JP2004320513A - Information managing system and program thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To report the occurrence of an abnormal access to the notifying destination of a user side in addition to the rejection of the access to a user providing information, if the access does not use a normal terminal even by a normal requesting caller when the access request is received from a user side to receive the acquired user providing information. <P>SOLUTION: A data server 11 refers to a user registration table when the access request is received from a user side camera system 4 via an internet to the monitoring image acquired from the camera system 4; and reports the occurrence of the abnormal access via a mail to the user side in addition to the rejection of the access to the monitoring image if it is not the access using a previously permitted normal terminal (type), even if a normal requesting originator is recognized as a result of the authentication by the user ID and the password. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an information management system and a program for managing user-provided information / monitoring images obtained from a user via a network.
[0002]
[Prior art]
In recent years, with the spread of the Internet and broadband environments, anyone can freely view and download camera images on the Internet from an information processing terminal such as a PDA or a mobile phone. It is also used in various ways, for example, it is used for remote monitoring with a monitor image obtained by photographing the site or for security monitoring of a house.
Conventionally, as a surveillance system based on such a camera image, for example, when an intercom master unit that functions as a surveillance control device is accessed from a mobile phone via a network, after performing personal authentication, a camera image in a house is externally provided. There is known a house monitoring system for browsing a house or controlling a device in a house from the outside (see Patent Document 1).
Further, a remote monitoring system is known in which a suspicious person is detected by analyzing a captured image of the inside of an office using a monitoring camera, and an e-mail indicating the intrusion is transmitted to a mobile phone. 2).
[0003]
[Patent Document 1]
JP 2002-315068 A [Patent Document 2]
JP 2002-230654 A
[Problems to be solved by the invention]
In such a surveillance system, in order to view a camera image for monitoring purposes, it is necessary to target only a very limited number of viewers, such as a limited person or a limited family. Even if personal authentication is performed based on an ID or password, if a user ID or password is stolen by a third party, the camera image in the house can be seen by the third party and privacy is violated. The problem remains.
In the case of sending a suspicious person's intrusion to a mobile phone by e-mail, even if it is possible to report the abnormal situation of the suspicious person's intrusion, the suspicious person may break the surveillance camera or disconnect the line. Even contingencies cannot be addressed and security management issues remain.
[0005]
A first object of the present invention is to provide an information processing apparatus that, when a request for access to user-provided information received and obtained from a user is received, if the access is not from a legitimate request source but using a legitimate terminal. In addition to rejecting access to the user, the occurrence of abnormal access can be reported to the user's notification destination.
A second object of the present invention is to provide a system in which, when a surveillance image obtained by instructing the operation control of the surveillance camera device on the user side cannot be normally acquired, the occurrence of an abnormality is notified to a notification destination on the user side. To be able to report.
[0006]
[Means for Solving the Problems]
According to the first aspect of the present invention, when an access request for user-provided information received and acquired from a user via a network is received, access to the user-provided information is permitted under certain conditions. An information management system that specifies, for each user, user information for identifying each user who is permitted to access the user-provided information, and a terminal that is permitted to access the user-provided information. Security information storage means for registering and managing terminal information for identification as security information; and performing an authentication process based on the security information associated with the user when an access request to user-provided information is received. Executing means for determining whether or not the access is a legitimate request source and an access using a legitimate terminal; If the determination unit determines that the legitimate request source is access using a legitimate terminal, access to the user-provided information is permitted on the condition that the legitimate request source is the legitimate request source. Access control means for rejecting access to the user-provided information if it is determined that the access is not an access using a legitimate terminal; and Notification means for reporting the occurrence of abnormal access to the notification destination corresponding to the user.
Further, the present invention provides a computer with a program for realizing the main functions described in the first aspect of the present invention (the fifth aspect of the invention).
[0007]
Therefore, when an access request for user-provided information received and obtained from a user via a network is received, even if the request is legitimate, access using a legitimate terminal can be achieved. Otherwise, access to the user-provided information is rejected, and the occurrence of abnormal access is reported to the user. Therefore, even if the user ID or password is stolen, unauthorized viewing by a third party is possible. In addition, the fact that user IDs and passwords are correct and the terminal used is incorrect means that the possibility of unauthorized access with a stolen user ID or password is extremely high. Is reported to the user, the user can immediately know the occurrence of the abnormal access, and can take quick action.
[0008]
The invention described in claim 1 may be as follows.
The user-provided information is at least a surveillance image photographed by a surveillance camera device on the user side having a surveillance photographing function and a communication function, and the access control unit requests an access to the surveillance image acquired from the user side. When the monitoring image is received, the access to the monitoring image is permitted on condition that the access is from a legitimate request source and a legitimate terminal (the invention according to claim 2).
Therefore, according to the second aspect of the present invention, in addition to having the same effect as the first aspect of the present invention, when an access request for a surveillance image photographed by a surveillance camera device on the user side is received, a proper access request is received. Access to the surveillance image is permitted on condition that the access is from a requesting and legitimate terminal. Can be targeted only to a very limited number of people, such as limited to individuals and families only, making it possible to more securely manage the security, and that surveillance images in the house can be seen by third parties Danger can be effectively suppressed.
[0009]
A conversion information storage unit for storing and managing conversion information for converting an image corresponding to various terminal models is provided, and when an access request for a user-provided image received and obtained from a user is received, a proper request source is used. Provided that the access to the user-provided image is permitted on condition that the access is performed using a legitimate terminal, the user-provided image is provided based on the conversion information corresponding to the terminal model of the request source. The image is converted and provided to the requestor (the invention according to claim 3).
Therefore, according to the third aspect of the invention, in addition to having the same effects as the first aspect of the invention, when the access to the user-provided image is permitted, the conversion information corresponding to the terminal model of the request source Since the image provided by the user is converted and provided to the requester based on the image, for example, the image size and resolution can be adjusted according to the terminal model of the requester. You can see it on your own screen size.
[0010]
According to a fourth aspect of the present invention, at least a browsing request for a monitoring image received and obtained via a network is received from a user-side monitoring camera device having a monitoring shooting function and a communication function. An information management system for providing a surveillance image to a terminal of the request source, comprising: a network address for individually specifying the surveillance camera device; and camera control information for controlling an operation of the surveillance camera device. An information storage unit that registers and manages the information, a photographing control unit that accesses the surveillance camera device based on the network address, and instructs the surveillance camera device to perform photographing according to the camera control information, Determining means for determining whether a monitoring image captured according to the capturing control means has been normally acquired, If it is determined that could not be successfully acquired by the determination means, an abnormality occurrence is to include a notification unit for reporting to the user corresponding notification destination.
Furthermore, the present invention provides a computer with a program for realizing the main functions shown in the invention described in claim 4 (the invention described in claim 6).
[0011]
Therefore, according to the fourth and sixth aspects of the present invention, a camera control device for accessing a surveillance camera device based on a network address for individually specifying a surveillance camera device on the user side and for controlling the operation of the surveillance camera device. When controlling the camera device based on the information, if the monitoring image from the monitoring camera device cannot be normally acquired, the occurrence of the abnormality is reported to the notification destination of the user. In such a case, the operation management of the entire system can be smoothly performed, for example, it is possible to immediately know the operation failure or the line failure of the monitoring camera device, and it is possible to quickly respond.
[0012]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an embodiment of the present invention will be described with reference to FIGS.
FIG. 1 is a block diagram showing the overall configuration of an image management system according to this embodiment.
The image management system collects and stores monitoring images (user-provided images) received and acquired via the Internet from a user-side camera device (camera system) having a photographing function and a communication function for monitoring. Is a wide area communication system that transmits a monitoring image to a terminal of the request source under a certain condition when a browsing request is received, such as an HTTP protocol using a general TCP / IP communication protocol related to the Internet. The transmission / reception of the data digitized (packetized) is performed. A management server 1 which is a core of the image management system is connected to a camera system 4 on the user side via the Internet 2 and an IPS (provider for providing an Internet connection service) 3, and also has the Internet 2 and mobile communication. This is a system environment in which the mobile terminal 6 is connected via the network 5.
[0013]
The management server 1 has various server functions such as a data server, a Web server, and a mail server. The data server 11 receives and acquires a monitoring image from the camera system 4 on the user side, and stores the monitoring image in the hard disk (HDD) 12. To collect and store. In this case, the operation of the camera on the user side is controlled by the initiative of the data server 11. At this time, the data server 11 determines whether the monitoring image has been normally acquired from the camera system 4. If a check is made and it cannot be obtained normally, the occurrence of a system error is reported to the user on the mail. That is, the data server 11 detects an acquisition error continuously for a predetermined number of times when operating each camera at a predetermined timing according to the camera control information set for each camera and receiving and acquiring the monitoring image. In such a case, the system recognizes that the system is abnormal due to a malfunction of the camera or a line, and reports the fact to the user.
[0014]
In addition, when the data server 11 receives a request for access to the monitoring image, the data server 11 permits access to the monitoring image under a certain condition. At this time, the data server 11 registers in advance in the database (DB) 13. Check whether the legitimate request source is access using a legitimate terminal by referring to the security information described below, and confirm that the legitimate request source is accessing using a legitimate terminal. Access to the surveillance image is permitted under the condition that the user ID and password are stolen. Because of the high cost, access to the monitoring image is rejected, and the occurrence of abnormal access is reported to the notification destination of the user by e-mail.
[0015]
The user-side camera system 4 includes a Web camera 41, a personal computer (PC) 42, a router 43, and a modem 44, which are connected via a wired / wireless LAN (local area network) 45. It has become.
The Web camera 41 is, for example, a high-quality Web page-compatible still camera that converts a subject image into a digital image using a CCD area sensor as an image sensor. For this purpose, indoor wide-angle shooting or zoom shooting is performed, the shot images are sequentially recorded and held, and the held images are read out and transferred to the PC 42 in response to a transfer request from the PC 42.
[0016]
The PC 42 controls various parameters for the Web camera 41, reads a monitoring image from the Web camera 41, records and stores the image, and transmits the monitoring image to the data server 11, and the like. A Web browser function and a mail function are provided.
Here, as shown, when one of the plurality of camera systems 4 is referred to as a local side and the other is referred to as a remote side, the local PC 42 reads a monitoring image from the local Web camera 41 and records and stores the monitoring image. In addition, a monitoring image received from the remote Web camera 41 via the IPS 3 is acquired, recorded and stored, and displayed on a monitor including a distant monitoring image. In the example shown in the figure, the PC is omitted on the remote side because there is no problem if the PC is removed from the LAN after initial setting of various parameters for the Web camera 41 on the remote side. ing.
[0017]
The router 43 is connected to the IPS 3 via the modem 44. In addition to performing normal remote routing and the like, in particular, in this embodiment, when the router 43 captures a packet addressed to itself, the router 43 includes a header portion in the packet. The packet is received, provided that the source IP address (Internet Protocol address) extracted from the above corresponds to a specific source IP address (registered address) registered in advance, and the other source In the case of an IP address, it has a special filter function for performing a relay operation for rejecting the reception of the packet. Here, the registration address is pre-registered to determine whether or not access is allowed, and any one of the IP addresses of the data server 11, the other camera system 4, the portable terminal 6, and the like is set as an object to which access is permitted. This is the specified IP address.
[0018]
The mobile terminal 6 is a mobile information device with a communication function such as a mobile phone or a PDA. The mobile terminal 6 requests the data server 11 to browse monitoring images stored and managed on the data server 11 side, or transmits data via the data server 11. Instead, it directly accesses the camera system 4 on the local side via the IPS 3 and makes a request for browsing a monitoring image. In this case, as described above, the data server 11 permits access to the monitoring image on condition that the legitimate request source is access using a legitimate terminal, and the local camera system 4 As described above, the filter function of the router 43 permits access to the monitoring image on condition that the source IP address matches the registered address. The viewer terminal that requests the data server 11 or the camera system 4 on the local side to view an image is not limited to the mobile terminal 6, but may be a PC (not shown) or the like.
[0019]
FIG. 2 is a diagram showing the contents of the operation control table 14 provided in the database 13 on the data server 11 side.
The operation control table 14 stores and manages camera control information for controlling the operation of the Web camera 41 in each camera system 4 under the initiative of the data server 11, and includes “camera ID”, Each item of “setting parameter”, “next storage time”, “error counter”, and “notification flag” is stored.
The “camera ID” is camera-specific identification information assigned to each web camera 41, the “setting parameter” is control information set in advance to control the operation of the web camera 41, and “image storage interval”. , "Start time", and "end time".
[0020]
The “image storage interval” indicates an image storage interval at which monitoring images captured at timings such as 5 seconds, 10 seconds, 1 minute, and the like are received and acquired and stored. The “start time” and the “end time” are start / end times of a shooting period, for example, from 9:00 to 22:00, 10:00 to 20:00, and within this period, The monitoring images received at the “image storage interval” are sequentially stored in the hard disk 12. The “next storage time” is calculated based on the “setting parameter” described above, and indicates the next shooting timing.
The data server 11, when operating each camera at a predetermined timing in accordance with the “setting parameter” set for each camera and acquiring the monitoring image, detects an acquisition error that could not be acquired normally. The value of the “error counter” is updated each time a detection is made. The “error counter” counts the number of acquisition errors. When the value of the “error counter” reaches a predetermined number, the data server 11 detects a system error due to a malfunction of the camera or a faulty line. Is set, and a "notification flag" is set to indicate that the user should be notified of the fact.
[0021]
FIG. 3 is a diagram showing the contents of the user registration table 15 provided in the database 13 on the data server 11 side.
The user registration table 15 determines whether or not to permit access to a monitoring image under a certain condition when a request to access a monitoring image stored and stored for each camera in the hard disk 12 is received. And stores and manages security information and the like for each camera. Each camera has items of “user ID / password”, “model information of permitted terminal”, “notification destination information”, and “camera ID”. I have. Note that a plurality of “notification destination information” may be set, and a plurality of “camera IDs” may be set when the user owns a plurality of cameras.
[0022]
The “user ID / password” is authentication information (security information) for specifying a user who is permitted to access the monitoring image, and the data server 11 sends the user input when requesting access to the monitoring image. The ID / password is compared with the “user ID / password” in the user registration table 15 to authenticate whether the access is from a legitimate request source.
“Model information of permitted terminal” is terminal information (security information) for specifying a terminal permitted to access the monitoring image, and indicates a model (model number) of a mobile phone, a PC, a PDA, or the like. . In this case, the data server 11 checks whether the legitimate request source is access using a legitimate terminal (model), and the legitimate request source is access using a legitimate terminal. Access to the surveillance image is permitted on the condition. "Notification destination information" is an email for rejecting access to the monitoring image and notifying the user of the occurrence of abnormal access when the access is not using a legitimate terminal even if it is a legitimate request source It is an address, and where to notify it according to the user's request is arbitrary.
[0023]
FIG. 4 is a diagram showing the image folder 16 stored and stored in the hard disk 12 on the data server 11 side.
The image folder 16 is provided for each camera, and a “camera ID” is added to each image folder 16. The image folder 16 can sequentially store monitoring images received and acquired at predetermined timings according to the “setting parameters” in the operation control table 14 described above, and can also store, for example, monitoring images for the past several days. The data server 11 accepts a browsing request for a past monitoring image in addition to a browsing request for a current monitoring image. The capacity of the image folder 16 is of course arbitrary, but when the image folder 16 becomes full, the image folder 16 may be transcribed from the oldest folder to another spare folder. It may be stored for a long time, such as for one month.
[0024]
FIG. 5A shows a model table 17 provided in the database 13 of the data server 11, and FIG. 5B shows a camera address table 18.
The model table 17 stores and manages the screen size for each terminal model. When the data server 11 permits access to the monitoring image, the data server 11 monitors the screen size based on the screen size corresponding to the requesting terminal model. The image size is converted and transmitted to the requesting terminal. That is, in order to adjust the image size in accordance with the terminal model of the request source, the screen size is stored as image conversion information for each terminal model. The model table 17 may store the resolution in addition to the screen size for each terminal model.
The camera address table 18 stores and manages the IP address for each camera. In the present embodiment, the fixed IP address is shown. However, in the case of a variable IP address, the address is changed. What is necessary is just to update the content of the camera address table 18 every time.
[0025]
FIGS. 6A and 6B are diagrams showing the permitted IP table 46 set in the router 43 of the camera system 4. FIG. 6A shows the permitted IP table 46 on the local side, and FIG. The table 46 is shown.
The permitted IP table 46 constitutes the above-described filter function. The router 43 transmits the specific source IP address registered in the permitted IP table 46 to the source IP address extracted from the header part of the received packet. If it is an address (registered address), it receives and acquires the packet, but if it is any other source IP address, it rejects the packet. In this case, in the illustrated example, the IP address of the data server 11 is set and registered in the permitted IP table 46 on the local side, and the IP address of the mobile terminal 6 that is specially permitted is set and registered. In addition, in the permitted IP table 46 on the remote side, the IP addresses of the data server 11 and the camera system 4 on the local side are set and registered, and in addition, the IP address of the mobile terminal 6 that is specially permitted is set and registered. Shows the case.
[0026]
FIG. 7 is a block diagram showing basic components of the data server 11.
The CPU 101 is a central processing unit that controls the overall operation of the data server 11 according to an operating system and various application software in the storage device 102. The storage device 102 has a program storage area and a data storage area, and is constituted by a magnetic, optical, semiconductor memory, or the like, and a drive system thereof. The recording device 102 may have a configuration in which a removable storage medium such as a CD-ROM or a DVD can be mounted in addition to a fixed memory such as a hard disk. The programs and data in the storage device 102 are loaded into a RAM (for example, a static RAM) 103 as necessary, or the data in the RAM 103 is saved in the storage device 102. Note that the RAM 103 has a program execution area and a work area. On the other hand, a communication device 104, an input device 105, and a display device 106, which are input / output peripheral devices, are connected to the CPU 101 via a bus line, and the CPU 101 controls the operation according to an input / output program.
[0027]
Next, an operation concept of the image management system in this embodiment will be described with reference to flowcharts shown in FIGS. Here, the functions described in these flowcharts are stored in the form of readable program codes, and sequentially execute operations according to the program codes. Further, the operation according to the above-described program code transmitted via the transmission medium can be sequentially performed. That is, an operation specific to this embodiment can be executed using a program / data externally supplied via a transmission medium in addition to a recording medium.
[0028]
FIG. 8 and FIG. 9 are flowcharts showing the operation when the data server 11 receives and acquires a monitoring image from the camera system 4 on the user side.
First, the data server 11 refers to the operation control table 14, calculates a "next storage time" from "setting parameters" for each camera, and sets the next storage time in the operation control table 14 (step A1). In this case, the current time is obtained from the system date and time and compared with the “start time” for each camera. If the current time is before the “start time”, the “start time” is set as the “next save time”. If it is immediately after the "time", the time obtained by adding the "image storage interval" to the "start time" is set as the "next storage time".
[0029]
Then, the data server 11 obtains the current time from the system date and time and checks whether or not the time has been updated (step A2). It is checked whether there is at least one “next storage time” corresponding to the update time (step A3). If there is no corresponding “next storage time”, the process returns to step A2, but even one is applicable. Then, the camera address table 18 is searched based on the “camera ID” corresponding to the “next storage time”, the corresponding IP address is read, the camera system 4 is accessed, and an image transmission request is made (step A4). ).
[0030]
Here, it is checked whether or not the monitoring image has been transmitted from the camera system 4 (step A5). If the monitoring image has been transmitted normally, the monitoring image is received and acquired and transferred to the image folder 16 corresponding to the camera. Save (step A6). Then, after resetting the "error counter" in the operation control table 14 (step A7), the "next save time" is updated (step A8). In this case, if it is not immediately after the “start time”, the time obtained by adding the “image storage interval” to the previous “next storage time” is set as the “next storage time”. Thereafter, the flow returns to step A3, and the above operation is repeated.
[0031]
On the other hand, when the monitoring image from the camera system 4 cannot be normally acquired (NO in step A5), “1” is added to the “error counter” in the operation control table 14 corresponding to the camera. Then, after executing the process of updating the value (step A9), it is checked whether or not the value has reached a predetermined number of times (for example, 50 times) (step A10). After moving to A8 and performing the update processing of the “next storage time”, the process returns to step A3. If an image acquisition error has occurred 50 times or more consecutively (YES in step A10), the "notification flag" in the operation control table 14 corresponding to the camera is set (step A11). Then, the process proceeds to step A7, where the "error counter" is reset, and then the "next storage time" is updated (step A8).
[0032]
On the other hand, if the current time has not yet been updated (NO in step A2), the process proceeds to step A12 in FIG. 9 until the time is updated, and the “notification flag” in the operation control table 14 is referred to for notification. Check if any cameras have the flag set. Here, if there is a camera for which the “notification flag” is set, it is a case of a system abnormality due to an operation failure, a line failure, or the like. Is read (step A13), the user registration table 15 is accessed based on the "camera ID", and "notification destination information" is read (step A14). To notify the occurrence of an abnormality in the camera system by mail (step A15). Thereafter, the "notification flag" is reset (step A16), and the "next storage time" is updated by adding, for example, "1 hour" as the time required for repair to the "next storage time" (step A16). A17). Thereafter, the process returns to step A2 in FIG. 8, and the above operation is repeated.
[0033]
FIGS. 10 to 12 are flowcharts showing the operation of the data server 11 when an access request for image browsing is received from the mobile terminal 6 or the like.
First, when an image browsing access request is received, the data server 11 instructs the requesting terminal to transmit a user ID / password and terminal model information (step B1). Upon receiving the user ID / password and the terminal model information transmitted from the original terminal (step B2), the user registration table 15 is accessed based on the received user ID / password to authenticate whether the user is a legitimate request source. Processing is performed (step B3).
[0034]
As a result, if it is not a legitimate request source (NO in step B4), an authentication rejection is transmitted to the requesting terminal (step B10), but if it is a legitimate request source (YES in step B4), the user registration table 15 Then, "model information of the permitted terminal" corresponding to the user ID is read out (step B5), compared with the received terminal model information (step B6), and a check is made for a match / mismatch between the two (step B7). Here, if a mismatch is detected, that is, if the access is not using a legitimate terminal (model) even if it is a legitimate request source, the “notification destination information” corresponding to the user ID is stored in the user registration table 15. Is read (step B8), the occurrence of unauthorized access is mailed to the notification destination (step B9), and an authentication rejection is transmitted to the requesting terminal (step B10).
[0035]
On the other hand, when it is recognized in steps B4 and B7 that the legitimate request source is access using a legitimate terminal (model), the process proceeds to step B11 in FIG. The "camera ID" corresponding to the ID is read, and the image folder 16 corresponding to the "camera ID" is selected and designated (step B12), and the latest image file is read from the image folder 16 (step B13). Then, in order to match this image file with the screen size of the requesting terminal, the corresponding "screen size" is read from the model table 17 based on the model information (step B14), and the image is converted to a size corresponding to the "screen size". After the size is changed (step B15), the changed image is transmitted to the requesting terminal (step B16).
[0036]
After transmitting the latest image in this manner, the data server 11 enters a standby state for accepting another request from the requesting terminal. If there is another request (step B17), the processing corresponding to the request is performed. Execute. That is, when a request for transmission of an image other than the latest image, that is, a past image is received (step B19 in FIG. 12), another requested image file is read from the selected image folder 16 described above. After that (step B20), the image size is changed according to the model of the requesting terminal (step B15), and the changed image is transmitted to the requesting terminal (step B16).
[0037]
When a real-time image transmission request is received (step B21), the corresponding IP address is read from the camera address table 18 based on the "camera ID" to access the camera system 4, and the real-time image transmission request is sent. Perform (Step B22). Here, when the current real-time image is received from the camera system 4 (step B23), after changing the image size according to the model of the request source terminal (step B24), the changed image is transferred to the request source terminal. (Step 25). In this case, the operation of receiving the real-time image and transferring it to the requesting terminal is repeated (steps B23 to B26) until another request is received from the terminal (step B26). Return to B19. If there is no other image transmission request (step B19) or real-time image transmission request (step B21), the process returns to step B17 in FIG. 11 and waits for a request until communication is disconnected from the terminal (steps B17 and B18). .
[0038]
FIG. 13 is a flowchart showing the operation of the camera system 4 which is started each time a new packet is received.
First, when the router 43 of the camera system 4 captures a packet addressed to itself (step C1), the router 43 extracts a source IP address from its header (step C2). Then, the permission IP table 46 is searched based on the extracted source IP address (step C3), and it is checked whether or not the corresponding IP address is registered (step C4). Or refuses to receive it. In this case, in the permitted IP table 46 illustrated in FIG. 6, the IP address of the data server 11 is set and registered in the local router 43, and the IP address of the mobile terminal 6 that is specially permitted is set and registered. In addition, in the router 43 on the remote side, the IP address of the data server 11 and the IP address of the camera system 4 on the local side are set and registered, and in addition, the IP address of the mobile terminal 6 that is specially permitted is set and registered. ing.
[0039]
Therefore, when the local router 43 receives an access from the data server 11 or an access from the specially permitted portable terminal 6, the packet is received. When an access is received from the camera system 4 or another portable terminal 6, the reception of the packet is rejected. Similarly, when the remote router 43 receives an access from the data server 11, the local camera system 4 or an access from the specially permitted mobile terminal 6, the packet is received. If an access is received from another portable terminal 6, reception of the packet is rejected.
[0040]
If the reception of the packet is permitted by the filter function of the router 43 (YES in step C4), the camera system 4 checks the contents of the packet (step C5), and determines whether the packet is a transmission request of the captured image (step C6). It is checked whether the request is a transmission request for a stored image (step C10). Here, for example, when a request for transmitting a captured image is received from the data server 11, that is, as described above, when an image request at a certain timing or a real-time image request corresponding to the contents of the operation control table 14 is received. Operates the Web camera 41 to capture an image (step C7), and checks whether or not the image has been captured normally based on the presence or absence of the captured image, image distortion, image quality, and the like (step C8). Here, if the high-quality photographed image can be captured by the normal photographing, the photographed image is transmitted to the request source (data server 11) (step C9). If an abnormality occurs on the side, the transmission of the image is canceled.
[0041]
When a request for transmitting a stored image is received (step C10), a stored image (past captured image) stored and recorded in the Web camera 41 or the PC 42 is read (step C11), and the stored image is read. The request is transmitted to the request source (step C9). When a request other than the image transmission request is received (NO in step C10), a process corresponding to the request is performed (step C12). For example, when a photographing direction or zoom photographing is instructed, the Web camera 41 is controlled according to the contents of the instruction.
[0042]
Hereinafter, the camera system 4 repeats the above operation each time a new packet is received. Now, when acquiring the image on the remote side from the local side, since the IP address on the local side is registered in the permitted IP table 46 on the remote side, the router 43 on the remote side permits access from the local side. Therefore, the local side can freely acquire the image on the remote side. Conversely, even if an attempt is made to acquire an image on the local side from the remote side, since the IP address of the remote side is not registered in the permitted IP table 46 on the local side, the router 43 on the local side cannot access from the remote side. , The remote side cannot acquire the image on the local side. When the local and remote routers 43 receive an image acquisition request from the specially permitted mobile terminal 6, the local and remote side permitted IP tables 46 store the IP addresses of the mobile terminals 6. Since the address is registered, the portable terminal 6 can freely acquire images on the local side and the remote side. It should be noted that a setting may be made to limit the image request from the mobile terminal 6 to only the local side.
[0043]
When the local-side image is obtained from the data server 11, the local-side router 43 transmits the IP address of the data server 11 to the local-side permitted IP table 46 because the IP address of the data server 11 is registered in the local-side permitted IP table 46. In order to permit access, the data server 11 can freely acquire images on the local side. Similarly, when an image on the remote side is acquired from the data server 11, the IP address of the data server 11 is registered in the permitted IP table 46 on the remote side. , The data server 11 can freely acquire the image on the remote side. Therefore, the data server 11 can freely acquire images from both the local side and the remote side.
[0044]
As described above, in this embodiment, the data server 11 refers to the user registration table 15 when receiving an access request for the monitoring image received and acquired from the user's camera system 4 via the Internet, and As a result of authentication using a password, even if it is recognized that the user is a legitimate request source, if the access does not use a legitimate terminal that has been permitted in advance, access to the monitoring image is rejected, and abnormal access is performed. Is reported to the user side, so that even if the user ID or password is stolen, for example, the danger or abuse that a monitoring image in the house can be seen by a third party can be effectively reduced. In addition, the fact that the user ID and password are correct and the terminal used is incorrect means that the user ID and password are not correct. Because of the extremely high probability of unauthorized access to de has been stolen, in the user by reporting to that effect to the user is able to know immediately the occurrence of an abnormal access, it is possible to quick response.
[0045]
In addition, when the data server 11 receives an access request for the monitoring image received and acquired from the user side, the data server 11 is a legitimate request source, and on condition that the access is performed using a legitimate terminal. When the access to the monitoring image is permitted, the model table 17 is referred to, the image is converted to a size corresponding to the screen size corresponding to the terminal model of the request source, and the image is transmitted. In, you can see the image at your own screen size.
[0046]
On the other hand, the data server 11 accesses the camera system 4 on the basis of the IP address of the camera system 4 and refers to the operation control table 14 to control the camera operation. If the information could not be obtained normally, the occurrence of a system error is reported to the user's notification destination, so the user should immediately know the malfunction of the surveillance camera device, the line failure, etc. And quick response is possible, and the operation of the entire system can be performed smoothly.
[0047]
In addition, a browsing request for image browsing can be made to the data server 11 as necessary, or can be made to the camera system 4 without going through the data server 11. In any case, unauthorized access can be effectively suppressed, and the operation management of the entire system becomes smooth. In this case, the router 43 of the camera system 4 permits access only to the data server 11 or the special portable terminal 6 and denies other access, so that authentication using a user ID or a password is unnecessary. In addition, security control can be reliably performed by restricting access to the camera system itself.
[0048]
In the above-described embodiment, the camera system 4 has a configuration in which the Web camera 41, the PC 42, the router 43, and the modem 44 are connected via the LAN 45. However, the camera system 4 is a stand-alone type including a Web camera, a CPU, a router, and a modem. It may be a camera device.
Further, in the above-described embodiment, the Web camera is an example of a monitoring camera that shoots an indoor room. However, the purpose of shooting is not limited to monitoring, and the Web camera may be any camera. Good. Further, the user-provided information is not limited to a captured image, and may be information such as a sentence, a graphic, and a message.
[0049]
In the above-described embodiment, the “setting parameter” in the operation control table 14 is configured to include the items of “image storage interval”, “start time”, and “end time”. Not limited to this case, for example, an arbitrarily set shooting schedule may be used as the “setting parameter”.
Further, in the above-described embodiment, the “model type information of the permitted terminal” is stored as security information in the user registration table 15, but a unique address of the permitted terminal, for example, an IP address is stored. You may.
[0050]
On the other hand, a recording medium (for example, a CD-ROM, a floppy disk, a RAM card, or the like) in which a program code for causing each of the above-described units to be executed may be provided to the computer.
That is, a storage medium having a computer-readable program code, for each user, user information for specifying each user who is permitted to access the user-provided information, and user-provided information. A function for registering and managing terminal information for specifying a terminal to which access is permitted as security information, and the security information associated with the user when a request for access to user-provided information is received. A function that determines whether or not the access is authorized using a legitimate terminal by executing an authentication process based on the If it is determined that the access is all access, the access to the user-provided information is permitted on the condition that the A function that rejects access to the user-provided information if it is determined that the access is not using a terminal that does not use the terminal. A computer-readable recording medium that records a program for realizing the function of reporting to the notification destination of the computer may be provided.
[0051]
Also, a storage medium having a computer-readable program code, at least a browsing request for a monitoring image received and acquired via a network from a user-side monitoring camera device having a monitoring shooting function and a communication function. A function of providing a monitoring image to the requesting terminal when received, a network address for individually specifying the monitoring camera device, and camera control information for controlling the operation of the monitoring camera device. A function of registering and managing the surveillance camera device, a function of accessing the surveillance camera device based on the network address, and a function of instructing the surveillance camera device to perform shooting in accordance with the camera control information; Function to determine whether or not the monitoring In the case where it is determined that the program cannot be performed, a computer-readable recording medium that records a program for realizing a function of reporting the occurrence of an abnormality to a notification destination corresponding to the user may be provided. Good.
[0052]
【The invention's effect】
According to the first invention (the invention described in claim 1), when a request for access to user-provided information received and acquired from a user via a network is received, a legitimate terminal is transmitted to a legitimate request source. If the access is not used, the access to the user-provided information is rejected, and the occurrence of abnormal access is reported to the user. Therefore, even if the user ID or password is stolen, the third Unauthorized browsing and abuse by a user can be effectively prevented, and the fact that the user ID and password are correct and the terminal used is incorrect means that the possibility of unauthorized access with the user ID or password stolen is extremely high. In addition, by reporting the fact to the user, the user can immediately know the occurrence of the abnormal access, and can take quick action.
According to the second invention (the invention according to claim 4), the monitoring camera device is accessed based on the network address for individually specifying the monitoring camera device on the user side, and the operation of the monitoring camera device is controlled. When controlling a camera device based on the camera control information for the purpose, when the monitoring image from the monitoring camera device cannot be normally acquired, the occurrence of the abnormality is reported to the notification destination of the user. Accordingly, the user can immediately know the operation failure of the monitoring camera device, the line failure, and the like, and can take a quick response, and the operation management of the entire system becomes smooth.
[Brief description of the drawings]
FIG. 1 is a block diagram showing the overall configuration of an image management system.
FIG. 2 is a diagram showing the contents of an operation control table 14 provided in a database 13 on the data server 11 side.
FIG. 3 is a diagram showing the contents of a user registration table 15 provided in a database 13 on the data server 11 side.
FIG. 4 is a view showing an image folder 16 stored and stored in a hard disk 12 of the data server 11;
5A is a diagram showing a model table 17 provided in a database 13 of the data server 11, and FIG. 5B is a diagram showing a camera address table 18. FIG.
6 shows an allowed IP table 46 set in the router 43 of the camera system 4; FIG. 6A shows an allowed IP table 46 on the local side; and FIG. 6B shows an allowed IP table 46 on the remote side. Figure.
FIG. 7 is a block diagram showing basic components of the data server 11;
FIG. 8 is a flowchart showing an operation when the data server 11 receives and acquires a monitoring image from the camera system 4 on the user side.
FIG. 9 is a flowchart following FIG. 8;
FIG. 10 is a flowchart showing the operation of the data server 11 when an access request for image browsing is received from the portable terminal 6 or the like.
FIG. 11 is a flowchart following FIG. 10;
FIG. 12 is a flowchart following FIG. 10 and FIG. 12;
FIG. 13 is a flowchart showing the operation of the camera system 4 which is started each time a new packet is received.
[Explanation of symbols]
1 Management server 2 Internet 3 IPS
4 Camera System 5 Mobile Communication Network 6 Mobile Terminal 11 Data Server 14 Operation Control Table 15 User Registration Table 16 Image Folder 17 Model Table 18 Camera Address Table 41 Web Camera 42 PC
43 router 46 permitted IP table 101 CPU
102 storage device 104 communication device

Claims (6)

An information management system which, when receiving an access request for user-provided information received and obtained from a user via a network, permits access to the user-provided information under certain conditions,
For each user, user information for specifying each user who is permitted to access the user-provided information and terminal information for specifying a terminal that is permitted to access the user-provided information. Security information storage means for registering and managing as security information;
When an access request to the user-provided information is received, by performing an authentication process based on the security information associated with the user, the user is a legitimate request source, and using a legitimate terminal Determining means for determining whether the access is for
If it is determined by this determining means that the legitimate request source is access using a legitimate terminal, access to the user-provided information is permitted on condition that the legitimate request source is the legitimate request source. Access control means for rejecting access to the user-provided information if it is determined that the access is not using a legitimate terminal,
Notification means for reporting the occurrence of abnormal access to a notification destination corresponding to the user, when the access control means denies access to the user-provided information;
An information management system, comprising: The user-provided information is at least a surveillance image photographed by a surveillance camera device on the user side having a photographing function for monitoring and a communication function,
The access control means, when receiving an access request for the monitoring image acquired from the user side, on the condition that the access request is a legitimate request source and that the access is performed using a legitimate terminal, Allow access to the
The information management system according to claim 1, wherein Provide conversion information storage means for storing and managing conversion information for converting images corresponding to various terminal models,
When an access request for a user-provided image received and obtained from the user is received, access to the user-provided image is restricted on condition that the access is from a legitimate request source and a legitimate terminal. When permitting, converting the user provided image based on the conversion information corresponding to the terminal model of the request source and providing the converted image to the request source;
The information management system according to claim 1, wherein At least, when a browsing request for a monitoring image received and acquired via a network is received from a user-side monitoring camera device having a monitoring shooting function and a communication function, the monitoring image is provided to the requesting terminal. Information management system,
Information storage means for registering and managing a network address for individually specifying the monitoring camera device and camera control information for controlling the operation of the monitoring camera device;
A photographing control unit for accessing the surveillance camera device based on the network address, and instructing the surveillance camera device to photograph according to the camera control information;
Determining means for determining whether a monitoring image captured according to the capturing control means has been normally acquired;
A notifying unit that reports the occurrence of an abnormality to a notification destination corresponding to the user when it is determined by the determining unit that the data cannot be normally acquired;
An information management system, comprising: Against the computer
For each user, user information for specifying each user who is permitted to access the user-provided information and terminal information for specifying a terminal that is permitted to access the user-provided information. A function to register and manage as security information,
When an access request to the user-provided information is received, by performing an authentication process based on the security information associated with the user, the user is a legitimate request source, and using a legitimate terminal Function to determine whether the access is
If it is determined that the legitimate request source is access using a legitimate terminal, access to the user-provided information is permitted on condition that the legitimate request source is legitimate. A function for denying access to the user-provided information when it is determined that the access is not using a terminal;
A function of reporting the occurrence of an abnormal access to a notification destination corresponding to the user when the access to the user provided information is denied,
The program to realize. Against the computer
At least, when a browsing request for a monitoring image received and acquired via a network is received from a user-side monitoring camera device having a monitoring shooting function and a communication function, the monitoring image is provided to the requesting terminal. Function and
A function of registering and managing a network address for individually specifying the monitoring camera device and camera control information for controlling the operation of the monitoring camera device;
A function of accessing the surveillance camera device based on the network address, and instructing the surveillance camera device to shoot according to the camera control information;
A function of determining whether or not the captured monitoring image has been normally acquired;
When it is determined that the monitoring image could not be obtained normally, a function of reporting the occurrence of an abnormality to a notification destination corresponding to the user,
The program to realize.

Images