JP2008259099A - Security system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a security system capable of performing communication operation respectively independently with two kinds of protocols and performing a processing distributively with respective protocols when traffic is concentrated, thereby performing a high-reliability communication. <P>SOLUTION: At a center side, a gateway is provided which mutually transform a plurality of data of different protocols on a communication line, and the gateway and a security terminal comprise continuous connection means using a protocol capable of periodically transmitting/receiving an arbitrary packet to/from an opposite side and arbitrary connection means using a protocol capable of transmitting/receiving data in arbitrary timing when an event to be reported occurs. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a security system in which a security terminal provided on the security target facility side and a center server provided on the center side are connected by a communication line.

  2. Description of the Related Art Conventionally, a security system has been used in which a sensor for detecting an abnormality is provided on the side of a security target facility such as a general home, store, or factory, and the abnormality information is reported to the center of a security center via a security terminal. The security terminal and the center server provided on the center side are connected by a communication line to exchange information. This exchange of information includes, for example, the survival monitoring of each of the security terminal and the center server, mutual control, notification of abnormality information, and the like.

For example, in order to monitor the survival of a security terminal or a center server, a method of transmitting and monitoring packets for mutually confirming survival is used. As a packet for this monitoring, for example, a UDP packet disclosed in Patent Document 1 can be considered. As shown in Japanese Patent Laid-Open No. 2004-228688, a method for monitoring survival by periodically transmitting a UDP packet considering NAT (Network Address Translation: mutual compatibility between a private IP address and a global IP address) is conceivable. As for NAT traversal, a method using Upnp (Universal Plug and Play) as shown in Patent Document 2 is also conceivable. In any case, one connection means (protocol) is used for the survival monitoring of each of the security terminal and the center server, mutual control, notification of abnormality information, and the like.
JP 2004-120547 A JP 2005-109735 A

  However, when operating with a single protocol, a large number of reports or controls may cause a situation in which, for example, the survival monitoring transmission is delayed or not transmitted, and the transmission monitoring packet is confirmed for the specified time in the gateway survival monitoring processing. The gateway may determine that the communication with the security terminal has been interrupted. In order to avoid such a situation, processing becomes complicated and inconsistency occurs, and it is difficult to ensure communication reliability.

  The present invention has been made in view of such circumstances, and can independently perform communication operations using two types of protocols. Even when traffic is concentrated, processing can be performed in a distributed manner using each protocol. The object is to provide a security system capable of highly reliable communication.

  The security system according to claim 1 is provided with a gateway on the center side for mutually converting a plurality of data with different protocols on the communication line, and the gateway and the security terminal regularly send arbitrary packets to the other side. Characterized in that it comprises a constant connection means using a protocol capable of transmitting and receiving and an arbitrary connection means using a protocol capable of transmitting and receiving data at an arbitrary timing when an event to be reported occurs.

  The security system according to claim 2 uses a continuous connection means to perform survival monitoring between the center server, the gateway and the security terminal and start terminal control for the security terminal from the center server, and use an arbitrary connection means to It is characterized in that security information is communicated between the server, gateway and security terminal, and control between the center server and the security terminal is performed.

  The security system according to claim 3 is characterized in that the gateway includes a center server storage means for copying and storing the security terminal information and security information stored by the center server.

  The security system according to claim 4 is characterized in that a plurality of gateways are provided, and one gateway is appropriately determined depending on the operation state of each gateway.

  The security system according to claim 5 is characterized in that the constant connection means is always connected by TCP.

  According to the first and second aspects of the invention, the always-on connection means using a protocol capable of periodically transmitting / receiving arbitrary packets to / from the other party, and any timing when an event to be reported occurs Because it is equipped with optional connection means using protocols that can send and receive data, it operates independently with two types of protocols, and even when traffic is concentrated, it is distributed and processed with each protocol Therefore, highly reliable communication is possible.

  According to the invention of claim 2, the continuous connection means is used to perform the survival monitoring between the center server, the gateway and the security terminal and the terminal control activation for the security terminal from the center server, and the center connection using the arbitrary connection means. Even if one protocol fails and communication becomes impossible by operating to perform security information communication between the server, gateway and security terminal and control between the center server and the security terminal, Processing can be performed with another protocol, and a mechanism in which communication is not easily interrupted even in an emergency can be provided.

  According to the invention of claim 3, since the gateway duplicates and stores the security terminal information and security information stored by the center server, even if the center server is not operating due to maintenance or malfunction, By accessing, information on security terminals and security information can be referred to.

  According to the invention of claim 4, since a plurality of gateways are provided and one is determined and operated as appropriate according to the operation state of each gateway, at least one gateway always operates, avoiding the stop of the entire system, and security. Can be sustained.

  According to the fifth aspect of the present invention, since the always-on connection means is always connected by TCP, the packet loss that occurs in the UDP packet can be suppressed, a large number of devices can be connected, and highly reliable communication is possible. is there. In addition, by always connecting with TCP, it is possible to solve NAT traversal, which is a mutual compatibility between a private IP address and a global IP address.

  Hereinafter, embodiments of the present invention will be specifically described with reference to the drawings. The security system in the embodiment of the present invention is a system in which a security terminal provided on the security target facility side and a center server provided on the center side are connected by a communication line.

  FIG. 1 is an explanatory diagram showing a configuration and a timing chart of a security system according to the present invention. FIG. 2 is an explanatory diagram showing a timing chart of another operation of the security system. FIG. 3 is a configuration diagram showing the configuration of the security system. As shown in FIG. 1, in the security system, for example, a center server 15 on the security center side and a security terminal 20 are connected via a communication line 5 that is an Internet network that is an electric communication line. The security terminal 20 is provided on the side of a security target facility such as a general home, store, or factory, and is connected to a sensor that detects an abnormality of the security target facility. The center server 15 is for controlling the security terminal 20 and displaying / processing an abnormality report from the security terminal 20.

  The center server 15 is connected to the communication line 5 via the gateway 10 and the firewall 16. The firewall 16 is for preventing unauthorized access to the center server 15 via the communication line 5, and is generally used in a security system such as the present embodiment, but is essential in the present invention. is not. The center server 15 is connected to the gateway 10 by XML-RPC, SOAP-RPC, WSDL-RPC, or the like. The gateway 10 mutually converts a plurality of data having different protocols on the communication line 5 with the security terminal 20. A router 21 is provided between the security terminal 20 and the communication line 5. The router 21 is a network device that relays data flowing on the network on the security target facility side to the communication line 5 and is generally used, but is not essential in the present invention.

  The gateway 10 and the security terminal 20 transmit and receive data at an arbitrary timing when an event to be notified occurs, with a constant connection means that is a protocol that periodically transmits and receives an arbitrary packet to the other party. It is connected by an arbitrary connection means that is a protocol.

  Next, operation | movement of the security system of a present Example is demonstrated. First, as shown in FIGS. 1 and 2, the center server 15 periodically acquires requests from the gateway 10. When there is a notification event from the security terminal 20 in response to the request acquisition from the center server 15, the gateway 10 transmits the request response including the notification event data to the center server 15. Further, when there is a control result of the security terminal 20 for the request acquisition from the center server 15, the gateway 10 transmits a request response including the control result to the center server 15. The center server 15 continues to transmit the request acquisition until there is no report event or control result, and when there is no report event or control result, the center server 15 stops transmitting for a certain period of time and then transmits the request acquisition again. When there is no report event or control result, the center server 15 transmits a request acquisition at regular intervals.

  The operation between the gateway 10 and the security terminal 20 will be described. For example, in the case of mutual survival monitoring, the gateway 10 and the security terminal 20 are always connected by TCP (Transmission Control Protocol) which is a constant connection means. Then, an arbitrary packet is periodically transmitted from the security terminal 20 to the gateway 10. The gateway 10 transmits a response packet to the security terminal 20 in response to the packet from the security terminal 20. And the gateway 10 judges that the failure generate | occur | produced in communication with the security terminal 20 or the security terminal 20, when the packet from the security terminal 20 cannot be confirmed for a fixed time. If the response packet from the gateway 10 cannot be confirmed, the security terminal 20 determines that a failure has occurred in the communication with the gateway 10 or the gateway 10. In addition to alive monitoring, communication between the gateway 10 and the security terminal 20 using a constant connection means includes terminal control activation from the center server 15 to the security terminal 20.

  When there is a report from the security terminal 20, the security terminal 20 connects to the gateway 10 using an arbitrary connection means, and transmits report data. When the gateway 10 receives the report data from the security terminal 20, the gateway 10 transmits response data to the security terminal 20. And the gateway 10 preserve | saves the report data from the security terminal 20. FIG.

  When the center server 15 controls the security terminal 20, a control request is transmitted from the center server 15 to the gateway 10. The gateway 10 transmits a control request response to the center server 15 in response to the control request, and then transmits a connection request to the security terminal 20 using a constant connection means. When the security terminal 20 receives the connection request from the gateway 10, the security terminal 20 connects to the gateway 10 using an arbitrary connection means, and transmits a request acquisition packet to acquire control information. When the gateway 10 receives the request acquisition packet from the security terminal 20, the gateway 10 transmits a request result packet including the control information of the security terminal 20 to the security terminal 20 using an arbitrary connection means. When the security terminal 20 receives the request result packet from the gateway 10, the security terminal 20 performs control processing based on the control information included in the request result packet, and transmits the control result to the gateway 10 as a control result packet. The gateway 10 receives the control result from the security terminal 20, transmits a control result response packet to the security terminal 20, and stores the control result.

  As described above, according to the security system of the present embodiment, it is optional when a constant connection means and an event to be reported occur using a protocol capable of periodically transmitting and receiving arbitrary packets to the other party. Because it is equipped with an optional connection means using a protocol that can send and receive data at the same timing, each of the two protocols operates independently, and even when traffic is concentrated, processing is distributed by each protocol By doing so, highly reliable communication is possible.

  Surveillance monitoring between the center server 15, the gateway 10 and the security terminal 20 and terminal control activation for the security terminal 20 from the center server 15 are performed using the constant connection means, and the center server 15 and the gateway are used using the arbitrary connection means. Even when one protocol fails and communication becomes impossible by operating to perform security information communication between the security terminal 10 and the security terminal 20 and control between the center server 15 and the security terminal 20. Further, processing can be performed with another protocol, and a mechanism in which communication is difficult to be interrupted even in an emergency can be provided.

  The center server 15 collectively manages information on the entire security system on a database in the center server 15. On the other hand, the gateway 10 may be provided with a center server storage means that is a data storage means and database, and necessary information may be copied from the database of the center server 15 and stored in the gateway 10. In order to maintain consistency with the database of the center server 15, the database of the gateway 10 performs, for example, periodic differential synchronization and overall synchronization once a day. In the differential synchronization, the database of the center server 15 is periodically checked, and if there is update data, the database of the gateway 10 is updated. In the overall synchronization, all data of the center server 15 is periodically acquired, and after acquiring all the data, the current data is deleted and the acquired data is stored. When a large amount of data exists, acquisition is performed for each fixed number so that the resources of the center server 15 are not consumed continuously for a long time in the data acquisition process, and the process is repeated until all data is acquired.

  As described above, since the gateway 10 duplicates and stores the security terminal 20 information and security information stored in the center server 15, even if the center server 15 is not operating due to maintenance or malfunction, the gateway 10 By accessing, the information of the security terminal 20 and the security information can be referred to.

  In the security system shown in FIGS. 1 and 2, only one gateway 10 on the system is provided. However, in the security system of FIG. 3, the gateway is composed of two gateways (main) 11 having the same function. And a gateway (sub) 12. Each of the gateways 11 and 12 regularly monitors its own state, and acquires an operation state, a database / application / TCP connection failure, and a service operation state. When a change in each state is detected, the gateway 11 (12) notifies the other gateway 12 (11) of the state. There are main (11) and sub (12) gateways, which are usually serviced by the main gateway 11 and the sub gateway 12 is waiting. When the main gateway 11 detects the occurrence of a failure, the main gateway 11 notifies the sub gateway 12 and switches the operation to the sub gateway 12.

  When the main gateway 11 recovers from the failure, the sub gateway 12 is notified and the operation is switched to the main gateway 11. The center server 15 periodically communicates with the gateways 11 and 12 to acquire the state. The state to be acquired has the same contents as the state acquired in each of the gateways 11 and 12. In addition, communication with the gateways 11 and 12 in operation is monitored, and the gateways 11 and 12 to be operated are switched due to a failure of the gateways 11 and 12, and communication with the gateways 11 and 12 with which communication has been performed becomes impossible. Then, it is determined that the gateways 11 and 12 have been switched due to a failure, and the communication is switched to communication with the other gateways 11 and 12.

  In this way, a plurality of gateways 11 and 12 are provided, and by appropriately determining one to operate according to the operation state of each gateway 11 and 12, at least one gateway 11 and 12 always operates, and the entire system is stopped. It can be avoided and security can be sustained.

  In addition, since the always-on connection means is always connected by TCP, the packet loss that occurs in the UDP packet can be suppressed, a large amount of device connection can be handled, and highly reliable communication is possible. Further, by always connecting with TCP, it is possible to solve NAT traversal that is compatible with a private IP address and a global IP address.

  In addition, if each connection means (protocol) is enabled to operate the survival monitoring / control activation and communication / control functions, if one protocol fails and communication becomes impossible, It is also possible to provide a function (communication path backup function) that can be processed with one protocol so that communication is not interrupted even in an emergency. In addition, the means of this embodiment can be used regardless of the connection form and connection environment, such as the Internet network, LAN, IPsec, and VPN.

  As described above, according to the present invention, communication operations can be performed independently with two types of protocols, and even when traffic is concentrated, highly reliable communication can be achieved by distributing and processing with each protocol. Possible security systems can be provided.

It is explanatory drawing which shows the structure and timing chart of the security system which concern on this invention. It is explanatory drawing which shows the timing chart of the other operation | movement of the security system. It is a block diagram which shows the structure of the security system.

Explanation of symbols

5 ... Communication line 10 ... Gateway 11 ... Main gateway 12 ... Sub gateway 13 ... Hub 15 ... Center server 16 ... Firewall 18 ... Client 20 ...・ Security terminal 21 ... Router

Claims (5)

In a security system in which a security terminal provided on the security target facility side and a center server provided on the center side are connected by a communication line,
Provided on the center side is a gateway for mutually converting a plurality of data with different protocols on the communication line,
The gateway and the security terminal can transmit and receive data at an arbitrary timing when an event to be reported occurs with a constant connection means using a protocol that can periodically transmit and receive an arbitrary packet to the other party. A security system comprising an arbitrary connection means using a possible protocol. Using the constant connection means, performing survival monitoring between the center server, the gateway and the guard terminal and starting terminal control for the guard terminal from the center server,
2. The security system according to claim 1, wherein the arbitrary connection means is used to perform communication of security information between the center server, the gateway and the security terminal, and control between the center server and the security terminal.   3. The security system according to claim 1, wherein the gateway includes a center server storage unit that duplicates and stores information on the security terminal stored by the center server and the security information.   The security system according to any one of claims 1 to 3, wherein a plurality of the gateways are provided, and one gateway is appropriately determined depending on an operation state of each gateway.   The security system according to any one of claims 1 to 4, wherein the constant connection means is always connected by TCP.

Images