source, providing strong anti-interference capabilities and intrusion behavior recognition. It has no monitoring or... Intrusion detection function: Passive shielding based solely on MAC address blacklist filtering, lacking feature matching and behavior analysis. Based on "feature database matching + abnormal behavior monitoring + protocol analysis," the accuracy rate is ≥99.2%. Automatic configuration requires manual setting of frequency and power; no automatic configuration function, only supports basic network parameter automatic configuration, no shielding parameter configuration. Automatic scanning, parameter calculation, and deployment upon startup, configuration time <75 seconds, no professional knowledge required. Security management function: No access control, no audit logs, no timeout lockout. Basic access control, no audit logs and timeout lockout. Hierarchical access control, full audit logs, custom timeout lockout, safe and controllable operation. Multi-scenario adaptability: Only suitable for a single scenario (e.g., small office area), limited shielding distance (<15 meters). Primarily suitable for office network coverage, no shielding capability. Suitable for enterprises, confidential locations, computer rooms, examination centers, etc., with unobstructed shielding distance up to 28 meters. This table illustrates: 1. The comparison object, prior art A, is clearly defined: representing a traditional single-band wireless signal jammer (single-function, passive, manual).

[0077] Existing technology B: represents multi-band wireless access points (APs) or probe devices with basic monitoring capabilities (capable of monitoring but not shielding).

[0078] These two categories cover the most common related product forms on the market and are representative and comparable.

[0079] 2. The table systematically presents the innovation dimensions of this invention, comparing seven key technical dimensions: multi-band synchronous shielding, power regulation capability, air interface synchronization mechanism, intrusion detection capability, automatic configuration capability, security management function, and multi-scenario adaptability. This corresponds precisely to all the technical problems that this invention aims to solve, forming a complete logical closed loop of "problem-solution-effect".

[0080] 3. Use differentiated language to highlight the "qualitative leap" for existing technologies: use expressions such as "only supports", "no... function", "low accuracy", "requires manual operation" to point out their limitations or deficiencies; for this invention: use expressions such as "supports... synchronous shielding", "high-precision stepping", "automatic scanning / calculation / deployment", "identification accuracy ≥99.2%", "operation is safe and controllable" to emphasize its integration, intelligence and reliability.

[0081] 4. Providing direct evidence of patent "inventiveness": This table directly lists all distinguishing features and proves that the combination of these features produces a synergistic technical effect (e.g., precise shielding, intelligent identification, and automatic deployment), far exceeding the simple superposition of A and B, thus strongly supporting "non-obviousness".

[0082] 5. This invention strengthens the "irreplaceability" of the invention. Existing technology A can shield but is not intelligent or comprehensive; existing technology B can monitor but cannot shield; only the invention possesses the three-in-one capability of "active perception + precise shielding + intelligent management", filling a market gap.

[0083] Finally, it should be noted that the above descriptions are merely preferred embodiments of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments or make equivalent substitutions for some of the technical features. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A multi-band intelligent wireless security protection device, characterized in that, include: Main control module; The multi-band radio frequency front-end module includes independent WiFi radio frequency units, 2G / 3G / 4G / 5G radio frequency units, and Bluetooth radio frequency units. Each radio frequency unit is equipped with an independent oscillator, filter, and power amplifier. A broadband omnidirectional antenna array includes a receiving antenna for receiving environmental signals and a transmitting antenna for transmitting shielded signals. A signal monitoring module integrates a spectrum analysis chip for real-time acquisition and analysis of the frequency band, power, MAC address, and protocol type of wireless signals in the environment. A power amplification module is connected to the output of each radio frequency unit, with an output power adjustment range of not less than 29dB and an adjustment step of 1dB. A storage module stores audit logs, configuration parameters, whitelists, and an intrusion signal feature database. The main control module is configured to perform the following functions: extracting and analyzing signal features based on the input of the signal monitoring module; automatically performing environmental signal scanning and adaptively adjusting the output power of the power amplification module based on the scan results and a preset model; and synchronizing the system clock by analyzing public network signals. Based on the analysis results, intrusion behavior is identified and alarms are triggered. Implement authentication-based access control, operation timeout locking, and security event audit logging.

2. The multi-band intelligent wireless security protection device according to claim 1, characterized in that, The method of achieving system clock synchronization by analyzing public network signals includes: capturing the primary synchronization signal PSS and secondary synchronization signal SSS in the public network 4G or 5G LTE signals through the signal monitoring module, extracting the clock reference using the Costas loop phase-locked algorithm, and generating a local synchronization clock signal to be distributed to the multi-band radio frequency front-end module and the main control module.

3. The multi-band intelligent wireless security protection device according to claim 1, characterized in that, The multi-band radio frequency front-end module is provided with an electromagnetic isolation shielding layer between each frequency band unit. The main control module also includes a timing synchronization control circuit, which is used to coordinate the start-up timing and signal transmission timing of each radio frequency unit.

4. The multi-band intelligent wireless security protection device according to claim 1, characterized in that, The intrusion identification adopts a two-dimensional identification mechanism: Feature matching dimension: The real-time collected signal features are compared with the preset intrusion signal feature library. When the matching degree is ≥95%, it is determined to be an intrusion signal. The feature library includes the frequency band range, signal format, and identification features of fake base stations, as well as the unauthorized SSID and MAC address features of illegal hotspots; Behavioral analysis dimension: Monitor signal strength sudden changes (≥30dBm increase within 10 seconds), frequent changes in MAC address (≥3 changes within 1 minute), or unauthorized protocol interaction behavior. If any abnormal rule is met, an intrusion determination is triggered. The alarm response time is less than 800 milliseconds.

5. The multi-band intelligent wireless security protection device according to claim 1, characterized in that, The device automatically performs environmental signal scanning and adaptively adjusts output power. After power-on, it automatically executes the following process: the control signal monitoring module scans the entire public network frequency band to obtain the signal strength and distribution of each frequency band; based on the preset scenario adaptation model and power-distance mapping relationship, it calculates the optimal shielding frequency and output power for each frequency band using a fuzzy PID algorithm; and it automatically sends configuration commands to the RF front-end module and power amplifier module to complete fully automatic parameter configuration. The time from power-on to readiness is less than 75 seconds, requiring no manual intervention.

6. The multi-band intelligent wireless security protection device according to claim 1, characterized in that, The implementation of authentication-based permission management and operation timeout locking includes: supporting hierarchical permission management, allowing only authorized administrators to modify configurations or manage whitelists; and having a custom timeout locking function, automatically locking the operation interface when the user has no operation within a set time (10-120 minutes), with a locking trigger accuracy of ±1 minute.

7. The multi-band intelligent wireless security protection device according to claim 1, characterized in that, The security event audit log records include: complete records of security events, alarm information, configuration changes and user operation behaviors, and are stored in the storage module to support post-event traceability and review.

8. A distributed wireless security protection system, characterized in that, include: A central server, and multiple wireless security protection nodes that are communicatively connected to the central server; the wireless security protection nodes are multi-band intelligent wireless security protection devices as described in any one of claims 1-7, which serve as distributed acquisition and execution probes; the central server is configured to: receive and centrally analyze environmental signal data uploaded by each node, and uniformly issue collaborative shielding strategies to coordinate multiple nodes to achieve multi-area linkage protection.

9. The distributed wireless security protection system according to claim 8, characterized in that, It also includes a mobile management app, which allows authorized administrators to remotely view device status, real-time alarms and audit logs, and supports remote adjustment of configuration parameters, updating of whitelists and intrusion signal signature databases.

10. A multi-band wireless security protection method, applied to the multi-band intelligent wireless security protection device as described in any one of claims 1-7, characterized in that, Includes the following steps: After power-on initialization, the system automatically scans for full-band wireless signals in the environment. It extracts the primary synchronization signal (PSS) and secondary synchronization signal (SSS) from public 4G or 5G LTE signals using air interface synchronization technology, recovers the clock reference using the Costas loop phase-locked loop algorithm, generates a local synchronization clock signal, and distributes it to all system modules to achieve full system timing synchronization. Based on the scan results and a preset scenario adaptation model and power-distance mapping relationship, it adaptively calculates and configures the shielding power and frequency points for each band using a fuzzy PID algorithm. It monitors wireless signals in the environment in real time, combining feature matching and behavioral analysis dimensions to identify intrusion behavior. When an intrusion is detected, an alarm is triggered, and the security event is recorded. It performs authentication-based access control and automatically locks the user interface after a set time of inactivity.

Images