Production video monitoring equipment and method for accessing production video monitoring equipment to information intranet

Abstract

The invention discloses production video monitoring equipment and a method for accessing the production video monitoring equipment to an information intranet, which relate to the technical field of information security and specifically comprise the following steps of: deploying firewall equipment which is detected and authenticated by a national appointed department between two independent networks, namely a production field video monitoring system network and an intranet; and the firewall equipment forbids the production field video monitoring system to access an intranet network, specifically appoints IP addresses and ports of a source and a destination, and limits access users and services to the production field video monitoring system. According to the production video monitoring equipment and the method for accessing the production video monitoring equipment to the information intranet, a user can access a production field video monitoring system and enter the intranet to check historical video data through firewall equipment, abnormal conditions in the production process can be found in time, and the video data can be retrieved and traced back after an accident occurs; and the working efficiency is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of information security, in particular to a method for producing video monitoring equipment and accessing the equipment to an information intranet. Background Art

[0002] The production site video monitoring system can help enterprises realize real-time monitoring and management of the production site to ensure the safety and effectiveness of the production process, and is one of the important means of modern office management. However, in the actual working environment, the production video monitoring system is physically isolated from the information intranet, and due to network security requirements, the production site video monitoring system network and the intranet are two independent networks. The production site video monitoring system cannot be directly connected to the intranet for use by intranet users. It needs to be connected to the front-end aggregation switch through the access port. The front-end aggregation switch transmits data to the information intranet through the uplink port to realize remote real-time browsing of the video and remote storage of monitoring data. However, this monitoring video access method allows illegal users to infiltrate the intranet by accessing and controlling the production site video monitoring system or the front-end aggregation switch, affecting the security of the intranet information; during the transmission of video data, it is easy to cause data leakage or data tampering, affecting the security of video data transmission, and because the video data stream has the characteristics of large transmission data volume and high real-time requirements, it is difficult to encrypt the video data; based on this, the present application proposes a production video monitoring device and a method for accessing the information intranet. Summary of the invention

[0003] The present invention provides a production video surveillance device and a method for accessing the device to an information intranet, which solves the problems raised in the above background technology that illegal users can infiltrate the intranet by accessing and controlling the production site video surveillance system or the front-end aggregation switch, affecting the security of the intranet information, and that encryption is difficult during video data transmission and the data transmission security is low.

[0004] The present invention provides the following technical solution: a production video monitoring device, comprising a production site video monitoring system and a firewall device, wherein the production site video monitoring system is connected to the firewall device, the firewall device is connected to an intranet, the firewall device prohibits the production site video monitoring system from accessing the intranet network, the firewall device specifically specifies the source and destination IP addresses and ports, and limits the users and services accessing the production site video monitoring system;

[0005] The firewall device includes a receiving unit, an identification unit, a network address translation unit, a server mapping unit and a storage unit; the receiving unit is used to receive an access request from an intranet, and upload the visitor's identity information and the access request to the identification unit; the identification unit is used to verify the visitor's identity information, and after the visitor's identity information is verified to be qualified, the identification unit identifies the visitor's access request; the server mapping unit converts the public network address of the production site video surveillance system to be accessed into a private network address; the network address translation unit converts the original data packet source address stored in the production site video surveillance system into an outbound interface address, and uploads the video data accessed by the user to the intranet; the storage unit is used to pre-store legal user identity information.

[0006] Preferably, the production site video monitoring system includes a monitoring terminal, a data processing module and a background server; the monitoring terminal is connected to the data processing module, the data processing module is connected to the background server, and the background server is connected to the firewall device; the monitoring terminal is used to collect production site data in real time and upload the collected data to the data processing module; the data processing module cleans, annotates, analyzes and encrypts the received data, and uploads the processed data to the background server; the background server performs in-depth analysis and storage on the received data.

[0007] Preferably, the monitoring terminal is connected to the data processing module via a wireless communication module, the data processing module is connected to the background server via the wireless communication module, and both the data processing module and the background server use intelligent algorithms to process and analyze data.

[0008] Preferably, the receiving unit receives the identity data from the intranet user by logging into the video surveillance system through a user account.

[0009] Preferably, the identification unit compares the received visitor identity information with pre-stored legitimate user identity information to verify the legitimacy of the visitor identity.

[0010] A method for connecting a production video surveillance device to an information intranet comprises the following steps:

[0011] Step 1: Connect a firewall device between the production site video surveillance system network and the intranet. The firewall device specifies the source and destination IP addresses and ports, and logs in to the video surveillance system with a user account to limit the intranet's access to the production site video surveillance system users and services, and prohibits the production site video surveillance system network from accessing the intranet network;

[0012] Step 2: The intranet user account logs in to the production site video surveillance system. The firewall device receives and verifies the user's identity information. If the user's identity information verification fails, the user is restricted from continuing to access. If the user's identity information verification passes, the firewall device receives the user's access request and identifies the user's access request.

[0013] Step 3: The firewall device converts the public network address of the production site video surveillance system to be accessed into a private network address, converts the source address of the original data packet of the production site video surveillance system to be accessed into the outbound interface address, and uploads the video data accessed by the user to the intranet;

[0014] Step 4: Intranet users access production site surveillance videos.

[0015] Preferably, the same video data will not be uploaded to the intranet repeatedly, and after the video data is uploaded to the intranet, when the video data is accessed again, the firewall device omits the operation of converting the original data packet source address of the production site video surveillance system to be accessed into the outbound interface address.

[0016] Preferably, when the firewall device verifies the user's identity information, it first verifies the user's IP address and then verifies other account information of the user; different users have different specific access rights.

[0017] Compared with the prior art, the present invention has the following beneficial effects:

[0018] 1. The production video surveillance equipment and the method of accessing the information intranet, through the control of the firewall access policy, configure the detailed firewall policy, specifically specify the source and destination IP address and port, and log in to the video surveillance system with a user account, so as to limit the intranet access to the production site video surveillance system users and services, and prohibit the production site video surveillance system network from accessing the intranet network, and strictly implement the network security system.

[0019] 2. The production video surveillance equipment and the method for accessing the information intranet enable users to access the production site video surveillance system and enter the intranet to view historical video data through the firewall device, so as to timely discover abnormal situations in the production process and review and trace back the video data after an accident occurs, thus greatly improving work efficiency.

[0020] 3. The production video monitoring device and the method for accessing the information intranet thereof greatly improve the security of data by converting the public network address of the production site video monitoring system to be accessed into a private network address. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 The network topology diagram of the present invention;

[0022] Figure 2 This is a structural block diagram of the firewall device of the present invention;

[0023] Figure 3 Flow chart for connecting production video surveillance equipment to the information intranet. DETAILED DESCRIPTION

[0024] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0025] The present invention provides a production video monitoring device, including a production site video monitoring system and a firewall device. The production site video monitoring system is connected to the firewall device, and the firewall device is connected to an intranet. The firewall device controls the firewall access policy, configures a detailed firewall policy, specifically specifies the source and destination IP addresses and ports, and logs in to the video monitoring system with a user account to limit the intranet's access to users and services of the production site video monitoring system, and prohibits the production site video monitoring system network from accessing the intranet network, thereby strictly enforcing the network security system.

[0026] The firewall device includes a receiving unit, an identification unit, a network address translation unit, a server mapping unit and a storage unit; the receiving unit is used to receive access requests from the intranet and upload the visitor's identity information and access requests to the identification unit, and the receiving unit receives identity data from intranet users by logging into the video surveillance system through a user account.

[0027] The identification unit is used to verify the visitor's identity information, and after the visitor's identity information is verified, the identification unit identifies the visitor's access request. The identification unit verifies the legitimacy of the visitor's identity by comparing the received visitor's identity information with the pre-stored legitimate user identity information, and the identification unit will first identify the visitor's IP data to exclude non-intranet users and improve the efficiency of data identification.

[0028] The server mapping unit converts the public network address of the production site video surveillance system to be accessed into a private network address, thereby improving the security of video data access.

[0029] The network address translation unit converts the original data packet source address stored in the production site video surveillance system into an outbound interface address, and uploads the video data accessed by the user to the intranet, so that intranet users can enter the intranet through the firewall device to view historical video data, and can promptly discover abnormal situations in the production process, and can review and trace video data after an accident, greatly improving work efficiency.

[0030] The storage unit is used to pre-store legal user identity information to facilitate verification of visitor information.

[0031] The above-mentioned production site video monitoring system includes a monitoring terminal, a data processing module and a background server; the monitoring terminal is connected to the data processing module, the data processing module is connected to the background server, and the background server is connected to the firewall device; the monitoring terminal is used to collect production site data in real time and upload the collected data to the data processing module; the data processing module cleans, annotates, analyzes and encrypts the received data, and uploads the processed data to the background server; the background server performs in-depth analysis and storage on the received data. The monitoring terminal is connected to the data processing module through a wireless communication module, and the data processing module is connected to the background server through a wireless communication module. Both the data processing module and the background server use intelligent algorithms to process and analyze the data.

[0032] A method for connecting a production video surveillance device to an information intranet comprises the following steps:

[0033] Step 1: Connect a firewall device between the production site video surveillance system network and the intranet. The firewall device specifies the source and destination IP addresses and ports, and logs in to the video surveillance system with a user account to limit the intranet's access to the production site video surveillance system users and services, and prohibits the production site video surveillance system network from accessing the intranet network;

[0034] Step 2: The intranet user account logs in to the production site video surveillance system. The firewall device receives and verifies the user's identity information. If the user's identity information verification fails, the user is restricted from continuing to access. If the user's identity information verification passes, the firewall device receives the user's access request and identifies the user's access request.

[0035] Step 3: The firewall device converts the public network address of the production site video surveillance system to be accessed into a private network address, converts the source address of the original data packet of the production site video surveillance system to be accessed into the outbound interface address, and uploads the video data accessed by the user to the intranet;

[0036] Step 4: Intranet users access production site surveillance videos.

[0037] The same video data will not be uploaded to the intranet repeatedly, and after the video data is uploaded to the intranet, when the video data is accessed again, the firewall device omits the operation of converting the source address of the original data packet of the production site video monitoring system to be accessed into the outbound interface address. When the firewall device verifies the user's identity information, it first verifies the user's IP address, and then verifies the user's other account information, thereby improving the efficiency of user identity information verification; different users have different specific access rights, thereby improving data security.

[0038] To sum up: when this application is in use, a firewall device that has been tested and certified by the national designated department is deployed between the two independent networks of the production site video surveillance system network and the intranet, which solves the restrictions on the intranet users' access to the production site video surveillance system usage location and greatly improves work efficiency. Intranet users can easily access the production site video surveillance system on the intranet office computer. Intranet users can also enter the intranet through the firewall to view historical video data, and can promptly discover abnormal situations in the production process. They can review and trace video data after an accident occurs, which greatly improves work efficiency.

[0039] The standard parts used in the present invention can all be purchased from the market, and special-shaped parts can be customized according to the description in the specification and the drawings. The specific connection methods of each part adopt conventional means such as mature bolts, rivets, welding, etc. in the prior art. Machinery, parts and equipment all adopt conventional models in the prior art and will not be described in detail here. The contents not described in detail in this specification belong to the prior art known to professional and technical personnel in this field. Although the embodiments of the present invention have been shown and described, it can be understood by ordinary technicians in this field that various changes, modifications, substitutions and modifications can be made to these embodiments without departing from the principle and spirit of the present invention. The scope of the present invention is defined by the attached claims and their equivalents.

Claims

1. A production video monitoring device, including a production site video monitoring system and a firewall device, characterized in that: The production site video surveillance system is connected to a firewall device, which is connected to an intranet. The firewall device prohibits the production site video surveillance system from accessing the intranet network. The firewall device specifically specifies the source and destination IP addresses and ports, and limits the users and services that access the production site video surveillance system. The firewall device includes a receiving unit, an identification unit, a network address translation unit, a server mapping unit and a storage unit; the receiving unit is used to receive an access request from an intranet, and upload the visitor's identity information and the access request to the identification unit; the identification unit is used to verify the visitor's identity information, and after the visitor's identity information is verified to be qualified, the identification unit identifies the visitor's access request; the server mapping unit converts the public network address of the production site video surveillance system to be accessed into a private network address; the network address translation unit converts the original data packet source address stored in the production site video surveillance system into an outbound interface address, and uploads the video data accessed by the user to the intranet; the storage unit is used to pre-store legal user identity information.

2. A production video monitoring device according to claim 1, characterized in that: The production site video monitoring system includes a monitoring terminal, a data processing module and a background server; the monitoring terminal is connected to the data processing module, the data processing module is connected to the background server, and the background server is connected to the firewall device; the monitoring terminal is used to collect production site data in real time and upload the collected data to the data processing module; the data processing module cleans, annotates, analyzes and encrypts the received data, and uploads the processed data to the background server; The backend server performs in-depth analysis and storage on the received data.

3. The production video monitoring device according to claim 2, characterized in that: The monitoring terminal is connected to the data processing module via a wireless communication module, and the data processing module is connected to a background server via a wireless communication module. Both the data processing module and the background server use intelligent algorithms to process and analyze data.

4. The production video monitoring device according to claim 1, characterized in that: The receiving unit receives the identity data from the intranet user by logging into the video monitoring system through a user account.

5. The production video monitoring device according to claim 1, characterized in that: The identification unit compares the received visitor identity information with the pre-stored legal user identity information to verify the legitimacy of the visitor identity.

6. A method for connecting production video monitoring equipment to an information intranet according to any one of claims 1 to 5, characterized in that: The following steps are involved: Step 1: Connect a firewall device between the production site video surveillance system network and the intranet. The firewall device specifies the source and destination IP addresses and ports, and logs in to the video surveillance system with a user account to limit the intranet's access to the production site video surveillance system users and services, and prohibits the production site video surveillance system network from accessing the intranet network; Step 2: The intranet user account logs in to the production site video surveillance system. The firewall device receives and verifies the user's identity information. If the user's identity information verification fails, the user is restricted from continuing to access. If the user's identity information verification passes, the firewall device receives the user's access request and identifies the user's access request. Step 3: The firewall device converts the public network address of the production site video surveillance system to be accessed into a private network address, converts the source address of the original data packet of the production site video surveillance system to be accessed into the outbound interface address, and uploads the video data accessed by the user to the intranet; Step 4: Intranet users access production site surveillance videos.

7. A method for connecting production video monitoring equipment to an information intranet according to claim 6, characterized in that: The same video data will not be uploaded to the intranet repeatedly, and after the video data is uploaded to the intranet, when the video data is accessed again, the firewall device omits the operation of converting the original data packet source address of the production site video surveillance system to be accessed into the outbound interface address.

8. The method for connecting production video monitoring equipment to an information intranet according to claim 6, characterized in that: When the firewall device verifies the user's identity information, it first verifies the user's IP address and then verifies other account information of the user; different users have different specific access rights.

Images