JP2008242635A - Security system and terminal connection state monitoring method for security system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a security system and the terminal connection state monitoring method of the security system for improving the reliability of communication by facilitating access to each of a plurality of front servers as necessary without directly connecting those front servers and performing complicate control, and achieving connection by one front server even when communication by the other front server is disrupted. <P>SOLUTION: A center side is provided with the plurality of front servers for controlling communication with a security terminal through a communication line, and the front server is provided with an IP address for center side equipment and an IP address for the security terminal, and the respective front servers are connected through different system communication lines to the security terminal. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a security system in which a security terminal provided on the security target facility side and a center server provided on the center side are connected by a communication line, and a terminal connection state monitoring method of the security system.

  2. Description of the Related Art Conventionally, a security system has been used in which a sensor for detecting an abnormality is provided on the side of a security target facility such as a general home, store, or factory, and the abnormality information is reported to the center of a security center via a security terminal. The security terminal and the center server provided on the center side are connected by a communication line to exchange information. This exchange of information includes, for example, the survival monitoring of each of the security terminal and the center server, mutual control, notification of abnormality information, and the like.

The communication line is sometimes made redundant as described in, for example, Patent Document 1 and Patent Document 2, because bandwidth reduction or disconnection due to failure or maintenance due to ISP or communication carrier (line carrier) occurs irregularly or suddenly. . In this case, in order to monitor each other's system status, switch between systems, and synchronize data, communication between the main and the sub is performed via a serial line or the like.
JP 2006-268709 A JP 2006-330782 A

  However, it is necessary to mount a function for interconnecting and monitoring the redundant systems, which complicates the system and the program, and requires maintenance.

  The present invention has been made in view of such circumstances, and can easily and arbitrarily access each front server without complicated control by directly connecting a plurality of front servers. It is an object of the present invention to provide a security system and a terminal connection state monitoring method for a security system that can be connected on the other side even if communication by the front server is interrupted and the communication reliability can be improved.

  The security system according to claim 1 is provided with a plurality of front servers for controlling communication with the security terminal via a communication line on the center side, and the front server includes an IP address for the center side device and an IP address for the security terminal. Each front server is connected to a security terminal through a communication line of a different system.

  The security system according to claim 2, wherein the front server monitors the exchange of information with the center server and deletes the IP address for the security terminal when determining that the communication with the center server has failed. Features.

  The security system according to claim 3, wherein the front server includes a connection processing thread and a terminal connection management table, and when the security terminal is connected to the front server, the connection thread is activated in the connection processing thread for each security terminal. Create a list of security terminals connected to the connected thread, record the address and registration time information for each connected terminal in the terminal connection management table, turn on the connection flag in the connection thread, and the security terminal When disconnected from the server, the connection flag is turned OFF, and when the security terminal is not connected for a predetermined time, the list of connection threads corresponding to the disconnected security terminal and the information of the terminal connection management table are deleted.

  In the security system according to claim 4, the center server acquires connection state information for each security terminal from a logical sum of connection status information such as a connection flag for each security terminal held by each of the plurality of front servers. Features.

  The terminal connection state monitoring method for a security system according to claim 5 is provided such that when a security terminal is connected to a front server that is provided on the center side and controls communication with the security terminal via a communication line, each security terminal is A connection thread is started in the server connection processing thread, a list of guard terminals connected to the started connection thread is created, and information on the address and registration time of each connected terminal is stored in the terminal connection management table of the front server. Record, turn on the connection flag in the connection thread, and when the security terminal is disconnected from the front server, turn off the connection flag, and if the security terminal is not connected for a predetermined time, the connection thread corresponding to the disconnected security terminal The information of the list and the terminal connection management table is deleted.

  According to the invention of claim 1, since the plurality of front servers have the IP address for the center side device and the IP address for the security terminal, the front servers are directly connected to perform complex control. Without being able to access each front server easily and arbitrarily. In addition, since each front server is connected to the security terminal via a communication line of a different system, even if communication by one front server is interrupted, connection can be made on the other, improving communication reliability. be able to.

  According to the invention of claim 2, when the front server monitors the exchange of information with the center server and determines that the communication with the center server has failed, the front server deletes the IP address for the security terminal. The connection from the security terminal of the front server in which the failure has occurred can be easily cut off, and the security terminal can quickly shift to another front server.

  According to the invention of claim 3 and claim 5, when the security terminal is connected to the front server, the terminal connection management table records the information of the address and registration time for each connected terminal, When the connection flag is turned on and the security terminal is disconnected from the front server, the connection flag is turned off. When the security terminal is not connected for a predetermined time, the list of connection threads corresponding to the disconnected security terminal and the terminal connection management table Since the information is deleted, the connection state of the security terminal can be confirmed from the front server alone or from the center server.

  According to the invention of claim 4, the center server acquires connection state information for each guard terminal from the logical sum of connection state information such as connection flags for each guard terminal held by each of the plurality of front servers. Even in a configuration in which many front servers are connected, it is possible to accurately grasp the connection state for each security terminal.

  Hereinafter, embodiments of the present invention will be specifically described with reference to the drawings. The security system in the embodiment of the present invention is a system in which a security terminal provided on the security target facility side and a center server provided on the center side are connected by a communication line.

  FIG. 1 is a configuration diagram showing an example of a security system according to the present invention. FIG. 2 is an explanatory diagram showing a timing chart of the operation of the security system. 3 and 4 are explanatory diagrams showing operations related to the connection processing thread of the security system. FIG. 5 is an explanatory diagram showing details of the operation of the security system. As shown in FIG. 1, the security system includes, for example, a center server 15 on the security center side, a security terminal A20, and a security terminal B21 via a communication line 5 made up of the Internet network which is one of the telecommunication lines. Is connected.

  The security terminal A20 and the security terminal B21 are provided on a security target facility side such as a general home, a store, or a factory, and are connected to a sensor that detects an abnormality of the security target facility. The center server 15 is for controlling the security terminal A20 and the security terminal B21, and for displaying and processing a report of abnormality from the security terminal A20 and the security terminal B21.

  The center server 15 is connected to the communication line 5 via a hub 17, front servers 10 and 11, routers 13 and 14, ISP (Internet Services Provider) 6 and 7, and the like. The front servers 10 and 11 are for the center server 15 to control communication with the security terminal A20 and the security terminal B21 via the communication line 5. In FIG. 1, two servers, the front server (main) 10 and the front server (sub) 11, are illustrated, but the number is not limited to two and may be plural. In FIG. 1, since the client 18 is connected to the communication line 5 as a terminal on the center side, the center server 15 is connected to the front servers 10 and 11 via the hub 17. The front servers 10 and 11 are network devices that relay data flowing on the network on the security target facility side to the communication line 5 and are connected to commonly used routers 13 and 14, respectively. It is not essential for the invention. The routers 13 and 14 are connected to the communication line 5 via ISPs 6 and 7. In practice, the routers 13 and 14 and the ISPs 6 and 7 are generally connected by a telecommunication line such as a telephone line.

  Further, the front servers 10 and 11 have two NICs (Network Interface Cards: LAN cards), an IP address for the center server 15 which is a center side device, and an IP address for the security terminal A20 and the security terminal B21. Respectively. Further, as described above, each front server 10, 11 is connected to the communication line 5 via the ISPs 6, 7 of different systems, and as a result, each front server 10, 11 becomes a separate communication line 5. Is connected to the security terminal A20 and the security terminal B21. Each front server (main) 10 and front server (sub) 11 have the same configuration and the same function, and merely distinguish between main and sub for convenience of explanation.

  Next, operation | movement of the security system of a present Example is demonstrated using FIGS. In the configuration diagrams illustrated in FIGS. 2 to 5, some components are omitted for easy understanding. First, communication with the security terminal A20 (a plurality of security terminals can be connected to the security system, but will be described as a security terminal A20 as a representative) is performed by the front servers 10 and 11, and the center server 15 is a front server. 10 and 11, the operation instruction of the security terminal A20 and the communication result with the security terminal A20 and the connection state of the security terminal A20 are acquired from the front servers 10 and 11. Both the front server (main) 10 and the front server (sub) 11 are always operating independently of each other.

  The security terminal A20 can set the connection destination at the first, second, and two locations, and can connect by specifying either the front server (main) 10 or the front server (sub) 11. Either main or sub may be set as the first connection destination or the second connection destination, but usually the first connection destination (front server (main) 10) is connected to execute various processes. In addition, it always prepares for connection to the second connection destination (front server (sub) 11), and has a function of connecting to the second connection destination immediately when the connection with the first connection destination is disconnected. The security terminal A20 is connected to the front server (main) 10 of the first connection destination due to a stop of the front server function due to a failure of the communication line 5 or a connection device, or a connection failure between the center server 15 and the front server (main) 10. Is disconnected, the front server (sub) 11 as the second connection destination is connected to perform various processes.

  Next, a specific operation when the front server function is stopped due to a connection failure between the center server 15 and the front servers 10 and 11 will be described. First, normally, the center server 15 periodically acquires a communication result with the security terminal A20 with respect to the front server (main) 10 regardless of the presence or absence of the result. The communication result is, for example, report information from the security terminal A20 or security terminal control result information from the center server 15.

  The front server (main) 10 monitors the communication result acquisition process from the center server 15, and if the acquisition process cannot be confirmed, a failure occurs in communication with the center server 15 and normal processing cannot be performed. Judgment is made, and the setting (IP address) of the NIC on the side to which the security terminal A20 is connected (B side in the configuration diagram of FIG. 2) is deleted. As a result, the front server (main) 10 cannot be recognized from the security terminal A20, and the connection between the front server (main) 10 and the security terminal A20 is disconnected. On the security terminal A20 side, the connection with the front server (sub) 11 as the second connection destination is made in response to the disconnection with the front server (main) 10 as the first connection destination. . Communication between the center server 15 and the security terminal A20 is maintained through the front server (sub) 11.

  The center server 15 periodically tries to communicate with the front server (main) 10 that is not connected. If communication is restored, the front server (main) 10 resets the deleted NIC. The security terminal A20 also periodically monitors the NIC setting of the conventional front server (main) 10, and when the front server (main) 10 is restored, the front terminal (sub) Return to the connection to the server (main) 10. Instead of returning, the front server 11 may be regarded as the main, the front server 10 may be regarded as the sub, and the above-described operation may be performed.

  As described above, according to the security system of the present embodiment, since the plurality of front servers 10 and 11 have the IP address for the center side device and the IP address for the security terminal A20, The front servers 10 and 11 can be easily and arbitrarily accessed without complicated control by directly connecting the 11s. Moreover, since each front server 10 and 11 is connected with security terminal A20 via the communication line of a different system | strain, even if communication by one front server 10 and 11 stops, connection with the other is possible, Communication reliability can be improved.

  In addition, when the front servers 10 and 11 monitor the exchange of information with the center server 15 and determine that a failure has occurred in communication with the center server 15, the IP address for the security terminal A20 is deleted. The connection from the security terminal A20 of the front server 10 in which the failure has occurred can be easily disconnected, and the security terminal A20 can quickly shift to another front server 11.

  Next, the operation for monitoring the connection state of the security terminal A20 will be described with reference to FIGS. First, when the security terminal A20 is connected to the front server 10, the security terminal A20 periodically transmits data to the front server 10. The front server 10 returns a response to the data received from the security terminal A20 to the security terminal A20. The front server 10 monitors data from the security terminal A20 that is periodically received, and the front server 10 and the security terminal A20 are connected while receiving data from the security terminal A20. to decide. Further, when data that should be periodically transmitted from the security terminal A20 is not confirmed for a certain period of time, the front server 10 determines that communication with the security terminal A20 has been disconnected.

  In the front server 10, a process management thread is always activated. When the security terminal A20 is connected, a TCP connection thread is activated in the process management thread for each security terminal. Then, a list of activated TCP connection threads is created, and the address and registration time of each guard terminal are registered in the terminal connection management table. At the same time, the connection flag in the TCP connection thread is set to “ON”. When the front server 10 detects the disconnection of the security terminal A20 or when the signal that should be periodically received from the security terminal A20 cannot be confirmed for a certain period of time, the connection flag is set to “OFF”.

  A timer thread is activated in the processing thread, and after a certain period of time, the TCP connection thread and TCP connection thread list with the connection flag “OFF” are deleted, and the information of the corresponding guard terminal is deleted from the terminal connection management table. The front server 10 can grasp the security terminals connected by the terminal connection management table and can confirm the connection state on the front server 10. Further, the center server 15 periodically obtains connection state information from the front server 10 and holds the connection state information in the center server 15, so that the connection state of the security terminal A 20 can be viewed on the client 18. .

  Here, since the security terminal A20 and the security terminal B21 are connected to one of the plurality of front servers 10 and 11, in order to confirm the connection state of the security terminal A20 and the security terminal B21 on the center server 15, respectively. By obtaining the logical sum of the state information acquired from the front servers 10 and 11, it is possible to grasp the connection state.

  Hereinafter, referring to FIG. 5, the connection state of the front servers 10 and 11 and the center server 15 is as an example in the case where the first connection destination is the front server (main) 10 and the second connection destination is the front server (sub) 11. Show how it is recognized. The operation is the same even if the first connection destination and the second connection destination are reversed.

  First, when the security terminal A20 is connected to the front server (main) 10, it transmits a signal to the front server (main) 10 at regular intervals (M seconds). Accordingly, the front server (main) 10 generates a thread and creates a thread list. And the front server (main) 10 monitors the signal from security terminal A20. When a failure occurs between the front server (main) 10 and disconnects from the front server (main) 10, the security terminal A20 immediately connects to the front server (sub) 11 and the front server (sub) 11 at regular intervals (M seconds). Send a signal to Here, the front server (sub) 11 generates a thread and creates a thread list.

  When the front server (main) 10 cannot confirm the signal from the security terminal A20 for a predetermined time (M seconds × c times), the front server (main) 10 determines that the security server A20 has been disconnected, and deletes the thread and the thread list. Here, c indicates how many regular signals from the security terminal are waited. The center server 15 periodically obtains state information from the main and sub front servers 10 and 11 (N seconds), and performs a logical sum of the state information obtained from both front servers 10 and 11 on the center server 15. Generate state information for.

  Thus, when the security terminal A20 is connected to the front server 10, the address and registration time information of each connected terminal is recorded in the terminal connection management table, the connection flag in the connection thread is turned ON, and security is established. When the terminal A20 is disconnected from the front server 10, the connection flag is turned off. When the security terminal A20 is not connected for a predetermined time, the list of connection threads corresponding to the security terminal A20 that has been disconnected and the information of the terminal connection management table are deleted. Thus, the connection state of the security terminal A20 can be confirmed either from the front server 10 alone or from the center server 15.

  As described above, according to the present invention, each front server can be easily and arbitrarily accessed without complicated control by directly connecting a plurality of front servers, and communication by one front server is possible. Therefore, it is possible to provide a security system and a terminal connection state monitoring method for the security system that can be connected on the other side even if the communication is interrupted and the reliability of communication can be improved.

It is a lineblock diagram showing an example of a security system concerning the present invention. It is explanatory drawing which shows the timing chart of operation | movement of the security system. It is explanatory drawing which shows the operation | movement which concerns on the connection process thread | sled of the security system. It is explanatory drawing which shows the operation | movement which concerns on the connection process thread | sled of the security system. It is explanatory drawing which shows the detail of operation | movement of the security system.

Explanation of symbols

5 ... Communication line 6 ... ISP
7. ISP
DESCRIPTION OF SYMBOLS 10 ... Front server 11 ... Front server 13 ... Router 14 ... Router 15 ... Center server 17 ... Hub 18 ... Client 20 ... Security terminal A
21 ... Security terminal B

Claims (5)

In a security system in which a security terminal provided on the security target facility side and a center server provided on the center side are connected by a communication line,
The center side includes a plurality of front servers that control communication with the security terminal via the communication line,
The front server is
An IP address for the center side device and an IP address for the security terminal;
The security system, wherein each front server is connected to the security terminal via the communication lines of different systems.   The IP address for the security terminal is deleted when the front server monitors information exchange with the center server and determines that communication with the center server has failed. The security system according to 1. The front server includes a connection processing thread and a terminal connection management table;
When the security terminal is connected to the front server,
Activating a connection thread in the connection processing thread for each security terminal, creating a list of security terminals connected to the activated connection thread,
In the terminal connection management table, record information on the address and registration time of each connected terminal,
Turn on the connection flag in the connection thread,
When the security terminal is disconnected from the front server,
Turn off the connection flag,
The security according to claim 1 or 2, wherein when the security terminal is not connected for a predetermined time, the list of the connection thread corresponding to the disconnected security terminal and the information of the terminal connection management table are deleted. system.   The center server acquires connection state information for each guard terminal from a logical sum of connection state information such as the connection flag for each guard terminal held by each of the plurality of front servers. The security system according to any one of claims 1 to 3. In the terminal connection state monitoring method of the security system in which the security terminal provided on the security target facility side and the center server provided on the center side are connected by a communication line,
When the security terminal is connected to a front server that is provided on the center side and controls communication with the security terminal via the communication line,
Activating a connection thread in the connection processing thread of the front server for each security terminal, creating a list of security terminals connected to the activated connection thread,
In the terminal connection management table of the front server, record the address and registration time information for each connected terminal,
Turn on the connection flag in the connection thread,
When the security terminal is disconnected from the front server,
Turn off the connection flag,
A terminal connection state monitoring method of a security system, wherein when the security terminal is not connected for a predetermined time, the list of connection threads corresponding to the disconnected security terminal and information of the terminal connection management table are deleted.

Images