CN111028121A - Alarm information processing method and device - Google Patents
Alarm information processing method and device Download PDFInfo
- Publication number
- CN111028121A CN111028121A CN201911359273.4A CN201911359273A CN111028121A CN 111028121 A CN111028121 A CN 111028121A CN 201911359273 A CN201911359273 A CN 201911359273A CN 111028121 A CN111028121 A CN 111028121A
- Authority
- CN
- China
- Prior art keywords
- alarm information
- service
- alarm
- source
- service alarm
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000010365 information processing Effects 0.000 title abstract description 15
- 238000003672 processing method Methods 0.000 title abstract description 9
- 238000000034 method Methods 0.000 claims abstract description 55
- 238000012545 processing Methods 0.000 claims abstract description 48
- 230000001960 triggered effect Effects 0.000 claims abstract description 17
- 238000006243 chemical reaction Methods 0.000 claims description 39
- 238000004364 calculation method Methods 0.000 claims description 18
- 238000001914 filtration Methods 0.000 claims description 5
- 230000008569 process Effects 0.000 description 18
- 238000001514 detection method Methods 0.000 description 5
- 238000010586 diagram Methods 0.000 description 4
- 230000007123 defense Effects 0.000 description 3
- 238000004458 analytical method Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000036626 alertness Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 230000004069 differentiation Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000013507 mapping Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 230000000717 retained effect Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
- G06Q50/10—Services
- G06Q50/26—Government or public services
- G06Q50/265—Personal security, identity or safety
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/06—Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
- G06Q10/063—Operations research, analysis or management
- G06Q10/0635—Risk analysis of enterprise or organisation activities
Landscapes
- Business, Economics & Management (AREA)
- Human Resources & Organizations (AREA)
- Engineering & Computer Science (AREA)
- Strategic Management (AREA)
- Economics (AREA)
- Tourism & Hospitality (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Entrepreneurship & Innovation (AREA)
- Marketing (AREA)
- Development Economics (AREA)
- General Business, Economics & Management (AREA)
- Educational Administration (AREA)
- Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- Operations Research (AREA)
- Game Theory and Decision Science (AREA)
- Computer Security & Cryptography (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Primary Health Care (AREA)
- Alarm Systems (AREA)
Abstract
The application provides a method and a device for processing alarm information; the alarm information processing method comprises the following steps: when an alarm is triggered, acquiring source alarm information; the source alarm information at least comprises a source alarm type, a trigger source type and an alarm place; converting the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type; calculating to obtain a risk value of the service alarm information according to a risk coefficient corresponding to the alarm place and a risk coefficient corresponding to the service alarm type of the service alarm information; and determining a distribution sequence of the service alarm information according to the risk value of the service alarm information, and distributing the service alarm information to an agent client for processing according to the distribution sequence. The alarm information reading method and the alarm information reading device facilitate reading of the alarm information and improve accuracy of risk degree of the obtained alarm information.
Description
Technical Field
The present invention relates to the field of information processing technologies, and in particular, to a method and an apparatus for processing alarm information.
Background
In places, enterprises and the like with higher requirements on safety, a large number of security devices of different types, such as network security devices including cameras, alarm hosts, entrance guards and the like, are installed, so that alarm can be triggered in time under the condition of safety problems.
In the prior art, when security equipment is triggered, the sent source alarm information is generally used as an object to analyze and process the alarm. And the source alarm information is subjected to risk classification according to different types of security equipment and source alarm types, so that the source alarm with high risk grade can be processed preferentially.
However, since the source alarm information sent by different security devices has different forms and the security devices are various in types, it is difficult for the staff to interpret the source alarm information. Moreover, the requirements of different places on the safety are different, and the source alarm information is subjected to risk classification only according to the type of the security equipment and the source alarm type, so that the real risk grade of alarm cannot be well reflected, for example, the middle-grade alarm of a bank vault is actually far higher than the middle-grade alarm of a business hall. Therefore, further differentiation of the risk level by a human is also needed to be able to accurately prioritize the source alarm with a high risk level. Therefore, the existing technology has relatively low processing efficiency and reliability for the alarm information processing mode.
Disclosure of Invention
Based on the defects of the prior art, the embodiment of the invention provides a method for processing alarm information, so as to solve the problem that in the prior art, the source alarm information is used as an analysis and processing object, and only the type of security equipment and the type of source alarm are used for risk classification of the alarm information, so that the alarm information processing efficiency and reliability are relatively low.
In order to achieve the purpose, the invention provides the following technical scheme:
the first aspect of the present invention provides a method for processing alarm information, including:
when an alarm is triggered, acquiring source alarm information; the source alarm information at least comprises a source alarm type, a trigger source type and an alarm place;
converting the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type;
calculating to obtain a risk value of the service alarm information according to a risk coefficient corresponding to the alarm place and a risk coefficient corresponding to the service alarm type of the service alarm information;
and determining a distribution sequence of the service alarm information according to the risk value of the service alarm information, and distributing the service alarm information to an agent client for processing according to the distribution sequence.
Optionally, in the method, the calculating a risk value of the service alarm information according to a risk coefficient corresponding to the alarm location and a risk coefficient corresponding to a service alarm type of the service alarm information includes:
respectively determining a first risk coefficient corresponding to a service alarm category of the service alarm information, a second risk coefficient corresponding to a service alarm category of the service alarm information, and a third risk coefficient corresponding to the alarm place;
substituting the first risk coefficient, the second risk coefficient and the third risk coefficient into the risk value calculation formula to calculate the risk value of the service alarm information;
wherein the risk value calculation formula is: AL ═ K × 10α+S×10β+P×10γK is a first risk coefficient, S is a second risk coefficient, P is a third risk coefficient, α is a weight value corresponding to a business alarm category, β is a weight value corresponding to a business alarm category, and gamma is a weight value corresponding to an alarm place.
Optionally, in the above method, before converting the source alarm information into corresponding service alarm information according to at least the source alarm type and the trigger source type, the method further includes:
reserving one source alarm information, and filtering out other source alarm information which is repeatedly acquired within a preset time period and is the same as the source alarm information;
judging whether the source alarm information meets corresponding preset conversion conditions or not; the preset conversion condition is set according to whether the source alarm information needs to be processed or not;
if the source alarm information is judged to meet the preset conversion condition, executing the conversion of the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type; and if the source alarm information is judged not to meet the preset conversion condition, deleting the source alarm information.
Optionally, in the above method, the determining, according to the risk value of the service alarm information, a distribution sequence of the service alarm information, and distributing the service alarm information to an agent client according to the distribution sequence for processing includes:
comparing the risk value of the service alarm with the risk value of the undistributed service alarm in sequence, and determining the distribution sequence of the service alarm information in all undistributed service alarm information;
based on the distribution sequence of the service alarm, preferentially distributing the service alarm information to an agent client meeting a first condition for processing; the first condition is that the currently processed service alarm information is the same as the service alarm type and the trigger source type of the service alarm information.
Optionally, in the above method, after determining a distribution sequence of the service alarm information according to the risk value of the service alarm information and distributing the service alarm information to an agent client according to the distribution sequence for processing, the method further includes:
judging whether the service alarm information is processed within preset time;
and if the service alarm information is judged not to be processed within the preset time, forwarding the service alarm information to the upper-level seat client.
In another aspect, the present invention provides an apparatus for processing alarm information, including:
the acquisition unit is used for acquiring source alarm information when alarm is triggered; the source alarm information at least comprises a source alarm type, a trigger source type and an alarm place;
the conversion unit is used for converting the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type;
the calculation unit is used for calculating a risk value of the service alarm information according to a risk coefficient corresponding to the alarm place and a risk coefficient corresponding to the service alarm type of the service alarm information;
and the distribution unit is used for determining the distribution sequence of the service alarm information according to the risk value of the service alarm information and distributing the service alarm information to the seat client for processing according to the distribution sequence.
Optionally, in the above apparatus, the calculation unit includes:
the determining unit is used for respectively determining a first risk coefficient corresponding to the service alarm category of the service alarm information, a second risk coefficient corresponding to the service alarm category of the service alarm information and a third risk coefficient corresponding to the alarm place;
the calculation subunit is configured to substitute the first risk coefficient, the second risk coefficient, and the third risk coefficient into the risk value calculation formula to calculate a risk value of the service alarm information;
wherein the risk value calculation formula is: AL ═ K × 10α+S×10β+P×10γK is a first risk coefficient, S is a second risk coefficient, P is a third risk coefficient, α is a weight value corresponding to a business alarm category, β is a weight value corresponding to a business alarm category, and gamma is a weight value corresponding to an alarm place.
Optionally, in the above apparatus, further comprising:
the reservation unit is used for reserving one source alarm information and filtering out other source alarm information which is repeatedly acquired within a preset time period and is the same as the source alarm information;
the first judgment unit is used for judging whether the source alarm information meets a corresponding preset conversion condition; the preset conversion condition is set according to whether the source alarm information needs to be processed or not;
when the first judging unit judges that the source alarm information meets a preset conversion condition, the conversion unit executes the conversion of the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type;
and the deleting unit is used for deleting the source alarm information when the first judging unit judges that the source alarm information does not meet the preset conversion condition.
Optionally, in the above apparatus, the distribution unit includes:
the comparison unit is used for sequentially comparing the risk value of the service alarm with the risk value of the undistributed service alarm and determining the distribution sequence of the service alarm information in all undistributed service alarm information;
the distribution subunit is used for preferentially distributing the service alarm information to the agent client meeting the first condition for processing based on the distribution sequence of the service alarm; the first condition is that the currently processed service alarm information is the same as the service alarm type and the trigger source type of the service alarm information.
Optionally, in the above apparatus, further comprising:
the second judgment unit is used for judging whether the service alarm information is processed within preset time;
and the forwarding unit is used for forwarding the service alarm information to the upper-level agent client when the second judging unit judges that the service alarm information is not processed within the preset time.
According to the alarm information processing method provided by the invention, the source alarm information acquired when the alarm is triggered is converted into corresponding service alarm information at least according to the source alarm type of the source alarm information and the trigger source type. Therefore, various source alarms are converted into service alarms in a unified mode, and therefore the reading of alarm information by workers is facilitated, and the processing efficiency of the alarm information is effectively improved. And calculating to obtain a risk value of the service alarm information according to the risk coefficient corresponding to the alarm place and the risk coefficient corresponding to the service alarm type of the service alarm information. Therefore, the risk degree of the alarm information is determined from multiple aspects, the reliability of the risk value of the alarm information obtained by processing is effectively guaranteed, and the actual risk degree of the alarm information is accurately reflected.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts.
Fig. 1 is a schematic structural diagram of a security management system according to an embodiment of the present invention;
fig. 2 is a schematic flow chart of a method for processing alarm information according to another embodiment of the present invention;
fig. 3 is a schematic flowchart of another alarm information processing method according to an embodiment of the present invention;
fig. 4 is a schematic flowchart of another alarm information processing method according to an embodiment of the present invention;
fig. 5 is a schematic flowchart of another alarm information processing method according to an embodiment of the present invention;
fig. 6 is a schematic flowchart of another alarm information processing method according to an embodiment of the present invention;
fig. 7 is a schematic structural diagram of an alarm information processing apparatus according to another embodiment of the present invention;
FIG. 8 is a schematic structural diagram of a computing unit according to another embodiment of the present invention;
fig. 9 is a schematic structural diagram of a distribution unit according to another embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
In this application, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
The embodiment of the invention provides an alarm information processing method, which aims to solve the problem that in the prior art, source alarm information is used as an analysis and processing object, and only the type of security equipment and the type of source alarm are used for carrying out risk classification on the alarm information, so that the alarm information processing efficiency and reliability are relatively low.
First, it should be noted that, in order to implement the method for processing the alarm information provided by the present invention, an embodiment of the present invention provides a security management system, as shown in fig. 1, including: the system comprises a web service module 101, a center management service module 102, a device management module 103, an alarm distribution module 104, an internet of things access management module 105, an alarm plan center 106, a database 107, a linkage client 108 and an agent client 109.
The web service module 101 is mainly used for providing a system configuration function and a system maintenance function for an administrator. The central management service module 102 is mainly used for uniformly managing all services in the platform, is a master control service of each service cluster, is responsible for task allocation and load balancing control, and is also an entrance of an external access system. The device management module 103 is mainly used for taking charge of the functions of status reporting of video devices, control of a monitoring console, information query of security devices, and the like. And the alarm distribution module 104 is responsible for receiving the source alarm information reported by the device management module 103 and the internet of things access management module 105, processing the source alarm information, and distributing the processed source alarm information. The internet of things access management module 105 is used for reporting the state of access devices such as an alarm host and an access control, inquiring device information, reporting source alarm information and the like. And the alarm plan center 106 is used for carrying out unified management on the corresponding alarm linkage plans. The linkage client 108 refers to a client linked with the security management system through short messages, mails and the like. The agent client 109 is a terminal operated by a person on duty.
Specifically, the device management module 103, the alarm distribution module 104, the internet of things access management module 105, and the alarm plan center 106 all need to be actively registered in the central management service module 102. When an alarm is triggered, the device management module 103 or the internet of things access management module 105 acquires source alarm information, reports the source alarm information to the alarm distribution module 104, converts the source alarm information by the alarm distribution module 104 to obtain service alarm information, distributes the service alarm information to the agent client 109 for processing according to a distribution strategy, and distributes the service alarm information to the linkage client 108 according to a linkage plan uploaded to the database 107 by the alarm plan center 106 to realize linkage processing of the alarm information.
Based on the security management system provided in the above embodiment, another embodiment of the present invention provides a method for processing alarm information, as shown in fig. 2, including:
s201, when alarm is triggered, source alarm information is obtained, wherein the source alarm information at least comprises a source alarm type, a trigger source type and an alarm place.
In the embodiment of the invention, the source alarm information refers to alarm information acquired by a security management system when the security equipment is triggered to alarm. The source alarm information at least comprises a source alarm type, a trigger source type and an alarm place. Therefore, the source alarm type refers to the type of the source alarm, such as mains supply interruption alarm, network interruption alarm, temperature alarm, and the like. The triggering source type refers to the type of security equipment triggering alarm, such as an alarm host, a camera, an entrance guard alarm device, a fire alarm device, a network detection device, and the like. The alarm place can be understood as a place monitored by the security equipment or a place where the security equipment is installed, such as a vault, a cash room, a self-service channel and the like.
It should be noted that security protection devices of different manufacturers and different models can be uniformly accessed into a security protection management system for uniform management by shielding differences of brands, models and the like among the security protection devices through a uniform external interface.
Specifically, when the security device detects an alarm event, the security device is triggered to alarm, and sends source alarm information to the security management system, and the security management system correspondingly acquires the source alarm information. The source alarm information at least comprises a source alarm type, a trigger source type and an alarm place, and can also comprise information related to current alarm, such as alarm trigger time, the state of security equipment associated with the trigger source and the like.
S202, converting the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type.
It should be noted that, in the embodiment of the present invention, a mapping relationship between source alarm information and service alarm types is established in advance for a large number of connected source alarm information of different security devices according to the source alarm type, the trigger source type, the trigger time point, the trigger interval time, the alarm location, the state of the associated security device, and other factors, and the number of service alarm types is small compared to the source alarm type.
Therefore, the source alarm information can be used for generating corresponding service alarm records, namely generating corresponding service alarm information according to the service alarm type corresponding to the source alarm information at least according to the source alarm type and the trigger source type. The service alarm information may include information such as a service alarm type, an alarm location, and a trigger source type.
It should be noted that, for some security devices, when the source alarm type and the trigger source type are the same, but some other factors are different, the actual risk degree of the alarm information is different. Therefore, key factors need to be considered for these devices when converting the source alarm information into corresponding service alarm information. For example, the trigger time may be disregarded for 24 hours, where the risk level of the alarm triggered is the same. However, the risk degree of the same type of alarm source alarm information triggered at different time periods is not the same, so when the source alarm information is converted into service alarm information, the trigger time point of the source alarm also needs to be considered.
For example, infrared detection devices in a business setting trigger intrusion alarms at a much higher risk level during non-business hours or in a armed state than during business hours or in an unarmed state. Because the business hours, it is very normal that infrared detection equipment detects that someone enters the business place, but detects that someone enters the business place when non-business hours, it indicates that someone has illegally entered the business place. Therefore, the triggering time also needs to be considered for the source alarm information of personnel intrusion triggered by the infrared detection device. In non-business hours (or defense state), high-risk business alarm information should be obtained by conversion, and in business hours (or non-defense state), low-risk business alarm information should be obtained by conversion, or the business alarm information should be discarded without processing.
In view of repeated alarm of the security device and that part of the source alarm information may not be processed, in another embodiment of the present invention, before step S202, as shown in fig. 3, the method may further include:
s301, one source alarm message is reserved, and other source alarm messages which are repeatedly acquired within a preset time period and are the same as the source alarm message are filtered.
Optionally, after one source alarm message is acquired, the source alarm message may be retained, and the source alarm messages received within a preset time period and identical to the source alarm message may be deleted, so that subsequent processing of large-scale repeated source alarm messages by the security management system is effectively avoided, and the situation that the agent client receives repeated service alarm messages is also avoided, thereby avoiding reduction of alertness of the operator on duty due to the repeated service alarm messages.
S302, whether the source alarm information meets corresponding preset conversion conditions is judged.
And the preset conversion condition is set according to whether the source alarm information needs to be processed or not.
It should be noted that, for part of the source alarm information, no processing is required at all, or there is no risk. For the alarm information, the alarm information can be filtered out, so that the processing efficiency of the alarm information is improved. For example, an infrared detection device in a business place triggers source alarm information when a person is detected to enter a business hall during business hours or in an unpaid state.
Specifically, corresponding conversion conditions can be set according to the condition whether different source alarm information needs to be processed. The plurality of source alarm information may correspond to one conversion condition, that is, whether the plurality of source alarm information need to be processed may be the same.
It should be further noted that, if it is determined that the source alarm information meets the corresponding preset conversion condition, step S302 is executed: and converting the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type, namely executing the step S202. And if the source alarm information is judged not to meet the corresponding preset conversion condition, deleting the source alarm information.
S203, calculating to obtain a risk value of the service alarm information according to the risk coefficient corresponding to the alarm place and the risk coefficient corresponding to the service alarm type of the service alarm information.
Since the importance levels of different alarm locations are different, the urgency levels in different locations are different even if the alarms are triggered for the same reason. For example, intrusion alarms for bank vaults are more urgent than intrusion alarms for bank halls. Therefore, in the prior art, the risk classification of the alarm is only performed according to the source alarm type and the trigger source type, and the actual risk degree cannot be reflected well. Therefore, in the embodiment of the invention, the alarm place is also considered for the judgment of the risk of the service alarm information. Moreover, since the service alarm type is obtained at least according to the source alarm type and the trigger source type, the method for determining the risk of the service alarm information at least considers the source alarm type and the trigger source type, and therefore other factors are involved.
In the embodiment of the invention, different alarm places have different risk coefficients correspondingly, and different service alarm types also have different risk coefficients correspondingly. Specifically, according to the importance degrees of the alarm places and the service alarm types, corresponding risk coefficients are set for different alarm places and service alarm types in advance. Wherein, the higher the importance degree of the alarm place and the service alarm is, the higher the corresponding risk coefficient is. For example, banks are mainly divided into 5 alarm places including "vaults, bill adding rooms, self-service channels, business places and office places", and the importance of the 5 alarm places is as follows: the national treasury, the cash adding room, the self-service channel, the business place and the office place, so the relationship of the risk coefficients corresponding to the 5 alarm places is as follows: risk coefficient of the vault > risk coefficient between adding paper money > risk coefficient of self-service channel > risk coefficient of business place > risk coefficient of office place.
Optionally, in another embodiment of the present invention, as shown in fig. 4, a specific implementation manner of step S203 includes:
s401, a first risk coefficient corresponding to the service alarm category of the service alarm information, a second risk coefficient corresponding to the service alarm category of the service alarm information and a third risk coefficient corresponding to the alarm place are respectively determined.
That is, in the embodiment of the present invention, the service alarm types of the service alarm information are classified into a service alarm major class and a service alarm minor class. Specifically, under each major service alarm class, the major service alarm class is divided into a plurality of minor service alarm classes. Optionally, the traffic alarm broad class may include: alarm, entrance and exit, defense deployment and withdrawal, event and prompt. And the subclasses under the major class of the service alarm can be divided according to the source alarm type. For example, the alarm can be classified into a temperature alarm, a humidity alarm, a fire alarm, and the like.
Similarly, the business alarm major category and the business alarm minor category set risk coefficients of different sizes according to the alarm emergency degree, that is, different business alarm major categories and business alarm minor categories correspond to different risk coefficients. Wherein, the higher the alarm emergency degree is, the larger the set risk coefficient is. For example, the urgency of the major class of traffic alerts is: alarm > entrance > arming and disarming > event > prompt, then alarm corresponding first risk coefficient > entrance corresponding first risk coefficient > arming and disarming corresponding first risk coefficient > event corresponding first risk coefficient > prompt corresponding first risk coefficient. It should be noted that the first risk coefficient corresponding to any one of the service alarm categories is generally larger than the second risk coefficient corresponding to any one of the service alarm categories.
S402, substituting the first risk coefficient, the second risk coefficient and the third risk coefficient into a risk value calculation formula, and calculating to obtain a risk value of the service alarm information.
Wherein, the risk value calculation formula is as follows: AL ═ K × 10α+S×10β+P×10γK is a first risk coefficient, S is a second risk coefficient, P is a third risk coefficient, α is a weight value corresponding to a business alarm category, β is a weight value corresponding to a business alarm category, and gamma is a weight value corresponding to an alarm place.
Therefore, the weight values corresponding to all the service alarm categories are the same, and the weight values corresponding to all the alarm places are also the same, namely α, β and gamma are three constants.
In the prior art, only the alarm information is classified, so that the degree of urgency among different alarm information in the same grade cannot be reflected, and the specific difference of the degrees of urgency of different alarm information cannot be reflected accurately. According to the embodiment of the invention, the alarm information is not graded any more, but the risk value of the service alarm information is calculated through the risk value calculation formula, and because the risk value is a specific numerical value, the risk degree of different alarm information can be accurately embodied. Therefore, alarm information with the highest actual risk degree can be processed in a timely and prior manner.
S204, determining a distribution sequence of the service alarm information according to the risk value of the service alarm information, and distributing the service alarm information to the seat client side for processing according to the distribution sequence.
The larger the risk value of the service alarm information is, the more forward the distribution sequence of the service alarm information is, so that the service alarm information with a higher risk value can be guaranteed to be processed preferentially.
It should be noted that the popular understanding of the agent client is the client used by the attendant who specially processes the alarm information. All push mechanisms generally adopted in the prior art are to push each source alarm message to all clients for processing. In the embodiment of the invention, the adopted seat system, namely one service alarm message, is only distributed to one of the seat clients.
Optionally, in another embodiment of the present invention, as shown in fig. 5, a specific implementation manner of step S204 includes:
s501, comparing the risk value of the service alarm with the risk value of the undistributed service alarm in sequence, and determining the distribution sequence of the service alarm information in all undistributed service alarm information.
Specifically, the risk value of the service alarm information may be preferentially compared with the risk value of the undistributed service alarm information that is earlier in the distribution sequence according to the distribution sequence of the current undistributed service alarm information. If the risk value of the service alarm information is greater than the risk value of the undistributed service alarm information, determining the distribution sequence of the service alarm information, which is one bit before the current distribution sequence of the undistributed service alarm information. And if the risk value of the service alarm information is smaller than the risk value of the undistributed service alarm information, comparing the risk value of the service alarm information with the risk value of the next undistributed service alarm information. Therefore, the distribution sequence of the service alarm service with high risk value can be ensured to be rapidly determined, and the timely distribution of the service alarm service with high risk can be ensured.
S502, based on the distribution sequence of the service alarm, the service alarm information is preferentially distributed to the agent client side meeting a first condition for processing, wherein the first condition is that the service alarm type and the trigger source type of the currently processed service alarm and the service alarm information are the same.
Since the efficiency of processing the same service alert information in a short time may be faster, in the embodiment of the present invention. When a service alarm message is distributed, the service alarm message is preferentially distributed to an agent client side which is currently processing the service alarm message with the same type as the service alarm message and the same type as the trigger source. And if the agent client meeting the first condition does not exist, distributing the service alarm information to the agent client with the least quantity of the current unprocessed service alarm information.
Optionally, for the service alarm information with a smaller risk value, multiple pieces of service alarm information may be simultaneously distributed to the same agent client, so as to provide distribution efficiency, and facilitate the attendant to process the service alarm information with a smaller risk value in batch.
Optionally, in another embodiment of the present invention, as shown in fig. 6, after step S204 is executed, the method may further include:
s601, judging whether the service alarm information is processed within the preset time.
Optionally, after the service alarm information is processed, the agent client needs to feed back feedback information carrying the identifier of the service alarm information to the security management system. And the security management system starts timing after distributing the service alarm information. And after receiving the feedback information of the service alarm information or after overtime, ending timing. Therefore, the security management system can judge whether the service alarm information is processed within the preset time by judging whether the feedback data sent by the agent client is received within the preset time.
It should be noted that, when step S601 is executed to determine that the service alarm information is not processed within the preset time, step S602 is executed.
And S602, forwarding the service alarm information to the upper-level agent client.
That is to say, in the embodiment of the present invention, the agent client includes a plurality of stages of agent clients, and in order to ensure that the service alarm information is not missed, if the next-stage client does not process the service alarm information within a preset time period, the service alarm information is reported to the previous-stage agent client for processing.
Another embodiment of the present invention provides an apparatus for processing alarm information, as shown in fig. 7, including:
the acquiring unit 701 is configured to acquire source alarm information when an alarm is triggered.
Wherein, the source alarm information at least comprises a source alarm type, a trigger source type and an alarm place.
It should be noted that, the specific working process of the obtaining unit 701 may refer to step S201 in the foregoing method embodiment accordingly, and details are not described here again.
A conversion unit 702, configured to convert the source alarm information into corresponding service alarm information according to at least the source alarm type and the trigger source type.
It should be noted that, the specific working process of the converting unit 702 may refer to step S202 in the foregoing method embodiment accordingly, and is not described herein again.
And the calculating unit 703 is configured to calculate a risk value of the service alarm information according to the risk coefficient corresponding to the alarm location and the risk coefficient corresponding to the service alarm type of the service alarm information.
It should be noted that, the specific working process of the calculating unit 703 may refer to step S203 in the foregoing method embodiment accordingly, which is not described herein again.
And the distributing unit 704 is configured to determine a distributing sequence of the service alarm information according to the risk value of the service alarm information, and distribute the service alarm information to the agent client according to the distributing sequence for processing.
It should be noted that, the specific working process of the distribution unit 704 may refer to step S204 in the foregoing method embodiment accordingly, and is not described herein again.
Optionally, in another embodiment of the present invention, as shown in fig. 8, the calculating unit 703 includes:
the determining unit 801 is configured to determine a first risk coefficient corresponding to the service alarm category of the service alarm information, a second risk coefficient corresponding to the service alarm category of the service alarm information, and a third risk coefficient corresponding to the alarm location, respectively.
It should be noted that, the specific working process of the determining unit 801 may refer to step S401 in the foregoing method embodiment accordingly, and details are not described here again.
And a calculating subunit 802, configured to substitute the first risk coefficient, the second risk coefficient, and the third risk coefficient into a risk value calculation formula, and calculate a risk value of the service alarm information.
Wherein, the risk value calculation formula is as follows: AL ═ K × 10α+S×10β+P×10γK is a first risk coefficient, S is a second risk coefficient, P is a third risk coefficient, α is a weight value corresponding to a business alarm category, β is a weight value corresponding to a business alarm category, and gamma is a weight value corresponding to an alarm place.
It should be noted that, the specific working process of the calculating subunit 802 may refer to the step S402 in the foregoing method embodiment accordingly, which is not described herein again.
Optionally, in another embodiment of the present invention, the apparatus for processing alarm information may further include:
and the reservation unit is used for reserving one source alarm information and filtering out other repeatedly acquired source alarm information which is the same as the source alarm information.
It should be noted that, the specific working process of the reservation unit may refer to step S301 in the foregoing method embodiment accordingly, and is not described herein again.
The first judgment unit is used for judging whether the source alarm information meets the corresponding preset conversion condition; and the preset conversion condition is set according to whether the source alarm information needs to be processed or not.
When the first determining unit determines that the source alarm information meets the preset conversion condition, the converting unit 702 performs conversion of the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type.
It should be noted that, the specific working process of the first determining unit may refer to step S302 in the foregoing method embodiment accordingly, which is not described herein again.
And the deleting unit is used for deleting the source alarm information when the first judging unit judges that the source alarm information does not meet the preset conversion condition.
Optionally, in another embodiment of the present invention, the distributing unit 704, as shown in fig. 9, includes:
a comparing unit 901, configured to compare the risk value of the service alarm with the risk value of the undistributed service alarm in sequence, and determine a distribution sequence of the service alarm information in all undistributed service alarm information.
It should be noted that, the specific working process of the comparison unit 901 may refer to step S501 in the foregoing method embodiment accordingly, which is not described herein again.
The distributing subunit 902 is configured to preferentially distribute, based on a distribution sequence of the service alarm, the service alarm information to the agent clients meeting the first condition for processing.
The first condition is that the currently processed service alarm information is the same as the service alarm type and the trigger source type of the service alarm information to be issued.
It should be noted that, the specific working process of the distributing subunit 902 may refer to step S502 in the foregoing method embodiment accordingly, and details are not described here again.
Optionally, in another embodiment of the present invention, the apparatus for processing alarm information may further include:
and the second judgment unit is used for judging whether the service alarm information is processed within the preset time.
And the forwarding unit is used for forwarding the service alarm information to the upper-level agent client when the second judging unit judges that the service alarm information is not processed within the preset time.
It should be noted that, the specific working processes of the second determining unit and the forwarding unit may refer to step S601 and step S602 in the foregoing method embodiment, which is not described herein again.
According to the alarm information processing device provided by the invention, when the conversion unit is used for triggering alarm, the source alarm information acquired by the acquisition unit is converted into corresponding service alarm information at least according to the source alarm type and the trigger source type of the source alarm information. Therefore, various source alarms are converted into service alarms in a unified mode, so that the reading of the alarm information by workers is facilitated, and the processing efficiency of the alarm information is effectively improved. And calculating to obtain a risk value of the service alarm information through a calculating unit according to a risk coefficient corresponding to the alarm place and a risk coefficient corresponding to the service alarm type of the service alarm information. Therefore, the risk degree of the alarm information is determined from multiple aspects, the reliability of the risk value of the alarm information obtained by processing is effectively guaranteed, and the actual risk degree of the alarm information is accurately reflected.
Those of skill would further appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both, and that the various illustrative components and steps have been described above generally in terms of their functionality in order to clearly illustrate this interchangeability of hardware and software. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims (10)
1. A method for processing alarm information is characterized by comprising the following steps:
when an alarm is triggered, acquiring source alarm information; the source alarm information at least comprises a source alarm type, a trigger source type and an alarm place;
converting the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type;
calculating to obtain a risk value of the service alarm information according to a risk coefficient corresponding to the alarm place and a risk coefficient corresponding to the service alarm type of the service alarm information;
and determining a distribution sequence of the service alarm information according to the risk value of the service alarm information, and distributing the service alarm information to an agent client for processing according to the distribution sequence.
2. The method according to claim 1, wherein the calculating a risk value of the service alarm information according to the risk coefficient corresponding to the alarm location and the risk coefficient corresponding to the service alarm type of the service alarm information includes:
respectively determining a first risk coefficient corresponding to a service alarm category of the service alarm information, a second risk coefficient corresponding to a service alarm category of the service alarm information, and a third risk coefficient corresponding to the alarm place;
substituting the first risk coefficient, the second risk coefficient and the third risk coefficient into a risk value calculation formula to calculate a risk value of the service alarm information;
wherein the risk value calculation formula is: AL ═ K × 10α+S×10β+P×10γK is a first risk coefficient, S is a second risk coefficient, P is a third risk coefficient, α is a weight value corresponding to a business alarm category, β is a weight value corresponding to a business alarm category, and gamma is a weight value corresponding to an alarm place.
3. The method of claim 1, wherein before converting the source alarm information into corresponding service alarm information according to at least the source alarm type and the trigger source type, further comprising:
reserving one source alarm information, and filtering out other source alarm information which is repeatedly acquired within a preset time period and is the same as the source alarm information;
judging whether the source alarm information meets corresponding preset conversion conditions or not; the preset conversion condition is set according to whether the source alarm information needs to be processed or not;
if the source alarm information is judged to meet the preset conversion condition, executing the conversion of the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type; and if the source alarm information is judged not to meet the preset conversion condition, deleting the source alarm information.
4. The method according to claim 1, wherein the determining a distribution sequence of the service alarm information according to the risk value of the service alarm information, and distributing the service alarm information to an agent client for processing according to the distribution sequence includes:
comparing the risk value of the service alarm with the risk value of the undistributed service alarm in sequence, and determining the distribution sequence of the service alarm information in all undistributed service alarm information;
based on the distribution sequence of the service alarm, preferentially distributing the service alarm information to an agent client meeting a first condition for processing; the first condition is that the currently processed service alarm information is the same as the service alarm type and the trigger source type of the service alarm information.
5. The method according to claim 1, wherein after determining a distribution sequence of the service alarm information according to the risk value of the service alarm information and distributing the service alarm information to an agent client according to the distribution sequence for processing, the method further includes:
judging whether the service alarm information is processed within preset time;
and if the service alarm information is judged not to be processed within the preset time, forwarding the service alarm information to the upper-level seat client.
6. An apparatus for processing alarm information, comprising:
the acquisition unit is used for acquiring source alarm information when alarm is triggered; the source alarm information at least comprises a source alarm type, a trigger source type and an alarm place;
the conversion unit is used for converting the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type;
the calculation unit is used for calculating a risk value of the service alarm information according to a risk coefficient corresponding to the alarm place and a risk coefficient corresponding to the service alarm type of the service alarm information;
and the distribution unit is used for determining the distribution sequence of the service alarm information according to the risk value of the service alarm information and distributing the service alarm information to the seat client for processing according to the distribution sequence.
7. The apparatus of claim 6, wherein the computing unit comprises:
the determining unit is used for respectively determining a first risk coefficient corresponding to the service alarm category of the service alarm information, a second risk coefficient corresponding to the service alarm category of the service alarm information and a third risk coefficient corresponding to the alarm place;
the calculation subunit is configured to substitute the first risk coefficient, the second risk coefficient, and the third risk coefficient into the risk value calculation formula to calculate a risk value of the service alarm information;
wherein the risk value calculation formula is: AL ═ K × 10α+S×10β+P×10γK is a first risk coefficient, S is a second risk coefficient, P is a third risk coefficient, α is a weight value corresponding to a business alarm category, β is a weight value corresponding to a business alarm category, and gamma is a weight value corresponding to an alarm place.
8. The apparatus of claim 6, further comprising:
the reservation unit is used for reserving one source alarm information and filtering out other source alarm information which is repeatedly acquired within a preset time period and is the same as the source alarm information;
the first judgment unit is used for judging whether the source alarm information meets a corresponding preset conversion condition; the preset conversion condition is set according to whether the source alarm information needs to be processed or not;
when the first judging unit judges that the source alarm information meets a preset conversion condition, the conversion unit executes the conversion of the source alarm information into corresponding service alarm information at least according to the source alarm type and the trigger source type;
and the deleting unit is used for deleting the source alarm information when the first judging unit judges that the source alarm information does not meet the preset conversion condition.
9. The apparatus of claim 6, wherein the dispensing unit comprises:
the comparison unit is used for sequentially comparing the risk value of the service alarm with the risk value of the undistributed service alarm and determining the distribution sequence of the service alarm information in all undistributed service alarm information;
the distribution subunit is used for preferentially distributing the service alarm information to the agent client meeting the first condition for processing based on the distribution sequence of the service alarm; the first condition is that the currently processed service alarm information is the same as the service alarm type and the trigger source type of the service alarm information.
10. The apparatus of claim 6, further comprising:
the second judgment unit is used for judging whether the service alarm information is processed within preset time;
and the forwarding unit is used for forwarding the service alarm information to the upper-level agent client when the second judging unit judges that the service alarm information is not processed within the preset time.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911359273.4A CN111028121B (en) | 2019-12-25 | 2019-12-25 | Alarm information processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911359273.4A CN111028121B (en) | 2019-12-25 | 2019-12-25 | Alarm information processing method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111028121A true CN111028121A (en) | 2020-04-17 |
| CN111028121B CN111028121B (en) | 2023-06-06 |
Family
ID=70214346
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911359273.4A Active CN111028121B (en) | 2019-12-25 | 2019-12-25 | Alarm information processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111028121B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111565295A (en) * | 2020-04-28 | 2020-08-21 | 北京飞马拓新电子设备有限公司 | Large monitoring center console system with alarm function and control method |
| CN112053533A (en) * | 2020-09-08 | 2020-12-08 | 湖北保宝智能科技有限公司 | Intelligent safety control method, device and computer storage medium |
| CN113472574A (en) * | 2021-06-30 | 2021-10-01 | 中国电信股份有限公司 | Method, device, medium and electronic equipment for monitoring user equipment based on 5G private network |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101008849A (en) * | 2006-01-24 | 2007-08-01 | 横河电机株式会社 | Device and method for alarm information processing |
| CN104243236A (en) * | 2014-09-17 | 2014-12-24 | 深圳供电局有限公司 | Method, system and servers for analyzing monitoring system operation and maintenance alarm data |
| CN106021061A (en) * | 2016-04-29 | 2016-10-12 | 北京奇虎科技有限公司 | Method, device and system for alarm information processing |
| WO2016201812A1 (en) * | 2015-06-19 | 2016-12-22 | 中兴通讯股份有限公司 | Alarm method and apparatus |
| CN108573589A (en) * | 2018-04-27 | 2018-09-25 | 美澳视界（厦门）智能科技有限公司 | A kind of coordination and response method of safety defense monitoring system |
| CN109245309A (en) * | 2018-11-07 | 2019-01-18 | 广东电网有限责任公司 | A kind of power grid warning information standardization processing method and device |
-
2019
- 2019-12-25 CN CN201911359273.4A patent/CN111028121B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101008849A (en) * | 2006-01-24 | 2007-08-01 | 横河电机株式会社 | Device and method for alarm information processing |
| CN104243236A (en) * | 2014-09-17 | 2014-12-24 | 深圳供电局有限公司 | Method, system and servers for analyzing monitoring system operation and maintenance alarm data |
| WO2016201812A1 (en) * | 2015-06-19 | 2016-12-22 | 中兴通讯股份有限公司 | Alarm method and apparatus |
| CN106021061A (en) * | 2016-04-29 | 2016-10-12 | 北京奇虎科技有限公司 | Method, device and system for alarm information processing |
| CN108573589A (en) * | 2018-04-27 | 2018-09-25 | 美澳视界（厦门）智能科技有限公司 | A kind of coordination and response method of safety defense monitoring system |
| CN109245309A (en) * | 2018-11-07 | 2019-01-18 | 广东电网有限责任公司 | A kind of power grid warning information standardization processing method and device |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111565295A (en) * | 2020-04-28 | 2020-08-21 | 北京飞马拓新电子设备有限公司 | Large monitoring center console system with alarm function and control method |
| CN111565295B (en) * | 2020-04-28 | 2021-06-29 | 北京飞马拓新电子设备有限公司 | Large monitoring center console system with alarm function and control method |
| CN112053533A (en) * | 2020-09-08 | 2020-12-08 | 湖北保宝智能科技有限公司 | Intelligent safety control method, device and computer storage medium |
| CN113472574A (en) * | 2021-06-30 | 2021-10-01 | 中国电信股份有限公司 | Method, device, medium and electronic equipment for monitoring user equipment based on 5G private network |
| CN113472574B (en) * | 2021-06-30 | 2022-08-26 | 中国电信股份有限公司 | Method, device, medium and electronic device for monitoring user equipment based on 5G private network |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111028121B (en) | 2023-06-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111028121A (en) | Alarm information processing method and device | |
| CN109064698B (en) | Resident security early warning method and resident security early warning system | |
| US6353385B1 (en) | Method and system for interfacing an intrusion detection system to a central alarm system | |
| US10380521B2 (en) | Predicting service for intrusion and alarm systems based on signal activity patterns | |
| CN105096550B (en) | Campus Security alarm system and method | |
| CN109872482A (en) | Wisdom security protection monitoring and managing method, system and storage medium | |
| CN1428718B (en) | Airport outgoing passenger intelligent identity identification method and system | |
| CN111524306A (en) | Centralized monitoring system for power environment of machine room | |
| CN103221920B (en) | For integrating the computer implemented method and system of multiple building systems and service application | |
| CN110647192B (en) | Intelligent monitoring and management system for firearms | |
| CN106663363B (en) | A kind of intelligent alarm system | |
| CN107895453A (en) | Building safety warning system and method | |
| CN110501962A (en) | A kind of monitoring system of electric automobile charging station | |
| CN108537920A (en) | Visitor's monitoring method based on recognition of face and system | |
| CN107465652B (en) | Operation behavior detection method, server and system | |
| CN111160272B (en) | Intelligent fault judging and early warning system for images | |
| CN209357110U (en) | A kind of radioactive source managing and control system | |
| CN108844180B (en) | Air conditioner and event monitoring method | |
| US20200320856A1 (en) | Distributed Home Security System And Method Of Responding To An Alert Condition Therefrom | |
| CN218145195U (en) | Building group renting monitoring system | |
| CN115239524A (en) | Property management device based on internet | |
| CN109272280A (en) | A kind of radioactive source managing and control system and method | |
| CN115587729A (en) | Digital dispatching management system and method for nuclear power plant | |
| CN105448054A (en) | Intelligent security system used for modern community | |
| CN213241275U (en) | Video door access linkage control system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |