CN106126270B - equipment upgrading method and device and video monitoring system - Google Patents
equipment upgrading method and device and video monitoring system Download PDFInfo
- Publication number
- CN106126270B CN106126270B CN201610421630.5A CN201610421630A CN106126270B CN 106126270 B CN106126270 B CN 106126270B CN 201610421630 A CN201610421630 A CN 201610421630A CN 106126270 B CN106126270 B CN 106126270B
- Authority
- CN
- China
- Prior art keywords
- video acquisition
- video
- acquisition equipment
- patch
- storage
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/445—Program loading or initiating
- G06F9/44568—Immediately runnable code
- G06F9/44578—Preparing or optimising for loading
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/18—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
Abstract
the invention provides a device upgrading method, a device and a video monitoring system, wherein the method comprises the following steps: when the video acquisition equipment has a bug and the patch is installed and needs to be restarted, the video acquisition equipment restarts the application module and locally caches the video data acquired by the encoding module. By applying the embodiment of the invention, the loss of video data during the restarting of the video acquisition equipment can be avoided.
Description
Technical Field
the invention relates to the technical field of video monitoring, in particular to a method and a device for upgrading equipment and a video monitoring system.
background
IPCs (Internet Protocol cameras) are important tools for maintaining national public security, and are distributed in various fields of national important institutions and mass life, and information using IPCs as an entrance includes various aspects from national security secrets to daily life privacy of common people. However, the IPC is exploded in two or three ways at present, so that a security hole exists, and the problem of worry of users about the IPC security is caused.
at present, an upgrading scheme for IPC security vulnerabilities mainly comprises the steps of manually adding IPC in batches on a vulnerability scanning tool to scan vulnerabilities, manually installing patches after the vulnerabilities are scanned, and directly restarting the whole IPC if the patches are required to be restarted after the patches are installed.
However, practice shows that in the IPC upgrading scheme, after the patch is installed, the whole IPC is directly restarted, and part of video is lost in the restarting process, which affects monitoring image acquisition and later evidence collection.
disclosure of Invention
the invention provides an equipment upgrading method, an equipment upgrading device and a video monitoring system, and aims to solve the problem of video loss caused by complete machine restart after installation of an IPC patch in the conventional IPC upgrading scheme.
according to a first aspect of the present invention, an apparatus upgrading method is provided, which is applied to a video monitoring system, where the video monitoring system includes a video acquisition apparatus, a management server, and a storage apparatus, and an application module of the video acquisition apparatus is separated from an encoding module; the method comprises the following steps:
when the video acquisition equipment has a bug and the patch is installed and needs to be restarted, the video acquisition equipment restarts the application module and locally caches the video data acquired by the coding module.
According to a second aspect of the present invention, there is provided an apparatus for upgrading a device, the apparatus being applied to a video capture device in a video monitoring system, the video monitoring system further including a management server and a storage device, an application module of the video capture device in the video monitoring system being separated from an encoding module, the apparatus including:
the restarting unit is used for restarting the application module when the video acquisition equipment has a bug and needs to be restarted after the patch is installed;
And the cache unit is used for locally caching the video data acquired by the encoding module when the video acquisition equipment has a bug and needs to be restarted after the patch is installed.
According to a third aspect of the present invention, there is provided a video monitoring system, including a video capturing device, a management server, and a storage device, wherein an application module of the video capturing device is separated from an encoding module in the video monitoring system, wherein:
The video acquisition equipment is used for restarting the application module and locally caching the video data acquired by the coding module when a bug exists and the patch is installed and needs to be restarted.
by separating the application module and the coding module of the video acquisition equipment, when the video acquisition equipment has a leak and needs to be restarted after patch installation is completed, the video acquisition equipment can restart the application module and locally cache the video data acquired by the coding module, so that the video data can still be acquired during the restart of the video acquisition equipment, and the loss of the video data during the restart of the video acquisition equipment is avoided.
Drawings
fig. 1 is a schematic diagram of a network architecture for device upgrade according to an embodiment of the present invention;
Fig. 2 is a schematic structural diagram of a video capture device according to an embodiment of the present invention;
fig. 3 is a schematic flowchart of an apparatus upgrading method according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a specific application scenario provided in the embodiment of the present invention;
Fig. 5 is a schematic structural diagram of an apparatus upgrading device according to an embodiment of the present invention;
FIG. 6 is a schematic structural diagram of another device upgrading apparatus provided in the embodiment of the present invention;
FIG. 7 is a schematic structural diagram of another device upgrading apparatus provided in the embodiment of the present invention;
fig. 8 is a schematic structural diagram of a video monitoring system according to an embodiment of the present invention.
Detailed Description
in order to make the technical solutions in the embodiments of the present invention better understood and make the above objects, features and advantages of the embodiments of the present invention more comprehensible, the technical solutions in the embodiments of the present invention are described in further detail below with reference to the accompanying drawings.
a network architecture to which the embodiments of the present invention are applicable will be described below.
Referring to fig. 1, fig. 1 is a network architecture diagram of a device upgrade according to an embodiment of the present invention, as shown in fig. 1, the network architecture is suitable for a video monitoring system, which may include a video capture device, a management server, and a storage device.
In the network architecture, an application module and a coding module of video acquisition equipment in a video monitoring system are separated, namely the operation of the application module and the operation of the coding module are mutually independent, and the operation of the coding module cannot be influenced by the restart of the application module.
for example, in the network architecture shown in fig. 1, the structure of the video capture device may be as shown in fig. 2, and the video capture device may include an encoding module, an application module, a storage module, a transmission module, a CPU (central processing Unit), a power supply module, and a camera.
the encoding module can comprise a video acquisition unit and an image processing unit, wherein the video acquisition unit is used for acquiring real-time video data through a camera, and the image processing unit is used for encoding and compressing the acquired video data; the application module can comprise an operating system unit and an encapsulation unit, wherein the operating system unit comprises application software controlled by system operation, a kernel, a shell and the like, and the encapsulation unit is used for encapsulating the video data after encoding and compression; the storage module is used for locally storing the video data; the transmission module is used for interacting with other video acquisition equipment, a management server or storage equipment and the like; the power module is used for supplying power to the video acquisition equipment.
The application module is separated from the coding module, the storage module, the transmission module and the like, and the running of the coding module, the storage module and the transmission module is not influenced by the restarting of the application module.
As can be seen, in the network architecture shown in fig. 1, when the video capture device has a bug and the patch needs to be restarted after installation, the front-end device may restart the application module and locally cache the video data acquired by the encoding module, so that it is ensured that the video data can still be acquired during restart of the video capture device, and loss of the video data during restart of the video capture device is avoided.
Based on the network architecture shown in fig. 1, an embodiment of the present invention provides an apparatus upgrading method, please refer to fig. 3, which is a schematic flow diagram of an apparatus upgrading method provided in an embodiment of the present invention, and as shown in fig. 3, the apparatus upgrading method may include:
For convenience of understanding, the following description will be given by taking the Video capture device as an IPC, the management server as a VM (Video Manager), and the Storage device as an IPSAN (Internet Protocol Storage Area Network) Storage device as an example, but it should be appreciated that in the embodiment of the present invention, the Video capture device is not limited to the IPC, the management server is not limited to the VM, and the Storage device is not limited to the IPSAN Storage device.
Step 301, when the video acquisition device has a bug and needs to be restarted after the patch is installed, restarting the application module by the video acquisition device, and locally caching the video data acquired by the encoding module.
In the embodiment of the invention, when the IPC needs to be restarted due to installation of the bug patch, the IPC can only restart the application module, and other modules such as the coding module and the like can continue to normally operate to obtain real-time video data, and locally cache the video data obtained by the coding module.
In the embodiment of the invention, in order to improve the efficiency of vulnerability scanning and patch installation, the IPC can be controlled by the VM to realize automatic vulnerability scanning and automatic patch installation, considering that in the existing IPC upgrading scheme, both the vulnerability scanning and the patch installation of the IPC need to be completed manually by a user, the operation is complex, and the efficiency is low.
As an optional implementation manner, in the embodiment of the present invention, the vulnerability scanning and patch installation of the video capture device may include:
The management server issues a bug detection Trojan to target video acquisition equipment which is successfully registered, and periodically or periodically sends a detection instruction to the target video acquisition equipment so that the target video acquisition equipment utilizes the bug detection target to perform bug detection, and reports a detection result to the management server;
When the management server determines that the target video acquisition equipment has a bug, the management server issues a patch downloading notification to the target video acquisition equipment, wherein the patch downloading notification carries address information of a patch server, so that the target video acquisition equipment downloads a corresponding patch according to the address information of the patch server and installs the patch.
In this embodiment, the VM may issue a bug detection trojan to each successfully registered IPC (referred to as target IPC herein), and periodically or periodically send a detection instruction to each target IPC; after receiving the detection instruction, the target IPC can use the bug detection Trojan sent by the VM to perform local bug detection, and after the detection is completed, the detection result is reported to the VM.
the VM can maintain a vulnerability statistical table locally to carry out vulnerability statistics on the target IPC. If the VM finds that the target IPC has a bug, the VM can send a patch downloading notification carrying address information of a patch server to the target IPC; after receiving the patch download notification, the target IPC may download the corresponding patch from the patch server according to the address information of the patch server carried in the patch download notification, and perform patch installation.
As another optional implementation, in the embodiment of the present invention, the video capture device vulnerability scanning and patch installation may include:
The management server periodically or periodically scans the bugs of the successfully registered target video acquisition equipment, and when the target video acquisition equipment is determined to have bugs, sends a patch downloading notification to the target video acquisition equipment, wherein the patch downloading notification carries the address information of the patch server, so that the target video acquisition equipment downloads the corresponding patches according to the address information of the patch server and installs the patches.
in this embodiment, the VM may perform vulnerability scanning on the target IPC periodically or at regular time, and maintain a vulnerability statistical table locally according to the scanning result; when the VM determines that a target IPC has a bug, the VM can send a patch downloading notification carrying address information of a patch server to the target IPC; after receiving the patch download notification, the target IPC may download the corresponding patch from the patch server according to the address information of the patch server carried in the patch download notification, and perform patch installation.
Further, in the embodiment of the present invention, it is considered that, during the restart of the application module by the video capture device, the video capture device cannot complete the encapsulation of the video data, and thus cannot encapsulate and store the obtained video data in the storage device, so that the video data during the restart period obtained by the video capture device cannot be viewed during the restart of the video capture device, and the use of the video data is affected, therefore, in the embodiment of the present invention, the video capture device in the video monitoring system may serve as a backup for the first video capture device and the second video capture device in the video monitoring system, and when the first video capture device needs to restart the application module, the first video capture device may encapsulate and send the video data during the restart period to the storage device for storage.
It should be noted that, in the embodiment of the present invention, the first video capture device and the second video capture device do not refer to a certain two fixed video capture devices, but may refer to any two video capture devices that can be backed up with each other in the video monitoring system.
preferably, in the embodiment of the present invention, the first video capture device and the second video capture device that are backed up with each other may be connected in series through a network interface.
For the sake of understanding, the following description will be given by taking the first video capture device and the second video capture device backed up with each other as the first IPC and the second IPC respectively,
For example, if IPCs 1 and IPC2 are two IPCs that can be serially connected through a network port in a video monitoring system, IPC1 may be used as a first IPC, IPC2 may be used as a second IPC (IPC 2 may also be used as the first IPC, and IPC1 may be used as the second IPC, which is not limited in this invention), IPCs 1 and IPC2 are serially connected through a network port, and IPC1 and IPC2 are backup for each other.
Accordingly, as an optional implementation manner, the device upgrading method shown in fig. 3 may further include the following steps:
step 302, the first video capture device disconnects the storage connection with the storage device and sends a first notification message to the second video capture device to notify the second video capture device to simulate the video capture device to establish a target storage connection with the storage device.
for convenience of understanding, in the embodiment of the present invention, the storage connection between the video capture device and the storage device is taken as an ISCSI storage connection as an example.
In the embodiment of the invention, because the IPC needs to encapsulate the video data after the coding compression through the application module, the first IPC cannot encapsulate the video data in the process of restarting the application module by the first IPC, so that the first IPC cannot directly store the acquired video data in the IPSAN storage device.
In order to ensure that the video data can still be uploaded to the IPSAN storage device during the restart of the IPC, the first IPC can send the video data during the restart to a backup IPC (namely, a second IPC) when the restart is determined to be needed, and the second IPC simulates the first IPC to encapsulate the corresponding video data and store the corresponding video data to the IPSAN storage device.
considering that Target information is generally different when different IPCs establish ISCSI storage connection with IPSAN storage devices, and accordingly, the positions of video data of different IPCs stored in the IPSAN storage devices are also different, in order to ensure consistency when the second IPC simulates the first IPC to package corresponding video data and store the video data into the IPSAN storage devices, the second IPC needs to simulate the first IPC to establish corresponding ISCSI storage connection with the IPSAN storage devices after the first IPC breaks the ISCSI storage connection with the IPSAN storage devices.
Accordingly, in embodiments of the invention, when the first IPC determines that a reboot is required, the first IPC may disconnect the ISCSI storage connection with the IPSAN storage device and send a notification message (referred to herein as a first notification message) to the second IPC; when receiving the first notification message, the second IPC may establish a Target ISCSI storage connection with the IPSAN storage device according to the MAC (media access Control) address, the IP address, and the port number information (including the source MAC address, the IP address, the port, and the destination MAC address, the IP address, and the port) of the first IPC that encapsulates the video data, and the Target information of the ISCSI storage connection of the first IPC.
in the embodiment of the invention, in order to realize that the backup IPC can simulate IPC encapsulation video data needing to be restarted and store the encapsulated video data in the corresponding position of IPSAN storage equipment, the backup IPC can store encapsulation information of the opposite side, and the encapsulation information can comprise but is not limited to a source MAC address, a source IP address, a source port number, a destination MAC address, a destination IP address, a destination port number, Target information of ISCSI storage connection and the like.
the package information of the other party stored in the IPCs that are backed up with each other may be obtained by communicating with each other periodically or at regular time by the IPCs that are backed up with each other, or may be manually configured by a user (e.g., an administrator), which is not limited in this embodiment of the present invention.
step 303, when the target storage connection between the second video collecting device and the storage device is completed, the first video collecting device sends the video data obtained after the storage connection is disconnected to the second video collecting device, the second video collecting device simulates the first video collecting device to package the received video data, and the video data is sent to the storage device through the target storage connection.
in the embodiment of the invention, when the second IPC establishes the target ISCSI storage connection with the IPSAN storage equipment, the second IPC can send a connection establishment completion notification message to the first IPC; when the first IPC determines that the target ISCSI storage connection between the second IPC and the IPSAN storage device is completed, the video data acquired after the ISCSI storage connection is disconnected can be sent to the second IPC.
After receiving the video data sent by the first IPC, the second IPC can cache the received video data of the first IPC, encapsulate the video data according to the MAC address, the IP address and the port number information of the first IPC for encapsulating the video data, and send the encapsulated video data to the IPSAN storage device through the target ISCSI storage connection.
it can be seen that, in the method flow shown in fig. 3, on one hand, by separating the application module and the encoding module of the video acquisition device, when the patch is installed and needs to be restarted, the application module is restarted, and the encoding module can continue to operate normally to acquire a real-time video; on the other hand, the first video acquisition device and the second video acquisition device are set as mutual backups, when the first video acquisition device needs to be restarted, the second video acquisition device simulates the first video acquisition device needing to be restarted to establish corresponding storage connection with the storage device, and simulates the first video acquisition device needing to be restarted to package and store video data during the restarting period of the first video acquisition device to the corresponding position of the storage device, so that the video data can still be acquired during the restarting period of the video acquisition device, the video data can be uploaded to the storage device, and the loss of the video data during the restarting period of the video acquisition device is avoided.
further, the device upgrading method provided by the embodiment of the present invention may further include the following steps:
11) when the first video acquisition device finishes restarting the application module, stopping sending the video data to the second video acquisition device, and sending a second notification message to the second video acquisition device to notify the second video acquisition device to disconnect the target storage connection with the storage device;
12) the first video acquisition device and the storage device reestablish storage connection, and cache video data acquired by the coding module in the connection establishment process;
13) And when the first video acquisition device is successfully reestablished with the storage device, the cached video data is packaged and then sent to the storage device through the reestablished storage connection.
Specifically, in the embodiment of the present invention, when the first IPC restart application module is completed, the first IPC may stop sending the video data to the IPC, and send a notification message (referred to as a second notification message herein) to the second IPC; the second IPC, upon receiving the second notification message, may disconnect the target ISCSI storage connection with the IPSAN storage device.
When the second IPC disconnects the Target ISCSI storage connection with the IPSAN storage device, the first IPC needs to reestablish the ISCSI storage connection to the corresponding Target with the IPSAN storage device; the second IPC disconnects the Target ISCSI storage connection, and before the first IPC and the IPSAN storage device reestablish the ISCSI storage connection to the corresponding Target, the first IPC can cache the real-time video data acquired by the encoding module.
When the first IPC and the IPSAN storage device reestablish ISCSI storage connection successfully, sending the cached video data to the IPSAN storage device through the reestablished ISCSI storage connection after encapsulating; the encapsulation of the cached video data by the first IPC, and the encapsulation and uploading of the real-time video data after the first IPC succeeds in reestablishing the ISCSI storage connection are the same as the processing before the first IPC restarts the application module, and specific implementation thereof may refer to relevant descriptions in the existing relevant processes, which is not described herein again in the embodiments of the present invention.
it should be noted that, in the embodiment of the present invention, when the second IPC receives the second notification message of the first IPC and disconnects the target ISCSI storage connection with the IPSAN storage device, if the second IPC still caches the video data sent by the first IPC, the second IPC needs to send the video data to the first IPC, and the first IPC completes encapsulation and upload.
furthermore, in the embodiment of the present invention, during the upgrade of the first IPC, the second IPC simulates the first IPC to establish an ISCSI storage connection with the IPSAN storage device, and encapsulates the video data of the first IPC and stores the encapsulated video data to the corresponding location of the IPSAN storage device, so that the message with the destination end being the first IPC points to the second IPC; therefore, after the first IPC is upgraded and the ISCSI storage connection is established with the IPSAN storage device again, the first IPC needs to send a gratuitous ARP (address resolution Protocol) message, and the message sent to the first IPC by the IPSAN storage device is prevented from being sent to the second IPC again.
Further, in the embodiment of the present invention, in order to avoid an illegal intrusion of the monitoring users other than the management server during the upgrade of the video capture device, and improve the upgrade security of the video capture device, a security box may be further disposed in the video monitoring system, and when the video capture device is upgraded, the video capture device may send an access control instruction to the security box, and set an IP or a service port to join an access blacklist of the security box. During the upgrading period of the video acquisition equipment, the safety box analyzes the message accessing the video acquisition equipment, and once the message matching the access blacklist is found, the message is prohibited from passing through.
correspondingly, in the embodiment of the present invention, when the video capture device has a bug and the installation of the patch is completed and needs to be restarted, the method may further include:
the video acquisition equipment sends an access control instruction to the safety box so that the safety box generates a corresponding access blacklist according to the access control instruction and forbids the message matched with the access blacklist to pass through;
and when the video acquisition equipment finishes restarting the application module, sending a control releasing instruction to the safety box so that the safety box deletes the access blacklist corresponding to the access control instruction.
Specifically, in the embodiment of the present invention, when the first IPC needs to be restarted, the first IPC may set the security box to prohibit the specific message from reaching the first IPC by sending an access control instruction to the security box; when the first IPC restart is completed, the first IPC can send a control releasing instruction to the security box to release the access limitation.
in order to enable those skilled in the art to better understand the technical solution provided by the embodiment of the present invention, the technical solution provided by the embodiment of the present invention is described below with reference to a specific application scenario.
Referring to fig. 4, an architecture diagram of a specific application scenario provided in the embodiment of the present invention is shown in fig. 4, where the application scenario may include IPC1, IPC2, VM, IPSAN storage device, and a security box, where IPC1 and IPC2 can be connected in series through a network interface. Based on the application scenario, the implementation flow of the device upgrade scheme provided by the embodiment of the present invention is as follows:
1. IPC1 and IPC2 are connected in series through a network port, and IPC1 and IPC2 are backup of each other. IPCs 1 and IPCs 2 communicate with each other at regular time through ONVIF (Open Network Video Interface Forum) messages, and locally store an encapsulating information table of the IPCs at the opposite end, where the encapsulating information includes MAC addresses, IP addresses, TCP (Transmission Control Protocol) port numbers, Target information connected to ISCSI storage Protocol interfaces, and the like, and certainly other storage Protocol interfaces may also be used; wherein, IPC1 and IPC2 will update self-maintained encapsulation information table at regular time through ONVIF message;
2. After IPC1 and IPC2 are registered in the VM, the VM may periodically or periodically perform vulnerability scanning on IPC1 and IPC2, and maintain a vulnerability statistical table locally according to the scanning result; when the VM determines that IPC1 or/and IPC2 has a bug, the VM may send a patch download notification carrying address information of a patch server to the IPC1 or IPC 2; after receiving the patch downloading notification, IPC1 or/and IPC2 may download the corresponding patch from the patch server according to the address information of the patch server carried in the patch downloading notification, and perform patch installation;
in this embodiment, IPC1 is taken as an example of the existence of a vulnerability.
3. When the IPC1 finishes patch installation and needs to be restarted, the IPC1 can restart the application module, and other modules such as the coding module and the like continue to run normally;
4. The IPC1 disconnects ISCSI connection with the IPSAN storage device and informs the IPC2 to establish target ISCSI storage connection with the IPSAN storage device according to the related information in the IPC1 encapsulation information table stored by the IPC2 through an ONVIF message; when IPC1 determines that the IPC2 establishes the target ISCSI storage connection with the IPSAN storage device is complete, IPC1 may send the video data after the ISCSI connection is broken to IPC 2;
5. when receiving video data sent by IPC1, IPC2 may encapsulate the received video data according to the information such as MAC address, IP address and port in the encapsulation information table of IPC1 stored by IPC2, and send the encapsulated video data to IPSAN storage device through target ISCSI storage connection;
6. When the IPC1 needs to be restarted, the IPC1 can also send ONVIF message to the security box, forbidding the external user to access 80 ports of the IPC (assuming that 80 ports of the IPC are ports providing live service to the outside); during the restart of IPC1, when the security box receives a message with a destination port number of 80, the message is prohibited from passing through;
7. when the IPC1 is restarted, the IPC1 stops sending video data to the IPC2 and sends an ONVIF message to the IPC2 to inform the IPC2 to disconnect the Target ISCSI storage connection with the IPSAN storage equipment, the IPC1 reestablishes the ISCSI storage connection corresponding to Target to the IPSAN storage equipment, and caches the video data in the connection establishment process; when the IPC1 reestablishes the ISCSI storage connection of the Target corresponding to the IPSAN storage device successfully, the IPC1 recovers the encapsulation of the video data to save to the IPSAN storage device;
8. when the IPC1 is restarted, sending a free ARP message to prevent the message returned by the IPSAN storage equipment from being sent to the IPC 2;
9. When the IPC1 is restarted, IPC1 sends an ONVIF message to the security box, releases the access restriction, and releases the access of the 80 port, and then the message with the destination port number of 80 can reach IPC1 through the security box.
as can be seen from the above description, in the technical solution provided in the embodiment of the present invention, by separating the application module and the coding module of the video acquisition device, when the video acquisition device has a bug and needs to be restarted after patch installation is completed, the video acquisition device can restart the application module and locally cache the video data acquired by the coding module, so that it is ensured that the video data can still be acquired during restart of the video acquisition device, and loss of the video data during restart of the video acquisition device is avoided.
referring to fig. 5, a schematic structural diagram of an apparatus upgrading apparatus according to an embodiment of the present invention is provided, where the apparatus upgrading apparatus may be applied to a video capture device in a video monitoring system, the video monitoring system further includes a management server and a storage device, an application module of the video capture device in the video monitoring system is separated from an encoding module, as shown in fig. 5, the apparatus upgrading apparatus may include:
a restart unit 510, configured to restart the application module when the video acquisition device has a bug and needs to be restarted after the patch is installed;
the caching unit 520 is configured to locally cache the video data acquired by the encoding module when the video acquisition device has a bug and needs to be restarted after the patch is installed;
In an optional embodiment, the video capture device is used as a first video capture device to be backed up with a second video capture device in the video monitoring system;
Correspondingly, referring to fig. 6 together, a schematic structural diagram of another device upgrading apparatus according to an embodiment of the present invention is shown, and on the basis of the embodiment shown in fig. 5, the device upgrading apparatus shown in fig. 6 may further include:
A sending unit 530, configured to, when the video capture device has a bug and the patch is installed and needs to be restarted, disconnect the storage connection between the first video capture device and the storage device, and send a first notification message to the second video capture device, so as to notify the second video capture device to simulate the first video capture device to establish a target storage connection with the storage device;
the sending unit 530 is further configured to send, when the target storage connection between the second video capture device and the storage device is completed, the video data obtained after the storage connection is disconnected to the second video capture device, where the second video capture device simulates the first video capture device to encapsulate the received video data, and send the encapsulated video data to the storage device through the target storage connection.
In an optional embodiment, the sending unit 530 may be further configured to stop sending the video data to the second video capturing device when the restarting of the application module by the first video capturing device is completed, and send a second notification message to the second video capturing device to notify the second video capturing device to disconnect the target storage connection with the storage device;
accordingly, referring to fig. 7 together, a schematic structural diagram of another device upgrading apparatus according to an embodiment of the present invention is shown, and on the basis of the embodiment shown in fig. 5, the device upgrading apparatus shown in fig. 7 may further include: a building unit 540 and an encapsulating unit 550; wherein:
An establishing unit 540, configured to reestablish a storage connection with the storage device;
The caching unit 520 is further configured to cache the video data obtained by the encoding module in the connection establishment process;
The encapsulating unit 550 is configured to encapsulate the cached video data when the first video capture device and the storage device reestablish the storage connection successfully;
the sending unit 530 is further configured to send the encapsulated video data to the storage device through the reestablished storage connection.
please refer to fig. 8, which is a schematic structural diagram of a video monitoring system according to an embodiment of the present invention, where the video acquisition device 810, the management server 820, and the storage device 830 of the video monitoring system are provided, and an application module and an encoding module of the video acquisition device 810 in the video monitoring system are separated, where:
the video acquisition device 810 is configured to restart the application module and locally cache the video data acquired by the encoding module when a bug exists and the patch is installed and needs to be restarted.
in an optional embodiment, the video capture device 810 as a first video capture device is backed up with a second video capture device in the video monitoring system;
The first video acquisition equipment is also used for disconnecting the storage connection with the storage equipment and sending a first notification message to the second video acquisition equipment when the bug exists and the patch is installed and needs to be restarted;
the second video acquisition device is used for receiving the first notification message and simulating the first video acquisition device to establish target storage connection with the storage device;
The first video acquisition device is further used for sending video data acquired after the storage connection is disconnected to the second video acquisition device when the target storage connection between the second video acquisition device and the storage device is completed;
the second video acquisition device is further configured to receive the video data sent by the first video acquisition device, simulate the first video acquisition device to package the received video data, and send the video data to the storage device through the target storage connection.
In an optional embodiment, the first video capture device is further configured to stop sending video data to the second video capture device and send a second notification message to the second video capture device when the restart of the application module is completed;
the second video acquisition device is further used for disconnecting the target storage connection with the storage device when the second notification message is received;
the first video acquisition device is also used for reestablishing storage connection with the storage device and caching video data acquired by the coding module in the connection establishment process;
and the first video acquisition device is further used for packaging the cached video data and then sending the packaged video data to the storage device through the reestablished storage connection when the reestablished storage connection with the storage device is successful.
in an optional embodiment, the management server 820 is configured to issue a bug detection Trojan to a target video acquisition device that is successfully registered, and periodically or periodically send a detection instruction to the target video acquisition device, so that the target video acquisition device performs bug detection by using the bug detection Trojan, and reports a detection result to the management server 820; when the target video acquisition equipment is determined to have a bug, issuing a patch downloading notification to the target video acquisition equipment, wherein the patch downloading notification carries address information of a patch server, so that the target video acquisition equipment downloads a corresponding patch according to the address information of the patch server and installs the patch;
Or the like, or, alternatively,
And the management server 820 is configured to periodically or periodically scan the target video acquisition device which is successfully registered for vulnerabilities, and when it is determined that the target video acquisition device has vulnerabilities, issue a patch download notification to the target video acquisition device, where the patch download notification carries address information of a patch server, so that the target video acquisition device downloads a corresponding patch according to the address information of the patch server and installs the patch.
in an alternative embodiment, the video surveillance system shown in fig. 8 may further include: a security box 840; wherein:
The video acquisition device 810 is further configured to send an access control instruction to the secure box when a bug exists and the patch needs to be restarted after being installed;
the security box 840 is configured to receive the access control instruction, generate a corresponding access blacklist according to the access control instruction, and prohibit a message matching the access blacklist from passing through;
The video capture device 810 is further configured to send a control release instruction to the secure box when restarting the application module is completed;
The security box 840 is further configured to receive the control releasing instruction, and delete the access blacklist corresponding to the access control instruction.
the implementation process of the functions and actions of each unit in the above device is specifically described in the implementation process of the corresponding step in the above method, and is not described herein again.
For the device embodiments, since they substantially correspond to the method embodiments, reference may be made to the partial description of the method embodiments for relevant points. The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of the invention. One of ordinary skill in the art can understand and implement it without inventive effort.
as can be seen from the above embodiments, by separating the application module and the encoding module of the video acquisition device, when the video acquisition device has a bug and needs to be restarted after patch installation is completed, the video acquisition device can restart the application module and locally cache the video data acquired by the encoding module, so that it is ensured that the video data can still be acquired during restart of the video acquisition device, and loss of the video data during restart of the video acquisition device is avoided.
other embodiments of the invention will be apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the invention following, in general, the principles of the invention and including such departures from the present disclosure as come within known or customary practice within the art to which the invention pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the invention being indicated by the following claims.
it will be understood that the invention is not limited to the precise arrangements described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the invention is limited only by the appended claims.
Claims (10)
1. an equipment upgrading method is applied to a video monitoring system, the video monitoring system comprises a video acquisition device, a management server and a storage device, and is characterized in that an application module of the video acquisition device is separated from an encoding module; the method comprises the following steps:
When the video acquisition equipment has a bug and the patch is installed and needs to be restarted, restarting the application module by the video acquisition equipment, and locally caching the video data acquired by the coding module;
The video acquisition equipment serving as first video acquisition equipment and second video acquisition equipment in the video monitoring system are backups of each other;
When the video acquisition equipment has a bug and the patch installation is completed and needs to be restarted, the method further comprises the following steps:
The first video acquisition equipment is disconnected from the storage equipment, and sends a first notification message to the second video acquisition equipment to notify the second video acquisition equipment to simulate the video acquisition equipment to establish target storage connection with the storage equipment;
When the second video acquisition device and the storage device are in target storage connection, the first video acquisition device sends the video data acquired after the storage connection is disconnected to the second video acquisition device, the second video acquisition device simulates the first video acquisition device to package the received video data, and the video data is sent to the storage device through the target storage connection.
2. the method of claim 1, further comprising:
when the restarting of the application module by the first video acquisition device is completed, stopping sending video data to the second video acquisition device, and sending a second notification message to the second video acquisition device to notify the second video acquisition device to disconnect the target storage connection with the storage device;
the first video acquisition device reestablishes storage connection with the storage device, and caches video data acquired by the encoding module in the connection establishment process;
and when the first video acquisition device is successfully reestablished with the storage device, sending the cached video data to the storage device through the reestablished storage connection after packaging.
3. the method of claim 1, further comprising:
The management server issues a vulnerability detection Trojan to target video acquisition equipment which is successfully registered, and periodically or periodically sends a detection instruction to the target video acquisition equipment so that the target video acquisition equipment utilizes the vulnerability detection Trojan to carry out vulnerability detection and reports a detection result to the management server;
When the management server determines that the target video acquisition equipment has a bug, the management server issues a patch downloading notification to the target video acquisition equipment, wherein the patch downloading notification carries address information of a patch server, so that the target video acquisition equipment downloads a corresponding patch according to the address information of the patch server and installs the patch;
or the like, or, alternatively,
the management server periodically or periodically scans the bugs of the successfully registered target video acquisition equipment, and when the target video acquisition equipment is determined to have bugs, sends a patch downloading notification to the target video acquisition equipment, wherein the patch downloading notification carries address information of a patch server, so that the target video acquisition equipment downloads corresponding patches according to the address information of the patch server and installs the patches.
4. the method of claim 1, further comprising a security box in the video surveillance system;
When the video acquisition equipment has a bug and the patch installation is completed and needs to be restarted, the method further comprises the following steps:
The video acquisition equipment sends an access control instruction to the safety box so that the safety box generates a corresponding access blacklist according to the access control instruction and forbids the message matched with the access blacklist to pass through;
and when the restarting of the application module of the video acquisition equipment is completed, sending a control releasing instruction to the safety box so that the safety box deletes an access blacklist corresponding to the access control instruction.
5. an apparatus upgrading device for a video monitoring system, the video monitoring system further comprising a management server and a storage device, wherein an application module of the video monitoring system is separated from an encoding module, the apparatus comprising:
The restarting unit is used for restarting the application module when the video acquisition equipment has a bug and needs to be restarted after the patch is installed;
The cache unit is used for caching the video data acquired by the encoding module locally when the video acquisition equipment has a bug and needs to be restarted after patch installation is finished;
the video acquisition equipment serving as first video acquisition equipment and second video acquisition equipment in the video monitoring system are backups of each other;
the device further comprises:
The sending unit is used for disconnecting the storage connection between the first video acquisition device and the storage device and sending a first notification message to the second video acquisition device to notify the second video acquisition device to simulate the first video acquisition device to establish target storage connection with the storage device when the video acquisition device has a bug and the patch needs to be restarted after being installed;
The sending unit is further configured to send the video data obtained after the storage connection is disconnected to the second video capture device when the target storage connection between the second video capture device and the storage device is completed, and the second video capture device simulates the first video capture device to package the received video data and send the packaged video data to the storage device through the target storage connection.
6. the apparatus of claim 5,
the sending unit is further configured to stop sending video data to the second video acquisition device and send a second notification message to the second video acquisition device to notify the second video acquisition device of disconnecting the target storage connection with the storage device when the first video acquisition device completes restarting the application module;
the device further comprises:
The establishing unit is used for reestablishing storage connection with the storage equipment;
The cache unit is further configured to cache the video data obtained by the encoding module in the connection establishment process;
The packaging unit is used for packaging the cached video data when the first video acquisition device and the storage device are successfully reestablished in storage connection;
The sending unit is further configured to send the encapsulated video data to the storage device through the reestablished storage connection.
7. a video monitoring system comprises video acquisition equipment, a management server and storage equipment, and is characterized in that an application module and an encoding module of the video acquisition equipment in the video monitoring system are separated; wherein:
the video acquisition equipment is used for restarting the application module and locally caching the video data acquired by the coding module when a bug exists and the patch is installed and needs to be restarted;
the video acquisition equipment serving as first video acquisition equipment and second video acquisition equipment in the video monitoring system are backups of each other;
The first video acquisition equipment is also used for disconnecting the storage connection with the storage equipment and sending a first notification message to the second video acquisition equipment when the bug exists and the patch is installed and needs to be restarted;
the second video acquisition device is used for receiving the first notification message and simulating the video acquisition device to establish target storage connection with the storage device;
the first video acquisition device is further used for sending video data acquired after the storage connection is disconnected to the second video acquisition device when the target storage connection between the second video acquisition device and the storage device is completed;
the second video acquisition device is further configured to receive the video data sent by the first video acquisition device, simulate the first video acquisition device to package the received video data, and send the video data to the storage device through the target storage connection.
8. The system of claim 7,
the video acquisition equipment is further used for stopping sending the video data to the second video acquisition equipment and sending a second notification message to the second video acquisition equipment when the application module is restarted;
The second video acquisition device is further used for disconnecting the target storage connection with the storage device when the second notification message is received;
the first video acquisition device is also used for reestablishing storage connection with the storage device and caching video data acquired by the coding module in the connection establishment process;
and the first video acquisition device is further used for packaging the cached video data and then sending the packaged video data to the storage device through the reestablished storage connection when the reestablished storage connection with the storage device is successful.
9. the system of claim 7,
the management server is used for issuing a vulnerability detection Trojan to target video acquisition equipment which is successfully registered, and periodically or periodically sending a detection instruction to the target video acquisition equipment so that the target video acquisition equipment utilizes the vulnerability detection Trojan to carry out vulnerability detection and reports a detection result to the management server; when the target video acquisition equipment is determined to have a bug, issuing a patch downloading notification to the target video acquisition equipment, wherein the patch downloading notification carries address information of a patch server, so that the target video acquisition equipment downloads a corresponding patch according to the address information of the patch server and installs the patch;
or the like, or, alternatively,
the management server is used for scanning the target video acquisition equipment which is successfully registered for the loopholes regularly or periodically, and issuing a patch downloading notification to the target video acquisition equipment when the target video acquisition equipment is determined to have the loopholes, wherein the patch downloading notification carries the address information of the patch server, so that the target video acquisition equipment downloads the corresponding patch according to the address information of the patch server and installs the patch.
10. The system of claim 7, further comprising: a safety box; wherein:
The video acquisition equipment is also used for sending an access control instruction to the security box when a bug exists and the installation of a patch is completed and the patch needs to be restarted;
The safety box is used for receiving the access control instruction, generating a corresponding access blacklist according to the access control instruction, and forbidding the message matched with the access blacklist to pass through;
the video acquisition equipment is also used for sending a control releasing instruction to the safety box when the application module is restarted;
and the safety box is also used for receiving the control releasing instruction and deleting the access blacklist corresponding to the access control instruction.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610421630.5A CN106126270B (en) | 2016-06-13 | 2016-06-13 | equipment upgrading method and device and video monitoring system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610421630.5A CN106126270B (en) | 2016-06-13 | 2016-06-13 | equipment upgrading method and device and video monitoring system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106126270A CN106126270A (en) | 2016-11-16 |
| CN106126270B true CN106126270B (en) | 2019-12-13 |
Family
ID=57270126
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610421630.5A Active CN106126270B (en) | 2016-06-13 | 2016-06-13 | equipment upgrading method and device and video monitoring system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106126270B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112261299B (en) * | 2020-10-22 | 2022-06-28 | 苏州臻迪智能科技有限公司 | Unmanned aerial vehicle time-delay shooting method and device, unmanned aerial vehicle and storage medium |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100505871C (en) * | 2006-10-24 | 2009-06-24 | 杭州华三通信技术有限公司 | Video-frequency data processing method, video-frequency collecting equipment and video-frequency management equipment |
| CN102300081A (en) * | 2011-08-16 | 2011-12-28 | 深圳市佳信捷电子有限公司 | Audio and video monitoring equipment, system and method thereof |
| JP2015219616A (en) * | 2014-05-15 | 2015-12-07 | 富士電機株式会社 | Monitoring control system |
| CN105430327A (en) * | 2015-11-05 | 2016-03-23 | 成都基业长青科技有限责任公司 | NVR cluster backup method and device |
-
2016
- 2016-06-13 CN CN201610421630.5A patent/CN106126270B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100505871C (en) * | 2006-10-24 | 2009-06-24 | 杭州华三通信技术有限公司 | Video-frequency data processing method, video-frequency collecting equipment and video-frequency management equipment |
| CN102300081A (en) * | 2011-08-16 | 2011-12-28 | 深圳市佳信捷电子有限公司 | Audio and video monitoring equipment, system and method thereof |
| JP2015219616A (en) * | 2014-05-15 | 2015-12-07 | 富士電機株式会社 | Monitoring control system |
| CN105430327A (en) * | 2015-11-05 | 2016-03-23 | 成都基业长青科技有限责任公司 | NVR cluster backup method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106126270A (en) | 2016-11-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8997092B2 (en) | Method, system, and computer readable medium for provisioning and remote distribution | |
| KR20090035484A (en) | Usb wireless network drive | |
| EP1815669A1 (en) | Viewing system | |
| CN104166586A (en) | Transparent computing method and transparent computing system based on virtualization technology | |
| CN107959622A (en) | A kind of intelligent home gateway system and intelligent home gateway | |
| Pang et al. | Research of android smart phone surveillance system | |
| US10687216B2 (en) | Antitheft method for mobile terminal and apparatus | |
| CN107862091B (en) | Control method and device for realizing webpage access | |
| CN105704157A (en) | Remote control method and system, intelligent terminal and service terminal application to remote control method and system | |
| CN107450954A (en) | A kind of user's cloud terminal staging method based on cloud desktop | |
| CN110958206A (en) | Data security method for mobile equipment application based on virtualization | |
| US20230291789A1 (en) | Integrated cloud system with lightweight gateway for premises automation | |
| CN104065921A (en) | Security and protection wide area network embedded type monitoring device and control method thereof | |
| CN108184091B (en) | Video monitoring equipment deployment method and device | |
| US20190007914A1 (en) | Synchronizing configurations between access point controllers over n+1 network | |
| CN106126270B (en) | equipment upgrading method and device and video monitoring system | |
| CN107342972B (en) | Method and device for realizing remote access | |
| CN102932811A (en) | Method and system for detecting lost terminal | |
| CN112003842B (en) | High-interaction honeypot system and honeypot protection method | |
| US10469399B2 (en) | Managing remote device based on physical state of a management device | |
| CN104348646A (en) | Configuration data processing method, device and system | |
| CN111885223A (en) | Distributed cloud mobile phone and system | |
| CN111885101A (en) | Data storage method | |
| CN106982211B (en) | Method and device for extracting mobile terminal information on network | |
| US9473953B2 (en) | Roaming detection and session recovery during VMM-RC |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |