Camera tampering identification method and device, electronic equipment and readable storage medium

By matching and identifying camera equipment parameter configuration information and video stream feature information, the problem of difficult camera tampering detection is solved, and fast and accurate tampering detection and prompts are achieved.

CN121664969APending Publication Date: 2026-03-13HANGZHOU HIKVISION SYST TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-08-27
Publication Date
2026-03-13

AI Technical Summary

Technical Problem

Existing technology makes it difficult to identify whether cameras have been tampered with, making it difficult for monitoring centers to detect abnormal and illegal behaviors and thus unable to effectively stop or trace them.

Method used

By matching the camera's device parameter configuration information with the pre-stored, unaltered configuration information, it can be identified whether the configuration information has been changed. Further verification is then performed using video stream feature information to determine whether the camera has been tampered with.

Benefits of technology

It enables rapid identification and timely alerts for camera tampering, ensuring the security and reliability of the monitoring system.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121664969A_ABST
    Figure CN121664969A_ABST
Patent Text Reader

Abstract

The invention is suitable for the technical field of cameras, and provides a camera tampering identification method and device, electronic equipment and a readable storage medium. The method comprises the following steps: acquiring current first equipment parameter configuration information of a camera; if the first equipment parameter configuration information is not matched with pre-stored second equipment parameter configuration information, it is determined that an abnormal event exists in the camera, and the second equipment parameter configuration information represents the equipment parameter configuration information under the condition that the camera is not tampered; the anomalous event indicates that the camera has a likelihood of being tampered with. According to the invention, whether the camera is tampered or not can be identified.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application belongs to the field of camera technology, and in particular relates to a camera tampering identification method, device, electronic device and readable storage medium. Background Technology

[0002] Currently, in industries such as oil fields and workplace safety, due to leaked equipment passwords, certain individuals can use technical means to tamper with front-end cameras, replacing them and thus altering their operation. Once a camera is tampered with, its content is virtually identical to the original monitoring footage, making it difficult for monitoring center personnel to detect abnormal behavior. This results in illegal activities occurring during that period being unable to be effectively prevented or traced. Therefore, identifying the possibility of camera tampering is a pressing technical problem that needs to be solved. Summary of the Invention

[0003] This application provides a method, apparatus, electronic device, and readable storage medium for identifying camera tampering, which can solve the problem of how to identify the possibility that a camera has been tampered with.

[0004] In a first aspect, embodiments of this application provide a camera tampering identification method, including:

[0005] Obtain the current primary device parameter configuration information of the camera;

[0006] If the first device parameter configuration information does not match the pre-stored second device parameter configuration information, it is determined that the camera has an abnormal event. The second device parameter configuration information represents the device parameter configuration information of the camera when it has not been tampered with, and the abnormal event indicates that the camera may have been tampered with.

[0007] In this embodiment, since the device parameter configuration information of a camera usually changes to some extent after it has been tampered with, the following method can be used: By obtaining the current first device parameter configuration information of the camera and matching it with the pre-stored device parameter configuration information representing the camera in the untampered state (i.e., the second device parameter configuration information), it can be determined whether the camera's device parameter configuration information has changed compared to the untampered state. If the first and second device parameter configuration information do not match, it is determined that the camera's device parameter configuration information has changed, indicating an abnormal event. This abnormal event suggests the possibility of camera tampering, thus solving the problem of how to identify the possibility of camera tampering.

[0008] In one possible implementation of the first aspect, the first device parameter configuration information includes: bitstream configuration information, the bitstream configuration information representing the corresponding bitstream characteristics; after determining that the camera has an abnormal event, it further includes:

[0009] Obtain the video bitstream currently output by the camera;

[0010] Extract the bitstream feature information of the video bitstream;

[0011] The bitstream feature information is matched with the bitstream configuration information to obtain the feature matching result;

[0012] Based on the feature matching results, a tampering assessment result is output, which is used to indicate whether the camera has been tampered with.

[0013] In one possible implementation of the first aspect, when both the bitstream feature information and the bitstream configuration information include multiple feature items, the step of performing feature matching between the bitstream feature information and the bitstream configuration information includes:

[0014] Each feature item in the bitstream feature information is matched with the corresponding feature item in the bitstream configuration information to obtain feature matching results corresponding to each of the multiple feature items;

[0015] The step of outputting a tampering assessment result based on the feature matching result includes:

[0016] If there is a result indicating a mismatch among the feature matching results corresponding to each of the multiple feature items, then a first tampering evaluation result indicating that the camera has been tampered with is output;

[0017] If the feature matching results corresponding to each of the multiple feature items all indicate a match, then a second tampering evaluation result indicating that the camera has not been tampered with is output.

[0018] In one possible implementation of the first aspect, obtaining the video bitstream currently output by the camera includes:

[0019] Send a video acquisition command to the camera, the video acquisition command being used to instruct the camera to return the currently output video stream;

[0020] Receive the video stream from the camera.

[0021] In one possible implementation of the first aspect, the camera tampering detection method further includes:

[0022] Upon first detection of the camera, the camera's current device parameter configuration information is stored as the second device parameter configuration information.

[0023] In one possible implementation of the first aspect, storing the current device parameter configuration information of the camera as the second device parameter configuration information upon first detection includes:

[0024] Upon first detection of the camera, the camera is triggered to send its current device parameter configuration information, and the received device parameter configuration information is stored as the second device parameter configuration information.

[0025] In one possible implementation of the first aspect, obtaining the current first device parameter configuration information of the camera includes:

[0026] During the operation of the camera, acquisition instructions are sent to the camera at preset time intervals. The acquisition instructions are used to instruct the camera to return the first device parameter configuration information.

[0027] Receive the first device parameter configuration information from the camera.

[0028] Secondly, embodiments of this application provide a camera tampering detection device, comprising:

[0029] The information acquisition module is used to acquire the current primary device parameter configuration information of the camera;

[0030] The tamper detection module is used to determine that there is an abnormal event in the camera if the first device parameter configuration information does not match the pre-stored second device parameter configuration information. The second device parameter configuration information represents the device parameter configuration information of the camera when it has not been tampered with, and the abnormal event indicates that the camera may have been tampered with.

[0031] Thirdly, embodiments of this application provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the camera tampering identification method as described in the first aspect above.

[0032] Fourthly, embodiments of this application provide a computer-readable storage medium storing a computer program that, when executed by a processor, implements the camera tampering identification method as described in the first aspect above.

[0033] Fifthly, embodiments of this application provide a computer program product that, when run on an electronic device, causes the electronic device to execute the camera tampering identification method described in the first aspect.

[0034] It is understood that the beneficial effects of the second to fifth aspects mentioned above can be found in the relevant descriptions in the first aspect mentioned above, and will not be repeated here. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in the embodiments of this application, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 This is a schematic diagram of the camera tampering detection system provided in an embodiment of this application;

[0037] Figure 2 This is a schematic flowchart of a camera tampering identification method provided in an embodiment of this application;

[0038] Figure 3 This is another illustrative flowchart of the camera tampering identification method provided in the embodiments of this application;

[0039] Figure 4 This is another schematic flowchart of the camera tampering identification method provided in the embodiments of this application;

[0040] Figure 5 This is a schematic diagram of the camera tamper detection device provided in the embodiments of this application;

[0041] Figure 6 This is a schematic diagram of the structure of the electronic device provided in the embodiments of this application. Detailed Implementation

[0042] In the following description, specific details such as particular system architectures and techniques are set forth for illustrative purposes and not for limitation, in order to provide a thorough understanding of the embodiments of this application. However, those skilled in the art will understand that this application may also be implemented in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, apparatuses, circuits, and methods have been omitted so as not to obscure the description of this application with unnecessary detail.

[0043] It should be understood that, when used in this application specification and the appended claims, the term "comprising" indicates the presence of the described features, integrals, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or a collection thereof.

[0044] It should also be understood that the term “and / or” as used in this application specification and the appended claims means any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0045] It should also be understood that, in the embodiments of this application, "multiple" refers to two or more.

[0046] As used in this application specification and the appended claims, the term "if" may be interpreted, depending on the context, as "when," "once," "in response to determination," or "in response to detection." Similarly, the phrase "if determined" or "if detected [the described condition or event]" may be interpreted, depending on the context, as meaning "once determined," "in response to determination," "once detected [the described condition or event]," or "in response to detection [the described condition or event]."

[0047] Furthermore, in the description of this application and the appended claims, the terms "first," "second," "third," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0048] References to "one embodiment" or "some embodiments" as described in this specification mean that one or more embodiments of this application include a specific feature, structure, or characteristic described in connection with that embodiment. Therefore, the phrases "in one embodiment," "in some embodiments," "in other embodiments," "in still other embodiments," etc., appearing in different parts of this specification do not necessarily refer to the same embodiment, but rather mean "one or more, but not all, embodiments," unless otherwise specifically emphasized. The terms "comprising," "including," "having," and variations thereof mean "including but not limited to," unless otherwise specifically emphasized.

[0049] The camera tampering detection method provided in this application can be applied to electronic devices such as desktop computers, servers, laptops, and ultra-mobile personal computers (UMPCs). This application does not limit the specific type of electronic device. For example, the electronic device in this application can be a server in a computer room, or it can be a desktop computer in a computer room. Therefore, when the possibility of camera tampering is detected, the server can output an abnormality alert or send an abnormality alert to relevant personnel in the computer room. For example, the abnormality alert can be displayed on the desktop computer in the computer room, or an abnormality alert can be pushed to personnel via SMS or pop-up windows to alert them of the possibility of camera tampering.

[0050] For example, Figure 1 A schematic diagram of a camera tampering detection system provided in an embodiment of this application is shown. See also... Figure 1 As shown, the system includes a camera 11, a user terminal 12, and a server 13. The user terminal 12 may include a staff member's smartphone or desktop computer, etc.

[0051] In the camera tampering detection application, the camera 11 to be added can be selected. After selecting the camera 11, the configuration page of the camera 11 is accessed. On this configuration page, the camera connection information such as the Internet Protocol (IP) address, port number, login username and password of the camera 11 can be filled in. Based on this camera connection information, a device code can be generated. The device code can be used for authentication when viewing the monitoring screen and controlling the camera 11. The aforementioned camera tampering detection application can refer to the software used to implement the solution of this application.

[0052] After filling in the camera connection information above, click the "Save" button on the configuration page to save the camera connection information. At this time, camera 11 will be added to the camera tampering detection application. It should be noted that the number of cameras added to the camera tampering detection application can be one or more, and this application does not limit this.

[0053] After adding camera 11, the camera tamper detection application for the added camera can be installed on the server. With camera 11 powered on, camera 11 and server 13 can communicate. Server 13 can then be used to detect tampering with camera 11, and can also view the live feed of camera 11 in the monitoring screen of the camera tamper detection application. Alternatively, the camera tamper detection application without camera 11 can be installed on server 13 first. After installation on server 13, camera 11 can then be added to the camera tamper detection application. The addition process is described above and will not be repeated here.

[0054] The camera 11 can also communicate with the user terminal 12 so that staff can view the real-time footage of the camera 11 through the user terminal 12.

[0055] Optionally, a user terminal 12 can be added to the camera tampering detection application so that the server 13 can push an anomaly alert to the user terminal 12 when the camera is detected to have been tampered with. Optionally, when adding the user terminal 12, information such as the user terminal 12's phone number and email address can be filled in on the configuration page so that the server 13 can identify the user terminal 12 and ensure that the user terminal 12 can receive the anomaly alert.

[0056] It should be noted that communication between the three devices, namely camera 11, user terminal 12 and server 13, can be achieved through wireless connection or wired connection, and this application does not limit the connection.

[0057] Camera 11 is used to monitor the surrounding environment and outputs a video stream to user terminal 12 in real time. After receiving the video stream, user terminal 12 displays the camera's live feed. This video stream can also be referred to as video data or a video data stream.

[0058] Server 13 can obtain the device parameter configuration information of camera 11, identify whether camera 11 is likely to be tampered with based on the device parameter configuration information, and further identify tampering behavior by re-testing camera 11 based on the possibility of tampering, thereby improving the accuracy of tampering behavior detection. If tampering of camera 11 is detected, the tampering assessment result can be pushed to user terminal 12 to achieve rapid notification of camera 11 tampering, so that staff can take timely measures to ensure the security of camera 11.

[0059] In this embodiment, the camera 11, user terminal 12 and server 13 in the camera tampering identification system can be used to identify tampering of the camera 11. When the server 13 detects that the camera 11 has been tampered with, it can quickly alert the user terminal 12 to the tampering evaluation result.

[0060] Please see Figure 2 , Figure 2 The illustration shows a schematic flowchart of a camera tampering identification method provided in an embodiment of this application. This is provided as an example and not as a limitation. The method includes the following steps:

[0061] Step 201: Obtain the current first device parameter configuration information of the camera.

[0062] In practical applications, cameras are typically only tampered with by specific individuals after they have started operating. Therefore, electronic devices can acquire the camera's initial device parameter configuration information during operation, thereby identifying the possibility of camera tampering based on this information.

[0063] Even if a camera is tampered with, it may still be able to communicate with electronic devices, but it may also lose communication with them.

[0064] Even if a camera has been tampered with, it may still be able to communicate with electronic devices. Based on this, the electronic devices can collect the camera's device parameter configuration information and use this information to identify whether the camera has been tampered with.

[0065] Since the camera may lose communication with electronic devices if it has been tampered with, an abnormality alert can be pushed to the user terminal when a communication failure is detected. This allows staff to check whether the camera has experienced a power outage or has been tampered with. Alternatively, the alert can also be displayed on the electronic device, allowing staff to view it there as well.

[0066] In one possible implementation, in order to promptly identify whether the camera has been tampered with, the electronic device can periodically send acquisition instructions to the camera at preset time intervals during the camera's operation. The acquisition instructions are used to instruct the camera to return first device parameter configuration information; and the first device parameter configuration information from the camera is received.

[0067] After receiving the acquisition command from the electronic device, the camera can determine its current device parameter configuration information (i.e., the first device parameter configuration information) and send the first device parameter configuration information to the electronic device.

[0068] Optionally, the aforementioned preset time interval can be configured according to the timeliness requirements of the user (e.g., staff in the computer room) for camera tampering identification, so that the tampering identification of the camera in this application meets the timeliness requirements.

[0069] The camera's device parameter configuration information includes, but is not limited to, the camera's physical characteristics and / or bitstream configuration information. The camera's physical characteristics, also known as identification information or device information, are used to characterize the camera's uniqueness. These physical characteristics include, but are not limited to, the camera's serial number, IP address, and Media Access Control (MAC) address. The camera's bitstream configuration information includes, but is not limited to, multiple features such as video resolution, video encoding format, audio encoding format, and frame interval. The frame interval can refer to the time interval between two adjacent frames.

[0070] Electronic devices can periodically acquire first device parameter configuration information and match it with second device parameter configuration information to periodically check changes in the camera's device parameter configuration information, thereby significantly improving the real-time recognition of abnormal events.

[0071] Step 202: If the first device parameter configuration information does not match the pre-stored second device parameter configuration information, it is determined that there is an abnormal event in the camera.

[0072] Among them, the second device parameter configuration information represents the device parameter configuration information of the camera when it has not been tampered with, and the abnormal event indicates that the camera may have been tampered with.

[0073] The aforementioned abnormal events can refer to events that cause a mismatch between the first and second device parameter configuration information of the camera (i.e., events that cause changes to the camera's device parameter configuration information), including but not limited to the following three situations: Situation 1: The camera is malfunctioning or damaged, and the camera is replaced; Situation 2: The camera's device parameter configuration is unreasonable, and technicians adjust the device parameter configuration information; Situation 3: The camera is tampered with.

[0074] The aforementioned second device parameter configuration information is used as a matching benchmark to match the first device parameter configuration information obtained in step 201 with the second device parameter configuration information. If the first device parameter configuration information and the second device parameter configuration information do not match, it indicates that the first device parameter configuration information has changed compared to the matching benchmark. If the first device parameter configuration information and the second device parameter configuration information match, it indicates that the first device parameter configuration information has not changed compared to the matching benchmark, and it can be determined that the camera has not been tampered with. Optionally, matching the first device parameter configuration information and the second device parameter configuration information may refer to determining whether the first device parameter configuration information and the second device parameter configuration information are the same.

[0075] Since the first device parameter configuration information changes to a certain extent compared with the matching benchmark after the camera is tampered with, replaced or its parameters are adjusted, if a change in the first device parameter configuration information is detected, it can be determined that there is an abnormal event in the camera.

[0076] In one possible implementation, the electronic device can store the camera's current device parameter configuration information as second device parameter configuration information when it first recognizes the camera.

[0077] When the camera tamper detection application is first deployed to the user's site (i.e., when the camera tamper detection application is first installed on the electronic device at the user's site), the camera at the user's site is usually not tampered with. Therefore, when the electronic device runs the camera tamper detection application for the first time and the camera at the user's site has been added to the application, it can identify the camera at the user's site for the first time. This camera is usually not tampered with. In this case, the camera's current device parameter configuration information (i.e., the second device parameter configuration information) is the correct device parameter configuration information of the camera. Using this device parameter configuration information as a matching benchmark and matching it with the first device parameter configuration information can detect whether the device parameter configuration information has changed during the operation of the camera after the first identification. If a change has occurred, the camera may have been tampered with.

[0078] Optionally, when the electronic device first detects the camera, it can trigger the camera to send its current device parameter configuration information and store the received device parameter configuration information as a second device parameter configuration information. For example, when the electronic device first connects to the camera, it can send a corresponding acquisition command to the camera, thereby triggering the camera to send its current device parameter configuration information to the electronic device.

[0079] Optionally, the user can also input the camera's second device parameter configuration information into the electronic device, and the electronic device will acquire and store the second device parameter configuration information input by the user.

[0080] When the camera's device parameter configuration information includes the camera's physical characteristics and / or bitstream configuration information, to facilitate the distinction between the physical characteristics and bitstream configuration information included in the first and second device parameter configuration information, the physical characteristics in the first device parameter configuration information can be referred to as the first physical characteristic, the bitstream configuration information in the first device parameter configuration information as the first bitstream configuration information, and the physical characteristics in the second device parameter configuration information as the second physical characteristic, and the bitstream configuration information in the second device parameter configuration information as the second bitstream configuration information. Based on this, if the camera's device parameter configuration information includes the camera's physical characteristics, then the aforementioned matching of the first and second device parameter configuration information can refer to matching the first physical characteristic with the second physical characteristic. If the camera's device parameter configuration information includes bitstream configuration information, then the aforementioned matching of the first and second device parameter configuration information can refer to matching the first bitstream configuration information with the second bitstream configuration information. If the camera's device parameter configuration information includes the camera's physical characteristics and bitstream configuration information, then matching the first device parameter configuration information with the second device parameter configuration information can refer to matching the first physical characteristics with the second physical characteristics, and matching the first bitstream configuration information with the second bitstream configuration information. If the first physical characteristics match the second physical characteristics and the first bitstream configuration information matches the second bitstream configuration information, then it is determined that the first device parameter configuration information matches the second device parameter configuration information. If the first physical characteristics do not match the second physical characteristics or the first bitstream configuration information does not match the second bitstream configuration information, then it is determined that the first device parameter configuration information does not match the second device parameter configuration information.

[0081] Since the physical characteristics of a camera include, but are not limited to, multiple features such as the camera's serial number, IP address, and MAC address, the aforementioned matching of the first physical characteristic with the second physical characteristic can refer to matching each feature in the first physical characteristic with the corresponding feature in the second physical characteristic. If each feature in the first physical characteristic matches the corresponding feature in the second physical characteristic, then the first physical characteristic and the second physical characteristic are determined to match; if there is a feature in the first physical characteristic that does not match the corresponding feature in the second physical characteristic, then the first physical characteristic and the second physical characteristic are determined to not match. For example, the serial number in the first physical feature is matched with the serial number in the second physical feature, the IP address in the first physical feature is matched with the IP address in the second physical feature, and the MAC address in the first physical feature is matched with the MAC address in the second physical feature. If the serial number in the first physical feature matches the serial number in the second physical feature, the IP address in the first physical feature matches the IP address in the second physical feature, and the MAC address in the first physical feature matches the MAC address in the second physical feature, then the first physical feature and the second physical feature are determined to match. If the serial number in the first physical feature does not match the serial number in the second physical feature, or the IP address in the first physical feature does not match the IP address in the second physical feature, or the MAC address in the first physical feature does not match the MAC address in the second physical feature, then the first physical feature and the second physical feature are determined to not match.

[0082] Since the camera's bitstream configuration information includes, but is not limited to, multiple features such as video resolution, video encoding format, audio encoding format, and frame interval, the aforementioned matching of the first bitstream configuration information with the second bitstream configuration information can refer to matching each feature in the first bitstream configuration information with the corresponding feature in the second bitstream configuration information. If each feature in the first bitstream configuration information matches the corresponding feature in the second bitstream configuration information, then the first bitstream configuration information and the second bitstream configuration information are determined to match; if there is a feature in the first bitstream configuration information that does not match the corresponding feature in the second bitstream configuration information, then the first bitstream configuration information and the second bitstream configuration information are determined to not match. For example, matching the video resolution in the first bitstream configuration information with the video resolution in the second bitstream configuration information, matching the video encoding format in the first bitstream configuration information with the video encoding format in the second bitstream configuration information, matching the audio encoding format in the first bitstream configuration information with the audio encoding format in the second bitstream configuration information, and matching the frame interval in the first bitstream configuration information with the frame interval in the second bitstream configuration information; if the video resolution in the first bitstream configuration information matches the video resolution in the second bitstream configuration information, the video encoding format in the first bitstream configuration information matches the video encoding format in the second bitstream configuration information, and the audio encoding format in the first bitstream configuration information matches the frame interval in the second bitstream configuration information; If the audio encoding format in the stream configuration information matches and the frame interval in the first stream configuration information matches the frame interval in the second stream configuration information, then the first stream configuration information and the second stream configuration information are determined to be matched. If the video resolution in the first stream configuration information does not match the video resolution in the second stream configuration information, or the video encoding format in the first stream configuration information does not match the video encoding format in the second stream configuration information, or the audio encoding format in the first stream configuration information does not match the audio encoding format in the second stream configuration information, or the frame interval in the first stream configuration information does not match the frame interval in the second stream configuration information, then the first stream configuration information and the second stream configuration information are determined to be mismatched.

[0083] In this embodiment, since the device parameter configuration information of a camera usually changes to some extent after it has been tampered with, it is possible to determine whether the camera's device parameter configuration information has changed compared to the untampered state by obtaining the camera's current first device parameter configuration information and matching it with pre-stored second device parameter configuration information. If the first and second device parameter configuration information do not match, it is determined that the camera's device parameter configuration information has changed, indicating an abnormal event. This abnormal event suggests the possibility of camera tampering, thus solving the problem of how to identify the possibility of camera tampering.

[0084] In one possible implementation, after determining that an abnormal event has occurred at the camera, the electronic device may further perform steps 301 to 304 to further identify whether the camera has been tampered with.

[0085] Step 301: Obtain the video stream currently output by the camera.

[0086] After determining that an abnormal event has occurred at the camera, the electronic device can trigger video streaming to obtain the video bitstream currently output by the camera in order to further identify whether the camera has been tampered with. Based on this video bitstream, it can identify whether the camera has been tampered with.

[0087] In one possible implementation, the electronic device can send a video acquisition command to the camera, which instructs the camera to return the currently output video stream; and receive the video stream from the camera.

[0088] After receiving a video acquisition instruction from an electronic device, the camera can determine its current output video bitstream and send that video bitstream to the electronic device.

[0089] Step 302: Extract the bitstream feature information of the video bitstream.

[0090] The aforementioned bitstream feature information includes, but is not limited to, multiple feature items such as video resolution, video encoding format, audio encoding format, and frame interval. Optionally, the electronic device can perform frame analysis on the video bitstream to extract multiple feature items such as video resolution, video encoding format, audio encoding format, and frame interval from the actual output of the camera. These multiple feature items from the actual output of the camera are the feature items in the bitstream feature information of the video bitstream.

[0091] To prevent users from discovering the tampering, the displayed content of a tampered camera is usually almost identical to the original monitoring footage. Furthermore, the bitstream configuration information of the tampered camera is typically fixed by default. Because the software used to tamper with the camera is often crude, the bitstream configuration information of the tampered camera usually does not match the actual output bitstream characteristics. For cameras that have been replaced or whose device parameters have been adjusted by technicians, the bitstream configuration information matches the actual output bitstream characteristics. Therefore, when an abnormal event occurs with a camera, based on the camera's bitstream configuration information and the actual output bitstream characteristics, reasonable events (i.e., the camera may have been replaced, or technicians may have adjusted the camera's device parameters) can be excluded from the abnormal events, thus identifying the abnormal tampering event (i.e., the camera has been tampered with).

[0092] It should be noted that the bitstream configuration information in the relevant descriptions of steps 301 to 304 refers to the bitstream configuration information in the first device parameter configuration information.

[0093] Step 303: Perform feature matching between the bitstream feature information and the bitstream configuration information to obtain the feature matching result.

[0094] The aforementioned feature matching results are used to indicate whether the bitstream feature information matches the bitstream configuration information.

[0095] In one possible implementation, when both the bitstream feature information and the bitstream configuration information include multiple feature items, feature matching is performed between the bitstream feature information and the bitstream configuration information, including:

[0096] Each feature item in the bitstream feature information is matched with the corresponding feature item in the bitstream configuration information to obtain the feature matching results corresponding to each of the multiple feature items.

[0097] Based on the feature matching results, the tampering assessment results are output, including:

[0098] If there are results indicating mismatch in the feature matching results corresponding to multiple feature items, then the first tampering evaluation result indicating that the camera has been tampered with will be output.

[0099] If the feature matching results corresponding to multiple feature items all indicate a match, then the second tampering evaluation result indicating that the camera has not been tampered with is output.

[0100] When both the stream feature information and the stream configuration information include multiple features such as video resolution, video encoding format, audio encoding format, and frame interval, the following matching methods can be used: matching the video resolution in the stream feature information with the video resolution in the stream configuration information to obtain a feature matching result corresponding to the video resolution; matching the video encoding format in the stream feature information with the video encoding format in the stream configuration information to obtain a feature matching result corresponding to the video encoding format; matching the audio encoding format in the stream feature information with the audio encoding format in the stream configuration information to obtain a feature matching result corresponding to the audio encoding format; and matching the frame interval in the stream feature information with the frame interval in the stream configuration information to obtain a feature matching result corresponding to the frame interval. If any of these four feature matching results indicates a mismatch, a first tampering evaluation result is output; if all four feature matching results indicate a match, a second tampering evaluation result is output.

[0101] As an example rather than a limitation, the four feature items in the bitstream feature information and bitstream configuration information are shown in Table 1. The tampering evaluation in Table 1 indicates whether the corresponding feature item has been tampered with.

[0102] Feature terms Stream configuration information Bitstream feature information Tampering with evaluations Video resolution 1080P 720P yes Video encoding format H264 H264 no Audio encoding format G711A G722 yes Frame interval 40ms Unstable yes

[0103] As shown in Table 1, the tampering evaluations corresponding to video resolution, audio encoding format, and frame interval all indicate that tampering has occurred. That is, the feature matching results corresponding to these three feature items are all mismatches. Therefore, the first tampering evaluation result indicating that the camera has been tampered can be output.

[0104] It should be understood that if the software used to tamper with cameras typically runs on ordinary servers or common laptops, and is relatively crude, it usually results in unstable frame intervals in the video stream output by the tampered camera. For example, sometimes a frame might be output every 30 milliseconds, and sometimes every 60 milliseconds. Therefore, when the frame interval in the stream's characteristic information is unstable, it can be determined that the frame interval in the stream's characteristic information does not match the frame interval in the stream's configuration information, thus confirming that the camera has been tampered with.

[0105] Step 304: Output the tampering assessment result based on the feature matching result.

[0106] The aforementioned tampering assessment results are used to indicate whether the camera has been tampered with, including a first tampering assessment result indicating that the camera has not been tampered with and a second tampering assessment result indicating that the camera has been tampered with.

[0107] This application does not limit the method of outputting the tampering assessment results. For example, electronic devices can output the tampering assessment results through display, voice, SMS, or pop-up windows.

[0108] like Figure 4 The diagram shown is a schematic flowchart of another camera tampering identification method provided in this application embodiment. On-site personnel can first add the camera to the camera tampering identification application and then configure the camera's inspection plan (i.e., configure a preset time interval for periodically collecting the camera's device parameter configuration information). When the camera has not been tampered with, the electronic device initially collects the camera's device parameter configuration information (i.e., the second device parameter configuration information). Then, based on the inspection plan, it periodically collects the camera's device parameter configuration information (i.e., the first device parameter configuration information) and compares it with the initially collected information to detect whether the camera's device parameter configuration information has changed. If a change is detected, a secondary detection is triggered. The secondary detection triggers video streaming and extracts bitstream feature information. The bitstream feature information is compared with the periodically collected device parameter configuration information, and a tampering assessment result is output. By periodically inspecting changes in the camera's device parameter configuration information, the electronic device can identify abnormal events in the camera. Simultaneously, by triggering real-time video streaming detection, it can further analyze bitstream features to determine the occurrence of tampering.

[0109] This application's embodiments detect tampering in a timely manner during the event (i.e., when the tampering occurs). By employing a timed detection mechanism based on device parameter configuration information, the real-time performance of detection is significantly improved. Simultaneously, secondary analysis of the bitstream of suspected tampered cameras further enhances the accuracy of tampering identification, thereby enabling rapid and effective identification of tampering.

[0110] It should be understood that the sequence number of each step in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0111] Corresponding to the camera tampering identification method described in the above embodiments, Figure 5 A schematic diagram of the camera tampering identification device provided in the embodiments of this application is shown. For ease of explanation, only the parts related to the embodiments of this application are shown.

[0112] Reference Figure 5 The camera tamper detection device includes:

[0113] Information acquisition module 51 is used to acquire the current first device parameter configuration information of the camera;

[0114] The tampering identification module 52 is used to determine that there is an abnormal event in the camera if the first device parameter configuration information does not match the pre-stored second device parameter configuration information. The second device parameter configuration information represents the device parameter configuration information of the camera when it has not been tampered with, and the abnormal event indicates that the camera may have been tampered with.

[0115] Optionally, the first device parameter configuration information includes: bitstream configuration information, wherein the bitstream configuration information characterizes the corresponding bitstream features; the above-mentioned camera tampering identification device further includes:

[0116] The bitstream acquisition module is used to acquire the video bitstream currently output by the camera;

[0117] The feature extraction module is used to extract the bitstream feature information of the video bitstream;

[0118] The feature matching module is used to perform feature matching between the bitstream feature information and the bitstream configuration information to obtain the feature matching result;

[0119] The result output module is used to output a tampering evaluation result based on the feature matching result, and the tampering evaluation result is used to indicate whether the camera has been tampered with.

[0120] Optionally, when both the bitstream feature information and the bitstream configuration information include multiple feature items, the above feature matching module is specifically used for:

[0121] Each feature item in the bitstream feature information is matched with the corresponding feature item in the bitstream configuration information to obtain feature matching results corresponding to each of the multiple feature items;

[0122] The above output module is specifically used for:

[0123] If there is a result indicating a mismatch among the feature matching results corresponding to each of the multiple feature items, then a first tampering evaluation result indicating that the camera has been tampered with is output;

[0124] If the feature matching results corresponding to each of the multiple feature items all indicate a match, then a second tampering evaluation result indicating that the camera has not been tampered with is output.

[0125] Optionally, the above-mentioned bitstream acquisition module is specifically used for:

[0126] Send a video acquisition command to the camera, the video acquisition command being used to instruct the camera to return the currently output video stream;

[0127] Receive the video stream from the camera.

[0128] Optionally, the aforementioned camera tamper detection device further includes:

[0129] The information storage module is used to store the current device parameter configuration information of the camera as the second device parameter configuration information when the camera is first detected.

[0130] Optionally, the aforementioned information storage module is specifically used for:

[0131] Upon first detection of the camera, the camera is triggered to send its current device parameter configuration information, and the received device parameter configuration information is stored as the second device parameter configuration information.

[0132] Optionally, the information acquisition module 51 is specifically used to: during the operation of the camera, send acquisition instructions to the camera at preset time intervals, wherein the acquisition instructions are used to instruct the camera to return the first device parameter configuration information;

[0133] Receive the first device parameter configuration information from the camera.

[0134] It should be noted that the information interaction and execution process between the above-mentioned devices / units are based on the same concept as the method embodiments of this application. For details on their specific functions and technical effects, please refer to the method embodiments section, and they will not be repeated here.

[0135] Figure 6 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Figure 6 As shown, the electronic device 6 of this embodiment includes: at least one processor 60 ( Figure 6 (Only one is shown in the diagram), memory 61, and computer program 62 stored in said memory 61 and executable on said at least one processor 60, wherein the processor 60 executes said computer program 62 to implement the steps in any of the above-described embodiments of the camera tampering identification method.

[0136] The electronic device may include, but is not limited to, a processor 60 and a memory 61. Those skilled in the art will understand that... Figure 6 This is merely an example of electronic device 6 and does not constitute a limitation on electronic device 6. It may include more or fewer components than shown, or combine certain components, or different components, such as input / output devices, network access devices, etc.

[0137] The processor 60 may be a Central Processing Unit (CPU), or it may be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor.

[0138] In some embodiments, the memory 61 may be an internal storage unit of the electronic device 6, such as a hard disk or memory of the electronic device 6. In other embodiments, the memory 61 may be an external storage device of the electronic device 6, such as a plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, etc., equipped on the electronic device 6. Furthermore, the memory 61 may include both internal and external storage units of the electronic device 6. The memory 61 is used to store the operating system, applications, bootloader, data, and other programs, such as the program code of the computer program. The memory 61 can also be used to temporarily store data that has been output or will be output.

[0139] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is merely an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiments can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit. Furthermore, the specific names of the functional units and modules are only for easy differentiation and are not intended to limit the scope of protection of this application. The specific working process of the units and modules in the above system can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0140] This application also provides an electronic device, which includes: at least one processor, a memory, and a computer program stored in the memory and executable on the at least one processor, wherein the processor executes the computer program to implement the steps in any of the above method embodiments.

[0141] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps described in the various method embodiments above.

[0142] This application provides a computer program product that, when run on an electronic device, enables the electronic device to perform the steps described in the various method embodiments above.

[0143] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments of this application can be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include at least: any entity or device capable of carrying computer program code to a device / electronic device, a recording medium, a computer memory, a read-only memory (ROM), a random access memory (RAM), an electrical carrier signal, a telecommunication signal, and a software distribution medium. Examples include USB flash drives, portable hard drives, magnetic disks, or optical disks. In some jurisdictions, according to legislation and patent practice, computer-readable media cannot be electrical carrier signals or telecommunication signals.

[0144] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail or recorded in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0145] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0146] In the embodiments provided in this application, it should be understood that the disclosed devices / electronic devices and methods can be implemented in other ways. For example, the device / electronic device embodiments described above are merely illustrative. For instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings or direct couplings or communication connections may be through some interfaces; indirect couplings or communication connections between devices or units may be electrical, mechanical, or other forms.

[0147] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0148] The above-described embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application, and should all be included within the protection scope of this application.

Claims

1. A method for detecting camera tampering, characterized in that, include: Obtain the current primary device parameter configuration information of the camera; If the first device parameter configuration information does not match the pre-stored second device parameter configuration information, it is determined that the camera has an abnormal event. The second device parameter configuration information represents the device parameter configuration information of the camera when it has not been tampered with, and the abnormal event indicates that the camera may have been tampered with.

2. The camera tampering identification method according to claim 1, characterized in that, The first device parameter configuration information includes: bitstream configuration information, wherein the bitstream configuration information represents the corresponding bitstream characteristics; after determining that the camera has an abnormal event, it also includes: Obtain the video bitstream currently output by the camera; Extract the bitstream feature information of the video bitstream; The bitstream feature information is matched with the bitstream configuration information to obtain the feature matching result; Based on the feature matching results, a tampering assessment result is output, which is used to indicate whether the camera has been tampered with.

3. The camera tampering identification method according to claim 2, characterized in that, When both the bitstream feature information and the bitstream configuration information include multiple feature items, the step of performing feature matching between the bitstream feature information and the bitstream configuration information includes: Each feature item in the bitstream feature information is matched with the corresponding feature item in the bitstream configuration information to obtain feature matching results corresponding to each of the multiple feature items; The step of outputting a tampering assessment result based on the feature matching result includes: If there is a result indicating a mismatch among the feature matching results corresponding to each of the multiple feature items, then a first tampering evaluation result indicating that the camera has been tampered with is output; If the feature matching results corresponding to each of the multiple feature items all indicate a match, then a second tampering evaluation result indicating that the camera has not been tampered with is output.

4. The camera tampering identification method according to claim 2, characterized in that, The step of obtaining the video bitstream currently output by the camera includes: Send a video acquisition command to the camera, the video acquisition command being used to instruct the camera to return the currently output video stream; Receive the video stream from the camera.

5. The camera tampering identification method according to any one of claims 1 to 4, characterized in that, Also includes: Upon first detection of the camera, the camera's current device parameter configuration information is stored as the second device parameter configuration information.

6. The camera tampering identification method according to claim 5, characterized in that, The step of storing the camera's current device parameter configuration information as the second device parameter configuration information upon first detection includes: Upon first detection of the camera, the camera is triggered to send its current device parameter configuration information, and the received device parameter configuration information is stored as the second device parameter configuration information.

7. The camera tampering identification method according to any one of claims 1 to 4, characterized in that, The step of obtaining the current first device parameter configuration information of the camera includes: During the operation of the camera, acquisition instructions are sent to the camera at preset time intervals. The acquisition instructions are used to instruct the camera to return the first device parameter configuration information. Receive the first device parameter configuration information from the camera.

8. A camera tampering detection device, characterized in that, include: The information acquisition module is used to acquire the current primary device parameter configuration information of the camera; The tamper detection module is used to determine that there is an abnormal event in the camera if the first device parameter configuration information does not match the pre-stored second device parameter configuration information. The second device parameter configuration information represents the device parameter configuration information of the camera when it has not been tampered with, and the abnormal event indicates that the camera may have been tampered with.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the camera tampering identification method as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the camera tampering identification method as described in any one of claims 1 to 7.