JP2009231855A - Monitoring device and monitoring system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform processes corresponding to events in real time even if many events are intensively detected at the same time, and to flexibly alter process contents corresponding to the event only by changing rules. <P>SOLUTION: A monitoring device includes an event detection unit 24 which detects an event generation, and a rule retrieval unit 25 which retrieves a rule corresponding to the event detected by the event detection unit 24 from rules stored in a rule repository 23, and a rule execution unit 26 executes process contents in the event generation described in the rule retrieved by the rule retrieval unit 25. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a monitoring device and a monitoring system that execute processing corresponding to an event that has occurred.

Many surveillance systems are composed of surveillance components such as surveillance cameras, recorders, and viewers, and a control computer that controls and manages the surveillance components.
For example, Patent Document 1 below discloses a monitoring system in which a control computer collects events detected by a sensing device such as a monitoring camera, and changes the monitoring camera control method in accordance with the event.
Patent Document 2 below discloses a monitoring system in which a monitoring component includes an event detection engine that detects the occurrence of an event, and the monitoring component performs control such as recording start in accordance with an event detected by the event detection engine. It is disclosed.

Japanese Patent Laying-Open No. 2006-259953 (pages 2 to 3, FIG. 19) Japanese Patent Laying-Open No. 2006-129519 (pages 2 to 4, FIG. 10)

Since the conventional monitoring system is configured as described above, when the control computer collects information detected by a sensing device such as a monitoring camera and changes the monitoring camera control method according to the information, a plurality of When the detection of events by other sensing devices is concentrated at the same time, there is a problem that the load on the control computer increases and the response decreases.
In addition, when the monitoring component includes an event detection engine that detects the occurrence of an event, and the monitoring component performs control such as recording start according to the event detected by the event detection engine, the processing content corresponding to the event is the monitoring component. In other words, the processing contents cannot be flexibly changed.

  The present invention has been made to solve the above-described problems, and even if detection of many events is concentrated at the same time, the processing corresponding to the event can be executed in real time, and the rules are changed. It is an object of the present invention to obtain a monitoring device and a monitoring system that can change processing contents corresponding to an event flexibly.

  The monitoring device according to the present invention includes a rule storage unit that stores a rule in which an event to be detected, an event occurrence condition, and a processing content at the time of the event are described, an event detection unit that detects the occurrence of an event, a rule A rule search means for searching for a rule corresponding to the event detected by the event detection means from the rules stored in the storage means, and the rule execution means is described in the rule searched by the rule search means The processing content when an event occurs is executed.

  According to the present invention, the rule storing means for storing the rule describing the event occurrence condition and the processing content at the time of event occurrence, the event detecting means for detecting the occurrence of the event, and the rule storing means are stored. A rule search means for searching for a rule corresponding to the event detected by the event detection means from among the rules, and the processing contents at the time of event occurrence described in the rule searched by the rule search means by the rule execution means Even if detection of many events is concentrated at the same time, processing corresponding to the event can be executed in real time, and processing corresponding to the event can be flexibly performed simply by changing the rule. There is an effect that the contents can be changed.

Embodiment 1 FIG.
FIG. 1 is a block diagram showing a monitoring system according to Embodiment 1 of the present invention. In FIG. 1, a rule management device 1 is a rule in which events to be detected, event occurrence conditions, and processing contents at the time of event occurrence are described. And the process of distributing the rule to the monitoring device 3 via the network 2 is performed.
The monitoring device 3 is a device such as a monitoring camera or a recorder. The monitoring device 3 stores rules distributed from the rule management device 1, and when the occurrence of an event is detected, the processing content described in the rule corresponding to the event is executed. .

The rule editor 11 of the rule management device 1 is implemented with software for editing rules (for example, grammar check) and the like while editing rules using XML (extensible Markup Language), which is a general-purpose description language, for example. Then, a process of outputting a rule file including the rule after completion of editing to the converter 12 is performed.
The converter 12 has software or the like for converting the rule file output from the rule editor 11 into a compact file, and performs processing for distributing the compact file to the monitoring device 3 via the network 2.

The sensor 21 of the monitoring device 3 is a measuring instrument that detects, for example, temperature and humidity. In the example of FIG. 1, only one sensor 21 is mounted, but a plurality of sensors 21 may be mounted.
The monitoring component rule engine 22 is a main part of the monitoring device 3, detects the occurrence of an event, and executes the processing contents described in the rule corresponding to the event.
The rule repository 23 of the monitoring component rule engine 22 is a memory for storing at least one rule distributed from the rule management device 1. The rule repository 23 constitutes a rule storage unit.

The event detection unit 24 monitors the detection result of the sensor 21 and performs processing for detecting the occurrence of the event. The event detection unit 24 constitutes event detection means.
The rule search unit 25 performs a process of searching for a rule corresponding to the event detected by the event detection unit 24 from the rules stored in the rule repository 23. The rule search unit 25 constitutes a rule search unit.

The rule execution unit 26 executes the process of controlling the control target 27 by executing the processing contents at the time of event occurrence described in the rule searched by the rule search unit 25. Note that the rule execution unit 26 constitutes a rule execution unit.
The control target 27 is a device (for example, an air conditioner, a fire alarm, an alarm device, etc.) controlled by the rule execution unit 26. In the example of FIG. 1, only one control object 27 is mounted, but a plurality of control objects 27 may be mounted.

Next, the operation will be described.
First, the rule management device 1 edits a rule in which an event to be detected, an event occurrence condition, and a processing content at the time of event occurrence are described.
That is, the rule editor 11 of the rule management device 1 edits a rule using, for example, XML that is a general-purpose description language.
Further, the rule editor 11 analyzes the edited rule (for example, grammar check), and outputs a rule file including the edited rule to the converter 12 if there is no problem in the grammar of the rule.
In the example of FIG. 1, a plurality of monitoring devices 1 are connected to the network 2, and different rules may be edited for each monitoring device 1, or rules common to all the monitoring devices 1 may be edited. You may make it edit.
Also, a plurality of rules may be edited for each monitoring device 1.

Here, FIG. 2 is an explanatory diagram showing a format of a rule edited by the rule editor 11 of the rule management device 1.
In FIG. 2, ruleSet 101 is a set of rules included in the rule file, and rule102 is a rule included in ruleSet 101.
The rule 102 includes one expression 103 indicating a rule application condition and one or more actions indicating an action (processing content when an event occurs) executed when the rule is applied.

The expression 103 corresponds to one of a condition 105 that is a single conditional expression, a not 106 that represents negation, an AND 107 that represents a logical product, an or 108 that represents a logical sum, and a ten 109 that represents a temporal relationship between the conditional expressions.
The expression 103 is used recursively in the not 106, and 107, or 108, and then 109.
There 109 has a time 110 as an accompanying attribute, and the time 110 represents details of time relation (for example, within 30 seconds or after 1 minute).

The condition 105 includes one of each of an operator 111, an event 112, and a value 113. If the value indicated by the event 112 indicating the target event and the value 113 has a relationship indicated by the operator 111, the event generation condition is satisfied.
The action 104 includes one device 114 and one or more parameters 115, and predetermined control is performed by passing the parameters 115 to the control object 27 indicated by the devices 114.

FIG. 3 is an explanatory diagram showing an example of rules described in XML.
In FIG. 3, “EQ” of the operator indicates “equal”, “LE” indicates “less or equal”, “GE” indicates “greater or equal”, and “LT” indicates “less than”.
Although FIG. 3 shows rules written in XML, it may be described using a general-purpose description language other than XML. Moreover, you may describe using the rule description language for exclusive use designed for rule engines.

When the converter 12 of the rule management device 1 receives a rule file including a rule from the rule editor 11, the converter 12 converts the rule file into a compact file.
Compacting that converts a rule file into a compact file can be realized by replacing the constituent elements of a rule expressed by a character string with symbols or by expressing the relationship between the constituent elements with pointers.
For example, it can be realized by expressing each element and attribute of XML (for example, <rule>, “EQ”) by a 1-byte symbol, and expressing a hierarchical structure between the elements and attributes by a pointer by an offset in the file. it can.

When the converter 12 converts the rule file into a compact file, the converter 12 distributes the compact file to the monitoring device 3 via the network 2.
At this time, when the same rule is applied to the same type of monitoring device 3 (for example, a large number of monitoring cameras in one monitoring system), the same compact file is distributed to a plurality of monitoring devices 3.
Thereby, the compact file distributed from the rule management device 1 is stored in the rule repository 23 of the monitoring device 3 to be distributed.

The sensor 21 of the monitoring device 3 detects, for example, temperature and humidity.
Here, an example in which temperature, humidity, and the like are detected is shown, but this is only an example. For example, a moving object such as a suspicious person may be detected.
The event detection unit 24 of the monitoring device 3 monitors the detection result of the sensor 21 and detects the occurrence of the event.
For example, when the event detection condition is that the temperature is 30 degrees or higher, the occurrence of the event is detected if the detection result of the sensor 21 indicates that the temperature is 30 degrees or higher.

The rule search unit 25 of the monitoring device 3 corresponds to the event detected by the event detection unit 24 from one or more rules stored in the rule repository 23 when the event detection unit 24 detects the occurrence of the event. Search for rules.
For example, if the event detected by the event detection unit 24 is an event indicating that the “temperature is 30 degrees or higher”, the event detection target is selected from one or more rules stored in the rule repository 23. A rule relating to an event having “temperature” and an event occurrence condition “temperature is 30 degrees or more” is searched.

When the rule search unit 25 searches for a rule corresponding to an event, the rule execution unit 26 of the monitoring device 3 executes the action (processing content when the event occurs) described in the rule, thereby controlling the control target 27. Control.
For example, if the control object 27 is an air conditioner, when the “temperature is 30 degrees or higher”, the air conditioner is automatically activated to control the temperature of the room to be lowered.

  As is apparent from the above, according to the first embodiment, the rule repository 23 that stores the rules describing the event occurrence conditions and the processing contents at the time of the event occurrence, and the event detection unit that detects the occurrence of the event 24 and a rule search unit 25 for searching for a rule corresponding to the event detected by the event detection unit 24 from the rules stored in the rule repository 23. Since it is configured to execute the processing contents at the time of event occurrence described in the searched rule, even if detection of many events is concentrated at the same time, the processing corresponding to the event can be executed in real time (Since each monitoring device 3 performs its own process from event detection to control without an external control computer. When a large number of events are detected at the same time, there is no situation where the response is reduced due to an increase in the load on the control computer). There is an effect that the processing content corresponding to the event can be flexibly changed simply by replacing the stored rules.

Further, according to the first embodiment, the converter 12 of the rule management device 1 converts the rule file including the rules edited by the rule editor 11 into a compact file, and distributes the compact file to the monitoring device 3. Thus, the processing load and the memory amount of the monitoring device 3 can be reduced.
However, if the monitoring device 3 has sufficient processing capability and memory capacity, the converter 12 may store the rule file in the rule repository 23 of the monitoring device 3 without converting the rule file into a compact file. Good.

  Further, according to the first embodiment, since the rule editor 11 of the rule management device 1 is configured to edit rules using a general-purpose description language, the rules can be created without designing a dedicated rule description language. Can be edited, and there is an effect that costs such as design costs can be reduced.

Embodiment 2. FIG.
4 is a block diagram showing a monitoring system according to Embodiment 2 of the present invention. In the figure, the same reference numerals as those in FIG.
The rule repository storage server 4 is an external server that stores a rule repository 41, and the rule repository 41 is a memory that stores at least one rule distributed from the rule management device 1.
The rule collection unit 28 of the monitoring component rule engine 22 accesses the rule repository storage server 4 and performs a process of collecting a rule corresponding to the event detected by the event detection unit 24. The rule collection unit 28 constitutes a rule collection unit.

Next, the operation will be described.
First, the rule editor 11 of the rule management device 1 edits a rule using XML, which is a general-purpose description language, for example, as in the first embodiment.
Further, the edited rule is analyzed (for example, grammar check), and if there is no problem in the grammar of the rule, a rule file including the edited rule is output to the converter 12.

When the converter 12 of the rule management device 1 receives a rule file including a rule from the rule editor 11, the converter 12 converts the rule file into a compact file as in the first embodiment.
When converting the rule file into a compact file, the converter 12 distributes the compact file to the rule repository storage server 4 via the network 2.
As a result, the compact file is stored in the rule repository 41 of the rule repository storage server 4.

The sensor 21 of the monitoring device 3 detects temperature, humidity, and the like, for example, as in the first embodiment.
The event detection unit 24 of the monitoring device 3 monitors the detection result of the sensor 21 and detects the occurrence of the event, as in the first embodiment.

When the event detection unit 24 detects the occurrence of an event, the rule collection unit 28 of the monitoring device 3 accesses the rule repository storage server 4 and collects rules corresponding to the event detected by the event detection unit 24.
For example, if the event detected by the event detection unit 24 is an event indicating that the “temperature is 30 degrees or higher”, the event is detected from one or more rules stored in the rule repository 41 of the rule repository storage server 4. The event detection target is “temperature”, and the rule relating to the event whose event occurrence condition is “temperature is 30 degrees or higher” is retrieved and collected.

When the rule collection unit 28 collects the rule corresponding to the event, the rule execution unit 26 of the monitoring device 3 executes the action (processing content when the event occurs) described in the rule, thereby controlling the control target 27. Control.
For example, if the control object 27 is an air conditioner, when the “temperature is 30 degrees or higher”, the air conditioner is automatically activated to control the temperature of the room to be lowered.

  As is clear from the above, according to the second embodiment, the rule collection unit 28 of the monitoring device 3 accesses the rule repository storage server 4 and collects rules corresponding to the events detected by the event detection unit 24. In addition to the same effects as those of the first embodiment, it is not necessary to install the rule repository 23 in the monitoring device 3, and as a result, the amount of resources required for the monitoring device 3 is reduced. There is an effect that can be. In addition, since it is not necessary to store the same compact file for each monitoring device 3 to which the same rule is applied, waste is eliminated and maintainability is improved.

  In the second embodiment, the rule repository storage server 4 is provided separately from the rule management device 1. However, the rule management device 1 is integrated with the rule repository storage server 4. The rule repository 41 may be built in.

It is a block diagram which shows the monitoring system by Embodiment 1 of this invention. It is explanatory drawing which shows the format of the rule edited by the rule editor 11 of the rule management apparatus 1. FIG. It is explanatory drawing which shows an example of the rule described by XML. It is a block diagram which shows the monitoring system by Embodiment 2 of this invention.

Explanation of symbols

  1 rule management device, 2 network, 3 monitoring device, 4 rule repository storage server (external server), 11 rule editor, 12 converter, 21 sensor, 22 rule engine for monitoring components, 23 rule repository (rule storage means), 24 events Detection unit (event detection unit), 25 rule search unit (rule search unit), 26 rule execution unit (rule execution unit), 27 control target, 28 rule collection unit (rule collection unit), 41 rule repository, 101 ruleSet, 102 rule, 103 expression, 104 action, 105 condition, 106 not, 107 and, 108 or, 109 then, 110 time, 111 operator, 112 event, 13 value, 114 device, 115 parameter.

Claims (8)

  Stored in a rule storage means for storing an event to be detected, an event occurrence condition, and a rule describing processing contents at the time of the event occurrence, an event detection means for detecting the occurrence of an event, and the rule storage means A rule search means for searching for a rule corresponding to the event detected by the event detection means from among the rules, and a rule for executing the processing contents when an event occurs described in the rule searched by the rule search means And a monitoring device.   Event detection means for detecting the occurrence of an event, and an external server storing a rule describing the event to be detected, the event occurrence condition, and the processing content at the time of the event occurrence, and the event detection means A monitoring apparatus comprising: rule collection means for collecting rules corresponding to detected events; and rule execution means for executing processing contents when an event occurs described in the rules collected by the rule collection means.   A rule management device that edits a rule that describes an event to be detected, an event occurrence condition, and processing contents at the time of the event, and distributes the rule, and a rule that stores the rule distributed from the rule management device A storage means; an event detection means for detecting the occurrence of an event; and a rule search means for searching for a rule corresponding to the event detected by the event detection means from the rules stored in the rule storage means; A monitoring system comprising rule execution means for executing processing contents when an event occurs described in the rule searched by the rule search means.   Edit a rule that describes the event to be detected, the event occurrence condition, and the processing content at the time of the event, and distribute the rule, and the external that stores the rule distributed from the rule management device A server, event detection means for detecting the occurrence of an event, rule collection means for accessing the external server and collecting a rule corresponding to the event detected by the event detection means, and collected by the rule collection means. And a rule execution means for executing processing contents when an event described in the rule is generated.   The monitoring system according to claim 3 or 4, wherein the rule management device converts a rule file including the edited rule into a compact file and distributes the compact file.   The rule management device converts a rule file into a compact file by expressing a rule component by a 1-byte symbol and expressing a hierarchical structure between the components by a pointer by an offset in the file. Item 6. The monitoring system according to Item 5.   The monitoring system according to any one of claims 3 to 6, wherein the rule management device edits the rule using a general-purpose description language.   8. The monitoring system according to claim 7, wherein the rule management device uses XML as a general-purpose description language.

Images