Intrusion detection system and intrusion detection method

Abstract

To provide an intrusion detection system and an intrusion detection method.SOLUTION: An intrusion detection system includes multiple IoT devices 330 and a central control device 310. The central control device 310 is configured to: obtain multiple sensing pairs from a paired combination of the multiple IoT devices 330; create a sensing-pair list including the multiple sensing pairs and features of each sensing pair; obtain multiple first pairs whose features satisfy a first feature condition from the sensing-pair list; dynamically schedule transmissions and receptions of the multiple IoT devices 330 belonging to the multiple first pairs in a time sharing fashion to obtain a first sensing signal of each first pair; and based on a paired node of the multiple first pairs, count a first status code and a second status code of the multiple first pairs to which each paired node belongs, to determine whether any intrusion condition occurs at a spatial position.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to a detection system and a detection method, and more particularly to an intrusion detection system and an intrusion detection method. [Background technology]

[0002] Conventional intrusion detection systems utilize paired wireless sensor devices, such as paired infrared sensors, where one device is a transmitter and the other device is a receiver, and transmits infrared light from the transmitter to the receiver. If the receiver does not receive the infrared signal, it means that the infrared light has been blocked. In other words, the intrusion detection system detects an intrusion state based on whether the wireless sensing signal of the paired wireless induction device is blocked or not. However, since the wireless sensor devices need to be fixed pairwise to perform intrusion detection, the detection range is fixed by such limitations and cannot be changed, resulting in a potential dead zone problem. In order to expand the detection range, it is necessary to increase the number of paired sensor devices, which results in a problem of rising costs.

[0003] Furthermore, conventional intrusion detection systems have no flexibility in terms of the installation of wireless sensor devices, and if the sensing distance between paired wireless sensor devices is increased in order to expand the detection range, even if an intruder is detected, there is a problem that a delay occurs in the response time required to obtain the intruder's position coordinates.

[0004] Thus, problems such as detection dead zones and delayed response times in conventional intrusion detection systems are sought to be overcome by those skilled in the art. Summary of the Invention [Problem to be solved by the invention]

[0005] An embodiment according to the present invention proposes an intrusion detection system including a plurality of IoT devices and a central control device. Each IoT device is provided at a spatial position and arranged to transmit and receive a sensing signal. The central control device is communicatively connected to the plurality of IoT devices and arranged to obtain a plurality of sensing pairs from a paired combination of the plurality of IoT devices, cause the plurality of IoT devices to transmit and receive signals in each sensing pair to obtain characteristics of the plurality of sensing pairs, create a sensing pair list including the plurality of sensing pairs and the characteristics of each sensing pair, obtain a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list, dynamically schedule transmission and reception of the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to obtain a first sensing signal of each first pair, mark the first pair with a first status code if it is determined that the first sensing signal satisfies an intrusion suspicion condition, and mark the first pair with a second status code if not, and based on the pair nodes of the plurality of first pairs, respectively calculate statistics of the first status codes and the second status codes of the plurality of first pairs to which the pair nodes belong, to determine whether there is an intrusion situation at the spatial position.

[0006] Another embodiment of the present invention proposes an intrusion detection method applied to multiple IoT devices and a central control device, where each IoT device is provided at a spatial location and arranged to transmit and receive sensing signals, and the sensing signals are received by a central control device that is communicatively connected to the multiple IoT devices. The intrusion detection method includes the steps of: acquiring a plurality of sensing pairs from paired combinations of a plurality of IoT devices; causing the plurality of IoT devices to transmit and receive signals in each sensing pair to acquire characteristics of the plurality of sensing pairs; creating a sensing pair list including the plurality of sensing pairs and the characteristics of each sensing pair; acquiring a plurality of first pairs whose characteristics satisfy a first condition from the sensing pair list; dynamically scheduling transmission and reception of a plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to acquire a first sensing signal of each first pair; marking the first pair with a first status code if it is determined that the first sensing signal satisfies an intrusion suspicion condition, and marking the first pair with a second status code if not; and calculating, based on pair nodes of the plurality of first pairs, the first status codes and the second status codes of the plurality of first pairs to which the pair node belongs, to determine whether or not there is an intrusion situation at a spatial position. [Brief description of the drawings]

[0007] [Figure 1] FIG. 2 is a schematic diagram of an intrusion detection system in a case where a sensing dead zone exists when performing detection. [Diagram 2] FIG. 13 is a schematic diagram of an intrusion detection system in another case where real-time response to an intruder is not possible when performing detection. [Diagram 3] 1 is a schematic diagram of an intrusion detection system according to one embodiment of the present invention; [Figure 4] FIG. 1 is a schematic diagram of an IoT device installed in an application scenario according to an embodiment of the present invention. [Diagram 5] 2 is a flow chart of an intrusion detection method according to an embodiment of the present invention. [Figure 6] FIG. 2 is a schematic diagram illustrating the acquisition of sensing signals of all sensing pairs in a time-division manner according to an embodiment of the present invention. [Figure 7] FIG. 2 is a schematic diagram illustrating the acquisition of sensing signals of all sensing pairs in a time-division manner according to an embodiment of the present invention. [Figure 8] FIG. 2 is a schematic diagram illustrating the acquisition of sensing signals of all sensing pairs in a time-division manner according to an embodiment of the present invention. [Figure 9] FIG. 2 is a schematic diagram of a first pair according to one embodiment of the present invention. [Figure 10] FIG. 2 is a schematic diagram of a first pair being marked with a first status code or a second status code according to an embodiment of the present invention; [Figure 11] FIG. 2 is a schematic diagram of a second pair according to one embodiment of the present invention. [Figure 12] FIG. 4 is a schematic diagram of the characteristics and sampling time of a second sensing signal according to an embodiment of the present invention; [Figure 13] FIG. 11 is a schematic diagram of a third pair according to one embodiment of the present invention. [Figure 14] FIG. 11 is a schematic diagram of the characteristics and sampling time of a third sensing signal according to an embodiment of the present invention; [Figure 15] 4 is a flowchart of an intrusion detection method according to another embodiment of the present invention. [Figure 16A] 4 is a flowchart of an intrusion detection method according to another embodiment of the present invention. [Figure 16B] 4 is a flowchart of an intrusion detection method according to another embodiment of the present invention. [Figure 17] FIG. 2 is a schematic diagram of an IoT device installed in an application scenario according to another embodiment of the present invention. [Figure 18] FIG. 18 is a schematic diagram of multiple sensing pairs acquired in the application scenario of FIG. 17 according to the present invention. [Figure 19] FIG. 2 is a schematic diagram of a second pair according to one embodiment of the present invention. [Figure 20]FIG. 11 is a schematic diagram of a third pair according to one embodiment of the present invention. [Figure 21] 1 is a schematic diagram of a sensing pair of an IoT device E set to AP mode in a first period. FIG. [Figure 22] 13 is a schematic diagram of a sensing pair of IoT device A set to AP mode in a second period. FIG. [Diagram 23] 11 is a schematic diagram of a sensing pair of IoT device C set to AP mode in a third period. FIG. [Figure 24] FIG. 13 is a schematic diagram of marking all first pairs according to an embodiment of the present invention; [Diagram 25] FIG. 13 is a schematic diagram of marking all first pairs according to another embodiment of the present invention; [Figure 26] FIG. 2 is a block diagram of a central controller according to one embodiment of the present invention. [Figure 27] FIG. 1 is a block diagram of an IoT device according to one embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, the present invention will be further described with reference to the accompanying drawings and embodiments so that those skilled in the art to which the present invention pertains can better understand and appropriately implement the present invention, but the embodiments given should not be construed as limiting the present invention.

[0009] In this specification, terms such as "first", "second", "third", "fourth" and "fifth" are used to describe various elements, components, regions, layers and / or sections, but these elements, components, regions, layers and / or sections are not intended to be limited by these terms. These terms are used only to distinguish one element, component, region, layer or section from another. The terms "first", "second", "third", "fourth" and "fifth" as used in this specification do not imply any order or sequence unless clearly indicated by the context.

[0010] FIG. 1 is a schematic diagram of an intrusion detection system in which a sensing dead zone exists when performing detection.

[0011] A home environment is provided with multiple Internet of Things (IoT) devices (hereinafter referred to as IoT devices) A, B, C, and D. The IoT devices A, B, C, and D may be smart home appliances such as lighting fixtures, electrical outlets, and refrigerators. In another sensing environment, the IoT devices A, B, C, and D may be devices equipped with wireless communication modules and capable of transmitting and receiving wireless signals.

[0012] As shown in Fig. 1, IoT device A and IoT device D are arranged in a pair, and IoT device B and IoT device C are arranged in a pair. By arranging in this way, the detection distance becomes shorter and it is possible to respond in real time to the presence or absence of an intruder, but a spatial range 123 cannot be detected and a sensing dead zone occurs.

[0013] FIG. 2 is a schematic diagram of an intrusion detection system in another case where detection is not possible in real time to respond to an intruder.

[0014] IoT device A and IoT device B are arranged in a pair, and IoT device C and IoT device D are arranged in a pair. By arranging in this way, the detection range becomes larger and the problem of the sensing dead zone can be avoided, but the response time when detecting an intruder in the spatial range 123 becomes longer, and it becomes impossible to respond to the intrusion situation in real time.

[0015] FIG. 3 is a schematic diagram of an intrusion detection system according to one embodiment of the present invention.

[0016] The intrusion detection system 300 includes a central controller 310 and a number of IoT devices 330.

[0017] The IoT device 330 has an identification code (identifier) ​​for identifying the IoT device 330. The IoT device 330 can transmit a sensing signal as a sender, and can receive a sensing signal transmitted by another IoT device 330 as a receiver.

[0018] The central control device 310 acquires data of each IoT device 330 via the communication network 350 and controls each IoT device 330. The data of the IoT devices 330 acquired by the central control device 310 may be an identification code of the IoT device 330 and a sensing signal received by the IoT device 330 as a receiver.

[0019] In one embodiment, if all IoT devices 330 are regarded as multiple nodes and pairs between IoT devices 330 are regarded as edges between the nodes, all pair-wise combinations between IoT devices 330 can form a complete graph, that is, the central controller 310 obtains the sensing signals of the communication between each IoT device 330 and all other IoT devices 330 as much as possible.

[0020] The central control device 310 sets a device role for the IoT device 330. The IoT device 330 transmits and receives signals according to the device role. The device role may be a station (STA) mode, a wireless access point (AP) mode, or a sniffer mode. In one embodiment, the device role is set based on Wi-Fi wireless network technology. For example, the IoT device 330 set in the station mode receives a service set identifier (SSID) broadcast by the IoT device 330 set in the wireless access mode to connect to the IoT device 330 set in the AP mode, and transmits a sensing signal to the IoT device 330 in the AP mode. The IoT device 330 set in the wireless access mode receives the sensing signal of the IoT device 330 set in the station mode based on a wireless communication protocol. The IoT device 330 in the sniffer mode receives the sensing signal transmitted by the IoT device 330 to replicate packets acquired in the network environment.

[0021] FIG. 4 is a schematic diagram of an IoT device in an application scenario according to an embodiment of the present invention.

[0022] The application scenario may be a home environment, which is composed of bedrooms 111 and 115, a toilet 113, and a living room 117. Four IoT devices A, B, C, and D are installed in the home environment. IoT device A is installed in a corner of the bedroom 111, IoT device B is installed in a corner of the bedroom 115, and IoT device C and IoT device D are installed in two corners of the living room 117, respectively.

[0023] The IoT devices A, B, C, and D have a sensing function or a recognition function, and transfer the sensed or measured data to the central control device 310 (via a gateway or a communication network 350). The IoT devices A, B, C, and D may be smart home appliances with network functions, such as a refrigerator, a television, a lighting fixture, an air conditioner, an electric pot, an outlet, a power meter, a gas meter, a water meter, etc.

[0024] IoT devices A, B, C, and D are devices that perform a sensing function or a recognition function, while also transmitting and receiving sensing signals by executing STA mode, AP mode, and sniffer mode through the settings of the communication module of the IoT device.

[0025] The central controller 310 can perform arbitrary pair-wise sensing of IoT devices A, B, C and D and perform intrusion detection in conjunction with dynamical timeshare sensing.

[0026] FIG. 5 is a flow chart of an intrusion detection method according to one embodiment of the present invention.

[0027] The intrusion detection method is applied to a plurality of IoT devices 330 and a central controller 310 (FIG. 3). Each IoT device 330 is provided at a spatial position and arranged to transmit and receive sensing signals.

[0028] In step S510, the central control device 310 obtains a plurality of sensing pairs from paired combinations of a plurality of IoT devices.

[0029] In step S520, the central controller 310 causes the multiple IoT devices 330 to transmit signals to acquire characteristics of the multiple sensing pairs.

[0030] In step S530, the central controller 310 creates a sensing pair list including a plurality of sensing pairs and the characteristics of each sensing pair.

[0031] In step S540, the central control device 310 acquires a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list.

[0032] In step S550, the central control device 310 dynamically schedules transmission and reception of multiple IoT devices belonging to multiple first pairs in a time-division manner to obtain a first sensing signal of each first pair.

[0033] In step S560, if the first sensing pair signal satisfies the first intrusion condition, the central controller 310 marks the first pair with a first status code, otherwise marks it with a second status code.

[0034] In step S570, the central control device 310, based on the pair nodes of the multiple first pairs, calculates statistics on the first status codes and second status codes of the multiple first pairs to which each pair node belongs, and determines whether there is an intrusion situation at the spatial position.

[0035] For convenience of explanation, each step of the intrusion detection method will be described below in combination with the application scenario of FIG.

[0036] The central control device 310 acquires multiple sensing pairs from paired combinations of IoT devices A, B, C, and D (step S510), and acquires characteristics of each sensing pair (step S520). In one embodiment, the central control device 310 acquires sensing signals of all sensing pairs by alternately setting IoT devices A, B, C, and D to AP mode and receiving sensing signals. Note that an IoT device 330 in AP mode cannot simultaneously receive sensing signals from multiple IoT devices 330 set to STA mode, so it is necessary to alternately receive sensing signals (e.g., time division multiplexing) to avoid collisions.

[0037] An IoT device in sniffer mode can receive sensing signals from one or more IoT devices. Therefore, the more IoT devices set in AP mode and sniffer mode, the more sensing signals of the sensing pairs are acquired simultaneously, and the faster the sensing signals of all sensing pairs can be acquired.

[0038] A pair of two IoT devices is indicated by a colon. For example, a pair of IoT device A and IoT device B is represented as "pair A:B", which means that IoT device A is in STA mode and transmits a sensing signal to IoT device B in AP mode or sniffer mode, or IoT device B transmits a sensing signal to IoT device A. In other words, in the same sensing pair, the characteristics of the sensing signal transmitted from IoT device A to IoT device B are considered to be the same as the characteristics of the sensing signal transmitted from IoT device B to IoT device A.

[0039] In one embodiment, the central controller 310 specifies the transmission power and subcarrier for IoT devices in STA mode.

[0040] In one embodiment, the characteristic of the sensing pair refers to wireless communication signals from the communication module, such as Received Signal Strength Indication (RSSI), Channel State Information (CSI), Internet Control Message Protocol (ICMP) request / reply messages (e.g., ping values), etc.

[0041] 6 to 8 are schematic diagrams illustrating how sensing signals of all sensing pairs are acquired in a time-division manner according to one embodiment of the present invention.

[0042] The central controller 310 predetermines the order of the IoT devices D, C, and B such that the IoT devices D, C, and B operate in AP mode in turn.

[0043] As shown in FIG. 6, in the first period T1 (duration), the IoT device D is set to the AP mode, so that three sensing pairs A:D, B:D, and C:D are created based on the order of the IoT devices A, B, and C, and the sensing signals of each sensing pair are acquired. For example, in the first sub-period T1.1, the IoT device A transmits a sensing signal to the IoT device D, in the second sub-period T1.2, the IoT device B transmits a sensing signal to the IoT device D, and in the third sub-period T1.3, the IoT device C transmits a sensing signal to the IoT device D. The first sub-period T1.1, the second sub-period T1.2, and the third sub-period T1.3 are sub-periods arranged in this order. Thus, the central control device 310 can acquire the characteristics of the sensing signals of the three sensing pairs in the first period T1.

[0044] As shown in FIG. 7, in the second period T2, the IoT device C is set to the AP mode, so two sensing pairs A:C and B:C are created based on the order of the IoT devices A and B, and the sensing signals of each sensing pair are acquired. For example, in the first subperiod T2.1, the IoT device A transmits a sensing signal to the IoT device C, and in the second subperiod T2.2, the IoT device B transmits a sensing signal to the IoT device C. The first subperiod T2.1 and the second subperiod T2.2 are subperiods arranged in this order. Therefore, the central control device 310 can acquire the characteristics of the sensing signals of the two sensing pairs in the second period T2.

[0045] 8, in the third period T3, the IoT device B is set to the AP mode, so that a sensing pair A:B is created to acquire sensing signals. For example, in the first sub-period T3.1, the IoT device A transmits a sensing signal to the IoT device B. Therefore, the central control device 310 can acquire the characteristics of the sensing signal of the sensing pair in the third period T3.

[0046] The central control device 310 can obtain six sensing pairs and the characteristics of the sensing signals of each sensing pair (hereinafter referred to as the characteristics of the sensing pair) based on the sensing pair creation process of Fig. 6 to Fig. 8. The central control device 310 creates a sensing pair list including multiple sensing pairs and the characteristics of each sensing pair as shown in Table 1 (step S530). In Table 1, the characteristic is the average RSSI value. For example, the average RSSI value of the sensing pair A:D is -35.

[0047] [Table 1]

[0048] The central control device 310 acquires a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list (step S540). The characteristics of the sensing pairs may be RSSI, CSI, ping value, etc. In one embodiment, the first characteristic condition is that the RSSI or CSI is greater than the RSSI or CSI corresponding to the first distance, or greater than the default ping value. For example, the RSSI value of the first characteristic condition is -60. The central control device 310 acquires sensing pairs (first pairs) whose RSSI values ​​are greater than -60 from the six sensing pairs as shown in Table 2 (sensing pairs that are not the first pairs are indicated as No).

[0049] [Table 2]

[0050] Reference is also made to FIG. 9, which is a schematic diagram of a first pair according to one embodiment of the present invention.

[0051] In an application scenario, the first pairs that the central controller 310 obtains are A:D, C:D, B:C and A:B.

[0052] The central control device 310 dynamically schedules transmission and reception of multiple IoT devices belonging to multiple first pairs in a time-division manner to obtain a first sensing signal of each first pair (step S550).

[0053] In one embodiment, the central control device 130 sequentially selects the first N sensing pairs having a common IoT device, sets the common IoT device as the sender and the N other IoT devices as the receivers, and has these sensing pairs perform sequential time-division sensing (first sensing signal).

[0054] As shown in Fig. 9, the central controller 130 sequentially selects the first three sensing pairs having a common IoT device, where A:D and C:D are the first pair, B:C is the second pair, and A:B is the third pair. The first pair of common IoT devices (i.e., IoT device D) is the sender and IoT devices A and C are the receivers, the second pair of common IoT devices (i.e., IoT device C) is the sender and IoT device B is the receiver, and the third pair of common IoT devices (i.e., IoT device B) is the sender and IoT device A is the receiver. The sensing pairs A:D, C:D, B:C, and A:B perform sensing sequentially in a time-division manner and continuously generate a first sensing signal (e.g., RSSI value).

[0055] The central control device 310 continuously monitors the first sensing signal and determines whether the first sensing signal satisfies a first intrusion condition. The first intrusion condition may be that the number of times that the characteristic of the sensing pair exceeds a threshold (e.g., an RSSI value of −60) is greater than a tolerance value (e.g., 5 times).

[0056] The central control device 310 marks the first pair with a first status code if it determines that the first sensing signal satisfies the first intrusion condition, and marks the first pair with a second status code if it does not (step S560). The first status code may be a value of 1, and the second status code may be a value of 0. An edge connecting two nodes is regarded as the first pair. Marking the first pair with the first status code or the second status code means marking the edge of the two nodes with the first status code or the second status code.

[0057] FIG. 10 is a schematic diagram of marking a first pair with a first status code or a second status code according to an embodiment of the present invention.

[0058] The marking of the sensing pairs A:D, C:D, B:C and A:B by the central controller 310 is shown in Figure 10. After a certain sensing period, the sensing pairs A:B and B:C are marked with 1 (first status code), and the sensing pairs A:D and C:D are marked with 0 (second status code).

[0059] Based on the pair nodes of the first pairs, the central control device 310 collects statistics on the first status code and the second status code of the first pairs to which each pair node belongs, and determines whether or not there is an intrusion situation at the spatial position (step S570). The central control device 310 collects statistics on the status code of the first pair to which each pair node belongs, and determines the spatial position at which the pair node is located under three conditions: no intrusion situation, intrusion situation, or suspected intrusion situation.

[0060] In one embodiment, if one of the first pairs to which the pair node belongs is marked with the second status code (first condition), the central control device 310 determines that there is no intrusion situation at the spatial location where the pair node is located. If all of the first pairs to which the pair node belongs are marked with the first status code, and further, if there is a pair with the second status code among a plurality of adjacent pairs to which the other pair node of a certain pair of the plurality of first pairs to which the pair node belongs (second condition), the central control device 310 determines that there is an intrusion situation at the spatial location where the pair node is located. In the remaining conditions (third condition) other than the first and second conditions, the central control device 310 determines that there is a suspicion of an intrusion situation at the spatial location where the pair node is located.

[0061] For example, pair node A (i.e., IoT device A) has two sensing pairs A:B and A:D. As shown in FIG. 10, the sensing pair A:B is marked with a first status code, and the sensing pair A:D is marked with a second status code. Therefore, the central control device 310 statistics that the above first pair of pair node A has two types of status codes (1 and 0) (first condition), and determines that there is no intrusion situation at the spatial location where IoT device A is located. Similarly, it determines that there is no intrusion situation at the spatial locations where IoT devices C and D are located.

[0062] As another example, pair node B (i.e., IoT device B) has two sensing pairs A:B and B:C. As shown in FIG. 10, both of the sensing pairs A:B and B:C are marked with a first status code, and the sensing pair A:D (adjacent pair) to which the other pair node A of one of the sensing pairs A:B (i.e., in the sensing pair A:B, when IoT device B is a pair node, IoT device A is the other pair node) belongs is marked with a second status code (second condition). Therefore, the central control device 310 determines that there is an intrusion situation at the spatial position where IoT device B is located. Considering IoT device C as a pair node, IoT device C has two sensing pairs C:B and C:D. As shown in FIG. 10, the sensing pair C:B is marked with a first status code, and the sensing pair C:D is marked with a second status code. Since there is a sensing pair C:D marked with the second status code (first condition) among the sensing pairs belonging to pair node C, the central control device 310 determines that there is no intrusion situation at the spatial position where IoT device B is located.

[0063] In one embodiment, before acquiring a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list (step S540) (i.e., the central control device 310 acquires Table 1 from the plurality of paired sensing pairs in FIGS. 6 to 8), the central control device 310 sorts the characteristics of each sensing pair in the sensing pair list (Table 1) in ascending order as shown in Table 3, and acquires a plurality of second pairs based on the characteristics that satisfy a second characteristic condition. The second characteristic condition may be that the RSSI value is smaller than a long-distance (e.g., 10 meters) threshold (e.g., −60).

[0064] [Table 3]

[0065] Reference is now made to FIG. 11, which is a schematic diagram of a second pair according to one embodiment of the present invention.

[0066] In one embodiment, when there is no obstacle and the power of the transmitter is fixed, the strength of the sensing signal corresponds to the distance it is transmitted to the receiver, for example, the further the distance, the weaker the sensing signal.

[0067] In order to retain sensing pairs that are far apart between IoT devices, the central control device 310 leaves sensing pairs that satisfy a second characteristic condition (e.g., an RSSI value smaller than -60) as a second pair (e.g., sensing pairs B:D and A:C). That is, the central control device 310 preferentially detects pairs that are far apart among the IoT devices A, B, C, and D from the six sensing pairs as sensing pairs (i.e., detects sensing pairs A:C and B:D) and performs monitoring.

[0068] The central control device 310 schedules the multiple IoT devices 330 belonging to multiple second pairs to transmit signals to acquire the second sensing signals of each second pair. For example, the central control device 310 continuously acquires the second sensing signals of the sensing pairs B:D and A:C in a time-division manner.

[0069] In one embodiment, the central control device 310 continuously detects whether the second sensing signal satisfies a first abnormal condition. If it is determined that the second sensing signal does not satisfy the first abnormal condition, the central control device 310 continuously acquires and detects the second sensing signal. The first abnormal condition may be that the number of times that the second sensing signal exceeds a threshold value (e.g., an RSSI value of -60) is greater than a tolerance value (e.g., 5 times).

[0070] Please refer to FIG. 12, which is a schematic diagram of the characteristics and sampling time of a second sensing signal according to an embodiment of the present invention.

[0071] 12, all five second sensing signals of the sensing pairs B:D exceed the threshold value Thr_BD at least five times. The central control device 310 determines that the second sensing signals of the sensing pairs B:D satisfy the first abnormal condition.

[0072] In one embodiment, when the central control device 310 determines that the second sensing signal satisfies the first abnormal condition, the central control device 310 sorts the characteristics of each sensing pair from the sensing pair list (i.e., Table 1 obtained by the central control device 310 from the multiple sensing pairs that are paired in Figures 6 to 8) in descending order as shown in Table 4, and acquires multiple third pairs based on the characteristics that satisfy the third characteristic condition. The third characteristic condition may be that the RSSI value is greater than a short-distance (e.g., 4 meters) threshold value (e.g., -40).

[0073] [Table 4]

[0074] Reference is now made to FIG. 13, which is a schematic diagram of a third pair according to one embodiment of the present invention.

[0075] In order to retain sensing pairs located nearby between IoT devices, the central control device 310 leaves the sensing pairs that satisfy a third characteristic condition (e.g., RSSI value is greater than -40) as a third pair (e.g., sensing pairs A:D and B:C). In other words, when detecting a potential intrusion in a long-distance sensing pair, the central control device 310 further detects nearby sensing pairs in IoT devices A, B, C, and D from the six sensing pairs (i.e., detects sensing pairs A:C and B:D) and performs monitoring.

[0076] The central control device 310 schedules the multiple IoT devices 330 belonging to multiple third pairs to transmit signals to acquire the third sensing signals of each third pair. For example, the central control device 310 continuously acquires the third sensing signals of the sensing pairs A:C and B:D in a time-division manner.

[0077] In one embodiment, the central control device 310 continuously detects whether the third sensing signal satisfies the second abnormal condition. If it is determined that the third sensing signal does not satisfy the second abnormal condition, the central control device 310 continuously acquires and detects the third sensing signal. The second abnormal condition may be that the number of times that the threshold value (e.g., the RSSI value is −40) is exceeded is greater than a tolerance value (e.g., 5 times).

[0078] Additionally, the central controller 310 may set one or more occupancy thresholds or one or more absence thresholds (for the first abnormal condition and the second abnormal condition).

[0079] In another embodiment, the first abnormal condition and / or the second abnormal condition may be the second sensing signals of the H sensing pairs being greater than the threshold value L consecutive times, where H and L are positive integers.

[0080] In another embodiment, the H sensing pairs may be divided into G groups. The first abnormal condition and / or the second abnormal condition may be that the second sensing signals of S groups out of the G groups are greater than a threshold value L consecutive times, where G and S are positive integers and S is less than or equal to G.

[0081] Please refer to FIG. 14, which is a schematic diagram of the characteristics and sampling time of the third sensing signal according to an embodiment of the present invention.

[0082] 14, all five third sensing signals of the sensing pair B:C exceed the threshold value Thr_BC at least five times. The central control device 310 determines that the third sensing signals of the sensing pair B:C satisfy the second abnormal condition.

[0083] In one embodiment, if it is determined that the third sensing signal satisfies the second abnormality condition, the central control device 310 obtains a plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list (Table 1) (step S540), and dynamically schedules the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to transmit signals (step S550).

[0084] In one embodiment, in the step of acquiring from the sensing pair list a plurality of first pairs whose characteristics satisfy the first characteristic condition (step S540), the central control device 310 collects statistics on the number of sensing pairs of each IoT device 330 from the plurality of sensing pairs, sorts the plurality of sensing pairs in descending order of the number of sensing pairs, and updates the sensing pair list with the sorted plurality of sensing pairs and the characteristics of each sensing pair. The central control device 310 acquires from the updated sensing pair list a plurality of first pairs whose characteristics satisfy the first condition.

[0085] The central control unit 310 rearranges the contents of Table 1 in descending order, and then obtains the contents of Table 5.

[0086] [Table 5]

[0087] The central control device 310 filters the sensing pairs whose characteristics are smaller than a threshold (RSSI value of −60), and calculates the number of each sensing pair, and the results are shown in Table 6.

[0088] [Table 6]

[0089] Then, the central control device 310 selects all sensing pairs of the IoT device with the largest number of sensing pairs based on the largest number of sensing pairs. In this embodiment, the central control device 310 selects all sensing pairs A:B and A:D of the IoT device A and updates the sensing pair list, and the result is shown in Table 7.

[0090] [Table 7]

[0091] The central controller 310 updates the number of sensing pairs based on the unsorted sensing pairs in Table 7, and the result is shown in Table 8.

[0092] [Table 8]

[0093] The central control device 310 picks out all sensing pairs B:C and C:D of IoT device C which have the maximum number of sensing pairs, and updates the sensing pair list, and the result is shown in Table 9.

[0094] [Table 9]

[0095] Then, the central control device 310 performs time-division dynamic sensing pairing based on the permuted sensing pairs in Table 9, and the result is shown in Table 10.

[0096] [Table 10]

[0097] Note that the time-division dynamic sensing pair in Table 10 is a detailed time-division embodiment of the first pair in Table 2.

[0098] The central control device 310 sets the sensing times of the IoT devices A, B, C and D based on the time-division dynamic sensing schedule. For example, the execution time procedures of the time-division dynamic sensing pairs of the IoT devices A, B, C and D are the sensing pairs A:B, A:D, B:C and C:D, respectively.

[0099] In one embodiment, before acquiring multiple sensing pairs from a paired combination of multiple IoT devices 330 (step S510), the central control device 310 detects device identification codes of the multiple IoT devices 330. Then, the central control device 310 sets a sensing schedule (e.g., the contents exemplified in FIG. 6 to FIG. 8) for the multiple IoT devices 330 based on the device identification codes, and acquires multiple sensing pairs (e.g., Table 1) of the multiple IoT devices during the process in which the multiple IoT devices 330 take turns playing device roles in the sensing schedule to transmit and receive. The role of the device may be STA mode, AP mode, or sniffer mode.

[0100] 15, 16A and 16B are a flow chart of an intrusion detection method according to another embodiment of the present invention.

[0101] In step S1505, the central controller 310 obtains a plurality of sensing pairs from paired combinations of a plurality of IoT devices 330.

[0102] In step S1510, the central controller 310 causes the multiple IoT devices 330 to transmit signals to acquire characteristics of the multiple sensing pairs.

[0103] In step S1515, the central controller 310 creates a sensing pair list that includes a plurality of sensing pairs and the characteristics of each sensing pair.

[0104] In step S1520, the central controller 310 obtains a plurality of second pairs from the sensing pair list based on the characteristics satisfying the second characteristic condition.

[0105] In step S1525, the central control device 310 causes the multiple IoT devices 330 belonging to the second pairs to transmit signals to acquire second sensing signals of each second pair.

[0106] In step S1530, the central control device 310 determines whether the second sensing signal satisfies the first abnormal condition, and if so, executes step S1535; otherwise, returns to step S1525.

[0107] In step S1535, the central controller 310 obtains a plurality of third pairs from the sensing pair list based on the characteristics satisfying a third characteristic condition.

[0108] In step S1540, the central control device 310 causes the multiple IoT devices 330 belonging to the third pair to transmit signals to acquire the third sensing signals of each of the third pairs.

[0109] In step S1545, the central controller 310 determines whether the third sensing signal satisfies the second abnormal condition, and if so, executes step S1550, otherwise returns to step S1525.

[0110] In step S1550, the central controller 310 acquires, from the sensing pair list, a plurality of first pairs whose characteristics satisfy a first characteristic condition.

[0111] In step S1555, the central control device 310 dynamically schedules transmission and reception of the multiple IoT devices 330 belonging to the multiple first pairs in a time-division manner to continuously acquire the first sensing signals of each of the first pairs.

[0112] In step S1560, the central control device 310 determines whether the first sensing signal satisfies the first intrusion condition. If so, executes step S1570; if not, executes step S1565.

[0113] In step S1565, the central controller 310 marks the first pair with a second status code.

[0114] In step S1570, central controller 310 marks the first pair with a first status code.

[0115] In step S1575, the central control device 310 collects statistics of the first status codes of the first pairs to which each pair node belongs. Based on the statistics of the status codes of the first pairs, the central control device 310 determines the intrusion situation under the following three conditions (steps S1580, S1585, and S1590).

[0116] In step S1580, the central controller 310 determines that at least one of the first pairs to which the pair node belongs has the second status code, and in step S1582, the central controller 310 determines that there is no intrusion situation in the spatial position to which the pair node belongs.

[0117] In step S1585, the central controller 310 determines that all of the first pairs to which the pair node belongs have the first status code, and that among the adjacent pairs to which the other pair node of one of the first pairs belongs, there is a pair node with the second status code. Then, in step S1587, the central controller 310 determines that an intrusion situation exists in the spatial position to which the pair node belongs.

[0118] In step S1590, the central controller 310 determines that the condition is other than the conditions in steps S1580 and S1585. Then, in step S1592, the central controller 310 determines that the spatial position to which the pair node belongs is suspected to be an intrusion situation.

[0119] FIG. 17 is a schematic diagram of an IoT device in an application scenario according to another embodiment of the present invention.

[0120] In the application scene of FIG. 17, five IoT devices are provided (i.e., an IoT device E is provided separately in the corner of the toilet 113), compared to the application scene of FIG. 4 in which four IoT devices are provided.

[0121] FIG. 18 is a schematic diagram of multiple sensing pairs acquired in the application scenario of FIG. 17 according to the present invention.

[0122] The central control device 310 sets a sensing schedule for the IoT devices A to E in the same manner as described in FIG. 6 to FIG. 8, so that the IoT devices A to E take turns playing the role of devices. In one embodiment, the order of the AP modes is IoT devices E, D, C, and B. For example, in a first period T1, the IoT device E in AP mode receives the sensing signals of the IoT devices A, B, C, and D in a time-division manner. In a second period T2, the IoT device D in AP mode receives the sensing signals of the IoT devices A, B, and C in a time-division manner. In a third period T3, the IoT device C in AP mode receives the sensing signals of the IoT devices A and B in a time-division manner. In a fourth period T4, the IoT device B in AP mode receives the characteristics of the sensing signal of the IoT device A (steps S1505 to S1510).

[0123] The central control device 310 receives the characteristics of the sensing signals of the 10 sensing pairs and creates a sensing pair list (step S1515), the result of which is shown in Table 11.

[0124] [Table 11]

[0125] The central control device 310 obtains channel information between two IoT devices via the Wi-Fi wireless sensor system as the characteristics of the sensing signals of the sensing pair. In one embodiment, in a pair of IoT devices 330 (two IoT devices are a sender and a receiver, respectively), when the transmission power of the sender IoT device is specified, the receiver IoT device obtains an RSSI value. In this embodiment, the characteristics of the two IoT sensing signals are RSSI average values.

[0126] In one embodiment, the central controller 310 can obtain the characteristic D using equation (1).

[0127]

number

[0128] In formula (1), D is the characteristic, d i is the i-th RSSI characteristic value, and w i is the weight of the i-th RSSI characteristic value.

[0129] The RSSI characteristic value may be, but is not limited to, 1 if K% of the RSSI measurements received by the receiving IoT device are greater than a certain threshold, and 0 otherwise, where K is a positive integer.

[0130] In another embodiment, when the transmit power and subcarrier of the originating IoT device are specified, the receiving IoT device obtains CSI information. In this embodiment, the characteristic may be a CSI average value.

[0131] In another embodiment, the central controller 310 can obtain the characteristic D using equation (2).

[0132]

number

[0133] In formula (2), D is the characteristic, and d i is the i-th CSI characteristic value, and w i is the weight of the i-th CSI characteristic value.

[0134] The CSI characteristic value can be, but is not limited to, the maximum, minimum, standard deviation, or average value of the CSI amplitude of some set of subcarriers, the average value of the CSI amplitude plus the standard deviation of N1 CSI amplitudes or the average value of the CSI amplitude minus the standard deviation of N2 CSI amplitudes, the average value of the differences of some consecutive CSI amplitudes, the number of packets (containing CSI information) acquired per unit time, the CSI phase of a given subcarrier, or the average value of the differences of the CSI phase of consecutive subcarriers, where N1 and N2 are positive integers.

[0135] In one embodiment, in a pair of IoT devices 330 (two IoT devices are a sender and a receiver, respectively), the sender IoT device sends M measurement data packets, and the receiver IoT device receives m data packets, where M and m are positive integers. In this embodiment, the central control device 310 can obtain the characteristic D by using the formula (3).

[0136] D=mj / Mj...Equation (3)

[0137] In equation (3), D is the characteristic, mj is the number of data packets received by the receiver of the jth sensing pair, and Mj is the number of measurement data packets transmitted by the transmitter of the jth sensing pair.

[0138] The central control device 310 sorts the characteristics of each sensing pair from the sensing pair list (Table 11) in ascending order to obtain a first sorted sensing pair list, and obtains a number of second pairs (step S1520) based on the characteristics that satisfy a second condition, and the result is shown in Table 12. The second characteristic condition may be that the RSSI value is smaller than a long distance (e.g., 10 meters) threshold (e.g., −56).

[0139] [Table 12]

[0140] FIG. 19 is a schematic diagram of a second pair according to one embodiment of the present invention.

[0141] In this embodiment, the central control device 310 preferentially detects pairs of IoT devices A, B, C, and D that are far apart from each other as sensing pairs from the 10 sensing pairs (i.e., detects sensing pairs A:B, A:C, B:D, and C:D) and performs monitoring (step S2520).

[0142] The central control device 310 sets a sensing schedule for the IoT devices A, B, C, and D, assigns the IoT devices A, B, C, and D to a certain device role, and executes pair sensing to acquire sensing signals of four sensing pairs. For example, in a first period, the central control device 310 sets the IoT devices A and B in STA mode and the IoT devices C and D in AP mode, where the IoT device A is connected to the IoT device C (on channel 36) and the IoT device B is connected to the IoT device D (on channel 44). In a second period, the central control device 310 sets the IoT devices A and C in STA mode and the IoT devices B and D in AP mode, where the IoT device A is connected to the IoT device B (on channel 40) and the IoT device C is connected to the IoT device D (on channel 48). After the placement is completed, the central control device 310 acquires the second sensing signals of the sensing pairs A:C, B:D, A:B, and C:D every 0.5 seconds (step S1525).

[0143] The central control device 310 continuously determines whether the second sensing signal satisfies a first abnormal condition. For example, the first abnormal condition is that the second sensing signal of any second sensing pair exceeds the threshold value five consecutive times. If the central control device 310 determines that the second sensing signal exceeds the threshold value five consecutive times within two seconds, it determines that there is a potential intrusion.

[0144] In steps S1520 to S1530, the central control device 310 uses the long-distance sensing pairs to determine whether or not there is a possibility of a potential intrusion, and performs rudimentary intrusion detection (determining the presence or absence of a person) in a wide range of long-distance space.

[0145] If the central control device 310 determines that there is no possibility of a potential intrusion (step S1530), the central control device 310 returns to the step of continuously acquiring and detecting the second sensing signal in order to continue monitoring (step S1525).

[0146] If the central control device 310 determines that there is a possibility of a potential intrusion (step S1530), it obtains a plurality of third pairs from the sensing pair list (Table 11) based on the characteristics that satisfy the third characteristic condition (step S1535).

[0147] In one embodiment, the central control device 310 sorts the characteristics of each sensing pair from the sensing pair list (Table 11) in descending order to obtain a second sorted sensing pair list, and sets the sensing pair whose characteristics satisfy a third characteristic condition as the third pair, and the result is shown in Table 13. The third characteristic condition may be that the RSSI value is greater than a short distance (e.g., 4 meters) threshold (e.g., −40).

[0148] [Table 13]

[0149] Reference is now made to FIG. 20, which is a schematic diagram of a third pair according to one embodiment of the present invention.

[0150] Referring to Table 13, FIG. 20 shows a third pair between multiple IoT devices in an application scenario. FIG. 19 shows a long-distance sensing pair (second pair), whereas FIG. 20 shows a sensing pair (third pair) between IoT devices located close to each other. In this embodiment, the central control device 310 leaves the sensing pair that satisfies the third characteristic condition (e.g., RSSI value is greater than -40) as the third pair (e.g., sensing pairs A:D, A:E, B:C, and D:E). That is, when detecting a potential intrusion in the long-distance sensing pair, the central control device 310 further detects the closer of the IoT devices A, B, C, D, and E from the 10 sensing pairs as the sensing pair (i.e., detects the sensing pairs A:D, A:E, B:C, and D:E) and performs monitoring (step S1535).

[0151] The central control device 310 sets sensing schedules for the IoT devices A, B, C, D, and E, assigns the IoT devices A, B, C, D, and E to the role of a certain device to perform pair sensing, and acquires sensing signals of four sensing pairs. For example, in a first period, the central control device 310 sets the IoT devices A, B, and D as STA mode and the IoT devices C and E as AP mode, where the IoT device A is connected to the IoT device E (on channel 36), the IoT device D is connected to the IoT device E (on channel 44), and the IoT device B is connected to the IoT device C (on channel 48). In a second period, the central control device 310 sets the IoT device A as STA mode and the IoT device D as AP mode, where the IoT device A is connected to the IoT device D (on channel 52). After the placement is completed, the central control device 310 acquires the third sensing signals of the sensing pairs A:E, D:E, B:C, and A:D every 0.5 seconds (step S1540).

[0152] The central control device 310 continuously determines whether the third sensing signal satisfies a second abnormal condition. For example, the second abnormal condition is that the third sensing signal of any third sensing pair exceeds the threshold value five consecutive times. If the central control device 310 determines that the third sensing signal exceeds the threshold value five consecutive times within two seconds, it determines that an intruder is within the range of a specific sensing pair.

[0153] In steps S1535 to S1540, the central control device 310 uses the short-range sensing pairs to confirm the range of the intruder. In one embodiment, the central control device 310 can predefine the spatial positions of all the sensing pairs of the IoT devices A, B, C, D and E in the application scene. For example, the sensing pair A:D is located on the left side of the bedroom 111 and the living room 117, the sensing pair B:C is located on the right side of the bedroom 115 and the living room 117, and the sensing pair B:E is located between the toilet 113 and the bedroom 115. Therefore, the central control device 310 can determine the range of the intrusion by detecting the third pair that meets the second abnormality condition.

[0154] The central control device 310 obtains a plurality of first pairs whose characteristics satisfy a first condition from the sensing pair list (Table 13) (step S1550), and the result is shown in Table 14. The first characteristic condition may be that the RSSI or CSI is greater than the first distance corresponding to the first distance, or greater than the default ping value.

[0155] [Table 14]

[0156] In one embodiment, the central controller 310 sets a time-sharing dynamic schedule for IoT devices A, B, C, D and E.

[0157] First, the central control device 310 calculates the number of first pairs of each IoT device from the multiple first pairs (Table 14), and the results are shown in Table 15.

[0158] [Table 15]

[0159] Then, the central control device 310 selects all sensing pairs of the IoT device with the largest number of sensing pairs based on the largest number of sensing pairs. In this embodiment, the central control device 310 selects all sensing pairs A:E, B:E, C:E and D:E of IoT device E and updates the sensing pair list, and the result is shown in Table 16.

[0160] [Table 16]

[0161] The central controller 310 updates the number of sensing pairs based on the unsorted sensing pairs in Table 16, and the results are shown in Table 17.

[0162] [Table 17]

[0163] The central control device 310 selects all sensing pairs A:B and A:D of IoT device A which have the maximum number of sensing pairs, and updates the sensing pair list, and the result is shown in Table 18.

[0164] [Table 18]

[0165] Since there are still unsorted sensing pairs, the central controller 310 updates the number of sensing pairs based on the unsorted sensing pairs in Table 18, as shown in Table 19.

[0166] [Table 19]

[0167] The central control device 310 selects all sensing pairs B:C and C:D of IoT device C which have the maximum number of sensing pairs, and updates the sensing pair list, and the result is shown in Table 20.

[0168] [Table 20]

[0169] At this point, the sorting of all the sensing pairs has been completed. Then, the central control device 310 performs time-division dynamic sensing pair sorting based on the sorted sensing pairs in Table 20, and the result is shown in Table 21.

[0170] [Table 21]

[0171] Note that the time-division dynamic sensing pair in Table 21 is a detailed time-division embodiment of the first pair in Table 14.

[0172] The central controller 310 sets the sensing times of the IoT devices A, B, C, D and E based on the time-sharing dynamic sensing schedule.

[0173] Please refer to FIG. 21, which is a schematic diagram of a sensing pair of an IoT device E set to AP mode in a first period.

[0174] In the first period T1, the IoT device E is a common sensing device and is set to AP mode as a transmitter. The other sensing device of the first pair of common sensing devices, i.e., the IoT devices A, B, C, and D paired with the IoT device E, perform sensing in sequence and in turn with the IoT device E based on time-division dynamic sensing schedules T1.1, T1.2, T1.3, and T1.4. For example, the IoT devices A, B, C, and D transmit signals to the IoT device E with their designated transmission powers (first sensing signals).

[0175] Please refer to FIG. 22, which is a schematic diagram of the sensing pair of IoT device A set to AP mode in the second period.

[0176] In the second period T2, since IoT device A is a common sensing device, it is set to AP mode as a transmitter. The other sensing device of the first pair of common sensing devices, i.e., IoT devices B and D paired with IoT device A, perform sensing in sequence and in turn with IoT device E based on time-division dynamic sensing schedules T2.1 and T2.2. For example, IoT devices B and D transmit signals to IoT device A with their designated transmission powers (first sensing signals).

[0177] Please refer to FIG. 23, which is a schematic diagram of the sensing pair of IoT device C set to AP mode in the third period.

[0178] In the third period T3, since IoT device C is a common sensing device, it is set to AP mode as a transmitter. The other sensing device of the first pair of common sensing devices, i.e., IoT devices B and D paired with IoT device C, perform sensing in sequence and in turn with IoT device C based on time-division dynamic sensing schedules T3.1 and T3.2. For example, IoT devices B and D transmit signals to IoT device C with their designated transmission powers (first sensing signals).

[0179] The central control device 310 dynamically schedules transmission and reception of multiple IoT devices belonging to multiple first pairs in a time-division manner to continuously acquire the first sensing signal of each first pair (step S1555). The central control device 310 continuously determines whether the first sensing signal of any first pair satisfies an intrusion suspicion condition (step S1560). The intrusion suspicion condition may be that the number of times that the characteristic of the sensing pair exceeds a certain threshold (e.g., an RSSI value of -60) is greater than a tolerance value (e.g., 5 times).

[0180] If it is determined that the first sensing signal satisfies the suspected intrusion condition (step S1560), the first pair that satisfies the suspected intrusion condition is marked with a first status code (step S1570), and if not, the first pair that does not satisfy the suspected intrusion condition is marked with a second status code (step S1565).

[0181] FIG. 24 is a schematic diagram of marking all first pairs according to an embodiment of the present invention.

[0182] In one embodiment, the first status code has a value of 1 and the second status code has a value of 0.

[0183] In the application scenario, multiple IoT devices A, B, C, D, and E are deployed. At a certain monitoring time, the central control device 310 collects statistics on the first status code of the first pair to which each pair node belongs (step S1575). For example, the central control device 310 collects statistics on the value (first status code or second status code) of each edge (first pair) of each of the IoT devices A, B, C, D, and E (pair nodes).

[0184] If the central control device 310 determines that at least one of the multiple first pairs to which each pair node belongs has the second status code (step S1580), it determines that there is no intrusion situation in the spatial position to which the pair node belongs (step S1582).

[0185] When the central control device 310 determines that all of the multiple first pairs to which each pair node belongs are the first status code, and that among the multiple adjacent pairs to which the other pair node of a certain pair of the multiple first pairs belongs, there is a pair node with the second status code (step S1585), it determines that there is an intrusion situation at the spatial position to which the pair node belongs (step S1857).

[0186] When central control device 310 determines that each pair node satisfies a condition other than those of steps S1580 and S1585 (step S1590), it determines that there is a suspicion of an intrusion situation at the spatial position to which the pair node belongs (step S1592).

[0187] In one embodiment, the central control device 310 uses the three conditions described above (step S570 in FIG. 5 or steps S1580, S1585, S1590 in FIG. 16) to determine the spatial location where the pair node is located as no intrusion situation, an intrusion situation, or suspected intrusion situation.

[0188] As shown in FIG. 24, the values ​​of the three edges of pair node C (i.e., IoT device C) are X (sensing pair C:B), 1 (sensing pair C:E) and 1 (sensing pair C:D), respectively.

[0189] If the X value of the sensing pair C:B is 0, the pair node C has one first pair (i.e., sensing pair C:B) marked with the second status code (first condition: at least one pair among the multiple first pairs to which a pair node belongs is marked with the second status code). Therefore, the central control device 310 determines that there is no intrusion situation within the range of the spatial position of the IoT device A.

[0190] When the X value of the sensing pair C:B is 1, the values ​​of the three edges of the pair node C (i.e., IoT device C) are all 1, which means that all the first pairs of the pair node C are marked with the first status code. Here, a certain pair of the three first pairs of the pair node C, for example, the other pair node B of the first pair B:C, has three first pairs, and among these three first pairs (sensing pairs B:A, B:E, and B:C), there is a pair B:A marked with the second status code (second condition: all the first pairs to which a certain pair node belongs are marked with the first status code, and among the multiple adjacent pairs to which the other pair node of a certain pair of the multiple first pairs to which this pair node belongs, there is a pair with the second status code), so the central control device 310 determines that there is an intrusion situation within the range of the spatial position of the IoT device C.

[0191] If the central control device 310 determines that the above first condition or second condition is not satisfied for each pair node (third condition), this means that there is a suspicion of an intrusion situation at the spatial location where the pair node is located.

[0192] After determining the status codes of all the first pairs of all pair nodes A, B, C, D and E, the central control device 310 obtains the result that there is an intrusion at the location of the right corner range (IoT device C) of the living room 117. Therefore, the central control device 310 issues an alarm signal to inform the user of the area range where the intruder is found.

[0193] FIG. 25 is a schematic diagram of marking all first pairs according to another embodiment of the present invention.

[0194] The central control device 310 determines the status codes of all the first pairs of all the pair nodes A, B, C, D and E. In this embodiment, the central control device 310 determines that all the first pairs of each of the pair nodes A and C are marked with the first status code (i.e., value 1). Thus, the central control device 310 detects that an intrusion has occurred at the location of the right corner range (IoT device C) of the bedroom 111 and the living room 117, respectively.

[0195] Regardless of the number of IoT devices in an application scenario, the central control device 310 can detect between 0 and T possible intruders by determining whether the status codes of all first pairs of each pair node are the first status code, where T is the number (a positive integer) of IoT devices installed in the application scenario.

[0196] FIG. 26 is a block diagram of a central controller according to one embodiment of the present invention.

[0197] The central controller 310 includes a communication module 312, a processor 314, and a storage medium 316. The processor 314 is connected to the communication module 312 and the storage medium 316, respectively.

[0198] The storage medium 316 stores a plurality of program codes whose functions include a pair selection module 322, a sensing data collection module 324, and a sensing result calculation module 326. When the plurality of program codes are loaded into the processor 314, the processor 314 executes the pair selection module 322, the sensing data collection module 324, and the sensing result calculation module 326.

[0199] The pair selection module 322 is responsible for arranging the device role of each IoT device 330 and the sensing pairs among multiple IoT devices 330 .

[0200] The sensing data collection module 324 collects the sensing signals received by each IoT device 330 as a sensing pair, and acquires the characteristics of the sensing signals.

[0201] The sensing result calculation module 326 is for calculating the situation of intrusion detection in an application scenario.

[0202] FIG. 27 is a block diagram of an IoT device according to one embodiment of the present invention.

[0203] The IoT device 333 includes a communication module 332, a processor 334, and a storage medium 336. The processor 334 is connected to the communication module 332 and the storage medium 336, respectively.

[0204] The storage medium 336 stores a plurality of program codes, the functions of which include a configuration module 342, a pair module 344, and a sensing data feedback module 346. When the plurality of program codes are loaded into the processor 334, the processor 334 executes the configuration module 342, the pair module 344, and the sensing data feedback module 346.

[0205] The IoT device 333 can connect to other IoT devices and the central controller 310 via the communication module 332 .

[0206] The configuration module 342 is for configuration using the sensing schedule information issued by the central controller 310 .

[0207] The pair module 344 is for performing sensing pairing with other IoT devices based on configuration settings.

[0208] The sensing data feedback module 346 is for measuring the sensing signal and feeding back the sensing signal to the central controller 310 via the communication module 332 .

[0209] In one embodiment, the communication modules 312 and 332 are communication chips that support, for example, but not limited to, Global System for Mobile communication (GSM), Long Term Evolution (LTE), fifth generation network system (5G), Wireless Fidelity (Wi-Fi), Bluetooth technology, wired networks, or combinations thereof.

[0210] In one embodiment, processors 314 and 334 may be, for example, but not limited to, a microprocessor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Central Processing Unit (CPU), a System on Chip (SoC), a Field Programmable Gate Array (FPGA), a Network Processor chip, or a combination thereof.

[0211] In one embodiment, storage media 316 and 336 may be, for example, but not limited to, a Random Access Memory (RAM), a Flash memory, a Read Only Memory (ROM), a Hard Disk Drive (HDD), a Solid State Drive (SSD), an optical storage device, or a combination thereof.

[0212] In summary, the intrusion detection system and the intrusion detection method according to the present invention do not restrict the pair mode of the sensing device, and any sensing device can be incorporated into the intrusion detection node. Therefore, the technology of the present invention solves the problems of the detection range limit and the detection dead zone without increasing the hardware cost.

[0213] Furthermore, the technology of the present invention combines a long-range sensing pair and a short-range sensing pair, and first uses the long-range sensing pair to initially judge a potential intrusion situation (presence or absence of an intruder) over a wide range. If it is determined that there is a potential intrusion situation, the location of the intruder is then determined within an even smaller range, thereby solving the problem of delayed response time and improving the accuracy of intrusion detection.

[0214] The above description is merely a specific example of the present invention, and does not limit the scope of the claims of the present invention, so that all equivalent modifications utilizing the contents of the present invention are equally included in the scope of the present invention and are described herein. [Explanation of symbols]

[0215] 123: Spatial range 111: Bedroom 113: Toilet 115: Bedroom 117: Living room 300: Intrusion Detection System 310: Central control unit 330: IoT devices 350: Communications Network 312, 332: communication module 314, 334: Processor 316, 336: Storage medium 322: Pair selection module 324: Sensing data collection module 326: Sensing result calculation module 342: Configuration module 344: Pair module 346: Sensing data feedback module A, B, C, D, E: IoT devices Thr_AC, Thr_BD, Thr_AC, Thr_BD: Threshold S510~S570, S1505~S1592: Step

Claims

1. A plurality of IoT devices (330) each disposed at a spatial location and arranged to transmit and receive sensing signals; a central controller (310) in communication with the plurality of IoT devices (330), obtaining a plurality of sensing pairs from pairwise combinations of the plurality of IoT devices (330); causing the plurality of IoT devices (330) to transmit and receive signals at each of the sensing pairs to obtain characteristics of the plurality of sensing pairs; creating a sensing pair list including the plurality of sensing pairs and characteristics of each of the sensing pairs; obtaining a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list; Dynamically schedule transmission and reception of the plurality of IoT devices belonging to the plurality of first pairs in a time division manner to acquire a first sensing signal of each of the first pairs; marking the first pair with a first status code if the first sensing signal satisfies an intrusion suspected condition, and marking the first pair with a second status code if the first sensing signal does not satisfy an intrusion suspected condition; and calculating statistics of the first status code and the second status code of the first pairs to which the pair nodes belong based on the pair nodes of the first pairs, and determining whether or not there is an intrusion situation at the spatial position; and a central control unit (310) arranged to:

2. Before obtaining the plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list, the central control device (310) further Obtaining a plurality of second pairs from the sensing pair list based on a characteristic satisfying a second characteristic condition; sending signals to the IoT devices belonging to the second pairs to acquire second sensing signals of each of the second pairs; continuously detecting whether the second sensing signal satisfies a first abnormal condition; and When it is determined that the second sensing signal does not satisfy the first abnormal condition, continuously acquiring and detecting the second sensing signal; 2. The intrusion detection system of claim 1, arranged as follows:

3. When the central control device determines that the second sensing signal satisfies the first abnormality condition, obtaining a plurality of third pairs from the sensing pair list based on a characteristic satisfying a third characteristic condition; sending signals to the plurality of IoT devices belonging to the plurality of third pairs to acquire a third sensing signal of each of the third pairs; continuously detecting whether the third sensing signal satisfies a second abnormal condition; and When it is determined that the third sensing signal does not satisfy the second abnormality condition, continuously acquiring and detecting the third sensing signal; It is arranged as follows:

3. The intrusion detection system of claim 2, wherein the central control device is configured to, when it determines that the third sensing signal satisfies the second abnormality condition, obtain from the sensing pair list the plurality of first pairs whose characteristics satisfy the first characteristic condition, and dynamically schedule transmissions of the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner.

4. 4. The intrusion detection system of claim 3, wherein the characteristics of each sensing pair include RSSI, CSI, and ping value, the first characteristic condition is that the RSSI or CSI is greater than a first distance or greater than a default ping value, the second characteristic condition is that the RSSI or CSI is less than a second distance or less than the default ping value, and the first distance is greater than the second distance.

5. The central control device, as a prior operation to acquire the plurality of second pairs from the sensing pair list based on the characteristic satisfying the second characteristic condition, sorting the characteristic of each of the sensing pairs in ascending order based on the plurality of sensing pairs; and 3. The intrusion detection system of claim 2, further configured to include creating or updating the sensing pair list with the reordered plurality of sensing pairs and characteristics of each of the sensing pairs.

6. The central control device performs an operation of acquiring the plurality of first pairs, the characteristics of which satisfy the first characteristic condition, from the sensing pair list, Calculating the number of sensing pairs of each of the IoT devices from the plurality of sensing pairs, sorting the plurality of sensing pairs in descending order of the number of sensing pairs, and updating the sensing pair list according to the sorted plurality of sensing pairs and characteristics of each of the sensing pairs; obtaining the plurality of first pairs whose characteristics satisfy the first characteristic condition from the updated sensing pair list; 2. The intrusion detection system of claim 1 arranged to include:

7. The central control device is configured to determine an intrusion situation based on a statistic of the plurality of first pairs of status codes as follows: (1) when at least one pair among the plurality of first pairs to which the pair node belongs has the second status code, determining that there is no intrusion situation at the spatial position where the pair node is located; (2) when all of the plurality of first pairs to which the pair node belongs are the first status code, and among a plurality of adjacent pairs to which the other pair node of a certain pair of the plurality of first pairs belongs, there is a pair having the second status code, determining that an intrusion situation exists at the spatial position where the pair node is located; (3) in the remaining case, determining that the spatial position where the pair node is located is suspected of being an intrusion situation, the intrusion detection system according to claim 1 .

8. The central control device includes an operation of acquiring the plurality of sensing pairs from paired combinations of the plurality of IoT devices, Detecting device identification codes of the plurality of IoT devices; and Setting a sensing schedule for the plurality of IoT devices based on the device identification code, and acquiring the plurality of sensing pairs of the plurality of IoT devices during a process in which the plurality of IoT devices alternately assume device roles including a station mode, a wireless access mode, and a sniffer mode in the sensing schedule to transmit and receive data; 2. The intrusion detection system of claim 1 arranged to include:

9. 1. An intrusion detection method applied to a plurality of IoT devices each installed at a spatial position and arranged to transmit and receive a sensing signal, and a central control device communicatively connected to the plurality of IoT devices to receive the sensing signal, comprising: obtaining a plurality of sensing pairs from pairwise combinations of the plurality of IoT devices; A signal is sent to the plurality of IoT devices at each of the sensing pairs. transmitting and receiving to obtain characteristics of the plurality of sensing pairs; creating a sensing pair list including the plurality of sensing pairs and characteristics of each of the sensing pairs; obtaining a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list; Dynamically scheduling transmission and reception of the plurality of IoT devices belonging to the plurality of first pairs in a time division manner to acquire a first sensing signal of each of the first pairs; marking the first pair with a first status code if it is determined that the first sensing signal satisfies an intrusion suspected condition, and marking the first pair with a second status code if it is not determined that the first sensing signal satisfies an intrusion suspected condition; and calculating, based on the pair nodes of the plurality of first pairs, the first status codes and the second status codes of the plurality of first pairs to which the pair nodes belong, to determine whether or not there is an intrusion situation at the spatial position.

10. Before the step of obtaining the plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list, obtaining a plurality of second pairs from the sensing pair list based on a characteristic satisfying a second characteristic condition; causing the plurality of IoT devices belonging to the plurality of second pairs to transmit signals to acquire second sensing signals of each of the second pairs; continuously detecting whether the second sensing signal satisfies a first abnormal condition; and if it is determined that the second sensing signal does not satisfy the first abnormal condition, continuously acquiring and detecting the second sensing signal.

11. When it is determined that the second sensing signal satisfies the first abnormality condition, obtaining a plurality of third pairs from the sensing pair list based on a characteristic satisfying a third characteristic condition; causing the plurality of IoT devices belonging to the plurality of third pairs to transmit signals to acquire a third sensing signal of each of the third pairs; continuously detecting whether the third sensing signal satisfies a second abnormal condition; if it is determined that the third sensing signal does not satisfy the second abnormal condition, continuously acquiring and detecting the third sensing signal; When it is determined that the third sensing signal satisfies the second abnormality condition, the method includes a step of acquiring the first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list, and dynamically scheduling transmissions of the IoT devices belonging to the first pairs in a time division manner; 11. The intrusion detection method of claim 10, wherein the characteristics of each sensing pair include RSSI, CSI, and ping value, the first characteristic condition is that the RSSI or CSI is greater than a first distance or greater than a default ping value, the second characteristic condition is that the RSSI or CSI is less than a second distance or less than the default ping value, and the first distance is greater than the second distance.

12. before the step of obtaining the plurality of second pairs from the sensing pair list based on the characteristic satisfying the second characteristic condition; sorting the characteristics of each of the sensing pairs in ascending order based on the plurality of sensing pairs; and creating or updating the sensing pair list according to the reordered plurality of sensing pairs and characteristics of each of the sensing pairs.

13. The step of acquiring the plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list includes: Calculating the number of sensing pairs of each of the IoT devices from the plurality of sensing pairs, sorting the plurality of sensing pairs in descending order of the number of sensing pairs, and updating the sensing pair list according to the sorted plurality of sensing pairs and characteristics of each of the sensing pairs; and obtaining the plurality of first pairs, the characteristics of which satisfy the first characteristic condition, from the updated sensing pair list.

14. determining an intrusion situation based on statistics of the plurality of first pairs of status codes as follows: (1) when at least one pair among the plurality of first pairs to which the pair node belongs has the second status code, determining that there is no intrusion situation at the spatial position where the pair node is located; (2) when all of the plurality of first pairs to which the pair node belongs are the first status code, and among a plurality of adjacent pairs to which the other pair node of a certain pair of the plurality of first pairs belongs, there is a pair having the second status code, determining that an intrusion situation exists at the spatial position where the pair node is located; (3) in the remaining case, it is determined that there is a suspicion of an intrusion situation at the spatial position where the pair node is located.

15. The step of obtaining the plurality of sensing pairs from paired combinations of the plurality of IoT devices includes: Detecting device identification codes of the plurality of IoT devices; The intrusion detection method of claim 9, further comprising: setting a sensing schedule for the plurality of IoT devices based on the device identification code, and acquiring the plurality of sensing pairs of the plurality of IoT devices during a process in which the plurality of IoT devices alternately assume device roles including station mode, wireless access mode, and sniffer mode in the sensing schedule to transmit and receive.

Images