JP2006191297A - Monitoring system and monitoring method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a monitoring system which can transmit alarm information safely without making a null at a connection time using the internet network. <P>SOLUTION: In the defence apparatus of the monitoring system, a VPN communication control means 116 judges whether the communication route of a first transmitting means or the communication route of a second transmitting means is established. A communication route selecting means 113 selects either of the first transmitting means or the second transmitting means judged that the communication route is established by the VPN communication control means 116. The VPN communication control means 116 further transmits the alarm information by the first transmitting means or the second transmitting means selected by the communication route selecting means 113. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a monitoring system and a monitoring method, and more particularly to a transmission path of alarm information from a security device to a monitoring center.

  Conventionally, a monitoring system that transmits alarm information to a monitoring center when an abnormality is detected by a sensor set in the security area of the security device is generally known by always connecting the security device and the monitoring center with an analog line. ing. However, in such a monitoring system using an analog line, the communication fee increases in proportion to the distance from the security device to the monitoring center, and alarm information can be transmitted immediately when a sensor or the like detects an abnormality. For this reason, it is common to always connect an analog line, but if it is always connected, a connection fee is required only for the duration of the connection, and it is a problem that a lot of costs are required for security. It was.

  In order to solve such a problem, a technique of a monitoring system that transmits alarm information using the Internet network has been disclosed (see Patent Document 1). That is, in such a system, when the automatic notification device detects an abnormality, the abnormality information is reported to the abnormality reporting destination via the analog telephone line via the Internet network, and further via the analog telephone line on the abnormality reporting destination side. To do. That is, communication costs can be saved by using the Internet network in communication connecting an analog telephone line and an analog telephone line. In addition, when a constant connection is realized in a monitoring system using such a technique, it is possible to reduce communication costs in the same manner.

JP-A-11-168568

  However, in the technique described in Patent Document 1, it takes 3 minutes or more to reconnect when the connection is disconnected due to the provider's abnormality. Therefore, when an abnormality is detected in the security area before reconnection and alarm information is transmitted from the security device to the monitoring center, until reconnection of the communication path between the security device and the monitoring center is completed It is impossible to transmit alarm information, and in a monitoring system using the Internet network, there is a problem that a blank time occurs in security.

  The present invention has been made in view of the above, and a monitoring system capable of immediately transmitting alarm information without waiting time due to reconnection when an abnormality is detected in the transmission of alarm information using the Internet network The purpose is to provide.

  In order to solve the above-described problems and achieve the object, the invention according to claim 1 is a security device that transmits alarm information indicating that an abnormality has been detected when an abnormality is detected in a monitoring area, and the security device. Is connected to a network, and includes a monitoring center that receives the alarm information transmitted by the security device and monitors the monitoring area, wherein the security device transmits the alarm information to one Internet service provider. A first transmitting means for transmitting via a network, and a second for transmitting the alarm information via a network of another Internet service provider different from the network of the Internet service provider connected by the first transmitting means. A transmission path and a communication path of the first transmission section or a communication path of the second transmission section. Selecting one of communication control means for determining whether or not the communication path is established and the first transmission means or the second transmission means determined by the communication control means that a communication path is established Communication path selection means, and the communication control means further transmits the alarm information by the first transmission means or the second transmission means selected by the communication path selection means. And

  The invention according to claim 2 is the monitoring system according to claim 1, wherein the first transmission means further constructs a tunnel by a virtual private network (VPN) between VPN devices, The alarm information is transmitted by passing through the tunnel, and the second transmission means further constructs a tunnel by a virtual facility network between the VPN devices, and transmits the alarm information by passing through the tunnel. It is characterized by that.

  According to a third aspect of the present invention, in the monitoring system according to the first or second aspect, the security device further comprises public line transmission means for transmitting the alarm information through a public line network, and the communication path The selection means further selects the public line transmission means when it is determined that no communication path is established for any of the communication path of the first transmission means and the communication path of the second transmission means. It is characterized by that.

  According to a fourth aspect of the present invention, in the monitoring system according to any one of the first to third aspects, the first transmission means further sends the warning information from the security device to an Internet service provider. Connected to the Internet via a network, and connected to the monitoring center via the network of the Internet service provider that is the same as or different from the network of the Internet service provider on the side of the security device on the monitoring center side, and transmitted. The second transmission means further connects the alarm information from the security device to the Internet network via the same Internet service provider network as the first transmission means, and sends it to the monitoring center of the first transmission means. Other than connected internet service provider Via a network of Internet services provider and transmits connected to said monitoring center.

  The invention according to claim 5 is the monitoring system according to any one of claims 1 to 3, wherein the first transmission means further sends the alarm information from the security device to an Internet service provider. Connected to the Internet via a network, and connected to the monitoring center via the network of the Internet service provider that is the same as or different from the network of the Internet service provider on the side of the security device on the monitoring center side, and transmitted. The second transmission means further connects the alarm information from the security device to an Internet network via a network of another Internet service provider different from the first transmission means, and the monitoring center of the first transmission means Different from internet service provider connected to Via the networks of other Internet service providers and transmits connected to the monitoring center.

  According to a sixth aspect of the present invention, in the monitoring system according to the fifth aspect, the first transmission means is further connected to one VPN device from the security device and connected through a network of one Internet service provider. Connected to the Internet network, and connected to the monitoring center via the same or different network of the Internet service provider on the security device side on the monitoring center side to transmit the alarm information, The second transmission means is further connected to a VPN apparatus different from the VPN apparatus used in the first transmission means from the security device, via a network of another Internet service provider different from the first transmission means. Connected to the Internet network and monitoring the first transmission means Connected to the monitoring center via the network of an Internet service provider and different other Internet service providers connected to the printer and transmits the alarm information.

  According to a seventh aspect of the present invention, in the monitoring system according to the fifth aspect, the first transmission means is further connected to one VPN device from the security device and via a network of one Internet service provider. Connected to the Internet network, and connected to the monitoring center via the same or different network of the Internet service provider on the security device side on the monitoring center side to transmit the alarm information, The second transmission means is further connected via the same VPN apparatus as the VPN apparatus connected by the first transmission means from the security device and via a network of another Internet service provider different from the first transmission means. Connected to the Internet network and supervising the first transmission means. It was connected to the center via the network of an Internet service provider and different other Internet service provider connected to the monitoring center and transmits the alarm information.

  According to an eighth aspect of the present invention, in the monitoring system according to any one of the first to third aspects, the first transmission means further sends the warning information from the security device to a single Internet service provider. The second transmission means further transmits the alarm information from the security device via the same Internet service provider network as the first transmission means via a network. It is connected to the Internet network, and connected to the monitoring center via a network of another Internet service provider different from the Internet service provider connected to the monitoring center of the first transmitting means, and then transmitted.

  The invention according to claim 9 is the monitoring system according to claim 4, claim 5 or claim 8, wherein the first transmission means further passes from the security device through a network of one Internet service provider. Connected to the Internet network, and connected to one VPN device via the same or different network of the Internet service provider on the monitoring device side as the network of the Internet service provider on the security device side. The second transmission means is further connected to the Internet network from the security device via the same or different Internet service provider network as the first transmission means; Internet service professional connected to the monitoring center Via the network Ida different other Internet service provider and transmits the alarm information to the monitoring center connected to the VPN device and the different VPN devices connected by the first transmission means.

  According to a tenth aspect of the present invention, in the monitoring system according to the fourth, fifth, or eighth aspect, the first transmission means further passes through the network of one Internet service provider from the security device. Connected to the Internet network, and connected to the monitoring center by using one VPN device via the network of the Internet service provider that is the same as or different from the network of the Internet service provider on the security device side. The alarm information is transmitted, and the second transmission means is connected to the Internet network from the security device via the same or different network of the Internet service provider as the first transmission means, and the first transmission means Internet service provider connected to other monitoring centers Via a network provider different from other Internet service provider and transmits the alarm information to the monitoring center connected to the same VPN device and the VPN device connected with said first transmission means.

  The invention according to claim 11 is the monitoring system according to any one of claims 1 to 10, wherein the security device further includes the warning information via a network of a different Internet service provider from the security device. A plurality of transmission means for transmitting the communication means, wherein the communication control means further determines whether or not communication paths of the plurality of transmission means have been established, and the communication path selection means further includes a communication path by the communication control means. The communication control means further transmits the warning information by the transmission means selected by the communication path selection means. It is characterized by that.

  The invention according to claim 12 is the monitoring system according to claim 11, wherein the transmission means is further connected via a network of an Internet service provider other than the Internet service provider connected on the security device side. The alarm information is transmitted by connecting to a monitoring center.

  The invention according to claim 13 is the monitoring system according to any one of claims 1 to 12, wherein the first transmission means further transmits the alarm information via a network of a single Internet service provider. The second transmission means further passes the alarm information via a network of another Internet service provider different from the network of the Internet service provider connected by the first transmission means. The first transmission means transmits the alarm information to the monitoring center that is different from the monitoring center that receives the alarm information.

  Further, the invention according to claim 14 is a security device that transmits alarm information indicating that an abnormality has been detected when an abnormality is detected in a monitoring area, and the security device is connected to a network and transmitted by the security device. In the monitoring method in the monitoring center that receives the alarm information and monitors the monitoring area, a communication path of a first transmission unit that transmits the alarm information via a network of one Internet service provider or the alarm Communication for determining whether a communication path of a second transmission means for transmitting information via a network of another Internet service provider different from the network of the Internet service provider connected by the first transmission means is established. A communication path is established by the control step and the communication control step. A communication path selection step of selecting either the first transmission means or the second transmission means determined to be, the communication control step being further selected by the communication path selection step The alarm information is transmitted by the first transmission means or the second transmission means.

  According to the first aspect of the invention, the communication control unit determines whether the communication path of the first transmission unit or the communication path of the second transmission unit is established, and the communication path selection unit performs communication. A plurality of communication paths using the Internet network are secured by selecting one of the first transmission means or the second transmission means determined to be established by the control means. Even if the connection of one communication path is disconnected, alarm information can be transmitted by the other communication path, so there is no gap in the guard time and a highly reliable monitoring system The effect that can be built. Also, by using the Internet network, the communication cost can be kept low because it does not depend on the distance between the security device and the monitoring center, and does not depend on the connection time, compared to the case where the analog telephone line is always connected. There is an effect.

  According to the invention of claim 2, the first transmission means further constructs a tunnel by the virtual facility network between the VPN devices, transmits the alarm information by passing through the tunnel, and the second transmission The means further constructs a virtual facility network tunnel between VPN devices, and transmits alarm information by passing through the tunnel, so that the contents of data transmitted and received between the security device and the monitoring center can be wiretapped or tampered with. It is possible to construct a high-security monitoring system.

  According to the invention of claim 3, the alarm information is transmitted by the public line transmission means by the public line network, and the communication path selection means further includes the communication path of the first transmission means and the second transmission means. If it is determined that no communication path has been established for any of the communication paths, even if alarm information cannot be transmitted over the Internet network by selecting the public line transmission means, the alarm information is transmitted over the public line network. Therefore, it is possible to construct a highly reliable monitoring system.

  According to the invention of claim 4, the first transmission means further connects the alarm information from the security device to the Internet network via the network of the one Internet service provider, and the security device side on the monitoring center side And connected to the monitoring center via the same or different Internet service provider network, and the second transmission means further transmits alarm information from the security device to the first transmission means. Connect to the Internet via the Internet service provider's network, connect to the monitoring center via another Internet service provider's network connected to the monitoring center of the first transmission means, and transmit By doing , It is possible to construct the two communication paths, an effect that it is possible to construct a highly reliable monitoring system.

  According to the invention of claim 5, the first transmission means further connects the alarm information from the security device to the Internet network via the network of the one Internet service provider, and the security device side on the monitoring center side The second transmission means is connected to the monitoring center via the same or different Internet service provider network as the network of the other Internet service provider, and the second transmission means further transmits alarm information from the security device to the first transmission means. Connected to the Internet via the Internet service provider's network, and connected to the monitoring center via the network of another Internet service provider different from the Internet service provider connected to the monitoring center of the first transmission means. To send More, there is an effect that it is possible to construct a four communication paths, it is possible to construct a highly reliable monitoring system.

  According to the invention of claim 6, the first transmission means is further connected from the security device to the one VPN device and connected to the Internet network via the network of the one Internet service provider, and the monitoring center The alarm information is transmitted by connecting to the monitoring center via the network of the Internet service provider that is the same as or different from the network of the Internet service provider on the security device side, and the second transmission means further transmits the first information from the security device. Connected to a VPN device different from the VPN device used in the transmission means, connected to the Internet via another Internet service provider's network different from the first transmission means, and connected to the monitoring center of the first transmission means Other Internet services that are different from the Internet service provider By connecting to a monitoring center via a service provider's network and transmitting the alarm information, it is possible to construct four communication paths, so that it is possible to construct a highly reliable monitoring system. Play.

  According to the invention of claim 7, the first transmission means is further connected from the security device to the one VPN device and connected to the Internet network via the network of the one Internet service provider, and the monitoring center The alarm information is transmitted by connecting to the monitoring center via the network of the Internet service provider that is the same as or different from the network of the Internet service provider on the security device side, and the second transmission means further transmits the first information from the security device. Connect with the same VPN apparatus as the VPN apparatus connected by the transmission means, connect to the Internet network via another Internet service provider's network different from the first transmission means, and connect to the monitoring center of the first transmission means Internet service provider different from other internet By transmitting the alarm information by connecting to the monitoring center via the network over bis provider, it is possible to reduce the VPN device, an effect of reducing cost.

  According to the invention of claim 8, the first transmission means further transmits the alarm information from the security device via the network of one Internet service provider to the monitoring center and transmits the second information. The means further connects alarm information from the security device to the Internet via the same Internet service provider network as the first transmission means, and is different from the Internet service provider connected to the monitoring center of the first transmission means. By connecting and transmitting to a monitoring center via a network of another Internet service provider, it is possible to construct two communication paths, so that it is possible to construct a highly reliable monitoring system. .

  According to the invention of claim 9, the first transmission means is further connected to the Internet network from the security device via the network of the one Internet service provider, and the Internet service on the security device side at the monitoring center side. The alarm information is transmitted to the monitoring center by connecting to one VPN apparatus via the network of the Internet service provider that is the same as or different from the network of the provider, and the second transmitting means further includes the first transmitting means from the security apparatus. The first transmission via the network of another Internet service provider different from the Internet service provider connected to the monitoring center of the first transmission means. Contact by means By connecting to a VPN device different from the VPN device and transmitting the alarm information to the monitoring center, it is possible to construct four communication paths, so that it is possible to construct a highly reliable monitoring system. Play.

  According to the invention of claim 10, the first transmission means is further connected to the Internet network from the security device via the network of the one Internet service provider, and the Internet service on the security device side at the monitoring center side. The second transmission means transmits the alarm information to the monitoring center through the same or different Internet service provider network as the provider network, and transmits the alarm information to the monitoring center. The first transmission via the network of the same or different Internet service provider as the Internet service provider connected to the monitoring center of the first transmission means. Connect by means By sending alarm information to the monitoring center connected to the VPN device the same VPN device and the, it is possible to reduce the VPN device, an effect of reducing cost.

  According to the eleventh aspect of the invention, there are provided a plurality of transmission means for transmitting alarm information from the security device via the networks of different Internet service providers, and the communication control means further includes communication paths of the plurality of transmission means. The communication path selecting means determines whether the communication path is further established, and the communication path selecting means further selects any one of the plurality of transmission means determined to be established by the communication control means. As a result, it is possible to construct a highly reliable monitoring system.

  According to the twelfth aspect of the invention, the transmission means further transmits alarm information by connecting to the monitoring center via a network of an Internet service provider other than the Internet service provider connected on the security device side. As a result, since a plurality of communication paths can be constructed, there is an effect that a highly reliable monitoring system can be constructed.

  According to the invention of claim 13, the first transmission means further transmits alarm information to one monitoring center via the network of one Internet service provider, and the second transmission means further includes The alarm information is transmitted to a monitoring center different from the monitoring center that receives the alarm information by the first transmission means via the network of another Internet service provider different from the network of the Internet service provider connected by the first transmission means. Thus, even if one of the monitoring centers stops functioning due to an earthquake or the like, the alarm information can be received, so that it is possible to construct a highly reliable monitoring system.

  According to the fourteenth aspect of the present invention, in the communication control step, the communication path of the first transmitting means for transmitting the alarm information via the network of one Internet service provider or the alarm information is sent to the first transmission. The communication path of the second transmission means for transmitting via the network of another Internet service provider different from the network of the Internet service provider connected by the means is established, and communication is performed by the communication path selection step. Since a communication path using the Internet network can be secured by selecting one of the first transmission means and the second transmission means determined to have been established by the control step. , Cost-effective and reliable monitoring An effect that stem can be constructed.

  Exemplary embodiments of a monitoring system according to the present invention will be explained below in detail with reference to the accompanying drawings.

(First embodiment)
A first embodiment will be described with reference to the accompanying drawings. The monitoring system according to the first embodiment includes a virtual facility network (VPN) on a communication path from a security device to a monitoring center via an access point of an Internet network service provider (hereinafter referred to as ISP). Are constructed, and the alarm information is transmitted by selecting the virtual facility network in which the connection is established from the two communication paths.

  First, a configuration example of the monitoring system 100 to which the present invention is applied will be described. FIG. 1 is a block diagram illustrating a configuration of a monitoring system according to the first embodiment.

  The monitoring system 100 according to the present embodiment includes a security device 110, a VPN device 130, a VPN device 170, a VPN device 190, a monitoring center 120, a modem 200, and a modem 220. The device 110 and the monitoring center 120 include an ISP3 access point and network 140, an Internet network 150, an ISP1 access point and network 160, an ISP2 access point and network 180, a public line network 210 such as a telephone line, a wireless network, and ISDN. Connected through.

  The security device 110 further includes sensors 111, a detection signal input unit 112, a communication path selection unit 113, an IP address storage unit 114, a connection state storage unit 115, a VPN communication control unit 116, and telephone line communication control. Part 117.

  The sensor 111 detects an abnormality in the monitoring area. Examples of the sensor include an infrared sensor that detects a person based on a change in the amount of received infrared light, a shut-off sensor that detects a person by blocking infrared light, a sign sensor that detects a person by disturbance of electromagnetic waves, and a magnet. These are various sensors for detecting abnormalities in the security area such as a magnet sensor for detecting opening and closing of the door.

  The detection signal input unit 112 receives a detection signal transmitted from the sensor 111.

  The communication path selection unit 113 determines a connectable communication path from connection information among connection state information stored in a connection state storage unit 115 described later, and selects a path for transmitting alarm information.

  The IP address storage unit 114 stores IP address information defining the IP address of the VPN apparatus connected to the monitoring center 120 and the IP address of the monitoring center. FIG. 2 is an explanatory diagram illustrating an example of a data configuration of IP address information stored in the IP address storage unit. The IP address storage unit 114 stores the provider name, the IP address of the VPN device, and the IP address of the monitoring center in association with each other.

  The connection state storage unit 115 stores connection state information defining authentication information and connection information for each provider. FIG. 3 is an explanatory diagram illustrating an example of a data configuration of connection state information stored in the connection state storage unit. The connection state storage unit 115 stores a provider name, authentication information, and connection information in association with each other.

  When the VPN communication control unit 116 controls the VPN device 130 to realize a VPN tunnel with the VPN device on the monitoring center 120 side, and detects connection confirmation information and abnormality for connection confirmation The alarm information is transmitted to the monitoring center 120 and the transmission information from the monitoring center 120 is received. The VPN communication control unit 116 constitutes a communication control unit according to the present invention.

  The telephone line communication control unit 117 performs control for transmitting alarm information to the monitoring center 120 via a modem 200 and an analog public line network 210 described later.

  The VPN device 130 authenticates the communication partner with the VPN device on the monitoring center side, negotiates the encryption key, encrypts and encapsulates the data transmitted from the security device 110, and forms an IP packet as the VPN device 170 on the monitoring center side. Alternatively, the IP packet transmitted to the VPN device 190 and received from the VPN device 170 or the VPN device 190 on the monitoring center side is decapsulated, and the decrypted IP packet is transmitted to the security device 110. Specifically, it is realized by a router having a VPN function.

  A modem (MODEM: MOdulator-DEModulator) 200 is a modulation / demodulation device, which converts digital data transmitted from the security device 110 into an audio signal and transmits it to the analog public line network 210, and is transmitted from the analog public line network 210. An audio signal is converted into digital data and transmitted to the security device 110. The modem 220 has the same configuration and function.

  The monitoring center 120 further includes a VPN communication control unit 121, an alarm information display unit 122, and a telephone line communication control unit 123.

  The VPN communication control unit 121 controls the VPN device 170 or the VPN device 190 to realize a VPN tunnel with the VPN device 130 on the security device 110 side, and transmits the connection transmitted for connection confirmation. Response information responding to the confirmation information is transmitted to the security device 110, and connection confirmation information and alarm information from the security device 110 are received.

  The alarm information display unit 122 displays alarm information received by the VPN communication control unit 121 on a monitor or the like.

  The telephone line communication control unit 123 performs control for receiving alarm information from the security device 110 via the modem 220 and the analog public line network 210. The public line transmission means according to the present invention is configured.

  Since the VPN device 170 and the VPN device 190 have the same functions and configurations as the above-described VPN device 130, the description thereof will be omitted with reference to the above description. Since the modem 220 has the same function and configuration as the modem 200 described above, the description thereof will be omitted with reference to the above description.

  The ISP 3 access point 140 is an entrance to an Internet network provided by an Internet connection service provider (ISP), and the security device 110 is connected to the Internet network 150 via the ISP 3 access point and the network. The ISP1 access point 160 is also an entrance to the Internet network provided by ISP1, and the monitoring center 120 is connected to the Internet network 150 via the ISP2 access point and network.

  The ISP2 access point 180 is an entrance to the Internet network provided by ISP2, and the monitoring center 120 is connected to the Internet network 150 via the ISP2 access point and network. The analog public network 210 communicates voice signals by a circuit switching method.

  By performing the processing shown in the flowcharts of FIGS. 4-1, 4-2, and 4-3 below in the configuration as described above, a tunnel is established between the VPN devices, and the IP packet passes through the tunnel. . That is, the communication path from the security device 110 to the VPN device 170 and the monitoring center 120 via the VPN device 130, the ISP3 access point and network 140, the Internet network 150, the ISP1 access point and the network 160 is the first embodiment according to the present invention. 1 transmission means is configured.

  A communication path from the security device 110 to the VPN device 190 and the monitoring center 120 via the VPN device 130, the ISP3 access point and network 140, the Internet network 150, the ISP2 access point and the network 180 is the second according to the present invention. The transmission means is configured.

  Further, a VPN tunnel is configured between the VPN device 130 and the VPN device 170 and between the VPN device 130 and the VPN device 190. Specifically, IPsec (Security Architecture for Internet Protocol) or PPTP (Point-to-Point Tunneling Protocol) is used as a tunneling protocol.

  Next, connection confirmation processing by the monitoring system configured as described above will be described. 4A, 4B, and 4C are flowcharts illustrating a connection confirmation procedure performed by the VPN communication control unit of the security device, the VPN device, and the VPN communication control unit of the monitoring center.

  Since the connection confirmation processing by the monitoring system is the same for each connected provider, the security device 110 to the VPN device 130, the ISP3 access point and network 140, the Internet network 150, the ISP1 access point and network 160 are first used. A process for confirming connection to the monitoring center 120 via the VPN device 170 will be described.

  The VPN communication control unit 116 of the security device 110 acquires the IP address of the VPN device 170 on the monitoring center 120 side and the IP address of the monitoring center 120 from the IP address storage unit 114 (step S4001). The VPN communication control unit 116 transmits the acquired IP address of the monitoring center side VPN apparatus 170 to the VPN apparatus 130 and transmits an authentication instruction with the monitoring center side VPN apparatus 170 (step S4002).

  The VPN device 130 receives an authentication instruction with the VPN device 170 on the monitoring center side (step S4003). The communication partner is authenticated between the VPN device 130 and the VPN device 170 (step S4004).

  Next, an encryption key is negotiated between the VPN device 130 and the VPN device 170 (step S4005). As a result, each VPN device has an encryption key when actually exchanging data.

  The VPN device 130 transmits the result of the authentication process to the VPN communication control unit 116 of the security device 110 (step S4006). The VPN communication control unit 116 receives the authentication result (step S4007). The VPN communication control unit 116 determines whether authentication is completed from the received authentication result (step S4008).

  If it is determined that the authentication has not been completed (step S4008: No), the process returns to step S4002 to execute the authentication process again. If it is determined that the authentication is completed (step S4008: Yes), the VPN communication control unit 116 stores “authenticated” in the authentication information of the connection state storage unit 115 (step S4009).

  The VPN communication control unit 116 acquires the IP address of the monitoring center 120 from the IP address storage unit 114, the IP address of the monitoring center 120 as the destination address of the IP header, the IP address of the security device 110 as the source address, and the data portion. An IP packet storing the data type “connection confirmation” is generated (step S4010).

  The VPN communication control unit 116 transmits the generated IP packet and the IP address of the VPN device 170 to the VPN device 130 (step S4011). The VPN communication control unit 116 starts a timer after transmitting the IP packet (step S4012).

  The VPN communication control unit 116 determines whether an IP packet is received from the monitoring center 120 that responds to the connection confirmation IP packet transmitted within a predetermined time (step S4013). If it is determined that the IP packet responded by the monitoring center 120 is not received within a certain time (step S4013: No), the process returns to step S4010 and the connection confirmation process is performed again.

  Returning to step 4011, the VPN device 130 receives the transmitted IP packet and the IP address of the VPN device 170 (step S4014). The VPN device 130 encrypts the received IP packet with the encryption key decided in step S4005 (step S4015). The VPN device 130 encapsulates the encrypted IP packet by storing the IP address of the VPN device 170 in the destination address of the IP header (step S4016).

  The VPN device 130 transmits the encapsulated IP packet to the VPN device 170 (step S4017). The encapsulated IP packet passes through the VPN tunnel, and the VPN apparatus 170 receives the encapsulated IP packet (step S4018).

  The VPN device 170 decapsulates the received IP packet (step S4019), and decrypts the encrypted IP packet (step S4020). The IP packet and the IP address of the VPN device 170 are transmitted to the destination address of the IP header of the decrypted IP packet, that is, the IP address of the monitoring center 120 (step S4021).

  The VPN communication control unit 121 of the monitoring center 120 receives the IP packet and the IP address of the VPN device 170 (step S4022). The VPN communication control unit 121 acquires the data type from the data part of the received IP packet (step S4023). The VPN communication control unit 121 determines whether or not the data type is “connection confirmation” (step S4024).

  If it is determined that the data type is not “connection confirmation” (step S4024: No), other processing is executed. If it is determined that the data type is “connection confirmation” (step S4024: Yes), the VPN communication control unit 121 generates a response IP header with the source address of the IP header of the received IP packet as the destination address. (Step S4025).

  The VPN communication control unit 121 generates an IP packet from the generated IP header and the data part in which “response” is stored in the data type (step S4026). The VPN communication control unit 121 transmits the generated IP packet to the VPN device 170 that has been transmitted together with the connection confirmation IP packet, with the IP address as the destination (step S4027). As a result, even if a plurality of VPN devices are connected to the monitoring center, the VPN device connected to the access point of ISP 1 can be specified, and the connection of ISP 1 can be confirmed.

  The VPN device 170 receives the transmitted IP packet (step S4028). The VPN device 170 encrypts the received IP packet (step S4029), encapsulates the encrypted IP address by storing the IP address of the VPN device 130 on the security device 110 side in the destination address of the IP header (step S4029). 4030).

  The VPN device 170 transmits the encapsulated IP packet (step S4031). The encapsulated IP address is transmitted to the VPN apparatus 130 through the VPN tunnel, and the VPN apparatus 130 receives the encapsulated IP packet (step S4032).

  The VPN device 130 decapsulates the received IP packet, that is, releases the encapsulation (step S4033), and decrypts the encrypted IP packet (step S4034). The destination address of the IP header of the decrypted IP packet, that is, the IP packet decrypted to the address of the security device 110 and the source address of the encapsulated IP packet, that is, the IP address of the VPN device 170 are transmitted (step) S4035).

  The VPN communication control unit 116 of the security device 110 receives the IP packet and the IP address of the VPN device 170 (step S4036). The VPN communication control unit 116 acquires the data type from the data part of the received IP packet (step S4037). The VPN communication control unit 116 determines whether the data type is “response” (step S4038).

  If it is determined that the data type is not “response” (step S4038: No), other processing is executed. If it is determined that the data type is “response” (step S4038: Yes), the VPN communication control unit 116 acquires the source address from the IP header (step S4039).

  The VPN communication control unit 116 acquires the destination address of the connection confirmation IP packet transmitted earlier (step S4040). The VPN communication control unit 116 determines whether or not the source address of the response IP packet matches the destination address of the connection confirmation IP packet (step S4041).

  If it is determined that the source address of the response IP packet does not match the destination address of the connection confirmation IP packet (step S4041: No), the process returns to step S4010 to execute the connection confirmation process again.

  If it is determined that the source address of the response IP packet matches the destination address of the connection confirmation IP packet (step S4041: Yes), the VPN communication control unit 116 stores the connection state information stored in the connection state storage unit 115. “Communication enabled” is stored in the connection information (step S4042).

  The specific process of step S4042 searches the IP address of the VPN apparatus 170 received from the IP address in the VPN apparatus of the IP address information stored in the IP address storage unit 114, and the VPN apparatus 170 is connected to any provider. Get what you are. Further, “communication enabled” is stored in the connection information corresponding to the provider name stored in the connection state storage unit 115.

  The VPN communication control unit 116 determines whether to disconnect or continue (step S4043). If it is determined that the connection is to be disconnected (step S4043: Yes), the process is terminated. If it is determined that the connection is to be continued (step S4043: No), the process returns to step S4010 to further perform a connection confirmation process. The connection confirmation process is executed every predetermined time.

  The connection confirmation process described above is performed for the other VPN apparatus 190 on the monitoring center 120 side independently of the connection confirmation process with the VPN apparatus 170. Since the connection confirmation with the VPN device 190 is the same as the connection confirmation processing with the VPN device 170, the description here is omitted with reference to the above description.

  Further, the alarm information transmission process after the connection confirmation is completed will be described. 5-1 and 5-2 are performed by the detection signal input unit, the communication route selection unit, the telephone line control unit, the VPN communication control unit, the VPN device, the VPN communication control unit of the monitoring center, and the alarm display unit of the security device. It is a flowchart which shows an alarm information transmission procedure.

  First, the sensor 111 detects an abnormality and transmits a detection signal. The detection signal input unit 112 receives an input of a detection signal (step S5001). The communication path selection unit 113 acquires the provider name whose connection information is “communicable” from the connection state information stored in the connection information storage unit 115 (step S5002).

  The communication path selection unit 113 determines whether there is a provider whose connection information is “communication enabled” (step S5003). If it is determined that there is no provider whose connection information is “communicable” (step S5003: No), the telephone line control unit 117 transmits alarm information to the monitoring center 120 via the analog public line network 210 (step S5003). S5004).

  If it is determined that there is a provider whose connection information is “communication enabled” (step S5003: Yes), the communication path selection unit 113 selects the provider name stored first (step S5005). A provider with a higher priority may be selected from providers that are “communication enabled” by setting a priority in advance.

  The VPN communication control unit 116 acquires the IP address of the VPN device corresponding to the provider name selected from the IP address information stored in the IP address storage unit 114 and the IP address of the monitoring center (step S5006).

  The VPN communication control unit 116 generates an IP header with the IP address of the monitoring center 120 as the destination address (step S5007). An IP packet is generated from the data part storing the alarm information and the generated Ip header (step S5008). The VPN communication control unit 116 transmits the generated IP packet and the IP address of the VPN device connected to the selected provider to the VPN device 130 (step S5009).

  The VPN device 130 receives the transmitted IP packet and the IP address of the VPN device connected to the selected provider (step S5010). The VPN device 130 encrypts the received IP packet with the determined encryption key (step S5011). The VPN device 130 encapsulates the encrypted IP packet by storing the IP address of the VPN device connected to the selected provider in the destination address of the IP header (step S5012).

  The VPN device 130 transmits the encapsulated IP packet (step S5013). The encapsulated IP packet passes through the VPN tunnel, and the VPN apparatus connected to the selected provider receives the encapsulated IP packet (step S5014).

  The VPN device decapsulates the received IP packet (step S5015) and decrypts the encrypted IP packet (step S5016). The IP packet and the IP address of the VPN device are transmitted to the destination address of the IP header of the decrypted IP packet, that is, the IP address of the monitoring center 120 (step S5017).

  The VPN communication control unit 121 of the monitoring center 120 receives the IP packet and the IP address of the VPN device (step S5018). The VPN communication control unit 121 acquires the data type from the data part of the received IP packet (step S5019). The VPN communication control unit 121 determines whether the data type is “alarm” (step S5020).

  If it is determined that the data type is not “alarm” (step S5020: No), other processing is executed. If it is determined that the data type is “alarm” (step S5020: Yes), the alarm display unit 122 displays alarm information on the monitor (step S5021), and the process is terminated.

  Here, the above-described processing will be described using a specific example. FIG. 6 is an explanatory diagram illustrating an example of an IP address of an apparatus included in the monitoring system according to the first embodiment. The exemplified IP address is in the IPv6 (Internet Protocol Version 6) format. The effect of the present invention can be achieved even if the IP address is realized in the IPv4 (Internet Protocol Version 4) format.

  FIG. 7 is an explanatory diagram illustrating an example of an IP packet transmitted and received in the connection confirmation process and the alarm information transmission process. It is assumed that a connection confirmation IP packet is transmitted from the security device 110 to the monitoring center 120 via the VPN device 130, the ISP3 access point and network, the Internet network, the ISP1 access point and network, and the VPN device 170. .

  In the security device 110, an IP packet is generated. The IP address (link local address) of the monitoring center 120: fe80: xxxx :: 0001: 0001 as the destination address of the IP header, and the IP address (link local address) of the security device 110 as the source address: fe80: xxxx :: 0002: 0001 is stored (corresponding to step S4010 in FIG. 4A).

  The generated IP packet and the IP address (global address) of the VPN device 170: 3ffe: xxxx :: 0001: 0001 are transferred to the VPN device 130 (IP address (link local address): fe80: xxxx :: 0002: 0002). Is transmitted (corresponding to step S4011 in FIG. 4A).

  The VPN device 130 receives the IP packet and the IP address (corresponding to step S4014 in FIG. 4-1), and encrypts the received IP packet with the encryption key (corresponding to step S4015 in FIG. 4-2). The IP address (global address) of the VPN device 170 on the monitoring center 120 side is 3ffe: xxxx :: 0001: 0001 for the encrypted IP packet and the destination address, and the VPN device 130 on the security device 110 side is the source address. IP address (global address): Encapsulates the IP header storing 3ffe: xxxx :: 0003: 0001, generates a new IP packet (corresponding to step S4016 in FIG. 4-2), and transmits (see FIG. Corresponding to step S4017 of 4-2).

  The new IP packet is transmitted to the VPN apparatus 170 through the VPN tunnel consisting of ISP3, the Internet network, and ISP1. The VPN apparatus 170 receives the IP packet (corresponding to step S4018 in FIG. 4-2), decapsulates the IP packet (corresponding to step S4019 in FIG. 4-2), and decrypts the encrypted IP packet ( Corresponding to step S4020 in FIG.

  The destination address stored in the IP header of the decrypted IP packet, that is, the IP address (link local address) of the monitoring center 120: fe80: xxxx :: 0001: 0001 is acquired, and the IP packet and the VPN device 170 are acquired. IP address (link local address): fe80: xxxx :: 0001: 0002 is transmitted to the monitoring center 120 (corresponding to step S4021 in FIG. 4-2). The monitoring center 120 receives the IP packet and the IP address of the VPN device 170 (step S4022).

  In this way, two communication paths using the Internet network are secured, and connection confirmation is made for each communication path to constantly monitor whether or not communication is possible, thereby enabling communication of alarm information. Therefore, the alarm information can be transmitted reliably and at low cost, and an inexpensive monitoring system can be realized. In addition, since two communication paths are secured, even if one communication state is poor and communication is not possible, if the other system is communicable, alarm information can be transmitted without reconnection. Security time can be reduced.

  Furthermore, by securing a communication path using an analog public network other than the Internet network, alarm information can be transmitted reliably even when communication over the Internet network becomes impossible. A high monitoring system can be realized.

(Second Embodiment)
A second embodiment will be described with reference to the accompanying drawings. According to the second embodiment, by using a plurality of ISP access points on the security device side in the first embodiment, the security device passes through the ISP access point to the monitoring center. A plurality of virtual facility networks are constructed in a communication path, and alarm information is transmitted using a virtual facility network in which connection is established from among the plurality of communication paths.

  A configuration example of a monitoring system 800 to which the present invention is applied will be described. FIG. 8 is a block diagram illustrating a configuration of a monitoring system according to the second embodiment.

  The monitoring system 800 according to the present embodiment includes a security device 810, a VPN device 130, a VPN device 230, a VPN device 170, a VPN device 190, a monitoring center 820, a modem 200, and a modem 220. Security device 110 and monitoring center 140 are ISP3 access point and network 140, ISP4 access point and network 240, Internet network 150, ISP1 access point and network 160, ISP2 access point and network 180, analog They are connected via the public line network 210.

  The security device 810 further includes a sensor 111, a detection signal input unit 112, a communication path selection unit 813, an IP address storage unit 814, a connection state storage unit 815, a VPN communication control unit 816, and a telephone line communication control unit. 117. Here, since the configurations and functions of the sensor 111, the detection signal input unit 112, and the telephone line communication control unit 117 are the same as those in the first embodiment, description thereof is omitted.

  The communication path selection unit 813 determines a connectable communication path from connection information in connection state information stored in a connection state storage unit 815 described later, and selects a path for transmitting alarm information.

  The IP address storage unit 814 stores IP address information defining the IP address of the VPN device connected to the security device 810, the IP address of the VPN device connected to the monitoring center 820, and the IP address of the monitoring center. It is. FIG. 9 is an explanatory diagram showing an example of the data configuration of the IP address information stored in the IP address storage unit. The IP address storage unit 814 stores the provider name, the IP address of the VPN device on the security device side, the IP address of the VPN device on the monitoring center side, and the IP address of the monitoring center in association with each other.

  The connection state storage unit 815 stores connection state information that defines authentication information and connection information for each provider. FIG. 10 is an explanatory diagram illustrating an example of a data configuration of connection state information stored in the connection state storage unit. The connection status storage unit 815 stores a provider name on the security device side, a provider name on the monitoring center side, authentication information, and connection information in association with each other.

  The VPN communication control unit 816 performs control for realizing the VPN tunnel with the VPN device on the monitoring center 820 side with respect to the VPN device 130 or the VPN device 230, and connection confirmation information and abnormality for connection confirmation. Is transmitted to the monitoring center 820 and transmission information from the monitoring center 820 is received.

  Since the configurations and functions of the VPN device 130, the VPN device 160, the VPN device 170, the modem 200, and the modem 220 are the same as those in the first embodiment, description thereof is omitted. The same applies to the VPN device 230, and the description thereof will be omitted with reference to the above description.

  The monitoring center 820 further includes a VPN communication control unit 821, an alarm information display unit 122, and a telephone line communication control unit 123. Here, since the configurations and functions of the alarm information display unit 122 and the telephone line communication control unit 123 are the same as those in the first embodiment, description thereof will be omitted.

  The VPN communication control unit 821 controls the VPN device 170 or the VPN device 190 to realize a VPN tunnel between the VPN device 130 and the VPN device 230 on the security device 810 side, and confirms the connection. Response information responding to the transmitted connection confirmation information is transmitted to the security device 810, and connection confirmation information and alarm information from the security device 810 are received.

  The configurations and functions of the ISP3 access point and network 140, the ISP1 access point and network 160, and the ISP2 access point and network 180 are the same as those in the first embodiment, and a description thereof will be omitted. The ISP 4 access point 240 is an entrance to the Internet network provided by the ISP 4, and the security device 810 is connected to the Internet network 150 via the ISP 4 access point and the network.

  With the configuration as described above, by performing the processing shown in the flowcharts of FIGS. 11-1, 11-2, and 11-3 below, a tunnel is established between the VPN devices, and the IP packet passes through the tunnel. . That is, the communication path from the security device 810 to the VPN device 170 and the monitoring center 820 via the VPN device 130, ISP3 access point and network 140, Internet network 150, ISP1 access point and network 160 is transmitted according to the present invention. Configure the means.

  A communication path from the security device 810 to the VPN device 190 and the monitoring center 820 via the VPN device 130, the ISP3 access point and network 140, the Internet network 150, the ISP2 access point and the network 180, and the security device 810 to the VPN. Communication path from the device 230, ISP4 access point and network 240, Internet network 150, ISP1 access point and network 160 to the VPN device 170, monitoring center 820, security device 810 to VPN device 230, ISP4 access point Communication to the VPN device 190 and the monitoring center 820 via the network 240, the Internet network 150, the ISP2 access point, and the network 180. Road constitutes a transmitting means according to the present invention.

  Further, a VPN tunnel is configured between the VPN device 130 and the VPN device 170, between the VPN device 130 and the VPN device 190, between the VPN device 230 and the VPN device 170, and between the VPN device 230 and the VPN device 190. . Specifically, as in the first embodiment described above, IPsec or PPTP is used as a tunneling protocol.

  Next, connection confirmation processing by the monitoring system configured as described above will be described. 11-1, FIG. 11-2, and FIG. 11-3 are flowcharts showing a connection confirmation procedure performed by the VPN communication control unit of the security device, the VPN device, and the VPN communication control unit of the monitoring center.

  Since the connection confirmation processing by the monitoring system performs the same processing for each connected provider, first, the security device 810 to the VPN device 130, the ISP3 access point and network 140, the Internet network 150, the ISP1 access point and network 160 are used. A process for confirming connection to the monitoring center 820 via the VPN device 170 will be described.

  Since the procedure of the connection confirmation processing according to the present embodiment is almost the same as the flowchart shown in FIGS. For step S11015 to step S11035, refer to the description of step S4015 to step S4035 in FIG. 4A and description thereof will be omitted.

  The VPN communication control unit 816 of the security device 810 acquires the IP address of the VPN device 130 on the security device 810 side, the IP address of the VPN device 170 on the monitoring center 820 side, and the IP address of the monitoring center 120 from the IP address storage unit 814. (Step S11001). The VPN communication control unit 816 sends the acquired VPN device on the security device 810 side, that is, the IP address of the acquired VPN device 170 on the monitoring center side to the VPN device 130 and the authentication instruction for the VPN device 170 on the monitoring center side. Transmit (step S11002).

  The VPN device 130 receives an authentication instruction with the VPN device 170 on the monitoring center side (step S11003). The VPN device 130 authenticates the communication partner with the VPN device 170 (step S11004).

  Next, an encryption key is negotiated between the VPN device 130 and the VPN device 170 (step S11005). As a result, each VPN device has an encryption key when actually exchanging data.

  The VPN device 130 transmits the result of the authentication process to the VPN communication control unit 816 of the security device 810 (step S11006). The VPN communication control unit 816 receives the authentication result (step S11007). The VPN communication control unit 816 determines whether the authentication is completed from the received authentication result (step S11008).

  If it is determined that the authentication has not been completed (step S11008: No), the process returns to step S11002, and the authentication process is executed again. If it is determined that the authentication has been completed (step S11008: Yes), the VPN communication control unit 816 stores “authenticated” in the authentication information of the connection state storage unit 815 (step S11009). Specifically, “authenticated” is stored in the authentication information corresponding to “ISP3” on the security device side of the provider name and “ISP1” on the monitoring center side.

  The VPN communication control unit 816 acquires the IP address of the monitoring center 820 from the IP address storage unit 814, the IP address of the monitoring center 820 as the destination address of the IP header, the IP address of the 810 security device as the source address, and the data portion. An IP packet storing the data type “connection confirmation” is generated (step S11010).

  The VPN communication control unit 816 transmits the generated IP packet and the IP address of the VPN device 170 to the VPN device 130 (step S11011). The VPN communication control unit 816 starts a timer after transmitting the IP packet (step S11012).

  The VPN communication control unit 816 determines whether an IP packet is received from the monitoring center 820 in response to the connection confirmation IP packet transmitted within a predetermined time (step S11013). If it is determined that the IP packet responded by the monitoring center 820 within a certain time is not received (step S11013: No), the process returns to step S11010 and the connection confirmation process is performed again.

  Returning to step 11011, steps S11014 to S11035 refer to the description of steps S4014 to S4035 in FIG. 4A, and a description thereof is omitted here.

  The VPN communication control unit 816 of the security device 810 receives the IP packet, the IP address of the VPN device 170, and the IP address of the VPN device 130 (step S11036). The VPN communication control unit 816 acquires the data type from the data part of the received IP packet (step S11037). The VPN communication control unit 816 determines whether the data type is “response” (step S11038).

  If it is determined that the data type is not “response” (step S11038: No), other processing is executed. If it is determined that the data type is “response” (step S11038: Yes), the VPN communication control unit 816 obtains the source address from the IP header (step S11039).

  The VPN communication control unit 116 acquires the destination address of the connection confirmation IP packet transmitted earlier (step S11040). The VPN communication control unit 816 determines whether or not the source address of the response IP packet matches the destination address of the connection confirmation IP packet (step S11041).

  If it is determined that the source address of the response IP packet does not match the destination address of the connection confirmation IP packet (step S11041: No), the process returns to step S11010, and the connection confirmation process is executed again.

  When it is determined that the source address of the response IP packet matches the destination address of the connection confirmation IP packet (step S11041: Yes), the VPN communication control unit 816 stores the connection state information stored in the connection state storage unit 115. “Communication enabled” is stored in the connection information (step S11042).

  The specific process of step S11042 searches for the IP address of the VPN device 130 and the IP address of the VPN device 170 received from the IP address in the VPN device of the IP address information stored in the IP address storage unit 814, and the VPN device 130 And which provider combination the combination of VPN device 170 and VPN device 170 is connected to. Further, “communication enabled” is stored in the connection information corresponding to the combination of provider names stored in the connection state storage unit 815.

  The VPN communication control unit 816 determines whether to disconnect or continue (step S11043). If it is determined that the connection is to be disconnected (step S11043: Yes), the process is terminated. If it is determined that the connection is to be continued (step S11043: No), the process returns to step S11010 and further performs a connection confirmation process. The connection confirmation process is executed every predetermined time.

  The connection confirmation processing described above is performed independently of the connection confirmation processing of the combination of ISP3 and ISP1 for the combination of ISP3 and ISP2, the combination of ISP4 and ISP1, and the combination of ISP4 and ISP2. Since these connection confirmations are the same as the connection confirmation process of the combination of ISP3 and ISP1, description thereof will be omitted with reference to the above description.

  Further, the alarm information transmission process after the connection confirmation is completed will be described. 12-1 and 12-2 are performed by a detection signal input unit, a communication route selection unit, a telephone line control unit, a VPN communication control unit, a VPN device, a VPN communication control unit of a monitoring center, and an alarm display unit. It is a flowchart which shows an alarm information transmission procedure.

  Since the procedure of the connection confirmation processing according to the present embodiment is almost the same as the flowcharts shown in FIGS. 5A and 5B, only different parts will be described. Steps S12010 to S12021 refer to the descriptions of steps S4010 to S4021 of FIGS. 5A and 5B, and description thereof is omitted here.

  First, the sensor 111 detects an abnormality and transmits a detection signal. The detection signal input unit 112 receives an input of a detection signal (step S12001). The communication path selection unit 813 acquires a combination of provider names whose connection information is “communication enabled” from the connection state information stored in the connection information storage unit 815 (step S12002).

  The communication path selection unit 813 determines whether there is a combination of provider names whose connection information is “communication enabled” (step S12003). If it is determined that there is no combination of provider names whose connection information is “communicable” (step S12003: No), the telephone line control unit 117 transmits alarm information to the monitoring center 820 via the analog public line network 210. (Step S12004).

  If it is determined that there is a combination of provider names whose connection information is “communication enabled” (step S12003: Yes), the communication path selection unit 813 selects a combination of provider names stored first (step S12005). ). A provider with a higher priority may be selected from providers that are “communication enabled” by setting a priority in advance.

  The VPN communication control unit 816 includes the IP address of the VPN device on the security device 810 side corresponding to the combination of the provider name selected from the IP address information stored in the IP address storage unit 814 and the VPN device on the monitoring center 820 side. The IP address and the IP address of the monitoring center are acquired (step S12006).

  The VPN communication control unit 816 generates an IP header with the IP address of the monitoring center 820 as the destination address (step S12007). An IP packet is generated from the data part storing the alarm information and the generated IP header (step S12008). The VPN communication control unit 116 transmits the generated IP packet and the IP address of the VPN device on the monitoring center 820 side connected to the selected provider to the acquired IP address of the VPN device on the security device 810 side (step). S12009).

  Steps S12001 to S1205 and S12010 to S12021 refer to the descriptions of steps S4001 to S4005 and steps S4010 to S4021 in FIGS. 5A and 5B, and descriptions thereof are omitted here.

  Here, the above-described processing will be described using a specific example. FIG. 13 is an explanatory diagram illustrating an example of an IP address of a device configuring the monitoring system according to the second embodiment. The illustrated IP address is in the IPv6 format. There is no problem even if the IP address is realized in the IPv4 format.

  FIG. 14 is an explanatory diagram illustrating an example of an IP packet transmitted and received in the connection confirmation process and the alarm information transmission process. It is assumed that a connection confirmation IP packet is transmitted from the security device 810 to the monitoring center 820 via the VPN device 230, the ISP4 access point and network, the Internet network, the ISP2 access point and network, and the VPN device 190. .

  The security device 810 generates an IP packet. The IP address (link local address) of the monitoring center 820 is fe80: xxxx :: 0001: 0001 as the destination address of the IP header, and the IP address (link local address) of the security device 810 is fe80: xxxx as the source address. :: 0002: 0001 is stored (corresponding to step S11010 of FIG. 11-1).

  The generated IP packet and the IP address (global address) of the VPN device 190: 3ffe: xxxx :: 0002: 0001 are transferred to the VPN device 230 (IP address (link local address): fe80: xxxx :: 0004: 0002). Is transmitted (corresponding to step S11011 of FIG. 11-1).

  The VPN device 230 receives the IP packet and the IP address (corresponding to step S11014 in FIG. 11-1), and encrypts the received IP packet with the encryption key (corresponding to step S11015 in FIG. 11-2). The IP address (global address) of the VPN device 190 on the monitoring center 820 side is 3ffe: xxxx :: 0002: 0001 for the encrypted IP packet and the destination address, and the VPN device 230 on the security device 110 side is the source address. IP address (global address): Encapsulates the IP header storing 3ffe: xxxx :: 0004: 0001, generates a new IP packet (corresponding to step S11016 in FIG. 11-2), and transmits it (FIG. 11). Corresponding to step S11017 of 11-2).

  The new IP packet is transmitted to the VPN apparatus 190 through the VPN tunnel composed of the ISP 4, the Internet network, and the ISP 2. The VPN apparatus 190 receives the IP packet (corresponding to step S11018 in FIG. 11-2), decapsulates the IP packet (corresponding to step S11019 in FIG. 11-2), and decrypts the encrypted IP packet ( This corresponds to step S11020 in FIG.

  The destination address stored in the IP header of the decrypted IP packet, that is, the IP address (link local address) of the monitoring center 820: fe80: xxxx :: 0001: 0001 is acquired, and the IP packet and the VPN device 190 are acquired. IP address (link local address): fe80: xxxx :: 0001: 0003 is transmitted to the monitoring center 820 (corresponding to step S11020 in FIG. 11-2). The monitoring center 820 receives the IP packet and the IP address of the VPN device 190 (step 11022).

  In this way, four communication paths using the Internet network are secured, connection confirmation is performed for each communication path, and it is constantly monitored whether or not communication is possible, thereby enabling communication of alarm information. Therefore, the alarm information can be transmitted reliably and at low cost, and an inexpensive monitoring system can be realized. In addition, because four communication paths are secured, alarm information can be sent without reconnection even if one communication state is poor and communication is not possible as long as another system can communicate. Since it can be transmitted, it is possible to reduce the security blank time.

  Furthermore, by securing a communication path using an analog public network other than the Internet network, alarm information can be transmitted reliably even when communication over the Internet network becomes impossible. A high monitoring system can be realized.

  Furthermore, in the above-described second embodiment, the VPN device is configured separately for each provider, but one configuration may be provided for each of the security device side and the monitoring device side. FIG. 15 is a block diagram illustrating a configuration of a monitoring system according to the third embodiment. FIG. 16 is an explanatory diagram of an example of an IP address of an apparatus configuring the monitoring system according to the third embodiment.

  As shown in FIG. 16, even if the VPN apparatus is common, the IP address assigned by each ISP is different, so the connection confirmation process and the alarm information transmission process are performed in consideration of which ISP has passed as a monitoring system. It can be carried out. Since the connection confirmation process and the alarm information transmission process are the same as those in the second embodiment, refer to FIG. 11-1 to FIG. 11-3, FIG. 12-1, FIG. The description of is omitted.

  In order to designate which ISP, ISP3 or ISP4 on the security device 810 side, the access point of the ISP to be passed may be designated.

  In this way, by connecting to a plurality of ISPs with one VPN device, the number of VPN devices is reduced, so that the cost for facilities can be saved.

(Third embodiment)
In the third embodiment, there are 2 providers connected to the security device side and 2 providers connected to the monitoring center side. However, even if three or more providers are connected, they are connected by the same process. Confirmation processing and alarm information transmission processing can be performed.

(Fourth embodiment)
Further, consider a case where a plurality of monitoring centers are configured as a fourth embodiment. FIG. 17 is a block diagram illustrating a configuration of a monitoring system according to the fourth embodiment. FIG. 18 is an explanatory diagram of an example of an IP address of a device that configures the monitoring system according to the fourth embodiment.

  The components, the connection confirmation process, and the alarm information transmission process in the fourth embodiment are almost the same as those in the first embodiment, so the explanation of the components with the same reference numerals in FIG. The description here is omitted with reference to FIGS. 4-3, 5-1, 5-2 and the description thereof.

  Thus, by configuring the monitoring system with a plurality of monitoring centers, it is possible to place the monitoring centers in remote locations such as Tokyo and Osaka, and when one monitoring center stops functioning due to an earthquake or the like. However, it is possible to transmit alarm information to other monitoring centers and to perform highly reliable security.

(Fifth embodiment)
Furthermore, as a fifth embodiment, consider a configuration in which the security device and the monitoring center are connected by a single Internet service provider in the first transmission means. FIG. 19 is a block diagram illustrating a configuration of a monitoring system according to the fifth embodiment. FIG. 20 is an explanatory diagram of an example of an IP address of a device that configures the monitoring system according to the fifth embodiment.

  The components, the connection confirmation process, and the alarm information transmission process in the fifth embodiment are substantially the same as those in the first embodiment, so the explanation of the components with the same reference numerals in FIG. The description here is omitted with reference to FIGS. 4-3, 5-1, 5-2 and the description thereof.

  As described above, even when the Internet service provider on the security device side and the monitoring system side are the same, the VPN tunnel can be constructed, so that highly reliable security can be performed.

  Note that the security device of the first to fifth embodiments (hereinafter referred to as the present embodiment), the connection confirmation program executed in the monitoring center, and the alarm information transmission program are provided by being incorporated in advance in a ROM or the like.

  The security check device, the connection confirmation program, and the alarm information transmission program executed in the monitoring center according to the present embodiment are files in an installable format or an executable format, and are CD-ROM, flexible disk (FD), CD-R, DVD. (Digital Versatile Disk) or the like may be provided by being recorded on a computer-readable recording medium.

  Furthermore, the security check device of this embodiment, the connection confirmation program executed in the monitoring center, and the alarm information transmission program are stored on a computer connected to a network such as the Internet and are provided by being downloaded via the network. It may be configured. In addition, the connection confirmation program and the alarm information transmission program executed in the security device and the monitoring center of the present embodiment may be provided or distributed via a network such as the Internet.

  The security check device of this embodiment, the connection confirmation program and the warning information transmission program executed in the monitoring center are the above-described units (the detection signal input unit of the security device, the communication route selection unit, the telephone line control unit, the VPN communication control unit). , A monitoring center VPN communication control unit, alarm display unit, etc.), and the actual hardware includes a CPU (processor) that reads and executes a program from the ROM to execute each unit. Loaded on the storage device, the detection signal input unit of the security device, the communication route selection unit, the telephone line control unit, the VPN communication control unit, the VPN communication control unit of the monitoring center, the alarm display unit, etc. are on each main storage device It is to be generated.

It is a block diagram which shows the structure of the monitoring system concerning 1st Embodiment. It is explanatory drawing which shows an example of the data structure of the IP address information memorize | stored in the IP address memory | storage part. It is explanatory drawing which shows an example of the data structure of the connection status information memorize | stored in the connection status memory | storage part. It is a flowchart which shows the connection confirmation procedure which the VPN communication control part of a security device, a VPN apparatus, and the VPN communication control part of a monitoring center perform. It is a flowchart which shows the connection confirmation procedure which the VPN communication control part of a security device, a VPN apparatus, and the VPN communication control part of a monitoring center perform. It is a flowchart which shows the connection confirmation procedure which the VPN communication control part of a security device, a VPN apparatus, and the VPN communication control part of a monitoring center perform. It is a flowchart which shows the alarm information transmission procedure which the detection signal input part of a security device, a communication path selection part, a telephone line control part, a VPN communication control part, a VPN apparatus, a VPN communication control part of a monitoring center, and an alarm display part perform. It is a flowchart which shows the alarm information transmission procedure which the detection signal input part of a security device, a communication path selection part, a telephone line control part, a VPN communication control part, a VPN apparatus, a VPN communication control part of a monitoring center, and an alarm display part perform. It is explanatory drawing which shows an example of the IP address of the apparatus which comprises the monitoring system concerning 1st Embodiment. It is explanatory drawing which shows an example of the IP packet transmitted / received in a connection confirmation process and an alarm information transmission process. It is a block diagram which shows the structure of the monitoring system concerning 2nd Embodiment. It is explanatory drawing which shows an example of the data structure of the IP address information memorize | stored in the IP address memory | storage part. It is explanatory drawing which shows an example of the data structure of the connection status information memorize | stored in the connection status memory | storage part. It is a flowchart which shows the connection confirmation procedure which the VPN communication control part of a security device, a VPN apparatus, and the VPN communication control part of a monitoring center perform. It is a flowchart which shows the connection confirmation procedure which the VPN communication control part of a security device, a VPN apparatus, and the VPN communication control part of a monitoring center perform. It is a flowchart which shows the connection confirmation procedure which the VPN communication control part of a security device, a VPN apparatus, and the VPN communication control part of a monitoring center perform. It is a flowchart which shows the alarm information transmission procedure which the detection signal input part of a security device, a communication path selection part, a telephone line control part, a VPN communication control part, a VPN apparatus, a VPN communication control part of a monitoring center, and an alarm display part perform. It is a flowchart which shows the alarm information transmission procedure which the detection signal input part of a security device, a communication path selection part, a telephone line control part, a VPN communication control part, a VPN apparatus, a VPN communication control part of a monitoring center, and an alarm display part perform. It is explanatory drawing which shows an example of the IP address of the apparatus which comprises the monitoring system concerning 2nd Embodiment. It is explanatory drawing which shows an example of the IP packet transmitted / received in a connection confirmation process and an alarm information transmission process. It is a block diagram which shows the structure of the monitoring system concerning 3rd Embodiment. It is explanatory drawing which shows an example of the IP address of the apparatus which comprises the monitoring system concerning 3rd Embodiment. It is a block diagram which shows the structure of the monitoring system concerning 4th Embodiment. It is explanatory drawing which shows an example of the IP address of the apparatus which comprises the monitoring system concerning 4th Embodiment. It is a block diagram which shows the structure of the monitoring system concerning 5th Embodiment. It is explanatory drawing which shows an example of the IP address of the apparatus which comprises the monitoring system concerning 5th Embodiment.

Explanation of symbols

100 800 1500 1700 1900 Monitoring system 110 810 Security device 120 820 Monitoring center 111 Sensor 112 Detection signal input unit 113 813 Communication path selection unit 114 814 IP address storage unit 115 815 Connection state storage unit 116 816 VPN communication control unit 117 Telephone line communication Control unit 130 170 190 230 VPN device 120 Monitoring center 121 821 VPN communication control unit 122 Alarm information display unit 123 Telephone line communication control unit 200 220 Modem 140 ISP3 access point and network 160 ISP1 access point and network 190 ISP2 access point And network 240 ISP4 access point and network 150 Internet network 210 Log public line network

Claims (14)

A security device that transmits alarm information indicating that an abnormality has been detected when an abnormality is detected in a monitoring area, and the security device is connected to a network, and receives the alarm information transmitted by the security device and receives the alarm information. In a monitoring system comprising a monitoring center for monitoring
The security device
First transmission means for transmitting the alarm information via a network of one Internet service provider;
Second transmission means for transmitting the alarm information via a network of another Internet service provider different from the network of the Internet service provider connected by the first transmission means;
Communication control means for determining whether a communication path of the first transmission means or a communication path of the second transmission means is established;
Communication path selection means for selecting either the first transmission means or the second transmission means determined by the communication control means that a communication path has been established,
The communication control means further transmits the alarm information by the first transmission means or the second transmission means selected by the communication path selection means;
A monitoring system characterized by The first transmission means further constructs a tunnel by a virtual facility network (VPN: Virtual Private Network) between VPN devices, and transmits the alarm information by passing through the tunnel,
2. The monitoring system according to claim 1, wherein the second transmission unit further constructs a tunnel by a virtual facility network between VPN devices, and transmits the alarm information by passing through the tunnel. The security device
Further comprising public line transmission means for transmitting the alarm information through a public line network,
The communication path selection means further includes the public line transmission means when it is determined that no communication path is established for any of the communication paths of the first transmission means and the second transmission means. The monitoring system according to claim 1, wherein the monitoring system is selected. The first transmission means further connects the alarm information from the security device to an Internet network via a network of one Internet service provider, and on the monitoring center side the network of the Internet service provider on the security device side Connect to the monitoring center via the same or different Internet service provider network and send
The second transmission means further connects the alarm information from the security device to the Internet via the same Internet service provider network as the first transmission means, and the monitoring center of the first transmission means The monitoring system according to claim 1, wherein the monitoring system is connected to the monitoring center via a network of another Internet service provider different from the Internet service provider connected to the network. The first transmission means further connects the alarm information from the security device to an Internet network via a network of one Internet service provider, and on the monitoring center side the network of the Internet service provider on the security device side Connect to the monitoring center via the same or different Internet service provider network and send
The second transmission means further connects the alarm information from the security device to an Internet network via a network of another Internet service provider different from the first transmission means, and monitors the first transmission means. The monitoring system according to any one of claims 1 to 3, wherein the monitoring system is connected to the monitoring center via a network of another Internet service provider different from the Internet service provider connected to the center. . The first transmission means further connects the security device to one VPN device and connects to the Internet network via a network of one Internet service provider, and the monitoring center side provides an Internet service on the security device side. Connect to the monitoring center via the same or different Internet service provider network as the provider network and send the alarm information,
The second transmission means is further connected to a VPN apparatus different from the VPN apparatus used in the first transmission means from the security device, via a network of another Internet service provider different from the first transmission means. Connected to the Internet network, and connected to the monitoring center via a network of another Internet service provider different from the Internet service provider connected to the monitoring center of the first transmission means to transmit the alarm information. The monitoring system according to claim 5, wherein The first transmission means further connects the security device to one VPN device and connects to the Internet network via a network of one Internet service provider, and the monitoring center side provides an Internet service on the security device side. Connect to the monitoring center via the same or different Internet service provider network as the provider network and send the alarm information,
The second transmission means is further connected via the same VPN apparatus as the VPN apparatus connected by the first transmission means from the security device and via a network of another Internet service provider different from the first transmission means. And connecting to the Internet via the network of another Internet service provider different from the Internet service provider connected to the monitoring center of the first transmission means and transmitting the alarm information. The monitoring system according to claim 5. The first transmission means further transmits the alarm information from the security device connected to the monitoring center via a network of one Internet service provider,
The second transmission means further connects the alarm information from the security device to the Internet via the same Internet service provider network as the first transmission means, and the monitoring center of the first transmission means The monitoring system according to claim 1, wherein the monitoring system is connected to the monitoring center via a network of another Internet service provider different from the Internet service provider connected to the network. The first transmission means is further connected to an Internet network from the security device via a network of one Internet service provider, and the same or different Internet as the network of the Internet service provider on the security device side on the monitoring center side The alarm information is transmitted to the monitoring center by connecting to one VPN device via a service provider network,
The second transmission means is further connected to the Internet network from the security device via the network of the same or different Internet service provider as the first transmission means, and connected to the monitoring center of the first transmission means The alarm information is transmitted to the monitoring center by connecting to a VPN device different from the VPN device connected by the first transmission means via a network of another Internet service provider different from the Internet service provider. The monitoring system according to claim 4, claim 5 or claim 8. The first transmission means is further connected to an Internet network from the security device via a network of one Internet service provider, and the same or different Internet as the network of the Internet service provider on the security device side on the monitoring center side Connect to the monitoring center via a service provider network using a single VPN device,
The second transmission means is connected to the Internet via the network of the same or different Internet service provider as the first transmission means from the security device, and is connected to the monitoring center of the first transmission means. The alarm information is transmitted to the monitoring center by connecting to the same VPN apparatus as the VPN apparatus connected by the first transmission means via a network of another Internet service provider different from the service provider. The monitoring system according to claim 4, claim 5 or claim 8. The security device further comprises a plurality of transmission means for transmitting the warning information from the security device via a network of different Internet service providers,
The communication control means further determines whether or not communication paths of the plurality of transmission means are established,
The communication path selection means further selects any one of the plurality of transmission means determined that a communication path is established by the communication control means,
The monitoring system according to any one of claims 1 to 10, wherein the communication control unit further transmits the alarm information by the transmission unit selected by the communication path selection unit.   12. The transmission unit further transmits the alarm information by connecting to the monitoring center via a network of an Internet service provider other than the Internet service provider connected on the security device side. The monitoring system described in The first transmission means further transmits the alarm information to a single monitoring center via a network of a single Internet service provider,
The second transmission means further transmits the alarm information by the first transmission means via a network of another Internet service provider different from the network of the Internet service provider connected by the first transmission means. The monitoring system according to claim 1, wherein the monitoring system is transmitted to the monitoring center different from the monitoring center that receives the message. A security device that transmits alarm information indicating that an abnormality has been detected when an abnormality is detected in a monitoring area, and the security device is connected to a network, and receives the alarm information transmitted by the security device and receives the alarm information. In the monitoring center for monitoring
A communication path of a first transmission means for transmitting the alarm information via a network of one Internet service provider or another Internet service different from the network of the Internet service provider to which the alarm information is connected by the first transmission means A communication control step of determining whether or not a communication path of a second transmission means for transmitting via the provider's network is established;
A communication path selection step of selecting either the first transmission means or the second transmission means determined to be established by the communication control step;
The communication control step further includes transmitting the alarm information by the first transmission unit or the second transmission unit selected by the communication path selection step;
A monitoring method characterized by.

Images