CN111756766A - A network information security protection system - Google Patents
A network information security protection systemDownload PDFInfo
- Publication number
- CN111756766A CN111756766ACN202010630776.7ACN202010630776ACN111756766ACN 111756766 ACN111756766 ACN 111756766ACN 202010630776 ACN202010630776 ACN 202010630776ACN 111756766 ACN111756766 ACN 111756766A
- Authority
- CN
- China
- Prior art keywords
- module
- network information
- browsing
- information
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/42—User authentication using separate channels for security data
- G06F21/43—User authentication using separate channels for security data wireless channels
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/604—Tools and structures for managing or administering access control systems
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/102—Entity profiles
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2113—Multi-level security, e.g. mandatory access control
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Biomedical Technology (AREA)
- Automation & Control Theory (AREA)
- Databases & Information Systems (AREA)
- Alarm Systems (AREA)
Abstract
Translated fromChinese
Description
Translated fromChinese技术领域：Technical field:
本发明属于网络安全技术领域，特别涉及一种网络信息安全防护系统。The invention belongs to the technical field of network security, in particular to a network information security protection system.
背景技术：Background technique:
网络信息安全是一门涉及计算机科学、网络技术、通信技术、密码技术、信息安全技术、应用数学、数论、信息论等多种学科的综合性学科，它主要是指网络系统的硬件、软件及其系统中的数据受到保护，不受偶然的或者恶意的原因而遭到破坏、更改、泄露，系统连续可靠正常地运行，网络服务不中断，随着经济水平的提高和科技的不断进步，网络及电子设备的普及，中国网民规模为9.04亿，较2018年底增长7508万，互联网普及率达64.5％；手机网民规模达8.97亿，网民使用手机上网的比例达99.3％。Network information security is a comprehensive subject involving computer science, network technology, communication technology, cryptography technology, information security technology, applied mathematics, number theory, information theory and other disciplines. The data in the system is protected from being damaged, altered or leaked by accidental or malicious reasons, the system runs continuously, reliably and normally, and network services are not interrupted. With the popularization of electronic devices, the number of Internet users in China was 904 million, an increase of 75.08 million compared with the end of 2018, and the Internet penetration rate reached 64.5%; the number of mobile Internet users reached 897 million, and the proportion of Internet users using mobile phones to access the Internet reached 99.3%.
目前网络信息使用权限限制性较低、网络信息内容质量差，导致低龄人员容易接触不良网络信息，不能正确判断，不利于未授权人员、尤其是低年龄青少儿的身心健康和价值观的培养，所以本发明提供一种网络信息安全防护系统来解决上述问题。At present, the use rights of network information are relatively limited and the quality of network information content is poor, which makes it easy for young people to access bad network information and cannot make correct judgments. The present invention provides a network information security protection system to solve the above problems.
发明内容：Invention content:
本发明的目的就在于为了解决上述问题而提供一种网络信息安全防护系统，解决了现有目前网络信息使用权限限制性较低、网络信息内容质量差，导致低龄人员容易接触不良网络信息，不能正确判断，不利于未授权人员、尤其是低年龄青少儿的身心健康和价值观的培养的缺点。The purpose of the present invention is to provide a network information security protection system in order to solve the above problems. Correct judgment is not conducive to the shortcomings of the physical and mental health and the cultivation of values of unauthorized personnel, especially young children.
为了解决上述问题，本发明提供了一种技术方案：In order to solve the above-mentioned problems, the present invention provides a kind of technical scheme:
一种网络信息安全防护系统，包括用户登录管理单元、主控制模块、数据信息采集单元、网络安防单元、数据存储单元和网络信息浏览单元，所述用户登录管理单元的输出端连接主控制模块的输入端，所述主控制模块的输入端连接有数据信息采集单元，所述主控制模块的输出端连接有网络安防单元、数据存储单元和网络信息浏览单元；A network information security protection system includes a user login management unit, a main control module, a data information acquisition unit, a network security unit, a data storage unit and a network information browsing unit, wherein the output end of the user login management unit is connected to the main control module. an input end, the input end of the main control module is connected with a data information acquisition unit, and the output end of the main control module is connected with a network security unit, a data storage unit and a network information browsing unit;
所述用户登录管理单元包括权权限等级模块和登录方式模块，所述权限等级模块通过获取登录人员年龄信息判断登录人员的权限等级，所述登录方式模块采用多种认证的方式灵活选择登录网络服务器，并记录登录行为；The user login management unit includes an authority level module and a login method module. The authority level module determines the authority level of the login person by acquiring the age information of the login person, and the login method module adopts a variety of authentication methods to flexibly choose to log in to the network server. , and record the login behavior;
所述网络信息浏览单元包括信息筛选分级模块、记录模块和计时模块，信息筛选分级模块对数据存储单元储存的数据信息按照权权限等级模块筛选分级，所述记录模块用于记录登录者浏览数据痕迹，所述计时模块用于记录使用时长。The network information browsing unit includes an information screening and grading module, a recording module and a timing module. The information screening and grading module screens and grades the data information stored in the data storage unit according to the authority level module, and the recording module is used to record the registrant browsing data traces. , the timing module is used to record the usage time.
作为优选，所述权限等级模块包括无权限模块、未授权人员权限模块和授权人员权限模块，所述无权限模块上设置有年龄设定模块，用于设定未授权人员范围内禁止登录的年龄，所述未授权人员权限模块用于大于无权限模块年龄的未授权人员登录，所述授权人员权限模块上设置有浏览等级选择模块，用于登录的授权人员对网络信息浏览等级的选择，浏览等级选择模块与网络信息浏览单元上的信息筛选分级模块相匹配。Preferably, the authority level module includes an unauthorised module, an unauthorized personnel authority module and an authorized personnel authority module, and an age setting module is provided on the unauthorised module for setting the age that is prohibited from logging in within the scope of unauthorized personnel , the unauthorized personnel authority module is used to log in unauthorized personnel who are older than the age of the unauthorized module, and a browsing level selection module is set on the authorized personnel authority module, which is used for the login authorized personnel to select the browsing level of network information, browse The rank selection module matches the information screening and grading module on the network information browsing unit.
作为优选，所述登录方式模块包括人脸识别模块、身份证验证模块、短信验证模块、指纹识别模块，所述人脸识别模块通过采集人员面部信息进行登录，所述身份证验证模块通过输入登录人员身份证号码进行登录，所述短信验证模块通过输入手机号码，获取临时登录验证码，输入验证码登录，所述指纹识别模块通过获取登录指纹进行登录。Preferably, the login mode module includes a face recognition module, an ID card verification module, a short message verification module, and a fingerprint recognition module, the face recognition module logs in by collecting the facial information of the person, and the ID card verification module logs in by inputting Personnel ID number to log in, the SMS verification module obtains a temporary login verification code by entering a mobile phone number, and logs in by entering the verification code, and the fingerprint identification module logs in by obtaining a login fingerprint.
作为优选，所述信息筛选分级模块包括一级浏览模块、二级浏览模块和三级浏览模块，根据网络信息内容与登录人员权限筛选分级，用于对未授权人员网络信息浏览保护，所述一级浏览模块、二级浏览模块和三级浏览模块上设有关键词屏蔽模块，用于输入关键词来屏蔽浏览信息中与关键词相对应的内容。Preferably, the information screening and grading module includes a first-level browsing module, a second-level browsing module and a third-level browsing module, and is used for screening and grading according to the content of the network information and the authority of the logged-in personnel, and is used to protect the browsing of the network information of unauthorized personnel. The first-level browsing module, the second-level browsing module and the third-level browsing module are provided with a keyword shielding module for inputting keywords to shield the content corresponding to the keywords in the browsing information.
作为优选，所述数网络安防单元包括防火墙模块、入侵处理模块和报警模块，所述入侵处理模块用于拦截入侵者，所述入侵处理模块在系统分析出高级别安全隐患时截断使用该系统的设备与外部网络的连接。Preferably, the digital network security unit includes a firewall module, an intrusion processing module and an alarm module, the intrusion processing module is used to intercept intruders, and the intrusion processing module intercepts the use of the system when the system analyzes high-level security risks. The connection of the device to the external network.
作为优选，所述据存储单元包括数据自动备份模块和数据自动更新模块，所述数据自动备份模块用于备份网络信息，所述数据自动更新模块用于自动根据存储的网络信息，所述数据自动更新模块上设有自动更新设定模块，用于对数据自动更新模块进行设定，通过自动更新设定模块能够关闭数据自动更新模块。Preferably, the data storage unit includes an automatic data backup module and an automatic data update module, the automatic data backup module is used for backing up network information, and the automatic data update module is used for automatically according to the stored network information, the data automatically The update module is provided with an automatic update setting module for setting the data automatic update module, and the data automatic update module can be turned off through the automatic update setting module.
作为优选，所述数据信息采集单元包括数据审计模块和数据输入模块，所述数据审计模块的输出端与主控制模块的输入端连接，所述数据输入模块的输出端与数据审计模块的输入端连接，所述数据输入模块包括人机输入模块和接收输入模块，所述人机输入模块用于采集人员通过设备按键、触控屏及U盘输入的信息，所述接收输入模块用于接收无线网络传输、蓝牙传输的信息，所述数据审计模块包括审计等级模块和输入拦截模块，所述审计等级模块用于对信息审计方式选择，所述输入拦截模块用于拦截输入的不安全信息。Preferably, the data information collection unit includes a data audit module and a data input module, the output end of the data audit module is connected to the input end of the main control module, the output end of the data input module is connected to the input end of the data audit module connection, the data input module includes a human-machine input module and a receiving input module, the human-machine input module is used to collect the information input by the personnel through the equipment keys, touch screen and U disk, and the receiving input module is used to receive wireless For information transmitted via network and Bluetooth, the data auditing module includes an auditing level module and an input interception module, the auditing level module is used to select an information auditing method, and the input interception module is used to intercept input unsafe information.
作为优选，所述计时模块上设有定时提醒模块，所述定时提醒模块用于登录人员设定使用时间，到时提醒人员。Preferably, the timing module is provided with a timing reminder module, and the timing reminder module is used for logging in personnel to set the usage time and remind the personnel when the time comes.
本发明的有益效果：Beneficial effects of the present invention:
本发明所述的一种网络信息安全防护系统，通过设置的用户登录管理单元，用户登录管理单元包括权权限等级模块和登录方式模块，权限等级模块通过获取登录人员年龄信息判断登录人员的权限等级，权限等级模块分为了无权限模块、未授权人员权限模块和授权人员权限模块，通过年龄设定模块用于设定无权限模块上未授权人员范围内禁止登录的年龄，未授权人员权限模块用于大于无权限模块年龄的未授权人员登录，浏览等级选择模块与网络信息浏览单元上的信息筛选分级模块相匹配，信息筛选分级模块对数据存储单元储存的数据信息按照权权限等级模块筛选分级，通过年龄对登录人员权限设定，能够更好的对未授权人员网络信息进行浏览安全保护，有效的防止了未授权人员浏览其所属年龄段不适合的网络信息内容，保护了未授权人员的身心健康，且授权人员权限模块上设置有浏览等级选择模块，用于登录的授权人员对网络信息浏览等级的选择，以及浏览模块上设置了关键词屏蔽模块，人员可自动选择屏蔽剔除不想浏览的网络信息，为登陆者提供更高的选择性和保护性，有益于网络信息文明，降低网络激化、矛盾，提高网络信息对个人的安全防护性。In a network information security protection system according to the present invention, a user login management unit is set, and the user login management unit includes an authority level module and a login mode module, and the authority level module determines the authority level of the login person by acquiring the age information of the login person , the authority level module is divided into no authority module, unauthorized personnel authority module and authorized personnel authority module. The age setting module is used to set the age that is prohibited from logging in within the scope of unauthorized personnel on the unauthorised module. The unauthorized personnel authority module is used for For unauthorized persons who are older than the age of the unauthorized module to log in, the browsing level selection module matches the information screening and grading module on the network information browsing unit, and the information screening and grading module filters and grades the data information stored in the data storage unit according to the authority level module. By setting the permissions of logged-in personnel by age, it can better protect the browsing security of unauthorized personnel's network information, effectively prevent unauthorized personnel from browsing the network information content that is not suitable for their age group, and protect the physical and mental health of unauthorized personnel. Healthy, and the authorization module for authorized personnel is provided with a browsing level selection module, which is used to select the network information browsing level for the authorized personnel to log in, and a keyword shielding module is set on the browsing module. Information provides higher selectivity and protection for registrants, which is beneficial to network information civilization, reduces network intensification and contradictions, and improves the security protection of network information for individuals.
附图说明：Description of drawings:
为了易于说明，本发明由下述的具体实施及附图作以详细描述。For ease of description, the present invention is described in detail by the following specific implementations and accompanying drawings.
图1为本发明的网络信息安全防护系统图；Fig. 1 is the network information security protection system diagram of the present invention;
图2为本发明的用户登录管理单元的原理框图；Fig. 2 is the principle block diagram of the user login management unit of the present invention;
图3为本发明的网络信息浏览单元的原理框图；Fig. 3 is the principle block diagram of the network information browsing unit of the present invention;
图4为本发明的数据存储单元的原理框图；Fig. 4 is the principle block diagram of the data storage unit of the present invention;
图5为本发明的审计模块的原理框图。FIG. 5 is a schematic block diagram of the auditing module of the present invention.
具体实施方式：Detailed ways:
如图1-5所示，本具体实施方式采用以下技术方案：一种网络信息安全防护系统，包括用户登录管理单元、主控制模块、数据信息采集单元、网络安防单元、数据存储单元和网络信息浏览单元，所述用户登录管理单元的输出端连接主控制模块的输入端，所述主控制模块的输入端连接有数据信息采集单元，所述主控制模块的输出端连接有网络安防单元、数据存储单元和网络信息浏览单元；As shown in Figures 1-5, this specific implementation adopts the following technical solutions: a network information security protection system, including a user login management unit, a main control module, a data information collection unit, a network security unit, a data storage unit and a network information unit Browsing unit, the output end of the user login management unit is connected to the input end of the main control module, the input end of the main control module is connected with the data information acquisition unit, the output end of the main control module is connected with the network security unit, data storage unit and network information browsing unit;
所述用户登录管理单元包括权权限等级模块和登录方式模块，所述权限等级模块通过获取登录人员年龄信息判断登录人员的权限等级，所述登录方式模块采用多种认证的方式灵活选择登录网络服务器，并记录登录行为；The user login management unit includes an authority level module and a login method module, the authority level module judges the authority level of the login person by acquiring the age information of the login person, and the login method module adopts a variety of authentication methods to flexibly choose to log in to the network server. , and record the login behavior;
所述网络信息浏览单元包括信息筛选分级模块、记录模块和计时模块，信息筛选分级模块对数据存储单元储存的数据信息按照权权限等级模块筛选分级，所述记录模块用于记录登录者浏览数据痕迹，所述计时模块用于记录使用时长。The network information browsing unit includes an information screening and grading module, a recording module and a timing module. The information screening and grading module screens and grades the data information stored in the data storage unit according to the authority level module, and the recording module is used to record the registrant browsing data traces. , the timing module is used to record the usage time.
进一步的，所述权限等级模块包括无权限模块、未授权人员权限模块和授权人员权限模块，所述无权限模块上设置有年龄设定模块，用于设定未授权人员范围内禁止登录的年龄，所述未授权人员权限模块用于大于无权限模块年龄的未授权人员登录，所述授权人员权限模块上设置有浏览等级选择模块，用于登录的授权人员对网络信息浏览等级的选择，浏览等级选择模块与网络信息浏览单元上的信息筛选分级模块相匹配，通过对登录人员年龄获取判断登录权限，禁止低龄无权限人员自行使用网络，能够更好的对未授权人员网络信息进行浏览安全保护，有效的防止了未授权人员浏览其所属年龄段不适合的网络信息内容，保护了未授权人员的身心健康，授权人员可通过浏览等级选择模块选择相对应的浏览模块，用于无权限人员在授权人员监护下安全使用网络。Further, the authority level module includes an unauthorised module, an unauthorized personnel authority module and an authorized personnel authority module, and an age setting module is provided on the unauthorised module for setting the age that is prohibited from logging in within the scope of unauthorized personnel. , the unauthorized personnel authority module is used to log in unauthorized personnel who are older than the age of the unauthorized module, and a browsing level selection module is set on the authorized personnel authority module, which is used for the login authorized personnel to select the browsing level of network information, browse The grade selection module matches the information screening and grading module on the network information browsing unit. By obtaining the log-in authority to determine the age of the log-in person, it prohibits the unauthorized use of the network by the unauthorised persons of young age, which can better protect the browsing security of the unauthorized personnel's network information. , which effectively prevents unauthorized personnel from browsing the network information content that is not suitable for their age group, and protects the physical and mental health of unauthorized personnel. Authorized personnel can select the corresponding browsing module through the browsing level selection module, which is used for unauthorized personnel in Use the network safely under the supervision of authorized personnel.
进一步的，所述登录方式模块包括人脸识别模块、身份证验证模块、短信验证模块、指纹识别模块，所述人脸识别模块通过采集人员面部信息进行登录，所述身份证验证模块通过输入登录人员身份证号码进行登录，所述短信验证模块通过输入手机号码，获取临时登录验证码，输入验证码登录，所述指纹识别模块通过获取登录指纹进行登录，采用多种认证的方式灵活选择登录网络服务器。Further, the login method module includes a face recognition module, an ID card verification module, a short message verification module, and a fingerprint recognition module, and the face recognition module logs in by collecting the facial information of the person, and the ID card verification module logs in by inputting. Personnel ID number to log in, the SMS verification module obtains the temporary login verification code by inputting the mobile phone number, and enters the verification code to log in. The fingerprint recognition module logs in by obtaining the login fingerprint, and adopts a variety of authentication methods to flexibly choose to log in to the network. server.
进一步的，所述信息筛选分级模块包括一级浏览模块、二级浏览模块和三级浏览模块，根据网络信息内容与登录人员权限筛选分级，用于对未授权人员网络信息浏览保护，所述一级浏览模块、二级浏览模块和三级浏览模块上设有关键词屏蔽模块，用于输入关键词来屏蔽浏览信息中与关键词相对应的内容，人员可自动选择屏蔽剔除不想浏览的网络信息，为登陆者提供更高的选择性和保护性，提高网络信息对个人的安全防护性。Further, the information screening and grading module includes a first-level browsing module, a second-level browsing module and a third-level browsing module, and is used for screening and grading according to the content of the network information and the authority of the logged-in personnel, and is used to protect the browsing of the network information of unauthorized personnel. The first-level browsing module, the second-level browsing module and the third-level browsing module are provided with a keyword shielding module, which is used to input keywords to shield the content corresponding to the keywords in the browsing information. Personnel can automatically choose to shield and eliminate the network information that they do not want to browse. , to provide higher selectivity and protection for the registrant, and improve the security protection of network information for individuals.
其中，所述数网络安防单元包括防火墙模块、入侵处理模块和报警模块，所述入侵处理模块用于拦截入侵者，所述入侵处理模块在系统分析出高级别安全隐患时截断使用该系统的设备与外部网络的连接。Wherein, the digital network security unit includes a firewall module, an intrusion processing module and an alarm module, the intrusion processing module is used to intercept intruders, and the intrusion processing module intercepts the equipment using the system when the system analyzes high-level security risks Connections to external networks.
进一步的，所述据存储单元包括数据自动备份模块和数据自动更新模块，所述数据自动备份模块用于备份网络信息，所述数据自动更新模块用于自动根据存储的网络信息，所述数据自动更新模块上设有自动更新设定模块，用于对数据自动更新模块进行设定，通过自动更新设定模块能够关闭数据自动更新模块。Further, the data storage unit includes an automatic data backup module and an automatic data update module, the automatic data backup module is used for backing up network information, and the automatic data update module is used for automatically according to the stored network information, the data is automatically updated. The update module is provided with an automatic update setting module for setting the data automatic update module, and the data automatic update module can be turned off through the automatic update setting module.
其中，所述数据信息采集单元包括数据审计模块和数据输入模块，所述数据审计模块的输出端与主控制模块的输入端连接，所述数据输入模块的输出端与数据审计模块的输入端连接，所述数据输入模块包括人机输入模块和接收输入模块，所述人机输入模块用于采集人员通过设备按键、触控屏及U盘输入的信息，所述接收输入模块用于接收无线网络传输、蓝牙传输的信息，所述数据审计模块包括审计等级模块和输入拦截模块，所述审计等级模块用于对信息审计方式选择，所述输入拦截模块用于拦截输入的不安全信息。The data information collection unit includes a data audit module and a data input module, the output end of the data audit module is connected to the input end of the main control module, and the output end of the data input module is connected to the input end of the data audit module , the data input module includes a human-machine input module and a receiving input module, the human-machine input module is used to collect the information input by the personnel through the equipment keys, touch screen and U disk, and the receiving input module is used to receive the wireless network The data audit module includes an audit level module and an input interception module, the audit level module is used to select an information audit mode, and the input interception module is used to intercept input unsafe information.
其中，所述计时模块上设有定时提醒模块，所述定时提醒模块用于登录人员设定使用时间，到时提醒人员，防止长时间上网。Wherein, the timing module is provided with a timing reminder module, and the timing reminder module is used for logging in personnel to set the usage time, and reminding the personnel when the time arrives, so as to prevent long-term surfing the Internet.
具体的：一种网络信息安全防护系统，使用时，人员通过用户登录管理单元登录网络设备，数据信息采集单元用于采集网络信息内容，网络安防单元用于对网络安全保护，数据存储单元用于储存采集的数据，用户登录管理单元包括权权限等级模块和登录方式模块，权限等级模块通过获取登录人员年龄信息判断登录人员的权限等级，权限等级模块分为了无权限模块、未授权人员权限模块和授权人员权限模块，通过对登录人员年龄获取判断登录权限，禁止低龄无权限人员自行使用网络，通过年龄设定模块用于设定无权限模块上未授权人员范围内禁止登录的年龄，未授权人员权限模块用于大于无权限模块年龄的未授权人员登录，浏览等级选择模块与网络信息浏览单元上的信息筛选分级模块相匹配，信息筛选分级模块对数据存储单元储存的数据信息按照权权限等级模块筛选分级，通过年龄对登录人员权限设定，能够更好的对未授权人员网络信息进行浏览安全保护，有效的防止了未授权人员浏览其所属年龄段不适合的网络信息内容，保护了未授权人员的身心健康，且授权人员权限模块上设置有浏览等级选择模块，用于登录的授权人员对网络信息浏览等级的选择，授权人员可通过浏览等级选择模块选择相对应的浏览模块，用于无权限人员在授权人员监护下使用网络，方便对未授权人员、尤其是无权限登录人员网络安全使用管理，以及浏览模块上设置了关键词屏蔽模块，人员可自动选择屏蔽剔除不想浏览的网络信息，为登陆者提供更高的选择性和保护性，提高网络信息对个人的安全防护性，登录方式模块包括人脸识别模块、身份证验证模块、短信验证模块、指纹识别模块，人脸识别模块通过采集人员面部信息进行登录，身份证验证模块通过输入登录人员身份证号码进行登录，短信验证模块通过输入手机号码，获取临时登录验证码，输入验证码登录，指纹识别模块通过获取登录指纹进行登录，采用多种认证的方式灵活选择登录网络服务器。Specifically: a network information security protection system, when in use, personnel log in to network equipment through a user login management unit, a data information collection unit is used to collect network information content, a network security unit is used for network security protection, and a data storage unit is used for The collected data is stored, and the user login management unit includes an authority level module and a login method module. The authority level module determines the authority level of the login person by obtaining the age information of the login person. The authority level module is divided into an unauthorized module, an unauthorized person authority module and Authorized personnel authority module, which determines the login authority by obtaining the age of the logged-in personnel, and prohibits young and unauthorized personnel from using the network by themselves. The age setting module is used to set the age that is prohibited from logging in within the scope of unauthorized personnel on the unauthorized module. Unauthorized personnel The authority module is used to log in by unauthorized persons who are older than the age of the unauthorised module. The browsing level selection module matches the information screening and grading module on the network information browsing unit. Screening and grading, setting the permissions of logged-in personnel through age, can better protect the browsing security of unauthorized personnel's network information, effectively prevent unauthorized personnel from browsing network information content that is not suitable for their age group, and protect unauthorized personnel. The personnel are physically and mentally healthy, and the authorized personnel authority module is provided with a browsing level selection module, which is used for the login authorized personnel to select the browsing level of network information. Authorized personnel can select the corresponding browsing module through the browsing level selection module. Authorized personnel use the network under the supervision of authorized personnel, which is convenient for unauthorized personnel, especially those who have no authority to log in. The network security use management, and the keyword shielding module is set on the browsing module, personnel can automatically choose to block and eliminate network information that they do not want to browse. Provide higher selectivity and protection for registrants, and improve the security protection of network information for individuals. The login method modules include face recognition module, ID card verification module, SMS verification module, and fingerprint recognition module. The face recognition module passes the Collect the facial information of the person to log in, the ID verification module logs in by entering the ID number of the login person, the SMS verification module obtains the temporary login verification code by entering the mobile phone number, and enters the verification code to log in, and the fingerprint recognition module logs in by obtaining the login fingerprint. Use a variety of authentication methods to flexibly choose to log in to the network server.
以上显示和描述了本发明的基本原理和主要特征和本发明的优点，本行业的技术人员应该了解，本发明不受上述实施例的限制，上述实施例和说明书中描述的只是说明本发明的原理，在不脱离本发明精神和范围的前提下，本发明还会有各种变化和改进，这些变化和改进都落入要求保护的本发明范围内，本发明要求保护范围由所附的权利要求书及其等效物界定。The basic principles, main features and advantages of the present invention are shown and described above. Those skilled in the art should understand that the present invention is not limited by the above-mentioned embodiments, and the descriptions in the above-mentioned embodiments and the description are only for illustrating the present invention. principle, without departing from the spirit and scope of the present invention, the present invention will also have various changes and improvements, these changes and improvements all fall within the scope of the claimed invention, and the claimed scope of the present invention is determined by the appended rights Requirements and their equivalents are defined.
Claims (8)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010630776.7ACN111756766A (en) | 2020-07-01 | 2020-07-01 | A network information security protection system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010630776.7ACN111756766A (en) | 2020-07-01 | 2020-07-01 | A network information security protection system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111756766Atrue CN111756766A (en) | 2020-10-09 |
Family
ID=72678882
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010630776.7APendingCN111756766A (en) | 2020-07-01 | 2020-07-01 | A network information security protection system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111756766A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114885329A (en)* | 2022-03-21 | 2022-08-09 | 廖雷 | Information security system based on wireless communication network |
| CN116055079A (en)* | 2021-12-15 | 2023-05-02 | 江苏航天大为科技股份有限公司 | A network data management platform |
Citations (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050097595A1 (en)* | 2003-11-05 | 2005-05-05 | Matti Lipsanen | Method and system for controlling access to content |
| CN101098246A (en)* | 2006-06-27 | 2008-01-02 | 张恩迪 | Internet manager |
| CN101132404A (en)* | 2007-09-14 | 2008-02-27 | 腾讯科技（深圳）有限公司 | Web page contents step presentation system and method thereof |
| CN101299694A (en)* | 2007-04-30 | 2008-11-05 | 华为技术有限公司 | Method and system for managing caller in household network, household gateway |
| CN102214286A (en)* | 2010-04-08 | 2011-10-12 | 鸿富锦精密工业（深圳）有限公司 | Network content restricted browsing control system and method |
| CN104239107A (en)* | 2014-09-23 | 2014-12-24 | 三星电子（中国）研发中心 | Application customizing method and application customizing device |
| CN106096366A (en)* | 2016-06-08 | 2016-11-09 | 北京奇虎科技有限公司 | A kind of information processing method, device and equipment |
| CN106777089A (en)* | 2016-12-13 | 2017-05-31 | 北京奇虎科技有限公司 | Content screen method, device and mobile terminal |
| CN107566408A (en)* | 2017-10-20 | 2018-01-09 | 温州市捷点信息技术有限公司 | A kind of network safety system and method |
| CN107659584A (en)* | 2017-10-31 | 2018-02-02 | 四川仕虹腾飞信息技术有限公司 | A kind of food processing factory's network security management system |
| CN207612279U (en)* | 2017-10-31 | 2018-07-13 | 四川仕虹腾飞信息技术有限公司 | A kind of food processing factory's network security management system |
| CN108959619A (en)* | 2018-07-17 | 2018-12-07 | 武汉市冰盒网络科技有限公司 | Content screen method, user equipment, storage medium and device |
| CN110324348A (en)* | 2019-07-08 | 2019-10-11 | 陈浩 | A kind of information security of computer network monitoring system |
| CN209627407U (en)* | 2019-04-12 | 2019-11-12 | 江苏亨通工控安全研究院有限公司 | The safety isolation network gate of limited connection |
- 2020
- 2020-07-01CNCN202010630776.7Apatent/CN111756766A/enactivePending
Patent Citations (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050097595A1 (en)* | 2003-11-05 | 2005-05-05 | Matti Lipsanen | Method and system for controlling access to content |
| CN101098246A (en)* | 2006-06-27 | 2008-01-02 | 张恩迪 | Internet manager |
| CN101299694A (en)* | 2007-04-30 | 2008-11-05 | 华为技术有限公司 | Method and system for managing caller in household network, household gateway |
| CN101132404A (en)* | 2007-09-14 | 2008-02-27 | 腾讯科技（深圳）有限公司 | Web page contents step presentation system and method thereof |
| CN102214286A (en)* | 2010-04-08 | 2011-10-12 | 鸿富锦精密工业（深圳）有限公司 | Network content restricted browsing control system and method |
| CN104239107A (en)* | 2014-09-23 | 2014-12-24 | 三星电子（中国）研发中心 | Application customizing method and application customizing device |
| CN106096366A (en)* | 2016-06-08 | 2016-11-09 | 北京奇虎科技有限公司 | A kind of information processing method, device and equipment |
| CN106777089A (en)* | 2016-12-13 | 2017-05-31 | 北京奇虎科技有限公司 | Content screen method, device and mobile terminal |
| CN107566408A (en)* | 2017-10-20 | 2018-01-09 | 温州市捷点信息技术有限公司 | A kind of network safety system and method |
| CN107659584A (en)* | 2017-10-31 | 2018-02-02 | 四川仕虹腾飞信息技术有限公司 | A kind of food processing factory's network security management system |
| CN207612279U (en)* | 2017-10-31 | 2018-07-13 | 四川仕虹腾飞信息技术有限公司 | A kind of food processing factory's network security management system |
| CN108959619A (en)* | 2018-07-17 | 2018-12-07 | 武汉市冰盒网络科技有限公司 | Content screen method, user equipment, storage medium and device |
| CN209627407U (en)* | 2019-04-12 | 2019-11-12 | 江苏亨通工控安全研究院有限公司 | The safety isolation network gate of limited connection |
| CN110324348A (en)* | 2019-07-08 | 2019-10-11 | 陈浩 | A kind of information security of computer network monitoring system |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116055079A (en)* | 2021-12-15 | 2023-05-02 | 江苏航天大为科技股份有限公司 | A network data management platform |
| CN114885329A (en)* | 2022-03-21 | 2022-08-09 | 廖雷 | Information security system based on wireless communication network |
| CN114885329B (en)* | 2022-03-21 | 2023-08-08 | 湖南奥骏科技集团有限公司 | An Information Security System Based on Wireless Communication Network |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112364377B (en) | A data classification and classification safety protection system adapted to the electric power industry | |
| US10606988B2 (en) | Security device, methods, and systems for continuous authentication | |
| CN112182519B (en) | Computer storage system security access method and access system | |
| US9047464B2 (en) | Continuous monitoring of computer user and computer activities | |
| CN206039673U (en) | Finger vein discernment safe deposit box control system with intelligent management function | |
| Malik et al. | Exploring the impact of security technologies on mental health: A comprehensive review | |
| CN106131072A (en) | A kind of computer information safe system | |
| CN2779485Y (en) | High-security mobile data storage device | |
| CN111756766A (en) | A network information security protection system | |
| CN112507304A (en) | Information management system for retired soldiers | |
| Agrafiotis et al. | A tripwire grammar for insider threat detection | |
| CN115565242A (en) | Data leakage prevention system based on AI behavior recognition technology | |
| CN204680024U (en) | Computer security based on dynamic human face recognition technology is taken precautions against and early warning system | |
| CN110874483A (en) | Method and device for preventing personal information from being leaked | |
| CN119760702A (en) | A large language model attack detection method based on blockchain | |
| CN210605707U (en) | Data security protection system | |
| Sabater | Biometrics as password alternative | |
| Carstens et al. | Mobile Device Espionage. | |
| CN107018143A (en) | The monitoring system of defense for the APT monitoring defence platforms analyzed based on big data | |
| Oganesian | The right to privacy and data protection in the information age | |
| CN109117618A (en) | A kind of secure log control method, apparatus and system | |
| CN111368280A (en) | Authority management method and system based on face recognition | |
| Arjunwadkar et al. | The rule based intrusion detection and prevention model for biometric system | |
| Schomakers et al. | Insights on data sensitivity from the technical, legal and the users’ perspectives—practical suggestions on how to raise more awareness for the assumed exercise of informational self-determination | |
| CN223006465U (en) | Contactless palm vein recognition intelligent security management terminal |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication | Application publication date:20201009 | |
| WD01 | Invention patent application deemed withdrawn after publication |