JP6824057B2 - Imaging device, control method and program of imaging device - Google Patents

Description

The present invention relates to an imaging device, a control method and a program of the imaging device.

In recent years, surveillance systems using network cameras have become widespread. Network cameras are used in a wide range of fields as surveillance cameras in large-scale public institutions and mass retailers, and there are various operation methods. There are network cameras that have various functional features to suit the operation mode. Among such network cameras, there is a network camera equipped with a wireless LAN function in order to simplify the wiring required for installation.

A network camera equipped with a wireless LAN function mainly has two types of communication modes. The first form of communication is a form of connecting to a network by connecting to an external access point as a client. As a result, the user can freely change the installation environment without worrying about wiring. In the second communication mode, the network camera itself serves as an access point, and communication is performed by connecting from another device. As a result, the user can access and set the network camera without worrying about the troublesome network environment construction and wiring even at the time of initial installation.

However, one problem with network cameras is that the security performance is reduced by installing a wireless LAN function. For example, when the network camera itself serves as an access point, anyone may be able to connect to the network within the reach of wireless radio waves. When a malicious user connects to the network, there is a risk that the video cannot be delivered normally due to an attack by an unauthorized packet or that the video data is leaked.

In Patent Document 1, the proximity of a storage medium to a wireless connection device is detected by short-range wireless communication, and wireless LAN communication is realized while the proximity is detected, thereby reducing the risk of unauthorized access by wireless LAN communication. The technology is disclosed.

JP 2015-139090

However, the technique disclosed in Patent Document 1 has a problem that a short-range wireless processing unit must be provided in addition to the wireless LAN communication processing unit, which increases resources.

The present invention has been made in view of the above problems, and an object of the present invention is to provide a technique for reducing the risk of unauthorized access to an imaging device and improving security with a simple configuration.

The imaging apparatus according to the present invention that achieves the above object is
An imaging device that can operate in a first mode of communicating with a communication device as an access point and a second mode of communicating with an external device by wire or via another wireless access point.
When the imaging device is activated in the first mode, a receiving means that accepts setting processing from the communication device and
A control means that can operate in the second mode and invalidates the function of the access point when the setting process received by the reception means is completed.
Equipped with a,
When the control means receives information from the communication device indicating that the completion button indicating the completion of the setting process displayed on the setting screen of the communication device has been pressed, the control means invalidates the function of the access point. and wherein the Rukoto turn into.

According to the present invention, it is possible to reduce the risk of unauthorized access to the image pickup apparatus and improve security with a simple configuration.

The figure which shows the structural example of the monitoring system which concerns on one Embodiment of this invention. The figure which shows the example of the internal structure of the image pickup apparatus (network camera) which concerns on one Embodiment of this invention. The flowchart which shows the procedure of the process which concerns on one Embodiment of this invention. The flowchart which shows the procedure of the AP function invalidation processing with the passage of time which concerns on one Embodiment of this invention. The figure which shows the example of the user interface of the setting completion notification which concerns on one Embodiment of this invention.

Hereinafter, embodiments will be described with reference to the drawings. The configuration shown in the following embodiments is only an example, and the present invention is not limited to the illustrated configuration.

<Overview>
In the present embodiment, an example in which the function of the access point is invalidated when the image pickup device (network camera) satisfies a specific condition (when the setting process of the image pickup device is completed while being able to connect to the outside). explain. As a result, it is possible to prevent the imaging device from operating as an access point during operation of the imaging device. Further, since the short-range wireless communication unit is not required, the risk of unauthorized access to the image pickup apparatus can be reduced and the security during operation can be improved with a simple configuration.

<System configuration>
First, a monitoring system according to an embodiment of the present invention will be described with reference to FIG. The monitoring system includes a network camera 101 which is an imaging device, a mobile terminal 102 which is a communication device, and a wireless access point 103. The wireless access point 103 is connected to the network 104. Further, the network camera 101 and the mobile terminal 102 may be connected via the wireless network 105, and the network camera 101 and the wireless access point 103 may be connected via the wireless network 106.

The network camera 101 is an imaging device capable of wireless LAN communication, and has an access point function (hereinafter, also referred to as an AP function) that operates as an access point and a terminal function (hereinafter, also referred to as a STA function) that operates as a terminal. ..

The mobile terminal 102 connects as a terminal to the network camera 101 that operates as an access point by the AP function. A network camera 101 that operates as a terminal by the STA function is connected to the wireless access point 103.

The network 104 is a network for distributing the video captured by the network camera 101 to an external device (for example, a recording server) during operation. Regarding the communication form of the network 104, it may be wired or wireless. The wireless network 105 is a wireless network for communicating between the network camera 101 and the mobile terminal 102 when the network camera 101 is set without using the network 104. The wireless network 106 is a wireless network for connecting the network camera 101 to the network 104.

<Device configuration>
Subsequently, the internal configuration of the network camera in the surveillance system according to the embodiment of the present invention will be described with reference to FIG. The network camera 101 includes an image pickup unit 201, an image processing unit 202, a system control unit 203, a storage unit 204, a wired communication processing unit 205, and a wireless communication processing unit 206. The system control unit 203 controls the operation of each processing unit by reading and executing a program stored in the storage unit 204, which is a memory, for example, a CPU. The network camera 101 can operate in the first mode of communicating with the mobile terminal 102 as an access point. It can also operate in a second mode of communicating with an external device (recording server, etc.) connected to the network 104 by wire or via another wireless access point 103. Both modes can be used together.

The image pickup unit 201 is composed of a lens, an image pickup element, and the like, and performs imaging of a subject and conversion into an electric signal. The image processing unit 202 performs image processing and compression coding processing on the electric signal converted by the imaging unit 201 to generate image data. The system control unit 203 analyzes the command transmitted to the network camera 101 and performs processing according to the command. The storage unit 204 stores set values such as image quality adjustment parameters and network settings. Therefore, even if it is restarted, it can be started using the previously set value. The wired communication processing unit 205 processes network communication by a wired LAN. The wireless communication processing unit 206 processes network communication by wireless LAN and has an AP function and a STA function. The network camera 101 in this embodiment includes at least the above processing unit.

<Processing>
Next, a processing procedure in the monitoring system according to the embodiment of the present invention will be described with reference to the flowchart of FIG. In step S301, the system control unit 203 of the network camera 101 is activated as an access point (activated in the first mode). The user connects to the network camera 101 activated as an access point via the mobile terminal 102 and makes various settings. Details of the setting items will be described later. In this embodiment, the activation method is not limited as long as the AP function is enabled.

In step S302, the system control unit 203 of the network camera 101 confirms whether there is a wired LAN connection or whether it can be connected to the wireless access point 103 (confirms whether it can operate in the second mode). If at least one of the conditions is satisfied, the process proceeds to step S303. On the other hand, if none of the conditions are satisfied, wait until the conditions are satisfied.

As a method for confirming the connection of the wired LAN, a method can be used in which the wired communication processing unit 205 electrically detects whether or not the connector of the wired LAN is connected under the control of the system control unit 203. However, this confirmation method is an example, and other methods may be used as long as it can be confirmed that communication can be performed by a wired LAN.

Further, as a method of confirming whether or not the wireless access point can be connected, the wireless communication processing unit 206 has designated the authentication method specified by the wireless communication processing unit 206 under the control of the system control unit 203 for the wireless access point 103 of the set connection destination. It is possible to use a method of confirming whether the connection can be made within a predetermined time by using the password and the password. At this time, the predetermined time may be configured so that it can be specified by the user via the mobile terminal 102.

Further, as a method of confirming whether or not the wireless access point 103 can be connected, a method of performing test recording on a recording server (not shown) which is an external device may be used. When the network camera 101 transmits a specific protocol to the recording server and the recording server receives the protocol, test recording starts. The network camera 101 acquires the result of the test recording and compares the recorded video size with the video size delivered by the network camera 101. If there is no significant difference between the two (when the difference is within a predetermined range), it can be determined that the wireless access point can be connected normally. However, this confirmation method is an example, and another method may be used as long as it can be confirmed that wireless LAN communication can be performed via the set wireless access point 103 of the connection destination.

In step S303, the system control unit 203 of the network camera 101 determines whether or not a user having administrator authority has started the setting process (authority determination process). When the user accesses the network camera 101 via the mobile terminal 102, the user has entered the user ID and password. The system control unit 203 determines whether or not the user has administrator authority by using the input information. If the user has administrator authority, the process proceeds to step S304. On the other hand, if the user does not have administrator authority, the process proceeds to step S302. However, in the present embodiment, the determination is made using the input information, but if it can be confirmed that the user has the administrator authority, another method may be used.

In step S304, the system control unit 203 of the network camera 101 controls the wireless communication processing unit 206 to invalidate the AP function. The AP function can be disabled by stopping the process that enables the AP function, but the AP function may be disabled by restarting. The detailed processing for invalidation will be described later with reference to the flowchart of FIG.

In step S305, the system control unit 203 of the network camera 101 starts the operation of the monitoring system (network camera 101). This completes the series of processing.

<Setting items>
Next, an example will be described with respect to the setting items for which the user sets the network camera 101 via the mobile terminal 102 according to the present embodiment. In this embodiment, it is assumed that the network camera 101 is initially installed, and in order to connect the network camera 101 to the network 104, it is necessary to establish the wireless network 106 using the wireless network 105.

First, in order to use the wireless network 105, the user makes settings using the wireless connection function of the mobile terminal 102. Settings related to the AP function of the network camera 101 include selection of SSID, password, and authentication method. Next, in order to set the wireless network 106, the mobile terminal 102 accesses the setting screen for setting the network camera 101, and makes the settings related to the wireless network 106. Here, the SSID, password, authentication method, etc. of the wireless access point 103 are selected. In addition, when the wireless network 105 is established, the user may make settings related to imaging from the setting screen in order to set the network camera 101 using the mobile terminal 102. For example, the angle of view can be set and the detection area of the intelligent function can be set.

<AP function invalidation process>
Subsequently, with reference to the flowchart of FIG. 4, a procedure for disabling the AP function of the network camera 101 according to the embodiment of the present invention will be described. This process is the details of the process of step S304. When disabling the AP function, if the network camera 101 automatically determines and disables it regardless of the user's intention, it may not be possible to access from the mobile terminal 102 during the setting. Therefore, in the present embodiment, whether or not the network camera 101 notifies the user of a confirmation request for confirming whether or not the setting is completed at a specific timing and disables the AP function according to the confirmation response. Is determined by the network camera 101. The specific timing of notification is, for example, the timing when a predetermined time has elapsed from the activation of the network camera 101 or the start of the setting operation.

In step S401, the network camera 101 starts time counting (counts the elapsed time) according to the start of the setting process. Alternatively, it may be configured to start the time count after being activated as the access point in step S301.

In step S402, the network camera 101 confirms whether the time count has reached a predetermined time (for example, t seconds). It is assumed that the value of the predetermined time (for example, t seconds) can be specified by the user via the mobile terminal 102. If the predetermined time has been reached, the process proceeds to step S403. If the specified time has not been reached, wait until it is reached.

In step S403, the network camera 101 notifies the user via the mobile terminal 102 that the setting changeable time has elapsed. At this time, as a notification method, you may inquire whether to continue the setting change operation as it is.

In step S404, the network camera 101 determines whether or not to continue the setting change operation based on the response from the mobile terminal 102. In response to the notification that the setting changeable time has passed in step S403 or the inquiry as to whether or not to continue the setting change operation, the user does not continue the setting change operation via the mobile terminal 102 (the operation is completed). If there is a response to that effect, the process proceeds to step S405. On the other hand, if there is no response for a predetermined time or if there is a response to continue the setting change operation (the operation is not completed), the process returns to step S401 and the counting is started again.

In step S405, the network camera 101 reflects the setting contents changed by the setting change operation to the entire monitoring system. Until this step is passed, even if the setting is changed on the setting screen, it will not be reflected in the monitoring system. In step S406, the network camera 101 disables the AP function. This completes the series of processing.

In the AP function invalidation process, a method of confirming with the user whether the setting process is completed may be used. For example, as shown in FIG. 5, a pop-up display 500 for confirming the completion of the setting process is displayed by the user when a specific condition is satisfied (for example, the apply button provided on the setting screen is pressed). It is displayed on the mobile terminal 102. The pop-up display 600 includes a completion button for instructing the completion of the setting process and a button for continuing the setting process, and is configured to accept user selection. When the completion button is pressed, the network camera 101 is notified to that effect. In that case, the network camera 101 may perform the reflection processing of the setting contents of S405 through the above processing instead of the processing of S401-S404.

Further, it is not essential to confirm that the user described in step 303 of FIG. 3 has administrator authority, and the setting contents are reflected according to the connection confirmation in step 302 and the completion of the setting process. It may be configured to disable the function as an access point.

As described above, the imaging device (network camera) according to the present embodiment is in the first mode of communicating with the communication device (mobile terminal) as an access point, or externally by wire or via another wireless access point. An image pickup device that can operate in a second mode that communicates with a device (recording server, etc.), and if the image pickup device is started in the first mode, whether the image pickup device can operate in the second mode. When the determination is made, the operation is possible in the second mode, and the setting process of the image pickup device via the communication device is completed, the control for invalidating the function of the access point is performed.

This makes it possible to prevent the image pickup device (network camera) from operating as an access point when the image pickup device (network camera) is in operation. In addition, no additional resources such as a short-range wireless processing unit are required. Therefore, it is possible to reduce the risk of unauthorized access to the image pickup apparatus and improve the security during operation with a simple configuration.

Further, even when the function of the access point is disabled, it is possible to communicate with the external device in the second mode, so that it is possible to prevent the connection from being unable to connect to the outside after the invalidation. If the network camera cannot be connected to the outside at all, it will not be possible to perform recovery work when a setting error is found, but such a situation can be prevented.

(Other embodiments)
The present invention supplies a program that realizes one or more functions of the above-described embodiment to a system or device via a network or storage medium, and one or more processors in the computer of the system or device reads and executes the program. It can also be realized by the processing to be performed. It can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

101: Network camera, 102: Mobile terminal, 103: Wireless access point, 104: Network for distributing video to recording server, 105: Wireless network for setting from mobile terminal, 106: Network camera distributes video Wireless network to

Claims (7)

An imaging device that can operate in a first mode of communicating with a communication device as an access point and a second mode of communicating with an external device by wire or via another wireless access point.
When the imaging device is activated in the first mode, a receiving means that accepts setting processing from the communication device and
A control means that can operate in the second mode and invalidates the function of the access point when the setting process received by the reception means is completed.
Equipped with a,
When the control means receives information from the communication device indicating that the completion button indicating the completion of the setting process displayed on the setting screen of the communication device has been pressed, the control means invalidates the function of the access point. imaging device according to claim Rukoto turn into. The first aspect of claim 1, further comprising a determination means for determining whether or not the second mode can be operated by electrically detecting the connection of the wired LAN connector to the image pickup apparatus. Imaging device. The first aspect of claim 1, further comprising a determination means for determining whether or not the operation is possible in the second mode by confirming whether or not the other wireless access point can communicate with the other wireless access point within a predetermined time. Imaging device. The external device is a recording server.
A distribution means for distributing an image to the recording server to record the image distributed by the image pickup apparatus,
An acquisition means for acquiring the recording result of the video distributed by the distribution means, and
Based on the recording result acquired by the acquisition means, a determination means for determining whether or not the operation is possible in the second mode, and
The imaging device according to claim 1, further comprising. The determination means determines that the second mode can be operated when the difference between the video size delivered by the distribution means and the video size recorded by the recording server is within a predetermined range. The image pickup apparatus according to claim 4. A control method for an imaging device that can operate in a first mode of communicating with a communication device as an access point and a second mode of communicating with an external device by wire or via another wireless access point.
A reception process for accepting a setting process from the communication device when the image pickup device is activated in the first mode, and
A control step that can operate in the second mode and invalidates the function of the access point when the setting process received by the reception process is completed.
Have a,
In the control step, when information indicating that the completion button indicating the completion of the setting process displayed on the setting screen of the communication device has been pressed is received from the communication device, the function of the access point is invalidated. A control method characterized by the conversion . A program for causing a computer to function as each means of the imaging device according to any one of claims 1 to 5 .

Images