Data security and network security monitoring device

Abstract

The utility model discloses a data security and network security monitoring device, which belongs to the technical field of internet and cloud computing and big data service, and comprises a back hanging support structure, an edge server, a swing folding arm structure, a relay connection structure and a cloud monitoring terminal, an edge server and a swinging folding arm structure are adjacently arranged on the side face of the back hanging supporting structure, and the swinging folding arm structure is provided with a swinging connecting arm, a stretching arm and a swinging supporting end part; one end of the swing connecting arm is movably connected to the back hanging supporting structure, the other end of the swing connecting arm is hinged to the stretching arm, and the stretching arm is movably connected with the swing connecting arm in an embedded mode; the swing supporting end part is movably arranged at the other end part of the extension arm relative to the swing connecting arm; the relay connection structure is connected with the swing supporting end and the cloud monitoring terminal. According to the utility model, the technical problem of how to improve the installation convenience of the industrial internet equipment accessed to cloud computing is solved.

Description

Technical Field

[0001] The utility model relates to the technical field of Internet, cloud computing and big data services, and in particular to a data security and network security monitoring device. Background Art

[0002] Cloud computing is a new form of computing following distributed computing, grid computing, and peer-to-peer computing. It is an important form of information infrastructure and application service model in the Internet era. Its main features are resource virtualization and service-oriented, which can provide users with on-demand services and pay-as-you-go anytime and anywhere. In the cloud computing model, users only need to pay the corresponding fees to the cloud service provider to easily obtain computing and storage resources through the network.

[0003] With the integration of 5G networks and cloud computing, the advantages of 5G networks such as high bandwidth and ultra-low latency can ensure the rapid transmission of large amounts of data; using sensor technology to transform equipment, industrial equipment connected to the cloud, remote equipment control, unmanned intelligent inspections, machine vision quality inspections, equipment fault detection and other scenarios have overcome work in difficult-to-reach scenarios, greatly improving production efficiency, product quality and safety performance, and helping companies reduce costs and increase efficiency.

[0004] At the same time, the introduction of a large number of wireless terminals has also broken the relatively closed and trusted production environment of the traditional industrial Internet of Things, and the network attack surface has continued to expand. The industrial Internet of Things is inevitably facing worrying security issues due to factors such as large-scale dynamic network topology, limited resource terminal devices, frequent data interactions, and open network environments. The means of attack imposed on the industrial Internet of Things are endless, and traditional attack detection methods have disadvantages such as low accuracy and long time. Faced with the reality that network security incidents extend from computer networks to the industrial Internet of Things, traditional security perception work is highly complex and difficult to deploy.

[0005] Based on this, Chinese patent CN213403064U discloses an industrial network security communication system based on identification password, which includes an industrial control system monitoring center and a monitoring terminal, the industrial control system monitoring center is connected to the monitoring terminal through a communication network, and also includes an identification password infrastructure module and a security communication device, through which keys are generated, distributed and managed; the industrial control system monitoring center and the detection terminal are respectively connected to the communication network through a security communication device; the security communication device includes a power supply, a processor, a memory, a password module, a programming port and an I / O module, the password module, the programming port and the I / O module and the processor are all connected to the memory, the power supply and the processor, and the memory are connected with at least two network ports for data transmission. Based on identification password technology, secure transmission of industrial control data is achieved through identity authentication, key negotiation, encrypted communication, and security monitoring.

[0006] However, the above-disclosed industrial network security communication system based on identification password still has technical problems such as difficulty in installation, deployment and maintenance. Specifically, the industrial Internet of Things that integrates cloud computing technology and 5G network technology ensures the high efficiency and high reliability of industrial products by interconnecting existing industrial equipment with other intelligent devices. By combining operating technology with information technology, it can achieve real-time access, flexible data collection and sharing, on-demand command, etc. With the escalation of the popularity of cloud computing, the amount of industrial data has exploded. The mutual perception and processing of data at the edge of the network has attracted particular attention from the industrial community. The integration of edge intelligent devices into sensor and actuator networks is conducive to the interconnection of operators, equipment and integration of existing resources in an industrial dynamic environment; therefore, it can be said that under the trend of cloud computing, the industrial Internet of Things enabled by edge intelligence has become a forward-looking industrial production model.

[0007] Furthermore, while reducing the pressure on cloud computing, edge computing strives to improve productivity and efficiency, and to empower the security of industrial control networks. Like all new technologies, in the face of so many connected smart devices, a large amount of information interaction, and automated processing, it is necessary to examine the attack surface and security threat risks of the Industrial Internet of Things. Network nodes composed of devices with limited computing resources, mobility, and diversity are prone to become a breakthrough for hacker attacks.

[0008] As a result, industrial IoT terminal devices deployed in open areas may be threatened by physical attacks, cloning attacks, and malicious impersonation. Public channels that transmit sensitive information are vulnerable to active or passive attacks, such as replay attacks or eavesdropping. In addition, various industrial protocols provided by suppliers are also subject to malicious attacks such as arbitrary interpretation, tampering, and even false data injection by opponents. In such an environment, controlling the flow of personnel, information, and access policies to resources is crucial to maintaining the security and protection of industrial data and networks. Utility Model Content

[0009] Based on this, it is necessary to provide a data security and network security monitoring device to address the technical issue of how to improve the installation convenience of industrial Internet equipment connected to cloud computing.

[0010] A data security and network security monitoring device, comprising: a back-hanging support structure, an edge server, a swing folding arm structure, a relay connection structure and a cloud monitoring terminal; the edge server and the swing folding arm structure are adjacently arranged on the sides of the back-hanging support structure, and the swing folding arm structure has a swing connecting arm, an extension arm and a swing supporting end; one end of the swing connecting arm is movably connected to the back-hanging support structure, and the other end of the swing connecting arm is hinged to the extension arm, and the extension arm is movably embedded with the swing connecting arm; the swing supporting end is movably arranged at the other end of the extension arm relative to the swing connecting arm; the relay connection structure connects the swing supporting end and the cloud monitoring terminal respectively.

[0011] Furthermore, the swing supporting end portion has a connecting supporting portion, a locking connecting portion and a hanging groove structure.

[0012] Furthermore, one end of the connecting supporting part is hinged to the end of the extending arm, and the locking connecting part connects the relay connecting structure and the connecting supporting part respectively; the hanging groove structure is arranged at the end of the connecting supporting part.

[0013] Furthermore, the relay connection structure has a connecting main body structure, a locking portion and a hanging axis structure.

[0014] Furthermore, the connecting main body structure is connected to the cloud monitoring terminal, and the locking part is provided at the end of the connecting main body structure, and the locking part is movably connected to the locking connecting part.

[0015] Furthermore, the hanging shaft structure is arranged in the main structure, and the hanging shaft structure is movably connected to the hanging groove structure.

[0016] Furthermore, the edge server has a shell structure, an input / output panel structure, a mainboard module, a central processing unit, a memory bar, a hard disk, an input / output unit, and a wireless transceiver antenna structure.

[0017] Furthermore, an input-output panel structure is provided on the upper and lower sides of the shell structure, and the mainboard module, the central processing unit, the memory stick, the hard disk and the input-output unit are respectively arranged in the shell structure; the wireless transceiver antenna structure is connected to the mainboard module.

[0018] Furthermore, the shell structure has a back plate structure, a side heat dissipation plate and a front heat dissipation plate.

[0019] Furthermore, the backplane structure is respectively connected to the back-hanging support structure and the mainboard module, the two side heat dissipation plates are respectively arranged on the left and right sides of the backplane structure, and the two input-output panel structures are respectively arranged on the upper and lower sides of the backplane structure; the front heat dissipation plate is respectively connected to the two side heat dissipation plates and the two input-output panel structures.

[0020] In summary, the utility model is a data security and network security monitoring device which is respectively provided with a back-hanging support structure, an edge server, a swing folding arm structure, a relay connection structure and a cloud monitoring terminal; the edge server and the swing folding arm structure are respectively arranged adjacent to each other on the side of the back-hanging support structure, and the swing folding arm structure has a swing connecting arm, an extension arm and a swing supporting end; one end of the swing connecting arm is movably connected to the back-hanging support structure, and the other end of the swing connecting arm is hinged with the extension arm, and the extension arm is movably embedded with the swing connecting arm; the swing supporting end is movably arranged at the other end of the extension arm relative to the swing connecting arm; and the relay connection structure is respectively connected to the swing supporting end and the cloud monitoring terminal. The swing connecting arm, the extension arm and the swing supporting end provided in the swing folding arm structure are all hinged, similar to the connection structure of a multi-link, so that the cloud monitoring terminal can be adjusted to different viewing angles, so that the user can make the cloud monitoring terminal at the best reading angle regardless of looking from the left or right side or the upper or lower side. Thus, the maintenance convenience of the utility model is improved. In addition, after the maintenance is completed, the cloud monitoring terminal can be pushed so that the swing support end pushes the extension arm to be stored and folded in the swing connection arm, and the swing connection arm can also swing to be parallel to the back-hanging support structure, so that the cloud monitoring terminal and the edge server are placed adjacent and flush, thereby improving the installation and deployment convenience of the data security and network security monitoring device of the utility model. Therefore, the data security and network security monitoring device of the utility model solves the technical problem of how to improve the installation convenience of industrial Internet equipment connected to cloud computing. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 This is a structural schematic diagram of a data security and network security monitoring device of the utility model;

[0022] Figure 2 This is a schematic diagram of the structure of a data security and network security monitoring device of the utility model from another direction;

[0023] Figure 3 This is a structural diagram of a partial structure of a data security and network security monitoring device of the utility model;

[0024] Figure 4 This is a schematic diagram of the exploded structure of a partial structure of a data security and network security monitoring device of the utility model;

[0025] Figure 5 The utility model is a schematic diagram of a data security and network security monitoring device access control solution flow. DETAILED DESCRIPTION

[0026] In order to make the above-mentioned purposes, features and advantages of the utility model more obvious and easy to understand, the specific implementation methods of the utility model are described in detail below in conjunction with the accompanying drawings. In the following description, many specific details are set forth to facilitate a full understanding of the utility model. However, the utility model can be implemented in many other ways different from those described herein, and those skilled in the art can make similar improvements without violating the connotation of the utility model, so the utility model is not limited by the specific embodiments disclosed below.

[0027] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise", "axial", "radial", "circumferential" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present invention.

[0028] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present utility model, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0029] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements, unless otherwise clearly defined. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0030] In the present utility model, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0031] It should be noted that when an element is referred to as being "fixed to" or "disposed on" another element, it may be directly on the other element or there may be a central element. When an element is considered to be "connected to" another element, it may be directly connected to the other element or there may be a central element at the same time. The terms "vertical", "horizontal", "upper", "lower", "left", "right" and similar expressions used herein are for illustrative purposes only and are not intended to be the only implementation method.

[0032] In the promotion trend of industrial applications, the Industrial Internet of Things integrated with cloud computing is prone to threats due to the following characteristics at the network, device, data interaction and environmental levels. They are:

[0033] First, large-scale network architecture: The interconnection of numerous terminal devices involves large-scale connections. The formation of multi-layer structures such as terminals, edges, fog and clouds leads to an extremely complex topology. In addition, the coexistence of distributed and centralized networks and the ever-changing topology increase the challenges of deploying network security solutions.

[0034] Second, resource-constrained terminal devices: Typically, sensors and actuators are embedded devices designed to perform specific industrial tasks. Most existing low-power technologies require ordinary batteries or button batteries, and terminal devices that run out of energy are at risk of being offline at any time. In addition, there are no additional computing resources for security program development. Similarly, apart from allowing the device to run within the necessary runtime, not much memory and storage space is reserved. Such terminals are easily hijacked, causing local network anomalies.

[0035] Third, intensive data interaction: relying on intensive perception information and timely control signals, the factory achieves efficient operation and intelligent production. Edge computing and frequent device-to-device (D2D) communications keep network traffic away from centralized monitoring systems. Therefore, the original system security cannot take into account all communication security, which easily leads to risks beyond the original security protection.

[0036] Fourth, open environment: Wireless Local Area Network, also known as WLAN, low-power wide area network, such as NB-IoT, LoRa, etc., have been widely adopted in smart factories in recent years as wireless and long-distance transmission solutions. However, node devices in the network are usually deployed in an open network environment, and public channels can easily become channels for attackers to obtain network credentials and private data. Open network protocols also increase the transparency of the network, providing convenience for attackers.

[0037] Based on the above characteristics of network structure, equipment, data interaction and environment, the Industrial Internet of Things faces potential threats. Combined with the STRIDE threat classification mechanism, these threat types are usually named deception, tampering, denial, information leakage, denial of service and privilege escalation.

[0038] Thus, at the spatial granularity, a data security and network security monitoring device can be used as a software-defined perimeter, or SDP, to ensure the security of resource access, which links specific resources in the implicitly trusted space accessed by entities through edge segmentation with microservices as the smallest division unit. The implementation of SDP at the edge is enabled by the SDP controller. At the temporal granularity, whenever an entity from an untrusted space wants to access resources such as data or services, the SDP controller located at the edge device performs continuous identity authentication and dynamic access control of the entity. In this way, the entity is invisible to the resource, and the communication between the entity and the resource is facilitated by authentication and authorization at the edge.

[0039] Please also read Figures 1 to 4 The utility model provides a data security and network security monitoring device, comprising: a back-hanging support structure 1, an edge server 2, a swing folding arm structure 3, a relay connection structure 4 and a cloud monitoring terminal 5; the edge server 2 and the swing folding arm structure 3 are adjacently arranged on the sides of the back-hanging support structure 1, and the swing folding arm structure 3 has a swing connecting arm 301, an extension arm 302 and a swing supporting end 303; one end of the swing connecting arm 301 is movably connected to the back-hanging support structure 1, and the other end of the swing connecting arm 301 is hinged to the extension arm 302, and the extension arm 302 is movably embedded in the swing connecting arm 301; the swing supporting end 303 is movably arranged at the other end of the extension arm 302 relative to the swing connecting arm 301; the relay connection structure 4 connects the swing supporting end 303 and the cloud monitoring terminal 5 respectively.

[0040] Specifically, the back-hanging support structure 1 can be installed and fixed on a wall, or installed and fixed on a preset bracket; thus, the edge server 2 and the cloud monitoring terminal 5 can be hung adjacent to each other, so as to facilitate the installation and deployment of the edge server 2 and the cloud monitoring terminal 5. More specifically, in the normal working mode, the edge server 2 and the cloud monitoring terminal 5 are placed side by side, and both are close to the side of the back-hanging support structure 1, so that the deployment space of the two can be saved and the use or deployment of other equipment will not be interfered; and when it is necessary to inspect or control the cloud monitoring terminal 5, one side or both sides of the cloud monitoring terminal 5 can be pulled, and the back of the cloud monitoring terminal 5 is connected to the relay connection structure 4, so that the swing folding arm structure 3 can be pulled through the terminal connection structure 4. More specifically, the relay connection structure 4 is connected to the swing support end 303, and the swing support end 303 can pull the extension arm 302 out from the embedding position of the swing connection arm 301; thereby, the swing folding arm structure 3 is unfolded from the storage state to the extension state, and the swing connection arm 301, the extension arm 302 and the swing support end 303 are all hinged, similar to the connection structure of a multi-link, so that the cloud monitoring terminal 5 can be adjusted to different viewing angles, so that the user can put the cloud monitoring terminal 5 at the best reading angle regardless of looking at it from the left or right side or the upper or lower side. Therefore, the maintenance convenience of the data security and network security monitoring device of the utility model is improved. In addition, after the maintenance is completed, the cloud monitoring terminal 5 can be pushed so that the swing supporting end 303 pushes the extension arm 302 to be stored and folded in the swing connecting arm 301, and the swing connecting arm 301 can also be swung to be parallel to the back-hanging support structure 1, so that the cloud monitoring terminal 5 and the edge server 2 can be placed adjacent to each other and flush, thereby improving the installation and deployment convenience of the data security and network security monitoring device of the utility model.

[0041] Furthermore, the swing support end 303 has a connection support portion 303a, a locking connection portion 303b and a hanging groove structure 303c; one end of the connection support portion 303a is hinged to the end of the extension arm 302, and the locking connection portion 303b is respectively connected to the relay connection structure 4 and the connection support portion 303a; the hanging groove structure 303c is arranged at the end of the connection support portion 303a. Furthermore, the relay connection structure 4 has a connection main body structure 401, a locking portion 402 and a hanging shaft structure 403; the connection main body structure 401 is connected to the cloud monitoring terminal 5, and the locking portion 402 is arranged at the end of the connection main body structure 401, and the locking portion 402 is movably connected to the locking connection portion 303b; the hanging shaft structure 403 is arranged in the main body structure 401, and the hanging shaft structure 403 is movably connected to the hanging groove structure 303c. Specifically, the connecting main body structure 401 is connected to the back side of the cloud monitoring terminal 5, and the two can be connected by various methods such as magnetic attraction, attachment and locking screws; and when the upper and lower viewing angles of the cloud monitoring terminal 5 need to be adjusted, it is only necessary to loosen the locking connection part 303b so that the cloud monitoring terminal 5 can drive the connecting main body structure 401 so that the hanging axis structure 403 arranged therein can swing up and down along the hanging groove structure 303c, and after swinging to a suitable angle, tighten the locking connection part 303b; at this time, the relay connection 4 and the swing support end 303 can maintain the angle unchanged.

[0042] Further, the edge server 2 has a housing structure 201, an input / output panel structure 202, a mainboard module 203, a central processing unit 204, a memory bar 205, a hard disk 206, an input / output unit 207, and a wireless transceiver antenna structure 208; the upper and lower sides of the housing structure 201 are each provided with an input / output panel structure 202, and the mainboard module 203, the central processing unit 204, the memory bar 205, the hard disk 206, and the input / output unit 207 are respectively arranged in the housing structure 201. The mainboard module 203 is connected to the housing structure 201, and the central processing unit 204, the memory bar 205, the hard disk 206, and the input / output unit 207 are all connected to the mainboard module 203. The wireless transceiver antenna structure 208 is connected to the mainboard module 203, and the wireless transceiver antenna 208 extends from the housing structure 201 to the outside of the input / output panel structure 202.

[0043] Specifically, the explosive growth of industrial devices and large-scale networks has made multifunctional services possible. Traditional service aggregation is mainly through a monolithic architecture, integrating multiple services into a single application. This monolithic architecture is becoming more and more complex, and its shortcomings of being unable to be deployed quickly cannot meet the needs of the industrial market. In addition, if an attacker gains access to the relevant application, he can move laterally freely, causing multiple services of the entire application to be unable to respond appropriately.

[0044] Microservices can divide applications into micro-autonomous components that can be independently developed, deployed and expanded. This fine-grained segmentation improves the flexibility and maintainability of applications and supports rapid iteration and deployment. Multiple microservices are built to jointly implement complex applications, and the functions of the services can be further divided in terms of spatial granularity. Each microservice runs in its independent process and communicates with other processes through lightweight mechanisms. In addition, different programming languages ​​and data storage technologies can be used to implement microservices to maintain minimal centralized management. The edge server 2 provided in the data security and network security monitoring device of the utility model can be used as a carrier of microservices. It is located between industrial terminal equipment and resources in the implicit credit space, providing computing, storage and operating environment, so that microservices can be applied at the edge of the industrial control network; thereby ensuring the security of data storage and use.

[0045] Furthermore, the shell structure 201 has a back plate structure 201a, a side heat dissipation plate 201b and a front heat dissipation plate 201c; the back plate structure 201a is respectively connected to the back-hanging support structure 1 and the mainboard module 203, the two side heat dissipation plates 201b are respectively arranged on the left and right sides of the back plate structure 201a, and the two input-output panel structures 202 are respectively arranged on the upper and lower sides of the back plate structure 201a; the front heat dissipation plate 201c is respectively connected to the two side heat dissipation plates 201b and the two input-output panel structures 202. Specifically, the side heat dissipation plates 201b and the front heat dissipation plates 201c are stacked fin structures, and a plurality of groups of fin-type heat dissipation structures are distributed at intervals on their surfaces. The side heat dissipation plates 201b and the front heat dissipation plates 201c can be made of materials such as copper or aluminum alloy to facilitate heat absorption and dissipation. More specifically, the utility model proposes a heat dissipation structure that does not require the installation of a radiator, and the side heat dissipation plate 201b and the back plate structure 201a are an integrally formed structure, so that the heat absorbed at the back plate structure 201a can be quickly transferred to the side heat dissipation plates 201b on both sides. The heat emitted by the various components inside the shell structure 201 when working will be quickly absorbed by the side heat dissipation plates 201b and the front heat dissipation plate 201c, and diffused into the air environment through the fin-type heat dissipation structure on their surface, so as to achieve the purpose of initial heat dissipation.

[0046] Furthermore, the cloud monitoring terminal 5 has a tablet computer body 501, a buffer structure 502, a physical button structure 503 and an acoustic and light alarm structure 504; the back of the tablet computer body 501 is connected to the connecting main structure 401, the four-axis covering of the tablet computer body 501 is connected to the buffer structure 502, and the physical button structure 503 and the acoustic and light alarm structure 504 are respectively arranged on the tablet computer body 501. Specifically, the buffer structure 502 can be made of materials such as silicone and rubber, which can play a role of buffering and protecting the periphery of the tablet computer body 501, thereby avoiding damage caused by falling from a height. The physical button structure 503 can provide input operations to avoid special working occasions, such as when the staff wears gloves or the touch screen of the tablet computer body 501 is oily and other factors that affect the operation. The acoustic and light alarm structure 504 can emit a sound or flash under the preset alarm conditions, thereby prompting the user to check the maintenance.

[0047] For details, please continue to refer to Figure 5, the tablet computer body 501 may be provided with an SDP controller and an SDP gateway component, and the SDP controller is responsible for identity authentication and the formulation of access control strategies; the SDP gateway, as a communication carrier for both parties of resource interaction, is responsible for communicating with entities and microservice application program interfaces, and can be used as an interaction carrier between the edge server 2 and the cloud monitoring terminal 5. In one embodiment, for example, when a cloud entity needs to access the microservice resources in the edge server 2, the specific steps are as follows:

[0048] S1: The cloud entity makes a request to access resources to the data security and network security monitoring device;

[0049] S2: After receiving the request and verification information from the cloud entity, the SDP controller in the cloud monitoring terminal 5, i.e. the preset SDP monitoring program, performs identity authentication and formulates access policies for the entity according to the preset algorithm process;

[0050] S3: When the entity in the cloud passes the verification, the SDP controller in the cloud monitoring terminal 5 informs the SDP gateway of the access policy;

[0051] S4: The SDP gateway in the cloud monitoring terminal 5 uses the microservice application program interface to access the resources of the corresponding specific microservice stored in the edge server through WLAN or cable according to the formulated access strategy:

[0052] S5: The edge server 2 transfers the corresponding resources to the SDP gateway in the cloud monitoring terminal 5;

[0053] S6: The SDP gateway in the cloud monitoring terminal 5 delivers the designated resources to the entity in the cloud.

[0054] That is, before an entity in the cloud obtains resources in a specified microservice in an implicit trust space, two steps are required, including authentication and authorization. Identity authentication ensures the security of users, devices or services connected to the network. Only entities that pass the verification can obtain customized resources and avoid malicious entities from launching potential attacks to cause destructive effects on the production process. Industrial terminal nodes such as sensors and actuators collect industrial data and execute control commands without human assistance. The typical D2D communication model and the limitation of computing resources require a new authentication mechanism. Furthermore, traditional identity authentication is only performed at the time of access, and the identity authentication mechanism based on knowledge credentials, such as device identification, software and hardware tokens, etc.; due to the factory-determined characteristics, it is easy to cause identity information to be illegally obtained, and the attacker launches a deception attack, thereby invading the system or stealing resources that should not belong to him. Therefore, the utility model proposes a continuous authentication method for a data security and network security monitoring device, which makes full use of dynamically changing context information; that is, the edge server 2 and the cloud monitoring terminal 5 are deployed adjacently to achieve information interconnection, but each operates independently. That is, the industrial data collected by industrial terminal nodes such as industrial equipment, sensors and actuators and the reciprocating data resources of executing control commands are very large, and have the sensitivity of data and command confidentiality and the need for closure; however, different attack modes are constantly updated and change at a very fast speed, requiring maintenance personnel to update the protection mechanism at any time; therefore, placing the monitoring and authorization terminal on the cloud monitoring terminal 5 and placing the processing and computing terminal separately on the edge server 2 is a feasible way to maintain data security and network security.

[0055] Specifically, the cloud monitoring terminal 5 can continuously perceive the context information of entities in the untrusted space through monitoring, and take time as the baseline, including the location information of the entity, the operating environment information, and the behavior between entities are collected and the historical baseline criteria are established. For newly added entities or entities in the session process, the real-time context information is matched with the historical criteria. In view of the fact that the devices connected in the network should always be in a safe state, identity authentication should be a continuous process. Therefore, when the entity in the untrusted space initiates an authentication request and starts a session, the session management in the cloud monitoring terminal 5 identifies the time when each session is established, and then the edge server 2 will start two cascaded identity authentication mechanisms, namely multi-factor authentication and continuous authentication to authenticate whether the corresponding entity in the cloud under inspection is legal. If an abnormal situation occurs, the sound and light alarm structure 504 can use sound and light to alert the user for review and maintenance.

[0056] In summary, the utility model is a data security and network security monitoring device which is respectively provided with a back-hanging support structure 1, an edge server 2, a swinging folding arm structure 3, a relay connection structure 4 and a cloud monitoring terminal 5; the edge server 2 and the swinging folding arm structure 3 are respectively arranged adjacent to each other on the side surfaces of the back-hanging support structure 1, and the swinging folding arm structure 3 has a swinging connecting arm 301, an extension arm 302 and a swinging supporting end 303; one end of the swinging connecting arm 301 is movably connected to the back-hanging support structure 1, and the other end of the swinging connecting arm 301 is hinged to the extension arm 302, and the extension arm 302 is movably embedded in the swinging connecting arm 301; the swinging supporting end 303 is movably arranged at the other end of the extension arm 302 relative to the swinging connecting arm 301; the relay connection structure 4 respectively connects the swinging supporting end 303 and the cloud monitoring terminal 5. The swing connecting arm 301, the extension arm 302 and the swing supporting end 303 provided in the swing folding arm structure 3 are all hinged, similar to the connection structure of a multi-link, so that the cloud monitoring terminal 5 can be adjusted to different viewing angles, so that the user can make the cloud monitoring terminal 5 at the best reading angle regardless of whether the user looks at it from the left or right side or the upper or lower side. As a result, the maintenance convenience of the data security and network security monitoring device of the utility model is improved. In addition, after the maintenance is completed, the cloud monitoring terminal 5 can be pushed so that the swing supporting end 303 pushes the extension arm 302 to be stored and folded in the swing connecting arm 301, and the swing connecting arm 301 can also be swung to be parallel to the back-hanging support structure 1, so that the cloud monitoring terminal 5 and the edge server 2 are placed adjacent and flush, thereby improving the installation and deployment convenience of the data security and network security monitoring device of the utility model. Therefore, the data security and network security monitoring device of the utility model solves the technical problem of how to improve the installation convenience of industrial Internet equipment connected to cloud computing.

[0057] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0058] The above-mentioned embodiments only express several implementation methods of the utility model, and the description is relatively specific and detailed, but it cannot be understood as limiting the scope of the utility model patent. It should be pointed out that for ordinary technicians in this field, several modifications and improvements can be made without departing from the concept of the utility model, which all belong to the protection scope of the utility model. Therefore, the protection scope of the utility model patent shall be based on the attached claims.

Claims

1. A data security and network security monitoring device, characterized in that: It includes: A back-hanging support structure (1), an edge server (2), a swinging folding arm structure (3), a relay connection structure (4) and a cloud monitoring terminal (5); the edge server (2) and the swinging folding arm structure (3) are respectively arranged adjacent to each other on the side of the back-hanging support structure (1); the swinging folding arm structure (3) comprises a swinging connecting arm (301), an extension arm (302) and a swinging supporting end (303); one end of the swinging connecting arm (301) is movably connected to the back-hanging support structure (1); the other end of the swinging connecting arm (301) is hinged to the extension arm (302); the extension arm (302) and the swinging connecting arm (301) are movably embedded and connected; the swinging supporting end (303) is movably arranged at the other end of the extension arm (302) relative to the swinging connecting arm (301); the relay connection structure (4) respectively connects the swinging supporting end (303) and the cloud monitoring terminal (5).

2. A data security and network security monitoring device according to claim 1, characterized in that: The swing supporting end portion (303) comprises a connecting supporting portion (303a), a locking connecting portion (303b) and a hanging groove structure (303c).

3. A data security and network security monitoring device according to claim 2, characterized in that: One end of the connecting supporting portion (303a) is hinged to the end of the extending arm (302); the locking connecting portion (303b) respectively connects the relay connecting structure (4) and the connecting supporting portion (303a); and the hanging groove structure (303c) is arranged at the end of the connecting supporting portion (303a).

4. A data security and network security monitoring device according to claim 3, characterized in that: The relay connection structure (4) comprises a connection main body structure (401), a locking portion (402) and a hanging axis structure (403).

5. A data security and network security monitoring device according to claim 4, characterized in that: The connecting main body structure (401) is connected to the cloud monitoring terminal (5), and the locking part (402) is provided at the end of the connecting main body structure (401), and the locking part (402) is movably connected to the locking connection part (303b).

6. A data security and network security monitoring device according to claim 5, characterized in that: The hanging shaft structure (403) is arranged in the main body structure (401), and the hanging shaft structure (403) is movably connected to the hanging groove structure (303c).

7. A data security and network security monitoring device according to claim 6, characterized in that: The edge server (2) comprises a housing structure (201), an input / output panel structure (202), a mainboard module (203), a central processing unit (204), a memory bar (205), a hard disk (206), an input / output unit (207), and a wireless transceiver antenna structure (208).

8. A data security and network security monitoring device according to claim 7, characterized in that: The upper and lower sides of the housing structure (201) are each provided with an input / output panel structure (202); the mainboard module (203), the central processing unit (204), the memory bar (205), the hard disk (206) and the input / output unit (207) are respectively arranged in the housing structure (201); and the wireless transceiver antenna structure (208) is connected to the mainboard module (203).

9. A data security and network security monitoring device according to claim 8, characterized in that: The housing structure (201) comprises a back plate structure (201a), a side heat dissipation plate (201b) and a front heat dissipation plate (201c).

10. A data security and network security monitoring device according to claim 9, characterized in that: The back plate structure (201a) is respectively connected to the back-hanging support structure (1) and the main board module (203); the two side heat dissipation panels (201b) are respectively arranged on the left and right sides of the back plate structure (201a); the two input-output panel structures (202) are respectively arranged on the upper and lower sides of the back plate structure (201a); and the front heat dissipation panel (201c) is respectively connected to the two side heat dissipation panels (201b) and the two input-output panel structures (202).

Images