JP4565346B2 - Wiretapping radio wave monitoring system and program thereof - Google Patents

Description

  The present invention relates to an eavesdropping radio wave monitoring system that implements a security function for eavesdropping using radio waves using a communication network and a program thereof.

  In recent years, eavesdropping using an eavesdropper has become a social problem. The purpose of eavesdropping varies widely from interest-oriented things like listening to conversations in ordinary households, to gaining financial profits by obtaining internal company information. In particular, current wiretap devices are small and have high performance, and some products do not require a battery, and once they are installed, there are many devices that will continue to emit wiretap waves permanently unless they break down. When such an eavesdropper is attached to a general household or company, all information continues to flow semipermanently. In addition, in the case of a wireless tapping device, it is heard not only by the other party attached but also by general wireless enthusiasts.

Conventional methods of finding eavesdroppers include surveys of eavesdropping radio waves by specialists, or visual search for eavesdroppers, but these methods require regular investigations and are expensive. There is a disadvantage that it ends up. In order to solve such a problem, an eavesdropping detection device (for example, refer to Patent Document 1) that easily and automatically detects the presence or absence of eavesdropping or a wireless eavesdropping device regardless of the modulation method, attachment position, and attachment method of the wireless device. There is known a radio alarm device (for example, refer to Patent Document 2) that detects the presence or absence of noise.
JP-A-9-139768 JP 2000-163678 A

  By the way, when trying to detect an eavesdropper using the devices described in Patent Documents 1 and 2, there is a problem that it takes time to sweep the reception frequency because the frequency to be monitored covers a wide band. An eavesdropper installed in a telephone or the like emits an eavesdropping radio wave only when the telephone is in use, so the eavesdropping radio wave cannot be detected unless the use of the telephone and the timing of the sweep match. There is also a problem.

  The present invention has been made in view of such circumstances. An eavesdropping radio wave that realizes a security function for radio waves by constantly monitoring eavesdropping radio waves using a network and issuing a warning when an eavesdropping radio wave is detected. An object is to provide a monitoring system and its program.

The present invention is an eavesdropping radio wave monitoring system in which at least one radio wave receiver is connected via a network, and a first measurement mode for sweeping only a predetermined frequency with respect to the radio wave receiver; , Mode setting means for setting any one of the second measurement modes for sweeping the entire frequency band of interest, and environmental radio wave storage for storing field strength data measured in advance in the absence of eavesdropping radio waves And at least the electric field strength data via the radio wave receiver, and the captured electric field strength data is compared with the electric field strength data in the absence of the eavesdropping radio wave read from the environmental radio wave storage means. Eavesdropping radio wave monitoring means for monitoring the presence or absence of radio waves, and alarm generation means for issuing an alarm according to the monitoring result of the eavesdropping radio wave monitoring means, The receiver, based on the measurement mode set by said mode setting means, characterized in that the measurement of field strength.
According to the present invention, the eavesdropping radio wave monitoring means captures the electric field strength data via the radio wave receiver, monitors the presence / absence of the eavesdropping radio wave as compared with the electric field strength data in a state where no eavesdropping radio wave exists, and generates an alarm By issuing an alarm via a wiretap, it is possible to provide an eavesdropping radio wave monitoring system that has high security against eavesdropping using radio waves and that does not require an eavesdropping radio wave investigation work by a specialist. Also, since an eavesdropping radio wave monitoring system is realized using an existing network, the cost effect is particularly great. In addition, since it can be set to one of two measurement modes, it is possible to detect wiretapping radio waves efficiently, and to install radio receivers that operate in two different measurement modes at the same location. This can increase the chances of finding an eavesdropper.

The present invention is characterized by comprising environmental radio wave update means for updating the electric field strength data in the absence of the eavesdropping radio wave using the received data when the eavesdropping radio wave does not exist.
According to the present invention, since the environmental radio wave update means constantly updates the electric field strength data in the steady state where no eavesdropping radio wave exists using the received data, the radio wave can be stably monitored regardless of the installation area.

The present invention is characterized in that the wiretapping radio wave monitoring means generates a danger level defined by a frequency including the electric field strength and notifies the alarm generation means when it is determined that the wiretapping radio wave is present. .
According to the present invention, it is possible to respond according to the danger level notified by the alarm generation means, and the degree of freedom of the user for the response is increased.

According to the present invention, in addition to displaying the reception data monitored by the wiretapping radio wave monitoring unit, the alarm generation unit displays at least one of the risk level and the estimated approximate transmission position according to a user request. It is characterized by.
According to the present invention, the alarm generation means displays at least one of the danger level and the estimated approximate transmission position in accordance with the user request, in addition to displaying the reception data that changes in real time monitored by the wiretapping radio wave monitoring means. By doing so, it is possible to grasp data relating to eavesdropping from various angles, which can be helpful in handling.

The present invention is an eavesdropping radio wave monitoring program used in an eavesdropping radio wave monitoring system in which at least one radio wave receiver that measures electric field strength is connected via a network based on a set measurement mode, A mode setting step for setting one of the measurement modes of the first measurement mode for sweeping only a predetermined frequency and the second measurement mode for sweeping the entire frequency band of interest for the radio wave receiver; , Capturing at least electric field intensity data via the radio wave receiver, comparing the captured electric field intensity data with the electric field intensity data in the absence of the eavesdropping radio wave read from the environmental radio wave storage means, Eavesdropping radio wave monitoring step for monitoring presence / absence, and alarm generation step for issuing an alarm according to the monitoring result of the eavesdropping radio wave monitoring step And characterized by causing a computer to execute the.
According to the present invention, by causing the computer to execute the above-described wiretapping radio wave monitoring program, the field strength data is captured via the receiver, and the presence / absence of wiretapping radio waves is compared with the field strength data in a state where no wiretapping radio waves exist. By monitoring the above and issuing an alarm, security against eavesdropping using wireless radio waves is high, and the eavesdropping radio wave investigation work by an expert can be made unnecessary. In addition, since it can be set to one of two measurement modes, it is possible to detect wiretapping radio waves efficiently, and to install radio receivers that operate in two different measurement modes at the same location. This can increase the chances of finding an eavesdropper.

  According to the present invention, since eavesdropping radio waves are constantly monitored, it is possible to provide an eavesdropping radio wave monitoring system with extremely high security against eavesdropping using radio waves. In addition, since it can be set to one of two measurement modes, it is possible to detect wiretapping radio waves efficiently, and to install radio receivers that operate in two different measurement modes at the same location. This can increase the chances of finding an eavesdropper. In addition, by automating wiretapping radio wave monitoring work, work such as wiretapping radio wave surveys by specialists can be omitted, which is highly cost effective. Furthermore, when it is desired to install the wiretapping radio wave monitoring system of the present invention in a plurality of rooms in a large-scale office, it can be introduced relatively easily in order to use an existing network.

  Hereinafter, an eavesdropping radio wave monitoring system according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a connection configuration of an eavesdropping radio wave monitoring system in the same embodiment. As shown in FIG. 1, a plurality of receivers 1, 2, 3 and a host computer 4 are connected via a network 5, and the host computer 4 connects the electric field of each receiver 1, 2, 3 via the network 5. It is configured to capture intensity data. Each receiver 1, 2, 3 is connected to the network 5 via a LAN (Local Area Network) converter 6, 7, 8 by a built-in RS232C interface, and based on the measurement mode set by the host computer 4, Set the reception frequency and try to receive eavesdropping radio waves. The host computer 4 holds information on the measurement mode to be set for each of the receivers 1, 2, and 3 in the mode setting database (DB) 11.

  The host computer 4 that has received the reception data including the electric field strength data holds the electric field strength data in a state where there is no unnecessary radio wave including an eavesdropping radio wave in the environmental radio wave database (DB) 9. 3 is compared with the received data obtained from 3 to determine whether there is an eavesdropping radio wave. For the host computer 4, for example, a computer that performs continuous operation such as a file server is used, and the wiretapping radio wave monitoring program of the present invention is executed in the background. When the eavesdropping radio wave monitoring program detects an unnecessary radio wave that seems to be an eavesdropping radio wave, the e-mail or the like is used to contact a terminal device of a manager in charge (not shown). At the same time, the person in charge of management can monitor the monitoring state on the web screen.

  FIG. 2 is a block diagram showing functions of the internal configuration of the host computer shown in FIG. Specifically, the block shown below is composed of a peripheral LSI including a CPU and a memory, and the CPU reads out a program recorded in the memory and executes it sequentially to realize the function of the block. The host computer 4 includes a communication interface unit 41, a received data capturing unit 42, an eavesdropping radio wave monitoring unit 43, an alarm generation unit 44, and an environmental radio wave update unit 45.

  The communication interface unit 41 manages an interface with the network 5, and the receivers 1, 2, and 3 are connected to the network 5 via the LAN conversion devices 6, 7, and 8. / Internet Protocol) is implemented. The reception data capturing unit 42 has a function of capturing input data including electric field strength data obtained via the receivers 1, 2, and 3. The wiretapping radio wave monitoring unit 43 compares the electric field strength data input via the reception data capturing unit 42 with the field strength data in the absence of unnecessary radio waves including wiretapping radio waves held in the environmental radio wave DB 9. It has a function to monitor the presence of unwanted radio waves including wiretapping radio waves. The wiretapping radio wave monitoring unit 43 also has a function of generating danger level data defined by the frequency including the electric field strength and notifying the alarm generation unit 44 when it is determined that there is wiretapping radio wave.

  The alarm generation unit 44 has a function of issuing an alarm depending on the monitoring result of the wiretapping radio wave monitoring unit 43, and this alarm is notified by e-mail, voice output, web screen, or a combination thereof, for example. The The alarm generating unit 44 displays received data monitored by the eavesdropping radio wave monitoring unit 43, which changes in real time, and displays a risk level, an estimated approximate transmission position, and the like depending on a user request. And The environmental radio wave update unit 45 has a function of constantly updating the electric field strength data in a steady state where there is no unnecessary radio wave including an eavesdropping radio wave using received data when no unnecessary radio wave including an eavesdropping radio wave exists. The electric field strength data in the steady state is always held in the environmental radio wave DB 9 in the latest state. The frequency DB 10 is used for risk level determination to be described later, and stores frequency data corresponding to a predefined risk level. The mode setting unit 46 reads the mode setting information held in the mode setting DB 11 and sets the measurement mode of the receiver 1 (2, 3).

  Here, the measurement mode will be described. The measurement mode includes a first measurement mode in which only a predetermined frequency is swept (this is referred to as a normal mode), and a second measurement mode in which the entire target frequency band is swept at a predetermined frequency interval (this is a detailed mode). There are two modes. The mode setting unit 46 instructs the receiver 1 (2, 3) to perform measurement in either the normal mode or the detailed mode. The receiver 1 (2, 3) measures the electric field strength based on the measurement mode instructed from the mode setting unit 46.

  The normal mode is a mode in which only a frequency used for information transmission by a commercially available wiretapping device is swept. In this normal mode, since only a limited frequency is swept, the sweep time can be shortened (for example, about 1 minute). In the case of a wiretap that is attached to a telephone, a commercially available wiretap is often used. Therefore, most wiretap can be detected by performing measurement in the normal mode. In addition, since the sweep time can be shortened, one sweep can be completed within the telephone call time, and the possibility that an eavesdropping radio wave can be received can be increased.

  The detailed mode is a mode in which sweeping is performed at a predetermined frequency interval (the minimum frequency interval that can be set by the receiver) in all target frequency bands. In this detailed mode, the target frequency band is swept in detail, so that one sweep time becomes long (about 20 minutes depending on the target frequency band), but since all of the target frequency band is swept, any arbitrary frequency band is swept. An eavesdropping radio wave transmitted from an eavesdropper manufactured with a selected frequency can be reliably detected. In the case of an eavesdropper installed on a wall or the like, it is assumed that an eavesdropper itself is produced by an expert, and therefore, eavesdropping radio waves transmitted from the eavesdropper can be reliably detected by performing measurement in the detailed mode.

  In the mode setting DB 11, a receiver identification number for identifying each receiver and a mode identification number for identifying a measurement mode are stored in association with each other. Furthermore, the mode identification number is stored in association with information on the frequency to be swept. When the mode identification number is the normal mode, frequencies to be swept (f1, f2,..., Fn; n is the number of frequencies to be swept) are associated. On the other hand, when the mode identification number is the detailed mode, the sweep start frequency (f1), the sweep end frequency (f2), and the sweep interval (Δf) are associated with each other. When the measurement mode in the receiver 1 (2, 3) is switched to the normal mode by transmitting the mode setting information to each receiver 1 (2, 3), the mode setting unit 46 sets the frequency to be swept ( f1, f2,..., fn; n is the number of frequencies to be swept). When the measurement mode is switched to the detailed mode, the mode setting unit 46 transmits the sweep start frequency (f1), the sweep end frequency (f2), and the sweep interval (Δf) to the receiver.

  The mode setting DB 11 stores time information for each receiver, and may be associated with a mode identification number of a measurement mode to be used for each time zone. For example, the receiver 1 is defined so that the measurement mode used varies depending on the time zone, such as the detailed mode from 0 o'clock to 8 o'clock and the normal mode from 8 o'clock to 24 o'clock. The time is acquired, and the change of the measurement mode is instructed to the receiver 1 (2, 3) at the timing when the measurement mode is switched. By doing so, the measurement mode can be automatically switched, so that the possibility of receiving an eavesdropping radio wave can be further increased.

  3 and 4 are flowcharts cited for explaining the operation of the wiretapping radio wave monitoring system of the present invention. FIG. 3 is a diagram showing a processing procedure of the wiretapping radio wave monitoring program of the present invention. FIG. 4 is a flowchart showing the operation of the receiver 1 (2, 3) shown in FIG. FIGS. 5 and 6 are diagrams cited for explaining the operation of the embodiment of the present invention, and show examples of screen configurations of an electronic mail screen and a web screen. The operation of the wiretapping radio wave monitoring system of the present invention shown in FIGS. 1 and 2 will be described in detail below with reference to FIGS.

  Prior to starting the wiretapping radio wave monitoring program of the present invention, the manager in charge starts up the web screen shown in FIG. 6 as pre-processing and inputs necessary data for mail setting notification via a terminal device (not shown). To do. Here, notification frequency, danger level threshold at the time of notification (notification is necessary only for those having a certain level or more), notification contents (frequency, electric field strength, time, danger level, mobile phone / PHS reception log, voice) Each of these shall be set. At this time, the mode setting unit 46 refers to the mode setting DB 11 and transmits measurement mode setting information to each of the receivers 1, 2, and 3. When the time information is associated with the mode setting DB 11, the mode setting unit 46 performs time management using a timer, and changes the measurement mode to the receiver 1 (2, 3) at the timing when the measurement mode is switched. To be instructed.

  Note that the notification frequency and the danger level threshold value are numbers, and the notification content is selected by marking the check box. In addition to the setting screen described above, the web screen shown in FIG. 6 is determined by the monitoring waveform of the received data received in real time via the received data capturing unit 42 and the wiretapping radio wave monitoring unit 43 during operation. The danger level is displayed as an indicator.

  After the pre-processing described above, the host computer 4 transmits the electric field intensity measured by the received data capturing unit 42 from each of the receivers 1, 2, 3 via the LAN converters 6, 7, 8, the network 5, and the communication interface unit 41. Data is fetched (step S301). Then, after removing noise with a noise canceller (not shown) (step S302), the eavesdropping radio wave monitoring unit 43 monitors the eavesdropping radio wave (step S303). That is, the eavesdropping radio wave monitoring unit 43 compares the input reception data with the electric field strength data held in the environmental radio wave DB 9. Here, if a change is detected, the eavesdropping radio wave monitoring unit 43 determines that there is an unnecessary radio wave including the eavesdropping radio wave, and determines its danger level with reference to the frequency DB 10 (step S304). When it is determined that there is no wiretapping radio wave, the electric field strength data stored in the environmental radio wave DB 9 is updated using this measurement data (step S307). By storing the number of times of measurement of the electric field strength data in the environmental radio wave DB 9, the average value can be easily obtained.

  The wiretapping radio wave monitoring unit 43 further estimates the approximate transmission location (antenna position) after determining the danger level (step S305), and notifies the alarm generation unit 44 of the result. The alarm generation unit 44 generates an e-mail screen, for example, in the format shown in FIG. 6 according to the e-mail notification setting previously set on the web screen, and notifies the manager in charge (step S306). Here, it is notified by e-mail as “2001 * Month * Day, near antenna *, danger level 1, transmission frequency *** MHz, radio field strength *** dBμV”. Or you may notify via the received data waveform for every receiver and a danger level indicator via the web screen shown in FIG. 5 (step S307). If the danger level is relatively high, it may be possible to output by voice.

  Next, the operation of the receiver 1 will be described with reference to FIG. Here, the operation will be described by taking the receiver 1 as an example. However, since the operations of the receivers 2 and 3 are the same as those of the receiver 1, detailed description thereof is omitted here.

  First, the receiver 1 tries to receive the mode setting information via the network 5 and the LAN conversion device 6 in order to determine whether or not the mode setting information is transmitted from the host computer 4 (step S401). It is determined whether the setting information has been received (step S402). If the mode setting information can be received, the receiver 1 changes the setting of its own measurement mode based on the received mode setting information (step S403). On the other hand, when the mode setting information cannot be received, the receiver 1 skips the step of changing the mode setting and maintains the original measurement mode set at the present time. At this time, in the receiver, depending on the set measurement mode, the frequency to be swept (f1, f2,..., Fn; n is the number of frequencies to be swept) or the sweep start frequency ( f1), the sweep end frequency (f2) and the sweep interval (Δf) are held.

  Next, the receiver 1 sets the reception frequency to be swept based on the set measurement mode (step S404). Then, the receiver 1 attempts to receive an eavesdropping radio wave while changing the set reception frequency (step S405), and sends the obtained reception signal (field strength data) via the LAN converter 6 and the network 5. To the host computer 4 (step S406). The receiver 1 determines whether or not all the set reception frequencies have been swept (step S407). If all the sweeps have not been completed, the reception signal is transmitted to the host computer 4 while changing the reception frequency. Repeat the operation. On the other hand, when all the sweeps of the set reception frequency are completed, the receiver 1 returns to step S401 and repeats the above-described operation.

  As described above, since the receiver 1 can be set to one of the two measurement modes (normal mode and detailed mode) based on an instruction from the host computer 4, the wiretapping radio wave is efficiently detected. In addition, by installing radio receivers operating in two different measurement modes in the same place, the possibility of finding a wiretap can be increased.

  As described above, the present invention implements a security function for radio waves by constantly monitoring eavesdropping radio waves using a network and issuing a warning when detecting eavesdropping radio waves. 2 and 3 are managed by a single host computer 4. In addition, each receiver 1, 2, 3, and host computer 4 is an existing network such as a LAN, LON, or Open PLANET (a system that monitors and controls each electrical device via the Internet). Therefore, the wiring between the receivers 1, 2, 3 and the host computer 4 is very small. Still another feature of the wiretapping radio wave monitoring system according to the present invention is that steady state data (environmental radio wave DB 9) in which unnecessary radio waves do not exist is constantly updated using received data, so that stable radio waves that do not depend on the installation area can be obtained. Can be monitored.

  Note that the procedures executed by each of the communication interface unit 41, received data capturing unit 42, wiretapping radio wave monitoring unit 43, alarm generation unit 44, environmental radio wave update unit 45, and mode setting unit 46 shown in FIG. The above-described wiretapping radio wave monitoring system is realized by recording in a recording medium, causing the computer system to read and execute the program recorded in the recording medium. The computer system here includes an OS and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a portable medium such as a flexible disk, a magneto-optical disk, a ROM, and a CD-ROM, and a storage device such as a hard disk built in the computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) in a computer system serving as a system or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those holding programs for a certain period of time are also included.

The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  The embodiments of the present invention have been described in detail with reference to the drawings. However, the specific configuration is not limited to the embodiments, and includes designs and the like that do not depart from the gist of the present invention.

It is a figure which shows the connection structure of the wiretapping radio wave monitoring system of this invention. FIG. 2 is a block diagram showing an expanded function of the internal configuration of the host computer shown in FIG. 1. It is the flowchart quoted in order to demonstrate operation | movement of the wiretapping radio wave monitoring system of this invention. It is a flowchart which shows operation | movement of the receiver 1 (2, 3) shown in FIG. It is a figure which shows an example of the electronic mail screen structure quoted in order to demonstrate operation | movement of this invention embodiment. It is a figure which shows an example of the web screen structure quoted in order to demonstrate operation | movement of this invention embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 (2, 3) ... Receiver, 4 ... Host computer, 5 ... Network, 6 (7, 8) ... LAN converter, 9 ... Environmental radio wave DB, 10 ... Frequency DB, 11 ... Mode setting DB, 41 ... Communication Interface unit 42... Received data capturing unit 43. Eavesdropping radio wave monitoring unit 44. Alarm generating unit 45 45 Environmental radio wave updating unit 46.

Claims (5)

An eavesdropping radio wave monitoring system in which a radio wave receiver is connected via a network,
A mode identification number for identifying a measurement mode to be used for measurement out of any one of the first measurement mode for sweeping only a predetermined frequency and the second measurement mode for sweeping the entire frequency band of interest. Is a mode setting database that is pre-defined and stored for each time period, and
Get the current time with reference to said mode setting database, to identify the measurement mode identification number should be set at this time, to the radio receiver, the mode setting for setting the measurement mode of the specified measurement mode identification number Means,
Environmental radio wave storage means for storing electric field strength data measured in advance in the absence of eavesdropping radio waves,
The electric field intensity data obtained by measuring the electric field strength by the radio receiver using the measurement mode set by said mode setting means uptake via the network, the environmental wave and the electric field intensity data captured Eavesdropping radio wave monitoring means for monitoring the presence or absence of eavesdropping radio waves by comparing with the electric field strength data in a state where there is no eavesdropping radio waves read from the storage means;
Eavesdropping radio monitoring system comprising a kite and a warning generating means for generating an alarm in response to a result of monitoring by the eavesdropping radio monitoring means. An environmental radio wave update means for updating the electric field strength data in a state where the eavesdropping radio wave is not present, using reception data when the eavesdropping radio wave is not present;
The wiretapping radio wave monitoring system according to claim 1, further comprising: The wiretapping radio wave monitoring means is
When it is determined that there is an eavesdropping radio wave, generating a danger level defined by a frequency including the electric field strength and notifying the alarm generation means,
An eavesdropping radio wave monitoring system according to claim 1 or 2. The alarm generation means includes
In addition to displaying the reception data monitored by the wiretapping radio wave monitoring means, in accordance with a user request, displaying at least one of the risk level and the estimated approximate transmission position,
The wiretapping radio wave monitoring system according to any one of claims 1 to 3. Measurement is performed in any one of a measurement mode of a first measurement mode in which a radio wave receiver is connected via a network and sweeps only a predetermined frequency and a second measurement mode in which the entire target frequency band is swept. A mode setting database in which a mode identification number for identifying a measurement mode to be used in advance is defined and stored for each time zone, and an environmental radio wave storage means for preserving electric field strength data measured in the absence of eavesdropping radio waves in advance An eavesdropping radio wave monitoring program for causing a computer on an eavesdropping radio wave monitoring system to monitor eavesdropping radio waves,
Get the current time with reference to said mode setting database, to identify the measurement mode identification number should be set at this time, to the radio receiver, the mode setting for setting the measurement mode of the specified measurement mode identification number Steps,
The electric field intensity data obtained by measuring the electric field strength by the radio receiver using the measurement mode set by said mode setting step uptake via the network, the environmental wave and the electric field intensity data captured An eavesdropping radio wave monitoring step for monitoring the presence or absence of eavesdropping radio waves by comparing with the electric field strength data in a state where there is no eavesdropping radio waves read from the storage means;
Eavesdropping radio monitoring program characterized by executing the alarm generating step of generating an alarm in response to a result of monitoring by the eavesdropping radio monitoring step to said computer.

Images