JP5580686B2 - Reporting device - Google Patents

Description

  The present invention relates to a notification device that detects and reports the occurrence of an emergency such as a burglary, and more particularly to a notification device that does not require operation of a notification button or the like.

Conventionally, as a notification device for a user such as a store or an office to notify an emergency such as a burglary to the outside, a remote monitoring center displays an image captured by a monitoring camera together with an emergency signal by operating a so-called emergency button. What is sent out to is widely known.
Although this type of reporting device is based on the user's voluntary operation, it rarely reports an emergency situation accidentally, but when an emergency such as a burglary occurs, the operation of the emergency button is prevented by the burglary. The user may be upset and forget to operate the emergency button, and there is a problem that the certainty of the notification is lacking.

Also, those who are engaged in the delivery of cash face to face with the customer operate a notification function to the police etc. that is attached to the lower part of the counter as a detour because the perpetrator for the purpose of robbery possesses weapons etc. Doing so may irritate the perpetrator and cause injury.
Patent Document 1 provides an alarm device that can notify a manager or the like in real time when it is determined that there is a possibility of a suspicious person by performing image processing on the face image of a visitor captured by a camera or the like. In order to do so, an alarm device is disclosed that detects a facial element in a zone used by an unspecified number of people and determines that there is a possibility of a suspicious person when part of the face is hidden. Yes.
In addition, Patent Document 2 discloses the movement trajectory information of a monitoring target using a video of a stereo camera for the purpose of providing a suspicious behavior detection system that can identify and identify a suspicious person who is performing an abnormal behavior. A suspicious activity for detecting a suspicious behavior of a monitoring target, comprising: a moving trajectory acquisition unit to be acquired; and a behavior identifying unit 22 that identifies the behavioral state of the monitoring target based on the moving trajectory information and automatically determines the suspicious behavior of the monitoring target. A behavior detection system is disclosed.

Japanese Patent Laid-Open No. 5-35992

JP 2008-217602 A

According to the reporting device proposed in Patent Document 1, it is possible to report to the outside a person who has concealed part of his face as a suspicious person.
Further, according to the suspicious behavior detection system proposed in Patent Document 2, it is possible to identify a suspicious behavior from the movement trajectory and notify the outside.

  However, even if a part of the face is hidden with a mask or sunglasses, if only detecting the concealment of the face and reporting it may cause many malfunctions, which in turn increases the load on the monitoring center receiving the report. In addition, the reliability of the reporting device decreases.

  The present invention has been made in view of the above problems, and when detecting and reporting a person who concealed his face, occurrence of an emergency when concealment of a face is detected in addition to the occurrence of an emergency such as a robbery. The purpose of the present invention is to propose a reporting device that improves the reliability by reducing erroneous determination.

  In order to achieve the above object, the notification device according to the present invention includes an image acquisition unit that acquires an image of a monitoring area, a face concealment detection unit that detects concealment of a human face from the acquired image information, and the acquired image information. Action detecting means for tracking a person's action from the storage, storage means for storing a specific person's specific behavior when a robbery incident has occurred in advance, a notification determining means for determining whether or not a report is required, and a notification means And when the face concealment detecting means detects face concealment, the action of the second person other than the person who conceals the face detected by the action detection means is the specific action. If they match, it is determined that reporting is required.

  As a result, when the reporting device detects a person who conceals his face, it determines whether or not reporting is necessary depending on the situation in which the burglary occurs. .

In the notification device of the present invention, the notification determination means detects the first person whose face is concealed by the face concealment detection means, and the action of the second person detected by the action detection means is the first person. It is determined that a report is required when the action is to remain still for a predetermined time at a position separated from a person by a predetermined distance or more.

In the notification device of the present invention, the notification determination unit detects the first person whose face is concealed by the face concealment detection unit, and the behavior of the second person detected by the behavior detection unit is the monitoring region. When it is an action that moves in a substantially linear manner at a speed equal to or higher than a predetermined speed toward the entrance / exit, it is determined that the notification is required.

According to the present invention, when detecting a person who hides the face, depending on the customer and clerk of behavior that are in the store, since the emergency report, low reducing the report erroneous in less situations may have occurred in the robbery kill at.

It is the schematic which shows the whole structure of the notification system by the notification apparatus of this invention. It is a block diagram which shows the structure of the notification apparatus of this invention. It is a flowchart which shows the monitoring process of the notification apparatus of this invention. It is a figure which shows the movement locus | trajectory of the person in the in-store area which is a monitoring area | region.

Embodiments of the present invention will be specifically described below with reference to the drawings.
In the present embodiment, a case where a sales office such as a financial institution or a store is a monitoring target, and a store area and a cashier counter area are provided as monitoring areas to be monitored, the scope of the present invention is described here. It is not limited to.

FIG. 1 is a configuration diagram showing a notification system 1 using the notification device of the present invention.
FIG. 1 shows a monitoring area 2 including a store area 2a and a cashier counter area 2b having an entrance to the outside, a monitoring camera 3 installed in the monitoring area 2, a security sensor 7 such as a heat ray sensor and an open / close sensor, The relationship between the monitoring camera 3 and the alarm device 4 to which the security sensor 7 is connected is schematically shown on the plan view.

Here, in the present embodiment, there are a store area 2a and a cashier counter area 2b, and the cashier counter area 2b is an area where only the store clerk exists.
As shown in FIG. 1, the store area 2a is provided with a store entrance 21 as an entrance to the outside.

  In the example of FIG. 1, the monitoring camera 3a is installed at a position where the entire store area 2a including the entrance / exit 21 of the store area 2a can be imaged, and the monitoring camera 3b is installed at a position where the register counter area 2b can be imaged. ing. The monitoring camera 3 and the notification device 4 are connected by a LAN (not shown), and the notification device 4 is further connected to a remote monitoring center 5 via a communication network 6.

  Moreover, the opening / closing sensor 7 is installed in the entrance / exit 21 of the store area 2a, and the heat ray sensor which is not illustrated is installed in the store area 2a and the cash register counter area 2b. These security sensors 7 are connected to a LAN connecting the reporting device 4 and the monitoring camera 3.

  The monitoring camera 3 is a monitoring unit that generates monitoring information of the monitoring area 2. The surveillance camera 3 stores a camera number for identifying each surveillance camera 3 in advance, and an image signal input from the image sensor is transmitted at a predetermined photographing interval (for example, a cycle of 0.2 seconds, that is, 5 fps (frame / second)). Then, the image data is converted into a digital signal, compression-encoded, and image data compliant with a predetermined standard (for example, JPEG standard) is generated. The generated image data is output to the LAN and transmitted to the notification device 4. The image data transmitted at this time includes a camera number. The surveillance camera 3 may compress and encode an audio signal input from a microphone to generate audio data, multiplex the image data and audio data, and output the multiplexed audio data to the LAN.

  The security sensor 7 is a monitoring unit that detects an intruder entering the inside of the monitoring area 2. The security sensor 7 stores a sensor number for identifying each security sensor 7 in advance, and outputs a detection signal including the sensor number to the notification device 4 when an intruder is detected.

  The reporting device 4 monitors an intruder entering the monitoring area 2 based on the detection signal from the security sensor 7 and the security mode set in the monitoring area 2. The security mode includes a security set mode as a monitoring mode and a security release mode as a non-monitoring mode. The security set mode is a mode that is set in an unattended state in which no user is present in the monitoring area 2, and the reporting device 4 enters when a detection signal is received from the security sensor 7 when the security set mode is set. The intrusion detection signal is transmitted to the monitoring center 5. The security release mode is a mode that is set in a manned state where a user exists in the monitoring area 2, and the notification device 4 receives a detection signal from the security sensor 7 when the security release mode is set. Is not determined as an intrusion, and the intrusion detection signal is not transmitted to the monitoring center 5.

  Further, the notification device 4 receives image data input from the monitoring camera 3, detects the face of a person in the monitoring area 2 from the image data, and when the face is concealed, a predetermined robbery A notification necessity determination process for determining necessity of notification according to the occurrence estimation factor is executed. If it is determined that the notification is necessary as a result of the notification necessity determination process, an emergency notification signal is notified to the monitoring center 5 via the communication network 6 and image data received from the monitoring camera 3 is transmitted to the monitoring center 5. . The image data transmission process is continuously performed until a stop input is received from a user of the monitoring center 5 or the monitoring area 2.

In particular, in the present embodiment, the reporting device 4 stores the action pattern information of people in the monitoring area 2 as a burglary occurrence estimation factor.
The reporting device 4 tracks the behavior of the person in the monitoring area 2 when detecting the concealment of the face of the person in the monitoring area 2, and assumes that the risk of burglary is high if it matches the action pattern stored in advance. Execute the notification process.
As a result, the surveillance area 2 can make an emergency call operation in a situation where there is a high possibility that a burglary has entered. To prevent it from happening.

  The monitoring center 5 is a facility provided with a center device 51 operated by a security company or the like. The center device 51 is composed of one or a plurality of computers, and realizes the function of the monitoring center 5 related to the present invention. In the monitoring center 5, various devices are controlled by the center device 51, and a suspicious person detection signal received as an emergency call from the reporting device 4 is recorded, and image data transmitted from the reporting device 4 is displayed on the display 52. The monitor monitors a plurality of monitoring areas 2 to be monitored.

<Notification device>
Next, the configuration of the notification device 4 will be described with reference to FIG. FIG. 2 is a block diagram showing the configuration of the notification device 4.
The notification device 4 is installed in the monitoring area 2 (in the present embodiment, the cashier counter area 2b) so as to be able to communicate with the monitoring camera 3, the security sensor 7, and the monitoring center 5.

  The reporting device 4 includes a monitoring information acquisition unit 41 as a communication I / F (interface) connected to the LAN, a communication unit 42 connected to the communication line network 6, and an operation unit 43 on which a user performs an input operation. The storage unit 44 includes an HDD, a memory, and the like, and the control unit 45 includes an MPU, a microcomputer, and the like and controls each unit.

The monitoring information acquisition unit 41 is connected to the monitoring camera 3 and the security sensor 7 and receives the camera number and image data output from the monitoring camera 3 as the monitoring information of the monitoring area 2 and the detection signal output from the security sensor 7. The data is output to the control unit 45.
The communication unit 42 is connected to the center device 51 via the communication line network 6 and communicates with the monitoring center 5. When the control unit 45 determines that the notification is necessary, the communication unit 42 transmits an emergency notification signal including its own address information and image data captured by the monitoring camera 3 to the monitoring center 5. In addition, the communication unit 42 detects intrusion that includes its own address information when it is determined by the control unit 45 that an intruder exists in the area set in the guard set mode (the store area 2a and the cashier counter area 2b). A signal is transmitted to the monitoring center 5.
The operation unit 43 is a switch capable of inputting setting information such as a security mode setting operation.

  The storage unit 44 is configured by a ROM, a RAM, or an HDD, stores address information for identifying itself, various programs, and the like, and further stores various information for operating the reporting device 4. Specifically, the storage unit 44 includes reference data serving as background information for extracting a moving object, mode information indicating the current security mode, and burglary occurrence estimation factor information for performing an emergency call necessity determination process. Is stored as specific action information. Further, the storage unit 44 stores image data for a past predetermined time output from the monitoring camera 3.

  Here, the reference data stored in the storage unit 44 is comparison reference information used for extracting a moving object in the monitoring area 2 in comparison with the current image data in the visitor detection process described later. This is image data acquired by capturing an image of the monitoring area 2 in the unattended state in advance.

  Moreover, the mode information has memorize | stored the security mode (security set mode or security cancellation | release mode) currently set to the monitoring area 2 (the store area 2a and the cashier counter area 2b). The security mode is set by the control unit 45 based on an operation input to the operation unit 43 by the user.

  The control unit 45 includes a microcomputer including a CPU, a ROM, a RAM, and the like and peripheral circuits thereof, and controls each unit described above. For this purpose, the control unit 45 includes an electronic calendar unit 450 as a clock means for acquiring the current date and time as a functional module realized by the microcomputer and a computer program executed on the microcomputer, and a security mode of the monitoring area 2. A mode setting unit 451 for setting / changing an intruder, an intruder detection unit 452 for detecting an intruder into the monitoring area 2, a face concealment detection unit 453 for detecting concealment of a person's face in the monitoring area 2, and a monitoring area 2 includes a behavior detection unit 454 that detects the behavior of a person within the network 2, a notification determination unit 455 that determines whether notification is necessary, and a communication control unit 456 that controls communication processing by the communication unit 42.

  The mode setting unit 451 checks the information input from the operation unit 43 when the user sets the security mode, and if the verification is OK, sets the security mode of the monitoring area 2 based on the input of the operation unit 43 as a security set. Set to mode or security release mode. The security mode set by the mode setting unit 451 is stored in the mode information of the storage unit 44.

  As described above, the security set mode is set when the monitoring area 2 becomes unmanned, such as on a holiday, and when the security sensor 7 detects a change in the event, the remote monitoring center 5 is detected via the communication unit 42. In this mode, an abnormality is reported by a signal. Further, the security release mode is a mode that is set when the monitoring area 2 is manned and does not perform an abnormality report based on detection by the security sensor 7.

  When an intruder detection unit 452 receives a detection signal from the security sensor 7 via the monitoring information acquisition unit 41, the intruder detection unit 452 refers to the mode information stored in the storage unit 44 and the current security mode is in the security set mode. When the security sensor 7 outputs a detection signal, it is determined that there is an intruder in the monitoring area 2. On the other hand, if the security sensor 7 outputs a detection signal when the current security mode is the security release mode, the presence of an intruder is not determined. Information that the intruder detection unit 452 detects the intruder and information of the security sensor 7 that has output the detection signal are stored in the storage unit 44 and reported to the monitoring center 5 as an intrusion detection signal.

The face concealment detection process executed by the face concealment detection unit 453 conceals each part (eyes, nose, mouth) that is a facial feature part that can distinguish the human phase in the image data acquired by the monitoring information acquisition unit 41. It detects that there is a person (each part of the face cannot be detected), calculates position information of the detected person on the image, and stores it in the storage unit 44. The face concealment detection unit 453 can use various known methods for detecting a facial feature in a face area.

  Specifically, as the face concealment detection process, the face concealment detection unit 453 extracts the edge component of the fluctuation region labeled with the image data acquired by the monitoring information acquisition unit 41, and converts it into the face contour shape in the edge image data. An approximate elliptical edge distribution is detected, and the color information in the elliptical region surrounded by the edge distribution includes a skin color (for example, a pixel whose hue (H) component is 0 to 30 in the HSV color system). In this case, the elliptical area is extracted as a face area. Then, it is determined whether or not an edge (for example, a horizontal edge such as an eye or a mouth) that becomes a facial feature portion appears in the facial region, and the facial region where such a facial feature portion cannot be detected is covered by face concealment. Judge that there is.

  In addition, the face concealment detection unit 453 individually detects a face area to which sunglasses and a mask are attached from the luminance distribution of the face area. In the face area where the sunglasses and the mask are worn, dark pixels concentrate on the upper side, so that the luminance center of gravity in the vertical direction is lower than the center. Further, the luminance value for each line viewed in the horizontal direction is small, whereas the variance of the luminance value for each line viewed in the vertical direction is large. Furthermore, there is a property that the luminance value is extremely low depending on the part of the sunglasses. Therefore, the Y coordinate of the luminance center of gravity of the face area is below the center of the face area, and the ratio between the standard deviation in the X direction and the standard deviation in the Y direction is larger than a predetermined threshold, and the pixel having a low luminance value Is equal to or greater than the threshold value, it is determined that the image in the face area is an image of a face wearing sunglasses and a mask, and the face area is determined to be face concealment. When the face concealment detection unit 453 detects a person whose face is concealed, the face concealment detection unit 453 calculates position information on the image of the person whose face is concealed and stores it in the storage unit 44.

The behavior detection unit 454 generates tracking information for tracking the moving object image from the unattended image data stored in the storage unit 44 and the image data input from the monitoring information acquisition unit 41. Specifically, the tracking information is extracted from the reference data (unmanned image data) generated based on the monitoring image captured when there is no person and stored in the storage unit 44, and each moving object image. Feature amount. As the feature amount, a luminance histogram of a moving object image, texture information, or the like can be used. The tracking is a process for obtaining a moving trajectory for each moving object image by identifying moving object images having similar feature quantities at the preceding and following times as images of the same moving object. A common identifier (image ID) is assigned to the identified moving object image, and the feature amount is stored in association with the image ID for each identified moving object image.

  The movement trajectory is a history of the position of the moving object image in the monitoring image and is generated as a tracking result. The movement trajectory is stored in the storage unit 44 in association with the image ID for each identified moving object image.

When the face concealment detection unit 453 detects the face concealment of a person in the store area 2a, the report determination unit 455 determines that an emergency report is necessary based on the movement locus of the person detected by the behavior detection unit 454. .

The communication control unit 456 transmits an emergency notification signal to the monitoring center 5 when it is determined by the notification necessity determination unit 455 that an emergency notification is necessary. The emergency notification signal includes address information of the notification device 4. Further, the communication control unit 456 starts transmitting image data input from the monitoring camera 3 to the monitoring center 5 when it is determined that an emergency call is required. The camera number and the address information of the reporting device 4 are added as header information to the transmitted image data, and the current image data is continuously transmitted each time it is input from the monitoring camera 3. When the communication control unit 456 receives either a stop signal due to an image transmission stop input to the operation unit 43 or an image transmission stop signal transmitted from the monitoring center 5, the communication control unit 456 performs image data transmission processing to the monitoring center 5. To stop.
Further, when the intruder detection unit 452 determines that there is an intruder when the monitoring area 2 is set to the guard set mode, the communication control unit 456 transmits an intrusion detection signal to the monitoring center 5.

<Description of operation>
About the notification system 1 comprised as mentioned above, the operation | movement is demonstrated with reference to drawings. Here, the operation related to the emergency notification process by the notification device 4 will be mainly described. FIG. 3 is a flowchart showing the operation of the monitoring program repeatedly executed by the notification device 4.

  The notification device 4 accepts input of image data captured by the monitoring camera 3 from the monitoring information acquisition unit 41 at a predetermined cycle (for example, a cycle of 0.2 seconds, that is, 5 fps (frames / second)), and stores it in the storage unit 44. .

  When the monitoring program shown in FIG. 3 is executed, the face concealment detection unit 453 detects whether or not the person's face in the monitoring area 2 is concealed. (Step ST1) Specifically, as the face concealment detection process, the face concealment detection unit 453 extracts the edge component of the fluctuation region labeled with the image data acquired by the monitoring information acquisition unit 41, and the face concealment in the edge image data An elliptical edge distribution approximating the contour shape of the image is detected, and the color information in the elliptical region surrounded by the edge distribution is skin color (for example, the hue (H) component is 0 to 30 in the HSV color system). In the case of including a pixel), the ellipse area is extracted as a face area. Then, it is determined whether or not an edge (for example, a horizontal edge such as an eye or a mouth) that is a facial feature portion appears in the face area. Then, it is determined that a face area in which such a face feature portion cannot be detected is face concealment.

  As a result of the face concealment detection process, when a person whose face is concealed in the monitoring area 2 is determined (step ST2-Yes), the control unit 45 activates the behavior detection unit 454 to start the behavior detection process. The behavior detection unit 454 detects the movement trajectory of the person in the monitoring target 2 by performing image processing on the image data acquired by the monitoring information acquisition unit 41 from the time when the face concealment is detected. (Step ST3)

4 (a) and 4 (b) show images obtained by processing a video obtained by processing an image taken by the surveillance camera 3 installed on the ceiling of the store area 2a. The black circles shown in the image exemplify the movement trajectory of the visitor 102 or the customer 103. Each black circle in the figure corresponds to the center of gravity of the moving object image at each time, and data in which the coordinates of the center of gravity are arranged in time series for each moving object image is the movement locus. A black circle f1 + 1 indicates the position of the visitor 102 after 1 second from the time when the face concealment is detected, and a black circle f1 + 2 indicates the position of the visitor 102 after 2 seconds. Further, black circles f2 + 4, f3 + 5, f3 + 6, and f3 + 7 indicate the positions of the customers 103 4 to 7 seconds after the detection of the face concealment.

The report determination unit 455 determines whether or not the movement trajectory of the moving object detected by the behavior detection unit 454 matches a specific behavior pattern stored in the storage unit 44. Shift to processing to send. Specifically, the specific action pattern information is read from the storage unit 44. Then, it is determined whether or not the movement trajectory detected by the behavior detection unit 454 matches a specific behavior.

In the example shown in FIG. 4A, when the face concealment of a person in the store area 2a is detected, the action detection unit 454 performs image processing from the time when the concealment is detected, and the attendant 102 who conceals the face and The movement locus | trajectory of salesclerk 101 and customer 103 other than is detected.
An emergency call is required when the detected movement trajectory f2 + 4 of the customer 103 is at least a predetermined distance L away from the person whose face is concealed and is stationary for a predetermined period of time (that is, hiding from the thief). (Step ST5-Yes), the process proceeds to the process of transmitting an emergency notification signal.

In the example shown in FIG. 4B, the detected movement trajectory (f3 + 5, f3 + 6, f3 + 7) of the customer 103 is substantially linear at a predetermined speed or more toward the entrance / exit 23 of the monitoring area. If it is a moving action (that is, running and evacuating), it is determined that an emergency call is required (step ST5-Yes), and the process proceeds to a process of transmitting an emergency call signal.

If no other visitors are detected by the behavior detection unit 453, or if the movement trajectory is different from the specific behavior even if it is detected, it is determined that there is no need for an emergency call (step ST5). -No), the process ends.

The communication control unit 456 transmits an emergency notification signal to the monitoring center 5 (step ST6), and starts transmitting image data input from the monitoring camera 3 to the monitoring center 5 (step ST7). The transmission of the image data is continuously performed until an image transmission stop signal is input from the operation unit 43 or the monitoring center 5. When an image transmission stop signal is input from the operation unit 43 or from the monitoring center 5 (step ST8—Yes), the transmission of image data to the monitoring center 5 is stopped and the process is terminated (step ST9).

On the other hand, if it is determined in step ST5 that the notification is unnecessary (step ST5-NO), the execution of the emergency notification process is prohibited by skipping the processes in steps ST6 to ST9. Therefore, when there are more than a predetermined number of people in the store area 2a, it is possible to suppress an erroneous report of an emergency report.

  The embodiments of the present invention have been described above by way of example, but the scope of the present invention is not limited to these embodiments, and can be changed or modified according to the purpose within the scope of the claims. is there.

  For example, in the present embodiment, an example has been described in which the monitoring information acquisition unit 41 acquires image data as monitoring information of the monitoring target 2 and performs entrance detection using this image data, but the present invention is not limited to this. That is, the monitoring information is not limited to image data, and may be information that can identify and recognize the moving object of the monitoring target 2. For example, instead of the monitoring camera 3 or in addition to the monitoring camera 3, reflected light reflected by an object on the optical path by performing spatial scanning at a predetermined period while irradiating the monitoring target 2 with laser light as the monitoring means A laser scanning distance sensor that detects the position of the object by obtaining the distance data to the object existing in the area and the irradiation direction by receiving the light may be used.

  In this case, the position (distance data and irradiation direction) of an object in the monitoring area 2 is input to the monitoring information acquisition unit 41 from the laser scanning distance sensor as monitoring information. As the reference data, the position of the existing object measured during unmanned operation is stored, and the variable object is extracted and labeled from the difference between the reference data and the position of the object in the current monitoring area 2, and is tracked with the previous period. It is determined whether or not it is a new appearance object.

  In the present embodiment, as the specific action of the action of the second person, an action of moving the detected movement trajectory of the customer 103 substantially linearly at a predetermined speed or more toward the entrance / exit 23 of the monitoring area, that is, In the case of running and evacuating, an example of determining that an emergency call is required has been described, but the present invention is not limited to this. That is, the detected movement trajectory of the customer 103 may move in a substantially linear manner toward the entrance / exit 23 of the monitoring area at a speed equal to or lower than a predetermined speed, i.e., may be evacuated so as not to be found little by little behind the burglar. .

DESCRIPTION OF SYMBOLS 1 Reporting system 2 Monitoring area 2a Store area 2b Cash register counter area 3 Monitoring camera 4 Reporting device 41 Monitoring information acquisition part 42 Communication part 43 Operation part 44 Storage part 45 Control part 450 Electronic calendar part 451 Mode setting part 452 Intruder detection part 453 Face concealment detection unit 454 Action detection unit 455 Report determination unit 456 Communication control unit 5 Monitoring center 51 Center device 52 Display 6 Communication line network 7 Security sensor

Claims (3)

Image acquisition means for acquiring an image of the monitoring area;
Face concealment detection means for detecting concealment of a person's face from the acquired image information;
Action detecting means for tracking the action of a person from the acquired image information;
Storage means for storing a specific behavior of a characteristic person when a burglary case occurs in advance;
A report determination means for determining whether or not a report is necessary;
Reporting means,
The notification determination unit detects the first person whose face is concealed by the face concealment detection unit , and the behavior of a second person other than the first person detected by the behavior detection unit is the specific A notification device characterized by determining that a notification is required when it matches an action. The notification determination unit detects the first person whose face is concealed by the face concealment detection unit, and the behavior of the second person detected by the behavior detection unit is equal to or greater than a predetermined distance from the first person. The notification device according to claim 1, wherein the notification device determines that the notification is required when the action is stationary at a distant position for a predetermined time or more. The notification determination unit detects a first person whose face is concealed by the face concealment detection unit, and the behavior of the second person detected by the behavior detection unit is predetermined toward the entrance / exit of the monitoring area. The notification device according to claim 1, wherein the notification is determined to be required when the action moves substantially linearly at the above speed.