CN106791627A - Network video surveillance and security alarm integrated system and its security access authentication method - Google Patents

Abstract

The invention relates to a network video monitoring and security alarm integrated system and an authentication method for security access thereof, which comprises a user terminal, a network video monitoring security alarm host, a network camera and a video management cloud platform, wherein the user terminal is connected with the network video monitoring security alarm host through the video management cloud platform, the network video monitoring security alarm host is connected with the network camera, the authentication method is characterized in that an alarm receiving white list number and a network camera password are preset, the video management cloud platform identifies the legality of the user terminal through the alarm receiving white list number, the network video monitoring security alarm host and the network camera identify the legality of the user terminal through the alarm receiving white list number and the password, and the authentication intensity is enhanced through cooperation of the three. By adopting the network video monitoring and security alarm integrated system with the structure and the authentication method for security access thereof, the authentication mechanism of video transmission on the public network is optimized, and the network security is greatly improved.

Description

Network video surveillance and security alarm integrated system and its security access authentication method

technical field

The invention relates to the field of network security, in particular to the field of network camera security, in particular to a network video monitoring and security alarm integration system and a security access authentication method thereof.

Background technique

To access the camera from a remote network device (such as a smartphone, PAD, or computer), it must first obtain the camera’s public network IP address and port number; if it needs to traverse multiple layers of networks, it is necessary to implement NAT between the cloud platform and the camera through software algorithms Penetration, to achieve addressing services. This is the basic condition for realizing remote access to the camera, and may not be directly related to authentication.

Each camera is generally equipped with a unique ID number. When remote network devices (such as smart phones, PADs, computers) etc. access the network camera to obtain video, they need to know the ID number of the camera. This is also the second condition usually required by all network cameras for remote access; this condition may also not consider the issue of user identity authentication.

With the above two conditions, theoretically, the conditions for watching camera video remotely are met. But this will inevitably involve a security issue, especially the transmission of video images on the public network, which is also a key issue that everyone is most concerned about. The conventional conventional authentication method for the identity of the user accessing the camera is generally to set a password inside each camera. This password can usually be modified by the user. When the user remotely accesses the camera and requests to watch the camera video, the password of the camera needs to be submitted at the same time when the request is submitted, and the camera will compare and verify it. If the password is correct, the authentication will pass, and the video stream will be sent to the user to watch; if the password is wrong, the authentication will fail, and the video will be refused to be sent to the user.

This authentication method is relatively simple, and it is also a conventional authentication method currently used by almost all network cameras. Remote access to videos is often carried out on the public network, and the password information may be intercepted, counterfeited, etc., or because the password is relatively simple, it is relatively easy to be cracked. In this way, video information that is originally highly private can be easily stolen illegally on the public network. Such cases are not uncommon at home and abroad. Therefore, we have optimized the authentication mechanism of video transmission on the public network in the "Network Video Surveillance and Security Alarm Integrated System" developed by us, so that its security has been greatly improved.

Contents of the invention

In order to overcome the above-mentioned problems, the present invention proposes a network video monitoring and security alarm integration system and a security access authentication method thereof, which optimize the authentication mechanism of video transmission on the public network and greatly improve the security.

In order to realize the above-mentioned functions, the network video monitoring and security alarm integrated system and its security access authentication method of the present invention are specifically as follows:

The network video surveillance and security alarm integration system includes user terminals, network video surveillance security alarm hosts and network cameras. Its main feature is that the network video surveillance and security alarm integration system also includes a video management cloud platform. The user terminal is connected to the network video surveillance security alarm host through the video management cloud platform, and the network video surveillance security alarm host is connected to the network camera.

Preferably, the user terminal includes a user terminal with a SIM card written in a mobile phone number and a user terminal without a SIM card written in a mobile phone number.

Preferably, the network video surveillance security alarm host and the network camera automatically discover and connect to each other, and the network video surveillance security alarm host automatically names the network camera, and can pass The network video surveillance security alarm host renames the network camera and sets a password, and the network camera simultaneously saves the password set by the network video surveillance security alarm host.

Preferably, the integrated network video surveillance and security alarm system further includes a wireless alarm detector, the network video surveillance security alarm host is code-connected to the wireless alarm detector, and the wireless alarm detector After receiving the alarm signal, the device sends it to the network video surveillance security alarm host through 433MHz radio frequency, and the network video surveillance security alarm host sends an alarm to the user terminal through SMS, voice and APP push.

Preferably, in the integrated network video monitoring and security alarm system, the alarm whitelist number is set through the network video monitoring security alarm host, and the video management cloud platform and the network camera are synchronously saved. Whitelist number for receiving alarms.

The authentication method for implementing secure access to the above-mentioned network video monitoring and security alarm integrated system has a main feature that the authentication method includes the following steps:

(1) The user terminal sends a video request to the video management cloud platform;

(2) Whether the described video management cloud platform verifies that the user terminal is a legal user, if the user terminal is a legal user, then the described video management cloud platform sends the access path of the network camera to the user terminal; if If the user terminal is not a legal user, then the video management cloud platform rejects the video request of the user terminal;

(3) the user terminal sends a video request to the network camera according to the access path of the network camera;

(4) The described network video surveillance security alarm host performs legal user verification to the user terminal sending the video request, if, if the user terminal is not a legal user, then the network video surveillance security alarm host rejects the video of the user terminal request, if the user terminal is a legal user, then enter step (5);

(5) The user terminal sends a gateway pass request to the network video surveillance security alarm host to access the network camera.

Preferably, the user terminal is a SIM card with a mobile phone number written in it, and the video request information in the step (1) includes the mobile phone number provided by the SIM card in which the mobile phone number is written in the user terminal.

Preferably, the user terminal is a SIM card without a mobile phone number, and the video request information in step (1) includes the mobile phone number provided by the user.

More preferably, the user terminal provides the user with a mobile phone number filling window, and the user terminal sends the obtained mobile phone number along with the video request information to the video management cloud platform.

Preferably, the video management cloud platform in the step (2) identifies whether the user terminal is a legitimate user through the alarm whitelist number.

Preferably, the network video surveillance security alarm host in the step (4) identifies whether the user terminal is a legitimate user through the white list number for receiving alarms and the ID and password of the network camera.

Preferably, the network camera is accessed in the step (5), the specific content is as follows:

The network camera verifies the legitimacy of the user terminal through the whitelist number for receiving alarms and the password of the network camera. If the user terminal is legal, the user terminal accesses the network camera. If the user terminal If it is illegal, the video request is rejected by the camera.

The network video monitoring and security alarm integrated system and its security access authentication method using this structure and method, because it has a three-layer authentication process, for the video management cloud platform, network video monitoring security alarm host and network camera respectively The user terminal is authenticated, the authentication mechanism for video transmission on the public network is optimized, and the change and setting of the whitelist number for alarm reception and the password of the network camera are strictly controlled, so that the security is greatly improved and the privacy of the user is protected.

Description of drawings

FIG. 1 is a schematic diagram of the overall architecture of the network video surveillance and security alarm integration system of the present invention.

detailed description

The network video surveillance and security alarm integration system includes user terminals, network video surveillance security alarm hosts and network cameras, wherein the network video surveillance and security alarm integration system also includes a video management cloud platform, and the user The terminal is connected with the network video surveillance security alarm host through the video management cloud platform, the network video surveillance security alarm host is connected to the network camera, and the user terminal includes a SIM card with a mobile phone number The user terminal and the SIM card user terminal without a mobile phone number, the network video surveillance security alarm host and the network camera are automatically discovered and connected to each other, and the network video surveillance security alarm host The network camera is automatically named, and the network camera can be renamed and password-set through the network video surveillance security alarm host, and the network video camera is synchronously saved. password.

In a preferred embodiment, the integrated network video surveillance and security alarm system further includes a wireless alarm detector, and the network video surveillance security alarm host is code-connected to the wireless alarm detector, The wireless alarm detector senses the alarm signal and sends it to the network video surveillance security alarm host through 433MHz radio frequency, and the network video surveillance security alarm host pushes it to the user terminal through SMS, voice and APP Send an alert.

In a preferred embodiment, in the integrated network video monitoring and security alarm system, the alarm whitelist number is set through the network video monitoring security alarm host, and the video management cloud platform and the The alarm whitelist number is saved synchronously in the network camera.

The authentication method based on the security access in the above-mentioned network video monitoring and security alarm integrated system, its main feature is that the authentication method includes the following steps:

(1) The user terminal sends a video request to the video management cloud platform;

(2) The video management cloud platform identifies whether the user terminal is a legal user through the alarm whitelist number, and if the user terminal is a legal user, the video management cloud platform sends the user terminal the The access path of the network camera; if the user terminal is not a legal user, then the video management cloud platform rejects the video request of the user terminal;

(3) the user terminal sends a video request to the network camera according to the access path of the network camera;

(4) The described network video surveillance security alarm host is used to identify whether the user terminal is a legitimate user by the ID and password of the white list number of the alarm receiving and the described network camera, and conduct a video request to the user terminal sending the video request Valid user verification. If the user terminal is not a legal user, then the network video monitoring security alarm host rejects the video request of the user terminal, if the user terminal is a legal user, then enter step (5);

(5) The user terminal sends a gateway pass request to the network video surveillance security alarm host to access the network camera, wherein the network camera passes the whitelist number of the alarm and the network camera The password verifies the legitimacy of the user terminal. If the user terminal is legal, the user terminal accesses the network camera. If the user terminal is illegal, the video request is rejected by the camera.

In a preferred embodiment, the user terminal is a SIM card with a mobile phone number written into it, and the video request information in the step (1) includes the SIM card written into the mobile phone number by the user terminal The mobile phone number provided.

In a preferred embodiment, the user terminal is a SIM card without a mobile phone number, and the video request information in the step (1) includes a mobile phone number provided by the user. At this time, The user terminal provides the user with a mobile phone number filling window, and the user terminal sends the acquired mobile phone number along with the video request information to the video management cloud platform.

In a specific implementation case, the network video surveillance and security alarm host at the client end integrates three major functions: network video surveillance management function, wireless security alarm function, and intelligent broadband gateway function.

The network video surveillance security alarm host can automatically discover each other through the software protocol and the network camera, and automatically establish a connection without human intervention, and the network video surveillance security alarm host will automatically name the network camera that has been matched with the code , the user can also rename each camera through the host. This is the only way for users to rename the camera, and only those who have the authority to operate the host have the right to modify the name of the camera. In the future, when users watch videos through mobile phones, computers, etc., the name of the camera will be based on this, and it will be automatically synchronized uniformly.

Through the network video monitoring security alarm host can set a password for each network camera, and only through the network video monitoring security alarm host can modify the camera password, restricting other camera password modification methods. In this way, only the person with the host operation authority can modify the camera password, and the camera does not accept other methods and instructions for modifying the password. This can effectively prevent the password from being tampered with, and further improve the security of the password itself;

The network video surveillance security alarm host can be connected to various wireless alarm detectors. After the wireless alarm detector detects the alarm information, it sends it to the network video surveillance security alarm host through a 433MHz wireless radio frequency signal. The above-mentioned network video surveillance security alarm host directly notifies the user of the alarm information through SMS, voice, APP push and other methods. Therefore, in order to enable the user to directly receive the alarm information, the user needs to set the white list number for receiving the alarm, that is, enter the mobile phone numbers of several users in the white list. As long as the alarm function is realized, inputting the alarm white list is a necessary setting operation in this system.

After the white list number is set, it will be saved separately in the network video surveillance security alarm host, video management cloud platform and network camera at the same time. When the user's mobile phone remotely accesses the camera, it first sends a request to the video management cloud platform, and the APP in the mobile phone automatically reads the phone number and sends it to the video management cloud platform along with the video request. After the mobile phone number is verified as a legal user by the video management cloud platform, the access path of the camera will be sent to the mobile APP. Otherwise, the user's identity authentication fails, and the mobile phone's video request will be rejected directly. In view of the fact that the data writing of domestic SIM cards is not standardized enough, some cards do not have phone numbers written in them, and the APP cannot automatically read them. Therefore, when the APP cannot read the phone number, a pop-up window will pop up on the user terminal asking the user to enter a valid whitelist number when using it for the first time. After entering the correct whitelist number for alarm reception, this number shall prevail. Ask the user to re-enter it when using it for the first time. However, if the user modifies the white list number for receiving alarms on the host, he must modify the authentication number on the mobile APP (in the case that the mobile phone number cannot be automatically read by the APP).

If the phone number submitted by the user's mobile phone APP to the video management cloud platform is authenticated, the point-to-point access path of the camera provided by the video management cloud platform will be obtained. Through this access path, the mobile APP can directly find the corresponding host and a group of cameras on the public network, and then send a video request to the camera to try to connect. This request first needs to provide a legal whitelist number and ID numbers and passwords of several cameras connected to the host to the network video surveillance security alarm host (the host has the function of an intelligent broadband gateway, and the camera is connected to the host). The network video surveillance security alarm host compares and verifies the whitelist numbers and the passwords of each camera respectively. If the verification is passed, the APP will be allowed to further connect to the camera; otherwise, it will directly intercept and reject the request, restricting its connection to the camera.

If the host verification is passed, the APP video request can pass through the network video surveillance security alarm host gateway, and then find the camera that needs to be accessed through port mapping. However, when accessing a specific camera, it is necessary to provide the whitelist number and the corresponding password of the camera again. The camera compares and verifies the whitelist number and password again. If the verification is legal, the authentication passes. The camera establishes a direct connection with the APP and sends the video stream to the mobile APP.

Under the protection of this security authentication mechanism, users can maximize the security of camera access when accessing the camera through the public network. If the user accesses the camera remotely on a device such as a tablet, notebook, or PC that does not have the conditions to automatically read the phone number, the implementation method is the same as when the mobile phone APP cannot read the phone number. When using a camera, you need to manually enter a legal whitelist number. Only when the APP can automatically read the legal mobile phone number or the user knows and enters the legal alarm white list number, can the user device access the corresponding camera, otherwise the first step of authentication will not pass.

The network video monitoring and security alarm integrated system and its security access authentication method using this structure and method, because it has a three-layer authentication process, for the video management cloud platform, network video monitoring security alarm host and network camera respectively The user terminal is authenticated, the authentication mechanism for video transmission on the public network is optimized, and the change and setting of the whitelist number for alarm reception and the password of the network camera are strictly controlled, so that the security is greatly improved and the privacy of the user is protected.

In this specification, the invention has been described with reference to specific embodiments thereof. However, it is obvious that various modifications and changes can be made without departing from the spirit and scope of the invention. Accordingly, the specification and drawings are to be regarded as illustrative rather than restrictive.

Claims (12)

1. a kind of Network Video Surveillance and security alarm integrated system, including user terminal, Network Video Surveillance security alarm master Machine and IP Camera, it is characterised in that also include a video in described Network Video Surveillance and security alarm integrated system Management cloud platform, described user terminal is by described video management cloud platform and described Network Video Surveillance security alarm Main frame is connected, the described IP Camera of Network Video Surveillance security alarm main frame connection.

2. Network Video Surveillance according to claim 1 and security alarm integrated system, it is characterised in that described user Terminal includes user's end of the user terminal of the SIM with write-in phone number and the SIM without write-in phone number End.

3. Network Video Surveillance according to claim 1 and security alarm integrated system, it is characterised in that described network It is automatic mutually between video monitoring security alarm main frame and described IP Camera to find, connect automatically, and described network Video monitoring security alarm main frame is named described IP Camera automatically, and can be by described Network Video Surveillance security protection Alarm host machine carries out renaming to described IP Camera and password is set, and described IP Camera synchronously preserves the net The password that network video monitoring security alarm main frame is set.

4. Network Video Surveillance according to claim 1 and security alarm integrated system, it is characterised in that described network Also include radio alarming detector, described Network Video Surveillance security alarm master in video monitoring and security alarm integrated system Machine accesses described radio alarming detector to code, and described radio alarming detector passes through 433MHz after receiving alarm signal Less radio-frequency is sent to described Network Video Surveillance security alarm main frame, and described Network Video Surveillance security alarm main frame leads to Short message, voice and APP is crossed to push to described user terminal transmission alarm.

5. Network Video Surveillance according to claim 1 and security alarm integrated system, it is characterised in that described network White list of receiving a crime report is set by described Network Video Surveillance security alarm main frame in video monitoring and security alarm integrated system The white list number of receiving a crime report synchronously is preserved in number, and described video management cloud platform and described IP Camera.

6. a kind of Network Video Surveillance and security alarm integrated system for described in claim 1 to 5 realizes secure access Method for authenticating, it is characterised in that described method for authenticating is comprised the following steps：

(1) user terminal described in sends video request to described video management cloud platform；

(2) the video management cloud platform described in verifies whether the user terminal is validated user, if the user terminal is legal use Family, then described video management cloud platform sends the access path of described IP Camera to the user terminal；If the user Terminal non-legally user, then described video management cloud platform refuses the video request of the user terminal；

(3) access path of the IP Camera of user terminal described according to sends video to described IP Camera Request；

(4) the Network Video Surveillance security alarm main frame described in carries out validated user and tests to the user terminal for sending video request Card, if if user terminal non-legally user, described Network Video Surveillance security alarm main frame refuses the user terminal Video request, if the user terminal is validated user, into step (5)；

(5) user terminal described in sends gateway by request to described Network Video Surveillance security alarm main frame, accesses institute The IP Camera stated.

7. the authentication that secure access is realized for Network Video Surveillance and security alarm integrated system according to claim 6 Method, it is characterised in that described user terminal is the SIM with write-in phone number, the video in described step (1) Solicited message includes the phone number provided by the SIM of user terminal write-in phone number.

8. the authentication that secure access is realized for Network Video Surveillance and security alarm integrated system according to claim 6 Method, it is characterised in that described user terminal is the SIM without write-in phone number, regarding in described step (1) Frequency solicited message includes customer-furnished phone number.

9. the authentication that secure access is realized for Network Video Surveillance and security alarm integrated system according to claim 8 Method, it is characterised in that described user terminal provides a user with phone number and fills in window, and described user terminal will be obtained The phone number for taking is sent to described video management cloud platform with video request information.

10. the mirror that secure access is realized for Network Video Surveillance and security alarm integrated system according to claim 6 Power method, it is characterised in that be provided with white list of receiving a crime report in described Network Video Surveillance security alarm main frame, and described regard The white list number of receiving a crime report, regarding in described step (2) are synchronously preserved in frequency management cloud platform and described IP Camera Whether frequency management cloud platform is validated user by the user terminal received a crime report described in white list Number Reorganization.

11. mirror that secure access is realized for Network Video Surveillance and security alarm integrated system according to claim 10 Power method, it is characterised in that described Network Video Surveillance security alarm main frame is that described IP Camera sets password, and Described IP Camera synchronously preserves the password, and Network Video Surveillance security alarm main frame in described step (4) leads to Cross the ID and password of described receive a crime report white list number and described IP Camera with recognize described user terminal whether be Validated user.

12. mirror that secure access is realized for Network Video Surveillance and security alarm integrated system according to claim 6 Power method, it is characterised in that conducted interviews to described IP Camera in described step (5), particular content is as follows：

Described IP Camera is received a crime report white list number and the password authentification of IP Camera user's end by described The legitimacy at end, if the user terminal is legal, the IP Camera described in described user terminal access, if the user terminal Illegal, then the video request is refused by camera.