JP2011176736A - Monitoring apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform abnormality detection corresponding to the temporal order of a plurality of sensor devices. <P>SOLUTION: A monitoring apparatus is configured to monitor a monitor area using a plurality of sensor devices. The monitoring apparatus includes: a Boolean value calculating section for acquiring sensor information from the sensor device and calculating a Boolean value for each sensor device based on whether or not the sensor information meets a conditional expression previously given to the sensor device; a temporal/logical expression holding section for holding a temporal/logical expression including an input variable corresponding to the Boolean value for each sensor device, a time computing element and a logic computing element; and a monitoring section for determining truth/false of the temporal/logical expression based on the Boolean value calculated by the Boolean value calculating section to determine whether or not any abnormality occurs inside the monitor area in accordance with the truth/false of the temporal/logical expression. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a monitoring device that performs monitoring using a plurality of sensor devices.

  With the development of information and communication technology, surveillance systems capable of acquiring a large amount of images are being released.

  Automatic anomaly detection technology is indispensable to operate a monitoring system that handles a large amount of images.

  Further, intrusion of a suspicious person, which is an example of “abnormality” in actual operation, is a phenomenon of walking through a plurality of surveillance cameras in order, and abnormality detection corresponding to the time sequence between the plurality of cameras is required.

  However, there is no image monitoring system that can handle the temporal order relationship between a plurality of surveillance cameras as a rule, and only a simple rule or anomaly detection completed with a single camera.

"Pedestrian flow measurement using stereo image processing" (Hagiwara, Baba, Omura IEICE-ITS-216 pp.39-42) “Real time temporal logic: Past, present, future” (Oded Maler, Dejan Nickovic, and AmirPnueli. In LNCS3829. Springer, 2005.) "Algorithms and Data Structures (Series of Electronics, Communication and Information Curriculum Oriented to the 21st Century)" (Toshihide Ibaraki, Shogodo (1989/11), ISBN-10: 4785601191)

  The present invention provides a monitoring device capable of detecting an abnormality corresponding to a temporal order among a plurality of sensor devices.

The monitoring device as one aspect of the present invention is:
A monitoring device that monitors a monitoring area using a plurality of sensor devices,
A Boolean value calculation unit that acquires sensor information from the sensor device and calculates a Boolean value for each sensor device based on whether the sensor information satisfies a conditional expression given in advance to the sensor device;
A time logical expression holding unit for holding a time logical expression including an input variable corresponding to the Boolean value for each sensor device, a time operator, and a logical operator;
Monitoring that determines whether the time logical expression is true or false based on the Boolean value calculated by the Boolean value calculation unit, and determines whether or not an abnormality has occurred in the monitoring area according to the truth of the time logical expression And
Is provided.

  According to the present invention, it is possible to perform abnormality detection corresponding to the temporal order among a plurality of sensor devices.

It is a figure which shows an example of the monitoring object environment concerning embodiment of this invention. It is a block diagram of the wide area monitoring system provided with the monitoring apparatus as an embodiment of the present invention. It is a block diagram which shows the detailed structure of a Boolean value calculation part. It is a figure which shows an example of a time logical expression. It is a figure which shows the form of the tree structure expression of the time logic type | formula of FIG. 4, and the reference information to a sensor apparatus. It is a block diagram which shows a part of structure of an online monitoring part. It is a flowchart which shows operation | movement of the system of FIG. It is a figure which shows an example of a database.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 shows an example of an environment to be monitored by a monitoring apparatus as an embodiment of the present invention.

  There is a passage connecting entrance A and exit B. Small rooms D and E exist in the middle of the passage, and a supervisor room C exists near the exit of the passage.

  A monitoring camera A is installed at the entrance A of the passage, and a monitoring camera B is installed at the exit B. A monitoring camera D is installed in the small room D, a monitoring camera E is installed in the small room E, and a monitoring camera C is installed in the monitoring room C.

  Although it is not included in the supervisor room C or the passage or in the range of FIG. 1, an alarm (see reference numeral 8 in FIG. 2) is provided in the central control center outside the facility.

  The pedestrian enters from the entrance A and goes to the exit B, but it is also possible to stop at the small rooms D and E along the way. Security guards are stationed in security room C, but they are intermittently absent due to their use.

  Monitoring camera A monitors the entrance A area, monitoring camera B monitors the exit B area, monitoring camera C monitors the supervisor room C, monitoring camera D monitors the small room D, and monitoring camera E is small. Monitor room E. The monitoring range of the monitoring cameras A to E is not continuous, and there is an area that is not captured by the monitoring camera in the middle of the passage.

  In the present embodiment, monitoring cameras that do not have continuous monitoring ranges are integrated and managed to detect a predetermined abnormal state.

  Although the example environment shown in FIG. 1 is simple, it is sufficient to show the features of this embodiment.

  FIG. 2 is a block diagram illustrating a configuration of a wide area monitoring system including a monitoring device according to an embodiment of the present invention.

  The wide area monitoring system in FIG. 2 includes a plurality of sensor devices 1, a monitoring device 6, and an alarm device 8.

  The plurality of sensor devices 1 correspond to the monitoring cameras A to E in FIG. However, the sensor device 1 is not limited to a monitoring camera, and a laser surveying instrument, ultrasonic waves, a pressure sensor that detects the weight of a pedestrian, or the like can also be used. The types, number and installation forms of the plurality of sensor devices 1 are not limited to specific ones.

  The alarm device 8 is an alarm generation device such as an emergency bell or a siren, or a physical protection device such as an auto-lock device.

The plurality of sensor devices 1 and the alarm device 8 are provided in the monitoring target environment shown in FIG.
The monitoring device 6 monitors the monitoring target environment and detects a predetermined abnormal state. Although the monitoring device 6 is assumed to be installed in a remote area different from the monitoring target environment, it may be installed in the monitoring target environment.

  The monitoring device 6 is connected to the plurality of sensor devices 1 and the alarm device 8 via a network. The network is, for example, a wide area network such as the Internet, a local area network, or a dedicated line.

  Here, each of the plurality of sensor devices 1 can detect the presence or absence of a human (pedestrian, monitor, etc.) in the monitoring area. There are many known algorithms in human detection technology using surveillance cameras and image processing algorithms. The human detection technique is not a feature of the present invention, and an arbitrary algorithm can be used. Non-Patent Document 1 is presented as an example of the algorithm of the technology.

  Each of the plurality of sensor devices 1 acquires data about the detected human as sensor information, and transmits the acquired sensor information to the Boolean value calculation unit 2 of the monitoring device 6. Each sensor device 1 performs sensing at regular intervals, for example, and acquires and transmits sensor information.

  The sensor information transmitted by the sensor device 1 is not limited in the type, just as the sensor type of the sensor device is not limited. For example, the sensor information transmitted by the sensor device 1 is the number of detected persons, the staying time of the detected person in the monitoring area, the real-valued coordinates of the detected person, or a structure that combines them Format data is considered as an example.

  The plurality of sensor devices 1 acquire sensor information by performing image processing on the sensed image data with the above-described algorithm, and transmit the sensor information to the monitoring device 6.

  In the present embodiment, sensor information is obtained by performing image processing on sensed image data with the sensor device 1, but a processing unit that performs the image processing is provided in the monitoring device 6 instead of the sensor device 1. Also good. In this case, each sensor device 1 transmits the sensed image data to the monitoring device 6, and acquires sensor information by performing image processing on the image data in a processing unit in the monitoring device 6. Needless to say, information regarding the area where the monitoring camera is not installed in the monitoring target environment cannot be obtained.

  The management rule input unit 3 is a part for inputting a management rule used for abnormality detection by the monitoring device. The management rule input unit 3 is realized by a personal computer (PC: Personal Computer), a PDA (Personal Digital Assistant), a smartphone, or other terminals that are equivalent to an electronic computer. Alternatively, the management rule input unit 3 may be realized by a reading device that reads data from a recording medium such as a keyboard and a mouse provided in the monitoring device or a DVD-ROM or a USB memory.

  Here, the management rule includes a relational operation expression and a time logical expression. The management rule input unit 3 extracts a relational operation expression and a time logical expression by performing lexical analysis and syntax analysis on the input management rule. The relational arithmetic expression is transmitted to the Boolean value calculation unit 2, and the time logical expression is transmitted to the time logical expression holding unit 4. At this time, the identifier of the management rule may also be transmitted. Since these lexical analysis and syntactic analysis are generally known techniques used in compiler design and the like, detailed description thereof is omitted.

  The relational arithmetic expression input to the Boolean value calculation unit 2 is a conditional expression described using sensor information of the sensor device. For example, the conditional expression includes determination by equal and inequality signs (“==”, “≠”, “<”, “≦”), and so-called four arithmetic operations of sum / difference products, exponent / logarithm / differentiation / integration, etc. The mathematical formula may be included.

  The Boolean value calculation unit 2 stores and holds a relational operation expression of the sensor device input from the management rule input unit 3 therein. At this time, the relational arithmetic expression may be stored in association with the management rule identifier (in particular, when a plurality of management rules are input by the management rule input unit 3). The Boolean value calculation unit 2 determines a relational operation expression (conditional expression) corresponding to the sensor device from the sensor information of the sensor device, and obtains a determination result indicating true or false as a Boolean value. For each management rule, a use flag or an unused flag may be set in the relational arithmetic expression. In this case, the relational arithmetic expression in which the use flag is set is used. It is assumed that the flag can be operated by the online monitoring unit 7.

  As an example of the determination of the relational expression (conditional expression), sensor information X and Y (x-coordinate and y-coordinate when a human is detected) is acquired from the monitoring camera (sensor apparatus) A, and the relational expression of the sensor apparatus If “X <Y” is satisfied, when “X <Y” is satisfied, a Boolean value A (= 1) indicating true is obtained, and when not satisfied, a Boolean value A (= 0) indicating “false” is obtained. .

  An example of a relational expression including a mathematical expression is “(Sin (X + π / 2) <Pow (Y, 1.73))”. X and Y are real sensor values of surveillance camera (sensor device) A (x and y coordinates detected by humans), π is the circumference, Sin is a sine function, and Pow is an exponential function Yes.

  FIG. 3 is a block diagram illustrating a configuration example of the Boolean value calculation unit 2.

  The Boolean value calculation unit 2 includes a control execution unit 44, an arithmetic operation calculation unit 45, a relational operation calculation unit 46, a mathematical function calculation unit 47, and a sensor information storage unit 48.

  The sensor information storage unit 48 stores the sensor information received from each sensor device 1 in association with the identifier of the sensor device 1. In addition, the sensor information storage unit 48 stores a relational arithmetic expression of each sensor device input from the management rule input unit 3. The relational arithmetic expression of each sensor device may be stored in association with the identifier of the management rule.

  The arithmetic operation calculation unit 45 performs so-called four arithmetic operations of sum-difference product quotients.

  The mathematical function calculation unit 47 calculates values of mathematical expressions such as trigonometric functions, exponents, logarithms, derivatives, and integrals.

  The relational calculation calculation unit 46 makes a determination based on an equal sign or an inequality sign, and calculates a Boolean value indicating the result of the determination.

  The control execution unit 44 uses each element 45 to 47 to calculate a relational arithmetic expression for each sensor device 1 using the corresponding sensor information, and obtains a Boolean value indicating true (1) or false (0). . Note that by using sensor information of a predetermined step stored in the sensor information storage unit 48, it is possible to calculate the amount of change from the predetermined step, and it is also possible to realize the differential operation function of the mathematical function calculation unit 47. . The sensor information storage unit 48 may also have a role of temporarily storing values being calculated.

  The time logical expression input to the time logical expression holding unit 4 is a logical expression for determining whether or not a predetermined abnormal state has occurred. The time logic expression holding unit 4 stores the input time logic expression therein. At this time, the time logical expression may be stored in association with the management rule identifier. The time logical expression is described using an input variable representing a Boolean value for each sensor device 1, a time operator, and a logical operator.

  FIG. 4 shows an example of a time logical expression.

The example time logic shown is
"EVER (NOT (AND (AND (NOT (SOME [0,60] (A)), NOT (B)), NOT (C))))".

  This time formula is: “If there are no people in room A (entrance A), no one will come to gate B (exit B) after 60 seconds or more, and Disaster Prevention Center (security room) C If there is no security guard, it is determined that an abnormality has occurred. ”At that time, the EVER operator is false (0). “A”, “B”, and “C” included in this time logical expression are input variables corresponding to the sensor devices (surveillance cameras) A, B, and C, respectively, and the sensor devices (surveillance cameras) A, B, and C The Boolean value calculated by the Boolean value calculation unit 2 is entered. In this embodiment, it is determined that an abnormality has occurred when the value of the time logical expression becomes false, but it is also possible to configure the time logical expression so that an abnormality has occurred when the value becomes true. It is.

  There are various types of time logic. In this embodiment, a system that is an extension of a logic system called MITL (Metric Interval Temporal Logic) is used. Refer to Non-Patent Document 2 for details of MITL.

MITL is only used in this embodiment and is not a requirement in the present invention.
The time logical expression holding unit 4 holds the time logical expression input from the management rule input unit 3 in the storage format of the computer. For example, a time logical expression is described in the Bacchus-Naur notation, and the relationship between operators is expressed by a tree structure. FIG. 5 shows a tree structure representation of the time logical expression shown in FIG.

Being able to describe in Bacchus-Naur notation is a characteristic of time logic in general and is not unique to MITL.
In general, a tree structure can be stored in a storage area of a computer by expressing a reference relationship between nodes using a pointer or the like. For example, Non-Patent Document 3 discloses a method related to realization of a tree structure on a computer.

  As shown in FIG. 5, the tree structure includes a plurality of nodes and edges connecting the nodes. An input variable representing the Boolean value of the sensor device is assigned to the terminal node of the tree structure, and a time operator (such as EVER) and a logical operator (such as AND, OR) are assigned to the non-terminal node (intermediate node, root node). ) Is assigned.

  When the time logical expression holding unit 4 stores two or more time logical expressions, a use flag or an unused flag is set in each time logical expression. A use flag is set for a time logical expression to be used, and a non-use flag is set for a time logical expression that is not. Thereby, use and non-use can be selected about arbitrary time logical expressions. The flag can be operated by the online monitoring unit 7.

  Here, by using the macro function of the macro conversion unit 43, a specific description (specific rule) is input instead of the time logical expression directly from the management rule input unit 3, and the specific rule is converted into the macro conversion unit. 43 may be converted to a time logical expression. The macro conversion unit 43 stores the specific rule and the time logical expression in association with each other, converts the specific rule input from the time logical expression storage unit 4 into a time logical expression, and returns it to the time management logical expression storage unit 4 .

  For example, it is assumed that the specific description (simplification rule) is the following description. X is a parameter that is a positive integer value.

[Simplification rule]: Intruder_detect (X)
When this is converted by the macro conversion unit 43, the following time logical expression is obtained.
"EVER (NOT (AND (AND (NOT (SOME [0, X] (A)), NOT (B)), NOT (C))))".

  As described above, once the entire time logical expression is created and associated with the specific description and registered in the macro conversion unit 43, the load when performing fine adjustment such as parameter change can be greatly reduced.

  The above example is a case where it is necessary to adjust the threshold value for abnormality determination according to the situation at the site after creating a long time logical expression after conversion.

  Since the threshold adjustment involves a change in the time logic formula, a complicated operation of searching for a long time logic change location occurs. However, the location X to be changed can be easily specified by the above macro function.

  Macro functions can be realized by basic compiler technologies such as regular expressions and context-free grammar, and are also provided in various programming languages including C language. These known algorithms are also used in this embodiment.

  Management rule-compatible sensor input unit 5 is one or more of arbitrary operators of time logical expressions stored in time logical expression holding unit 4 (input variables are considered as operators as input operators), sensor devices or alarm devices. This is a part for inputting reference information for associating. The management rule-compatible sensor input unit 5 is realized by a personal computer (PC), a PDA (Personal Digital Assistant), a smartphone, or other terminals that are equivalent to an electronic computer. Or the management rule corresponding | compatible sensor input part 5 may be implement | achieved by the reader which reads data from recording media, such as a keyboard and a mouse | mouth with which the monitoring apparatus was equipped, or DVD-ROM and USB memory.

  The management rule corresponding sensor input unit 5 transmits the input reference information to the time logical expression holding unit 4. The time logical expression holding unit 4 stores the received reference information in association with the corresponding operator (tree structure node) of the time logical expression. In the example of FIG. 5, reference information that associates the surveillance camera D with the SOME operator, reference information that associates the surveillance camera E with the input variable C, and reference information that associates the alarm device 8 with the EVER operator are set.

  Here, the reference information is the address of the IO port associated with the device (sensor device, alarm device, etc.), the address of the address managed by the application software that controls the device, or human-readable. The form is not limited, such as a hyperlink described in various forms.

  In this way, by setting the reference information in the time logical expression, when an abnormality occurs, the operator that caused the abnormality is identified, and by operating the monitoring camera or alarm device corresponding to the identified operator, Appropriate measures can be taken.

  The online monitoring unit 7 is a block that executes control for abnormality detection. The online monitoring unit 7 reads the data structure of the time logical expression (the use flag is set when there are two or more) from the time logical expression holding unit 4, and the Boolean value received from the Boolean value calculation unit 2 By inputting the signal into the input variable, the value of the time formula is calculated. If the value of the time logical expression is false, it is determined that an abnormality has occurred, and if true, it is determined that no abnormality has occurred. The online monitoring unit 7 calculates a time logical expression at regular intervals, for example.

  Here, the value of the time logical expression is calculated by proceeding through the tree in FIG. 5 while determining the value of each node from the terminal node (leaf node) to the root node.

  For example, the value of the 24 SOME operator is determined after the value of the input variable A (the Boolean value of the sensor device A) is determined.

  The value of the NOT operator with the symbol 22 is determined after the value of the SOME operator is determined.

  The value of the AND operator of code 21 is determined after the values of the NOT operator of code 22 and the NOT operator of code 23 are determined.

  By repeating the above procedure toward the root, the value of the time logical expression is finally determined. That is, the value of the EVER operator of code 17 that is the root node of the tree structure is determined.

  After completing the calculation of the time logical expression, the online monitoring unit 7 stores the calculation result of each node in the tree structure in the internal database. An example of the database is shown in FIG. Although details of FIG. 8 will be described later, one row data (record) is stored in the database for each abnormality determination.

  The online monitoring unit 7 checks the value of the determined EVER operator, and determines that no abnormality has occurred if the value is true, and determines that an abnormality has occurred if the value is false. When the occurrence of the abnormality is determined, the online monitoring unit 7 activates the alarm device 8 associated with the root node operator (EVER operator).

  Further, when the occurrence of abnormality is determined, the online monitoring unit 7 identifies the operator that caused the abnormality. A specific method will be described later. The online monitoring unit 7 reads the reference information set in the identified operator and transmits a call signal for the associated sensor device (monitoring camera). The transmission destination may be, for example, a display device (not shown) arranged separately in the sensor device or the supervisor room.

  For example, when the monitoring video of the monitoring camera is displayed on the display device in the monitoring room only when an abnormality occurs, the output (monitoring video) of the sensor device is sent to the display device when the abnormality occurs, and the display device An image of the monitoring area of the sensor device is displayed. Further, when the monitoring video of each sensor device is always displayed on the display device in the monitor room, a call signal is transmitted to the display device, and the display device displays the image of the monitoring camera. Give priority to. Specific examples of priority presentation include enlarging or highlighting the image of the surveillance camera. In this way, the image of the surveillance camera is fed back to the security guard and used as a reference for eliminating the abnormality. In an environment where a camera image is recorded, it is also possible to record with a higher resolution of the camera.

  Thereafter, the online monitoring unit 7 may change the setting of the use / nonuse flag of the time logical expression in the time logical expression holding unit. Specifically, when an abnormality occurs, a more urgent rule (time logical expression) corresponding to the abnormality is selected instead of the previous time logical expression, and thereafter, this urgent rule is used. .

  FIG. 6 is a block diagram showing a configuration of a part for calculating a time logical expression in the online monitoring unit 7.

  The online monitoring unit 7 includes a control execution unit 30, a management rule data structure storage unit 42, an operator evaluation value storage unit 41, a NOT operator calculation unit 36, and an AND operator calculation unit 37 to calculate a time logical expression. OR operator calculator 38, IMPLY operator calculator 39, SOME operator calculator 40, EVER operator calculator 31, SINCE operator calculator 32, DOWN operator calculator 33, UP operator calculator 34, A PreN operator calculation unit 35 is provided. The management rule data structure storage unit 42 and the operator evaluation value storage unit 41 correspond to, for example, a first storage unit and a second storage unit of the present invention.

  The control execution unit 30 performs calculation of operators in the time logical expression from the leaf node to the root node according to the data structure of the time logical expression stored in the management rule data structure storage unit. Specifically, the result calculated by the lower operator is stored in the operator evaluation value storage unit 41, and is also read out and used by each of the operator calculation units 31 to 35 and 36 to 40 to determine the upper operator. The calculation of values is repeated from the leaf node to the root node. As a result, the value of the time logical expression (the value of the operator of the root node) is finally obtained.

  The NOT operator calculation unit 36 calculates a negative value of one Boolean signal input from the control execution unit 30 and returns it to the control execution unit 30.

  The AND operator calculation unit 37 calculates the logical product of the two Boolean signals input from the control execution unit 30, and returns the logical product to the control execution unit 30.

  The OR operator calculation unit 38 calculates the logical sum of the two Boolean signals input from the control execution unit 30 and returns the logical sum to the control execution unit 30.

  The IMPLY operator calculation unit 39 calculates the logical inclusion of the two Boolean signals input from the control execution unit 30 and returns them to the control execution unit 30.

  The SOME operator calculation unit 40 calculates true / false based on a predetermined algorithm using one Boolean signal input from the control execution unit 30 and returns it to the control execution unit 30. The SOME operator calculation unit 40 stores a state therein and calculates a current value based on past changes in the signal.

The SOME operator takes a true value if the Boolean signal takes a true value even once in the past. In addition, as in the above-mentioned non-patent document (2), it is possible to execute a calculation with a section specification such as SOME [a, b]. SOME [a, b] sets only the section from time t-b to time t-a as a determination target when the current time is t. If the interval has never been true, a false value is returned.

  The EVER operator calculation unit 31 calculates true / false based on a predetermined algorithm using one Boolean signal input from the control execution unit 30, and returns the result to the control execution unit 30. The EVER operator takes a true value only if the Boolean signal is true for all intervals. Similarly to the SOME operator, there is a derived type that can specify a section. EVER [a, b] uses only the section from time t-b to time t-a when the current time is t.

  The SINCE operator calculation unit 31 calculates true / false based on a predetermined algorithm using the two Boolean signals input from the control execution unit 30 and returns them to the control execution unit 30. The SINCE operator takes a true value only when the second Boolean signal is true in all intervals after the first Boolean signal changes to true. Also, there is a derived type that can specify the interval as in the case of the SOME / EVER operator, and SINCE [a, b] can only determine the interval from time tb to time ta, where t is the current time. To do. There are many known cases such as Non-Patent Document (2) as a method for configuring a time operator having an internal state on a computer.

  The DOWN operator calculation unit 33 records the previous value for one Boolean signal input from the control execution unit 30, and compares the value input this time with the previous value. True is returned to the control execution unit 30 only when the immediately previous value is true and the currently input value is false, otherwise false is returned to the control execution unit 30.

  The UP operator calculation unit 34 records the previous value for one Boolean signal input from the control execution unit 30, and compares the value input this time with the previous value. True is returned to the control execution unit 30 only when the immediately preceding value is false and the currently input value is true, and false is returned to the control execution unit 30 otherwise.

  The PreN operator calculation unit 35 stores the value of one Boolean signal input from the control execution unit 30 up to N (N is an integer of 1 or more) steps before the Boolean value is input from the control execution unit 30 When this is done, the previous signal value before N steps or less is returned. For example, if N = 2, the previous signal values two steps before and one step before are returned.

  FIG. 7 is a flowchart showing an operation flow of the wide area monitoring system of FIG.

  First, when the wide-area monitoring system is activated, the sensor device 1 (here, the monitoring cameras A to C) periodically acquires sensor information and transmits the acquired sensor information to the monitoring device. In this example, the sensor information is assumed to be coordinates (x, y) where a human is present in each monitoring area of each of the monitoring cameras A to C. When no human is present in the monitoring area, for example, a null value or a predetermined value is entered in the coordinates.

  The Boolean value calculation unit 2 in the monitoring device periodically receives sensor information from each monitoring camera, and whether or not the received sensor information satisfies a relational arithmetic expression (conditional expression) acquired in advance for each monitoring camera. Determine. When there are a plurality of management rules, a relational operation expression in which a use flag is set is used. In this case, it is assumed that the online monitoring unit 7 determines the management rules to be used in the initial stage and notifies the Boolean value calculating unit 2 and the time logical expression holding unit 4 in advance.

  In this example, the relational expression indicates a condition for a human (pedestrian, guard) to exist in the monitoring area. When present (when the condition is satisfied), obtain a Boolean value indicating true (= 1), and when not (when the condition is not satisfied), obtain a Boolean value indicating false (= 0) (Step S10). The Boolean value calculation unit 2 sends the signals of the Boolean values A to C acquired for each of the monitoring cameras A to C to the online monitoring unit 7.

  The online monitoring unit 7 calculates the value of the time logical expression in the time logical expression holding unit 4 based on the Boolean values A to C received from the Boolean value calculating unit 2 (step S11). When there are a plurality of time logical expressions, the time logical expression in which the use flag is set is used. In this example, it is assumed that the time logical expression is the time logical expression of FIGS. A, B, and C in the time logical expression are Boolean variables, and the Boolean values acquired for the monitoring cameras A to C are entered. As described above, the calculation of the value of the time logical expression is performed by moving the tree of FIG. 5 from the leaf node to the root node while sequentially determining the values of the intermediate nodes. The online monitoring unit 7 stores the calculation result of each node in the tree structure in an internal database (see FIG. 8).

  The online monitoring unit 7 determines whether or not an abnormality has occurred based on the calculated value of the root node (in this example, the value of the EVER operator) (step S12). If the value of the root node is true, it is assumed that no abnormality has occurred (NO in S12), and the process returns to step 10 again. On the other hand, if the value of the root node is false, it is considered that an abnormality has occurred (YES in S12), and the process proceeds to the next step S13.

  In step S13, the online monitoring unit 7 identifies the operator that caused the abnormality. The specific method compares the calculation result of the operator calculated this time with the previous or previous calculation result for each path from the root node of the tree structure to each leaf node. Then, a path including a different operation result is specified, and an operator closest to the leaf node is specified as an operator causing the abnormality among the operators having different operation results in the specified path. Hereinafter, a detailed description will be given using the database example of FIG.

  In the database of FIG. 8, NO of steps S10 to S12 of FIG. 7 is repeated three times, and three data of time points 1 to 3 are recorded. Further, the fourth time S10 and S11 are executed, and the data of time point 4 is stored. This is recorded and corresponds to the case where occurrence of an abnormality is detected in step S12 (YES in S12).

  That is, first, since the guard is absent at time 2, the Boolean value C of the monitoring camera C input from the Boolean value calculation unit 2 changes to false (50). However, the AND operator 18 remains false because the AND operator 21 is false, and as a result, the root node EVER operator remains true.

  At time 3, there is no change in the input Boolean value and the value of the time operator, so naturally the value of EVER17 does not change and is true.

  Next, at time point 4, since 60 seconds have passed since the pedestrian disappeared from camera A, the value of SOME [0, 60] changes from true to false (51). In addition, no one has been in camera B from before, and the value of AND operator 21 is false. By repeating the calculation toward the root node, the value of EVER becomes false (52), and an abnormality is detected.

  By comparing the data at time point 4 when the abnormality occurred and the data at time point 3 immediately before, an operator (node) with a different value is detected and the operator closest to the leaf node is selected. Identify the operator that became. In this example, the first different part, that is, the operator whose value has changed is the AND of the symbol 49, the AND of the symbol 18, the AND of the symbol 21, the NOT of the symbol 22, and the SOME [0, 60] of the symbol 24. . Of these, SOME [0, 60] closest to the leaf node is selected as the cause of the occurrence of the abnormality. Here, the data at time 4 is compared with the data at time 3, but it may be compared with the data at time 2 or 1. That is, it may be compared with one of one or more continuous data immediately before no abnormality is detected.

  In the next step S14, the online monitoring unit 7 activates the alarm device associated with the EVER operator (root node) by transmitting a notification signal. In addition, the monitoring camera associated with the operator identified in step S13 is called.

  Next, in step S15, the online monitoring unit 7 updates the usage status of the time logical expression in the time logical expression holding unit 4. For example, the time logical expression flag that has been used so far is not used, and a predetermined time logical expression flag that defines a stricter rule is set to be used. Similarly, the online monitoring unit 7 instructs the Boolean value calculation unit 2 to use a relational operation expression (having the same management rule identifier) corresponding to the predetermined time logical expression. The Boolean value calculation unit 2 sets the newly specified relational operation expression flag to use, and sets the relational operation expression flag used so far to unused.

  In the above embodiment, a case has been shown in which a management rule input from the management rule input unit includes one time logical expression and a relational operation expression of each sensor device (here, monitoring cameras A, B, and C). However, it is also possible to include a plurality of time logical expressions in the management rule and use the relational arithmetic expressions of the sensor devices in common in each time logical expression. In this case, even if the time logical expression to be used is changed, it is not necessary to change the relational arithmetic expression as long as it is included in the same management rule.

  In the above embodiment, when an occurrence of abnormality is detected, the management rule to be used (time logical expression and relational operation expression) is changed. However, in the following, an example of changing when another condition is satisfied is as follows: It shows as modification 1-4.

(Modification 1)
When a VIP or other person is detected entering the facility, the management rule is changed to a higher security. For example, an RFID tag or the like is attached to a person such as a VIP, and a tag reader is placed at the entrance of the facility. When the tag reader detects the entrance of a person such as a VIP by reading the RFID tag, the tag reader sends a signal notifying that the person has entered to the online monitoring unit 7. Upon receiving the signal, the online monitoring unit 7 instructs the time logical expression holding unit 4 and the Boolean value calculating unit 2 to use predetermined management rules (time logical expression and relational operation expression) with higher security.

  Similarly, when it is detected that a person such as a VIP has left the facility, the management rule may be changed to a low security rule. That is, when the tag reader detects that the person has left the facility by reading the RFID, a signal to that effect is transmitted to the online monitoring unit 7. The online monitoring unit 7 instructs the time logical expression holding unit 4 and the Boolean value calculating unit 2 to use a predetermined management rule with lower security.

(Modification 2)
As a management rule change, the online monitoring unit 7 uses a specific management rule only during a predetermined period, and when the period ends, the online logic unit 4 and the Boolean expression holding unit 4 return to the original management rule. The value calculation unit 2 is controlled.

(Modification 3)
When a part of a monitoring camera or the like breaks down, a change is made to a management rule that does not use the monitoring camera.

  For example, the online monitoring unit 7 receives the identification information of the failed monitoring camera from an external device (such as a user input device), and determines whether the current management rule uses the failed monitoring camera according to the reception. To do.

  This determination can be made by confirming whether the currently used time logical expression includes a Boolean variable of the failed surveillance camera.

  When the online monitoring unit 7 determines that the current management rule uses a malfunctioning surveillance camera, the online monitoring unit 7 identifies a time logical expression that does not use the surveillance camera, identifies the identified time logical expression, and the corresponding relational expression Is used to instruct the time logical expression holding unit 4 and the Boolean value calculation unit 2 to use.

(Modification 4)
In conjunction with the locking system, the management rules are changed according to whether or not a predetermined room or gate is locked. For example, the online monitoring unit 7 stores the correspondence between the presence / absence of locking of the room or gate and the management rule to be used, and when the notification of the change of presence / absence of locking of the room or gate is received from the locking system, Specify management rules according to the state. The online monitoring unit 7 instructs the time logical expression holding unit 4 and the Boolean calculation unit 2 to use the specified management rule (time logical expression and relational operation expression).

  As described above, according to the embodiment of the present invention, a large-scale monitoring camera system is equipped with a time logic processing system that is a kind of logic system, and an abnormality detection technique based on a management rule including time and order across a plurality of monitoring cameras. Is realized. This function improves the practicality of the surveillance camera system by applying management rules that meet the actual requirements. Further, by associating the time logic data structure with the sensor device, it is possible to take an appropriate measure when an abnormality is detected. In addition, the added value after the introduction of the surveillance camera system can be improved.

  Note that the monitoring device described in the above embodiment can also be realized by using, for example, a general-purpose computer device as basic hardware. That is, each element in the device can be realized by causing a processor mounted on the computer device to execute a program. At this time, this apparatus may be realized by installing the above program in a computer device in advance, or may be stored in a storage medium such as a CD-ROM or distributed through the network. The program may be implemented by appropriately installing it in a computer device. In addition, various storage units and holding units and databases in the apparatus are stored in a memory, a hard disk or a CD-R, a CD-RW, a DVD-RAM, a DVD-R, etc. incorporated in or external to the computer apparatus. It can be realized by appropriately using a medium or the like.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

1: Sensor device
2: Boolean value calculator
3: Management rule input section
4: Time logical expression holding unit
5: Sensor input for management rules
6: Monitoring device
7: Online monitoring department
8: Alarm

Claims (5)

A monitoring device that monitors a monitoring area using a plurality of sensor devices,
A Boolean value calculation unit that acquires sensor information from the sensor device and calculates a Boolean value for each sensor device based on whether the sensor information satisfies a conditional expression given in advance to the sensor device;
A time logical expression holding unit for holding a time logical expression including an input variable corresponding to the Boolean value for each sensor device, a time operator, and a logical operator;
Monitoring that determines whether the time logical expression is true or false based on the Boolean value calculated by the Boolean value calculation unit, and determines whether or not an abnormality has occurred in the monitoring area according to the truth of the time logical expression And
Monitoring device. A first storage unit and a second storage unit;
The temporal logical expression is expressed by a tree structure including a plurality of nodes and edges connecting the nodes,
The input variable is assigned to a terminal node of the tree structure, the time operator and the logical operator are assigned to non-terminal nodes of the tree structure;
The first storage unit stores a correspondence relationship between the node of the tree structure and the sensor device,
The monitoring unit performs a calculation using a time operator or a logical operator assigned to the non-terminal node of the tree structure using a value obtained at a child node of the non-terminal node, and performs a calculation at the root node. Determining whether the time logical expression is true or false based on a value obtained by calculation;
The second storage unit stores data including the true / false of the time logical expression and the value of the node of the tree structure,
When the abnormality is detected in the monitoring area, the monitoring unit uses data when the abnormality occurs and one of one or more continuous data immediately before the abnormality is not detected. The node device compares the values of the nodes for each path from the root node to the non-terminal node, detects the lowest node having a different value between the paths, and associates with the detected node. Output a call signal that instructs to display or record the output of
2. The monitoring apparatus according to claim 1, wherein The time operator includes any one of a DOWN operator, an UP operator, and a PreN operator,
The DOWN operator compares the current value obtained at the child node of the node to which the DOWN operator is assigned with the previous value obtained at the child node, the previous value is true, and Returns true if this value is false, false otherwise,
The UP operator compares the current value obtained at the child node of the node to which the UP operator is assigned with the previous value obtained at the child node, and the previous value is false. Returns true if the value of is true, false otherwise,
The monitoring apparatus according to claim 2, wherein the PreN operator returns a past value of 1 to N (N is an integer of 1 or more) steps of a value obtained at the child node. The time logical expression holding unit holds the first and second time logical expressions,
The monitoring unit performs monitoring using the first time logical expression, and when an abnormality in the monitoring area is detected, the time logical expression to be used is changed from the first time logical expression to the second time logical expression. The monitoring device according to claim 1, wherein the monitoring device is switched to an equation.   The said monitoring part transmits the alerting | reporting signal which instruct | indicates alerting | reporting to an external alarm device, when the abnormality generation in the said monitoring area | region is detected. Monitoring device.

Images