DE102007000963A1 - Input/output interface for producing secured connection for data exchange between servers, has partition elements assigned to data paths and activated and deactivated, respectively, in alarm-free normal operation - Google Patents

Abstract

The interface (20) has two data paths (21, 24) physically separated from each other, where one of the data paths is opened for data exchange over an external network (30). Partition elements (22, 25) are engaged to each data path, where the elements assigned to the data paths is activated and deactivated, respectively, in an alarm-free normal operation. The elements are controlled by an alarm device (29) such that the data flow is enabled over the data path (21) during normal state, and the data flow is exclusively enabled over the data path (24) during an alarm state. An independent claim is also included for a method for producing a secured connection for data exchange between a network server of an assistance-requiring network and one of servers of assistance networks.

Description

The The invention relates to an interface for producing a secured Connection for data exchange between the network server of a person seeking help Network and one of the servers of assistance networks different Address URL 1, URL 2, ... where the help-seeking network on the one hand includes an internal LAN and on the other hand monitoring means as well as means for triggering an alarm.

The supervision of objects for their backup by means of image camera / cameras known. These objects usually contain data networking an internal LAN as a digital information system for those seeking help Job. This also connects to an external network on, such as the InterNet with its WEB server. About this are more networks connected, including networks of aid agencies. Next is known, the digitally delivered images of the image camera / cameras to record on suitable storage media and recording to hold a certain time. This allows an a posteriori alarm case on entry, expiry and progress of the case of alarm underlying Evaluate situation. A possibility, the events underlying the alarm case from an external one Assistance Center to watch online does not exist. Although one will Online image transmission often also offered via the InterNet via web cameras, where the data of the web camera is both wired via data lines as well as wireless over transmission links are fed into the InterNet, however, this is continuous image transmission free for Accesses of all users. For this reason, such a picture transmission so not for Object security and monitoring suitable because the necessary data protection is not guaranteed is. A picture transmission after alarm messages from the secure help-seeking position a helper (police, security, ...) would indeed emergency services allow a precise assessment of the situation, however is disadvantageous that these image transmissions open are and unwanted Allow access, making security-related objects without concern not monitored can be.

From that starting from the task, the known transmission links between servers of the help-seeking body on the one hand and one on the other hand, to train the server of the auxiliary services that one of the external assistance centers in the event of an alarm access on image data of the server of the internal network of the person seeking help Place only one of the servers of networks assistants is possible if he / she has access rights; Furthermore, a method be specified, with which the access grant taking into account the limits given by data protection certainly operated this way so that can be that the support center underlying the alarm lying situation over the transferred ones Estimate records and take appropriate countermeasures.

These Problem is solved by the features of the characteristics of the independent claims; advantageous Further developments and preferred embodiments describe the dependent Dependent claims.

Of the Server of the digital information system of the help-seeking body has an I / O interface with two parallel, physically separate paths is provided with corresponding outputs. Both outputs are to connect this server to a server an external network - about a WEB server, wherein the external network, in particular the the InterNet forming worldwide-web www. Server of helpers Jobs are each connected with a number of users. On the data fed into such open networks have beside the helpers' servers also have access to additional users, this access is normally allowed and even desirable, allowing a data exchange over the public Net can be done. This data exchange is public, an exchange confidential or secret data is not possible. Normally it is included only the first exit for Open a general data exchange over the open network.

at In an alarm case, this data path is blocked and the data stream is only the second, only in case of alarm open output for one Access from network servers available. Only connections with such servers are made by the helpers Makes it possible to whose URL is already known and saved. The connection is only after a positive review of the URL made and kept. The data exchange is only then admitted if over a match the URL also the password of the accessing server is positively checked.

The access of one of the servers of the service provider to the server of the requesting body is made via the open, external network, in particular via the InterNet-forming worldwide-web www. Under normal circumstances, the data exchanged can be viewed by authorized persons as well as by unauthorized persons, whereby encryption does restrict the viewing of unauthorized persons, but does not prevent them. Since in the event of an alarm any insight into exchanged data is to be prevented, in case of alarm the URLs are exchanged by the servers of the assisting body and one of the servers of the assisting body. Only if the URL of the Ser If the service provider agrees with one of the URLs stored in a storage in advance, the connection is permitted as a secure connection for data exchange.

About these Authorized connection is transmitted by the accessing server the password. There is a check with in advance for the approved URL as a passport of the access right in another Memory deposited password. In agreement, the held Connection for the Data exchange with the server of the assisting body on the Video data of the digital information system of the person seeking help. If there is no match the connection is broken off.

The from that offered by the server of the help-seeking body and so Data requested by the server of the helper in case of an alarm - about by robbery - the for the assessment the information underlying the alarm. This procedure prevents, on the one hand, that any Users of the open network have unauthorized access to this data get while To provide information to the service centers on the situation on the ground allows a more precise assessment of the situation.

Advantageous are the two duplicate data paths of the I / O interface realized by physically separate network cards. Normally, only the data path is over one of these network adapters open, over the second network card is blocked. If an alarm is triggered, it will the data path over locked this first network card and the data path over the second network card opened. Thus stand for the exit to the public Network two differently treatable data paths available. During the Data path via the first network card open access of any user on available Data allowed, leaves the second network card only connects to network servers whose Addresses URL are stored as previously known. These connections are recognized as secure connections and stand up to one Data exchange in case of alarm available. Because both network cards are physically separated from each other, so a limitation of the Data exchange, the unauthorized accesses excludes.

The respective outputs are provided with separating members as switching means. These separators are switchable so that in normal operation, a connection of the normal output with the open network and the connection of the alarm output is prevented with the open network, while in the event of an alarm only one Connection of the output of the second network card to the open network consists; the connection of the normal output to the external network is prevented in this case.

The Switching means are designed as electronic switches, and to cope preferably large, at picture transmission accumulating image data streams designed. Serve usual electronic Switch that a big one Cope with data stream can.

The Alarm network card is equipped with test stations Mistake. A test station is used to check the different addresses of the server accessing in the event of an alarm Help-managing bodies whose URL is eligible in a store is deposited. A second test station allows checking the passwords, so that the connection over in case of alarm Data path is only kept as if the password with the password, that for the URL of the accessing server of the service provider deposited is, matches. Thus, it is ensured that a data exchange in case of alarm only via secured Connections can be made with the approved network server.

The Switching means of the isolators are designed as a switch, and to cope preferably large, at picture transmission accumulating image data streams designed. Serve electronic switches with the capacity for large data streams.

Of the Server of the requesting body has at least one internal or external hard drive on which at least the image data recordable are. The hard disk is advantageously provided with a time buffer. This allows a time-delayed retrieval of the stored image information and thus also an access to temporally past picture sequences.

• – Übergabe zumindest der Videodaten der Überwachungskameras der Hilfesuchenden Stelle sowie anderer Daten über ein internes LAN an den Server des digitalen Informationssystems der Hilfesuchenden Stelle und deren ständiges Aufzeichnen auf eine Festplatte.
• – Der Datenfluss von dem Server der Hilfesuchenden Stelle wird über zwei Datenpfade geführt, in die jeweils ein Trennglied eingeschaltet ist, wobei die beiden Trennglieder so geschaltet sind, dass jeweils nur eines dieser Trennglieder offen, das andere geschlossen ist.
• – Im Normalfall ohne Alarm ist nur der Datenpfad "Normal" über das diesem zugeordneten Trenngliedes geöffnet, der Datenpfad "Alarm" über das diesem zugeordneten Trenngliedes ist geschlossen.
• – Im Alarmfall ist der Datenpfad "Alarm" über das diesem zugeordneten Trenngliedes geöffnet, der Datenpfad "Normal" über das diesem zugeordneten Trenngliedes geschlossen.
• – Im Alarmfall erfolgt eine Überprüfung der Adresse der zugreifenden Server auf deren Übereinstimmung mit den als "berechtigt" gespeicherten Serveradressen. Bei Übereinstimmung wird der Datenpfad "Alarm" gehalten.
• – Im Alarmfall erfolgt eine Überprüfung des dieser Zugriffadresse zugeordneten Passwortes mit dem für diese Adresse hinterlegten Passwort, bei Übereinstimmung wird der Datenpfad für eine Datenübertragung zwischen Hilfesuchender Stelle und Hilfeleistender Stelle zugelassen.
• – Bei fehlender Übereinstimmung wird der Zugriff verweigert und eine bestehende Verbindung abgebrochen.

The following method steps are advantageous for establishing a secure connection from the server of the digital information system of the person seeking help to an assistance network via an external network:

• - Transfer at least the video data of the surveillance cameras of the help-seeking body and other data via an internal LAN to the server of the digital information system of the help-seeking body and their constant recording to a hard drive.
• - The data flow from the server of the help-seeking body is guided over two data paths, in each of which a separator is turned on, the two separators are connected so that only one of these separators open, the other is closed.
• - Normally without alarm, only the data path "Normal" is over the separator assigned to it member opened, the data path "alarm" on this associated isolator is closed.
• - In the event of an alarm, the data path "Alarm" is opened via the isolator assigned to this, the data path "Normal" is closed via the isolator assigned to it.
• In the event of an alarm, the address of the accessing servers is checked for their conformity with the server addresses stored as "authorized". If there is a match, the data path "Alarm" is kept.
• In the event of an alarm, the password assigned to this access address is checked with the password stored for this address; if this is the case, the data path for data transmission between the person seeking help and the service provider is authorized.
• - If there is no match, access is denied and an existing connection is terminated.

The essence of the invention will be apparent from the in 1 illustrated embodiment illustrated in more detail; shows

1 : Data flow diagram for a secured connection.

To a server of a digital information system 10 the help-seeking job with (internal or external) hard drive is on the one hand an internal LAN 11 connected for general data, as well as the video data of the security cameras used for security 12 , About the data outputs 13 and 14 the available data can be output or queried. An additional alarm output 15 takes over from anywhere the help-seeking body z. B. in a raid o. The like. Triggered alarm signal and passes it over the output 15 the I / O interface 20 to.

The I / O interface 20 has two data paths 21 and 24 for the data from the digital information system 10 on. These are for data exchange with the data I / O 13 and 14 over the connections 21.1 and 34.1 connected. The first of these data paths 21 leads via a first isolator 22 to the exit 23 who shares this data with the external network 30 feeds. The other data path 24 is about a second separator 25 guided, which is open in case of alarm. Both isolators are from an alarm switcher 29 driven by the connection 29.1 with the alarm output 15 of the digital information system 10 connected is. The thus transmitted alarm signal acts via the alarm transmitter 29 on the dividers 22 and 25 so that, in alarm-free normal case, the isolator 22 open, the isolator 25 is closed, which reverses this position of the isolators in the event of a present alarm. The facilitator authorized for data exchange 41 . 42 or 43 now has access to the video data and possibly also to audio data recorded by the surveillance cameras 12 the help-seeking body and stored in the digital information system 10 the job seeker job.

The data path assigned to the normal case 21 is over the exit 21.2 with the external network 30 and its WEB server 31 connected. The data path associated with the alarm 24 is first about a test member 26.1 to check the address of one over the external network 30 on the digital information system 10 the help-seeking site accessing help server 41 . 42 respectively. 43 each with its own URL address. If this address agrees with the value stored in the "Address" checker, this data path is cleared and a second checker 26.2 forwarded to check the password for compliance with the password stored for this address. If this check also results in a match, the data path becomes the output 24.2 connected through.

If this match is missing on one of the test members 26.1 respectively. 26.2 , the control will "termination connection" 28 controlled, the (initially open) isolator 25 about the controller 28 " This ensures that the data flow normally passes through the (not further secured) data line 21 to the external network with the WEB server 30 while in the event of an alarm, a (double) secure connection can be established by the service provider to the job seeker. In addition, this can live on the video data of the surveillance cameras 11 as well as microphoned surveillance cameras 11 also access the audio data. This also allows storage of past data for archiving purposes. If the hard disk is provided with a time buffer, this enables a time-delayed data transmission (known from HD recorders) of the video and possibly also audio data from a past period. In order to prevent the hard drive from becoming full, data that was recorded before a (generally predefinable) period of time is overwritten by newer data. Through this training of the server of the job seekers help place is the aid agency able to fall back on temporal past picture material and can thus gain a good overview of the development of the situation.

10

digital information system 10

11

Internal LAN 11

12

surveillance cameras 12

13

Data input / output

14

Data input / output

15

alarm output 15

16

17

18

19

20

I / O interface 20

21

data paths 21 and 24

21.1

entrance

21.2

output 21.1

22

first isolator 22

23

output 23

24

data paths 21 and 24

24.1

output 24.1

25

second isolator 25

26.1

(first) examiner (URL) 26.1

26.2

(second) examiner (password) 26.2

27

28

Cancel connection 28

29

Alarm switch 29

30

external Network/

31

WEB server 30

32

33

34

35

36

37

38

39

40

41

Hilfeleistungs server 41 . 42 respectively. 43

42

Hilfeleistungs server 41 . 42 respectively. 43

43

Hilfeleistungs server 41 . 42 respectively. 43

Claims (9)

Interface for establishing a secure connection for data exchange between the network server of a help-seeking network and one of the servers of assistance networks of different addresses URL 1, URL 2, ... where the help-seeking network comprises, on the one hand, an internal LAN and, on the other hand, monitoring means and means for triggering an alarm, characterized by a first data path ( 21 ) and a second data path ( 24 ), both of which are physically separate from each other, and of which only one of the data paths ( 21 ; 24 ) for the exchange of data over the external network ( 30 ) is open. I / O interface according to claim 1, characterized in that in each data path ( 21 . 24 ) Isolators ( 22 . 25 ) are turned on. Interface for establishing a secure connection for data exchange between the network server of a help-seeking network and one of the servers of assistance networks of different addresses URL 1, URL 2, ... where the help-seeking network comprises on the one hand an internal LAN and on the other monitoring means, and means for triggering an alarm, characterized by a first network card for the first data path ( 21 ) and a second network card for the second data path ( 24 ), both of which are physically separate from each other, and of which only one of the data paths ( 21 ; 24 ) for the exchange of data over the external network ( 30 ) is open. I / O interface according to claim 3, characterized in that in each of the network cards the data paths ( 21 . 24 ) corresponding separating members ( 22 . 25 ) are provided. I / O interface according to one of claims 1 to 4, characterized in that in alarm-free normal operation, a the first data path ( 21 ) associated isolator ( 22 ) and a second data path ( 24 ) associated isolator ( 25 ) is disabled and that both isolators from an alarm ( 29 ) are controlled such that normally the data flow over the first data path ( 21 ) and in the event of an alarm, the data flow exclusively via the second data path ( 24 ) is released. I / O interface according to one of Claims 1 to 5, characterized by test means, of which the first test device ( 26.1 ) is designed in such a way that in the event of an alarm, the service ( 41 ; 42 ; 43 URL transmitted to the server of the digital information system ( 10 ) the help-seeking server of a service provider ( 41 ; 42 ; 43 ) with the access points for servers ( 41 ; 42 ; 43 ) compares deposited URL addresses and, if they match, allows a connection with the accessing assistance device, in case of non-compliance. I / O interface according to claim 6, characterized by further test means, of which the second test means ( 26.2 ) is designed in such a way that in the case of an alarm the person providing assistance from the accessing server ( 41 ; 42 ; 43 ) transmitted password to the server of the digital information system ( 10 ) the help-seeking server accessing a helper ( 41 ; 42 ; 43 ) compares with the stored for a permission to exchange data for this URL address and allows a data exchange on this connection with the accessing assistance device in case of agreement, in case of non-compliance aborts. I / O interface according to claim 5 or 6, characterized in that the test equipment ( 26.1 . 26.2 ) is designed as a shift register, which with a legitimate access to the URL addresses and the passwords associated with these URLs words containing memory interacts. Method for establishing a secure connection for data exchange between the network server of a person seeking help Network and one of the servers of assistance networks different Address URL 1, URL 2, .. via the interface of any one of claims 1 to 8, wherein the person seeking help Network includes an internal LAN and monitoring equipment. as well as means for triggering an alarm, characterized by the following process steps: - Handing over at least the video data of the surveillance cameras the help-seeking body as well as other data via an internal LAN to the Server of the digital information system of the help-seeking body and their constant Record to a hard disk. - The data flow from the server The jobseeker's job gets over two data paths led, in each of which a separator is turned on, the two Separators are connected so that only one of these separators open, the other is closed. - Normally without alarm only the data path "Normal" is assigned via this Isolator open, the data path "Alarm" via the associated Isolator is closed. - In the event of an alarm, the data path "Alarm" is assigned via the data path Isolator open, the data path "Normal" via this assigned Isolator closed. - In the Alarm case takes place a review of the Address of the accessing servers to their agreement with the server addresses stored as "authorized". With agreement the data path "Alarm" is kept.