JP2017076325A - Transmitter management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a transmitter management system that accurately determines the occurrence of impersonation of a transmitter and can provide a stable monitoring service in the provision of a monitoring service for monitoring the moving state and location of an object to be monitored by using transmitters capable of rewriting identification information.SOLUTION: A beacon management system 10 confirms whether beacon information obtained from a receiver 12 accords with service information stored in a service information database 22 or not, and determines that there is an impersonation beacon 11B into which the same ID information as a beacon 11A is written if it determines that the beacon information does not accord with the service information.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a transmitter management system that manages transmitters.

  Conventionally, as disclosed in Patent Document 1, for example, a system for watching an elderly person or a child has been developed. As an example of this type of system, in recent years, a system for monitoring the movement status and location of a person or an object using a small transmitter such as a beacon has been considered. In this system, a transmitter is attached to a monitoring target person or a monitoring target object. Then, by confirming the communication status between the transmitter attached to the monitoring subject or the monitoring target and the receivers present in various places, the movement status or location of the monitoring target or the monitoring target is monitored.

JP 2006-85390 A

  By the way, identification information written in a small transmitter such as a beacon can be easily rewritten. Therefore, for example, even a third party other than the related parties such as a system user, an administrator, and a monitoring target person can easily create a transmitter in which the same identification information is written. That is, spoofing can be easily performed by a third party. When such impersonation is performed, it becomes difficult to accurately confirm the movement status and location of the monitoring target person and the monitoring target object, and the monitoring service itself cannot be realized.

  Therefore, the present invention accurately determines that spoofing of a transmitter has occurred when providing a monitoring service for monitoring the movement status and location of a monitoring target using a transmitter whose identification information can be rewritten. Provided is a transmitter management system that can realize a stable monitoring service.

  A transmitter management system according to the present invention includes a transmitter attached to a monitoring target, a receiver that receives identification information of the transmitter from the transmitter, and a management server that manages the transmitter. The identification information of the transmitter can be rewritten. The receiver includes transmission means. The transmission means transmits, as transmitter information, information obtained by adding at least one of time information indicating the time when the identification information is received and position information indicating the position of the receiver to the received transmitter identification information. .

  The management server includes storage means, confirmation means, and determination means. The storage means stores, as management information for managing the transmitter, information in which the identification information of the transmitter is associated with movement pattern information that specifies a movement pattern to be monitored. The confirmation means confirms whether or not the transmitter information obtained from the receiver matches the management information stored in the storage means. The determination means determines that there is an impersonation transmitter in which the same identification information as the transmitter is written when it is confirmed by the confirmation means that the transmitter information does not match the management information.

  According to this configuration, whether or not the transmitter is impersonated based on a comprehensive comparison result between the transmitter information including not only the identification information of the transmitter that can be easily rewritten but also information other than the identification information and the management information. Is determined. Therefore, it is possible to accurately determine that the transmitter has been spoofed and to provide a stable monitoring service.

The block diagram which shows schematically the structural example of the beacon management system which concerns on this embodiment The figure which shows an example of beacon information Diagram showing an example of service information The figure which shows the example of a relationship between an impersonation level and a notification mode The flowchart which shows an example of the impersonation determination process by a beacon management system

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings. The beacon management system 10 illustrated in FIG. 1 provides a monitoring service for monitoring the movement status and location of a monitoring target by confirming the communication status between a transmitter attached to the monitoring target and a receiver present in each place. It is realized. The beacon management system 10 is an example of a transmitter management system, and includes a beacon 11A, a receiver 12, and a cloud server 13.

  The beacon 11A is an example of a transmitter. In this case, the beacon 11A includes a BLE beacon (BLE: Bluetooth Low Energy) (registered trademark). The beacon 11A is attached to a person or an object to be monitored by the monitoring service. That is, when the monitoring target is a person such as an elderly person or a child, the beacon 11A is carried by the monitoring target person. Further, when the monitoring target is an object such as a luggage or a device, the beacon 11A is attached to the monitoring target. ID information for identifying the beacon 11A is written in the beacon 11A. ID information is an example of identification information. The beacon 11A transmits the ID information written in itself. The ID information written in the beacon 11A can be rewritten by an operation from an external terminal such as a smartphone.

  The receiver 12 receives ID information transmitted from the beacon 11A from a beacon 11A existing within a predetermined communication range. The receiver 12 is composed of a movable receiver such as a smartphone, an installation-type immovable receiver, and the like, and is scattered in various places. The receiver 12 virtually implements the transmission unit 14 by software by executing a control program by a control device (not shown) that controls the overall operation of the receiver 12. The transmission unit 14 may be realized by hardware, or may be realized by a combination of software and hardware.

  The transmission unit 14 is an example of a transmission unit. Upon receiving ID information from the beacon 11A, the transmission unit 14 generates beacon information including the ID information and transmits the beacon information to the cloud server 13. The beacon information is an example of transmitter information. As illustrated in FIG. 2, the beacon information includes ID information received from the beacon 11A, time information indicating the time when the ID information is received, position information indicating the position of the receiver 12 that has received the ID information, This is information to which date information indicating the date on which the ID information is received is added. Note that the time information and date information can be obtained by, for example, a time measuring function provided in the receiver 12. Further, the position information can be obtained by a current position detection function provided in the receiver 12, for example.

  The cloud server 13 is an example of a management server, and includes a data storage 21, a service information database 22, a gateway unit 23, a management graphical user interface unit 24, and an impersonation detection unit 25. Hereinafter, the service information database 22 is referred to as a service information DB 22, and the management graphical user interface unit 24 is referred to as a management GUI unit 24. The data storage 21 and the service information DB 22 are configured by a large-capacity storage medium, for example. The gateway unit 23, the management GUI unit 24, and the spoofing detection unit 25 may be realized by software, hardware, or a combination of software and hardware.

  The data storage 21 stores beacon information received from the receiver 12 via the gateway unit 23. The service information DB 22 is an example of a storage unit, for example, a database that stores service information registered by a monitoring service user or administrator. The registration of service information is input through the service use terminal 30 outside the cloud server 13, for example. That is, the service information input to the service using terminal 30 is received by the management GUI unit 24. Then, the management GUI unit 24 stores the received service information in the service information DB 22.

  The service information is an example of management information, and is set for each registered beacon 11A. As illustrated in FIG. 3, the service information is information in which the ID information of the registered beacon 11A and the movement pattern information are associated with each other. The movement pattern information is information for specifying a daily movement pattern to be monitored by the monitoring service. That is, according to the movement pattern information, it is possible to specify a basic movement pattern to be monitored, that is, which area has a tendency to move to which area and which area has a tendency to exist. In particular, when the monitoring target is a person, the movement pattern information corresponding to the monitoring target person is information that can identify the daily activity pattern, behavior pattern, and life pattern of the monitoring target person.

  The impersonation detection unit 25 virtually implements the confirmation unit 41, the determination unit 42, and the notification unit 43 by software by executing a control program. The confirmation unit 41, the determination unit 42, and the notification unit 43 may be realized by hardware, or may be realized by a combination of software and hardware.

  The confirmation unit 41 is an example of confirmation means, and the beacon information obtained from the receiver 12, that is, the beacon information stored in the data storage 21 matches the service information stored in the service information DB 22. Check whether or not. The confirmation unit 41 confirms whether or not the beacon information and the service information match by compositely comparing a plurality of types of information included in the beacon information and a plurality of types of information included in the service information.

  That is, the confirmation unit 41 periodically accesses the data storage 21 and acquires beacon information. And the confirmation part 41 collates the acquired beacon information and the service information of service information DB22. At this time, the confirmation unit 41 first confirms whether or not the ID information of the beacon information matches the ID information of the service information. If both ID information do not match, the confirmation unit 41 determines that the acquired beacon information is beacon information related to an unregistered beacon, and proceeds to the next collation of beacon information.

  The determination unit 42 is an example of a determination unit, and determines that the “spoofing beacon 11B” exists when the confirmation unit 41 confirms that the beacon information does not match the service information. The impersonation beacon 11B is an example of an impersonation transmitter, and is a beacon in which the same ID information as the beacon 11A is written.

  When the impersonation beacon 11B exists within the predetermined communication range, the receiver 12 receives the ID information transmitted by the impersonation beacon 11B. And the receiver 12 produces | generates the beacon information containing ID information received from the impersonation beacon 11B, and transmits to the cloud server 13. FIG. Then, the cloud server 13 accumulates beacon information including ID information derived from the impersonation beacon 11 </ b> B in the data storage 21.

  Here, the beacon information including the ID information derived from the authentic beacon 11A and the beacon information including the ID information derived from the inaccurate beacon 11B are the same, and are handled as beacon information related to the same beacon. Therefore, when the impersonation beacon 11B exists, the beacon information accumulated in the data storage 21 becomes inaccurate, and it becomes difficult to accurately grasp the movement status and location of the monitoring target accompanying the beacon 11A. .

  Therefore, the determination unit 42 has a function of accurately determining the presence / absence of the impersonation beacon 11B based on the comparison result between the beacon information stored in the data storage 21 and the service information registered in the service information DB 22. Prepare. In other words, even if the ID information included in the beacon information and the ID information included in the service information match, the determination unit 42 includes information other than the ID information included in the beacon information and the ID information included in the service information. When the information other than the information does not match, it is determined that the impersonation beacon 11B exists.

  The notification unit 43 is an example of a notification unit. When the determination unit 42 determines that the spoofing beacon 11B exists, the notification unit 43 notifies the service using terminal 30 that the beacon 11A has been spoofed. Various modes such as e-mail and telephone can be adopted as the mode of notification to the service using terminal 30. Further, a light emitting unit may be provided in the service use terminal 30, and the notification unit 43 may notify the occurrence of impersonation by causing the light emitting unit to shine remotely. In addition, a sound output unit may be provided in the service use terminal 30, and the notification unit 43 may notify the occurrence of impersonation by outputting sound from the sound output unit remotely. Further, the service use terminal 30 may be provided with a vibration unit, and the notification unit 43 may notify the occurrence of impersonation by vibrating the vibration unit remotely.

  Further, the determination unit 42 has a function of determining the possibility of the presence of the impersonation beacon 11B by a plurality of impersonation levels, in this case, three levels of high, medium, and low. That is, as illustrated in FIG. 4, when the determination unit 42 stores a plurality of beacon information having the same ID information in the data storage 21 at the same time, or when it is stored within a predetermined time. The impersonation level is determined as “high level”. Further, when the position information included in the beacon information accumulated in the data storage 21 is out of the activity area information registered in the service information DB 22, the determination unit 42 sets “middle level” as the impersonation level. Is determined. Further, when the time information included in the beacon information accumulated in the data storage 21 is out of the activity time zone information registered in the service information DB 22, the determination unit 42 sets the spoof level as “low level”. Is determined.

  The notification unit 43 can also notify the service use terminal 30 of the impersonation level determined by the determination unit 42. In other words, the notification unit 43 can include the impersonation level determined by the determination unit 42 in, for example, a mail or a telephone voice. Further, the notification unit 43 can adjust the volume of the sound, the light emission amount, the vibration amount, and the like according to the impersonation level determined by the determination unit 42.

  In addition, the notification unit 43 can change the notification mode for the service using terminal 30 according to the impersonation level determined by the determination unit 42. That is, when the impersonation level determined by the determination unit 42 is a high level, the notification unit 43 selects a notification mode by both e-mail and telephone, for example. Moreover, the notification part 43 selects the notification aspect by e-mail or telephone, for example, when the impersonation level determined by the determination part 42 is a medium level. Moreover, the notification part 43 selects the notification aspect by e-mail, for example, when the impersonation level determined by the determination part 42 is a low level.

  Further, the cloud server 13 further realizes the learning unit 51 virtually by software. Note that the learning unit 51 may be realized by hardware or a combination of software and hardware. The learning unit 51 is an example of an update unit, and updates service information stored in the service information DB 22 based on beacon information obtained from the receiver 12, that is, beacon information accumulated in the data storage 21. To do. In this case, the learning unit 51 repeatedly executes the service information update process every time beacon information is obtained from the receiver 12. That is, the cloud server 13 has a function of learning the movement pattern of the monitoring target by repeatedly reflecting the beacon information actually obtained in the service information. As a result, the service information stored in the service information DB 22 is highly accurate information that matches or approximates the actual movement pattern to be monitored.

  Next, an example of impersonation determination processing by the beacon management system 10 will be described. That is, as illustrated in FIG. 5, when the cloud server 13 periodically acquires the beacon information accumulated in the data storage 21 (S1), the ID information of the beacon information matches the ID information of the service information. (S2). If the two ID information do not match (S2: NO), the cloud server 13 proceeds to step S1 and acquires another beacon information.

  When the two ID information matches (S2: YES), the cloud server 13 checks whether information other than the ID information of the beacon information matches information other than the ID information of the service information (S3). . That is, the cloud server 13 confirms whether or not the movement pattern of the beacon 11A obtained from the receiver 12 matches the registered movement pattern. If both movement patterns match (S3: YES), the cloud server 13 determines that the impersonation beacon 11B does not exist (S4), and ends this process.

  When the two movement patterns do not match (S3: NO), the cloud server 13 determines that the impersonation beacon 11B exists (S5). Then, the cloud server 13 notifies the service use terminal 30 that beacon spoofing has occurred (S6), and ends this process. A person who operates the service using terminal 30, for example, a monitoring system user, an administrator, a monitoring target person, or the like recognizes that beacon spoofing has occurred based on the notification from the cloud server 13. To do. And it is possible to quickly take measures against the occurrence of impersonation.

  According to this embodiment, the beacon management system 10 includes not only beacon ID information that can be easily rewritten, but also beacon information that includes information other than ID information, and registered service information that also includes information other than ID information. And comprehensively compare. And the presence or absence of the beacon impersonation is determined based on the comparison result. Therefore, it is possible to accurately determine that beacon spoofing has occurred, and to provide a stable monitoring service, compared to a configuration in which the presence / absence of spoofing is determined based only on easily rewritable ID information.

  Further, the beacon management system 10 determines whether or not the beacon information matches the service information by comparing the multiple types of information included in the beacon information with the multiple types of information included in the service information. Check. As a result, it is possible to check whether or not both pieces of information match with each other more accurately, and as a result, it is possible to more accurately determine whether or not impersonation has occurred.

  Moreover, even if the beacon management system 10 includes the case where the ID information included in the beacon information matches the ID information included in the service information, the ID included in the service information and information other than the ID information included in the beacon information. If the information other than the information does not match, it is determined that the impersonation beacon 11B exists. In other words, since the presence / absence of impersonation is determined not only based on ID information but also the beacon movement pattern, the presence / absence of impersonation can be determined with higher accuracy. .

  Further, the beacon management system 10 updates the service information stored in the service information DB 22 based on the beacon information obtained from the receiver 12. Thereby, the service information stored in the service information DB 22 can be brushed up to information faithful to the actual beacon movement pattern, and the presence / absence of impersonation can be determined with higher accuracy.

  Further, the beacon management system 10 repeatedly executes such service information update processing every time beacon information is obtained from the receiver 12. Thereby, the service information stored in the service information DB 22 can be brushed up in real time, and the presence / absence of impersonation can be determined with higher accuracy.

  If the beacon management system 10 determines that the spoofed beacon 11B exists, the beacon management system 10 notifies the service using terminal 30 that the beacon spoofing has occurred. As a result, the person concerned in the monitoring service can be made to positively recognize that the beacon spoofing has occurred, and the measures against the spoofing can be quickly performed.

  Furthermore, the beacon management system 10 can determine the possibility of the presence of the spoofed beacon 11B at a plurality of levels according to the degree of coincidence between the beacon information and the service information, and can also notify the service use terminal 30 of the determination level. is there. Thereby, the person concerned in the monitoring service can determine the urgency level and importance level of the response according to the notified determination level. Therefore, it is possible to avoid the initial action from being delayed although impersonation occurs with a very high probability.

Note that the present invention is not limited to the above-described embodiments, and can be applied to various embodiments without departing from the gist thereof.
For example, the receiver 12 may be configured to generate, as beacon information, information obtained by adding at least one of time information and position information to ID information. The receiver 12 may be configured to include information other than time information and position information in the beacon information. The transmitter is not limited to a so-called beacon.

  The determination as to whether or not the beacon information and the service information match may be made based on whether or not both pieces of information match completely, or whether or not a part of both pieces of information matches. You may make it perform based on.

  In the drawing, 10 is a beacon management system (transmitter management system), 11A is a beacon (transmitter), 11B is an impersonation beacon (impersonation transmitter), 12 is a receiver, 13 is a cloud server (management server), and 14 is a transmission. Unit (transmission unit), 22 is a service information database (storage unit), 41 is a confirmation unit (confirmation unit), 42 is a determination unit (determination unit), 43 is a notification unit (notification unit), and 51 is a learning unit (update unit). ).

Claims (7)

A transmitter (11A) attached to the monitoring target;
A receiver (12) for receiving identification information of the transmitter from the transmitter;
A management server (13) for managing the transmitter;
A transmitter management system (10) comprising:
The transmitter identification information is rewritable,
The receiver
Transmission means for transmitting, as transmitter information, information obtained by adding at least one of time information indicating the time when the identification information is received and position information indicating the position of the receiver to the received identification information of the transmitter (14)
The management server
Storage means (22) for storing information associating identification information of the transmitter and movement pattern information specifying the monitoring target movement pattern as management information for managing the transmitter;
Confirmation means (41) for confirming whether or not the transmitter information obtained from the receiver and the management information stored in the storage means match;
A determination unit that determines that there is an impersonation transmitter (11B) in which the same identification information as the transmitter is written when the confirmation unit confirms that the transmitter information does not match the management information. 42)
A transmitter management system comprising:   The confirmation unit compares the plurality of types of information included in the transmitter information with the plurality of types of information included in the management information, so that the transmitter information matches the management information. The transmitter management system according to claim 1, wherein the transmitter management system confirms whether or not to perform.   Even if the identification information included in the transmitter information matches the identification information included in the management information, the determination means includes information other than the identification information included in the transmitter information and the management information. The transmitter management system according to claim 1 or 2, wherein if the information other than the identification information included in the information does not match, the spoofing transmitter is determined to exist.   The update means (51) which updates the said information for management memorize | stored in the said memory | storage means based on the said transmitter information obtained from the said receiver is provided in any one of Claim 1 to 3 Transmitter management system.   5. The transmitter management system according to claim 4, wherein the update unit repeatedly executes the management information update process every time the transmitter information is obtained from the receiver.   The notification means (43) for notifying that the spoofing of the transmitter has occurred when the determination means determines that the spoofing transmitter is present. The transmitter management system according to item 1. The determination means determines the possibility that the spoofing transmitter exists at a plurality of levels,
The transmitter management system according to claim 6, wherein the notification unit also notifies the level determined by the determination unit.

Images