Intrusion detection system and intrusion detection method

Abstract

To provide an intrusion detection system and an intrusion detection method.SOLUTION: An intrusion detection system includes multiple IoT devices 330 and a central control device 310. The central control device 310 is configured to: obtain multiple sensing pairs from a paired combination of the multiple IoT devices 330; create a sensing-pair list including the multiple sensing pairs and features of each sensing pair; obtain multiple first pairs whose features satisfy a first feature condition from the sensing-pair list; dynamically schedule transmissions and receptions of the multiple IoT devices 330 belonging to the multiple first pairs in a time sharing fashion to obtain a first sensing signal of each first pair; and based on a paired node of the multiple first pairs, count a first status code and a second status code of the multiple first pairs to which each paired node belongs, to determine whether any intrusion condition occurs at a spatial position.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to a detection system and a detection method, and particularly to an intrusion detection system and an intrusion detection method.

Background Art

[0002] Conventional intrusion detection systems use paired wireless sensor devices such as paired infrared sensors. One of these devices is the transmitting side, and the other is the receiving side, which transmits infrared rays from the transmitting side to the receiving side. When the receiving side does not receive an infrared signal, it means that the infrared rays have been blocked. That is, the intrusion detection system detects the intrusion state based on whether the wireless sensing signal of the paired wireless induction devices is blocked or not. However, since wireless sensor devices need to be fixed pairwise to perform intrusion detection, the detection range is fixed by such limitations and cannot be changed, resulting in a problem of potential dead zones. To expand the detection range, it is necessary to increase the paired sensor devices, and as a result, a problem of increased cost occurs.

[0003] In addition, conventional intrusion detection systems lack flexibility in installing wireless sensor devices. When the sensing distance between paired wireless sensor devices is increased to expand the detection range, even if an intruder can be detected, there is a problem of delay in the response time required to obtain the position coordinates of the intruder.

[0004] Therefore, problems such as the dead zone of detection and the delay in response time in conventional intrusion detection systems are what those skilled in the art are trying to overcome.

Summary of the Invention

Problems to be Solved by the Invention

[0005] One embodiment according to the present invention proposes an intrusion detection system including a plurality of IoT devices and a central control device. Each IoT device is provided at a spatial position and arranged to transmit and receive sensing signals. The central control device is communicatively connected to the plurality of IoT devices, obtains a plurality of sensing pairs from combinations of pairs of the plurality of IoT devices, causes the plurality of IoT devices to transmit and receive signals in each sensing pair and obtain characteristics of the plurality of sensing pairs, creates a sensing pair list including the plurality of sensing pairs and the characteristics of each sensing pair, obtains a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list, dynamically schedules the transmission and reception of the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to obtain a first sensing signal of each first pair, marks a first status code on the first pair if it is determined that the first sensing signal satisfies a suspected intrusion condition, marks a second status code otherwise, and based on the pair nodes of the plurality of first pairs, respectively counts the first status code and the second status code of the plurality of first pairs to which the pair nodes belong, and is arranged to determine whether there is an intrusion situation at the spatial position.

[0006] Other embodiments according to the present invention propose an intrusion detection method applied to a plurality of IoT devices and a central control device. Each IoT device is provided at a spatial position and arranged to transmit and receive sensing signals, and a central control device communicatively connected to the plurality of IoT devices receives the sensing signals. The intrusion detection method includes steps of: obtaining a plurality of sensing pairs from combinations of pairs of the plurality of IoT devices; causing the plurality of IoT devices to transmit and receive signals in each sensing pair so as to obtain characteristics of the plurality of sensing pairs; creating a sensing pair list including the plurality of sensing pairs and characteristics of each sensing pair; obtaining a plurality of first pairs whose characteristics satisfy a first condition from the sensing pair list; dynamically scheduling transmission and reception of the plurality of IoT devices belonging to the plurality of first pairs in a time division manner to obtain first sensing signals of each first pair; when it is determined that the first sensing signal satisfies a condition suspected of intrusion, marking a first status code on the first pair, and otherwise marking a second status code; and based on pair nodes of the plurality of first pairs, respectively statistically counting the first status code and the second status code of the plurality of first pairs to which the pair nodes belong, and determining whether there is an intrusion situation at the spatial position.

Brief Description of the Drawings

[0007]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16A

Figure 16B

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Figure 23

Figure 24

Figure 25

Figure 26

Figure 27

Mode for Carrying Out the Invention

[0008] Hereinafter, the present invention will be further described with reference to the accompanying drawings and embodiments so that those skilled in the technical field to which the present invention pertains can better understand the present invention and implement it as appropriate. However, the listed embodiments should not be construed as limiting the present invention.

[0009] In this specification, terms such as "first", "second", "third", "fourth", and "fifth" are used to describe various elements, components, regions, layers, and / or sections. However, these elements, components, regions, layers, and / or sections are not limited by these terms. These terms are only used to distinguish one element, component, region, layer, or section from another. The terms "first", "second", "third", "fourth", and "fifth" used in this specification do not mean an order or sequence unless clearly indicated by the context.

[0010] Figure 1 is a schematic diagram of an intrusion detection system in a case where there is a sensing dead zone when performing detection.

[0011] In the living environment, a plurality of Internet of Things (IoT) devices A, B, C, and D are provided. The IoT devices A, B, C, and D may be smart home appliances such as lighting fixtures, power outlets, and refrigerators. In other sensing environments, the IoT devices A, B, C, and D may be devices equipped with a wireless communication module and capable of transmitting and receiving wireless signals.

[0012] As shown in Figure 1, the IoT device A and the IoT device D are arranged in a pair, and the IoT device B and the IoT device C are arranged in a pair. By such an arrangement, the detection distance is shortened, and it is possible to respond more in real time to the presence or absence of an intruder, but the space range 123 cannot be detected and a sensing dead zone occurs.

[0013] Figure 2 is a schematic diagram of an intrusion detection system in another case where it is impossible to respond to an intruder in real time when performing detection.

[0014] The IoT device A and the IoT device B are arranged in a pair, and the IoT device C and the IoT device D are arranged in a pair. By such an arrangement, the detection range becomes larger, and the problem of the sensing dead zone can be avoided, but the response time becomes longer when detecting an intruder in the space range 123, and it becomes impossible to respond to the intrusion situation in real time.

[0015] Figure 3 is a schematic diagram of an intrusion detection system according to an embodiment of the present invention.

[0016] The intrusion detection system 300 includes a central control device 310 and a plurality of IoT devices 330.

[0017] The IoT device 330 is provided with an identifier for identifying the IoT device 330. The IoT device 330 can transmit a sensing signal as a sender or receive a sensing signal transmitted by another IoT device 330 as a receiver.

[0018] The central control device 310 acquires data of each IoT device 330 via the communication network 350 and controls each IoT device 330. The data of the IoT device 330 acquired by the central control device 310 may be the identification code of the IoT device 330 and the sensing signal received by the IoT device 330 as a receiver.

[0019] In one embodiment, if all IoT devices 330 are regarded as a plurality of nodes and pairs between IoT devices 330 are regarded as edges between nodes, all pairwise combinations between IoT devices 330 can form one complete graph. That is, the central control device 310 tries to acquire sensing signals of communications between each IoT device 330 and all other IoT devices 330.

[0020] The central control device 310 sets a device role for the IoT device 330. The IoT device 330 transmits and receives signals according to the device role. The device role can be a station (STA) mode, a wireless access point (AP) mode, or a sniffer mode. In one embodiment, the device role is set based on Wi-Fi wireless network technology. For example, the IoT device 330 set to the station mode receives the service set identifier (SSID) broadcast by the IoT device 330 set to the wireless access mode so as to connect to the IoT device 330 set to the AP mode, and transmits a sensing signal to the IoT device 330 in the AP mode. The IoT device 330 set to the wireless access mode receives the sensing signals of the IoT devices 330 set to the station mode respectively based on the wireless communication protocol. The IoT device 330 in the sniffer mode receives the sensing signals transmitted by the IoT device 330 in order to duplicate the packets obtained in the network environment.

[0021] FIG. 4 is a schematic diagram of an IoT device provided in an application scenario according to an embodiment of the present invention.

[0022] The application scenario can be a living environment composed of bedrooms 111 and 115, toilet 113, and living room 117. Four IoT devices A, B, C, and D are installed in the living environment. IoT device A is placed in a corner of bedroom 111, IoT device B is placed in a corner of bedroom 115, and IoT devices C and D are placed in two corners of living room 117 respectively.

[0023] IoT devices A, B, C, and D have a sensing function or a recognition function, and transfer the sensed or measured data to a central control device 310 (via a gateway or a communication network 350). IoT devices A, B, C, and D can be smart home appliances having a network function such as a refrigerator, a television, a lighting fixture, an air conditioner, an electric rice cooker, an outlet, an electricity meter, a gas meter, or a water meter.

[0024] While IoT devices A, B, C, and D are devices that execute a sensing function or a recognition function, they are also devices that transmit and receive sensing signals by executing the STA mode, the AP mode, and the sniffer mode according to the setting of the communication module of the IoT device.

[0025] The central control device 310 can perform any pairwise combination of IoT devices A, B, C, and D and perform intrusion detection in conjunction with dynamical timeshare sensing.

[0026] FIG. 5 is a flowchart of an intrusion detection method according to an embodiment of the present invention.

[0027] The intrusion detection method is applied to a plurality of IoT devices 330 and a central control device 310 (FIG. 3). Each IoT device 330 is provided at a spatial position and arranged to transmit and receive sensing signals.

[0028] In step S510, the central control device 310 acquires a plurality of sensing pairs from combinations that are pairs of a plurality of IoT devices.

[0029] In step S520, the central control device 310 transmits a signal to the plurality of IoT devices 330 to cause them to acquire the characteristics of the plurality of sensing pairs.

[0030] In step S530, the central control device 310 creates a sensing pair list including a plurality of sensing pairs and the characteristics of each sensing pair.

[0031] In step S540, the central control device 310 obtains a plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list.

[0032] In step S550, the central control device 310 dynamically schedules the transmission and reception of a plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to obtain the first sensing signals of each first pair.

[0033] In step S560, when the first sensing pair signal satisfies the first intrusion condition, the central control device 310 marks the first pair with the first status code, and otherwise marks it with the second status code.

[0034] In step S570, the central control device 310 respectively counts the first status code and the second status code of the plurality of first pairs to which each pair node belongs based on the pair nodes of the plurality of first pairs, and determines whether there is an intrusion situation at the spatial position.

[0035] Hereinafter, for the convenience of explanation, each step of the intrusion detection method will be described in combination with the application scenario of FIG. 4.

[0036] The central control device 310 acquires a plurality of sensing pairs from pairs of IoT devices A, B, C, and D (step S510), and acquires the characteristics of each sensing pair (step S520). In one embodiment, the central control device 310 alternately sets the IoT devices A, B, C, and D to the AP mode and receives sensing signals, thereby acquiring the sensing signals of all sensing pairs. Note that since the IoT device 330 in the AP mode cannot simultaneously receive the sensing signals of a plurality of IoT devices 330 set to the STA mode, it is necessary to receive the sensing signals alternately (for example, time-division multiplexing) to avoid collisions.

[0037] An IoT device in the sniffer mode can receive the sensing signals of one or more IoT devices. Therefore, the more IoT devices are set to the AP mode and the sniffer mode, the more sensing signals of sensing pairs are acquired simultaneously, and the sensing signals of all sensing pairs can be acquired faster.

[0038] A pair of two IoT devices is indicated by a colon. For example, the pair of IoT device A and IoT device B is represented as "pair A:B", which means that IoT device A is in the STA mode and transmits a sensing signal to IoT device B in the AP mode or the sniffer mode, or IoT device B transmits a sensing signal to IoT device A. That is, in the same set of sensing pairs, the characteristics of the sensing signal transmitted from IoT device A to IoT device B are considered to be the same as the characteristics of the sensing signal transmitted from IoT device B to IoT device A.

[0039] In one embodiment, the central control device 310 designates the transmission power and subcarriers of the IoT device in the STA mode.

[0040] In one embodiment, the characteristics of the sensing pair refer to wireless communication signals from a communication module such as, for example, Received Signal Strength Indication (RSSI), Channel State Information (CSI), or request / reply messages of the Internet Control Message Protocol (ICMP) (such as ping values).

[0041] Figures 6 to 8 are schematic diagrams for obtaining sensing signals of all sensing pairs in a time-division manner according to an embodiment of the present invention.

[0042] The central control device 310 determines in advance the order of the IoT devices D, C, and B so that the IoT devices D, C, and B operate alternately in the AP mode.

[0043] As shown in Figure 6, in the first period T1 (duration), since the IoT device D is set to the AP mode, three sets of sensing pairs A:D, B:D, and C:D are created based on the order of the IoT devices A, B, and C, and the sensing signals of each sensing pair are obtained. For example, in the first sub-period T1.1, the IoT device A transmits the sensing signal to the IoT device D, in the second sub-period T1.2, the IoT device B transmits the sensing signal to the IoT device D, and in the third sub-period T1.3, the IoT device C transmits the sensing signal to the IoT device D. The first sub-period T1.1, the second sub-period T1.2, and the third sub-period T1.3 are sub-periods arranged in this order. Therefore, the central control device 310 can obtain the characteristics of the sensing signals of the three sets of sensing pairs in the first period T1.

[0044] As shown in FIG. 7, in the second period T2, since the IoT device C is set to the AP mode, two sets of sensing pairs A:C and B:C are created based on the order of the IoT devices A and B, and the sensing signals of each sensing pair are acquired. For example, in the first sub-period T2.1, the IoT device A transmits the sensing signal to the IoT device C, and in the second sub-period T2.2, the IoT device B transmits the sensing signal to the IoT device C. The first sub-period T2.1 and the second sub-period T2.2 are sub-periods arranged in this order. Therefore, the central control device 310 can acquire the characteristics of the sensing signals of the two sets of sensing pairs in the second period T2.

[0045] As shown in FIG. 8, in the third period T3, since the IoT device B is set to the AP mode, one set of sensing pair A:B is created and the sensing signal is acquired. For example, in the first sub-period T3.1, the IoT device A transmits the sensing signal to the IoT device B. Therefore, the central control device 310 can acquire the characteristics of the sensing signal of the one set of sensing pair in the third period T3.

[0046] Based on the sensing pair creation process in FIGS. 6 to 8, the central control device 310 can acquire six sets of sensing pairs and the characteristics of the sensing signals of each sensing pair (hereinafter referred to as the characteristics of the sensing pair). As shown in Table 1, the central control device 310 creates a sensing pair list including a plurality of sensing pairs and the characteristics of each sensing pair (step S530). In Table 1, the average RSSI value is used as the characteristic. For example, the average RSSI value of the sensing pair A:D is -35.

[0047]

Table 1

[0048] The central control device 310 acquires a plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list (step S540). The characteristics of the sensing pair can be RSSI, CSI, ping value, etc. In one embodiment, the first characteristic condition is that it is greater than the RSSI or CSI corresponding to the first distance, or greater than the default ping value. For example, the RSSI value of the first characteristic condition is -60. As shown in Table 2, the central control device 310 acquires sensing pairs (first pairs) whose RSSI value is greater than -60 from 6 sets of sensing pairs (sensing pairs that are not the first pairs are indicated as No).

[0049]

Table 2

[0050] Refer also to FIG. 9, which is a schematic diagram of the first pair according to an embodiment of the present invention.

[0051] In the application scenario, the first pairs acquired by the central control device 310 are A:D, C:D, B:C, and A:B.

[0052] The central control device 310 dynamically schedules the transmission and reception of a plurality of IoT devices belonging to a plurality of first pairs in a time-division manner to acquire the first sensing signals of each first pair (step S550).

[0053] In one embodiment, the central control device 130 sequentially selects the first N sets of sensing pairs having a common IoT device, sets the common IoT device as the transmitting side, and sets the other N IoT devices as the receiving side, and sequentially performs time-division sensing on these sensing pairs (first sensing signals).

[0054] As shown in FIG. 9, the central control device 130 sequentially selects the first three sets of sensing pairs having a common IoT device. The first set is A:D and C:D, the second set is B:C, and the third set is A:B. Taking the common IoT device of the first set (i.e., IoT device D) as the transmitting side, and IoT devices A and C as the receiving sides, taking the common IoT device of the second set (i.e., IoT device C) as the transmitting side, and IoT device B as the receiving side, taking the common IoT device of the third set (i.e., IoT device B) as the transmitting side, and IoT device A as the receiving side. The sensing pairs A:D, C:D, B:C, and A:B perform sensing in sequential time division and continuously generate a first sensing signal (e.g., RSSI value).

[0055] The central control device 310 continuously monitors the first sensing signal and determines whether the first sensing signal satisfies a first intrusion condition. The first intrusion condition can be that the number of times the characteristics of the sensing pair exceed a threshold (e.g., RSSI value is -60) is greater than an allowable value (e.g., 5 times).

[0056] When the central control device 310 determines that the first sensing signal satisfies the first intrusion condition, it marks the first pair with a first status code, and otherwise marks it with a second status code (step S560). The first status code can be value 1, and the second status code can be value 0. The edge connecting the two nodes is regarded as the first pair. Marking the first pair with the first status code or the second status code means marking the edge of the two nodes with the first status code or the second status code.

[0057] FIG. 10 is a schematic diagram of marking the first pair with the first status code or the second status code according to an embodiment of the present invention.

[0058] The marking of the sensing pairs A:D, C:D, B:C, and A:B by the central control device 310 is as shown in FIG. 10. After a certain sensing period, 1 (the first status code) is marked on the sensing pairs A:B and B:C, and 0 (the second status code) is marked on the sensing pairs A:D and C:D.

[0059] Based on the pair nodes of a plurality of first pairs, the central control device 310 respectively counts the first status code and the second status code of the plurality of first pairs to which each pair node belongs, and determines whether there is an intrusion situation in the spatial position (step S570). The central control device 310 counts the status codes of the first pairs to which each pair node belongs, and determines the spatial positions where the pair nodes are located under three conditions: no intrusion situation, presence of intrusion situation, or suspicion of intrusion situation.

[0060] In one embodiment, when the second status code is marked on one of the first pairs to which the pair node belongs (the first condition), the central control device 310 determines that there is no intrusion situation in the spatial position where the pair node is located. When the first status code is marked on all the first pairs to which the pair node belongs, and furthermore, there is a pair with the second status code among the plurality of adjacent pairs to which the other pair node of a certain pair among the plurality of first pairs to which this pair node belongs belongs (the second condition), the central control device 310 determines that there is an intrusion situation in the spatial position where this pair node is located. In the case of the remaining conditions (the third condition) excluding the first condition and the second condition, the central control device 310 determines that there is suspicion of an intrusion situation in the spatial position where the pair node is located.

[0061] For example, the pair node A (i.e., IoT device A) has two sensing pairs A:B and A:D. As shown in FIG. 10, the first status code is marked on the sensing pair A:B, and the second status code is marked on the sensing pair A:D. Therefore, the central control device 310 counts that the above first pair of the pair node A has two types of status codes (1 and 0) (the first condition), and determines that there is no intrusion situation in the spatial position where the IoT device A is located. Similarly, it is determined that there is no intrusion situation in the spatial positions where the IoT devices C and D are located.

[0062] As another example, the pair node B (i.e., IoT device B) has two sensing pairs A:B and B:C. As shown in FIG. 10, the first status code is marked on both the sensing pairs A:B and B:C, and the second status code is marked on the sensing pair A:D (adjacent pair) to which the other pair node A of one of the sensing pairs A:B belongs (the second condition). That is, in the sensing pair A:B, when the IoT device B is the pair node, the IoT device A is the other pair node. Therefore, the central control device 310 determines that there is an intrusion situation in the spatial position where the IoT device B is located. Considering the IoT device C as a pair node, the IoT device C has two sensing pairs C:B and C:D. As shown in FIG. 10, the first status code is marked on the sensing pair C:B, and the second status code is marked on the sensing pair C:D. Since there is a sensing pair C:D marked with the second status code (the first condition) among the sensing pairs belonging to the pair node C, the central control device 310 determines that there is no intrusion situation in the spatial position where the IoT device B is located.

[0063] In one embodiment, before obtaining a plurality of first pairs whose characteristics satisfy a first characteristic condition from a sensing pair list (step S540) (that is, before the central control device 310 obtains Table 1 from a plurality of sensing pairs that are pairs in FIGS. 6 to 8), as shown in Table 3, the central control device 310 sorts the characteristics of each sensing pair in the sensing pair list (Table 1) in ascending order, and obtains a plurality of second pairs based on the characteristics that satisfy a second characteristic condition. The second characteristic condition may be smaller than a threshold value for a long distance (for example, 10 meters) (for example, an RSSI value of -60).

[0064]

Table 3

[0065] Refer to FIG. 11, which is a schematic diagram of a second pair according to an embodiment of the present invention.

[0066] In one embodiment, when there are no obstacles and the power of the transmitting side is fixed, the intensity of the sensing signal is in a correspondence relationship with the distance transferred to the receiving side. For example, the farther the distance, the weaker the sensing signal.

[0067] In order to hold sensing pairs that are far apart between IoT devices, the central control device 310 retains sensing pairs that satisfy a second characteristic condition (for example, an RSSI value smaller than -60) as second pairs (for example, sensing pairs B:D and A:C). That is, the central control device 310 preferentially detects, as sensing pairs, pairs that are far apart among IoT devices A, B, C, and D from six sets of sensing pairs (that is, detects sensing pairs A:C and B:D) and performs monitoring.

[0068] The central control device 310 schedules a plurality of IoT devices 330 belonging to a plurality of second pairs to transmit signals so as to obtain second sensing signals of each second pair. For example, the central control device 310 continuously obtains the second sensing signals of sensing pairs B:D and A:C in a time-division manner.

[0069] In one embodiment, the central control device 310 continuously detects whether the second sensing signal satisfies a first abnormal condition. When it is determined that the second sensing signal does not satisfy the first abnormal condition, the central control device 310 continuously acquires and detects the second sensing signal. The first abnormal condition can be that the number of times exceeding a threshold value (for example, the RSSI value is -60) is greater than an allowable value (for example, 5 times).

[0070] Refer to FIG. 12, which is a schematic diagram of the characteristics of the second sensing signal and the sampling time according to an embodiment of the present invention.

[0071] As shown in FIG. 12, all five second sensing signals of the sensing pair B:D exceed the threshold value Thr_BD at least 5 times. The central control device 310 determines that the second sensing signal of the sensing pair B:D satisfies the first abnormal condition.

[0072] In one embodiment, when it is determined that the second sensing signal satisfies the first abnormal condition, the central control device 310, as shown in Table 4, rearranges the characteristics of each sensing pair in descending order from the sensing pair list (that is, Table 1 obtained by the central control device 310 from a plurality of sensing pairs that are pairs in FIGS. 6 to 8), and acquires a plurality of third pairs based on the characteristics that satisfy the third characteristic condition. The third characteristic condition can be that it is greater than a threshold value for a short distance (for example, 4 meters) (for example, the RSSI value is -40).

[0073]

Table 4

[0074] Refer to FIG. 13, which is a schematic diagram of the third pair according to an embodiment of the present invention.

[0075] The central control device 310 retains sensing pairs that are close to each other among the IoT devices, and thus retains sensing pairs that satisfy a third characteristic condition (for example, an RSSI value greater than -40) as third pairs (for example, sensing pairs A:D and B:C). That is, when detecting a potential intrusion possibility in a long-distance sensing pair, the central control device 310 further detects sensing pairs that are close to each other in IoT devices A, B, C, and D from the six pairs of sensing pairs (that is, detects sensing pairs A:C and B:D) and performs monitoring.

[0076] The central control device 310 schedules a plurality of IoT devices 330 belonging to a plurality of third pairs and transmits signals to cause them to acquire third sensing signals of each third pair. For example, the central control device 310 continuously acquires the third sensing signals of sensing pairs A:C and B:D in a time-division manner.

[0077] In one embodiment, the central control device 310 continuously detects whether the third sensing signal satisfies a second abnormal condition. When it is determined that the third sensing signal does not satisfy the second abnormal condition, the central control device 310 continuously acquires and detects the third sensing signal. The second abnormal condition can be that the number of times exceeding a threshold value (for example, an RSSI value of -40) is greater than an allowable value (for example, 5 times).

[0078] Note that the central control device 310 may set one or more threshold values when a person is present (for the first abnormal condition and the second abnormal condition) or one or more threshold values when no person is present.

[0079] In another embodiment, the first abnormal condition and / or the second abnormal condition can be that the second sensing signals of H sensing pairs are greater than the threshold value continuously for L times, where H and L are positive integers.

[0080] In another embodiment, the H sensing pairs can be divided into G groups. The first abnormal condition and / or the second abnormal condition can be that the second sensing signals of the S groups among the G groups are greater than the threshold value for L consecutive times, where G and S are positive integers and S is less than or equal to G.

[0081] Refer to FIG. 14, which is a schematic diagram of the characteristics of the third sensing signal and the sampling time according to an embodiment of the present invention.

[0082] As shown in FIG. 14, all five third sensing signals of the sensing pair B:C exceed the threshold value Thr_BC by at least five times. The central control device 310 determines that the third sensing signal of the sensing pair B:C satisfies the second abnormal condition.

[0083] In one embodiment, when it is determined that the third sensing signal satisfies the second abnormal condition, the central control device 310 acquires a plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list (Table 1) (step S540), and dynamically schedules the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to transmit signals (step S550).

[0084] In one embodiment, in the step of acquiring a plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list (step S540), the central control device 310 counts the number of sensing pairs of each IoT device 330 from the plurality of sensing pairs, arranges the plurality of sensing pairs in descending order of the number of sensing pairs, and updates the sensing pair list according to the arranged plurality of sensing pairs and the characteristics of each sensing pair. The central control device 310 acquires a plurality of first pairs as the characteristics that satisfy the first condition from the updated sensing pair list.

[0085] After the central control device 310 arranges the content of Table 1 in descending order, the content of Table 5 is obtained.

[0086]

Table 5

[0087] The central control device 310 filters sensing pairs whose characteristics are smaller than the threshold value (RSSI value is -60), calculates the number of each sensing pair, and the results are shown in Table 6.

[0088]

Table 6

[0089] Then, based on the maximum number of sensing pairs, the central control device 310 selects all the sensing pairs of the IoT device with the maximum number of sensing pairs. In this embodiment, the central control device 310 selects all the sensing pairs A:B and A:D of the IoT device A, updates the sensing pair list, and the results are shown in Table 7.

[0090]

Table 7

[0091] Based on the unarranged sensing pairs in Table 7, the central control device 310 updates the number of sensing pairs, and the results are shown in Table 8.

[0092]

Table 8

[0093] The central control device 310 selects all the sensing pairs B:C and C:D of the IoT device C with the maximum number of sensing pairs, updates the sensing pair list, and the results are shown in Table 9.

[0094]

Table 9

[0095] Then, the central control device 310 executes time-division dynamic sensing pairs based on the sorted sensing pairs in Table 9, and the results are shown in Table 10.

[0096]

Table 10

[0097] Note that the time-division dynamic sensing pairs in Table 10 are detailed time-division embodiments of the first pair in Table 2.

[0098] The central control device 310 sets the sensing times of IoT devices A, B, C, and D based on the time-division dynamic sensing schedule. For example, the execution time procedures of the time-division dynamic sensing pairs of IoT devices A, B, C, and D are sensing pairs A:B, A:D, B:C, and C:D, respectively.

[0099] In one embodiment, before obtaining a plurality of sensing pairs from combinations of pairs of a plurality of IoT devices 330 (step S510), the central control device 310 detects the device identification codes of the plurality of IoT devices 330. Then, the central control device 310 sets a sensing schedule (for example, the content illustrated in FIGS. 6 to 8) for the plurality of IoT devices 330 based on the device identification codes, and during the process in which the plurality of IoT devices 330 alternately play the roles of devices in the sensing schedule for transmission and reception, a plurality of sensing pairs (for example, Table 1) of the plurality of IoT devices are obtained. The role of the device can be the STA mode, the AP mode, or the sniffer mode.

[0100] FIGS. 15, 16A, and 16B are flowcharts of an intrusion detection method according to another embodiment of the present invention.

[0101] In step S1505, the central control device 310 obtains a plurality of sensing pairs from combinations of pairs of a plurality of IoT devices 330.

[0102] In step S1510, the central control device 310 causes a signal to be sent to a plurality of IoT devices 330 so as to acquire the characteristics of a plurality of sensing pairs.

[0103] In step S1515, the central control device 310 creates a sensing pair list including a plurality of sensing pairs and the characteristics of each sensing pair.

[0104] In step S1520, the central control device 310 acquires a plurality of second pairs from the sensing pair list based on the characteristics that satisfy the second characteristic condition.

[0105] In step S1525, the central control device 310 causes a signal to be sent to a plurality of IoT devices 330 belonging to the second pairs so as to acquire the second sensing signals of each second pair.

[0106] In step S1530, the central control device 310 determines whether the second sensing signal satisfies the first abnormal condition. If so, step S1535 is executed; if not, the process returns to step S1525.

[0107] In step S1535, the central control device 310 acquires a plurality of third pairs from the sensing pair list based on the characteristics that satisfy the third characteristic condition.

[0108] In step S1540, the central control device 310 causes a signal to be sent to a plurality of IoT devices 330 belonging to the third pairs so as to acquire the third sensing signals of each third pair.

[0109] In step S1545, the central control device 310 determines whether the third sensing signal satisfies the second abnormal condition. If so, step S1550 is executed; if not, the process returns to step S1525.

[0110] In step S1550, the central control device 310 acquires a plurality of first pairs from the sensing pair list, where the characteristics of the first pairs satisfy the first characteristic condition.

[0111] In step S1555, the central control device 310 dynamically schedules the transmission and reception of a plurality of IoT devices 330 belonging to the plurality of first pairs in a time-division manner to continuously acquire the first sensing signals of each first pair.

[0112] In step S1560, the central control device 310 determines whether the first sensing signal satisfies the first intrusion condition. If so, it executes step S1570; if not, it executes step S1565.

[0113] In step S1565, the central control device 310 marks the second status code on the first pair.

[0114] In step S1570, the central control device 310 marks the first status code on the first pair.

[0115] In step S1575, the central control device 310 counts the first status codes of the first pairs to which each pair node belongs. Based on the statistics of the status codes of the plurality of first pairs, the central control device 310 determines the intrusion situation according to the following three conditions (steps S1580, S1585, and S1590).

[0116] In step S1580, the central control device 310 determines that at least one of the plurality of first pairs to which the pair node belongs has the second status code. Then, in step S1582, the central control device 310 determines that there is no intrusion situation at the spatial position to which the pair node belongs.

[0117] In step S1585, the central control device 310 determines that all of the plurality of first pairs to which the pair node belongs have a first status code, and that among the plurality of adjacent pairs to which the other pair node of a certain pair among the plurality of first pairs belongs, there is a pair node with a second status code. Then, in step S1587, the central control device 310 determines that there is an intrusion situation at the spatial position to which the pair node belongs.

[0118] In step S1590, the central control device 310 determines that it is a condition other than steps S1580 and S1585. Then, in step S1592, the central control device 310 determines that there is suspicion of an intrusion situation at the spatial position to which the pair node belongs.

[0119] FIG. 17 is a schematic diagram of IoT devices provided in a certain application scenario according to another embodiment of the present invention.

[0120] The application scenario of FIG. 17 has five IoT devices provided (that is, an IoT device E is separately provided at the corner of the toilet 113) compared to the application scenario where the four IoT devices of FIG. 4 are provided.

[0121] FIG. 18 is a schematic diagram of a plurality of sensing pairs obtained in the application scenario of FIG. 17 according to the present invention.

[0122] The central control device 310 sets a sensing schedule for IoT devices A to E in the same manner as described in FIGS. 6 to 8, causing IoT devices A to E to alternately assume the roles of the devices. In one embodiment, the order of the AP modes is IoT devices E, D, C, and B. For example, in the first period T1, the IoT device E in AP mode receives the sensing signals of IoT devices A, B, C, and D in a time-division manner. In the second period T2, the IoT device D in AP mode receives the sensing signals of IoT devices A, B, and C in a time-division manner. In the third period T3, the IoT device C in AP mode receives the sensing signals of IoT devices A and B in a time-division manner. In the fourth period T4, the IoT device B in AP mode receives the characteristics of the sensing signal of IoT device A (steps S1505 to S1510).

[0123] The central control device 310 receives the characteristics of the sensing signals of 10 sets of sensing pairs, creates a sensing pair list (step S1515), and the results are shown in Table 11.

[0124]

Table 11

[0125] The central control device 310 acquires the channel information between two IoT devices as the characteristics of the sensing signals of the sensing pairs via the Wi-Fi wireless sensor system. In one embodiment, in one set of IoT devices 330 (the two IoT devices are the transmitting side and the receiving side respectively), when the transmission power of the transmitting-side IoT device is specified, the receiving-side IoT device acquires the RSSI value. In this embodiment, the characteristics of the two IoT sensing signals are the RSSI average values.

[0126] In one embodiment, the central control device 310 can acquire characteristic D using calculation formula (1).

[0127]

Equation

[0128] In Equation (1), D is a characteristic, and d i is the i-th RSSI characteristic value, and w i is the weight of the i-th RSSI characteristic value.

[0129] The RSSI characteristic value can be set to 1 when K% of the RSSI measurement values received by the receiving IoT device are greater than a threshold value, and 0 otherwise, but it is not limited thereto. Here, K is a positive integer.

[0130] In another embodiment, when the transmission power of the transmitting IoT device and the subcarrier are specified, the receiving IoT device acquires CSI information. In this embodiment, the characteristic can be the CSI average value.

[0131] In another embodiment, the central control device 310 can acquire the characteristic D using Equation (2).

[0132]

Equation

[0133] In Equation (2), D is a characteristic, and d i is the i-th CSI characteristic value, and w i is the weight of the i-th CSI characteristic value.

[0134] The CSI characteristic value can be, but is not limited to, the maximum value, minimum value, standard deviation or average value of the CSI amplitudes of several sets of sub-carriers, the value obtained by adding the standard deviation of N1 CSI amplitudes to the average value of the CSI amplitudes, or the value obtained by subtracting the standard deviation of N2 CSI amplitudes from the average value of the CSI amplitudes, the differential average value of several consecutive CSI amplitudes, the number of packets (including CSI information) obtained per unit time, the CSI phase of a predetermined sub-carrier, or the differential average value of the CSI phases of consecutive sub-carriers. Here, N1 and N2 are positive integers.

[0135] In one embodiment, in one set of IoT devices 330 (the two IoT devices are the transmitting side and the receiving side respectively), the transmitting-side IoT device transmits M measurement data packets, and the receiving-side IoT device receives m data packets, where M and m are positive integers. In this embodiment, the central control device 310 can obtain characteristic D using formula (3).

[0136] D = mj / Mj......Formula (3)

[0137] In formula (3), D is a characteristic, mj is the number of data packets received by the receiving side of the j-th sensing pair, and Mj is the number of measurement data packets transmitted by the transmitting side of the j-th sensing pair.

[0138] The central control device 310 sorts the characteristics of each sensing pair in ascending order from the sensing pair list (Table 11) to obtain the first sorted sensing pair list, and obtains a plurality of second pairs (step S1520) based on the characteristics that satisfy the second condition, and the result is shown in Table 12. The second characteristic condition can be that it is smaller than the threshold value (for example, RSSI value is -56) for a long distance (for example, 10 meters).

[0139]

Table 12

[0140] FIG. 19 is a schematic diagram of a second pair according to an embodiment of the present invention.

[0141] In this embodiment, the central control device 310 preferentially detects, as sensing pairs, pairs that are far apart among the IoT devices A, B, C, and D from among the 10 sets of sensing pairs (that is, it detects the sensing pairs A:B, A:C, B:D, and C:D), and performs monitoring (step S2520).

[0142] The central control device 310 sets a sensing schedule for the IoT devices A, B, C, and D, causes the IoT devices A, B, C, and D to each assume the role of a certain device, and executes pair sensing, and acquires sensing signals of four sets of sensing pairs. For example, in the first period, the central control device 310 sets IoT devices A and B to the STA mode and IoT devices C and D to the AP mode. Here, IoT device A is connected to IoT device C (on channel 36), and IoT device B is connected to IoT device D (on channel 44). In the second period, the central control device 310 sets IoT devices A and C to the STA mode and IoT devices B and D to the AP mode. Here, IoT device A is connected to IoT device B (on channel 40), and IoT device C is connected to IoT device D (on channel 48). After the arrangement is completed, the central control device 310 acquires second sensing signals of the sensing pairs A:C, B:D, A:B, and C:D every 0.5 seconds (step S1525).

[0143] The central control device 310 continuously determines whether the second sensing signal satisfies a first abnormal condition. For example, the first abnormal condition is that the second sensing signal of any second sensing pair exceeds the threshold value five times in a row. When the central control device 310 determines within 2 seconds that the number of times the second sensing signal exceeds the threshold value is five times in a row, it determines that there is a potential intrusion.

[0144] In steps S1520 to S1530, the central control device 310 determines whether there is a potential for intrusion using long-distance sensing pairs, and performs preliminary intrusion detection (determines the presence or absence of people) in a wide area of long distance.

[0145] When the central control device 310 determines that there is no potential for intrusion (step S1530), it returns to the step of continuously acquiring and detecting the second sensing signal in order to continue monitoring (step S1525).

[0146] When the central control device 310 determines that there is a potential for intrusion (step S1530), it acquires a plurality of third pairs from the sensing pair list (Table 11) based on the characteristics that satisfy the third characteristic condition (step S1535).

[0147] In one embodiment, the central control device 310 rearranges the characteristics of each sensing pair in descending order from the sensing pair list (Table 11) to obtain a second sorted sensing pair list, sets the sensing pairs whose characteristics satisfy the third characteristic condition as the third pairs, and the result is shown in Table 13. The third characteristic condition may be greater than a threshold value (for example, an RSSI value of -40) at a short distance (for example, 4 meters).

[0148]

Table 13

[0149] Refer to FIG. 20, which is a schematic diagram of the third pair according to an embodiment of the present invention.

[0150] Referring to Table 13, FIG. 20 is the third pair among a plurality of IoT devices in an application scenario. While FIG. 19 is a long-distance sensing pair (the second pair), FIG. 20 is a sensing pair (the third pair) located close to each other among IoT devices. In this embodiment, the central control device 310 leaves the sensing pairs that satisfy the third characteristic condition (for example, the RSSI value is greater than -40) as the third pair (for example, sensing pairs A:D, A:E, B:C, and D:E). That is, when it is detected that there is a potential possibility of intrusion in the long-distance sensing pair, the central control device 310 further detects, from the 10 sets of sensing pairs, the closer ones among IoT devices A, B, C, D, and E as the sensing pairs (that is, detects sensing pairs A:D, A:E, B:C, and D:E) and performs monitoring (step S1535).

[0151] The central control device 310 sets a sensing schedule for IoT devices A, B, C, D, and E, assigns the role of a certain device to each of IoT devices A, B, C, D, and E to perform paired sensing, and acquires the sensing signals of 4 sets of sensing pairs. For example, in the first period, the central control device 310 sets IoT devices A, B, and D to the STA mode and IoT devices C and E to the AP mode. Here, IoT device A is connected to IoT device E (on channel 36), IoT device D is connected to IoT device E (on channel 44), and IoT device B is connected to IoT device C (on channel 48). In the second period, the central control device 310 sets IoT device A to the STA mode and IoT device D to the AP mode. Here, IoT device A is connected to IoT device D (on channel 52). After the arrangement is completed, the central control device 310 acquires the third sensing signals of the sensing pairs A:E, D:E, B:C, and A:D every 0.5 seconds (step S1540).

[0152] The central control device 310 continuously determines whether the third sensing signal satisfies a second abnormal condition. For example, the second abnormal condition is that the third sensing signals of any third sensing pair exceed a threshold value five times in a row. When the central control device 310 determines within 2 seconds that the number of times the third sensing signal exceeds the threshold value is five times in a row, it determines that an intruder is within the range of a specific sensing pair.

[0153] In steps S1535 to S1540, the central control device 310 uses short-distance sensing pairs to confirm the range of the intruder. In one embodiment, the central control device 310 can pre-define the spatial positions of all sensing pairs of IoT devices A, B, C, D, and E in the application scenario. For example, the sensing pair A:D is on the left side of bedroom 111 and living room 117, the sensing pair B:C is on the right side of bedroom 115 and living room 117, and the sensing pair B:E is between toilet 113 and bedroom 115. Therefore, the central control device 310 can determine the intrusion range by detecting the third pair that satisfies the second abnormal condition.

[0154] The central control device 310 obtains a plurality of first pairs whose characteristics satisfy the first condition from the sensing pair list (Table 13) (step S1550), and the results are shown in Table 14. The first characteristic condition can be greater than the RSSI or CSI corresponding to the first distance, or greater than the default ping value.

[0155]

Table 14

[0156] In one embodiment, the central control device 310 sets a time-division dynamic schedule for IoT devices A, B, C, D, and E.

[0157] First, the central control device 310 counts the number of first pairs of each IoT device from a plurality of first pairs (Table 14), and the results are shown in Table 15.

[0158]

Table 15

[0159] Then, based on the maximum number of sensing pairs, the central control device 310 selects all the sensing pairs of the IoT device with the maximum number of sensing pairs. In this embodiment, the central control device 310 selects all the sensing pairs A:E, B:E, C:E, and D:E of the IoT device E, updates the sensing pair list, and the results are shown in Table 16.

[0160]

Table 16

[0161] Based on the sensing pairs that were not sorted in Table 16, the central control device 310 updates the number of sensing pairs, and the results are shown in Table 17.

[0162]

Table 17

[0163] The central control device 310 selects all the sensing pairs A:B and A:D of the IoT device A with the maximum number of sensing pairs, updates the sensing pair list, and the results are shown in Table 18.

[0164]

Table 18

[0165] Since there are still sensing pairs that could not be sorted, the central control device 310 updates the number of sensing pairs based on the unsorted sensing pairs in Table 18, as shown in Table 19.

[0166]

Table 19

[0167] The central control device 310 selects all the sensing pairs B:C and C:D of the IoT device C with the largest number of sensing pairs, updates the sensing pair list, and the result is shown in Table 20.

[0168]

Table 20

[0169] At this point, the sorting of all sensing pairs is completed. Subsequently, the central control device 310 executes time-division dynamic sensing pairs based on the sorted sensing pairs in Table 20, and the result is shown in Table 21.

[0170]

Table 21

[0171] Note that the time-division dynamic sensing pairs in Table 21 are the detailed time-division implementation forms of the first pair in Table 14.

[0172] The central control device 310 sets the sensing times of the IoT devices A, B, C, D, and E based on the time-division dynamic sensing schedule.

[0173] Refer to Figure 21, which is a schematic diagram of the sensing pairs of the IoT device E set in the AP mode in the first period.

[0174] In the first period T1, since the IoT device E is a common sensing device, it is set to the AP mode as the transmitting side. The other sensing devices of the first pair of common sensing devices, namely the IoT devices A, B, C, and D paired with the IoT device E, execute sensing alternately with the IoT device E in sequence based on the time-division dynamic sensing schedules T1.1, T1.2, T1.3, and T1.4. For example, the IoT devices A, B, C, and D transmit signals to the IoT device E at the specified transmission power respectively (the first sensing signal).

[0175] Refer to FIG. 22, which is a schematic diagram of the sensing pair of the IoT device A set to the AP mode in the second period.

[0176] In the second period T2, since the IoT device A is a common sensing device, it is set to the AP mode as the transmitting side. The other sensing devices of the first pair of common sensing devices, namely the IoT devices B and D paired with the IoT device A, execute sensing alternately with the IoT device A in sequence based on the time-division dynamic sensing schedules T2.1 and T2.2. For example, the IoT devices B and D transmit signals to the IoT device A at the specified transmission power respectively (the first sensing signal).

[0177] Refer to FIG. 23, which is a schematic diagram of the sensing pair of the IoT device C set to the AP mode in the third period.

[0178] In the third period T3, since the IoT device C is a common sensing device, it is set to the AP mode as the transmitting side. The other sensing devices of the first pair of common sensing devices, namely the IoT devices B and D paired with the IoT device C, execute sensing alternately with the IoT device C in sequence based on the time-division dynamic sensing schedules T3.1 and T3.2. For example, the IoT devices B and D transmit signals to the IoT device C at the specified transmission power respectively (the first sensing signal).

[0179] The central control device 310 dynamically schedules the transmission and reception of a plurality of IoT devices belonging to a plurality of first pairs in a time-division manner, and continuously acquires the first sensing signals of each first pair (step S1555). The central control device 310 continuously determines whether the first sensing signal of any first pair satisfies the intrusion suspicion condition (step S1560). The intrusion suspicion condition can be that the number of times the characteristics of the sensing pair exceed a certain threshold value (for example, the RSSI value is -60) is greater than the allowable value (for example, 5 times).

[0180] When it is determined that the first sensing signal satisfies the intrusion suspicion condition (step S1560), the first pair that satisfies the intrusion suspicion condition is marked with a first status code (step S1570), and if not, the first pair that does not satisfy the intrusion suspicion condition is marked with a second status code (step S1565).

[0181] FIG. 24 is a schematic diagram for marking all the first pairs according to an embodiment of the present invention.

[0182] In one embodiment, the first status code is the value 1, and the second status code is the value 0.

[0183] In the application scenario, a plurality of IoT devices A, B, C, D, and E are arranged. At a certain monitoring time point, the central control device 310 counts the first status codes of the first pairs to which each pair node belongs (step S1575). For example, the central control device 310 counts the values (the first status code or the second status code) of each edge (the first pair) of the IoT devices A, B, C, D, and E (pair nodes), respectively.

[0184] When the central control device 310 determines that at least one pair among a plurality of first pairs to which each pair node belongs has a second status code (step S1580), it determines that there is no intrusion situation at the spatial position to which the pair node belongs (step S1582).

[0185] When the central control device 310 determines that all of a plurality of first pairs to which each pair node belongs have a first status code and there is a pair node with a second status code among a plurality of adjacent pairs to which the other pair node of a certain pair among the plurality of first pairs belongs (step S1585), it determines that there is an intrusion situation at the spatial position to which the pair node belongs (step S1857).

[0186] When the central control device 310 determines that each pair node satisfies other conditions than those in steps S1580 and S1585 (step S1590), it determines that there is suspicion of an intrusion situation at the spatial position to which the pair node belongs (step S1592).

[0187] In one embodiment, the central control device 310 uses the above-described three conditions (step S570 in FIG. 5 or steps S1580, S1585, and S1590 in FIG. 16) to determine the spatial position where the pair node is located as having no intrusion situation, having an intrusion situation, or having suspicion of an intrusion situation.

[0188] As shown in FIG. 24, the values of the three edges of the pair node C (i.e., the IoT device C) are X (sensing pair C:B), 1 (sensing pair C:E), and 1 (sensing pair C:D), respectively.

[0189] When the X value of the sensing pair C:B is 0, there is one first pair (i.e., the sensing pair C:B) marked with a second status code for the pair node C (the first condition: at least one pair among a plurality of first pairs to which a certain pair node belongs is marked with a second status code). Therefore, the central control device 310 determines that there is no intrusion situation within the range of the spatial position of the IoT device A.

[0190] When the X value of the sensing pair C:B is 1, the values of the three edges of the pair node C (i.e., IoT device C) are all 1, which means that the first status code is marked on all the first pairs of the pair node C. Here, for a certain pair among the three first pairs of the pair node C, for example, for the other pair node B of the first pair B:C, there are three first pairs, and among these three first pairs (sensing pairs B:A, B:E, and B:C), there is a pair B:A marked with the second status code (the second condition: the first status code is marked on all the first pairs to which a certain pair node belongs, and among the multiple adjacent pairs to which the other pair node of a certain pair among the multiple first pairs to which this pair node belongs belongs, there is a pair with the second status code). Therefore, the central control device 310 determines that there is an intrusion situation within the range of the spatial position of the IoT device C.

[0191] When the central control device 310 determines that each pair node does not satisfy the above first condition or second condition (the third condition), this means that there is suspicion of an intrusion situation at the spatial position where the pair node is located.

[0192] After the central control device 310 determines the status codes of all the first pairs of all the pair nodes A, B, C, D, and E, it obtains the result that there was an intrusion at the position of the right corner range (IoT device C) of the living room 117. Therefore, the central control device 310 issues a warning signal and notifies the user of the area where the intruder was discovered.

[0193] FIG. 25 is a schematic diagram for marking all the first pairs according to another embodiment of the present invention.

[0194] The central control device 310 determines the status codes of all the first pairs of all the peernodes A, B, C, D, and E. In this embodiment, the central control device 310 determines that the first status code (i.e., value 1) is marked for all the first pairs of the peernodes A and C respectively. Therefore, the central control device 310 respectively detects that there has been an intrusion at the positions of the right corner ranges (IoT device C) of the bedroom 111 and the living room 117.

[0195] Regardless of the number of IoT devices in the application scenario, the central control device 310 can detect the possibility of the presence of an intruder between 0 and T by determining whether the status codes of all the first pairs of each peernode are the first status code, where T is the number (a positive integer) of IoT devices installed in the application scenario.

[0196] FIG. 26 is a block diagram of a central control device according to an embodiment of the present invention.

[0197] The central control device 310 includes a communication module 312, a processor 314, and a storage medium 316. The processor 314 is connected to the communication module 312 and the storage medium 316 respectively.

[0198] The storage medium 316 stores a plurality of program codes including a function peernode selection module 322, a sensing data collection module 324, and a sensing result calculation module 326. When the plurality of program codes are loaded into the processor 314, the processor 314 executes the peernode selection module 322, the sensing data collection module 324, and the sensing result calculation module 326.

[0199] The peernode selection module 322 arranges the device roles of each IoT device 330 and the sensing pairs between the plurality of IoT devices 330.

[0200] The sensing data collection module 324 collects the sensing signals received by each IoT device 330 as sensing pairs and acquires the characteristics of the sensing signals.

[0201] The sensing result calculation module 326 is for calculating the intrusion detection situation in the application scenario.

[0202] Figure 27 is a block diagram of an IoT device according to an embodiment of the present invention.

[0203] The IoT device 333 includes a communication module 332, a processor 334, and a storage medium 336. The processor 334 is connected to the communication module 332 and the storage medium 336 respectively.

[0204] The storage medium 336 stores a plurality of program codes including a function configuration module 342, a pairing module 344, and a sensing data feedback module 346. When the plurality of program codes are loaded into the processor 334, the processor 334 executes the configuration module 342, the pairing module 344, and the sensing data feedback module 346.

[0205] The IoT device 333 can be connected to other IoT devices and the central control device 310 via the communication module 332.

[0206] The configuration module 342 is for performing configuration using the sensing schedule information transmitted by the central control device 310.

[0207] The pairing module 344 is for performing sensing pairs between other IoT devices based on the configuration settings.

[0208] The sensing data feedback module 346 is for measuring the sensing signal and feeding back the sensing signal to the central control device 310 via the communication module 332.

[0209] In one embodiment, the communication modules 312 and 332 are, for example, communication chips corresponding to Global System for Mobile communication (GSM), Long Term Evolution (LTE), fifth generation (5G) network systems, Wireless Fidelity (Wi-Fi), Bluetooth technology, wired networks, or combinations thereof, but are not limited thereto.

[0210] In one embodiment, the processors 314 and 334 are, for example, microprocessors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Central Processing Units (CPUs), System on Chips (SoCs), Field Programmable Gate Arrays (FPGAs), Network Processor chips, or combinations thereof, but are not limited thereto.

[0211] In one embodiment, the storage media 316 and 336 are, for example, Random Access Memory (RAM), Flash memory, Read Only Memory (ROM), Hard Disk Drives (HDDs), Solid State Drives (SSDs), optical storage devices, or combinations thereof, but are not limited thereto.

[0212] In summary, the intrusion detection system and method according to the present invention do not limit the pairing mode of the sensing devices, and any sensing device can be incorporated into the intrusion detection nodes. Therefore, the technology of the present invention solves the problems of limited detection range and detection dead zones without expanding the hardware cost.

[0213] Furthermore, the technology of the present invention combines long-distance sensing pairs and short-distance sensing pairs. First, the long-distance sensing pairs are used to initially determine the potential intrusion situation (the presence or absence of intruders) in a wide range. If a potential intrusion situation is determined, the position of the intruder is further determined within a smaller range, thereby solving the problem of response time delay and improving the accuracy of intrusion detection.

[0214] The above description is only a specific example of the present invention and does not limit the scope of the claims of the present invention. Therefore, any equivalent modifications using the content of the present invention are equally included in the scope of the present invention and are described herein.

Description of Reference Numerals

[0215] 123: Spatial range 111: Bedroom 113: Toilet 115: Bedroom 117: Living room 300: Intrusion detection system 310: Central control device 330: IoT device 350: Communication network 312, 332: Communication module 314, 334: Processor 316, 336: Storage medium 322: Pair selection module 324: Sensing data collection module 326: Sensing result calculation module 342: Configuration module 344: Pairing module 346: Sensing data feedback module A, B, C, D, E: IoT devices Thr_AC, Thr_BD, Thr_AC, Thr_BD: Threshold values S510~S570, S1505~S1592: Steps

Claims

1. A plurality of IoT devices (330) each provided at a spatial position and arranged to transmit and receive sensing signals, and A central control device (310) communicatively connected to the plurality of IoT devices (330), which Obtains a plurality of sensing pairs from combinations of pairs of the plurality of IoT devices (330), Causes the plurality of IoT devices (330) to transmit and receive signals in each of the sensing pairs to obtain characteristics of the plurality of sensing pairs, Creates a sensing pair list including the plurality of sensing pairs and characteristics of each of the sensing pairs, Obtains a plurality of first pairs from the sensing pair list whose characteristics satisfy a first characteristic condition, Dynamically schedules the transmission and reception of the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to obtain a first sensing signal for each of the first pairs, When it is determined that the first sensing signal satisfies a condition suspected of intrusion, marks the first pair with a first status code, and otherwise marks it with a second status code, and Based on the pair nodes of the plurality of first pairs, statistically counts the first status code and the second status code of the plurality of first pairs to which the pair nodes belong, and determines whether there is an intrusion situation at the spatial position, A central control device (310) arranged as described above, and an intrusion detection system (300).

2. Before obtaining the plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list, the central control device (310) further Obtains a plurality of second pairs from the sensing pair list based on characteristics that satisfy a second characteristic condition, Causes the plurality of IoT devices belonging to the plurality of second pairs to transmit signals to obtain a second sensing signal for each of the second pairs, Continuously detects whether the second sensing signal satisfies a first abnormal condition, and When it is determined that the second sensing signal does not satisfy the first abnormal condition, continuously obtains and detects the second sensing signal, The intrusion detection system according to claim 1, arranged as described above.

3. When the central control device determines that the second sensing signal satisfies the first abnormal condition, Obtain a plurality of third pairs from the sensing pair list based on characteristics that satisfy a third characteristic condition, transmit a signal to the plurality of IoT devices belonging to the plurality of third pairs so as to obtain a third sensing signal for each of the third pairs, continuously detect whether the third sensing signal satisfies a second abnormal condition, and when it is determined that the third sensing signal does not satisfy the second abnormal condition, continuously obtain and detect the third sensing signal, are arranged as follows, wherein when the central control device determines that the third sensing signal satisfies the second abnormal condition, it obtains the plurality of first pairs from the sensing pair list whose characteristics satisfy the first characteristic condition, and is arranged to dynamically schedule the transmission of the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner. The intrusion detection system according to claim 2.

4. The characteristics of each sensing pair include RSSI, CSI, and ping value. The first characteristic condition is that it is greater than the RSSI or CSI corresponding to a first distance, or greater than the default ping value. The second characteristic condition is that it is less than the RSSI or CSI corresponding to a second distance, or less than the default ping value. The first distance is greater than the second distance. The intrusion detection system according to claim 3.

5. Before the central control device obtains the plurality of second pairs from the sensing pair list based on characteristics that satisfy the second characteristic condition, sort the characteristics of each sensing pair in ascending order based on the plurality of sensing pairs, and create or update the sensing pair list according to the sorted plurality of sensing pairs and the characteristics of each sensing pair. The intrusion detection system according to claim 2 is arranged to include this.

6. The operation of the central control device to obtain the plurality of first pairs from the sensing pair list whose characteristics satisfy the first characteristic condition is Count the number of sensing pairs of each IoT device from the plurality of sensing pairs, sort the plurality of sensing pairs in descending order of the number of sensing pairs, and update the sensing pair list according to the sorted plurality of sensing pairs and the characteristics of each sensing pair, and Obtain the plurality of first pairs whose characteristics satisfy the first characteristic condition from the updated sensing pair list, The intrusion detection system according to claim 1, which is arranged to include.

7. The central control device is arranged to determine the intrusion situation as follows based on the statistics of the status codes of the plurality of first pairs: (1) When at least one of the plurality of first pairs to which the pair node belongs has the second status code, it is determined that there is no intrusion situation at the spatial position where the pair node is located. (2) When all of the plurality of first pairs to which the pair node belongs have the first status code, and among the plurality of adjacent pairs to which the other pair node of a certain pair among the plurality of first pairs belongs, there is a pair with the second status code, it is determined that there is an intrusion situation at the spatial position where the pair node is located. (3) In the remaining cases, it is determined that there is suspicion of an intrusion situation at the spatial position where the pair node is located. The intrusion detection system according to claim 1.

8. The operation of the central control device to obtain the plurality of sensing pairs from the combinations of the plurality of pairs of IoT devices is Detecting the device identification codes of the plurality of IoT devices, and Based on the device identification codes, setting a sensing schedule for the plurality of IoT devices, and obtaining the plurality of sensing pairs of the plurality of IoT devices during the process in which the plurality of IoT devices alternately assume the roles of devices including the station mode, the wireless access mode, and the sniffer mode in the sensing schedule and perform transmission and reception. The intrusion detection system according to claim 1, which is arranged to include.

9. An intrusion detection method applied to a plurality of IoT devices respectively provided at spatial positions and arranged to transmit and receive sensing signals, and a central control device communicatively connected to the plurality of IoT devices and receiving the sensing signals, Obtaining a plurality of sensing pairs from the combinations that are pairs of the plurality of IoT devices; Causing the plurality of IoT devices to transmit and receive signals in each of the sensing pairs; Causing the plurality of sensing pairs to transmit and receive signals so as to obtain characteristics of the plurality of sensing pairs; Creating a sensing pair list including the plurality of sensing pairs and characteristics of each of the sensing pairs; Obtaining a plurality of first pairs whose characteristics satisfy a first characteristic condition from the sensing pair list; Dynamically scheduling the transmission and reception of the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner to obtain first sensing signals of each of the first pairs; When it is determined that the first sensing signal satisfies a suspicious intrusion condition, marking a first status code for the first pair, and otherwise marking a second status code; Based on the pair nodes of the plurality of first pairs, statistically counting the first status code and the second status code of the plurality of first pairs to which the pair nodes belong, and determining whether there is an intrusion situation at the spatial position, an intrusion detection method including.

10. Before the step of obtaining the plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list, Obtaining a plurality of second pairs from the sensing pair list based on characteristics that satisfy a second characteristic condition; Causing the plurality of IoT devices belonging to the plurality of second pairs to transmit signals so as to obtain second sensing signals of each of the second pairs; Continuously detecting whether the second sensing signal satisfies a first abnormal condition; When it is determined that the second sensing signal does not satisfy the first abnormal condition, continuously obtaining and detecting the second sensing signal, the intrusion detection method according to claim 9 including.

11. When it is determined that the second sensing signal satisfies the first abnormal condition, Obtaining a plurality of third pairs from the sensing pair list based on characteristics that satisfy a third characteristic condition; Causing the plurality of IoT devices belonging to the plurality of third pairs to transmit signals so as to obtain third sensing signals of each of the third pairs; Continuously detecting whether the third sensing signal satisfies a second abnormal condition; When it is determined that the third sensing signal does not satisfy the second abnormal condition, continuously acquiring and detecting the third sensing signal; When it is determined that the third sensing signal satisfies the second abnormal condition, acquiring, from the sensing pair list, the plurality of first pairs whose characteristics satisfy the first characteristic condition, and dynamically scheduling the transmission of the plurality of IoT devices belonging to the plurality of first pairs in a time-division manner; The characteristics of each sensing pair include RSSI, CSI, and ping value. The first characteristic condition is that it is greater than the RSSI or CSI corresponding to the first distance, or greater than the default ping value. The second characteristic condition is that it is less than the RSSI or CSI corresponding to the second distance, or less than the default ping value. The first distance is greater than the second distance. The intrusion detection method according to claim 10.

12. Before the step of acquiring the plurality of second pairs from the sensing pair list based on the characteristics that satisfy the second characteristic condition, sorting the characteristics of each sensing pair in ascending order based on the plurality of sensing pairs; creating or updating the sensing pair list according to the sorted plurality of sensing pairs and the characteristics of each sensing pair. The intrusion detection method according to claim 10.

13. The step of acquiring the plurality of first pairs whose characteristics satisfy the first characteristic condition from the sensing pair list includes: counting the number of sensing pairs of each IoT device from the plurality of sensing pairs, sorting the plurality of sensing pairs in descending order of the number of sensing pairs, and updating the sensing pair list according to the sorted plurality of sensing pairs and the characteristics of each sensing pair; acquiring the plurality of first pairs whose characteristics satisfy the first characteristic condition from the updated sensing pair list. The intrusion detection method according to claim 9.

14. Judging the intrusion situation based on the statistics of the status codes of the plurality of first pairs as follows: When at least one pair among the plurality of first pairs to which the pair node belongs has the second status code, it is determined that there is no intrusion situation at the spatial position where the pair node is located. When all of the plurality of first pairs to which the pair node belongs have the first status code, and among the plurality of adjacent pairs to which the other pair node of a certain pair among the plurality of first pairs belongs, there is a pair with the second status code, it is determined that there is an intrusion situation at the spatial position where the pair node is located. (3) In the remaining cases, it is determined that there is suspicion of an intrusion situation at the spatial position where the pair node is located. The intrusion detection method according to claim 9.

15. The step of obtaining the plurality of sensing pairs from combinations that are pairs of the plurality of IoT devices includes: a step of detecting device identification codes of the plurality of IoT devices; Based on the device identification codes, setting a sensing schedule for the plurality of IoT devices, and during the process in which the plurality of IoT devices alternately assume roles of devices including a station mode, a wireless access mode, and a sniffer mode in the sensing schedule and perform transmission and reception, obtaining the plurality of sensing pairs of the plurality of IoT devices. The intrusion detection method according to claim 9.

Images