Security system, security device, security base station and security mobile terminal

Abstract

To control a security device installed in a security object facility by using a portable terminal for security held by a security guard and to allow communication with a device of a security company through a wide area network.SOLUTION: A security device 100 controls an AP 200 to start transmission of a beacon signal when occurrence of an abnormality such as intrusion is detected. The AP 200 performs authentication with a portable terminal 500 for security which receives the beacon signal, and when authentication is obtained, the security device 100 performs authentication with a portable terminal 300 for security. When the authentication is obtained, a security state is released according to a security state release request from the portable terminal 500 for security, after this, the security device 100 connects a communication path between the portable terminal 500 for security and a center device 31 to allow communication.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a security system that detects the occurrence of an abnormal event, such as the intrusion of a suspicious person, and reports the occurrence in a predetermined manner, and to an apparatus that constitutes the security system. [Background technology]

[0002] So-called security devices are often installed in offices, schools, commercial facilities, etc., where there are no users at night or on holidays. Security devices are also being used in ordinary homes to ensure safety at night when residents are often out and not at home or are asleep and out of sight. For example, as shown in Fig. 11, security devices 11 installed in various facilities 10 to be guarded are connected to various monitoring sensors (anomaly detection sensors) such as an intrusion sensor SX1 and a fire sensor SX2.

[0003] The intrusion sensor SX1 includes a human presence sensor that uses infrared rays, ultrasonic waves, visible light, etc. to detect the presence of a human, an opening / closing sensor that uses magnetism or acceleration to detect the opening / closing of a door or window, and an impact sensor that detects the impact when a window or door is broken. The fire sensor SX2 includes a smoke sensor that detects smoke and a heat sensor that detects heat. These various monitoring sensors are connected to the sensor input circuit section 12 of the security device 11. The sensor input circuit section 12 of the security device 11 monitors the output signals from each of the monitoring sensors SX1, SX2, ..., and when it detects the occurrence of an abnormality, it reports the occurrence through the wide area network 20 to a predetermined reporting destination, for example, a security destination accommodation device (control device) 31 of a security company 30.

[0004] The wide area network 20 is a communication network such as a general public telephone network, a mobile phone network, or the Internet. In the security company 30, when the guarded accommodation device 31 receives a report from the security device 11 of the security target facility 10, it notifies the monitor 40 by, for example, emitting a sound of a received message. The monitor 40 operates the guarded accommodation device 31 to identify the source of the report and instructs the security guard 50 to be dispatched to the source of the report. This enables the security guard to be quickly dispatched to the security target facility 10 where an abnormality has occurred and to take appropriate action.

[0005] The security device requires an operation (state switching operation) to switch between a security state (monitoring state) and a non-security state (non-monitoring state). In the security state, the output signal from the anomaly detection sensor is monitored, and a report is made if an abnormality is detected. In the non-security state, the output signal from the anomaly detection sensor is not monitored, and no report is made. Therefore, via an operation device (operation panel) connected to the security device, the device switches from the non-security state to the security state when leaving work or going out, and switches from the security state to the non-security state when arriving at work or returning home.

[0006] Patent Document 1, which will be described later, discloses an invention in which a mobile phone terminal makes a call to a management center device, and the management center device switches between starting and ending mechanical security of a specified security device (security state / non-security state) depending on the sub-address number to which the call is directed. In the case of the invention disclosed in Patent Document 1, there is no need to provide an operation panel on the security device, and the security state / non-security state of the security device can be switched from an appropriate position. This is expected to simplify the configuration of the security device and improve convenience for users of the security device. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2005-94601 A Summary of the Invention [Problem to be solved by the invention]

[0008] It is conceivable that the invention disclosed in Patent Document 1 can be extended to a mobile security terminal carried by a security guard who rushes to a facility to be guarded when an abnormality occurs. That is, by calling the management center device from the mobile security terminal and specifying the facility to be guarded, it becomes possible to switch the operation state of the security device of the facility to be guarded. This makes it possible to switch the operation state of the security device to a non-operational state and take subsequent action, such as reporting to the police or fire department, even if the employees or residents of the facility to be guarded are not present.

[0009] However, the invention disclosed in Patent Document 1 makes it possible to switch between the security state and the non-security state through a wide area network such as a mobile phone network or ISDN network. This means that switching between the security state and the non-security state is possible even if the user is not in the vicinity of the security target facility where the abnormality has occurred, which is undesirable because it is possible to switch from the security state to the non-security state before actually checking the security target facility. Therefore, it is conceivable to provide an access point function to the security device installed in the security target facility, or to connect an access point device to the security device.

[0010] The distance over which communication with the access point device can be limited to a radius of, for example, about 10 meters by adjustment, so that a security terminal device carried by a security guard who arrives at the scene can be used to connect to the security device via the access point device. This makes it possible for the security guard who arrives at the scene to control the security device using the security mobile terminal carried by the security guard, and to switch from a security state to a non-security state. However, in this case, the security mobile terminal connected to the security device via the access point device connects to a communication line with the security company's communication equipment via the Internet, etc., and cannot send or receive necessary information.

[0011] The security mobile terminal is realized by a high-function mobile phone terminal called a smartphone, for example, but the security mobile terminal can basically only have one communication path. In other words, when the security mobile terminal is connected to a security device through an access point device, it cannot be used to connect to the security company's communication device via the Internet. In this case, since it is not possible to communicate with the security company's communication device through the security mobile terminal, it is not possible to report the current situation in real time or receive instructions.

[0012] In view of the above, the object of this invention is to enable security guards to use their own mobile security terminals to control security devices installed in facilities to be secured, and to communicate with the security company's devices via a wide area network. [Means for solving the problem]

[0013] In order to solve the above problem, the security system of the invention described in claim 1 comprises: A security system comprising a security device connected to a center device through a wide area network, a security base station connected to the security device, and a security mobile terminal connected to the security device through the security base station, The security device is a determination means for determining whether or not an abnormality has occurred based on an output signal from a sensor that detects the occurrence of an abnormality while in a security state; a notification processing means for notifying the center device of the occurrence of an abnormality via the wide area network when the determination means determines that an abnormality has occurred; a security base station control means for providing a request to start transmitting a beacon signal to the security base station when a report is made through the report processing means; a terminal authentication processing means for communicating with the security mobile terminal that has become connectable to the security base station, authenticating whether the security mobile terminal is connectable to the security base station, and enabling connection of the security mobile terminal when authentication is successful; a security state cancellation means for canceling the security state and setting the state of the security terminal itself to a non-security state when a security cancellation request arrives from the security portable terminal authenticated by the terminal authentication processing means; a connection control means for connecting a communication path between the security mobile terminal connected to the security mobile terminal itself through the security base station and the center device through the wide area network when the security state is released by the security state release means; Equipped with The security base station includes: a beacon signal transmission control means for controlling the start of transmission of a beacon signal when the transmission start request arrives from the security device; an authentication processing means for communicating with the security mobile terminal and obtaining authentication when a connection request arrives from the security mobile terminal that has received the beacon signal, and for enabling connection of the security mobile terminal when authentication is obtained; Equipped with The security mobile terminal includes: a first authentication processing means for transmitting the connection request when the beacon signal is received from the security base station, and communicating with the security base station to obtain authentication for connection to the security base station; A second authentication processing means for performing communication with the security device connected through the security base station when authentication is obtained by the first authentication processing means, and obtaining authentication for connection with the security device; a security release request processing means for transmitting the security release request to the security device when authentication is successful by the second authentication processing means; a communication control means for enabling communication with the center device to which a communication path is connected through the wide area network after the security release request is transmitted through the security release request processing means; The present invention is characterized by comprising:

[0014] According to the security system of claim 1, when the discrimination means in the security device discriminates that an abnormality has occurred, the report processing means reports the occurrence of the abnormality to the center device, and the security base station control means provides a request to start transmitting a beacon signal to the security base station. When the security base station receives the request to start transmitting a beacon signal, the beacon signal transmission control means controls the start of transmission of the beacon signal. When the security mobile terminal receives the beacon signal, the first authentication processing means of the security mobile terminal and the authentication processing means of the security base station function, and the security base station authenticates the security mobile terminal. If authentication is successful, the security mobile terminal is allowed to connect to the security base station.

[0015] After this, the terminal authentication processing means of the security device and the second authentication processing means of the security mobile terminal function to authenticate the security device with respect to the security mobile terminal, and when authentication is successful, the security mobile terminal is allowed to connect to the security device via the security base station. Furthermore, when the security device receives a security release request from the security mobile terminal, the security state release means of the security device releases the security state of the security device to a non-security state. This triggers the connection control means to function, causing the security device to function as a gateway, connecting a communication path between the security mobile terminal and the center device via the wide area network, and enabling communication between the two. Effect of the Invention

[0016] According to this invention, it is possible to control the security devices installed in the facility to be guarded by using the security portable terminal carried by the security guard. Furthermore, it is possible to establish a communication path between the security portable terminal and the center device via the security device, thereby enabling communication. [Brief description of the drawings]

[0017] [Figure 1] 1 is a block diagram for explaining a configuration example of a security system according to an embodiment; [Diagram 2] 1 is a block diagram for explaining a configuration example of a security device according to an embodiment; [Diagram 3] 1 is a block diagram illustrating a configuration example of an access point device according to an embodiment; [Figure 4] 1 is a block diagram for explaining a configuration example of a security portable terminal according to an embodiment; [Diagram 5] 4 is a flowchart for explaining processing performed by the security device of the embodiment. [Figure 6] 6 is a flowchart continuing from FIG. 5. [Figure 7] 5 is a flowchart illustrating a process performed in the access point device according to the embodiment. [Figure 8] 10 is a flowchart illustrating a process performed by the security mobile terminal according to the embodiment. [Figure 9] 9 is a flowchart continuing from FIG. 8. [Figure 10] 4 is a sequence diagram for explaining the processing performed in the security system of the embodiment. FIG. [Figure 11] FIG. 1 is a diagram for explaining a conventional example of a security system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] An embodiment of the system and device according to the present invention will be described below with reference to the drawings. In the embodiment described below, various sensors that can automatically detect the occurrence of abnormal events that need to be detected, such as an intrusion sensor, a fire sensor, and a water intrusion sensor, can be connected to the security device installed in the facility to be guarded. However, to simplify the explanation, the following description will be given taking as an example a case in which an intrusion sensor is connected to the security device.

[0019] [Security system configuration example] FIG. 1 is a block diagram for explaining an example of the configuration of a security system according to an embodiment. A security device 100, an access point device (hereinafter abbreviated as AP) 200, and a customer router 300 are installed in a so-called customer (user) security target facility 1. An operation terminal 130 and multiple intrusion sensors 120(1), 120(2), ... are connected to the security device 100. A center router 400 and a center device 31 functioning as a security target accommodation device are installed in a specific security company 3. The security mobile terminal 500 is a mobile communication terminal such as a smartphone or tablet PC (Personal Computer) carried by a security guard.

[0020] As shown in Fig. 1, the security device 100 is connected to a wide area network 2 via a customer router 300 which is connected through a LAN (Local Area Network) α. The customer router 300 functions as a default gateway on the side of the security target facility 1. A center device 31 of a specific security company 3 is connected to the wide area network 2 via a center router 400. Therefore, the security device 100 is connected to the center device 31 via the customer router 300, the wide area network 2, and the center router 400, and reports (issues) the occurrence of an abnormality.

[0021] The wide area network 2 is mainly the Internet, but also includes various networks such as the general public telephone network, optical communication network, and mobile phone network, which connect the customer router 300 to the Internet, and also connect the center router 400 to the Internet. When the center device 31 receives a report from the security device 100, it identifies the source of the report and plays a sound report message or displays a map on the display screen to indicate the location of the report source, enabling the monitor to instruct the security guard to go to work.

[0022] The security device 100 is installed in a safe place indoors in the facility to be guarded, and when an intrusion, which is an abnormal event, is detected, it functions as a transmitter of a so-called security system that reports the occurrence to the center device 31. The operation terminal 130 connected to the security device 100 is installed in an appropriate place, for example, near an entrance inside the facility to be guarded. The operation terminal 130 accepts an operation input for switching between a security state and a non-security state. The operation input is an operation on an operation key provided on the operation terminal 130. Alternatively, the operation input may be an operation of inserting or removing a specific IC card into or holding it over the operation terminal 130. The operation terminal 130 also has a function of emitting an alarm sound. The alarm sound includes a buzzer sound used as an intimidating sound. The operation terminal 130 is not limited to being installed indoors in the facility to be guarded, and may be installed outdoors near an entrance to the facility to be guarded.

[0023] Intrusion sensors 120(1), 120(2), ... connected to the security device 100 detect the intrusion of a person or the like and supply an output signal to the security device 100. Intrusion sensors 120(1), 120(2), ... are motion sensors that use infrared rays, ultrasonic waves, visible light, etc. to detect the presence of a person, opening / closing sensors that use magnetism or acceleration to detect the opening / closing of a door or window, etc. Intrusion sensors 120(1), 120(2), ... are installed at locations where a person or the like may intrude, such as entrances and windows. The reason for referring to a person or the like is that the intrusion of a non-human, such as an animal, can also be detected as an abnormality.

[0024] In this embodiment, the "security state" refers to a state in which the output signals from the intrusion sensors 120(1), 120(2), ... are monitored, and a report can be made if an intrusion is detected. The "non-security state" refers to a state in which the output signals from the intrusion detection sensors are not monitored, and no report is made. Therefore, when the user of the security device 100 leaves work or goes out, the user of the security device 100 switches the security device 100 from the non-security state to the security state through the operation terminal 130, so that a report can be automatically made if an intrusion is detected. When the user of the security device 100 leaves work or goes out (when returning from going out), the user of the security device 100 switches the security device 100 from the security state to the non-security state through the operation terminal 130, so that a report is not automatically made.

[0025] The security device 100 of this embodiment also has a security start guard sensor function and a security release guard sensor function. The security start guard sensor function avoids a report (alert) due to the intrusion sensors 120(1), 120(2), ... detecting a user (facility personnel) as an intruder as soon as the security state is switched to by a security start operation on the operation terminal 130. Specifically, this function is for preventing an alert if the reaction of the intrusion sensors 120(1), 120(2), ... subsides during the period from the security start operation to the time a predetermined notification grace period has elapsed. If the intrusion sensors 120(1), 120(2), ... react after the notification grace period has elapsed, an alert is issued since there is a high possibility that this is an abnormal intrusion (an intrusion by someone other than a legitimate user). During the security start operation, a response is taken to encourage the user to leave the room (leave) through the operation terminal 130 that has been operated, using a sound such as a buzzer or a display. This response ends after the notification grace period has elapsed.

[0026] The security release guard sensor function avoids a report (alert) due to the intrusion sensors 120(1), 120(2), ... detecting a user (facility personnel) as an intruder before the security release operation when switching to a non-security state by a security release operation on the operation terminal 130. Specifically, this function prevents a report from being issued if a security release operation is performed on the operation terminal 130 between the time when the intrusion sensors 120(1), 120(2), ... detect an intrusion and the time when a predetermined notification grace period has elapsed. If a security release operation is not performed before the notification grace period has elapsed, a report is issued because there is a high possibility that this is an abnormal intrusion. When an intrusion is detected by the intrusion sensors 120(1), 120(2), ..., a response is taken to encourage the user to release the security by, for example, a buzzer sound or other sound or display through the operation terminal 130 where the operation is performed. This response ends if the security release operation is performed within the notification grace period.

[0027] Moreover, an access point device (hereinafter, referred to as AP) 200 that functions as a security base station is connected to the security device 100 through a LAN (Local Area Network) β. In this embodiment, the AP 200 is compatible with the Wi-Fi (registered trademark) standard. The AP 200 has a function of starting or stopping the transmission of a beacon signal in response to a request from the security device 100. In addition, in response to a connection request from a nearby wireless communication terminal that has received a beacon signal, the AP 200 wirelessly communicates with the wireless communication terminal and performs an authentication process using an ESSID (Extended Service Set Identifier) ​​and a password assigned to the AP 200. The AP 200 connects the wireless communication terminal that has been authenticated by the authentication process to the security device 100 via the AP 200.

[0028] Here, the wireless communication terminal is a general-purpose terminal such as a so-called smartphone or tablet PC (Personal Computer), which has a wireless LAN interface conforming to the Wi-Fi (registered trademark) standard and can be connected to a LAN via a nearby AP (Access Point). In this embodiment, the wireless communication terminal that can be connected to the security device 100 through the AP 200 is a security mobile terminal 500 carried by a security guard of a security company. That is, the security mobile terminal 500 is a mobile communication terminal carried by a security guard who detects an abnormality and rushes to the security target facility 1 where the security device 100 is installed, reporting the occurrence of the abnormality to the security company 3. For this reason, the ESSID and password assigned to the AP 200 connected to the security device 100 are set in advance in the security mobile terminal 500.

[0029] In this embodiment, when security device 100 at facility 1 to be guarded detects an intrusion based on output signals from intrusion sensors 120(1), 120(2), ..., security device 100 notifies center device 31 of security company 3. After that, security device 100 controls AP 200 to start transmitting a beacon signal. In response to the notification to center device 31, a security guard from security company 3 rushes to facility 1 to be guarded where security device 100 is installed. The security guard carries security mobile terminal 500.

[0030] Security dedicated application software (hereinafter referred to as a dedicated app) is installed in the security mobile terminal 500. When the security mobile terminal 500 receives a beacon signal from the AP 200, it transmits a connection request to the AP 200 and executes authentication processing with the AP 200. If authentication is successful, the security mobile terminal 500 is allowed to access the security device 100 via the AP 200, but the security device 100 further executes authentication processing with the security mobile terminal 500. If authentication is successful through this authentication processing, the security mobile terminal 500 is allowed to connect to the security device 100 and they are allowed to communicate with each other.

[0031] A security guard carrying the security mobile terminal 500 checks the status of the facility 1 to be guarded and takes appropriate action, such as reporting to a prescribed agency. In this case, the security guard accesses the security device 100 through the security mobile terminal 500, transmits a request to release security, and transitions the security device 100 from a security state to a non-security state. When connected to the security device 100 through the AP 200 in this way, the security mobile terminal 500 generally has only one connection path to the Internet, and cannot access the Internet through another path.

[0032] Therefore, when the security device 100 transitions to a non-security state in response to a request to release security from the security mobile terminal 500, the security device 100 functions as a gateway for the security mobile terminal 500. In this case, the security device 100 connects a communication path between the security mobile terminal 500 and the center device 31 of the security company 3 through the customer router 300 as a default gateway and the wide area network 2. This enables real-time communication between the security mobile terminal 500 and the center device 31. In this case, it becomes possible to report the current situation to a monitor at the center device 31 through the security mobile terminal 500, obtain a report (alert) history from the center device, and receive information such as instructions from the monitor at the center device 31.

[0033] Thus, the security system of this embodiment is composed of security device 100 and AP 200 at facility 1 to be guarded, and security mobile terminal 500 carried by a security guard. Below, configuration examples of security device 100, AP 200, and security mobile terminal 500 that make up the security system of this embodiment will be described, and the processing performed by these devices will be described.

[0034] In addition, since a commercially available router device having a general configuration and functions can basically be used for the customer router 300, detailed explanation of the configuration, etc. is omitted. Also, since the center router 400 and center device 31, which are the equipment of the specified security company 3, can use the existing equipment of the security company, detailed explanation of the configuration, etc. of these devices is also omitted.

[0035] [Configuration example of security device 100] FIG. 2 is a block diagram for explaining a configuration example of the security device 100. In this embodiment, the connection terminal 101T constitutes a connection end with the LANα. The LANI / F (Interface) 101 performs communication processing through the LANα. That is, the LANI / F 101 converts a signal to be transmitted from the device to a target destination into a signal in a transmission format, and sends it to the wide area network 2 via the connection terminal 101T, LANα, and the customer router 300 so that it can be transmitted to the destination. In addition, a signal addressed to the device transmitted via the wide area network 2 is supplied to and received by the LANI / F 101 via the customer router 300, LANα, and the connection terminal 101T. The LANI / F 101 converts the received signal into a signal in a format that can be processed by the device, takes it in, and supplies it to the control unit 102, etc. In this way, the connection terminal 101T and the LANI / F 101 enable communication processing through the wide area network 2 connected through the customer router 300.

[0036] The control unit 102 is a microprocessor equipped with a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), non-volatile memory, etc. (not shown), and controls each part of the security device 100. The storage device 103 is a device unit consisting of a recording medium such as an SSD (Solid State Drive) and its driver, and records, reads, modifies, deletes, etc. various data. The storage device 103 stores and holds necessary data and programs, and is also used as a working area for temporarily storing intermediate data generated in various processes.

[0037] The connection terminal 104T constitutes a connection end with the operation terminal 130, and the operation terminal I / F 104 functions as an interface with the operation terminal 130, and transmits and receives information to and from the operation terminal 130 through these. That is, the operation terminal I / F 104 receives information from the operation terminal 130, converts it into information in a format that can be processed in the operation terminal 130, and supplies it to the control unit 102, and also converts information to be sent from the operation terminal 130 into a format for sending, and supplies it to the operation terminal 130.

[0038] Connection terminals 105T1, 105T2, ... constitute connection ends with intrusion sensors 120(1), 120(2), .... Sensor discrimination unit 105 monitors output signals from intrusion sensors 120(1), 120(2), ..., determines whether or not an intrusion has occurred, and if it determines that an intrusion has occurred, notifies control unit 102 of this. Sensor discrimination unit 105 can also determine which intrusion sensor detected the occurrence of the intrusion, and notify control unit 102 of this.

[0039] The connection terminal 106T constitutes a connection end portion with the AP 200. The LAN I / F 106 enables communication with the AP 200 through LANβ, and also enables communication with a wireless communication terminal authenticated by the AP 200 through the AP 200 and LANβ. That is, the LAN I / F 106 enables communication with a security mobile terminal 500 authenticated by the AP 200 through the AP 200 and LANβ, where communication is performed using IP (Internet Protocol).

[0040] When an intrusion is detected through intrusion sensors 120(1), 120(2), ..., report processing unit 107, under the control of control unit 102, forms report data for reporting the intrusion and transmits this to center device 31 of a predetermined security company 3. In this case, the report data formed by report processing unit 107 is sent to wide area network 2 through LANI / F 101, connection terminal 101T, and customer router 300, and then transmitted to center device 31.

[0041] The buzzer ringing control unit 108, under the control of the control unit 102, forms a buzzer ringing instruction, transmits it to the operation terminal 130 via the operation terminal I / F 104 and the connection terminal 104T, and rings a buzzer provided in the operation terminal 130. The buzzer ringing control unit 108 also performs processing to supply audio data for emitting a buzzer sound or the like to the audio processing unit 109 under the control of the control unit 102, and emits the sound from the speaker 110. The buzzer ringing control unit 108 also forms a buzzer stop instruction under the control of the control unit 102, transmits it to the operation terminal 130 via the operation terminal I / F 104 and the connection terminal 104T, and controls to stop ringing of the buzzer provided in the operation terminal 130. The buzzer ringing control unit 108 also performs control to stop supplying audio data for emitting a buzzer sound or the like to the audio processing unit 109, and controls to stop emitting the buzzer sound from the speaker 110 under the control of the control unit 102.

[0042] Under the control of the control unit 102 and the buzzer sound control unit 108, the audio processing unit 109 receives audio data for emitting a guidance message, a buzzer sound, etc., forms an analog audio signal, and supplies this to the speaker 110. The speaker 110 receives the analog audio signal from the audio processing unit 109 and emits a sound corresponding to the analog audio signal. The audio processing unit 109 can adjust the volume under the control of the control unit 102 and the buzzer sound control unit 108. This allows, for example, a message encouraging people to leave to be emitted at an appropriate volume during the security start guard sensor function. Also, when an intrusion is detected through the intrusion sensors 120(1), 120(2), ..., a warning sound (threatening sound) can be emitted at a high volume.

[0043] The AP control unit 111, under the control of the control unit 102, forms a beacon signal transmission start request, sends it to LANβ via the LANI / F 106 and the connection terminal 106T, and performs processing to transmit it to the AP 200. Specifically, when it is determined that an intrusion has occurred via the intrusion sensors 120(1), 120(2), ... and the sensor discrimination unit 105, and a report is sent to the center device 31 via the report processing unit 107, the AP control unit 111 forms a beacon signal transmission end request, under the control of the control unit 102, and sends it to LANβ via the LANI / F 106 and the connection terminal 106T, and performs processing to transmit it to the AP 200. Specifically, when a beacon signal transmission start request is formed and transmitted, and the guard state is released, the AP control unit 111 forms and transmits a beacon signal transmission end request.

[0044] The terminal authentication processing unit 112 performs authentication processing using a predetermined authentication code and password for a terminal device that has been authenticated by the AP 200 and is connected to the security device 100 through the AP 200. The ESSID and password of the AP 200, and the authentication code and password of the security device 100 are set in advance in the security mobile terminal 500. Therefore, when the security mobile terminal 500 is authenticated with the AP 200 and is also authenticated with the security device 100 by the function of the terminal authentication processing unit 112, it is connected to the security device 100 through the AP 200, and mutual communication becomes possible. In this way, the security mobile terminal 500 connected to the security device 100 becomes able to control the security device 100. Specifically, it is possible to cancel the security state of the security device 100 and transition to a non-security state.

[0045] When the security mode of the security device 100 is released and the security mode transitions to a non-security mode by a security mobile terminal 500 that has been authenticated by the terminal authentication processing unit 112, the connection control unit 113 controls the security device 100 to function as a gateway for the security mobile terminal 500. In this case, the connection control unit 113 processes information from the security mobile terminal 500 to the center device 31 so that the information is sent from the security device 100 to the center device 31 via the customer router 300 as a default gateway and the wide area network 2.

[0046] Furthermore, connection control section 113 processes information sent from center device 31 to security mobile terminal 500 via wide area network 2 and customer router 300 so as to transmit it to security mobile terminal 500 via AP 200. In this way, communication between security mobile terminal 500 and center device 31 can be carried out by security device 100 functioning as a gateway through the function of connection control section 113 of security device 100.

[0047] [AP200 configuration example] FIG. 3 is a block diagram for explaining a configuration example of the AP200. In this embodiment, the connection terminal 201T constitutes a connection end with the LANβ. The LANI / F201 performs communication processing through the LANβ. As described with reference to FIG. 1, the AP200 is connected to the security device 100 through the LANβ. For this reason, the LANI / F101 converts a signal to be transmitted from the device itself to the security device 100 into a signal in a format for transmission, and transmits the signal to the security device 100 via the connection terminal 101T and the LANβ. The LANI / F101 also converts a signal transmitted from the security device 100 through the LANβ into a signal in a format that can be processed by the device itself, takes it in, and supplies it to the control unit 203, etc. In this way, the connection terminal 201T and the LANI / F201 enable communication with the security device 100.

[0048] Short-range wireless unit 202 and short-range transmission / reception antenna 202A enable short-range wireless communication. As described above, in this embodiment, wireless communication according to the Wi-Fi (registered trademark) standard is enabled. A signal from the security mobile terminal 500 is converted into a transmission signal in short-range wireless unit 202 and transmitted via short-range transmission / reception antenna 202A. A signal addressed to the security mobile terminal 500 is received via short-range transmission / reception antenna 202A, converted into a signal in a format that can be processed by the security mobile terminal 500, and supplied to control unit 203, etc.

[0049] The control unit 203 is a microprocessor equipped with a CPU, ROM, RAM, non-volatile memory, etc. (not shown), and controls each unit of the AP 200. The beacon signal transmission control unit 204 performs processing to form a predetermined beacon signal under the control of the control unit 203 in response to a request from the security device 100, and transmit the signal at regular intervals through the short-range wireless unit 202 and the short-range transmitting / receiving antenna 202A. In addition, when transmitting a beacon signal, the beacon signal transmission control unit 204 also performs processing to stop the formation and transmission of the predetermined beacon signal under the control of the control unit 203 in response to a request from the security device 100.

[0050] After starting to transmit a beacon signal, authentication processing unit 205 performs authentication processing using the ESSID and password to communicate with security mobile terminal 500 in response to a connection request from security mobile terminal 500 that received the beacon signal. For security mobile terminal 500 that has been authenticated by authentication processing unit 205, communication control unit 206 connects it to security device 100, enabling mutual communication with security device 100.

[0051] That is, the communication control unit 206 performs a process of sending a signal received from the security mobile terminal 500 via the short-range transmitting / receiving antenna 202A and the short-range wireless unit 202 to LANβ via the LANI / F 201 and the connection terminal 201T, and transmitting the signal to the security device 100. The communication control unit 206 also performs a process of transmitting a signal received via the connection terminal 201T and LANI / F 201 and transmitted via LANβ from the security device 100 to the security mobile terminal 500 via the short-range wireless unit 202 and the short-range transmitting / receiving antenna 202A.

[0052] In this way, the AP 200 can start or stop transmitting a beacon signal in response to a request from the security device 100. Furthermore, the AP 200 performs an authentication process by communicating with the security mobile terminal 500 that has requested a connection in response to the transmitted beacon signal, and relays the communication between the authenticated security mobile terminal 500 and the security device 100.

[0053] [Example of configuration of security mobile terminal 500] 4 is a block diagram for explaining an example of the configuration of security mobile terminal 500. As described above, security mobile terminal 500 is connectable to security device 100 via AP 200. Transmitting / receiving antenna 501A and wireless communication unit 501 are parts that enable communication through a mobile phone network.

[0054] When the wireless communication unit 501 connects a telephone line through a mobile phone network, the telephone call processing unit 502 forms an analog voice signal from the voice data transmitted from the other party, supplies the signal to the handset (speaker) 503, and emits the voice of the other party. The telephone call processing unit 502 also converts the voice (analog voice signal) of the user of the device collected through the transmitter (microphone) 504 into a digital signal, and transmits the digital signal to the other party through the telephone line connected by the wireless communication unit 501 through the mobile phone network. In this way, the telephone call processing unit 502 cooperates with the handset 503 and the transmitter 504 to enable a telephone call with the other party connected through the telephone line.

[0055] Touch panel 507 is composed of display unit 505 configured using a thin display such as an LCD (Liquid Crystal Display), and touch sensor 506 provided on the display screen of display unit 505. Touch panel 507 functions as a user interface, and provides display information to the user, and also receives instruction input from the user and supplies the same to control unit 510. This enables control unit 510 to control each unit and execute processing according to the operation input.

[0056] The short-range wireless unit 508 and the short-range transmission / reception antenna 508A are units that enable wireless communication with a nearby AP (access point). That is, a signal transmitted from the device itself is converted into a signal for transmission in the short-range wireless unit 508, and transmitted through the short-range transmission / reception antenna 508A. Also, a signal received through the short-range transmission / reception antenna 508A is converted into a signal that can be processed in the device itself in the short-range wireless unit 508, and supplied to the control unit 510, etc.

[0057] The control unit 510 is a microprocessor equipped with a CPU, ROM, RAM, non-volatile memory, etc. (not shown), and controls each unit of the security mobile terminal 500. The storage unit 511 is a device unit consisting of a recording medium such as a semiconductor memory and its driver, and records, reads, changes, deletes, etc., various data. In addition to storing and holding necessary data and programs, the storage unit 511 is also used as a working area for temporarily storing intermediate data generated in various processes.

[0058] The operation unit 512 is a part that includes a power on / off key and several function keys. The first authentication processing unit 513 functions under the control of the control unit 510 when a beacon signal from the AP 200 is received through the short-distance transmission / reception antenna 508A and the short-distance wireless unit 508. In this case, the first authentication processing unit 513 forms a connection request to the AP 200 and transmits it through the short-distance wireless unit 508 and the short-distance transmission / reception antenna 508A. The first authentication processing unit 513 communicates with the AP 200 that responded to the request through the short-distance wireless unit 508 and the short-distance transmission / reception antenna 508A, and performs authentication processing using an ESSID and a password. For this reason, the ESSID and password of the AP 200 are registered in advance in the non-volatile memory of the control unit 510. When authentication is obtained through this authentication processing, the security mobile terminal 500 is connected to the security device 100 through the AP 200.

[0059] The second authentication processing unit 514 functions under the control of the control unit 510 when the first authentication processing unit 513 functions, authentication is established with the AP 200, and connection is established with the security device 100 through the AP 200. The second authentication processing unit 514 communicates with the security device 100 and performs authentication processing in the security device 100. In this case, the second authentication processing unit 514 communicates with the security device 100 through the short-range wireless unit 508 and short-range transmission and reception, and also through the AP 200, and performs authentication processing using an authentication code and a password. For this reason, the authentication code and password of the security device 100 are registered in advance in the non-volatile memory of the control unit 510. When authentication is established by this authentication processing, the security mobile terminal 500 becomes able to control the security device 100.

[0060] After authentication with the security device 100 is established through the processing of the second authentication processing unit 514, the request processing unit 515 forms various requests for the security device 100 in response to the operation input from the user received through the touch panel 507, and transmits the requests to the security device 100. The requests are sent to LANβ through the short-range wireless unit 508 and the short-range transmitting / receiving antenna 508A, and transmitted to the security device 100 via the AP200. Specifically, the request processing unit 515 forms a security state release request and transmits it to the security device 100. The security device 100 that receives the security release request releases its own security state and transitions to a non-security state. In this way, it becomes possible to control the security device 100 through the security mobile terminal 500.

[0061] When the security device 100 releases the security state in response to a security release request transmitted through the request processing unit 515, the security device 100 functions as a gateway and connects a communication path between the security mobile terminal 500 and the center device 31 of the security company 3. When a communication path is connected between the security mobile terminal 500 and the center device 31 via the security device 100, the communication control unit 516 functions under the control of the control unit 510. The communication control unit 516 performs processing such as transmitting information according to an operation input from the user received through the touch panel 507 to the center device 31 and receiving information from the center device 31 and displaying it on the display unit 505.

[0062] In this way, the security mobile terminal 500 can control the security device 100 by connecting to the security device 100 via the AP 200 and canceling the security state to transition to a non-security state. After canceling the security state of the security device 100, the security device 100 functions as a gateway and connects a communication path between the security mobile terminal 500 and the center device 31 via the wide area network 2. This enables the security mobile terminal 500 to communicate with the center device 31 via the security device 100.

[0063] [Processing performed by security device 100] Figures 5 and 6 are flowcharts for explaining the processing performed by the security device 100 described using Figure 2. The processing shown in the flowcharts of Figures 5 and 6 is executed in the control unit 102 of the security device 100, and is processing that is carried out by the control unit 102 controlling each unit. When the security device 100 is powered on, the control unit 102 executes the processing of the flowcharts shown in Figures 5 and 6.

[0064] First, the control unit 102 receives an operation input made to the operation terminal 130 through the operation terminal I / F 104 (step S101), and determines whether or not an operation input instructing the start of security has been received (step S102). If it is determined in the determination process of step S102 that an operation input instructing the start of security has not been received, the control unit 102 repeats the process from step S101. If it is determined in the determination process of step S102 that an operation input instructing the start of security has been received, the control unit 102 transitions its own device to a security state (step S103).

[0065] In step S103, control unit 102 controls sensor discrimination unit 105 to start discriminating whether or not an intrusion has occurred as an abnormal event, based on output signals from intrusion sensors 120(1), 120(2), .... When sensor discrimination unit 105 discriminates that an intrusion has occurred, this is notified to control unit 102. Therefore, control unit 102 monitors the output signal from sensor discrimination unit 105 and discriminates whether or not an intrusion has occurred (step S104).

[0066] Assume that it is determined in the determination process of step S104 that no intrusion has occurred. In this case, the control unit 102 receives an operation input made to the operation terminal 130 through the operation terminal I / F 104 (step S105), and determines whether or not an operation input instructing the end of security has been received (step S106). When it is determined in the determination process of step S106 that an operation instructing the end of security has not been received, the process from step S104 is repeated.

[0067] Also, suppose that in the determination process of step S106, it is determined that an operation to end security has been received. In this case, control unit 102 ends the security state and transitions to a non-security state (step S107), and repeats the process from step S101. In the process of step S107, control unit 102 controls sensor determination unit 105 to end the determination of whether or not an intrusion has occurred as an abnormal event, based on the output signals from intrusion sensors 120(1), 120(2), .... Therefore, in the non-security state, the occurrence of an intrusion is not detected through intrusion sensors 120(1), 120(2), ....

[0068] On the other hand, it is assumed that the determination process in step S104 has determined that an intrusion has occurred. In this case, the control unit 102 first controls the notification processing unit 107 to execute notification processing (step S108). In step S108, under the control of the control unit 102, notification information is formed to notify that an intrusion has occurred as an abnormal event in the security target facility 1 in which the security device 100 is installed. The notification processing unit 107 sends the formed notification information to the wide area network 2 through the LAN I / F 101 and the connection terminal 101T, and further through the customer router 300, and transmits it to the center device 31 of the security company 3. Also, in step S108, the control unit 102 controls the buzzer sound control unit 108 to emit an alarm sound through the voice processing unit 109 and the speaker 110, and also to emit an alarm sound through the operation terminal I / F 104 and the operation terminal 130.

[0069] After that, the control unit 102 controls the AP control unit 111 to execute a process of requesting to start transmitting a beacon signal (step S109). In step S109, under the control of the control unit 102, the AP control unit 111 forms a request to start transmitting a beacon signal, and transmits it to the LANβ via the LANI / F 106 and the connection terminal 106T to the AP 200. As a result, the AP 200 starts a process of transmitting a beacon signal, and an authentication process is performed between the AP 200 and the security mobile terminal 500 carried by the security guard who has arrived at the security target facility 1 where the intrusion occurred.

[0070] When the security mobile terminal 500 is authenticated with the AP 200 and can connect to the AP 200, it transmits a connection request through the AP 200, which is received through the connection terminal 106T and the LAN I / F 106 and terminal authentication processing is performed (step S110). In step S110, the control unit 102 controls the terminal authentication processing unit 112 to perform authentication processing using the ESSID and password by having the security device 100 and the security mobile terminal 500 communicate with each other via the AP 200. The control unit 102 then determines whether or not authentication with the security mobile terminal 500 has been achieved (step S111).

[0071] In step S111, if authentication is not obtained in the terminal authentication process in step S110, or if an authentication request is not transmitted from security mobile terminal 500 and terminal authentication process is not performed, it is determined that authentication is not obtained (not OK). If it is determined in the determination process in step S111 that authentication is not obtained (not OK), control unit 102 repeats the process from step S110 and waits for a connection request from a legitimate security mobile terminal 500 carried by a security guard.

[0072] If it is determined in the determination process of step S111 that authentication has been successful (OK), then under the control of the control unit 102, the terminal authentication processing unit 112 connects the security mobile terminal 500 to itself (step S112). This enables the security device 100 to accept requests and the like from the security mobile terminal 500. The control unit 102 accepts a release request transmitted from the security mobile terminal 500 connected to the security device 100 (step S113).

[0073] That is, in step S113, the control unit 102 receives a release request from the security mobile terminal 500 transmitted through the AP 200 via the connection terminal 106T and the LAN I / F 106. Thereafter, the control unit 102 determines whether or not the release request has been received from the security mobile terminal 500 (step S114).

[0074] If it is determined in the determination process of step S114 that a cancellation request has not been accepted from the security mobile terminal 500, the control unit 102 repeats the process from step S113 and waits for the arrival of a cancellation request. If it is determined in the determination process of step S113 that a cancellation request has been accepted from the security mobile terminal 500, the control unit 102 proceeds to the process of Fig. 6 and executes a process of transitioning the own device to a non-security state (step S115).

[0075] In step S115, similarly to the processing in step S107, the control unit 102 controls the sensor determination unit 105 to end the determination of whether or not an intrusion has occurred as an abnormal event, based on the output signals from the intrusion sensors 120(1), 120(2), .... Furthermore, in step S114, the control unit 102 controls the buzzer sound control unit 108 to end the processing of emitting an alarm sound through the audio processing unit 109 and the speaker 110, and the processing of emitting an alarm sound through the operation terminal 130.

[0076] Thereafter, the control unit 102 controls the connection control unit 113 to connect a communication path between the security mobile terminal 500 and the center device 31 of the security company 3 via the wide area network 2, enabling them to communicate with each other (step S116). In this step S116, the security device 100 is made to function as a gateway for the security mobile terminal 500, connected to the wide area network 2 using the customer router 300 as a default gateway, and connected to the center device 31 via the center router 400 of the security company 3.

[0077] 1, a communication path is established between the security mobile terminal 500 and the center device 31 via the wide area network 2, enabling them to communicate with each other. Thereafter, the control unit 102 receives a request from the security mobile terminal 500 (step S117), and determines whether or not a termination request has been received (step S118).

[0078] If it is determined in the determination process of step S118 that the end request has not been accepted, the control unit 102 continues the process of relaying the communication process between the security guard mobile terminal 500 and the center device 31 (step S119), and repeats the processes from step S117. The process of step S119 enables mutual communication processes to be performed in real time, such as reporting the current situation from the security guard mobile terminal 500 to the center device 31, and receiving instructions transmitted via the center device 31 via the security guard mobile terminal 500.

[0079] Furthermore, when it is determined in the determination process of step S118 that a termination request has been accepted, a series of termination processes such as releasing the communication path connected between the security guard mobile terminal 500 and the center device 31 is carried out (step S120), and the processes from step S101 in Fig. 5 are repeated. In this manner, the security device 100 accepts the connection of the security guard mobile terminal 500 through the AP 200, and enables control of its own device (the security device 100) through the security guard mobile terminal 500. Furthermore, after transitioning to a non-security state through the security guard mobile terminal 500, the security device 100 functions as a gateway, connecting a communication path between the security guard mobile terminal 500 and the center device 31, enabling mutual communication.

[0080] [Processing performed by AP200] Fig. 7 is a flowchart for explaining the processing performed by AP 200 described with reference to Fig. 3. The processing shown in the flowchart in Fig. 7 is executed by control unit 203 of AP 200, and is carried out by control of each unit by control unit 203. When power is applied to AP 200, control unit 203 executes the processing of the flowchart shown in Fig. 7.

[0081] First, the control unit 203 receives a beacon signal transmission start request from the security device 100 through the connection terminal 201T and the LAN I / F 201 (step S201), and determines whether or not the request has been received from the security device 100 (step S202). If it is determined in the determination process of step S202 that the beacon signal transmission start request has not been received from the security device 100, the process from step S201 is repeated, and the control unit 203 waits for the arrival of the beacon signal transmission start request from the security device 100.

[0082] Assume that in the determination process of step S202, it is determined that a request to start transmitting a beacon signal has been received from the security device 100. In this case, the control unit 203 controls the beacon signal transmission control unit 204 to form a beacon signal and start the process of transmitting the signal via the short-range wireless unit 202 and the short-range transmitting / receiving antenna 202A (step S203). After that, the control unit 203 receives a connection request from the security mobile terminal 500 via the short-range transmitting / receiving antenna 202A and the short-range wireless unit 202 (step S204), and determines whether or not the connection request has been received (step S205).

[0083] If it is determined in the determination process of step S205 that a connection request has not been received from the security mobile terminal 500, the process from step S204 is repeated to wait for the arrival of a connection request from the security mobile terminal 500. Also, it is assumed that in the determination process of step S205, a connection request has been received from the security mobile terminal 500. In this case, the control unit 203 controls the authentication processing unit 205 to communicate with the security mobile terminal 500, performs authentication processing using the ESSID and password (step S206), and determines whether or not authentication has been successful (OK or not) (step S207).

[0084] If it is determined in the determination process of step S207 that authentication has not been established, an error message indicating that authentication has not been established because the ESSID and password are different is transmitted through the short-range wireless unit 202 and the short-range transmitting / receiving antenna 202A (step S208). After this, the process from step S204 is repeated, and a connection request is awaited from a legitimate security mobile terminal 500 carried by a security guard. Also, it is assumed that it is determined in the determination process of step S207 that authentication has been established (OK). In this case, the control unit 203 controls the communication control unit 206 to connect the security mobile terminal 500 connected through the short-range transmitting / receiving antenna 202A and the short-range wireless unit 202 to the security device 100 through the LANI / F 201 and the connection terminal 201T (step S209).

[0085] Thereafter, the control unit 203 determines whether or not an event has occurred that terminates the connection with the connected security mobile terminal 500 (step S210). Step S210 is a process of determining whether or not an event has occurred that terminates the connection with the security mobile terminal 500, such as a communication termination request being transmitted from the connected security mobile terminal 500 or communication with the connected security mobile terminal 500 becoming impossible. If it is determined in step S210 that an event that terminates the connection has not occurred, the determination process of step S210 is repeated, and the connection with the security mobile terminal 500 is maintained until a termination event occurs.

[0086] When it is determined in the determination process of step S210 that an event that terminates the connection has occurred, a predetermined termination process that terminates the connection of the security mobile terminal 500 is executed (step S211), and then the process from step S201 is repeated. In this manner, the AP200 of this embodiment starts transmitting a beacon signal when it receives a request to start transmitting a beacon signal from the security device 100, and does not transmit a beacon signal when it has not received a request from the security device 100. For this reason, the security device 100 of the security target facility 1 does not transmit a beacon signal unless it determines that an intrusion has occurred, so that there is no case in which a mobile terminal is inadvertently allowed to connect to the AP200.

[0087] [Processing performed by security mobile terminal 500] Figures 8 and 9 are flowcharts for explaining the processing performed by security mobile terminal 500 described with reference to Figure 4. The processing shown in the flowcharts of Figures 8 and 9 is executed by control unit 510 of security mobile terminal 500, and is processing that is carried out by control unit 510 controlling each unit. The program for executing the flowcharts shown in Figures 8 and 9 is installed in security mobile terminal 500 as the above-mentioned dedicated application. When power is applied to security mobile terminal 500, control unit 510 executes the processing of the flowcharts shown in Figures 8 and 9.

[0088] First, the control unit 510 receives a beacon signal from the AP 200 through the short-distance transmitting / receiving antenna 508A and the short-distance wireless unit 508 (step S301), and determines whether or not the beacon signal has been received (step S302). When it is determined in the determination process of step S302 that the beacon signal has not been received from the AP 200, the process from step S301 is repeated, and the arrival of the beacon signal from the AP 200 is awaited.

[0089] Assume that it is determined in the determination process of step S302 that a beacon signal from the AP 200 has been received. In this case, the control unit 510 controls the first authentication processing unit 513 to form a connection request for the AP 200 and transmits this to the AP 200 via the short-range wireless unit 508 and the short-range transmission / reception antenna 508A (step S303). Furthermore, the control unit 510 controls the first authentication processing unit 513 to perform wireless communication with the AP 200, executes authentication processing using the ESSID and password (step S304), and determines whether or not authentication has been successful (OK or not) (step S305).

[0090] If it is determined in the determination process of step S305 that authentication has not been established (not OK), an error message is output to the effect that connection is not possible because the ESSID or password is incorrect (step S306), and the process from step S301 is repeated. In this case, the security guard who is the user of the security mobile terminal 500 will take measures such as resetting the ESSID or password. If it is determined in the determination process of step S305 that authentication has been established (OK), the AP200 connects the security mobile terminal 500 to the security device 100 as described above. Then, the control unit 510 controls the second authentication processing unit 514 to execute authentication processing with the security device 100 (step S307).

[0091] In step S307, communication is established between security mobile terminal 500 and security device 100 via AP 200, and authentication processing is performed using authentication information and a password. After the processing of step S307, control unit 510 determines whether authentication with security device 100 has been established (OK or not) (step S308). If it is determined in the determination processing of step S308 that authentication has not been established (not OK), an error message is output to the effect that authentication cannot be established due to differences in authentication information or password (step S309).

[0092] Thereafter, control unit 510 performs a predetermined termination process, such as disconnecting from AP 200 (step S310), and ends the process shown in Figures 8 and 9. In this case, the security guard who is the user of security mobile terminal 500 performs processes such as re-registering authentication information and a password for security device 100, and then executes the process shown in Figures 8 and 9 again, and performs the process from step S301.

[0093] Also, assume that it is determined in the determination process of step S308 that authentication has been successful (OK). In this case, control unit 510 accepts a security deactivation operation via touch panel 507 (step S311), and determines whether or not the security deactivation operation has been accepted (step S312). If it is determined in the determination process of step S312 that the security deactivation operation has not been accepted, control unit 510 repeats the process from step S311, and waits for acceptance of a security deactivation operation.

[0094] Also, suppose that it is determined in the determination process of step S312 that a security release operation has been received. In this case, control unit 510 controls request processing unit 515 to form a security release request, sends this through short-range wireless unit 508 and short-range transmitting / receiving antenna 508A, and transmits it to security device 100 via AP 200 (step S313). This allows control of security device 100 via security mobile terminal 500, and transition of security device 100 from a security state to a non-security state.

[0095] In this way, when the security device 100 transitions from a security state to a non-security state in response to a request from the security mobile terminal 500, the security device 100 functions as a gateway. As a result, a communication path is established between the security mobile terminal 500 and the center device 31 via the security device 100 through the wide area network 2, enabling them to communicate with each other.

[0096] For this reason, the control unit 510 controls the communication control unit 516, and communication is performed with the center device 31 via the security device 100 and the wide area network 2 (step S314). In step S314, it becomes possible to use one or more of voice, text, and image to report a current situation from the security mobile terminal 500 to the center device 31, and to output instruction information from the center device 31 from the security mobile terminal 500 and provide it to a security guard.

[0097] Thereafter, control unit 510 receives an operation input through touch panel 507 (step S315), and determines whether the operation input has been received (step S316). If it is determined in the determination process of step S316 that the operation input has not been received, the process from step S315 is repeated, and the control unit 510 waits for the operation input to be made by the security guard, who is the user.

[0098] If it is determined in the determination process of step S316 that an operation input has been received, it is determined whether the received operation input is an end operation or not (step S317). If it is determined in the determination process of step S317 that the received operation input is not an end operation, control unit 510 executes a process according to the received operation input (step S318) and repeats the process from step S315. Therefore, in step S318, a process is performed in accordance with the operation input, such as transmitting information from security mobile terminal 500 to center device 31 and outputting information transmitted from center device 31.

[0099] In the determination process of step S317, it is determined that the received operation input is an end operation. In this case, the control unit 510 controls the communication control unit 516 to form a communication end request instructing the release of the communication path, and performs a predetermined end process such as transmitting this to the security device 100 (step S319), and repeats the process from step S301 in FIG. 8.

[0100] In this way, the security mobile terminal 500 can connect to the security device 100 via the AP 200 and control the security device 100, such as by transitioning it from a security state to a non-security state. Also, after the security mobile terminal 500 controls the security device 100 to transition it from a security state to a non-security state, the security device 100 functions as a gateway and connects a communication path to the center device 31 via the wide area network 2, enabling mutual communication.

[0101] [Security system processing] Fig. 10 is a sequence diagram for explaining the processing performed in the security system of the embodiment. The security device 100 performing the processing in Fig. 5 and Fig. 6, the AP 200 performing the processing in Fig. 7, and the security mobile terminal 500 performing the processing in Fig. 8 and Fig. 9 cooperate with each other to perform processing as shown in Fig. 10 when an intrusion, which is an abnormal event, occurs in the security target facility 1.

[0102] In Fig. 10, it is assumed that security device 100 is already in security mode, and that an intrusion has been detected by any one of intrusion sensors 120(1), 120(2), ..., and this has been notified to security device 100 (step S1). The occurrence of an intrusion is determined by sensor discrimination unit 105, and notified to control unit 102. Control unit 102 controls report processing unit 107 to notify center device 31 of the occurrence of the intrusion (step S2 (step S108 in Fig. 5)). Furthermore, control unit 102 controls AP control unit 111 to form a request to start transmitting a beacon signal and transmit the request to AP 200 (step S3 (step S109 in Fig. 5)).

[0103] In AP200 that has received the request to start transmitting the beacon signal, beacon signal transmission control unit 204 functions under the control of control unit 203 to start transmitting the beacon signal (step S4 (step S203 in FIG. 7)). The beacon signal is transmitted through short-range wireless unit 202 and short-range transmitting / receiving antenna 202A. In security mobile terminal 500 that has received the beacon signal from AP200, first authentication processing unit 513 functions under the control of control unit 510 to transmit a connection request to AP200 (step S5 (step S303 in FIG. 8)).

[0104] After this, authentication processing unit 205 of AP200 and first authentication processing unit 513 of security guard mobile terminal 500 start to function, communicate with each other, and execute authentication processing (steps S6, S7 (step S304 in FIG. 8, step S206 in FIG. 7)). When authentication of security guard mobile terminal 500 is successful in AP200, communication control unit 206 of AP200 starts to function, and connects security guard mobile terminal 500 to security device 100 (step S8 (step S209 in FIG. 7)). However, in this state, authentication of security guard mobile terminal 500 in security device 100 has not been completed, so security device 100 cannot be controlled through security guard mobile terminal 500.

[0105] As a result, terminal authentication processing unit 112 of security device 100 and second authentication processing unit 514 of security mobile terminal 500 function to communicate with each other and execute authentication processing (steps S9, S10 (step S307 in FIG. 8, step S110 in FIG. 5)). Once security device 100 has authenticated security mobile terminal 500, security device 100 connects security mobile terminal 500 to itself via AP 200 (step S11 (step S112 in FIG. 5). This makes it possible to control security device 100 via authenticated security mobile terminal 500.

[0106] In the security mobile terminal 500, when the security release operation by the security guard is accepted, the request processing unit 515 functions under the control of the control unit 510 to form a security release request and transmit it to the security device (step S12 (step S313 in FIG. 8)). In the security device 100 that receives the security release request from the security mobile terminal 500, the control unit 102 functions to transition the state of the device itself from a security state to a non-security state (step S13 (step S115 in FIG. 5)). In response to the transition to the non-security state in response to the request from the security mobile terminal 500, the connection control unit 113 functions under the control of the control unit 102 in the security device 100 to execute a connection process (step S14 (step S116 in FIG. 6)).

[0107] The process of step S14 is a process in which the security device 100 functions as a gateway and connects a communication path between the security mobile terminal 500 and the center device 31 of the security company 3 via the wide area network 2. As a result, the security mobile terminal 500 is connected to the wide area network 2 through the security device 100, and a communication path is established between the security mobile terminal 500 and the center device 31 via the wide area network 2, enabling mutual communication (step S15).

[0108] [Effects of the embodiment] In the security system of the above embodiment, when an abnormal event, such as an intrusion, occurs in the security target facility 1, the security device 100 does not simply report the intrusion. The security device 100 installed in the security target facility 1 can be controlled using a security mobile terminal 500 carried by a security guard. Furthermore, the security device 100 can be made to function as a gateway, connecting a communication path between the security mobile terminal 500 and the center device 31 of the security company 3 via the wide area network 2, enabling mutual communication.

[0109] Furthermore, by having the security device 100 function as a gateway that only connects authenticated security mobile terminals 500 to the center device 31 and using the customer router 300 as a default gateway, the security mobile terminal 500 will not be able to access other devices connected to the customer router 300. In other words, there is no need to use so-called VLAN (Virtual LAN) technology to separate the security LAN from other customer LANs in the facility to be guarded.

[0110] [Variations] The control of the security device 100 from the security mobile terminal 500 is not limited to canceling the security state, but also includes various other controls such as adjusting the volume of the alarm sound, ending the emission of the alarm sound, etc. Furthermore, if the security device 100 is linked to a surveillance camera, it is also possible to control the start and end of filming by the surveillance camera.

[0111] Furthermore, in the above embodiment, the security device 100 functions as a gateway when it is switched from a security state to a non-security state under the control of the security mobile terminal 500. That is, the security device 100 sets up routing between the security mobile terminal 500 and the center device 31 when a security release request is received from the security mobile terminal 500. In this case, the security device 100 may compare predetermined setting data held by the center device 31 with predetermined setting data held by the security device 100, and set up routing between the security mobile terminal 500 and the center device 31.

[0112] Also, for example, when the security device 100 receives a connection request to the center device from the security mobile terminal 500 after being switched from a security state to a non-security state under the control of the security mobile terminal 500, the security device 100 may function as a gateway. That is, in response to a request from the security mobile terminal 500, the security device 100 may connect a communication path between the security mobile terminal 500 and the center device 31 via the wide area network 2.

[0113] In the above embodiment, the customer router is used as a default gateway. By providing a customer router, it is possible to provide another LAN to which other electronic devices such as personal computers and televisions are connected, starting from the customer router. However, this is not limited to this. It is of course possible to configure the security device 100 to function as a default gateway and to connect the security device 100 directly to the wide area network 2.

[0114] In the above embodiment, the case where an intrusion is detected as an abnormal event has been described as an example, but the present invention is not limited to this. Of course, when an abnormal event such as a fire, flooding, or large shaking (earthquake) is detected, the device can function in the same way as when an intrusion is detected.

[0115] In the above embodiment, the ESSID and password of the AP 200 and the authentication information and password of the security device 100 are set in advance in the security mobile terminal 500. In this case, if there are multiple security facilities in the area that the security guard is responsible for, a common ESSID and password or authentication information and password may be used for the multiple security facilities. Also, a different ESSID and password, authentication information and password may be used for each of the multiple security facilities, and the different ESSID and password, authentication information and password for each of the multiple security facilities may be set in the security mobile terminal 500. Of course, this is not limited to the above.

[0116] For example, suppose that an instruction from a security guard at the center device 31 has led to heading to a facility to be guarded where an abnormal event has occurred. In this case, the security mobile terminal 500 may access the center device 31 through a wide area network consisting of a mobile phone network and the Internet, and obtain the ESSID and password, and authentication information and password of the facility to be guarded. In this way, it is possible to use different ESSIDs, passwords, authentication information and passwords for each facility to be guarded.

[0117] [others] As can be seen from the above description of the embodiment, the function of the discrimination means of the security device in the claims is realized by sensor discrimination unit 105 of security device 100 in the embodiment, and the function of the report processing means of the security device in the claims is realized by report processing unit 107 of security device 100. Also, the function of the security base station control means of the security device in the claims is realized by AP control unit 111 of security device 100 in the embodiment, and the function of the security state release means of the security device in the claims is realized by control unit 102 of security device 100. Also, the function of the connection control means of the security device in the claims is realized by connection control unit 113 of security device 100.

[0118] In addition, the function of the beacon signal transmission control means of the security base station in the claims is realized by the beacon signal transmission control unit 204 of the AP 200 in the embodiment, and the function of the authentication processing means of the security base station in the claims is realized by the authentication processing unit 205 of the AP 200. In addition, the function of the first authentication processing means of the security mobile terminal in the claims is realized by the first authentication processing unit 513 of the security mobile terminal 500 in the embodiment, and the function of the second authentication processing means of the security mobile terminal in the claims is realized by the second authentication processing unit 514 of the security mobile terminal 500. In addition, the function of the security release request processing means of the security mobile terminal in the claims is realized by the request processing unit 515 of the security mobile terminal 500 in the embodiment, and the function of the communication control means of the security mobile terminal in the claims is realized by the communication control unit 516 of the security mobile terminal 500. [Explanation of symbols]

[0119] 1...security facility, 100...security device, 101T...connection terminal, 101...LANI / F, 102...control unit, 103...storage device, 104...operation terminal I / F, 104T...connection terminal, 105...sensor discrimination unit, 105T1, 105T2...connection terminal, 106...LANI / F, 106T...connection terminal, 107...report processing unit, 108...buzzer sound control unit, 109...audio processing unit, 110...speaker, 111...AP control unit, 112...terminal authentication processing unit, 113...connection control unit, 120(1), 120(2)...intrusion sensor, 130...operation terminal, 200...AP, 201T...connection terminal, 201...LANI / F, 202A...short-distance transmitting / receiving antenna, 202...short-distance wireless unit, 203 ...Control unit, 204...Beacon signal transmission control unit, 205...Authentication processing unit, 206...Communication control unit, 300...Customer router, 2...Wide area network, 3...Security company, 400...Center router, 31...Center device, 500...Security mobile terminal, 501A...Transmitting and receiving antenna, 501...Wireless communication unit, 502...Call processing unit, 503...Speaker (receiver), 504...Microphone (transmitter), 505...Display unit, 506...Touch sensor, 507...Touch panel, 508A...Short-range transmitting and receiving antenna, 508...Short-range wireless unit, 510...Control unit, 511...Memory unit, 512...Operation unit, 513...First authentication processing unit, 514...Second authentication processing unit, 515...Request processing unit, 516...Communication control unit

Claims

1. A security system comprising a security device connected to a center device through a wide area network, a security base station connected to the security device, and a security mobile terminal connected to the security device through the security base station, The security device is a determination means for determining whether or not an abnormality has occurred based on an output signal from a sensor that detects the occurrence of an abnormality while in a security state; a notification processing means for notifying said center device of the occurrence of an abnormality via said wide area network when said determination means determines that an abnormality has occurred; a security base station control means for providing a request to start transmitting a beacon signal to the security base station when a report is made through the report processing means; a terminal authentication processing means for communicating with the security mobile terminal that has become connectable to the security base station, authenticating whether the security mobile terminal is connectable to the security base station, and enabling the connection of the security mobile terminal when authentication is successful; a security state cancellation means for canceling the security state and setting the state of the security terminal itself to a non-security state when a security cancellation request arrives from the security portable terminal authenticated by the terminal authentication processing means; a connection control means for connecting a communication path between the security mobile terminal connected to the security mobile terminal itself through the security base station and the center device through the wide area network when the security state is released by the security state release means; Equipped with The security base station includes: a beacon signal transmission control means for controlling the start of transmission of a beacon signal when the transmission start request arrives from the security device; an authentication processing means for communicating with the security mobile terminal and obtaining authentication when a connection request arrives from the security mobile terminal that has received the beacon signal, and for enabling connection of the security mobile terminal when authentication is obtained; Equipped with The security mobile terminal includes: a first authentication processing means for transmitting the connection request when the beacon signal is received from the security base station, and communicating with the security base station to obtain authentication for connection to the security base station; A second authentication processing means for performing communication with the security device connected through the security base station when authentication is obtained by the first authentication processing means, and obtaining authentication for connection with the security device; a security release request processing means for transmitting the security release request to the security device when authentication is successful by the second authentication processing means; a communication control means for enabling communication with the center device to which a communication path is connected through the wide area network after the security release request is transmitted through the security release request processing means; A security system comprising:

2. A security device of a security system including a security device connected to a center device through a wide area network, a security base station connected to the security device, and a security mobile terminal connected to the security device through the security base station, a determination means for determining whether or not an abnormality has occurred based on an output signal from a sensor that detects the occurrence of an abnormality while in a security state; a notification processing means for notifying said center device of the occurrence of an abnormality via said wide area network when said determination means determines that an abnormality has occurred; a security base station control means for providing a request to start transmitting a beacon signal to the security base station when a report is made through the report processing means; a terminal authentication processing means for communicating with the security mobile terminal that has become connectable to the security base station, authenticating whether the security mobile terminal is connectable to the security base station, and enabling the connection of the security mobile terminal when authentication is successful; a security state cancellation means for canceling the security state and setting the state of the security terminal itself to a non-security state when a security cancellation request arrives from the security portable terminal authenticated by the terminal authentication processing means; a connection control means for connecting a communication path between the security mobile terminal connected to the security mobile terminal itself through the security base station and the center device through the wide area network when the security state is released by the security state release means; A security device comprising:

3. A security base station of a security system including a security device connected to a center device through a wide area network, a security base station connected to the security device, and a security mobile terminal connected to the security device through the security base station, the security device comprises: a discrimination means for discriminating whether or not an abnormality has occurred based on an output signal from a sensor that detects the occurrence of an abnormality while in a security mode; a report processing means for reporting the occurrence of an abnormality to the center device through the wide area network when the discrimination means determines that an abnormality has occurred; a security base station control means for providing the security base station with a request to start transmitting a beacon signal when a report has been made through the report processing means; a terminal authentication processing means for communicating with the security portable terminal that has become connectable to the security base station, authenticating whether or not the security portable terminal is connectable to the security device itself and enabling connection of the security portable terminal when authentication has been successful; a security mode cancellation means for canceling the security mode and setting the state of the security device to a non-security mode when a security cancellation request arrives from the security portable terminal authenticated by the terminal authentication processing means; and a connection control means for connecting a communication path through the wide area network between the security portable terminal connected to the security device through the security base station and the center device when the security mode is cancelled by the security mode cancellation means, The security mobile terminal comprises a first authentication processing means for transmitting a connection request when a beacon signal is received from the security base station, communicating with the security base station to obtain authentication for connection to the security base station, a second authentication processing means for communicating with the security device connected through the security base station to obtain authentication for connection to the security device when authentication is obtained by the first authentication processing means, a security release request processing means for transmitting the security release request to the security device when authentication is obtained by the second authentication processing means, and a communication control means for enabling communication with the center device to which a communication path is connected through the wide area network after transmitting the security release request through the security release request processing means, a beacon signal transmission control means for controlling the start of transmission of a beacon signal when the transmission start request arrives from the security device; an authentication processing means for communicating with the security mobile terminal and obtaining authentication when the connection request arrives from the security mobile terminal that has received the beacon signal, and enabling connection of the security mobile terminal when authentication is obtained; A security base station comprising:

4. A security device connected to a center device through a wide area network, a security base station connected to the security device, and a security mobile terminal connected to the security device through the security base station, the security mobile terminal being of a security system comprising: the security device comprises: a discrimination means for discriminating whether or not an abnormality has occurred based on an output signal from a sensor that detects the occurrence of an abnormality while in a security mode; a report processing means for reporting the occurrence of an abnormality to the center device through the wide area network when the discrimination means determines that an abnormality has occurred; a security base station control means for providing the security base station with a request to start transmitting a beacon signal when a report has been made through the report processing means; a terminal authentication processing means for communicating with the security portable terminal that has become connectable to the security base station, authenticating whether or not the security portable terminal is connectable to the security device itself and enabling connection of the security portable terminal when authentication has been successful; a security mode cancellation means for canceling the security mode and setting the state of the security device to a non-security mode when a security cancellation request arrives from the security portable terminal authenticated by the terminal authentication processing means; and a connection control means for connecting a communication path through the wide area network between the security portable terminal connected to the security device through the security base station and the center device when the security mode is cancelled by the security mode cancellation means, the security base station comprises a beacon signal transmission control means for controlling the start of transmission of a beacon signal when the transmission start request arrives from the security device, and an authentication processing means for communicating with the security mobile terminal to obtain authentication when a connection request arrives from the security mobile terminal that has received the beacon signal, and for enabling connection of the security mobile terminal when authentication is obtained; a first authentication processing means for transmitting the connection request when the beacon signal is received from the security base station, and communicating with the security base station to obtain authentication for connection to the security base station; A second authentication processing means for performing communication with the security device connected through the security base station when authentication is obtained by the first authentication processing means, and obtaining authentication for connection with the security device; a security release request processing means for transmitting the security release request to the security device when authentication is successful by the second authentication processing means; a communication control means for enabling communication with the center device to which a communication path is connected through the wide area network after the security release request is transmitted through the security release request processing means; A mobile security terminal comprising:

Images