WO2021134528A1

WO2021134528A1 - Anti-secret-photographing traffic monitoring and interference method and device

Info

Publication number: WO2021134528A1
Application number: PCT/CN2019/130667
Authority: WO
Inventors: 李庆远
Original assignee: 李庆远
Priority date: 2019-12-31
Filing date: 2019-12-31
Publication date: 2021-07-08

Abstract

Disclosed are an anti-secret-photographing traffic monitoring and interference method and device. The traffic of a wireless device is monitored, so as to identify a secret-photographing device and interfere same.

Description

Method and equipment for anti-candid camera flow monitoring and interference

Field of invention

The present invention relates to a method and equipment for anti-sneak camera traffic monitoring and interference, and in particular to a method and equipment for identifying and interfering with the candid camera device by monitoring the wireless device traffic.

Background technique

With the popularization of smart phones, miniature high-definition cameras have become extremely cheap, leading to rampant sneak shots, and even forming an industrial chain, where criminals directly make profits through live webcasts. For the judicial system, there are law enforcement costs, and violent crimes and major economic crimes have a higher priority. It is not expected to rely on simple and rude law enforcement to solve this problem.

Cost is the consensus basis for solving many social problems. Some consumers and the media blame the management of public places, such as hotels and shopping malls that are not responsible for inspections. In fact, it is a selfish idea to pass the cost on to others. And because people are selfish by nature (no need to bear major costs, of course people who do everything they can are kind), hotels and shopping malls cannot bear losses for this, and the costs will inevitably be passed on to consumers. The problem is that consumers are not willing to pay for it-when a newly generated fee item cannot increase/improve the experience, users will not be willing to pay, unless they pay a significant price, they will be willing to pay for protective services. Even luxury hotels often leak user data, because the visible investment of luxury is more likely to attract consumers.

Therefore, the key to solving this problem lies in reducing costs. There are already some methods and equipment:

·Detect the stealth camera with infrared supplement light through the mobile phone camera: close the light curtains to make the room as dark as possible, and the red dot found is the infrared supplement light LED. The limitation of this method is that it is impossible to detect a stealth camera without infrared light.

·Detect stealth camera with spherical/fisheye lens through mobile phone camera: close the light curtains, make the room as dark as possible, and use a flashlight or mobile phone flash to illuminate places where stealth camera may occur, such as ceiling lights in bedrooms, bathrooms, smoke detectors, and beds Opposite routers, power socket openings, small objects, the small white dots found are the spherical/fisheye lens for stealing the camera. The limitation of this method is that some flat lenses have very weak reflections and require consumers to have a keen eye. Some stealth cameras embedded in power sockets cannot see the reflections because they are hidden deep and slightly offset.

·The stealth camera that needs to work for a long time will not be powered by a battery. You need to pull a power cord to connect it in a hidden place. It can be found with a wire/metal detector suitable for general construction projects. However, this method cannot be found hidden in Sneak camera in electrical appliances.

It can be seen that there is currently no simple, limited, universal method that can solve the problem of sneak shots in all scenarios. So we need to make a basic division of the problem space first:

Targeted sneak shots: There are many methods for sneak shots, which are difficult to deal with.

· Undifferentiated sneak shots: Therefore, the embodiments of the present invention are mainly aimed at indiscriminate sneak shots.

The stealth camera can be divided into the following types:

·According to the power supply can be divided into battery power supply and external power supply. The battery-powered sneak shot camera requires manual battery replacement/charging, which is a targeted sneak shot. Therefore, the embodiments of the present invention are mainly aimed at a stealth camera powered by an external power supply.

·According to the video storage medium, it is divided into memory card and webcast. The memory card needs to be replaced/collected manually, which is a targeted sneak shot. Therefore, the embodiments of the present invention are mainly directed to the stealth camera through live webcast.

·According to the physical transmission medium of the webcast, it is divided into wired and wireless. It is difficult to hide the network cable and the connected switch/router in a public place (in fact, any room), unless there is a special construction reserved and hidden network cable/switch/router, which is a targeted sneak shot. Therefore, the embodiments of the present invention are mainly directed to a stealth camera that is broadcast live via a wireless network.

Therefore, the embodiments of the present invention are mainly directed to the stealth camera that is broadcast live via the wireless network.

Summary of the invention

For the indiscriminate stealing camera, power input and wireless network live broadcast output are required, so you can start from these two points. However, when looking for wires through a wire/metal detector, it is first difficult to find the stealth camera hidden in the electrical appliance, and secondly, it is easy to confuse the normal wiring. Consumers can't go to any hotel, shopping mall and other public places to request electricity construction drawings. Therefore, the embodiments of the present invention are mainly aimed at monitoring the flow of wireless devices through wireless signals, identifying and interfering with secretly photographed devices.

The embodiment of the present invention provides a device and a method, including:

·Wireless network card to capture network packets and monitor the traffic of nearby wireless devices

·Identify the stealth camera of the wireless webcast by analyzing the traffic characteristics

·Send a large number of interference packets through the wireless network, so that the live broadcast receiver of the stealth camera cannot receive the data packets normally, thereby blocking the live broadcast

The wireless network card of the computer usually lives in the management mode, and if the driver or/and firmware supports it, it can be switched to the monitoring mode. In the monitoring mode, you can monitor the traffic of all nearby wireless devices through the wireless network card. After a suspicious device is discovered, a large number of interference packets can be sent through this wireless network card to block prying eyes. Therefore, the key lies in how to distinguish the characteristics of wireless traffic.

When the Internet speed is fast enough, the flow of web page refresh, online shopping, online music, and online video has greater volatility, and the download speed is much higher than the upload speed. For webcasts, especially live broadcasts by stealth cameras, it is obvious that there is no interaction between the live broadcaster and the viewer, so almost all upload traffic. Even if it is a peer-to-peer download (Peer to Peer, P2P), this situation is very rare (it is not self-interested and purely beneficial, but uses a free public network).

However, it should be understood that the content of the present invention may not include all aspects and embodiments of the present invention. The content of the present invention is not meant to be restricted or restricted in any way, and the present invention disclosed herein will be understood by one of the following: The technical staff includes obvious improvements and modifications.

Detailed ways

The present invention will now be described more fully hereinafter. However, the present invention can be implemented in many different forms and should not be construed as being limited to the embodiments set forth herein. Hopefully, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the present invention to those skilled in the art.

It should be understood that various changes can be made to the function and arrangement of elements without departing from the spirit and scope set forth in the appended claims. Therefore, the embodiments are examples or implementations of the present invention, rather than the only implementations. The various appearances of "one embodiment," "an embodiment," or "some embodiments" do not necessarily all refer to the same embodiment. Although various features of the invention may be described in the context of a single embodiment, the features may also be provided individually or in any suitable combination. Conversely, although the invention may be described herein in the context of separate embodiments for the sake of clarity, the invention may also be implemented in a single embodiment or any combination of embodiments.

Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by those of ordinary skill in the art to which the present invention belongs. It will be further understood that terms such as those defined in commonly used dictionaries should be interpreted as having meanings consistent with their meanings in the context of related technologies and the present disclosure, and will not be interpreted as idealized or excessive The formal meaning, unless explicitly defined as such in this article.

In the embodiment of the present invention, the method and the device for identifying the sneak shot device and performing interference by monitoring the flow of the wireless device, the key lies in how to identify the characteristics of the suspicious wireless flow.

Traffic characteristic analysis is a very important and difficult subject. Mobile network operators have used traffic characteristic analysis to identify online video live broadcasts to provide service quality control (Quality of Service, QoS). However, related research results show that there is no 100% accuracy rate to identify specific traffic types. E.g:

1.Deep packet inspection (Deep Paket Inspection, DPI)

By analyzing the characteristic fields in the data packet payload, the network traffic can be correlated to specific applications. In most network applications, in the payload part of the data packet, there will be some special bytes or strings used to indicate the protocol type, and by detecting this part of the special bytes or strings in the data packet, you can match the specific application.

Its recognition accuracy is very high, and satisfactory results have been achieved in terms of accuracy, real-time performance, and robustness. Therefore, it has been widely used in most commercial systems. However, DPI technology has a strong impact on encrypted network traffic (especially used in Candidly photographed wireless network live broadcast), can not achieve high-precision and effective identification.

2.Deep Flow Inspection (DFI)

A typical service identification technology developed in recent years. It is different from DPI for load matching at the application layer. It uses a traffic behavior-based identification technology, that is, different application types are reflected in session connections or data streams. The status is different. This technology can solve the problems of poor execution efficiency of DPI technology, low recognition rate of encrypted traffic, and frequent upgrades.

According to the five-tuple of the data packet header (source port number, source IP address, protocol name, destination port, destination IP address), the data packet is divided into different streams, and different types of data streams have different traffic behaviors in transmission. the same. Therefore, various parameters can be set for the data flow in the network, the statistical characteristics of each data flow can be studied, and different types of applications can be identified through statistical analysis of various parameters of the flow, and then the network traffic can be marked.

Modern network videos are encrypted by default. Even if the embodiment of the present invention is aimed at stealing cameras that are broadcast live over a wireless network, the uploaded video data packets are not encrypted, and encryption must be considered. Therefore, it is not possible to simply intercept the suspicious wireless device data packet, and compare the environment of the hotel, shopping mall and other public places after the video is decoded to determine the existence and specific location of the stealth camera.

For stealth cameras that are broadcast live via wireless networks, they have the characteristics of almost all upload traffic, but for typical video calls, the upload/download traffic is close. Although there are cases of unidirectional video and audio in the opposite direction, for stealth cameras, the download traffic is almost all data packets used for network transmission control, and the traffic is much smaller than audio, which is easy to distinguish. For common upload-oriented applications, such as file uploads, the duration is usually very short. It can also monitor network protocols through deep packet inspection (DPI), and deep flow inspection (DFI) to monitor target IP and ports to eliminate possible false interference to these legitimate applications.

However, with the continuous upgrade of sneaky cameras, strategies for monitoring wireless device traffic also need to keep pace with the times. For example, a sneak shot camera with motion detection function will start sneak shooting only when there is an object moving in its field of view. With the rapid development of artificial intelligence, there may even be a motion detection sneak shot camera that can distinguish between ordinary objects and naked human bodies. For these increasingly intelligent sneak shot cameras, it is necessary to induce and deceive their motion detection functions to start shooting and live broadcasting, and then the method and equipment described in the embodiments of the present invention can be used to identify the sneak shot equipment for interference.

In addition, mobile devices (such as mobile phones) can be connected through the built-in display module or wireless network, and the details of the process of monitoring, identification, elimination, confirmation, and interference can be displayed in cooperation with the APP.

The above description is only an embodiment of the present invention, and is not intended to limit the scope of the present invention. Various changes and modifications according to the claims and specification of the present disclosure are still within the scope of the claimed invention. In addition, each embodiment and claims may not include all the advantages or characteristics disclosed. In addition, the abstract and title are only used to facilitate searching of patent documents and are not intended to limit the scope of the claimed invention in any way.

Claims

A method for identifying and interfering with sneak shots by monitoring the traffic of wireless devices:

α. The method uses a wireless network card to monitor the data packets received and sent by all nearby wireless devices, and record the corresponding download traffic and upload traffic;

β. Look for suspicious features in the wireless device that upload traffic is much larger than download traffic;

γ. The method includes a list of common legal applications, the list has the feature that upload traffic is much larger than download traffic, the list includes the protocol, port, and domain name corresponding to the legal application, and can update the domain name corresponding to the network in real time IP list;

δ. In the wireless device with the suspicious characteristics, by monitoring the network protocol, target IP and port, and comparing the list of legitimate applications, to exclude legitimate applications with the characteristics of uploading traffic far greater than downloading traffic, which cannot be ruled out Wireless devices with suspicious characteristics are ruled as suspicious devices;

ε. Continuously sending a large number of data packets to the suspicious device through the wireless network card for interference, so that the suspicious device cannot receive wireless data packets normally, thereby blocking sneak shots.
A device that monitors the traffic of wireless devices to identify and interfere with sneak shots. It includes: wireless network card, computing module, storage module, and power supply module. It has the following characteristics:

α. The device monitors the data packets received and sent by all nearby wireless devices through the wireless network card, and records the corresponding download traffic and upload traffic in the storage module;

β. The device searches the download traffic and upload traffic records in the storage module for the wireless device with suspicious characteristics that the upload traffic is much larger than the download traffic;

γ. The storage module of the device contains a list of common legal applications, the list has the characteristics of uploading traffic is much larger than the downloading traffic, the list includes the protocol, port and domain name corresponding to the legal application, and it can update the network in real time. The IP list corresponding to the domain name;

δ. The device compares the list of legitimate applications by monitoring the network protocol, target IP, and port among wireless devices with the suspicious characteristics to exclude legitimate applications that have the characteristics of uploading traffic far greater than downloading traffic, which cannot be excluded The wireless device with the suspicious characteristics is judged to be a suspicious device;

ε. The device continuously sends a large number of data packets to the suspicious device through the wireless network card to cause interference, so that the suspicious device cannot receive wireless data packets normally, thereby blocking sneak shots.
A device that monitors the traffic of wireless devices to identify and interfere with sneak shots. It includes: wireless network card, computing module, storage module, and power supply module. It has the following characteristics:

α. The device monitors the data packets received and sent by all nearby wireless devices through the wireless network card, and records the corresponding download traffic and upload traffic in the storage module;

β. The device searches the download traffic and upload traffic records in the storage module for the wireless device with suspicious characteristics that the upload traffic is much larger than the download traffic;

γ. The storage module of the device contains a list of common legal applications, the list has the characteristics of uploading traffic is much larger than the downloading traffic, the list includes the protocol, port and domain name corresponding to the legal application, and it can update the network in real time. The IP list corresponding to the domain name;

δ. The device compares the list of legitimate applications by monitoring the network protocol, target IP, and port among wireless devices with the suspicious characteristics to exclude legitimate applications that have the characteristics of uploading traffic far greater than downloading traffic, which cannot be excluded The wireless device with the suspicious characteristics is judged to be a suspicious device;

ε. The device continuously sends a large number of data packets to the suspicious device through the wireless network card to cause interference, so that the suspicious device cannot receive wireless data packets normally, thereby blocking sneak shots.
The device according to claim 3, further comprising a display module, which can display details such as monitoring, identification, elimination, confirmation, interference, etc., to the user.
A device that monitors the traffic of wireless devices to identify and interfere with sneak shots. It includes: wireless network card, computing module, storage module, and power supply module. It has the following characteristics:

α. The device monitors the data packets received and sent by all nearby wireless devices through the wireless network card, and records the corresponding download traffic and upload traffic in the storage module;

β. The device searches the download traffic and upload traffic records in the storage module for the wireless device with suspicious characteristics that the upload traffic is much larger than the download traffic;

γ. The storage module of the device contains a list of common legal applications, the list has the characteristics of uploading traffic is much larger than the downloading traffic, the list includes the protocol, port and domain name corresponding to the legal application, and it can update the network in real time. The IP list corresponding to the domain name;

δ. The device compares the list of legitimate applications by monitoring the network protocol, target IP, and port among wireless devices with the suspicious characteristics to exclude legitimate applications that have the characteristics of uploading traffic far greater than downloading traffic, which cannot be excluded The wireless device with the suspicious characteristics is judged to be a suspicious device;

ε. The device continuously sends a large number of data packets to the suspicious device through the wireless network card to cause interference, so that the suspicious device cannot receive wireless data packets normally, thereby blocking sneak shots.
The device according to claim 5, which can connect to a mobile device via a wireless network, and display details such as monitoring, identification, elimination, confirmation, and interference to the user.