CN111915857A - Alarm level determination method and device, electronic equipment and storage medium - Google Patents
Alarm level determination method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN111915857A CN111915857A CN202010724753.2A CN202010724753A CN111915857A CN 111915857 A CN111915857 A CN 111915857A CN 202010724753 A CN202010724753 A CN 202010724753A CN 111915857 A CN111915857 A CN 111915857A
- Authority
- CN
- China
- Prior art keywords
- alarm
- event
- score
- level
- determining
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
- G08B21/18—Status alarms
- G08B21/182—Level alarms, e.g. alarms responsive to variables exceeding a threshold
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B25/00—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems
Landscapes
- Business, Economics & Management (AREA)
- Emergency Management (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Alarm Systems (AREA)
Abstract
The application provides an alarm level determination method, an alarm level determination device, electronic equipment and a storage medium, which are used for accurately determining an alarm level of an alarm event. The method comprises the following steps: when an alarm event is detected, determining a corresponding initial alarm level according to the alarm event; obtaining an event identification result associated with the alarm event; the event identification result comprises identified target abnormal events for causing alarm events; and determining a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level.
Description
Technical Field
The application relates to security technologies, in particular to an alarm level determination method, an alarm level determination device, electronic equipment and a storage medium.
Background
In a security scene, front-end equipment such as a camera, a temperature sensor and the like reports an alarm event to a management control center when detecting an abnormality. The management control center can be a designated electronic device, such as a server, a designated front-end device, a cloud platform, and the like.
When detecting the alarm event, the management control center determines the alarm level of the alarm event according to the alarm event. However, at present, the alarm level is determined only according to the alarm event, so that the determined alarm level is not accurate enough and false alarm is easy to generate.
Disclosure of Invention
The application provides an alarm level determination method, an alarm level determination device, electronic equipment and a storage medium, which are used for accurately determining the alarm level of an alarm event.
The technical scheme provided by the application comprises the following steps:
according to a first aspect of the present application, there is provided an alarm level determination method, the method comprising:
when an alarm event is detected, determining a corresponding initial alarm level according to the alarm event;
obtaining an event identification result associated with the alarm event; the event identification result comprises identified target abnormal events for causing the alarm event;
and determining a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level.
As one example, the determining a corresponding initial alarm level from the alarm event includes:
obtaining at least one attribute parameter corresponding to the alarm event; the attribute parameters are used for characterizing the alarm event;
determining an alarm reference score corresponding to the at least one attribute parameter in a corresponding relation between the set attribute parameters and the alarm reference scores;
and determining the initial alarm level according to the alarm reference value corresponding to the at least one attribute parameter.
As an example, the property parameter comprises an alarm time and/or an alarm type and/or an alarm area; the alarm time is the time when the alarm event is detected, the alarm type is the alarm type carried by the alarm event, and the alarm area is as follows: initiating a monitoring area corresponding to an alarm source of the alarm event;
the determining the alarm reference score corresponding to the at least one attribute parameter in the corresponding relationship between the set attribute parameters and the alarm reference scores includes:
determining an alarm time period in which the alarm time is located in a set first corresponding relation, finding an alarm score corresponding to the alarm time period in the first corresponding relation, and determining the alarm score as an alarm reference score corresponding to the alarm time; the first corresponding relation is a corresponding relation between a time period and an alarm score; and/or the presence of a gas in the gas,
determining an alarm time period of the alarm time in a set second corresponding relation, searching an alarm score corresponding to the alarm type and the alarm time period in the second corresponding relation, and determining the searched alarm score as an alarm reference score corresponding to the alarm type; the second corresponding relation is the corresponding relation among a time period, an alarm type and an alarm score; and/or the presence of a gas in the gas,
determining an alarm time period of the alarm time in a set third corresponding relation, searching alarm scores corresponding to the alarm type, the alarm time period and the alarm area in the third corresponding relation, and determining the searched alarm scores as alarm reference scores corresponding to the alarm area; the third corresponding relation is the corresponding relation among time periods, alarm types, alarm areas and alarm scores.
As an example, the determining the initial alarm level according to the alarm reference score corresponding to at least one attribute parameter includes:
determining an initial alarm comprehensive score according to an alarm reference score corresponding to at least one attribute parameter, wherein when the number of the attribute parameters is 1, the initial alarm comprehensive score is the alarm reference score corresponding to the attribute parameter, and when the number of the attribute parameters is more than 1, the initial alarm comprehensive score is obtained by performing setting operation on the alarm reference scores corresponding to the attribute parameters according to a setting algorithm;
and searching an alarm level corresponding to the initial alarm comprehensive score in a set fourth corresponding relation, wherein the fourth corresponding relation is the corresponding relation between the alarm level and the alarm comprehensive score, and determining the searched alarm level as the initial alarm level.
As one example, the obtaining an event identification associated with the alarm event includes:
and receiving an event recognition result input from the outside within a specified time after the initial alarm level is determined.
As an example, the determining a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level includes:
finding a target event identification score corresponding to the target abnormal event in the corresponding relation between the set abnormal event and the event identification score;
and determining a target alarm level corresponding to the alarm event according to the target event identification score and the initial alarm comprehensive score corresponding to the initial alarm level.
As an example, the determining a target alarm level corresponding to the alarm event according to the target event identification score and the initial alarm integrated score corresponding to the initial alarm level includes:
determining a target alarm comprehensive score according to the target event identification score and the initial alarm comprehensive score;
and searching the alarm level corresponding to the target alarm comprehensive score in the fourth corresponding relation, and determining the searched alarm level as the target alarm category corresponding to the alarm event.
According to a second aspect of the present application, there is provided an alarm level determination apparatus comprising:
the level determining unit is used for determining a corresponding initial alarm level according to the alarm event when the alarm event is detected;
a result obtaining unit for obtaining an event identification result associated with the alarm event; the event identification result comprises identified target abnormal events for causing the alarm event;
the level determining unit is further configured to determine a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level.
As an example, the level determining unit determines a corresponding initial alarm level depending on the alarm event, including:
obtaining at least one attribute parameter corresponding to the alarm event; the attribute parameters are used for characterizing the alarm event;
determining an alarm reference score corresponding to the at least one attribute parameter in a corresponding relation between the set attribute parameters and the alarm reference scores;
and determining the initial alarm level according to the alarm reference value corresponding to the at least one attribute parameter.
As an example, the property parameter comprises an alarm time and/or an alarm type and/or an alarm area; the alarm time is the time when the alarm event is detected, the alarm type is the alarm type carried by the alarm event, and the alarm area is as follows: initiating a monitoring area corresponding to an alarm source of the alarm event;
the level determining unit determines an alarm reference score corresponding to the at least one attribute parameter in a correspondence between the set attribute parameters and the alarm reference scores, and includes:
determining an alarm time period in which the alarm time is located in a set first corresponding relation, finding an alarm score corresponding to the alarm time period in the first corresponding relation, and determining the alarm score as an alarm reference score corresponding to the alarm time; the first corresponding relation is a corresponding relation between a time period and an alarm score; and/or the presence of a gas in the gas,
determining an alarm time period of the alarm time in a set second corresponding relation, searching an alarm score corresponding to the alarm type and the alarm time period in the second corresponding relation, and determining the searched alarm score as an alarm reference score corresponding to the alarm type; the second corresponding relation is the corresponding relation among a time period, an alarm type and an alarm score; and/or the presence of a gas in the gas,
determining an alarm time period of the alarm time in a set third corresponding relation, searching alarm scores corresponding to the alarm type, the alarm time period and the alarm area in the third corresponding relation, and determining the searched alarm scores as alarm reference scores corresponding to the alarm area; the third corresponding relation is the corresponding relation among time periods, alarm types, alarm areas and alarm scores.
As an example, the determining the initial alarm level according to the alarm reference score corresponding to at least one attribute parameter by the level determining unit includes:
determining an initial alarm comprehensive score according to an alarm reference score corresponding to at least one attribute parameter, wherein when the number of the attribute parameters is 1, the initial alarm comprehensive score is the alarm reference score corresponding to the attribute parameter, and when the number of the attribute parameters is more than 1, the initial alarm comprehensive score is obtained by performing setting operation on the alarm reference scores corresponding to the attribute parameters according to a setting algorithm;
and searching an alarm level corresponding to the initial alarm comprehensive score in a set fourth corresponding relation, wherein the fourth corresponding relation is the corresponding relation between the alarm level and the alarm comprehensive score, and determining the searched alarm level as the initial alarm level.
As one example, the result obtaining unit obtains an event identification result associated with the alarm event, including:
and receiving an event recognition result input from the outside within a specified time after the initial alarm level is determined.
As an example, the determining, by the level determining unit, a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level includes:
finding a target event identification score corresponding to the target abnormal event in the corresponding relation between the set abnormal event and the event identification score;
and determining a target alarm level corresponding to the alarm event according to the target event identification score and the initial alarm comprehensive score corresponding to the initial alarm level.
As an example, the determining, by the level determining unit, a target alarm level corresponding to the alarm event according to the target event identification score and the initial alarm integrated score corresponding to the initial alarm level includes:
determining a target alarm comprehensive score according to the target event identification score and the initial alarm comprehensive score;
and searching the alarm level corresponding to the target alarm comprehensive score in the fourth corresponding relation, and determining the searched alarm level as the target alarm category corresponding to the alarm event.
According to a third aspect of the present application, an electronic device is provided, which includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;
a memory for storing a computer program;
and the processor is used for realizing the alarm level determination method when executing the program stored in the memory.
According to a fourth aspect of the present application, there is provided a machine-readable storage medium having stored therein a computer program which, when executed by a processor, implements the aforementioned alarm level determination method.
According to the technical scheme, when the corresponding alarm level (marked as the initial alarm level) is determined according to the alarm event, the initial alarm level is not determined as the final alarm level, but the corresponding alarm level (marked as the target alarm level) is finally determined by combining the initial alarm level and the event identification result associated with the alarm event (the event identification result comprises the identified target abnormal event for causing the alarm event), so that the alarm accuracy can be improved and the misoperation can be reduced compared with the existing method of determining the corresponding alarm level only depending on the alarm event.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and together with the description, serve to explain the principles of the application.
Fig. 1 is a schematic flowchart of an alarm level determination method according to an embodiment of the present application;
FIG. 2 is a flowchart illustrating an implementation of step 101 provided in an embodiment of the present application;
FIG. 3 is a flowchart illustrating an implementation of step 103 provided by an embodiment of the present application;
fig. 4 is a schematic structural diagram of an alarm level determining apparatus according to an embodiment of the present application;
fig. 5 is a schematic hardware structure diagram of the apparatus shown in fig. 4 according to an embodiment of the present disclosure.
Detailed Description
Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present application, as detailed in the appended claims.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in this application and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.
It is to be understood that although the terms first, second, third, etc. may be used herein to describe various information, such information should not be limited to these terms. These terms are only used to distinguish one type of information from another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present application. The word "if" as used herein may be interpreted as "at … …" or "when … …" or "in response to a determination", depending on the context.
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application is described in detail below with reference to the accompanying drawings and specific embodiments.
Please refer to fig. 1, which is a flowchart illustrating an alarm level determining method according to an embodiment of the present disclosure. As an example, the process shown in fig. 1 may be applied to a management control center. In an example, the management control center may be a designated electronic device, such as a server, a designated front-end device, a cloud platform, and the like, and the embodiment is not particularly limited.
As shown in fig. 1, the process may include the following steps:
step 101, when an alarm event is detected, determining a corresponding initial alarm level according to the alarm event.
In application, at least one front-end device can be arranged in a monitoring area according to requirements in advance. Optionally, the front-end device may be a camera, a radar, a temperature sensor, an infrared sensor, or the like, which is not limited in this application.
In the embodiment of the present application, each front-end device is configured with a corresponding monitoring area for monitoring the corresponding monitoring area. In application, the monitoring area may be set according to actual situations, and may be, for example, a closed area such as a bank, a supermarket, or a school, which is not limited in this application.
In one example, once the front-end device detects an abnormal event, for example, the temperature sensor detects that the temperature is higher than a preset temperature threshold, and the radar sensor detects that the moving speed of the object exceeds a preset speed threshold, an alarm event is reported to the management control center. That is, in this step 101, the management control center detects an alarm event reported by the front-end device. When the management control center detects an alarm event, as described in step 101, the management control center first determines a corresponding initial alarm level according to the alarm event. The flow shown in fig. 2 will describe how to determine the initial alarm level by way of example, which will not be described herein again. Here, the initial alarm level can be represented by a numerical value, and the higher the numerical value is, the more serious the result caused by the abnormality can be represented, and the urgent need for processing is met; conversely, a lower value may be used to indicate that the effect of the exception is not severe and may be postponed.
Step 102, obtaining an event identification result associated with an alarm event; the event recognition result comprises the identified target abnormal event for causing the alarm event.
As an example, in order to ensure timely processing of the alarm event, after the initial alarm level corresponding to the alarm event is determined in step 101, the following step a may be performed: and finding the disposal plan corresponding to the initial alarm level according to the corresponding relation between the preset alarm level and the disposal plan, and carrying out corresponding treatment according to the found disposal plan. Based on this, in one example, the step 102 can be executed during the corresponding processing according to the found treatment plan.
As an example, if the initial alarm level is relatively low and is used to indicate that the processing can be suspended, the step a may not be executed after the initial alarm level corresponding to the alarm event is determined in the step 101. Based on this, in one example, this step 102 may be performed before performing the corresponding treatment according to the found treatment plan.
In embodiments of the present application, there are various implementations for obtaining event identification results associated with alarm events. For example, the event recognition result may be received from an external source within a specified time period after the initial alarm level is determined. The external input event recognition result may be an event recognition result carrying the target abnormal event, which is input by the user after the target abnormal event is recognized.
In one example, the management control center upon detecting the alarm event notifies the management user such as notifying the management user of the alarm event or displaying the alarm event on a screen of the management control center, etc. And after receiving the notification, the management user identifies the abnormity causing the alarm event, finally identifies a target abnormal event, and feeds back the target abnormal event carried in the event identification result to the management control center. Namely, the event recognition result associated with the alarm event is obtained in the step 102 (the event recognition result includes the identified target abnormal event for causing the alarm event).
As another implementation manner, the obtaining of the event identification result associated with the alarm event may also be: and receiving event recognition results input by other external equipment. For example, the management control center triggers other external devices to perform event identification after detecting an alarm event, the other external devices identify the abnormality causing the alarm event according to a pre-configured event identification algorithm after receiving the trigger, finally identify a target abnormal event, and feed back the target abnormal event carried in an event identification result to the management control center. This also enables obtaining an event identification result associated with the alarm event in step 102 described above (the event identification result includes the identified target abnormal event for causing the alarm event). It should be noted that the other external device may be the front-end device or another device separately provided besides the front-end device, such as a camera or a radar, and the other device is not particularly limited in this application. In addition, the event recognition algorithm can be selected according to actual conditions, and the event recognition algorithm is not particularly limited in the application.
And 103, determining a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level.
As can be seen from step 103, when the corresponding alarm level (denoted as an initial alarm level) is determined according to the alarm event, the initial alarm level is not determined as a final alarm level, but the corresponding alarm level (denoted as a target alarm level) is finally determined by combining the initial alarm level and an event recognition result associated with the alarm event (the event recognition result includes a target abnormal event which has been recognized to cause the alarm event), which can improve the alarm accuracy and reduce the misoperation compared with the conventional method of determining the corresponding alarm level only depending on the alarm event.
In the embodiment of the present application, how to determine the target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level in step 103 has many implementation manners. The flow shown in fig. 3 will describe one of the implementation manners by way of example, which will not be described herein again.
Optionally, as an example, after the target alarm level is determined, the disposal plan corresponding to the target alarm level may be found according to a preset correspondence between the alarm level and the disposal plan, and when no processing corresponding to another disposal plan is currently executed, corresponding processing is directly performed according to the found disposal plan; when the processing corresponding to other handling plans (such as the handling plan corresponding to the initial alarm level) is currently executed, the processing corresponding to the other handling plans can be stopped, and the processing is directly switched to corresponding processing according to the searched handling plans.
Thus, the flow shown in fig. 1 is completed.
It can be seen that, in the embodiment of the present application, when a corresponding alarm level (denoted as an initial alarm level) is determined according to an alarm event, the initial alarm level is not determined as a final alarm level, but the corresponding alarm level (denoted as a target alarm level) is finally determined by combining the initial alarm level and an event recognition result associated with the alarm event (the event recognition result includes an identified target abnormal event for causing the alarm event), which can improve the alarm accuracy and reduce the misoperation compared with the conventional method of determining the corresponding alarm level only depending on the alarm event.
How to determine the corresponding initial alarm level according to the alarm event in the above step 101 is described as follows:
referring to fig. 2, fig. 2 is a flowchart illustrating an implementation of step 101 provided in an embodiment of the present application. As shown in fig. 2, the process may include the following steps:
step 201, at least one attribute parameter corresponding to the alarm event is obtained.
In the embodiment of the present application, the attribute parameters are used for characterizing an alarm event, such as at least one of an alarm time, an alarm type, an alarm area, and the like. The attribute parameters are described here simply in terms of alarm time, alarm type, alarm area. The attribute parameter may not be any of the alarm time, the alarm type, and the alarm area, and may be set in advance according to actual conditions. In this embodiment, attribute parameters are described temporarily by the alarm time, the alarm type, and the alarm area:
optionally, the alarm time refers to the time when the alarm event is detected, and may be indicative of the occurrence time of the alarm event. The alarm type is an alarm type carried by an alarm event, and can represent the alarm type triggered by a target abnormal event causing the alarm event, such as smoke alarm, infrared intrusion alarm, video loss alarm and the like.
The alarm area is a monitoring area corresponding to an alarm source (front-end equipment reporting an alarm event) initiating the alarm event, and can be used for representing an occurrence area of a target abnormal event causing the alarm event, such as a business hall, a vault and the like. In one example, the alarm event may carry an IP address and/or a MAC address of the alarm source and/or an identification of the alarm source device. Based on this, when the management control center detects an alarm event, the management control center searches the monitoring area corresponding to the IP address and/or the MAC address of the alarm source and/or the identifier of the alarm source device according to the set corresponding relationship between the IP address and/or the MAC address of the device and/or the identifier of the alarm source device and the monitoring area, and determines the searched monitoring area as the alarm area.
Step 202, determining an alarm reference score corresponding to at least one attribute parameter in the corresponding relationship between the set attribute parameters and the alarm reference scores.
Taking the attribute parameters as the alarm time as an example, in step 202, determining the alarm reference score corresponding to at least one attribute parameter in the corresponding relationship between the set attribute parameters and the alarm reference scores may include:
determining an alarm time period in which the alarm time is located in the set first corresponding relation, finding an alarm score corresponding to the alarm time period in the first corresponding relation, and determining the alarm score as an alarm reference score corresponding to the alarm time; the first correspondence is a correspondence between a time period and an alarm score.
For example, the first correspondence relationship may be indicated by a table, such as the first correspondence relationship illustrated in table 1:
TABLE 1
| Time period | Alarm score |
| At 8-10 th of time | 50 |
| At 10-17 hours | 30 |
| 17-19 times | 60 |
| 19-24 time ago | 30 |
| At 0-6 time | 80 |
| At 6-8 times | 70 |
In table 1, the third example of the behavior in table 1 is described, where "10-17 hours" indicates that the time zone is from 10 am to 17 pm, and "30" indicates that the alarm score corresponding to the time zone "10-17 hours" is 30.
Of course, the first correspondence relationship illustrated by the table is only an example and is not limiting.
Taking table 1 as an example, if the alarm time is 10 am: and 30, determining the time period when the alarm time is located in the alarm time period of 10-17 based on the first corresponding relation shown in table 1, and finding that the alarm score value corresponding to the time period of 10-17 is 30 based on the first corresponding relation shown in table 1, wherein the alarm reference score value corresponding to the alarm time is the alarm score value corresponding to the time period of 10-17, namely 30.
Taking the attribute parameters as the alarm type, determining the alarm reference score corresponding to at least one attribute parameter in the corresponding relationship between the set attribute parameters and the alarm reference scores in step 202 may include:
determining an alarm time period of the alarm time in the set second corresponding relation, searching an alarm score corresponding to the alarm type and the alarm time period in the second corresponding relation, and determining the searched alarm score as an alarm reference score corresponding to the alarm type; the second corresponding relation is the corresponding relation among the time period, the alarm type and the alarm score.
For example, the second correspondence relationship may be represented by a table, such as the second correspondence relationship shown in table 2:
TABLE 2
In table 2, a third example of behavior in table 2 is described, where "8-10 hours" indicates that the time period is from 8 am to 10 am, "motion detection" indicates that the alarm type is motion detection, and "30" indicates that the time period "8-10 hours" and the alarm type is "motion detection" correspond to an alarm score of 30.
Of course, the second correspondence relationship illustrated by the table is only an example and is not limited.
Taking table 2 as an example, if the alarm type is smoke alarm, the alarm time is 10 a.m.: and 30, determining the time period when the alarm time period is 10-17 based on the second corresponding relation shown in the table 2, and finding that the alarm score corresponding to the time period when the alarm type of the smoke sensation alarm is 10-17 is 80 based on the second corresponding relation shown in the table 2, wherein the alarm reference score corresponding to the alarm type is the corresponding alarm score of the time period when the alarm type of the smoke sensation alarm is 10-17, namely 80.
Finally, taking the attribute parameters as the alarm area as an example, in step 202, determining the alarm reference score corresponding to at least one attribute parameter in the corresponding relationship between the set attribute parameters and the alarm reference scores may include:
determining an alarm time period of the alarm time in a set third corresponding relation, searching alarm scores corresponding to the alarm type, the alarm time period and the alarm area in the third corresponding relation, and determining the searched alarm scores as alarm reference scores corresponding to the alarm area; the third corresponding relation is the corresponding relation among time periods, alarm types, alarm areas and alarm scores.
For example, the third correspondence relationship may be indicated by a table, such as the third correspondence relationship shown in table 3 by way of example: TABLE 3
Table 3 will be described with reference to the third behavior example of table 3, where "8-10 hours" indicates that the time period is from 8 am to 10 am, "video loss" indicates that the alarm type is video loss, "lobby" indicates that the alarm area is an lobby, "60" indicates that the alarm area is an lobby, "time period" 8-10 hours, "and the alarm type" video loss "indicates that the corresponding alarm score is 60.
Of course, the third correspondence illustrated by the table is only an example and is not limited.
Taking table 3 as an example, if the alarm area is a hall and the alarm time is 8 am: 30. if the alarm type is video loss, determining a time period when the alarm time is 8-10 based on the third corresponding relationship shown in table 3, and based on the third corresponding relationship shown in table 3, finding that the alarm score of the alarm area of the hall corresponding to the time period of 8-10 and the alarm type of video loss is 60, the alarm reference score corresponding to the alarm area is 60 corresponding to the alarm area of the hall corresponding to the time period of 8-10 and the alarm type of video loss.
Step 203, determining an initial alarm level according to the alarm reference score corresponding to the at least one attribute parameter.
As an example, in this step 203, there are various implementations for determining the initial alarm level according to the alarm reference score corresponding to at least one attribute parameter. As one implementation, the initial alarm level may be determined by:
and b, determining an initial alarm comprehensive score according to the alarm reference score corresponding to at least one attribute parameter.
In the step b, when the initial alarm comprehensive score is determined, if the number of the attribute parameters is 1, the initial alarm comprehensive score is the alarm reference score corresponding to the attribute parameter. And if the number of the attribute parameters is more than 1, the initial alarm comprehensive score is obtained by performing setting operation on the alarm reference scores corresponding to the attribute parameters according to a setting algorithm.
Alternatively, the setting algorithm may be a summation algorithm. For example, the alarm reference scores corresponding to the attribute parameters are summed, and the result obtained by the summation is the initial alarm integrated score.
Alternatively, the setting algorithm may be a weighted sum algorithm. For example, the alarm reference score corresponding to each attribute parameter is multiplied by the weight value configured in advance for each attribute parameter, so as to obtain the weighted alarm reference score corresponding to each attribute parameter. And then, summing the weighted alarm reference scores corresponding to the attribute parameters, wherein the result obtained by summation is the initial alarm comprehensive score. Here, the weighted value of each attribute parameter may be preset empirically, and the application does not specifically limit the weighted value of each attribute parameter.
And c, searching an alarm level corresponding to the initial alarm comprehensive score in a set fourth corresponding relation, wherein the fourth corresponding relation is the corresponding relation between the alarm level and the alarm comprehensive score, and determining the searched alarm level as the initial alarm level.
As an example, in this step c, searching for the alarm level corresponding to the initial alarm integrated score in the set fourth corresponding relationship may include: and taking the determined initial alarm comprehensive score as a keyword, and searching the alarm level corresponding to the keyword in the fourth corresponding relation.
Optionally, the fourth corresponding relationship may be represented by a table, such as the fourth corresponding relationship exemplarily shown in table 4:
TABLE 4
| Alarm level | Alarm composite score |
| First stage | >300 |
| Second stage | 201-300 |
| Three-stage | 100-200 |
| Four stages | 0-100 |
The third behavior example of table 4 is used to explain table 4, where "two levels" indicates that the alarm level is two levels, and "201-300" indicates that the corresponding alarm integrated score is 201-300 when the alarm level is two levels. The larger the alarm comprehensive score is, the higher the alarm level corresponding to the alarm comprehensive score is; conversely, the lower the alarm composite score, the lower the alarm level that can be used to represent it.
Of course, the fourth corresponding relationship illustrated by the table is only an example and is not limited.
The above description is provided for how the corresponding initial alarm level is determined according to the alarm event in step 101. It should be noted that the above description is only an example to describe how the initial alarm level is determined, and is not intended to be limiting.
How to determine the target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level in the above step 103 is described as follows:
referring to fig. 3, fig. 3 is a flowchart illustrating implementation of step 103 according to an embodiment of the present disclosure. As shown in fig. 3, the process may include the following steps:
step 301, finding out a target event identification score corresponding to the target abnormal event in the corresponding relationship between the set abnormal event and the event identification score.
As an example, in step 301, finding the target event identification score corresponding to the target exceptional event in the correspondence between the set exceptional event and the event identification score may include: and taking the target abnormal event as a keyword, and searching the target event identification score corresponding to the keyword in the corresponding relation between the set abnormal event and the event identification score.
For example, the correspondence between the abnormal event and the event identification score can be indicated by a table, such as the correspondence between the abnormal event and the event identification score shown in table 5 as an example:
TABLE 5
In the second behavior example of table 5, table 5 is described, where "forced door opening" indicates that an abnormal event causing an alarm event is forced door opening, and "300" indicates that the event identification score corresponding to the abnormal event "forced door opening" is 300. The larger the event identification score is, the more serious the consequence caused by the abnormal event corresponding to the event identification score can be represented; conversely, the lower the event identification score is, the less serious the consequences caused by the abnormal event corresponding to the event identification score can be represented.
Of course, the correspondence between the abnormal events and the event identification scores shown in the table is only an example and is not limiting.
Step 302, determining a target alarm level corresponding to the alarm event according to the target event identification score and the initial alarm comprehensive score corresponding to the initial alarm level.
As an example, in this step 302, there are various implementations for determining the target alarm level corresponding to the alarm event according to the target event identification score and the initial alarm integrated score. As one implementation mode, the method can be realized by the following steps:
and d, determining a target alarm comprehensive score according to the target event identification score and the initial alarm comprehensive score.
In the embodiment of the application, in the step d, the identification score of the target event and the initial alarm comprehensive score can be set and calculated through a setting algorithm, and the obtained result is determined as the target alarm comprehensive score.
Alternatively, the setting algorithm may be a summation algorithm. For example, the target event identification score and the initial alarm integrated score are summed, and the result obtained by the summation is the target alarm integrated score.
Alternatively, the setting algorithm may be a weighted sum algorithm. For example, the target event identification score and the initial alarm integrated score are multiplied by respective pre-configured weight values to obtain a weighted target event identification score and a weighted initial alarm integrated score. And then, summing the weighted target event identification score and the weighted initial alarm comprehensive score, wherein the result obtained by summation is the target alarm comprehensive score. Here, the weighted values of the target event recognition score and the initial alarm integrated score may be preset empirically, which is not specifically limited in the present application.
And e, searching an alarm level corresponding to the target alarm comprehensive score in a set fourth corresponding relation, wherein the fourth corresponding relation is the corresponding relation between the alarm level and the alarm comprehensive score, and determining the searched alarm level as the target alarm level corresponding to the alarm event.
As an example, in this step e, searching for an alarm level corresponding to the target alarm integrated score in the set fourth corresponding relationship may include: and taking the determined target alarm comprehensive score as a keyword, and searching the alarm level corresponding to the keyword in the fourth corresponding relation.
The above describes how to determine the target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level in step 103. It should be noted that the above description is only an example to describe how the target alarm level is determined, and is not intended to be limiting.
The following describes the apparatus provided in the present application:
fig. 4 is a schematic structural diagram of an alarm level determining apparatus according to an embodiment of the present application, where the alarm level determining apparatus is applicable to the management control center.
As shown in fig. 4, the alarm level determination means may include:
the level determining unit is used for determining a corresponding initial alarm level according to the alarm event when the alarm event is detected;
a result obtaining unit for obtaining an event identification result associated with the alarm event; the event identification result comprises identified target abnormal events for causing alarm events;
and the level determining unit is also used for determining a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level.
As an example, the level determining unit determines a corresponding initial alarm level depending on the alarm event, including: obtaining at least one attribute parameter corresponding to the alarm event; the attribute parameters are used for representing alarm events; determining an alarm reference score corresponding to at least one attribute parameter in the corresponding relation between the set attribute parameters and the alarm reference scores; and determining an initial alarm level according to the alarm reference value corresponding to the at least one attribute parameter.
As an example, the attribute parameters include alarm time and/or alarm type and/or alarm area; the alarm time is the time when the alarm event is detected, the alarm type is the alarm type carried by the alarm event, and the alarm area is as follows: initiating a monitoring area corresponding to an alarm source of an alarm event;
the level determining unit determines an alarm reference score corresponding to at least one attribute parameter, and comprises the following steps:
determining an alarm time period in which the alarm time is located in the set first corresponding relation, finding an alarm score corresponding to the alarm time period in the first corresponding relation, and determining the alarm score as an alarm reference score corresponding to the alarm time; the first corresponding relation is the corresponding relation between the time period and the alarm score; and/or determining an alarm time period in which the alarm time is positioned in the set second corresponding relation, searching an alarm score corresponding to the alarm type and the alarm time period in the second corresponding relation, and determining the searched alarm score as an alarm reference score corresponding to the alarm type; the second corresponding relation is the corresponding relation among the time period, the alarm type and the alarm score; and/or determining an alarm time period in which the alarm time is located in a set third corresponding relation, searching alarm scores corresponding to the alarm type, the alarm time period and the alarm area in the third corresponding relation, determining the searched alarm scores as alarm reference scores corresponding to the alarm area, wherein the third corresponding relation is the corresponding relation among the time period, the alarm type, the alarm area and the alarm scores.
As an example, the level determining unit determines an initial alarm level according to an alarm reference score corresponding to at least one attribute parameter, including: determining an initial alarm comprehensive score according to an alarm reference score corresponding to at least one attribute parameter, wherein when the number of the attribute parameters is 1, the initial alarm comprehensive score is the alarm reference score corresponding to the attribute parameter, and when the number of the attribute parameters is more than 1, the initial alarm comprehensive score is obtained by performing setting operation on the alarm reference scores corresponding to the attribute parameters according to a setting algorithm; and searching an alarm level corresponding to the initial alarm comprehensive score in a set fourth corresponding relation, wherein the fourth corresponding relation is the corresponding relation between the alarm level and the alarm comprehensive score, and determining the searched alarm level as the initial alarm level.
As one example, the result obtaining unit obtains an event identification result associated with the alarm event, including: and receiving an event recognition result input from the outside within a specified time after the initial alarm level is determined.
As an example, the determining unit determines a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level, including: finding a target event identification score corresponding to the target abnormal event in the corresponding relation between the set abnormal event and the event identification score; and determining a target alarm level corresponding to the alarm event according to the target event identification score and an initial alarm comprehensive score corresponding to the initial alarm level, wherein the initial alarm comprehensive score is used for determining the initial alarm level.
As an example, the level determining unit determines a target alarm level corresponding to the alarm event according to the target event identification score and an initial alarm integrated score corresponding to an initial alarm level, where the initial alarm integrated score is used to determine the initial alarm level, and includes: determining a target alarm comprehensive score according to the target event identification score and the initial alarm comprehensive score; and searching an alarm level corresponding to the target alarm comprehensive score in a set fourth corresponding relation, wherein the fourth corresponding relation is the corresponding relation between the alarm level and the alarm comprehensive score, and determining the searched alarm level as a target alarm category corresponding to the alarm event.
This completes the description of the apparatus shown in fig. 4.
Correspondingly, the application also provides a hardware structure of the device shown in fig. 4. Referring to fig. 5, the hardware structure may include: a processor and a machine-readable storage medium having stored thereon machine-executable instructions executable by the processor; the processor is configured to execute machine-executable instructions to implement the methods disclosed in the above examples of the present application.
Based on the same application concept as the method, embodiments of the present application further provide a machine-readable storage medium, where a plurality of computer instructions are stored on the machine-readable storage medium, and when the computer instructions are executed by a processor, the method disclosed in the above example of the present application can be implemented.
The machine-readable storage medium may be, for example, any electronic, magnetic, optical, or other physical storage device that can contain or store information such as executable instructions, data, and the like. For example, the machine-readable storage medium may be: a RAM (random Access Memory), a volatile Memory, a non-volatile Memory, a flash Memory, a storage drive (e.g., a hard drive), a solid state drive, any type of storage disk (e.g., an optical disk, a dvd, etc.), or similar storage medium, or a combination thereof.
The present invention is not intended to be limited to the particular embodiments shown and described, but is to be accorded the widest scope consistent with the principles and novel features herein disclosed.
Claims (10)
1. A method for alarm level determination, the method comprising:
when an alarm event is detected, determining a corresponding initial alarm level according to the alarm event;
obtaining an event identification result associated with the alarm event; the event identification result comprises identified target abnormal events for causing the alarm event;
and determining a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level.
2. The method of claim 1, wherein determining the corresponding initial alarm level based on the alarm event comprises:
obtaining at least one attribute parameter corresponding to the alarm event; the attribute parameters are used for characterizing the alarm event;
determining an alarm reference score corresponding to the at least one attribute parameter in a corresponding relation between the set attribute parameters and the alarm reference scores;
and determining the initial alarm level according to the alarm reference value corresponding to the at least one attribute parameter.
3. The method according to claim 2, characterized in that the property parameters comprise alarm time and/or alarm type and/or alarm area; the alarm time is the time when the alarm event is detected, the alarm type is the alarm type carried by the alarm event, and the alarm area is as follows: initiating a monitoring area corresponding to an alarm source of the alarm event;
the determining the alarm reference score corresponding to the at least one attribute parameter in the corresponding relationship between the set attribute parameters and the alarm reference scores includes:
determining an alarm time period in which the alarm time is located in a set first corresponding relation, finding an alarm score corresponding to the alarm time period in the first corresponding relation, and determining the alarm score as an alarm reference score corresponding to the alarm time; the first corresponding relation is a corresponding relation between a time period and an alarm score; and/or the presence of a gas in the gas,
determining an alarm time period of the alarm time in a set second corresponding relation, searching an alarm score corresponding to the alarm type and the alarm time period in the second corresponding relation, and determining the searched alarm score as an alarm reference score corresponding to the alarm type; the second corresponding relation is the corresponding relation among a time period, an alarm type and an alarm score; and/or the presence of a gas in the gas,
determining an alarm time period of the alarm time in a set third corresponding relation, searching alarm scores corresponding to the alarm type, the alarm time period and the alarm area in the third corresponding relation, and determining the searched alarm scores as alarm reference scores corresponding to the alarm area; the third corresponding relation is the corresponding relation among time periods, alarm types, alarm areas and alarm scores.
4. The method of claim 2, wherein determining the initial alarm level based on an alarm reference score corresponding to at least one attribute parameter comprises:
determining an initial alarm comprehensive score according to an alarm reference score corresponding to at least one attribute parameter, wherein when the number of the attribute parameters is 1, the initial alarm comprehensive score is the alarm reference score corresponding to the attribute parameter, and when the number of the attribute parameters is more than 1, the initial alarm comprehensive score is obtained by performing setting operation on the alarm reference scores corresponding to the attribute parameters according to a setting algorithm;
and searching an alarm level corresponding to the initial alarm comprehensive score in a set fourth corresponding relation, wherein the fourth corresponding relation is the corresponding relation between the alarm level and the alarm comprehensive score, and determining the searched alarm level as the initial alarm level.
5. The method of claim 1, wherein obtaining an event identification associated with the alarm event comprises:
and receiving an event recognition result input from the outside within a specified time after the initial alarm level is determined.
6. The method of claim 4, wherein determining the target alarm level corresponding to the alarm event based on the target exception event and the initial alarm level comprises:
finding a target event identification score corresponding to the target abnormal event in the corresponding relation between the set abnormal event and the event identification score;
and determining a target alarm level corresponding to the alarm event according to the target event identification score and the initial alarm comprehensive score corresponding to the initial alarm level.
7. The method of claim 6, wherein determining the target alarm level for the alarm event based on the target event identification score and the initial alarm composite score for the initial alarm level comprises:
determining a target alarm comprehensive score according to the target event identification score and the initial alarm comprehensive score;
and searching the alarm level corresponding to the target alarm comprehensive score in the fourth corresponding relation, and determining the searched alarm level as the target alarm category corresponding to the alarm event.
8. An alert level determination apparatus, comprising:
the level determining unit is used for determining a corresponding initial alarm level according to the alarm event when the alarm event is detected;
a result obtaining unit for obtaining an event identification result associated with the alarm event; the event identification result comprises identified target abnormal events for causing the alarm event;
the level determining unit is further configured to determine a target alarm level corresponding to the alarm event according to the target abnormal event and the initial alarm level.
9. An electronic device is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor and the communication interface are used for realizing mutual communication by the memory through the communication bus;
a memory for storing a computer program;
a processor for implementing the method of any one of claims 1 to 7 when executing a program stored in the memory.
10. A machine readable storage medium, characterized in that a computer program is stored in the computer readable storage medium, which computer program, when being executed by a processor, carries out the method of any one of claims 1-7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010724753.2A CN111915857B (en) | 2020-07-24 | 2020-07-24 | Alarm level determination method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010724753.2A CN111915857B (en) | 2020-07-24 | 2020-07-24 | Alarm level determination method and device, electronic equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111915857A true CN111915857A (en) | 2020-11-10 |
| CN111915857B CN111915857B (en) | 2022-09-30 |
Family
ID=73280268
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010724753.2A Active CN111915857B (en) | 2020-07-24 | 2020-07-24 | Alarm level determination method and device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111915857B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112419655A (en) * | 2020-11-16 | 2021-02-26 | 浙江大华技术股份有限公司 | Alarm information pushing method, device, equipment and medium |
| CN113112722A (en) * | 2021-03-03 | 2021-07-13 | 杭州海康威视数字技术股份有限公司 | Event detection method, device, system and equipment |
| CN113949590A (en) * | 2021-12-21 | 2022-01-18 | 济南市康养事业发展中心 | Method, system and terminal for determining safety alarm event level |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2007233643A (en) * | 2006-02-28 | 2007-09-13 | Fujikura Ltd | Vibration detection sensor system and vibration detection method |
| US20080088430A1 (en) * | 2006-10-12 | 2008-04-17 | Mitsubishi Electric Corporation | Monitor control system |
| CN101577035A (en) * | 2008-05-02 | 2009-11-11 | 通用电气公司 | Method for managing alarms in a physiological monitoring system |
| CN202563658U (en) * | 2012-03-31 | 2012-11-28 | 北京捷诺视讯数码科技有限公司 | Intelligent alarm analysis and processing device |
| CN107547262A (en) * | 2017-07-25 | 2018-01-05 | 新华三技术有限公司 | Generation method, device and the Network Management Equipment of alarm level |
| CN108133440A (en) * | 2017-12-28 | 2018-06-08 | 福建四创软件有限公司 | A kind of method for automatically generating emergency response early warning |
| CN108898800A (en) * | 2018-09-07 | 2018-11-27 | 中国地质调查局西安地质调查中心 | A kind of geo-hazard early-warning method adding technology based on internet |
| CN110459043A (en) * | 2019-08-12 | 2019-11-15 | 视联动力信息技术股份有限公司 | A kind of alarm processing method and device |
| CN110650036A (en) * | 2019-08-30 | 2020-01-03 | 中国人民财产保险股份有限公司 | Alarm processing method and device and electronic equipment |
-
2020
- 2020-07-24 CN CN202010724753.2A patent/CN111915857B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2007233643A (en) * | 2006-02-28 | 2007-09-13 | Fujikura Ltd | Vibration detection sensor system and vibration detection method |
| US20080088430A1 (en) * | 2006-10-12 | 2008-04-17 | Mitsubishi Electric Corporation | Monitor control system |
| CN101577035A (en) * | 2008-05-02 | 2009-11-11 | 通用电气公司 | Method for managing alarms in a physiological monitoring system |
| CN202563658U (en) * | 2012-03-31 | 2012-11-28 | 北京捷诺视讯数码科技有限公司 | Intelligent alarm analysis and processing device |
| CN107547262A (en) * | 2017-07-25 | 2018-01-05 | 新华三技术有限公司 | Generation method, device and the Network Management Equipment of alarm level |
| CN108133440A (en) * | 2017-12-28 | 2018-06-08 | 福建四创软件有限公司 | A kind of method for automatically generating emergency response early warning |
| CN108898800A (en) * | 2018-09-07 | 2018-11-27 | 中国地质调查局西安地质调查中心 | A kind of geo-hazard early-warning method adding technology based on internet |
| CN110459043A (en) * | 2019-08-12 | 2019-11-15 | 视联动力信息技术股份有限公司 | A kind of alarm processing method and device |
| CN110650036A (en) * | 2019-08-30 | 2020-01-03 | 中国人民财产保险股份有限公司 | Alarm processing method and device and electronic equipment |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112419655A (en) * | 2020-11-16 | 2021-02-26 | 浙江大华技术股份有限公司 | Alarm information pushing method, device, equipment and medium |
| CN113112722A (en) * | 2021-03-03 | 2021-07-13 | 杭州海康威视数字技术股份有限公司 | Event detection method, device, system and equipment |
| CN113949590A (en) * | 2021-12-21 | 2022-01-18 | 济南市康养事业发展中心 | Method, system and terminal for determining safety alarm event level |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111915857B (en) | 2022-09-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111915857B (en) | Alarm level determination method and device, electronic equipment and storage medium | |
| US8253564B2 (en) | Predicting a future location of a moving object observed by a surveillance device | |
| CN106656996B (en) | Information security risk assessment method | |
| US20180115749A1 (en) | Surveillance system and surveillance method | |
| CN109063969B (en) | Account risk assessment method and device | |
| CN110609941B (en) | Risk identification method and device for Internet operation event | |
| CN109033973B (en) | Monitoring and early warning method and device and electronic equipment | |
| CA2791590A1 (en) | Biometric matching engine | |
| CN111652902B (en) | Target tracking detection method, electronic equipment and device | |
| CN109344617A (en) | A kind of Internet of Things assets security portrait method and system | |
| CN101668012B (en) | Method and device for detecting security event | |
| CN111368619B (en) | Suspicious person detection method, suspicious person detection device and suspicious person detection equipment | |
| CN109325548B (en) | Image processing method, image processing device, electronic equipment and storage medium | |
| CN111753724A (en) | Abnormal behavior identification method and device | |
| CN112532455B (en) | Abnormal root cause positioning method and device | |
| US20170076239A1 (en) | Incident management analysis | |
| EP3437006B1 (en) | Malicious database request identification | |
| CN110825893A (en) | Target searching method, device, system and storage medium | |
| CN111221722A (en) | Behavior detection method and device, electronic equipment and storage medium | |
| CN110968719B (en) | Face clustering method and device | |
| CN116389297A (en) | Network security event handling and evaluating system | |
| CN115035392A (en) | Robot asset checking system and method | |
| CN112949442B (en) | Abnormal event pre-recognition method and device, electronic equipment and monitoring system | |
| JP2018151819A (en) | Management device, management method and program | |
| CN113807636B (en) | Regional supervision method and device, electronic equipment and computer storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |