Camera equipment configuration data detection method, device, electronic equipment and storage medium

By extracting the feature value from the configuration data of the camera device and comparing the feature value of the running data, and using the summary algorithm to calculate the output summary, the problem of low tampering efficiency of detecting the configuration file of the camera device in the prior art is solved, and efficient and timely The inspection ensures the stability and safety of the equipment.

CN114021208BActive Publication Date: 2024-12-13BEIJING TOPSEC NETWORK SECURITY TECH +2
View PDF 12 Cites 0 Cited by

Patent Information

Application Number
CN202111452625.8
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2021-12-01
Publication Date
2024-12-13
Estimated Expiration
2041-12-01

AI Technical Summary

Technical Problem

In the prior art, it is inefficient to detect whether the configuration files of the camera equipment have been tampered with, and compared with historical data, the data volume is large and the inspection is complex, making it difficult to detect tampering in a timely manner.

Method used

By extracting feature values ​​from the configuration data of the camera device and comparing the feature values ​​of the running data, using the summary algorithm to calculate the output summary for comparison, determine whether the configuration data has been tampered with, and periodic detection of the Internet of Things security gateway is used to improve real-time performance .

Benefits of technology

Save computing resources and process consumption, improve detection efficiency, promptly detect configuration file tampering, and ensure the stability and security of camera equipment.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114021208B_ABST
    Figure CN114021208B_ABST
Patent Text Reader

Abstract

The present application provides a camera device configuration data detection method, device, electronic device and storage medium, the method comprising: obtaining the configuration data of the camera device, extracting the characteristic value of each configuration item in the configuration data, and storing the characteristic value in a database as reference data; when the camera device is running, controlling the Internet of Things security gateway to obtain the operation data of the camera device based on signaling; extracting the operation characteristic value of the operation data, and comparing the operation characteristic value with the characteristic value to determine whether the configuration data has changed. The camera device configuration data detection method provided by the embodiment of the present application can improve the detection efficiency of the camera device configuration file.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of camera device control, and in particular, to a camera device configuration data detection method, device, electronic device and storage medium. Background Art

[0002] As an important sensor device, camera equipment is widely used in the Internet of Things as an image data acquisition device. During the operation of the camera equipment, it is vulnerable to intrusion. The intruder modifies the configuration file of the camera equipment, such as changing the direction of the camera, so that the camera equipment cannot provide normal functions such as face recognition, motion detection, and intrusion recognition. At the same time, if the camera direction is judged by comparing the historical data of the recorded video later, the data volume is large and the troubleshooting complexity is high. Therefore, there is currently a problem of low efficiency in detecting whether the configuration file of the camera equipment has been tampered with. Summary of the invention

[0003] The purpose of the embodiments of the present application is to provide a method, an apparatus, an electronic device and a storage medium for detecting camera device configuration data, so as to improve the detection efficiency of camera device configuration files.

[0004] In a first aspect, an embodiment of the present application provides a method for detecting camera device configuration data, comprising:

[0005] Acquire configuration data of the camera device, extract characteristic values ​​of each configuration item in the configuration data, and store the characteristic values ​​in a database as reference data;

[0006] When the camera device is running, controlling the IoT security gateway to obtain the operating data of the camera device based on signaling;

[0007] An operation characteristic value of the operation data is extracted, and the operation characteristic value is compared with the characteristic value to determine whether the configuration data is changed.

[0008] In the above implementation process, by extracting feature values ​​from the configuration data of the camera device and comparing them with the operating feature values, it is confirmed whether the configuration data of the camera device has been tampered with during operation. Compared with comparing the complete camera device configuration file with the operating file at runtime to determine whether the file has been tampered with, it can save computing resources and process consumption and improve detection efficiency.

[0009] Optionally, extracting a characteristic value of each configuration item in the configuration data includes:

[0010] Calculate the output digest of each configuration item in the configuration data based on a preset digest algorithm, wherein the output digest is the characteristic value, and the output digest is a binary value string of a preset length;

[0011] The extracting the operation characteristic value of the operation data and comparing the operation characteristic value with the characteristic value to determine whether the configuration data has changed includes:

[0012] Calculate the output summary of the operation data based on the preset summary algorithm;

[0013] Comparing the output summary of the configuration item with the output summary of the operation data to see whether they are consistent;

[0014] When the output summary of the configuration item is consistent with the output summary of the operation data, it is determined that the configuration data has not been changed. If not, it is determined that the configuration data has been tampered with.

[0015] In the above implementation process, the output digest of the configuration item and the output digest of the operation data are calculated respectively through the digest algorithm, and based on whether the values ​​of the two output digests are consistent, it is determined whether the configuration data of the camera device has been tampered with during operation, which can improve the efficiency of data comparison and thus improve the efficiency of detecting the security of the camera device.

[0016] Optionally, extracting a characteristic value of each configuration item in the configuration data includes:

[0017] Selecting a data field of a preset length from the configuration items of the configuration data;

[0018] Calculating a characteristic value corresponding to the configuration item based on the data field, or taking any number of characters in the data field as the characteristic value;

[0019] The extracting the operation characteristic value of the operation data and comparing the operation characteristic value with the characteristic value to determine whether the configuration data has changed includes:

[0020] Selecting a data field of a preset length from the operating data;

[0021] Calculating a characteristic value of the operation data based on the data field, or taking any number of characters in the data field of the operation data as the characteristic value;

[0022] When the characteristic value of the configuration item is consistent with the characteristic value of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

[0023] In the above implementation process, the inspection method can be selected according to the specific situation during actual application, which can improve the flexibility of the inspection.

[0024] Optionally, after determining whether the configuration data has changed, the method further includes:

[0025] When it is determined that the configuration data has been tampered with, the IoT security gateway is controlled to restore the tampered data to the configuration data corresponding to the tampered data stored in the database based on control signaling; and when it is determined that the configuration data has been tampered with, a warning message is sent.

[0026] In the above implementation process, after determining that the configuration file of the camera device has been tampered with, the administrator can be promptly notified, and the tampered parameters can be restored according to the original configuration file in the database, which can improve the stability and security of the camera device operation.

[0027] Optionally, when the camera device is running, controlling the IoT security gateway to obtain the operating data of the camera device based on signaling includes:

[0028] Set the detection time interval;

[0029] Control the IoT security gateway to obtain the operating data from the camera device based on signaling after each detection time interval.

[0030] In the above implementation process, a detection time interval may be set to periodically detect the camera device, thereby improving the real-time performance of the detection and being able to promptly discover the camera device whose data has been tampered with.

[0031] In a second aspect, an embodiment of the present application provides a camera device configuration data detection device, comprising:

[0032] An extraction module, used to obtain configuration data of the camera device, extract characteristic values ​​of each configuration item in the configuration data, and store the characteristic values ​​as reference data in a database;

[0033] An acquisition module, used for controlling the IoT security gateway to acquire the operation data of the camera device based on signaling when the camera device is running;

[0034] The comparison module is used to extract the operation characteristic value of the operation data, and compare the operation characteristic value with the characteristic value to determine whether the configuration data is changed.

[0035] In the above implementation process, by extracting feature values ​​from the configuration data of the camera device and comparing them with the operating feature values, it is confirmed whether the configuration data of the camera device has been tampered with during operation. Compared with comparing the complete camera device configuration file with the operating file at runtime to determine whether the file has been tampered with, it can save computing resources and process consumption and improve detection efficiency.

[0036] Optionally, the extraction module is further used to: calculate an output summary of each configuration item in the configuration data based on a preset summary algorithm, the output summary is the feature value, and the output summary is a binary value string of a preset length;

[0037] The comparison module is also used for:

[0038] The output summary of the operating data is calculated based on the preset summary algorithm; the output summary of the configuration item is compared with the output summary of the operating data to see whether they are consistent; when the output summary of the configuration item is consistent with the output summary of the operating data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

[0039] In the above implementation process, the output digest of the configuration item and the output digest of the operation data are calculated respectively through the digest algorithm, and based on whether the values ​​of the two output digests are consistent, it is determined whether the configuration data of the camera device has been tampered with during operation, which can improve the efficiency of data comparison and thus improve the efficiency of detecting the security of the camera device.

[0040] Optionally, the extraction module can also be used to:

[0041] Selecting a data field of a preset length from the configuration items of the configuration data;

[0042] Calculating a characteristic value corresponding to the configuration item based on the data field, or taking any number of characters in the data field as the characteristic value;

[0043] The comparison module can also be used to:

[0044] Selecting a data field of a preset length from the operating data;

[0045] Calculating a characteristic value of the operation data based on the data field, or taking any number of characters in the data field of the operation data as the characteristic value;

[0046] When the characteristic value of the configuration item is consistent with the characteristic value of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

[0047] In the above implementation process, the inspection method can be selected according to the specific situation during actual application, which can improve the flexibility of the inspection.

[0048] Optionally, the camera device configuration data detection device may further include a processing module, which is used to control the IoT security gateway to restore the tampered data to the configuration data corresponding to the tampered data stored in the database based on control signaling when it is determined that the configuration data has been tampered with. And when it is determined that the configuration data has been tampered with, send a warning message.

[0049] In the above implementation process, after determining that the configuration file of the camera device has been tampered with, the administrator can be promptly notified, and the tampered parameters can be restored according to the original configuration file in the database, which can improve the stability and security of the camera device operation.

[0050] Optionally, the acquisition module can also be used to:

[0051] Set a detection time interval; control the IoT security gateway to obtain the operating data from the camera device based on signaling after each detection time interval.

[0052] In the above implementation process, a detection time interval may be set to periodically detect the camera device, thereby improving the real-time performance of the detection and being able to promptly discover the camera device whose data has been tampered with.

[0053] In a third aspect, an embodiment of the present application provides an electronic device, comprising a memory and a processor, wherein the memory stores program instructions, and when the processor reads and runs the program instructions, it executes the steps in any of the above implementation methods.

[0054] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer program instructions, and when the computer program instructions are read and executed by a processor, the steps in any of the above-mentioned implementation methods are executed. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0056] Figure 1 A schematic diagram of the steps of a method for detecting camera device configuration data provided in an embodiment of the present application;

[0057] Figure 2 A schematic diagram of the steps of comparing an operating characteristic value with a characteristic value provided in an embodiment of the present application;

[0058] Figure 3 A schematic diagram of another step of comparing characteristic values ​​with characteristic values ​​provided in an embodiment of the present application;

[0059] Figure 4 A schematic diagram of a step of obtaining operation data from a camera device provided in an embodiment of the present application;

[0060] Figure 5 A schematic diagram of a data detection device configured for a camera device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0061] The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings in the embodiments of the present application. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architectures, functions and operations of the systems, methods and computer program products according to multiple embodiments of the present invention. In this regard, each box in the flowchart or block diagram may represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions marked in the box may also occur in an order different from that marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they may sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or the flowchart, and the combination of boxes in the block diagram and / or the flowchart, can be implemented by a dedicated hardware-based system that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions. In addition, the functional modules in the various embodiments of the present invention can be integrated together to form an independent part, or each module can exist separately, or two or more modules can be integrated to form an independent part.

[0062] During the research process, the applicant discovered that the current method of detecting whether the configuration file of a camera device has been tampered with is to collect image data from each node of the camera device for comparison, and to determine whether the configuration file of the camera device has been changed by cross-comparison of the image data. In this comparison method, only when the image data has changed can it be determined that the configuration file has been tampered with, but tampering with the configuration file does not necessarily cause changes in the image. For example, when parameters such as the frame rate and frame interval of the camera device are changed, the image data will not change. Therefore, the accuracy of detection through this implementation method does not meet the standard, and the comparison of image data will consume a large amount of computing resources. When multiple camera devices need to be detected, there is a problem of low efficiency.

[0063] Based on this, the embodiment of the present application provides a camera device configuration data detection method, which extracts characteristic values ​​from the camera device configuration data and compares them with the operation characteristic values ​​to confirm whether the camera device configuration data has been tampered with during operation. Figure 1 , Figure 1 The following is a schematic diagram of the steps of the camera device configuration data detection method provided in the embodiment of the present application. The camera device configuration data detection process may include the following steps:

[0064] In step S11, configuration data of the camera device is acquired, characteristic values ​​of each configuration item in the configuration data are extracted, and the characteristic values ​​are stored in a database as reference data.

[0065] The camera device may be a surveillance camera or other device that converts optical signals into electrical signals for storage or transmission. The configuration data of the camera device may include PTZ parameters of the camera equipment, which respectively represent the horizontal angle, vertical angle and focal length of the camera device. The configuration data may also include configuration items such as the bitstream parameter, bitrate parameter, frame rate, frame interval, focus parameter, focal length, image brightness, image contrast and image saturation of the camera device.

[0066] For example, after the parameters of each configuration item of the camera device are set, the configuration file of the camera device can be subjected to a benchmark solidification operation, and the characteristic values ​​of each parameter can be removed therefrom, and the characteristic values ​​can be used as benchmark data and stored in the database. The characteristic value of the parameter can be a hash value calculated by a digest algorithm, a field of a preset length selected from the parameter, or a value containing parameter information calculated using a predetermined formula based on the predetermined relationship between the data bit and the check bit.

[0067] In step S12, when the camera device is running, the Internet of Things security gateway is controlled to obtain the operating data of the camera device based on signaling.

[0068] Among them, the IoT gateway is a converter or converter that performs conversion protocols, encryption, management and filtering data functions, and is connected to the terminal and the camera device respectively. The terminal can be an electronic device with networking function, which can be a configurator of engineering equipment, a mobile phone, a tablet computer, a computer, a personal digital assistant, etc.

[0069] In step S13, the operation characteristic value of the operation data is extracted, and the operation characteristic value is compared with the characteristic value to determine whether the configuration data is changed.

[0070] Exemplarily, the operation characteristic value of the operation data is the operation parameter of each configuration item when the camera device is running, and the operation characteristic value corresponds to the characteristic value of the configuration item. For example, when the characteristic value of the configuration item is a hash value, the operation characteristic value is also a hash value. When the characteristic value of the configuration item has a field with a preset length or a value containing parameter information is calculated based on an agreed formula, the operation characteristic value also has the same meaning.

[0071] It can be seen that the embodiment of the present application extracts characteristic values ​​from the configuration data of the camera device and compares them with the operating characteristic values ​​to confirm whether the configuration data of the camera device has been tampered with during operation. Compared with comparing the complete camera device configuration file with the operating file at runtime to determine whether the file has been tampered with, it can save computing resources and process consumption and improve detection efficiency.

[0072] In addition, in the Internet of Things system, a gateway can be connected to multiple camera devices at the same time. Therefore, the camera device configuration data detection method in the embodiment of the present application can be used to simultaneously detect whether the configuration files of multiple camera devices have been tampered with during operation, which can further improve the detection efficiency and reduce the deployment cost of the Internet of Things.

[0073] In an optional embodiment, extracting the characteristic value of each configuration item in the configuration data may be calculating the output summary of each configuration item in the configuration data based on a preset summary algorithm, the output summary is the characteristic value, and the output summary may be a binary value string of a preset length. With respect to extracting the operation characteristic value of the operation data in step S13, and comparing the operation characteristic value with the characteristic value, the embodiment of the present application provides a method for comparing the operation characteristic value with the characteristic value, please refer to Figure 2 , Figure 2 A schematic diagram of the steps of comparing an operating characteristic value with a characteristic value provided in an embodiment of the present application, the process of comparing an operating characteristic value with a characteristic value may include:

[0074] In step S21, an output digest of the operation data is calculated based on the preset digest algorithm.

[0075] In step S22, the output summary of the configuration item is compared with the output summary of the operation data to see whether they are consistent.

[0076] In step S23, when the output summary of the configuration item is consistent with the output summary of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

[0077] Exemplarily, when the characteristic value is the output digest, the output digest of each configuration item in the configuration data and the output digest of the operation data can be calculated by the MD5 (Message-Digest Algorithm 5) algorithm or the Secure Hash Algorithm (SHA). In addition, the digest output algorithm can also be the Data Encryption Standard (DES) algorithm or the Advanced Encryption Standard (AES) algorithm, etc. It should be understood that in the embodiment of the present application, the output digest of the configuration item and the output digest of the operation data can also be calculated based on other digest algorithms. The basic calculation method in the digest algorithm can include remainder, remainder, length adjustment, and loop operation with link variables, etc., so as to obtain the output digest. The digest algorithm provided above is only illustrative and cannot be understood as limiting the scope of protection of the present application.

[0078] It can be seen that the embodiment of the present application calculates the output digest of the configuration item and the output digest of the operation data respectively through the digest algorithm, and determines whether the configuration data of the camera device has been tampered with during operation based on whether the values ​​of the two output digests are consistent, which can improve the efficiency of data comparison and thus improve the efficiency of detecting the security of the camera device.

[0079] In another optional embodiment, extracting the characteristic value of each configuration item in the configuration data may also be selecting a data field of a preset length from the configuration items of the configuration data; calculating the characteristic value corresponding to the configuration item based on the data field, or taking any number of characters in the data field as the characteristic value. With respect to extracting the operation characteristic value of the operation data in step S13, and comparing the operation characteristic value with the characteristic value, the embodiment of the present application provides another method for comparing the operation characteristic value with the characteristic value, please refer to Figure 3 , Figure 3 Another schematic diagram of steps for comparing an operating characteristic value with a characteristic value provided in an embodiment of the present application, the process of comparing an operating characteristic value with a characteristic value may also be:

[0080] In step S31, a data field of a preset length is selected from the operating data.

[0081] In step S32, a characteristic value of the operation data is calculated based on the data field, or any number of characters in the data field of the operation data is used as the characteristic value.

[0082] In step S33, when the characteristic value of the configuration item is consistent with the characteristic value of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

[0083] Exemplarily, in the implementation process of calculating the characteristic value corresponding to the configuration item based on the data field, a cyclic redundancy check algorithm (CRC) can be used to arbitrarily select a data field from each configuration item in the configuration file, perform a polynomial calculation on the selected data field, and attach the result to the last field of the data. The same calculation steps are performed on the running data, and a polynomial calculation is performed on the running data field corresponding to the configuration item to determine whether the results are consistent, thereby determining whether the configuration file has been tampered with.

[0084] In the process of implementing the number of any characters in the data field as a characteristic value, the parity check method can be used to determine whether the number of code "1" in the binary code is odd or even. When checking the running data, it is also determined whether the number of data summary code "1" is the same as the configuration item. Is an odd number or an even number, thereby determining whether the configuration file of the camera device has been tampered with during operation.

[0085] It can be seen that the embodiment of the present application provides another method for checking whether the configuration file has been tampered with. In actual application, the inspection method can be selected according to the specific situation, which can improve the flexibility of the inspection.

[0086] In addition, the configuration files may be rechecked using the above-mentioned multiple inspection methods to improve the accuracy of verifying whether the data has been tampered with.

[0087] Optionally, after determining whether the configuration data has changed in step S13, the method provided in the embodiment of the present application may further include:

[0088] When it is determined that the configuration data has been tampered with, the Internet of Things security gateway is controlled to restore the tampered data to the configuration data corresponding to the tampered data stored in the database based on control signaling.

[0089] And when it is determined that the configuration data has been tampered with, a warning message is sent.

[0090] Specifically, when it is determined that the PTZ parameters of the camera device have been tampered with, the gateway actively sends a control signal to the camera device to restore the PTZ parameters of the camera device to the configuration parameters of the original configuration file in the database, thereby restoring the direction of the camera device. At the same time, the administrator can also be notified by SMS, pop-up window, prompt tone or warning voice that the camera device configuration file has been tampered with.

[0091] It can be seen that after determining that the configuration file of the camera device has been tampered with, the embodiment of the present application can promptly prompt the management personnel and can also restore the tampered parameters according to the original configuration file in the database, thereby improving the stability and security of the operation of the camera device.

[0092] Optionally, for step S12, the present application embodiment provides a method for obtaining operation data from a camera device, see Figure 4 , Figure 4 A schematic diagram of a step of obtaining operation data from a camera device provided in an embodiment of the present application, the step of obtaining operation data may be:

[0093] In step S41, a detection time interval is set.

[0094] In step S42, the IoT security gateway is controlled to obtain the operating data from the camera device based on signaling after each detection time interval.

[0095] The time interval may be 1 minute, 10 minutes, or may be set according to actual conditions.

[0096] It can be seen that the embodiment of the present application can set a detection time interval to periodically detect the camera device, thereby improving the real-time performance of the detection and being able to promptly discover the camera device whose data has been tampered with.

[0097] Based on the same inventive concept, the present application embodiment also provides a camera device configuration data detection device 50, please refer to Figure 5 , Figure 5 A schematic diagram of a camera device configuration data detection device provided in an embodiment of the present application, the camera device configuration data detection device 50 may include:

[0098] An extraction module 51 is used to obtain configuration data of the camera device, extract characteristic values ​​of each configuration item in the configuration data, and store the characteristic values ​​as reference data in a database;

[0099] An acquisition module 52 is used to control the IoT security gateway to acquire the operation data of the camera device based on signaling when the camera device is running;

[0100] The comparison module 53 is used to extract the operation characteristic value of the operation data, and compare the operation characteristic value with the characteristic value to determine whether the configuration data is changed.

[0101] Optionally, the extraction module 51 may also be used to:

[0102] Calculate the output digest of each configuration item in the configuration data based on a preset digest algorithm, wherein the output digest is the characteristic value, and the output digest is a binary value string of a preset length;

[0103] The comparison module 53 may also be used to:

[0104] The output summary of the operating data is calculated based on the preset summary algorithm; the output summary of the configuration item is compared with the output summary of the operating data to see whether they are consistent; when the output summary of the configuration item is consistent with the output summary of the operating data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

[0105] Optionally, the extraction module 51 may also be used to:

[0106] Selecting a data field of a preset length from the configuration items of the configuration data;

[0107] Calculating a characteristic value corresponding to the configuration item based on the data field, or taking any number of characters in the data field as the characteristic value;

[0108] The comparison module 53 may also be used to:

[0109] Selecting a data field of a preset length from the operating data;

[0110] Calculating a characteristic value of the operation data based on the data field, or taking any number of characters in the data field of the operation data as the characteristic value;

[0111] When the characteristic value of the configuration item is consistent with the characteristic value of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

[0112] Optionally, the camera device configuration data detection device 50 may further include a processing module, which is used to control the IoT security gateway to restore the tampered data to the configuration data corresponding to the tampered data stored in the database based on control signaling when it is determined that the configuration data has been tampered with. And when it is determined that the configuration data has been tampered with, send a warning message.

[0113] Optionally, the acquisition module 52 may also be used to:

[0114] Set a detection time interval; control the IoT security gateway to obtain the operating data from the camera device based on signaling after each detection time interval.

[0115] Based on the same inventive concept, an embodiment of the present application also provides an electronic device, which includes a memory and a processor, wherein program instructions are stored in the memory, and when the processor reads and runs the program instructions, the steps in any of the above implementation methods are executed.

[0116] Based on the same inventive concept, an embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer program instructions, and when the computer program instructions are read and executed by a processor, the steps in any of the above implementation methods are executed.

[0117] The computer-readable storage medium may be a random access memory (RAM), a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or any other medium that can store program codes. The storage medium is used to store the program, and the processor executes the program after receiving the execution instruction. The method executed by the electronic terminal of the process definition disclosed in any embodiment of the present invention can be applied to the processor or implemented by the processor.

[0118] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0119] In addition, the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0120] Furthermore, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0121] Alternatively, the present invention may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented by software, the present invention may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part.

[0122] The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means.

[0123] In this article, relational terms such as first and second, etc. are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0124] The above description is only an embodiment of the present application and is not intended to limit the protection scope of the present application. For those skilled in the art, the present application may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A method for detecting camera device configuration data, characterized in that: include: Acquire configuration data of the camera device, extract characteristic values ​​of each configuration item in the configuration data, and store the characteristic values ​​as reference data in a database; When the camera device is running, controlling the IoT security gateway to obtain the operating data of the camera device based on signaling; extracting an operation characteristic value of the operation data, and comparing the operation characteristic value with the characteristic value to determine whether the configuration data has changed; The extracting the characteristic value of each configuration item in the configuration data comprises: Calculate the output digest of each configuration item in the configuration data based on a preset digest algorithm, wherein the output digest is the characteristic value, and the output digest is a binary value string of a preset length; The extracting the operation characteristic value of the operation data and comparing the operation characteristic value with the characteristic value to determine whether the configuration data has changed includes: Calculate the output summary of the operation data based on the preset summary algorithm; Comparing the output summary of the configuration item with the output summary of the operation data to see whether they are consistent; When the output summary of the configuration item is consistent with the output summary of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with; The extracting the characteristic value of each configuration item in the configuration data comprises: Selecting a data field of a preset length from the configuration items of the configuration data; Calculating a characteristic value corresponding to the configuration item based on the data field, or taking any number of characters in the data field as the characteristic value; The extracting the operation characteristic value of the operation data and comparing the operation characteristic value with the characteristic value to determine whether the configuration data has changed includes: Selecting a data field of a preset length from the operating data; Calculating a characteristic value of the operation data based on the data field, or taking any number of characters in the data field of the operation data as the characteristic value; When the characteristic value of the configuration item is consistent with the characteristic value of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with; After determining whether the configuration data has changed, the method further includes: When it is determined that the configuration data has been tampered with, the Internet of Things security gateway is controlled to restore the tampered data to the configuration data corresponding to the tampered data stored in the database based on control signaling.

2. The method according to claim 1, characterized in that: When the camera device is running, controlling the IoT security gateway to obtain the operation data of the camera device based on signaling includes: Set the detection time interval; Control the IoT security gateway to obtain the operating data from the camera device based on signaling after each detection time interval.

3. The method according to claim 1, characterized in that After determining whether the configuration data has changed, the method further includes: When it is determined that the configuration data has been tampered with, a warning message is sent.

4. A camera device configuration data detection device, characterized in that: include: An extraction module, used to obtain configuration data of the camera device, extract characteristic values ​​of each configuration item in the configuration data, and store the characteristic values ​​as reference data in a database; An acquisition module, used for controlling the IoT security gateway to acquire the operation data of the camera device based on signaling when the camera device is running; A comparison module, used to extract the operation characteristic value of the operation data, and compare the operation characteristic value with the characteristic value to determine whether the configuration data has been changed; when it is determined that the configuration data has been tampered with, control the IoT security gateway to restore the tampered data to the configuration data corresponding to the tampered data stored in the database based on control signaling; The extraction module is further used to: calculate the output summary of each configuration item in the configuration data based on a preset summary algorithm, the output summary is the feature value, and the output summary is a binary value string of a preset length; Or, a data field of a preset length is selected from the configuration items of the configuration data; a feature value corresponding to the configuration item is calculated based on the data field, or any number of characters in the data field is used as the feature value; or, The comparison module is also used for: Calculating the output digest of the operating data based on the preset digest algorithm; comparing the output digest of the configuration item with the output digest of the operating data to see whether they are consistent; if the output digest of the configuration item is consistent with the output digest of the operating data, determining that the configuration data has not been changed, if not, determining that the configuration data has been tampered with; Or, a data field of a preset length is selected from the operation data; a characteristic value of the operation data is calculated based on the data field, or any number of characters in the data field of the operation data is used as the characteristic value; When the characteristic value of the configuration item is consistent with the characteristic value of the operation data, it is determined that the configuration data has not been changed, if not, it is determined that the configuration data has been tampered with.

5. An electronic device, characterized in that: The electronic device comprises a memory and a processor, wherein the memory stores program instructions, and when the processor runs the program instructions, the steps in the method according to any one of claims 1 to 3 are executed.

6. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the steps in the method according to any one of claims 1 to 3 are executed.

Citation Information

Patent Citations

  • Safety reinforcing device and operation method of operating system

    CN105912945A

  • Urban intelligent management platform

    CN106251271A

  • Virus killing method and device

    CN106709340A

  • Service configuration method, device, controller and electronic equipment

    CN107547248A

  • Verification method and device for application client and server platform

    CN109635567A