JP7412155B2 - Monitoring devices, monitoring systems, programs, and methods for obtaining intruder identification information - Google Patents

Description

The present invention relates to a monitoring device, a monitoring system, a program, and an intruder identification information acquisition method.

Conventionally, when an intruder is detected in your home while you are away, jamming radio waves are generated and stopped, and the intruder's mobile phone is moved from "out of service area" to "in range," and information such as mobile number and ID is automatically transmitted from the mobile phone. A technology has been disclosed that identifies an intruder by notifying the intruder and receiving the information via a nearby base station (see Patent Document 1).

Japanese Patent Application Publication No. 2003-178385

However, according to the technology disclosed in Patent Document 1, in order to put a mobile phone "out of range," it is necessary to generate jamming radio waves, but it is difficult to limit the range in residential areas, and it is difficult to limit the range in residential areas. It may even affect. Further, according to the technique disclosed in Patent Document 1, it is difficult to identify a robbery at a convenience store, etc., because it is assumed that an intruder is intruding into a home where the user is not home.

The present invention has been made in view of the above, and an object of the present invention is to provide a means for acquiring information that can be used to identify an intruder without using jamming radio waves.

In order to solve the above-mentioned problems and achieve the objects, the present invention provides that, when an intrusion alarm is received from an alarm device that detects an intruder in a monitoring area , a predetermined distance range centered on the installation location of the alarm device is provided. an intruder identifying information acquisition means for receiving information on mobile terminals existing in an area within the area from a mobile carrier network management device that manages mobile terminals in response to a request for disclosure of information on the mobile terminal; The present invention is characterized by comprising a monitoring target mobile terminal information storage means for storing information on the mobile terminal received from the mobile carrier network management device as a response as information on the mobile terminal to be monitored.

The monitoring device, monitoring system, program, and intruder identification information acquisition method according to the present invention have a configuration that does not use jamming radio waves, and can identify a mobile terminal that may be in the possession of an intruder. This has the effect of providing information that can be used to identify.

FIG. 1 is a block diagram showing the configuration of a monitoring system according to a first embodiment. FIG. 2 is a diagram showing an example of the configuration of the alarm device. FIG. 3 is a block diagram showing the hardware configuration of the monitoring device. FIG. 4 is a block diagram illustrating an example of the functions of the monitoring device related to intruder identification information acquisition processing. FIG. 5 is a flowchart schematically showing the flow of intruder identification information acquisition processing. FIG. 6 is a flowchart schematically showing the flow of terminal tracking processing. FIG. 7 is a flowchart schematically showing the flow of detection processing for previewing behavior of an intruder. FIG. 8 is a flowchart schematically showing the flow of abandoned terminal detection processing. FIG. 9 is a diagram showing an outline of processing when the mobile carrier network management device cannot respond to the disclosure request.

Embodiments of a monitoring device, a monitoring system, a program, and an intruder identification information acquisition method will be described in detail below with reference to the accompanying drawings.

(First embodiment)
FIG. 1 is a block diagram showing the configuration of a monitoring system 1 according to the first embodiment. As shown in FIG. 1, the monitoring system 1 includes an alarm device 2, a monitoring device 3, and a mobile carrier network management device 4. The alarm device 2, the monitoring device 3, and the mobile carrier network management device 4 are connected via a network 6 such as a telephone line, a wireless network, or the Internet.

The alarm device 2 is installed at a guarded destination. The monitoring device 3 is provided at a monitoring center. The mobile carrier network management device 4 is installed in the facility of the communication carrier that operates the mobile terminal 5.

The communication carrier network management device 4 is connected to a plurality of mobile base stations 7 arranged by communication carriers to provide communication services to mobile terminals 5. Furthermore, within a predetermined distance range centered on the mobile base station 7, a communication area is configured in which wireless communication with the mobile terminals 5 is possible, and the mobile terminals 5 existing within the communication area have their own terminal ID and (location information of a mobile base station with which communication is possible, or own position information acquired by a position information acquisition means such as a built-in GPS (Global Positioning System), etc.) is registered in the communication carrier network management device 4. At the same time, it is possible to use communication services (Internet connection, telephone service, etc.) provided by communication carriers through the mobile base station 7.

The mobile carrier network management device 4 also collects various information regarding the mobile terminal 5 (subscriber information (customer name), information on the mobile terminal 5 owned by the subscriber (terminal ID, location information, communication status, etc.)). Remember. Further, when receiving a request to disclose information on the mobile terminal 5 that meets a predetermined condition from the monitoring device 3, the information on the mobile terminal 5 that meets the condition is transmitted to the monitoring device 3.

The alarm device 2 detects an intruder into the monitored area of the guard destination and sends an intrusion alarm to the monitoring device 3. When the monitoring device 3 receives the intrusion alarm from the alarm device 2, it instructs the security guard on standby to proceed to the monitoring area, and reports it to related organizations such as the police and fire department as necessary.

Here, the alarm device 2 will be explained in detail. FIG. 2 is a diagram showing a configuration example of the alarm device 2. As shown in FIG. As shown in FIG. 2, the alarm device 2 includes a plurality of sensors 2a to 2n as intrusion detection means installed in a monitoring area, a setting input/display section 20, an input/output control section 21, and a control section 22. , a communication control section 23, and an alarm device ID storage section 24 that stores an alarm device ID that is self-identification information.

The sensors 2a to 2n are, for example, an infrared sensor that detects a person based on a change in the amount of received infrared light, an interruption sensor that detects a person when infrared rays are blocked, and a presence sensor that detects a person based on disturbance of electromagnetic waves. These are various sensors that detect intruders into the monitored area, such as magnetic sensors that use magnets to detect the opening and closing of doors, and image sensors that detect people or their suspicious behavior through image recognition of images captured by cameras. .

The setting input/display unit 20 includes a liquid crystal screen that displays various setting screens, operation buttons, etc., and displays an initial setting screen and a security mode setting screen on the liquid crystal screen to allow the user to initialize the alarm device 2. This is security mode switching means for inputting settings and inputting various security mode settings for the alarm device 2. Here, the security mode refers to whether or not to notify the notification destination such as the monitoring device 3 of the monitoring center that an intruder has been detected when an intruder is detected in the monitoring area, and the operation of the alarm device 2. This is the mode that determines the Specifically, there are a security state mode and a security release state mode.

The security state mode is a security state in which when the sensors 2a to 2n detect an intruder and output a detection signal, the alarm device 2 reports an intrusion alarm indicating that an intruder has been detected to the monitoring device 3 of the monitoring center. mode.

The security release state mode is a security mode in which the alarm device 2 does not notify the monitoring device 3 of the monitoring center even if the sensors 2a to 2n detect an intruder and output a detection signal.

Each of these states is set by the user's operation from the setting input/display unit 20.

When the setting input/display unit 20 receives an operation to switch the security release state mode to the security state mode (operation to set security), the alarm device 2 sends a security start signal to the monitoring device 3 along with the alarm device ID. Send.

In addition, when the setting input/display unit 20 receives an operation to switch the security state mode to the security release state mode (an operation to release the security), the alarm device 2 sends the alarm device ID and the security release to the monitoring device 3. Send a signal.

The input/output control section 21 is a processing section that controls the input/output of various data by controlling the input/output of the setting input/display section 20 and the input/output of the sensors 2a to 2n. The communication control unit 23 controls communication between the alarm device 2 and the monitoring device 3 that are connected via the network 6, and specifically corresponds to a network board or the like. The control unit 22 is the main body for controlling the alarm device 2.

That is, when the sensors 2a to 2n detect an intruder, the alarm device 2 transmits an intrusion alarm to the monitoring device 3, provided that the security mode is in effect. More specifically, the alarm device 2 transmits the alarm device ID, which is its own identification information stored in the alarm device ID storage unit 24, to the monitoring device 3 along with the intrusion alarm.

Next, the monitoring device 3 will be explained in detail. The monitoring device 3 can be realized by an information processing device (computer) equipped with a general OS (Operating System) or the like.

Here, FIG. 3 is a block diagram showing the hardware configuration of the monitoring device 3. As shown in FIG. As shown in FIG. 3, the monitoring device 3 of this embodiment includes a control unit 101 such as a CPU (Central Processing Unit) that controls the entire device, and a ROM (Read Only Memory) that stores various data and programs. A main storage section 102 such as a RAM (Random Access Memory), an auxiliary storage section 103 such as an HDD (Hard Disk Drive) or a CD (Compact Disc) drive device that stores various data and programs, and a bus 104 that connects these. It is equipped with a hardware configuration using a normal computer. The CPU has a timekeeping function that measures the current time.

The control unit 101 also includes a display unit 105 that displays information, an operation input unit 106 such as a keyboard and mouse that accepts input instructions from the user, and a control unit 106 that connects the alarm device 2 and the mobile carrier network management device 4 via the network 6. A communication I/F (interface) 107 for controlling communication is connected to each unit by a bus 104 .

The program executed by the monitoring device 3 of this embodiment is a file in an installable or executable format and is stored on a computer such as a CD-ROM, flexible disk (FD), CD-R, or DVD (Digital Versatile Disc). Provided recorded on a readable recording medium.

Further, the program executed by the monitoring device 3 of this embodiment may be stored on a computer connected to a network such as the Internet, and may be provided by being downloaded via the network. Further, the program executed by the monitoring device 3 of this embodiment may be provided or distributed via a network such as the Internet.

Further, the program to be executed by the monitoring device 3 of this embodiment may be configured to be provided by being incorporated in a ROM or the like in advance.

Next, among the various arithmetic processes that the CPU of the monitoring device 3 executes according to the program, a function for realizing the monitoring process, which is a characteristic process of this embodiment, will be described below.

FIG. 4 is a block diagram showing an example of functions related to monitoring processing of the monitoring device 3. As shown in FIG.

As shown in FIG. 4, the monitoring device 3 includes an intruder identification information acquisition means 30, an alarm device information storage means 31, a monitored mobile terminal information storage means 32, and a specific behavior detection means 33.

The alarm device information storage means 31 stores the installation location (address) of the alarm device 2 in advance in the auxiliary storage unit 103 or the like in association with the alarm device ID.

Further, when the monitoring device 3 receives an alarm device ID and a security start signal from the alarm device 2, the alarm device information storage means 31 associates the time at which the security start signal was received with the received alarm device ID. , stored in the auxiliary storage unit 103 or the like. Further, when the monitoring device 3 receives the alarm device ID and the security release signal from the alarm device 2, the time at which the security release signal was received is stored in the auxiliary storage unit 103 or the like in association with the received alarm device ID. do.

When the intruder identification information acquisition means 30 receives an intrusion alarm from the alarm device 2, the intruder identification information acquisition means 30 informs the mobile carrier network management device 4 of mobile terminals existing within a predetermined distance range around the installation location of the alarm device 2. 5. Send a request to disclose information.

The monitored mobile terminal information storage means 32 stores the information on the mobile terminal 5 received from the mobile carrier network management device 4 in response to the disclosure request in association with the time of reception in the auxiliary storage unit 103 or the like.

The specific behavior detection means 33 analyzes the information of the mobile terminal 5 stored in the auxiliary storage unit 103 etc. by the monitored mobile terminal information storage means 32, and detects a specific behavior (for example, intrusion) of the person who owns the mobile terminal 5. Detect people's preview behavior).

(Obtaining information that can be used to identify intruders)
Next, intruder identification information acquisition processing, which is processing for acquiring information that can be used to identify an intruder (intruder identification information) in monitoring processing, will be described.

In general, the intruder identification information acquisition process in the monitoring device 3 of this embodiment is configured such that jamming radio waves are not used at the security destination, and information that can be used to identify the mobile terminal 5 possessed by the intruder is acquired. It is processing. It is assumed that the intruder is in possession of the mobile terminal 5 and that the mobile carrier network management device 4 is capable of responding to the disclosure request.

Here, FIG. 5 is a flowchart schematically showing the flow of the intruder identification information acquisition process. As shown in FIG. 5, when the intruder identification information acquisition means 30 of the monitoring device 3 receives the alarm device ID and the intrusion alarm from the alarm device 2, the intruder identification information acquisition means 30 of the monitoring device 3 uses the alarm device information storage means 31 based on the received alarm device ID. The installation location of the alarm device 2 stored in the auxiliary storage unit 103 is searched for (step S1).

Next, the intruder identification information acquisition means 30 of the monitoring device 3 obtains information on the mobile terminal 5 that meets the conditions such as being in an area within a predetermined distance range centered on the installation location of the searched alarm device 2. A disclosure request is transmitted to the mobile carrier network management device 4 (step S2). Here, the conditions include the time, the installation location (address) of the alarm device 2, and the distance range.

When the mobile carrier network management device 4 receives a request from the monitoring device 3 to disclose information about mobile terminals 5 existing within a predetermined distance range around the installation location of the alarm device 2, Search for information on the mobile terminal 5 that is being used. Then, the mobile carrier network management device 4 transmits information on the mobile terminal 5 that meets the conditions of the disclosure request to the monitoring device 3.

The intruder identification information acquisition means 30 of the monitoring device 3 receives information about the mobile terminal 5 transmitted from the mobile carrier network management device 4 (step S3).

Subsequently, the intruder identification information acquisition means 30 of the monitoring device 3 uses the information on the mobile terminal 5 received from the mobile carrier network management device 4 as information on the mobile terminal to be monitored, and uses the information storage means 32 to store the information on the mobile terminal to be monitored. The information is stored in the storage unit 103 or the like (step S4).

Specifically, when the intruder identification information acquisition means 30 of the monitoring device 3 receives an intruder alarm from the alarm device 2 installed at a security destination whose address is "A-town 1," for example, Requests the mobile carrier network management device 4 to disclose information on mobile terminals 5 existing within a 100 m radius around the address. Then, the intruder identification information acquisition means 30 of the monitoring device 3 acquires information of the corresponding mobile terminal 5. The acquired information on the mobile terminal 5 is treated as information regarding candidates for the mobile terminal 5 that may be in the possession of the intruder.

As described above, the monitoring system 1 of the present embodiment provides information on the mobile terminals 5 (subscriber information, terminal information (terminal ID), location information, communication status, (communication time, etc.) from the mobile carrier network management device 4, and the intruder possesses the obtained information (subscriber information, terminal information (terminal ID), location information, communication status (communication time), etc.) It is used to identify and track the mobile terminal 5 that may be using the mobile terminal 5.

(device tracking when intrusion alarm occurs)
Next, the terminal tracking process when an intrusion alarm occurs in the monitoring process will be explained.

The terminal tracking process at the time of an intrusion alarm in the monitoring device 3 of this embodiment is a process of tracking the mobile terminal 5 owned by the intruder identified by the above-described intruder identification information acquisition process.

Here, FIG. 6 is a flowchart schematically showing the flow of the terminal tracking process. As shown in FIG. 6, the intruder identification information acquisition means 30 of the monitoring device 3 targets the mobile carrier network management device 4 for the mobile terminal 5 corresponding to the received mobile terminal information at each predetermined tracking time interval. A disclosure request is transmitted to (step S11).

In addition, the intruder identification information acquisition means 30 of the monitoring device 3 stores the mobile terminal information received from the mobile carrier network management device 4 and the time of reception in the auxiliary storage unit 103 or the like using the monitored mobile terminal information storage means 32. (Step S12).

The intruder identification information acquisition means 30 of the monitoring device 3 repeats the processing of steps S11 to S12 at every predetermined tracking time interval.

Through the terminal tracking process as described above, the trajectory of the mobile terminal 5 to be monitored from the time when the intrusion alarm is generated is acquired, and is used to identify the mobile terminal 5 that may be in the possession of an intruder.

(Detection of intruder's preview behavior)
Next, a process for detecting an intruder's preview behavior in the monitoring process will be described.

The detection process of the intruder's preview behavior in the monitoring device 3 of the present embodiment is based on the premise that the intruder has previewed the living situation of the intruder in advance and is likely to be in possession of the mobile terminal 5. This is the process to be performed.

Here, FIG. 7 is a flowchart schematically showing the flow of the process of detecting the preview behavior of an intruder.

As shown in FIG. 7, when the specific behavior detection means 33 of the monitoring device 3 receives a security start signal or a security release signal together with the alarm device ID from the alarm device 2, the specific behavior detection means 33 uses the alarm device information storage means 31 to store information in the auxiliary storage section 103. A request for disclosure of information on mobile terminals 5 existing within a predetermined distance range around the installation location of the alarm device 2, which is stored in the mobile carrier network management device 4, is transmitted to the mobile carrier network management device 4 (step S21).

When the mobile carrier network management device 4 receives a request from the monitoring device 3 to disclose information about mobile terminals 5 existing within a predetermined distance range around the installation location of the alarm device 2, Search for information on the mobile terminal 5 that is being used. Then, the mobile carrier network management device 4 transmits information on the mobile terminal 5 that meets the conditions of the disclosure request to the monitoring device 3.

The specific behavior detection means 33 of the monitoring device 3 receives information about the mobile terminal 5 transmitted from the mobile carrier network management device 4 (step S22).

Subsequently, the specific behavior detection means 33 of the monitoring device 3 stores the information of the mobile terminal 5 received from the mobile carrier network management device 4 in the auxiliary storage unit 103 by the monitored mobile terminal information storage means 32 in association with the time of reception. etc. (step S23).

Then, the specific behavior detection means 33 of the monitoring device 3 determines whether the mobile terminal 5 is in possession based on the information about the mobile terminal 5 stored in the auxiliary storage unit 103 or the like by the monitored mobile terminal information storage means 32 and the received time. A specific behavior (inspection behavior) of the person is detected (step S24).

Specifically, the specific behavior detection means 33 of the monitoring device 3 stores the position information of the mobile terminal 5, the received time corresponding to the position information, and the alarm device information storage means 31 in the auxiliary storage unit 103 or the like. Based on the installation location of the alarm device 2 and the time when the security start signal and the security release signal are received, if the user stays in an area within a predetermined distance range for a predetermined time or longer, and the time period of the stay and the area The mobile terminals 5 that have a correlation of a certain level or more with the time when the security start signal or the security release signal of the alarm device 2 which is the installation location is received are extracted. For example, if the time of stay overlaps with the time when the security start signal or the security release signal is received, it is determined that there is a correlation.

The intruder is thought to check the time period when the place of intrusion (guarded place) is absent during preliminary inspection, and when setting or canceling the security of the place of intrusion (guarded place), the intruder will be in the vicinity of the place of intrusion (guarded place). It is thought that an intruder is present and is watching the situation.

Based on this idea, as described above, the monitoring device 3 requests the mobile carrier network management device 4 to disclose and obtains the information on the mobile phones existing around the address of the security destination at the time of setting and releasing security at the security destination. Information on the terminal 5 is extracted and stored in advance in association with the security destination. When the monitoring device 3 receives the intrusion alarm from the alarm device 2, the monitoring device 3 obtains the information from the mobile carrier network management device 4 by requesting disclosure, and the information on the mobile terminals 5 existing around the address of the guard destination, and the information stored in advance. The portable terminal 5 that may have been in the possession of the intruder at the time of previewing and intrusion is detected by referring to the information on the portable terminal 5 that was kept there. The information on the detected mobile terminal 5 is used to identify the mobile terminal 5 that may be in the possession of the intruder.

(Detection of abandoned terminals)
Next, abandoned terminal detection processing in the monitoring processing will be described.

The abandoned terminal detection process in the monitoring device 3 of the present embodiment is performed in order to avoid being tracked by related organizations using the location information of the mobile terminal 5 that the intruder owns when the intruder escapes. This process is performed on the premise that if the mobile terminal 5 is abandoned (left behind), the location information of the mobile terminal 5 will not change and it is considered that almost no calls or communications will occur.

Here, FIG. 8 is a flowchart schematically showing the flow of the abandoned terminal detection process. As shown in FIG. 8, the specific behavior detecting means 33 of the monitoring device 3 acquires information through a terminal tracking process that repeats steps S11 to S12 in FIG. Based on the location information, communication status, and time when the information of the mobile terminal 5 was received, which is included in the information of the mobile terminal 5, the user stays in an area within a predetermined distance range for a predetermined period of time or more, and the communication exceeds a certain level. Among the mobile terminals 5 in which the intruder has not occurred, the mobile terminals 5 that may have been abandoned by the intruder are extracted (step S31).

Next, the specific behavior detection means 33 of the monitoring device 3 transmits a request to disclose the owner information of the detected mobile terminal 5 to the mobile carrier network management device 4 (step S32).

When the mobile carrier network management device 4 receives a request to disclose the owner information of the mobile terminal 5 from the monitoring device 3, the mobile carrier network management device 4 transmits the owner information of the corresponding mobile terminal 5 to the monitoring device 3.

The specific behavior detection means 33 of the monitoring device 3 receives the owner information of the mobile terminal 5 from the mobile carrier network management device 4 (step S33).

The specific behavior detection means 33 of the monitoring device 3 uses the owner information of the mobile terminal 5 received from the mobile carrier network management device 4 as information that can be used to identify an intruder related to an intrusion alarm (intruder identification information) and sends it to related organizations. (Step S34).

As described above, when an intrusion alarm occurs, the monitoring device 3 tracks the mobile terminals 5 existing in the vicinity of the place where the intrusion alarm occurred, and if an abandoned terminal is detected based on its location information and communication status, the monitoring device 3 It is determined that there is a possibility that the person is an intruder, the owner information is obtained by inquiring the mobile carrier network management device 4, and the information is provided to related organizations.

As described above, according to the present embodiment, it is possible to identify a mobile terminal that may be in the possession of an intruder without using jamming radio waves, and information that can be used to identify the intruder (intruder (specified information) may be provided to related organizations.

Although the present embodiment has been described on the assumption that the mobile carrier network management device 4 can respond to the disclosure request, the present invention is not limited to this. Here, FIG. 9 is a diagram showing an outline of processing when the mobile carrier network management device 4 is unable to respond to the disclosure request. As shown in FIG. 9, when the mobile carrier network management device 4 cannot respond to the disclosure request, the mobile carrier network management device 4 performs the intruder identification information acquisition means 30, the monitoring target, among the functions of the monitoring device 3. The monitoring device 3 is equipped with a mobile terminal information storage means 32, a specific behavior detection means 33, and an auxiliary storage section (not shown) used in each function instead of the monitoring device 3, and the monitoring device 3 includes a security device information storage means 31 and an auxiliary storage section (not shown) used in each function. Equipped with an auxiliary storage section that does not Further, when the monitoring device 3 receives a security start signal, a security release signal, or an intrusion alarm together with the alarm device ID from the alarm device 2, the alarm device information storage means 31 stores the information in advance in association with the received alarm device ID. It is configured to search for the stored address of the installation location of the alarm device and to notify the mobile carrier network management device 4 of the searched address and the content of the received alarm or signal.

With such a configuration, there is a possibility that an intruder has the information in the mobile carrier network management device 4 without disclosing the information on the mobile terminal 5 from the communication carrier facility side to the monitoring center side. Information regarding candidates for the mobile terminal 5 can be acquired. In addition, the monitoring device 3 provides related organizations with information about the installation location (address) of the alarm device 2 that received the intrusion alarm, so that the related organizations can, based on the provided installation location (address), It is possible to inquire of the communication carrier side for information that can be used to identify the intruder (intruder identification information), and to obtain information regarding candidates for the mobile terminal 5 that may be in the possession of the intruder.

(Second embodiment)
Next, a second embodiment will be described.

The second embodiment differs from the first in that in detecting an intruder's preview behavior, a mobile terminal 5 that may be in the possession of the intruder and an abandoned mobile terminal 5 are identified based on the presence or absence of communication. This embodiment differs from the embodiment of . Hereinafter, in the description of the second embodiment, description of the same parts as the first embodiment will be omitted, and only parts different from the first embodiment will be described.

(Detection of intruder's preview behavior)
In step S24 shown in FIG. 8, the specific behavior detection means 33 of the monitoring device 3 detects the position information and communication status of the mobile terminal 5 stored in the auxiliary storage unit 103 etc. by the monitored mobile terminal information storage means 32, and the corresponding received information. Based on the time, the installation location of the alarm device 2 stored in the auxiliary storage unit 103 etc. by the alarm device information storage means 31, and the time when the security start signal and the security release signal are received, a predetermined area is placed within a predetermined distance range. The user has stayed in the area for more than a certain period of time, and a certain number of communications have occurred, and the time when the security start signal of the alarm device 2 installed in the area is received or the security release signal is received, and the time when the security release signal is received, Mobile terminals 5 having a correlation are extracted.

Even during the preliminary inspection, the intruder may operate the mobile terminal 5 that he or she owns to make calls, send and receive e-mails, etc. On the other hand, if the mobile terminal 5 is left unattended near the work site (for example, a mobile terminal 5 owned by a third party who lives near the work site and left on a desk while at home), this possibility is low. Therefore, if the communication status of the mobile terminal 5 (presence of calls, amount of communication, etc.) is also investigated, it is possible to distinguish between the two.

According to the present invention, when the security target is a residence, it is possible to obtain information that can be used to identify an intruder detected while the security guard is away from the residence.

Further, according to the present invention, when the security target is a store that is open for business, such as a convenience store, information that can be used to identify a criminal such as a robber or shoplifter detected at the store can be obtained. In this case, the sensors 2a to 2n detect suspicious behavior by a person (for example, a robber threatening a store employee, or a customer shoplifting a product from the store) by recognizing images taken by a camera installed in the store. It is also possible to use an image sensor that detects actions (such as actions), and to set the security mode during business hours to the security state mode. Alternatively, the sensors 2a to 2n may be replaced with emergency push buttons that output a detection signal when an emergency operation by a store employee is received, and the security mode during business hours may be set to the security state mode. With this configuration, even if a robbery or shoplifting occurs at a convenience store, if an intrusion alarm (detection signal) is triggered by being attacked by a robber or shoplifting, , it is possible to identify mobile terminals that may be in the possession of culprits such as robbers and shoplifters, and it can be provided to related organizations as information that can be used to identify culprits such as robbers and shoplifters.

1 Monitoring system 2 Alarm device 3 Monitoring device 4 Mobile carrier network management device 30 Intruder identification information acquisition means 31 Alarm device information storage means 32 Monitored mobile terminal information storage means 33 Specific behavior detection means

Claims (11)

When an intrusion alarm is received from an alarm device that detects an intruder in a monitoring area , information on mobile terminals existing within a predetermined distance range from the installation location of the alarm device is sent to the mobile terminal. means for acquiring intruder identification information received from a mobile carrier network management device that manages the mobile terminal in response to the transmission of the disclosure request;
monitoring target mobile terminal information storage means for storing information on the mobile terminal received from the mobile carrier network management device as a response to the disclosure request as information on the mobile terminal to be monitored;
A monitoring device comprising: comprising an alarm device information storage means for storing the installation location of the alarm device in association with an alarm device ID that identifies the alarm device;
Upon receiving the alarm device ID and intrusion warning from the alarm device, the intruder identification information acquisition means searches for the installation location of the alarm device stored in the alarm device information storage means based on the received alarm device ID. do,
The monitoring device according to claim 1, characterized in that: comprising a specific behavior detection means for detecting a specific behavior of a person who owns a mobile terminal based on the information of the mobile terminal stored by the monitored mobile terminal information storage means;
The monitoring device according to claim 2 , characterized in that: The specific behavior detection means includes:
When a security start signal or a security release signal is received from the alarm device along with the alarm device ID, a mobile phone existing in an area within a predetermined distance range around the installation location of the alarm device stored by the alarm device information storage means. transmitting a terminal information disclosure request to the mobile carrier network management device;
storing the mobile terminal information received from the mobile carrier network management device in response to the disclosure request in association with the time of reception by the monitored mobile terminal information storage means;
Detecting a specific behavior of a person possessing a mobile terminal based on the information of the mobile terminal stored in the monitored mobile terminal information storage means and the received time;
The monitoring device according to claim 3, characterized in that: The specific behavior detection means includes:
The person has stayed in an area within a predetermined distance range for a predetermined time or more, and the time of stay and the time when the security start signal of the alarm device installed in the area is received or the security release signal is received. Extract mobile terminals that have a certain correlation between
detecting a specific behavior of a person in possession of the extracted mobile terminal;
The monitoring device according to claim 4, characterized in that: The specific behavior detection means includes:
The person has stayed in an area within a predetermined distance range for a predetermined time or more, and a certain amount of communication is occurring, and has received the time period of stay and the security start signal of the alarm device installed in the area. or the time when the security release signal was received, extracting mobile terminals that have a correlation of more than a certain level,
detecting a specific behavior of a person in possession of the extracted mobile terminal;
The monitoring device according to claim 4, characterized in that: The intruder identification information acquisition means includes:
Sending a disclosure request to the mobile carrier network management device for the mobile terminal corresponding to the received mobile terminal information at each predetermined tracking time interval;
storing the mobile terminal information received from the mobile carrier network management device and the time of reception by the monitored mobile terminal information storage means;
The monitoring device according to any one of claims 1 to 6, characterized in that: The specific behavior detection means includes:
Based on the location information, communication status, and reception time included in the information of the mobile terminal stored by the monitored mobile terminal information storage means, the mobile terminal stays in an area within a predetermined distance range for a predetermined time or more, and for a certain period of time or more. Detecting a mobile terminal for which no communication is occurring as one that has been abandoned by the person in possession of the mobile terminal,
transmitting a request to disclose owner information of the detected mobile terminal to the mobile carrier network management device;
When receiving owner information of the mobile terminal from the mobile carrier network management device, reporting the received owner information of the mobile terminal to related organizations as information related to the intrusion warning;
The monitoring device according to claim 3, characterized in that: an alarm device that transmits an intrusion alarm when an intrusion detection means detects an intruder in a monitored area;
an intruder identification information acquisition means for acquiring information on mobile terminals existing within a predetermined distance range from the installation location of the alarm device when receiving an intrusion alarm from the alarm device;
monitoring target mobile terminal information storage means for storing the acquired information on the mobile terminal as information on the mobile terminal to be monitored;
A monitoring system comprising: The computer that controls the monitoring equipment,
When an intrusion alarm is received from an alarm device that detects an intruder in a monitoring area , information on mobile terminals existing within a predetermined distance range from the installation location of the alarm device is sent to the mobile terminal. means for acquiring intruder identification information received from a mobile carrier network management device that manages the mobile terminal in response to the transmission of the disclosure request;
monitoring target mobile terminal information storage means for storing information on the mobile terminal received from the mobile carrier network management device as a response to the disclosure request as information on the mobile terminal to be monitored;
A program to function as A method for acquiring intruder identification information in a surveillance system, the method comprising:
When the monitoring device receives an intrusion alarm from an alarm device that detects an intruder in the monitoring area, the intruder obtains information on mobile terminals existing within a predetermined distance range from the installation location of the alarm device. information acquisition identification step;
a monitoring target mobile terminal information storage step in which the monitoring device stores the acquired information on the mobile terminal as information on the mobile terminal to be monitored;
A method for acquiring intruder identification information, the method comprising:

Images