Monitoring device, monitoring system, program, and intruder identification information acquisition method

Abstract

To provide information available for identifying an intruder in a configuration which does not utilize a jamming radio wave.SOLUTION: A monitoring device comprises: intruder identification information acquisition means by which, in the case where an intrusion alarm is received from an alarm device that detects an intruder in a monitoring area, a disclosure request of information of portable terminals existing in areas within a predetermined distance range around an installation place of the alarm device is transmitted to a portable carrier network management device that manages the portable terminals; and monitoring object portable terminal information storage means for storing therein information of the portable terminals received from the portable carrier network management device as a response of the disclosure request, as information of portable terminals of monitoring objects.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a monitoring device, a monitoring system, a program, and an intruder identification information acquisition method. [Background technology]

[0002] A technology has been disclosed in which, when an intruder into an empty home is detected, jamming radio waves are generated and stopped, changing the intruder's mobile phone from "out of range" to "in range," causing the mobile phone to automatically notify information such as the mobile phone number and ID, and this information is then received via a nearby base station to identify the intruder (see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2003-178385 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, the technology disclosed in Patent Document 1 generates jamming signals to put a mobile phone "out of range," but it is difficult to limit the range in residential areas, and there is a risk that it may affect neighboring houses. Also, the technology disclosed in Patent Document 1 assumes that an intruder will break into an empty house, so it is difficult to identify robbers at convenience stores, etc.

[0005] The present invention has been made in view of the above, and has an object to provide a means for acquiring information that can be used to identify an intruder, without using jamming radio waves. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems and achieve the object, the present invention is characterized in that it comprises an intruder identification information acquisition means which, when an intrusion alarm is received from an alarm device that detects intruders in a monitored area, receives information of mobile terminals present in an area within a specified distance range centered on the installation location of the alarm device from a mobile carrier network management device that manages the mobile terminals in response to the transmission of a disclosure request for the mobile terminal information, a monitored mobile terminal information storage means which stores the information of the mobile terminal received from the mobile carrier network management device in response to the disclosure request as information of the mobile terminal to be monitored, and a specific behavior detection means which detects specific behavior of a person carrying the mobile terminal based on the information of the mobile terminal stored by the monitored mobile terminal information storage means. Effect of the Invention

[0007] The monitoring device, monitoring system, program, and intruder identification information acquisition method of the present invention have the advantage of being able to identify a mobile terminal that may be possessed by an intruder without using jamming radio waves, and of being able to provide information that can be used to identify the intruder. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a block diagram showing a configuration of a monitoring system according to a first embodiment. [Diagram 2] FIG. 2 is a diagram illustrating an example of the configuration of an alarm device. [Diagram 3] FIG. 3 is a block diagram showing a hardware configuration of the monitoring device. [Figure 4] FIG. 4 is a block diagram showing an example of functions related to the intruder identification information acquisition process of the monitoring device. [Diagram 5] FIG. 5 is a flowchart showing an outline of the flow of the intruder identification information acquisition process. [Figure 6] FIG. 6 is a flowchart showing an outline of the flow of the terminal tracking process. [Figure 7] FIG. 7 is a flowchart showing an outline of the flow of a process for detecting an intruder's preview behavior. [Figure 8] FIG. 8 is a flowchart showing an outline of the flow of the abandoned terminal detection process. [Figure 9] FIG. 9 is a diagram showing an outline of a process when the mobile carrier network management device cannot respond to a disclosure request. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of a monitoring device, a monitoring system, a program, and an intruder identification information acquisition method will be described in detail with reference to the accompanying drawings.

[0010] (First embodiment) Fig. 1 is a block diagram showing the configuration of a monitoring system 1 according to a first embodiment. As shown in Fig. 1, the monitoring system 1 includes an alarm device 2, a monitoring device 3, and a mobile carrier network management device 4. The alarm device 2, the monitoring device 3, and the mobile carrier network management device 4 are connected to each other via a network 6 such as a telephone line, a wireless network, or the Internet.

[0011] The alarm device 2 is provided at the guard location. The monitoring device 3 is provided at a monitoring center. The mobile carrier network management device 4 is provided at the facility of the communication carrier that operates the mobile terminal 5.

[0012] The communication carrier network management device 4 is connected to a plurality of mobile base stations 7 that are placed by the communication carrier to provide communication services to the mobile terminal 5. Furthermore, within a predetermined distance range centered on the mobile base station 7, a communication area in which wireless communication with the mobile terminal 5 is possible is formed, and the mobile terminal 5 present within the communication area registers its own terminal ID and its own location information (location information of a mobile base station with which it can communicate, or its own location information acquired by location information acquisition means such as a GPS (Global Positioning System) built into the mobile terminal 5, etc.) in the communication carrier network management device 4, and can use communication services (Internet connection, telephone services, etc.) provided by the communication carrier through the mobile base station 7.

[0013] Furthermore, the mobile carrier network management device 4 stores various information related to the mobile terminal 5 (subscriber information (customer name), information on the mobile terminal 5 owned by the subscriber (terminal ID, location information, communication status, etc.)). Furthermore, when a disclosure request for information on the mobile terminal 5 that meets a predetermined condition is received from the monitoring device 3, the mobile carrier network management device 4 transmits the information on the mobile terminal 5 that meets the condition to the monitoring device 3.

[0014] The alarm device 2 detects an intruder in the monitored area of ​​the security guard and transmits an intrusion alarm to the monitoring device 3. When the monitoring device 3 receives the intrusion alarm from the alarm device 2, it instructs a waiting security guard to proceed to the monitored area, and notifies relevant authorities such as the police and fire department if necessary.

[0015] Here, the alarm device 2 will be described in detail. Fig. 2 is a diagram showing an example of the configuration of the alarm device 2. As shown in Fig. 2, the alarm device 2 comprises sensors 2a-2n which are a plurality of intrusion detection means installed in a monitored area, a setting input / display unit 20, an input / output control unit 21, a control unit 22, a communication control unit 23, and an alarm device ID storage unit 24 which stores an alarm device ID which is its own identification information.

[0016] Sensors 2a to 2n are various sensors that detect intruders into the monitored area, such as infrared sensors that detect people based on changes in the amount of infrared light received, blocking sensors that detect people when infrared light or other rays are blocked, presence sensors that detect people by disturbances in electromagnetic waves, magnet sensors that detect the opening and closing of doors using magnets, and image sensors that detect people or their suspicious behavior by image recognition of images captured by a camera.

[0017] The setting input / display unit 20 is equipped with an LCD screen for displaying various setting screens and operation buttons, and is a security mode switching means that displays an initial setting screen and a security mode setting screen on the LCD screen to allow the user to input initial settings for the alarm device 2 and to input various security mode settings for the alarm device 2. Here, a security mode is a mode that determines the operation of the alarm device 2, such as whether or not to report the detection of an intruder to a reporting destination such as the monitoring device 3 in the monitoring center when an intruder is detected in the monitored area. Specifically, there are a security status mode and a security release status mode.

[0018] The guard status mode is a state in which, when the sensors 2a to 2n detect an intruder and output a detection signal, the alarm device 2 issues an intrusion alarm to the monitoring device 3 in the monitoring center to notify that an intruder has been detected.

[0019] The security-off mode is a security mode in which the alarm device 2 does not report to the monitoring device 3 in the monitoring center even if the sensors 2a to 2n output a detection signal upon detecting an intruder.

[0020] Each of these states is set by the user through operation of the setting input / display unit 20.

[0021] When the setting input / display unit 20 receives an operation to switch from security off mode to security on mode (an operation to set security), the alarm device 2 transmits a security start signal to the monitoring device 3 together with the alarm device ID.

[0022] In addition, when the setting input / display unit 20 receives an operation to switch from the security mode to the security release mode (an operation to release security), the alarm device 2 transmits a security release signal together with the alarm device ID to the monitoring device 3.

[0023] The input / output control unit 21 is a processing unit that controls the input / output of the setting input / display unit 20 and the input / output of various data by controlling the input of the sensors 2a-2n. The communication control unit 23 controls the communication between the alarm device 2 and the monitoring device 3 connected via the network 6, and specifically corresponds to a network board or the like. The control unit 22 is the main controller of the alarm device 2.

[0024] That is, when the sensors 2a-2n detect an intruder, the alarm device 2, on condition that the alarm device 2 is in the guard status mode, transmits an intrusion alarm to the monitoring device 3. More specifically, the alarm device 2 transmits its own identification information, the alarm device ID, stored in the alarm device ID storage unit 24, together with the intrusion alarm to the monitoring device 3.

[0025] Next, a detailed description will be given of the monitoring device 3. The monitoring device 3 can be realized by an information processing device (computer) equipped with a general OS (Operating System) or the like.

[0026] Here, Fig. 3 is a block diagram showing a hardware configuration of the monitoring device 3. As shown in Fig. 3, the monitoring device 3 of this embodiment includes a control unit 101 such as a CPU (Central Processing Unit) that controls the entire device, a main memory unit 102 such as a ROM (Read Only Memory) or RAM (Random Access Memory) that stores various data and programs, an auxiliary memory unit 103 such as an HDD (Hard Disk Drive) or a CD (Compact Disc) drive device that stores various data and programs, and a bus 104 that connects them, and can be realized by a hardware configuration using a normal computer. The CPU has a clock function that measures the current time.

[0027] In addition, the control unit 101 is connected via a bus 104 to a display unit 105 that displays information, an operation input unit 106 such as a keyboard or mouse that accepts user instruction input, and a communication I / F (interface) 107 that controls communication with the alarm device 2 and the mobile carrier network management device 4 via the network 6.

[0028] The program executed by the monitoring device 3 of this embodiment is provided as a file in an installable or executable format recorded on a computer-readable recording medium such as a CD-ROM, a flexible disk (FD), a CD-R, or a DVD (Digital Versatile Disc).

[0029] The program executed by the monitoring device 3 of this embodiment may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. The program executed by the monitoring device 3 of this embodiment may be provided or distributed via a network such as the Internet.

[0030] The program executed by the monitoring device 3 of this embodiment may be provided by being pre-installed in a ROM or the like.

[0031] Next, among various types of arithmetic processing executed by the CPU of the monitoring device 3 according to a program, a function for realizing a monitoring process, which is a characteristic process of this embodiment, will be described below.

[0032] FIG. 4 is a block diagram showing an example of functions related to the monitoring process of the monitoring device 3. As shown in FIG.

[0033] As shown in FIG. 4, the monitoring device 3 includes an intruder identification information acquisition means 30, an alarm device information storage means 31, a monitored mobile terminal information storage means 32, and a specific behavior detection means 33.

[0034] The alarm device information storage means 31 stores in advance in the auxiliary storage unit 103 or the like the installation location (address) of the alarm device 2 in association with the alarm device ID.

[0035] Furthermore, when the monitoring device 3 receives an alarm device ID and a security alert start signal from the alarm device 2, the alarm device information storage means 31 stores the time at which the security alert start signal was received in the auxiliary storage unit 103 or the like in association with the received alarm device ID. Furthermore, when the monitoring device 3 receives an alarm device ID and a security alert release signal from the alarm device 2, the alarm device information storage means 31 stores the time at which the security alert signal was received in the auxiliary storage unit 103 or the like in association with the received alarm device ID.

[0036] When an intruder identification information acquisition means 30 receives an intrusion alarm from the alarm device 2, it sends a request to the mobile carrier network management device 4 to disclose information about mobile terminals 5 present in an area within a specified distance range centered on the location of the alarm device 2.

[0037] The monitored mobile terminal information storage means 32 stores the information on the mobile terminal 5 received from the mobile carrier network management device 4 in response to the disclosure request in the auxiliary storage unit 103 or the like in association with the time of reception.

[0038] The specific behavior detection means 33 analyzes the information of the mobile terminal 5 stored in the auxiliary memory unit 103 or the like by the monitored mobile terminal information storage means 32, and detects specific behavior of the person possessing the mobile terminal 5 (for example, an intruder's reconnaissance behavior).

[0039] (Acquisition of information that can be used to identify intruders) Next, an intruder identification information acquisition process that acquires information (intruder identification information) that can be used to identify an intruder in the monitoring process will be described.

[0040] The intruder identification information acquisition process in the monitoring device 3 of this embodiment is, in outline, a process of acquiring information that can be used to identify the mobile terminal 5 possessed by the intruder, in a configuration that does not use jamming radio waves at the guard post. Note that this is premised on the fact that the intruder possesses the mobile terminal 5, and that the mobile carrier network management device 4 is capable of responding to a disclosure request.

[0041] Here, Fig. 5 is a flow chart showing the outline of the flow of the intruder identification information acquisition process. As shown in Fig. 5, when the intruder identification information acquisition means 30 of the monitoring device 3 receives an alarm device ID and an intrusion alarm from the alarm device 2, it searches for the installation location of the alarm device 2 stored in the auxiliary storage unit 103 or the like by the alarm device information storage means 31 based on the received alarm device ID (step S1).

[0042] Next, the intruder identification information acquisition means 30 of the monitoring device 3 transmits a request to the mobile carrier network management device 4 to disclose information about mobile terminals 5 that meet certain conditions, such as being in an area within a predetermined distance range centered on the installation location of the searched alarm device 2 (step S2). Here, the conditions include the time, the installation location (address) of the alarm device 2, the distance range, etc.

[0043] When the mobile carrier network management device 4 receives from the monitoring device 3 a request to disclose information about mobile terminals 5 that are present in an area within a predetermined distance range centered on the installation location of the alarm device 2, the mobile carrier network management device 4 searches for information about the mobile terminals 5 that it has stored. Then, the mobile carrier network management device 4 transmits to the monitoring device 3 information about the mobile terminals 5 that meet the conditions of the disclosure request.

[0044] The intruder identification information acquisition means 30 of the monitoring device 3 receives the information on the mobile terminal 5 transmitted from the mobile carrier network management device 4 (step S3).

[0045] Next, the intruder identification information acquisition means 30 of the monitoring device 3 stores the information of the mobile terminal 5 received from the mobile carrier network management device 4 in the auxiliary memory unit 103 or the like as information of the mobile terminal to be monitored by the monitored mobile terminal information storage means 32 (step S4).

[0046] Specifically, when an intruder identification information acquisition means 30 of the monitoring device 3 receives an intruder alarm from an alarm device 2 installed at a security location with an address of "A Town, No. 1", it requests the mobile carrier network management device 4 to disclose information on mobile terminals 5 that are present "within a radius of 100 m centered on A Town, No. 1". Then, the intruder identification information acquisition means 30 of the monitoring device 3 acquires information on the relevant mobile terminals 5. The acquired information on the mobile terminals 5 is treated as information on candidate mobile terminals 5 that may be possessed by the intruder.

[0047] As described above, the monitoring system 1 of this embodiment requests the mobile carrier network management device 4 to disclose information (subscriber information, terminal information (terminal ID), location information, communication status (time of communication), etc.) of mobile terminals 5 present in the vicinity of the location where an intrusion alarm was issued, and uses the acquired information (subscriber information, terminal information (terminal ID), location information, communication status (time of communication), etc.) to identify and track mobile terminals 5 that may be in the possession of an intruder.

[0048] (Device tracking during intrusion alert) Next, a terminal tracking process when an intrusion alarm is issued during monitoring processing will be described.

[0049] The terminal tracking process in the monitoring device 3 of this embodiment when an intrusion alarm is issued is a process of tracking the portable terminal 5 carried by the intruder identified by the intruder identification information acquisition process described above.

[0050] Here, Fig. 6 is a flow chart showing an outline of the flow of the terminal tracking process. As shown in Fig. 6, the intruder identification information acquisition means 30 of the monitoring device 3 transmits a disclosure request to the mobile carrier network management device 4 for the mobile terminal 5 corresponding to the received mobile terminal information at every predetermined tracking time interval (step S11).

[0051] Furthermore, intruder identification information acquisition means 30 of monitoring device 3 stores the mobile terminal information and the time of reception received from mobile carrier network management device 4 in auxiliary memory unit 103 or the like by monitored mobile terminal information storage means 32 (step S12).

[0052] The intruder identification information acquisition means 30 of the monitoring device 3 repeats the process of steps S11 to S12 at every predetermined tracking time interval.

[0053] By the above-described terminal tracking process, the trajectory of the monitored portable terminal 5 from the time of the intrusion alarm is acquired, and is used to identify the portable terminal 5 that may be possessed by an intruder.

[0054] (Detection of intruder reconnaissance behavior) Next, a process for detecting an intruder's reconnaissance behavior in the surveillance process will be described.

[0055] The process of detecting an intruder's reconnaissance behavior in the monitoring device 3 of this embodiment is performed under the assumption that the intruder will preliminarily reconnaissance the living conditions of the destination and is highly likely to have a mobile terminal 5 in his / her possession.

[0056] FIG. 7 is a flowchart showing an outline of the flow of a process for detecting an intruder's preview behavior.

[0057] As shown in Figure 7, when the specific behavior detection means 33 of the monitoring device 3 receives a security start signal or a security release signal together with the alarm device ID from the alarm device 2, it transmits a request to the mobile carrier network management device 4 to disclose information about the mobile terminals 5 present in an area within a specified distance range centered on the installation location of the alarm device 2, which information has been stored in the auxiliary memory unit 103 or the like by the alarm device information storage means 31 (step S21).

[0058] When the mobile carrier network management device 4 receives from the monitoring device 3 a request to disclose information about mobile terminals 5 that are present in an area within a predetermined distance range centered on the installation location of the alarm device 2, the mobile carrier network management device 4 searches for information about the mobile terminals 5 that it has stored. Then, the mobile carrier network management device 4 transmits to the monitoring device 3 information about the mobile terminals 5 that meet the conditions of the disclosure request.

[0059] The specific behavior detection means 33 of the monitoring device 3 receives the information on the mobile terminal 5 transmitted from the mobile carrier network management device 4 (step S22).

[0060] Next, the specific behavior detection means 33 of the monitoring device 3 stores the information of the mobile terminal 5 received from the mobile carrier network management device 4 in the auxiliary memory unit 103 or the like by the monitored mobile terminal information storage means 32, corresponding to the time of reception (step S23).

[0061] Then, the specific behavior detection means 33 of the monitoring device 3 detects a specific behavior (preview behavior) of a person carrying the mobile terminal 5 based on the information of the mobile terminal 5 stored by the monitored mobile terminal information storage means 32 in the auxiliary memory unit 103 or the like and the time of reception (step S24).

[0062] Specifically, the specific behavior detection means 33 of the monitoring device 3 extracts mobile terminals 5 that have stayed in an area within a specified distance range for a specified period of time or more, and for which there is a certain degree of correlation between the time period of stay and the time at which the security start signal or security release signal was received from the alarm device 2 whose installation location is in that area, based on the location information of the mobile terminal 5, the time of reception corresponding to the location information, the installation location of the alarm device 2 stored in the auxiliary storage unit 103 or the like by the alarm device information storage means 31, and the time at which the security start signal or security release signal was received. For example, it is determined that there is a correlation when the time period of stay and the time at which the security start signal or security release signal was received overlap.

[0063] It is thought that when an intruder scouts out a location, he or she checks out the times when no one is present, and when the security at the location is set up or taken down, the intruder is likely to be present in the vicinity of the location, watching the situation.

[0064] Based on this idea, as described above, the monitoring device 3 extracts information about the mobile terminals 5 present in the vicinity of the address of the security destination at the time security for the security destination is set or released, which is obtained by making a disclosure request to the mobile carrier network management device 4, and stores the information in advance in association with the security destination. Then, when the monitoring device 3 receives an intrusion alarm from the alarm device 2, it references the information about the mobile terminals 5 present in the vicinity of the address of the security destination, which is obtained by making a disclosure request to the mobile carrier network management device 4, and the information about the mobile terminals 5 that has been stored in advance, and detects the mobile terminals 5 that may have been possessed by the intruder when scouting the area and at the time of intrusion. The information about the detected mobile terminals 5 is used to identify the mobile terminals 5 that may have been possessed by the intruder.

[0065] (Abandoned Device Detection) Next, the abandoned terminal detection process in the monitoring process will be described.

[0066] The abandoned terminal detection process in the monitoring device 3 of this embodiment is performed under the assumption that when an intruder abandons (leaves behind) his / her portable terminal 5 in order to avoid being tracked by relevant authorities, etc. using the location information of the portable terminal 5 when escaping, the location information of the portable terminal 5 will not change and it is considered that almost no calls or communications will occur.

[0067] Here, Fig. 8 is a flow chart showing an outline of the flow of the abandoned terminal detection process. As shown in Fig. 8, the specific behavior detection means 33 of the monitoring device 3 extracts portable terminals 5 that may have been abandoned by an intruder from among the portable terminals 5 that have stayed in an area within a predetermined distance range for a predetermined period of time or more and have not generated a certain amount of communication or more, based on the location information, communication status, and time of receiving the information on the portable terminal 5, which are included in the information on the portable terminal 5 acquired by the terminal tracking process that repeats steps S11 to S12 in Fig. 6 and stored in the auxiliary storage unit 103 or the like by the monitored portable terminal information storage means 32 (step S31).

[0068] Next, the specific behavior detection means 33 of the monitoring device 3 transmits a request for disclosure of owner information of the detected mobile terminal 5 to the mobile carrier network management device 4 (step S32).

[0069] When the mobile carrier network management device 4 receives a request to disclose the owner information of the mobile terminal 5 from the monitoring device 3, the mobile carrier network management device 4 transmits the owner information of the mobile terminal 5 in question to the monitoring device 3.

[0070] The specific behavior detection means 33 of the monitoring device 3 receives the owner information of the mobile terminal 5 from the mobile carrier network management device 4 (step S33).

[0071] The specific behavior detection means 33 of the monitoring device 3 reports the owner information of the mobile terminal 5 received from the mobile carrier network management device 4 to relevant authorities as information that can be used to identify the intruder related to the intrusion alarm (intruder identification information) (step S34).

[0072] In this manner, when an intrusion alarm is issued, the monitoring device 3 tracks the mobile terminal 5 present in the vicinity of the location where the alarm was issued, and if it detects an abandoned terminal based on its location information and communication status, it determines that the owner may be an intruder, obtains owner information by inquiring about it from the mobile carrier network management device 4, and provides the information to relevant authorities.

[0073] Thus, according to this embodiment, it is possible to identify a mobile terminal that may be possessed by an intruder without using jamming radio waves, and this can be provided to relevant authorities as information that can be used to identify the intruder (intruder identification information).

[0074] In the present embodiment, the mobile carrier network management device 4 is assumed to be able to respond to the disclosure request, but the present invention is not limited to this. Here, FIG. 9 is a diagram showing an outline of the process when the mobile carrier network management device 4 is unable to respond to the disclosure request. As shown in FIG. 9, when the mobile carrier network management device 4 is unable to respond to the disclosure request, the mobile carrier network management device 4 is provided with an intruder identification information acquisition means 30, a monitored mobile terminal information storage means 32, a specific behavior detection means 33, and an auxiliary storage unit (not shown) used in each function, among the functions of the monitoring device 3, instead of the monitoring device 3, and the monitoring device 3 is provided with a security device information storage means 31 and an auxiliary storage unit (not shown) used in the function. Furthermore, when the monitoring device 3 receives a security start signal, a security release signal, or an intrusion alarm together with the alarm device ID from the alarm device 2, the alarm device information storage means 31 is configured to search for the address of the installation location of the alarm device that is stored in advance in association with the received alarm device ID, and notify the mobile carrier network management device 4 of the searched address and the contents of the received alarm or signal.

[0075] With this configuration, the mobile carrier network management device 4 can obtain information about candidate mobile terminals 5 that may be possessed by an intruder, without the communication carrier facility disclosing information about the mobile terminal 5 to the monitoring center. Furthermore, the monitoring device 3 provides the relevant organizations with information about the installation location (address) of the alarm device 2 that received the intrusion alarm, so that the relevant organizations can inquire of the communication carrier about information that can be used to identify the intruder (intruder identification information) based on the provided information about the installation location (address), and obtain information about candidate mobile terminals 5 that may be possessed by an intruder.

[0076] (Second embodiment) Next, a second embodiment will be described.

[0077] The second embodiment differs from the first embodiment in that, in detecting an intruder's reconnaissance behavior, a portable terminal 5 that may be possessed by the intruder is distinguished from an abandoned portable terminal 5 based on the presence or absence of communication. In the following description of the second embodiment, descriptions of the same parts as in the first embodiment will be omitted, and only differences from the first embodiment will be described.

[0078] (Detection of intruder reconnaissance behavior) In step S24 shown in FIG. 8, the specific behavior detection means 33 of the monitoring device 3 extracts mobile terminals 5 that have stayed in an area within a specified distance range for a specified period of time or more, have had a certain amount of communication or more occurring, and have a certain degree of correlation with the time when the security start signal or the security release signal was received from the alarm device 2 whose installation location is in that area, based on the location information, communication status, and corresponding received time stored by the monitored mobile terminal information storage means 32 in the auxiliary memory unit 103 or the like, and the installation location of the alarm device 2 and the time when the security start signal and the security release signal were received stored by the alarm device information storage means 31 in the auxiliary memory unit 103 or the like.

[0079] Even during a reconnaissance, an intruder may operate his / her own mobile terminal 5 to make calls, send / receive e-mails, etc. However, this is unlikely if the mobile terminal 5 is left near the site (for example, a mobile terminal 5 owned by a third party living near the site that was left on a desk while at home). Therefore, by also investigating the communication status of the mobile terminal 5 (presence or absence of calls, communication volume, etc.), it is possible to distinguish between the two.

[0080] According to the present invention, when the guard location is a residence, information can be obtained that can be used to identify an intruder detected while the residence is unattended.

[0081] According to the present invention, when the security destination is a store that is open such as a convenience store, information that can be used to identify the criminal of a robbery or shoplifter detected in the store can be obtained. In this case, the sensors 2a to 2n may be configured to use image sensors that detect suspicious human behavior (such as a robber threatening a store employee or a customer who comes to the store shoplifting products in the store) by image recognition of images captured by a camera installed in the store, and the security mode during business hours can be set to the security status mode. The sensors 2a to 2n may also be replaced with emergency push buttons that output a detection signal when an emergency operation by a store employee is received, and the security mode during business hours can be set to the security status mode. With such a configuration, even if a robbery or shoplifting occurs at a convenience store, when an intrusion alarm (detection signal) is generated in response to an attack by a robber or the occurrence of shoplifting, it is possible to identify a mobile terminal that may be possessed by the criminal of the robbery or shoplifting, and provide the mobile terminal to relevant authorities as information that can be used to identify the criminal of the robbery or shoplifting. [Explanation of symbols]

[0082] 1. Surveillance System 2 Alarm device 3 Monitoring device 4. Mobile carrier network management equipment 30 Means for acquiring intruder identification information 31 Alarm device information storage means 32 Monitoring target mobile terminal information storage means 33 Specific behavior detection means

Claims

1. an intruder identification information acquisition means for receiving, when an intrusion alarm is received from an alarm device that detects an intruder in a monitored area, information on a mobile terminal present in an area within a predetermined distance range centered on the installation location of the alarm device from a mobile carrier network management device that manages the mobile terminals in response to a request to disclose information on the mobile terminals; a monitoring target mobile terminal information storage means for storing the information of the mobile terminal received from the mobile carrier network management device in response to the disclosure request as information of the mobile terminal to be monitored; a specific behavior detection means for detecting a specific behavior of a person carrying the portable terminal based on the information of the portable terminal stored in the monitoring target portable terminal information storage means; A monitoring device comprising:

2. The specific behavior detection means includes: when a security start signal or a security release signal is received from the alarm device, a request for disclosure of information on mobile terminals present in an area within a predetermined distance range centered on the installation location of the alarm device is transmitted to the mobile carrier network management device; storing the information of the portable terminal received from the portable carrier network management device in response to the disclosure request in the monitored portable terminal information storage means in association with the time of reception; Detecting a specific behavior of a person carrying the mobile terminal based on the information of the mobile terminal stored by the monitoring target mobile terminal information storage means and the time of reception.

2. The monitoring device according to claim 1.

3. The specific behavior detection means includes: extracting a mobile terminal that has stayed in an area within a predetermined distance range for a predetermined period of time or more and has a correlation of at least a certain level between the time period of stay and the time of receiving the security start signal or the time of receiving the security release signal from the alarm device in which the alarm device is installed; Detecting a specific behavior of a person who possesses the extracted mobile terminal; 3. The monitoring device according to claim 2.

4. The specific behavior detection means includes: extracting mobile terminals that have stayed in an area within a predetermined distance range for a predetermined period of time or more, that have generated a certain level of communication, and that have a certain level of correlation between the time period of stay and the time of receiving the security start signal or the time of receiving the security release signal of the alarm device that is installed in the area; Detecting a specific behavior of a person who possesses the extracted mobile terminal; 3. The monitoring device according to claim 2.

5. The specific behavior detection means includes: Based on the location information, communication status, and reception time included in the information on the portable terminal stored by the monitoring target portable terminal information storage means, a portable terminal that has stayed in an area within a predetermined distance range for a predetermined period of time or more and has not generated a certain amount of communication is detected as having been abandoned by the person possessing the portable terminal; Transmitting a request for disclosure of owner information of the detected mobile terminal to the mobile carrier network management device; when receiving the owner information of the mobile terminal from the mobile carrier network management device, notifying a related organization of the received owner information of the mobile terminal as information related to the intrusion alarm; 2. The monitoring device according to claim 1.

6. an alarm device that transmits an intrusion alarm when an intrusion detection means detects an intruder in a monitored area; an intruder identification information acquisition means for acquiring information on mobile terminals present in an area within a predetermined distance range centered on a location where the alarm device is installed when an intrusion alarm is received from the alarm device; a monitoring target mobile terminal information storage means for storing the acquired information of the mobile terminal as information of the mobile terminal to be monitored; a specific behavior detection means for detecting a specific behavior of a person carrying the portable terminal based on the information of the portable terminal stored in the monitoring target portable terminal information storage means; A monitoring system comprising:

7. A computer that controls the monitoring device, an intruder identification information acquisition means for receiving, when an intrusion alarm is received from an alarm device that detects an intruder in a monitored area, information on a mobile terminal present in an area within a predetermined distance range centered on the installation location of the alarm device from a mobile carrier network management device that manages the mobile terminals in response to a request to disclose information on the mobile terminals; a monitoring target mobile terminal information storage means for storing the information of the mobile terminal received from the mobile carrier network management device in response to the disclosure request as information of the mobile terminal to be monitored; a specific behavior detection means for detecting a specific behavior of a person carrying the portable terminal based on the information of the portable terminal stored in the monitoring target portable terminal information storage means; A program to function as a

8. A method for acquiring intruder identification information in a surveillance system, comprising: an intruder information acquisition and identification step of acquiring information on mobile terminals present in an area within a predetermined distance range centered on a location where the alarm device is installed when the monitoring device receives an intrusion alarm from an alarm device that detects an intruder in a monitoring area; a monitoring target mobile terminal information storage step in which the monitoring device stores the acquired information of the mobile terminal as information of the mobile terminal to be monitored; a specific behavior detection step of detecting a specific behavior of a person carrying the portable terminal based on the information of the portable terminal stored in the monitoring target portable terminal information storage step; 23. A method for acquiring intruder identification information, comprising:

Images