KR102157747B1 - An apparatus for generating access and control history of personal video information and method thereof - Google Patents

Abstract

In a personal video information network system, a method of generating a connection history and an operation history of personal video information is provided. The method includes the steps of acquiring connection behavior information and manipulation behavior information for at least one of an image data generating device, an image data storage device, and an image data management device, based on mirroring network communication packet data from a switch, and And generating a history of access to personal image information based on the behavior information, and generating a history of manipulation for a device that processes personal image information based on the manipulation behavior information.

Description

Method and apparatus for generating the access history and operation history of personal video information {AN APPARATUS FOR GENERATING ACCESS AND CONTROL HISTORY OF PERSONAL VIDEO INFORMATION AND METHOD THEREOF}

The present invention relates to personal image information, and more particularly, to a method and apparatus for generating and storing an access history for personal image information and an operation history related to a device for processing personal image information.

With the development of networks, transmission and reception of various information are being actively performed. However, in other aspects of improving the convenience of such information exchange, the recognition that the leakage or misuse of sensitive information such as personal information should be prevented has already spread widely, especially in recent years, the universalization of video recording devices and the development of communication performance and speed. Accordingly, as various image information is transmitted and received through a network, thorough management of personal image information, which may include personal sensitive information, is required.

In relation to this, a network handling image information typically includes an image management system such as a VMS (Video Management System), and access to image information or an image information generating device (e.g., CCTV) via the VMS. Control. Conventionally, in order to protect sensitive personal image information, a method of receiving and analyzing the access history of image information or the operation history of the image information processing device from the above VMS has been attempted, but the above method is dependent on the VMS. There was a problem in that more reliable protection of information could not be achieved.

Korean Patent Publication No. 2018-0136625 ("CCTV video security system using security authentication technology combining quantum and pseudorandom numbers," Chae Seoryeong)

An object of the present invention for solving the above-described problem is an access history and an independent video management device such as a video management system (VMS) within a personal video information network system that provides personal video information. It is to provide a personal image information access history and a method of generating an operation history capable of generating an operation history for an image processing device.

Another object of the present invention for solving the above-described problem is a history of access to video information independently of a video management device such as a video management system (VMS) within a personal video information network system that provides personal video information And an apparatus for generating personal image information access history and operation history capable of generating an operation history for an image processing device.

However, the problem to be solved of the present invention is not limited thereto, and may be variously extended without departing from the spirit and scope of the present invention.

A method of generating personal image information access history and manipulation history according to an embodiment of the present invention includes: one or more image data generating devices configured to transmit and receive data via one or more switches, one or more image data storage devices, and one or more image data management A method of generating a connection history and operation history of personal image information, performed by a computing device, within a personal image information network system including a device, based on mirroring network communication packet data from the one or more switches, Acquiring connection behavior information for at least one of the image data generating device, the image data storage device, and the image data management device; Acquiring manipulation behavior information for at least one of the image data generating device, the image data storage device, and the image data management device based on mirroring network communication packet data from the one or more switches; And generating an access history for the personal image information based on the access behavior information, and generating a manipulation history for a device that processes the personal image information based on the manipulation behavior information.

According to an aspect, the video data management device is a VMS (Video Management System), and the method includes obtaining the access behavior information and the manipulation behavior information based on mirroring packet data from the switch, It may be configured to generate an access history and an operation history for the personal image information independently of the operation of the VMS.

According to one aspect, the manipulation behavior information is based on the IP address of the image data generating device without passing through the VMS, and is directly connected to the image data generating device to manipulate the operation of the image data generating device. May include information about.

According to an aspect, the manipulation behavior information may include searching for any one of the plurality of image data generating devices; Selecting any one of the plurality of image data generating devices; Operating the image data generating device to zoom in or zoom out; And information about adjusting the photographing direction of the image data generating device.

According to an aspect, a connection to at least one of the image data generating device, the image data storage device, and the image data management device is performed by a personal device, and the access behavior information includes: identification information of the personal device; Access time; Connection session length; And the number of access attempts during a predetermined time period.

According to an aspect, the connection to at least one of the image data generating device, the image data storage device, and the image data management device is performed by a personal device, and the personal device is the image data generating device, the image data storage device. An input device configured to take a facial image of a user of the personal device when attempting to access at least one of the device and the image data management device, wherein the image data generating device, the image data storage device, and the image data The access to at least one of the management devices may be allowed in response to a determination that the facial image matches any one of the user facial image data that are previously stored for access permission.

According to an aspect, the access permission user facial image data may be included in a facial recognition solution installed in the personal device, or stored in a remote server connected to the personal device through a communication network.

According to an aspect, the switch includes: a plurality of hub switches respectively coupled to the image data generating device, the image data storage device, and the image data management device; And a backbone switch in which one side is coupled to the plurality of hub switches and the other side is coupled to a manager device of the personal video information network system.

According to an aspect, the packet mirroring may be performed from the backbone switch.

According to an aspect, based on comparing the generated access history and manipulation history with a predetermined rule, determining whether an attempt to misuse or leak the personal image information has occurred may be further included.

An apparatus for generating access history and operation history of personal image information according to another embodiment of the present invention includes one or more image data generating devices, one or more image data storage devices, and one or more image data configured to transmit and receive data via one or more switches. A device for generating an access history and a manipulation history of personal image information, operating within a personal image information network system including a management device, wherein the device includes a processor, a memory and a transmission/reception unit, and the processor, through the transmission/reception unit Based on mirroring network communication packet data from the one or more switches, access behavior information for at least one of the image data generating device, the image data storage device, and the image data management device is obtained, and through the transmission/reception unit Based on the mirroring of network communication packet data from the one or more switches, obtaining manipulation behavior information for at least one of the image data generating device, the image data storage device, and the image data management device, and the access behavior It may be configured to generate a history of access to the personal image information based on information, and to generate a history of manipulation of a device that processes the personal image information based on the manipulation behavior information.

The disclosed technology can have the following effects. However, since it does not mean that a specific embodiment should include all of the following effects or only the following effects, it should not be understood that the scope of the rights of the disclosed technology is limited thereby.

According to a method and apparatus for generating personal video information access history and operation history according to an embodiment of the present invention for achieving the above object, in a personal video information network system that provides personal video information, for example, VMS (Video Management System), an access history for image information and an operation history for an image processing device can be generated independently of an image management device.

Therefore, it is possible to create a history of access to image information and operation history of an image information processing device without omission, and a direct access path to an image information generating device (e.g., CCTV) that cannot be created in an existing image management system. It is also possible to create a history for manipulation actions through.

1 is a schematic configuration diagram of a personal video information network system according to an embodiment of the present invention.
2 is an exemplary detailed configuration diagram of the personal video information network system of FIG. 1.
3 is a block diagram showing the configuration of an apparatus for generating personal image information access history and operation history according to an embodiment of the present invention.
4 is an exemplary implementation example of the device of FIG. 3.
5 is a flowchart of a method for generating personal image information access history and manipulation history according to an embodiment of the present invention.
6 is a block diagram illustrating an exemplary hardware configuration of a computing device according to an embodiment of the present invention.

In the present invention, various modifications may be made and various embodiments may be provided, and specific embodiments will be illustrated in the drawings and described in detail.

However, this is not intended to limit the present invention to a specific embodiment, it is to be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention.

Terms such as first and second may be used to describe various elements, but the elements should not be limited by the terms. These terms are used only for the purpose of distinguishing one component from another component. For example, without departing from the scope of the present invention, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element. The term and/or includes a combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being "connected" or "connected" to another component, it is understood that it may be directly connected or connected to the other component, but other components may exist in the middle. Should be. On the other hand, when a component is referred to as being "directly connected" or "directly connected" to another component, it should be understood that there is no other component in the middle.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In the present application, terms such as "comprise" or "have" are intended to designate the presence of features, numbers, steps, actions, components, parts, or combinations thereof described in the specification, but one or more other features. It is to be understood that the presence or addition of elements or numbers, steps, actions, components, parts, or combinations thereof, does not preclude in advance.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs. Terms such as those defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted as an ideal or excessively formal meaning unless explicitly defined in this application. Does not.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings. In describing the present invention, in order to facilitate an overall understanding, the same reference numerals are used for the same elements in the drawings, and duplicate descriptions for the same elements are omitted.

As described above, a network system handling image information typically includes an image management system such as a VMS (Video Management System), and access to image information or an image information generating device (e.g., CCTV ) Control. Conventionally, in order to protect sensitive personal image information, a method of receiving and analyzing the access history of image information or the operation history of the image information processing device from the above VMS has been attempted, but the above method is dependent on the VMS. There was a problem in that more reliable protection of information could not be achieved.

The present invention is to solve such a problem, in a personal video information network system that provides personal video information, for example, a video management system such as a VMS (Video Management System), independent access history and video information It provides a personal image information access history and a method of generating an operation history capable of generating an operation history for an image processing device.

Therefore, it is possible to create a history of access to image information and operation history of an image information processing device without omission, and a direct access path to an image information generating device (e.g., CCTV) that cannot be created in an existing image management system. It is also possible to create a history for manipulation actions through.

More specifically, the present invention independently creates a history of access and manipulation of related systems and devices for protecting personal information and personal image information, and analyzes the generated data to misuse personal information and personal image information. Can be prevented and proactively respond to spill attempts.

According to one aspect, the present invention can generate an image information access history and an operation history of an image information processing device (eg, CCTV) without omission.

In addition, the connection history and operation history can be generated without assistance from other systems (eg, video management system: including Video Management System). In other words, it is possible to improve the (subordinate) method depending on the conventional other system for taking over the connection history and the camera operation history from the image management system and analyzing it.

On the other hand, according to an aspect of the present invention, a history may be generated for manipulation of a direct camera (CCTV) access path that cannot be generated in an existing image management system. In other words, it is possible to create a history not only of manipulation through VMS, but also of manipulation by directly connecting to an IP camera.

In addition, according to an aspect, in generating the video information access history, mirroring may be set at the network switch end and the mirrored communication packet may be analyzed to generate a history of access behavior. It is possible to create a history of manipulation (operation) behavior by setting up mirroring of the image information processing device (eg, CCTV included) operation (operation) history at the network switch level and analyzing the mirrored communication packets.

1 is a schematic configuration diagram of a personal video information network system according to an embodiment of the present invention. As shown in FIG. 1, the personal video information network system according to an embodiment of the present invention includes at least one video data generating device 10 configured to transmit and receive data via at least one switch 40, and at least one video. A data storage device 20 and one or more image data management devices 30 may be included.

The image data generating device 10 may be a device that generates image data through photographing, such as a CCTV camera. In addition, the image data generating apparatus 10 may be an IP camera capable of transmitting and controlling information through a network.

The image data storage device 20 may be a storage medium capable of storing generated image data. Also, the image data storage device 20 may be a network storage device configured to receive and store image information through a network, such as, for example, a Network Video Recorder (NVR).

The image data management device 30 may be a device for managing image information in a network that provides image information, such as a video management system (VMS). As noted above, in a normal video network system, in order to use video information, a user can access the video data management device 30 to use video information, and also, for example, to video information processing devices including CCTV. The manipulation may be performed through the image data management device 30.

The switch 40 may be provided to configure a network for transmitting and receiving information between a plurality of devices included in the image information network. As shown in FIG. 2, which is an exemplary implementation, the switch 40 includes a plurality of devices included in the network and one or more hub switches 41-1, 41-2, 41-3, and 41 connected to each other. -4, 41-5, 41-6, 45-1, 45-3) and backbone switch 43 can be included.

Referring back to FIG. 1, the switch 40 may be more communicatively connected with the personal device 60. The image information in the image information network may be configured to provide image information to a user, such as, for example, a control officer or a police officer, and the users may be configured to access the network using each personal device 60.

In addition, the switch 40 may be connected to be more communicatively connected with the manager device 70. The administrator of the video information network may access the network through the manager device 70 to monitor the overall network operation status, and adjust various settings for system operation, including security settings.

The method of generating a connection history and operation history of personal image information according to an embodiment of the present invention may be performed by a computing device, and the computing device may be, for example, the connection and operation history generation device 50 of FIG. 1. And can be connected to the switch 40 and communicatively.

5 is a flowchart of a method for generating personal image information access history and manipulation history according to an embodiment of the present invention. Hereinafter, a method of generating personal image information access history and manipulation history according to an embodiment of the present invention will be described in more detail with reference to FIGS. 1 and 5.

As shown in Figure 5, the method according to an embodiment of the present invention, based on first mirroring the network communication packet data from one or more switches 40, the image data generating device 10, the image data storage device Access behavior information for at least one of (20) and the image data management device 30 may be obtained (step 510).

As shown in FIG. 1, the image data generating device 10, the image data storage device 20, and the image data management device 30 are all connected to the switch 40 so as to be communicatively connected, so the image data generating device 10 ), the video data storage device 20 and the video data management device 30 may all be configured to pass through the switch 40. For example, a computing device such as a connection and operation history generation device 50 is communicatively coupled to the switch 40 to provide an image data generation device 10, an image data storage device 20, and an image data management device 30. ) Can mirror data packets related to access behavior for at least one of, and based on the mirrored data, at least one of an image data generating device 10, an image data storage device 20, and an image data management device 30 For, connection behavior information can be obtained.

Referring back to FIG. 5, based on mirroring network communication packet data from one or more switches 40, at least one of the image data generating device 10, the image data storage device 20, and the image data management device 30 For one, manipulation behavior information may be obtained (step 530).

As mentioned above, since the image data generating device 10, the image data storage device 20, and the image data management device 30 are all connected to the switch 40 to be communicatively connected, the image data generating device 10, the image data All communication packets for control or manipulation of the data storage device 20 and the image data management device 30 may be configured to pass through the switch 40. For example, a computing device such as a connection and operation history generation device 50 is communicatively coupled to the switch 40 to provide an image data generation device 10, an image data storage device 20, and an image data management device 30. ) Can mirror data packets related to the manipulation of at least one of, and based on the mirrored data, at least one of an image data generating device 10, an image data storage device 20, and an image data management device 30 For, operation behavior information can be obtained.

Referring back to FIG. 5, the present invention according to an aspect generates a connection history for personal image information based on the access behavior information obtained through mirroring as above, and based on the manipulation behavior information obtained through mirroring, For example, an operation history for a device that processes personal image information, such as at least one of the image data generating device 10, the image data storage device 20, and the image data management device 30 may be generated (step 530). ). In generating the connection history and/or operation history, first classify or filter the mirrored network communication packet data into information related to the connection behavior and/or the information related to the operation behavior, and the classified or filtered information is determined in advance. The connection history and/or operation history can be generated by generating standardized access behavior information and/or standardized operation information by standardizing based on rules.

According to an aspect, the video data management apparatus 30 may be a Video Management System (VMS), and the method for generating personal video information access history and operation history according to an embodiment of the present invention is, as described above, with a switch ( From 40), by acquiring connection behavior information and manipulation behavior information based on mirroring packet data, it is possible to create a connection history and manipulation history for personal image information independently of the operation of the VMS 30. In addition to generating an access history and a manipulation history for personal image information independently of the operation of the VMS 30, the method according to an embodiment of the present invention provides an image data generating device 10 and/or an image without going through a VMS. It is possible to obtain information about an act of accessing the data storage device 20 and information about an act of manipulating the image data generating device 10 and/or the image data storage device 20 without going through a VMS.

For example, the video data generating device 10 may be an IP camera, and access to the IP camera without going through the video data management device 30 such as a VMS (e.g., direct access using the IP address of the IP camera) ), manipulating the IP camera or intercepting the video data generated by the IP camera may occur. In the case of receiving and analyzing the operation and connection-related history from the video data management apparatus 30 such as a conventional VMS, it is impossible to monitor the operation of directly connecting to an IP camera or acquiring an image. A method according to an embodiment of the present invention provides access to devices that process personal image information, such as at least one of the image data generating device 10, the image data storage device 20, and the image data management device 30. By mirroring the network packet data from the switch 40, which is configured to ensure that the data packet for the network is routed, log in an independent way that does not depend on the log of the VMS or NAC (Network Access Control) equipment or other systems (e.g. For example, it may include a connection history and an operation history). Therefore, not only the operation of the camera (CCTV) using the image data management device 30 such as VMS, but also the act of directly connecting to the camera (CCTV) (for example, a method of hitting and connecting the camera IP address on the web) History can also be created. In other words, the acquired manipulation behavior information is information about the behavior of manipulating the operation of the image data generating device by directly accessing the image data generating device based on the IP address of the image data generating device without going through the VMS, or image data. It may include information about an act of accessing the generating device or information about an act of leaking an image from the image data generating device.

Meanwhile, according to an aspect, the manipulation behavior information includes searching for any one of the plurality of image data generating devices, selecting any one of the plurality of image data generating devices, and the image data generating device zooming in ( It may include at least one of information about manipulating to perform zoom in) or zooming out, and adjusting a photographing direction of the image data generating apparatus. However, the manipulation action information is not limited to the above actions, and may include information on an arbitrary action about an arbitrary device that processes image data.

Referring back to FIG. 1, in the personal image information network system according to an aspect of the present invention, the personal device 60 may be communicatively connected to the switch 40. Users who use the personal image information network system are configured to perform access to at least one of the image data generating device 10, the image data storage device 20, and the image data management device using their personal device 60. Can be. The personal device 60 may include, for example, a desktop PC, a notebook PC, a laptop, a smart phone, and a tablet, but is not limited thereto, and may be implemented as a computing device capable of connecting to any network.

Here, the access behavior information may include identification information of a personal device, information about access time, information about the length of a connection session, and the number of access attempts during a predetermined time period, and includes information related to arbitrary access behavior. can do.

In addition, according to an aspect, each of the personal devices 60 is a personal device when attempting to access at least one of the image data generating device 10, the image data storage device 20, and the image data management device 30 It may be configured to include an input device configured to capture a facial image of a user of 60. When a user attempts to access at least one of the image data generating device 10, the image data storage device 20, and the image data management device 30 using the personal device 60, the captured facial image is The personal device 60 is at least one of the image data generating device 10, the image data storage device 20, and the image data management device 30 only when it is determined that it matches any one of the stored access permission user facial image data. Can be configured to allow access to

Here, the determination as to whether to allow access and/or the storage of the user's facial image data to allow access is not limited to being performed on a specific device. For example, the access-allowed user facial image data may be configured to be included in a facial recognition solution installed on a personal device, and may be configured to be stored in a separate remote server connected through a network, or the aforementioned image data It may be stored in at least one of the generating device 10, the image data storage device 20, and the image data management device 30. In addition, the determination as to whether or not the captured facial image is included in the pre-stored access permission user facial image data can also be performed by a facial recognition solution installed in a personal device, or the image data generating device 10, image data storage It may be directly performed by at least one of the device 20 and the image data management device 30 to determine whether to allow access. In each of the embodiments, the photographed facial image information is configured to be appropriately transmitted to at least one of the remote server, the image data generating device 10, the image data storage device 20, and the image data management device 30 for comparison. I can.

Referring back to FIG. 5, the method according to an aspect of the present invention is based on comparing the generated connection history and manipulation history with a predetermined rule, and misuse or leakage of personal video information handled by the personal video information network system. Whether or not an attempt has occurred can be determined (step 540). Accordingly, the administrator of the personal video information network system can preemptively respond to the misuse and/or leakage of video information. Here, the determination of whether an attempt to misuse or leak personal image information based on the access history and manipulation history may be configured to employ any one of arbitrary abnormal behavior detection methods. For example, based on a rule-based technique that determines the occurrence of misuse or leakage attempts for an access attempt of a personal device with identification information for which access is not permitted, or an abnormal state occurrence determination model for a normal state learned based on AI. AI-based techniques can be used, and various techniques can be used without being limited to these detection techniques.

2 is an exemplary detailed configuration diagram of the personal video information network system of FIG. 1. The method of generating personal image information access history and manipulation history according to an embodiment of the present invention may be applied to various network systems as shown in FIG. 2. In the personal video information network system, the video data generating device 10 of FIG. 1 is, for example, a CCTV 10-1 for a method as shown in FIG. 2, a CCTV 10-2 for parking and stopping, and illegal garbage. It may also include one or more of CCTV (10-3) for surveillance. In addition, the image data storage device 20 of FIG. 1 may include one or more of an image storage distribution server 20-1 and an image storage storage 20-2 as illustrated in FIG. 2. In addition, the video data management device 30 may be a video management system (VMS).

In addition, the personal device 60 of FIG. 1 may be used, for example, by various users, and may be, for example, a computing device used by the control personnel 60-1 and 60-2 working in the control center. . Or it may be a computing device used by authorized police officers 60-3.

The personal image information protection manager 70 may be configured to access the switch 40 of the network system based on the manager device. The switch 40 includes a plurality of hub switches 41-1, 41-2, and 41-3 coupled to the video data generating device 10, the video data storage device 20, and the video data management device 30, respectively. , 41-4, 41-5, 41-6) and a backbone switch in which one side is coupled with a plurality of hub switches, and the other side is coupled with the manager device 70 of the personal video information network system It may include. In addition, each of the hub switches 45-1 and 45-3 may be disposed between the personal device 60 and the manager device 70 and the backbone switch.

Packet mirroring for information collection according to an embodiment of the present invention may be configured to be performed from, for example, a backbone switch, but is not limited thereto, and may be performed by any one of the hub switches.

3 is a block diagram showing the configuration of an apparatus for generating personal image information access history and operation history according to an embodiment of the present invention. As shown in FIG. 3, the personal image information access history and operation history generating apparatus 50 according to an embodiment of the present invention includes a transmission/reception unit 51, a processor 53, a database 55, and a memory 57. ) Can be configured to include.

The device 50 for generating the access history and manipulation history of personal image information is one or more image data generating devices configured to transmit and receive data via one or more switches as shown in FIG. 1 or 2, and store one or more image data. It can operate within a personal video information network system including a device and one or more video data management devices, and the processor 53 is based on mirroring network communication packet data from one or more switches through the transceiver 51 Based on acquiring connection behavior information for at least one of an image data generating device, an image data storage device, and an image data management device, and mirroring network communication packet data from one or more switches through the transceiver 51, Acquires manipulation behavior information for at least one of an image data generating device, an image data storage device, and an image data management device, and generates access history for personal image information based on the access behavior information, and based on the manipulation behavior information It may be configured to generate an operation history for a device that processes personal image information.

The specific operation of the apparatus for generating personal image information access history and manipulation history according to an embodiment of the present invention may follow at least a part of the method for generating personal image information access history and manipulation history according to an embodiment of the present invention described above. have.

4 is an exemplary implementation example of the device of FIG. 3. As shown in FIG. 3, a storage medium 460 may be included in the device 400 according to an embodiment of the present invention, and log data is generated on the device 400 through packet extraction, filtering, analysis, and storage. The application 410, the J2EE WAS 420, and the Java VM 430 may be driven. Such functions may be driven by, for example, a single processor or a plurality of processors. The database 440 included in the device may be configured to store, for example, a database on access permission facial information for providing to processing devices of image information, or configured to store access history and operation history, It may be implemented as a space set on 460. Meanwhile, the generation and storage of the history according to one aspect may be implemented by the operating system (OS) 450.

6 is a block diagram illustrating an exemplary hardware configuration of a computing device or system according to an embodiment of the present invention. Referring to FIG. 6, the computing system 600 may include a flash storage 610, a processor 620, a RAM 630, an input/output device 640, and a power supply device 650. In addition, the flash storage 610 may include a memory device 611 and a memory controller 612. Meanwhile, although not shown in FIG. 6, the computing system 600 may further include ports capable of communicating with a video card, a sound card, a memory card, a USB device, or the like, or with other electronic devices. .

The computing system 600 may be implemented as a personal computer, or may be implemented as a portable electronic device such as a notebook computer, a mobile phone, a personal digital assistant (PDA), and a camera.

Processor 620 may perform certain calculations or tasks. According to an embodiment, the processor 620 may be a micro-processor or a central processing unit (CPU). The processor 620 is connected to the RAM 630, the input/output device 640 and the flash storage 610 through a bus 660 such as an address bus, a control bus, and a data bus. Communication can be performed.

According to an embodiment, the processor 620 may also be connected to an expansion bus such as a Peripheral Component Interconnect (PCI) bus.

The RAM 630 may store data necessary for the operation of the computing system 600. For example, random access memory of any type, including DRAM, mobile DRAM, SRAM, PRAM, FRAM, MRAM, and RRAM It can be used as 630.

The input/output device 640 may include an input means such as a keyboard, a keypad, and a mouse, and an output means such as a printer and a display. The power supply device 650 may supply an operating voltage required for the operation of the computing system 600.

The above-described method according to the present invention may be implemented as a computer-readable code on a computer-readable recording medium. The computer-readable recording medium includes all kinds of recording media in which data that can be decoded by a computer system is stored. For example, there may be read only memory (ROM), random access memory (RAM), magnetic tape, magnetic disk, flash memory, optical data storage device, and the like. In addition, the computer-readable recording medium can be distributed to a computer system connected through a computer communication network, and stored and executed as code that can be read in a distributed manner.

Although described above with reference to the drawings and examples, it does not mean that the protection scope of the present invention is limited by the drawings or examples, and those skilled in the art It will be appreciated that various modifications and changes can be made to the present invention without departing from the spirit and scope.

Specifically, the described features may be implemented in digital electronic circuitry, or computer hardware, firmware, or combinations thereof. Features may be executed in a computer program product implemented in storage in a machine-readable storage device, for example, for execution by a programmable processor. And the features can be performed by a programmable processor executing a program of directives to perform the functions of the described embodiments by operating on input data and generating output. The described features include at least one programmable processor, at least one input device, and at least one output device coupled to receive data and directives from the data storage system and to transmit data and directives to the data storage system. It can be executed within one or more computer programs that can be executed on a programmable system including. A computer program includes a set of directives that can be used directly or indirectly within a computer to perform a specific action on a given result. A computer program is written in any form of a programming language, including compiled or interpreted languages, and is included as a module, element, subroutine, or other unit suitable for use in another computer environment, or as a independently operable program. It can be used in any form.

Suitable processors for execution of a program of directives include, for example, both general and special purpose microprocessors, and either a single processor or multiple processors of a different type of computer. Storage devices suitable for implementing computer program directives and data implementing the described features are, for example, semiconductor memory devices such as EPROM, EEPROM, and flash memory devices, magnetic devices such as internal hard disks and removable disks. Devices, magneto-optical disks, and all types of non-volatile memory including CD-ROM and DVD-ROM disks. The processor and memory may be integrated within application-specific integrated circuits (ASICs) or added by ASICs.

The present invention described above is described on the basis of a series of functional blocks, but is not limited by the above-described embodiments and the accompanying drawings, and various substitutions, modifications and changes within the scope not departing from the technical spirit of the present invention It will be apparent to those of ordinary skill in the art to which this invention pertains.

Combinations of the above-described embodiments are not limited to the above-described embodiments, and various types of combinations as well as the above-described embodiments may be provided according to implementation and/or need.

In the above-described embodiments, the methods are described on the basis of a flowchart as a series of steps or blocks, but the present invention is not limited to the order of steps, and certain steps may occur in a different order or concurrently with those described above. have. In addition, those of ordinary skill in the art understand that the steps shown in the flowchart are not exclusive, other steps are included, or one or more steps in the flowchart may be deleted without affecting the scope of the present invention. You can understand.

The above-described embodiments include examples of various aspects. Although not all possible combinations for representing the various aspects can be described, those of ordinary skill in the art will recognize that other combinations are possible. Accordingly, the present invention will be said to include all other replacements, modifications and changes falling within the scope of the following claims.

Claims (11)

At least one video data generating device configured to transmit and receive data via one or more switches, at least one video data storage device, and at least one video data management device, wherein the video data management device is a VMS (Video Management System), the A method of generating an access history and operation history of personal video information, performed by a computing device, within a personal video information network system configured to perform control of the one or more video data generating devices through a VMS,
Acquiring access behavior information for at least one of the image data generating device, the image data storage device, and the image data management device based on mirroring network communication packet data from the one or more switches;
Based on mirroring network communication packet data from the one or more switches, operation behavior information for at least one of the image data generating device, the image data storage device, and the image data management device-the manipulation behavior information, the Acquiring-including information on an action of manipulating an operation of the image data generating device by directly accessing the image data generating device based on the IP address of the image data generating device without going through a VMS; And
Generating an access history for the personal image information based on the access behavior information and generating an operation history for a device processing the personal image information based on the manipulation behavior information,
By acquiring the connection behavior information and the manipulation behavior information based on mirroring packet data from the switch, configured to generate a connection history and a manipulation history for the personal image information independently from the operation of the VMS, How to create personal video information access history and manipulation history.
delete delete The method of claim 1,
The above operation behavior information,
Searching for any one of the plurality of image data generating devices;
Selecting any one of the plurality of image data generating devices;
Operating the image data generating device to zoom in or zoom out; And
Personal video information access history and operation history generating method comprising information on adjusting the photographing direction of the video data generating device.
The method of claim 1,
Access to at least one of the image data generating device, the image data storage device, and the image data management device is performed by a personal device,
The connection behavior information,
Identification information of the personal device;
Access time;
Connection session length; And
Personal video information access history and operation history generation method, including the number of attempts to access during a predetermined time period.
The method of claim 1,
Access to at least one of the image data generating device, the image data storage device, and the image data management device is performed by a personal device,
The personal device includes an input device configured to take a facial image of a user of the personal device when attempting to access at least one of the image data generating device, the image data storage device, and the image data management device,
Access to at least one of the image data generating device, the image data storage device, and the image data management device is allowed in response to a determination that the facial image matches any one of the user facial image data stored in advance. , Personal video information access history and operation history generation method.
The method of claim 6,
The access-allowed user facial image data are included in a facial recognition solution installed in the personal device, or stored in a remote server connected to the personal device through a communication network, a method for generating personal image information access history and operation history.
The method of claim 1,
The switch,
A plurality of hub switches respectively coupled to the image data generating device, the image data storage device, and the image data management device; And
One side is coupled to the plurality of hub switches, the other side comprising a backbone switch coupled to the manager device of the personal video information network system, personal video information access history and operation history generating method.
The method of claim 8,
The packet mirroring is performed from the backbone switch, a method for generating personal video information access history and operation history.
The method of claim 1,
Based on comparing the generated access history and manipulation history with a predetermined rule, further comprising the step of determining whether misuse or leakage attempt of the personal video information has occurred, personal video information access history and manipulation history generation method .
At least one video data generating device configured to transmit and receive data via one or more switches, at least one video data storage device, and at least one video data management device, wherein the video data management device is a VMS (Video Management System), the An apparatus for generating access history and manipulation history of personal video information, operating within a personal video information network system configured to perform control of the at least one video data generating device through a VMS,
The device includes a processor, a memory, and a transceiver,
The processor,
On the basis of mirroring network communication packet data from the one or more switches through the transmission/reception unit, access behavior information for at least one of the image data generating device, the image data storage device, and the image data management device is obtained,
Based on the mirroring of network communication packet data from the at least one switch through the transmission/reception unit, operation behavior information for at least one of the image data generating device, the image data storage device, and the image data management device-the manipulation behavior The information includes information on an action of manipulating the operation of the image data generating device by directly accessing the image data generating device based on the IP address of the image data generating device without passing through the VMS, and , And
It is configured to generate an access history for the personal image information based on the access behavior information and to generate an operation history for the device processing the personal image information based on the manipulation behavior information,
By acquiring the connection behavior information and the manipulation behavior information based on mirroring packet data from the switch, configured to generate a connection history and a manipulation history for the personal image information independently from the operation of the VMS, Personal video information access history and operation history generation device.

Images