Distributed control of a heterogeneous video surveillance network

• US 9,681,103 B2
• Filed: 11/13/2012
• Issued: 06/13/2017
• Est. Priority Date: 11/13/2012
• Status: Active Grant

• Current Assignee: Generac Power Systems Incorporated (Generac Holdings Incorporated)
• Original Assignee: International Business Machines Corporation
• Inventors: Billau, Ronald L., Di Luoffo, Vincenzo V., Schulz, Brandon W., Dumarot, Dan P., Paschal, Matthew J., Woodbury, James E.
• Primary Examiner(s): Conaway, James
• Application Number:
  US13/675,349
• Publication Number:
  US 20140136701A1
• Time in Patent Office: 1,673 Days
• Field of Search: 709225
• CPC Class Codes: G08B 13/19656 Network used to communicate with a camera, e.g. WAN, LAN, Internet
• CPC Class Codes: H04L 69/00 Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass networks security protocols H04L9/40; wireless communication networks H04W
• CPC Class Codes: H04N 21/21805 enabling multiple viewpoints, e.g. using a plurality of cameras
• CPC Class Codes: H04N 21/2396 characterized by admission policies admission control, resource allocation in open networks H04L12/5692; arrangements for network security using user profiles for access control H04L63/102; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25 Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies maintenance or administration in data networks H04L41/00
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/18 Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast

Abstract

A surveillance video broker arbitrates access by multiple clients to multiple surveillance video sources. Both clients and sources register with the broker. Each source independently specifies respective clients permitted real-time access to its video and conditions of access, if any. Preferably, the video source is a local surveillance domain having one or more cameras, one or more sensors, and a local controller, the source specifying clients or client groups permitted access, and independently specifying conditions of access for each client or client group, where conditions may include scheduled events, non-scheduled events, such as alarms or emergencies, and/or physical proximity. The broker automatically authorizes real-time access according to pre-specified conditions. Preferably, the broker can also arbitrate alert notifications to the clients based on pre-specified notification criteria.

Claims

1. A method for operating a data processing system of a surveillance video broker, comprising:

registering a plurality of clients in a data processing system of a surveillance video broker;

registering a plurality of video surveillance domains in said data processing system of said surveillance video broker, each video surveillance domain comprising a respective disjoint set of one or more video cameras operated by a respective operating entity common to all video cameras of the respective set, wherein at least some video surveillance domains are operated by different respective operating entities;

recording in said data processing system a plurality of authorization records, each authorization record associated with a single respective video surveillance domain of said plurality of video surveillance domains and independently specifying authorization on behalf of the respective video surveillance domain with which it is associated to allow at least one respective client real-time access to at least some surveillance video generated by the respective video surveillance domain with which it is associated, each authorization record granting access to one or more respective clients independently of association of the one or more respective clients with the respective operating entity and independently of whether one or more clients have been granted access to one or more other video surveillance domains;

recording in said data processing system a plurality of notification records, each notification record associated with a single respective video surveillance domain of said plurality of video surveillance domains and independently specifying on behalf of the respective video surveillance domain with which it is associated at least one respective client authorized to receive notification of one or more respective alert events generated by the respective video surveillance domain, each said notification record specifying at least one respective client authorized to receive notification independently of whether the at least one respective client is authorized by said authorization records to access surveillance video generated by the respective video surveillance domain with which the respective notification record is associated;

recording in said data processing system a plurality of notification filters, each notification filter independently specifying on behalf of a respective client one or more respective alert events for which the client wishes to receive notice;

receiving in said data processing system of said surveillance video broker a plurality of alert event notification requests, each alert event notification request being received from a respective video surveillance domain and identifying an alert event detected at the respective surveillance domain for which notification to clients is requested;

responsive to receiving each said alert event notification request, accessing each notification record associated with the respective surveillance domain from which the respective alert event notification request was received to determine in said data processing system a respective set of clients to receive notification of the respective alert event, and transmitting an alert notification to each client of the respective set, wherein responsive to receiving each said alert event notification request, said data processing system accesses said notification records and said notification filters to determine a respective set of clients to receive notification of the respective alert event, the set being the intersection of a set of clients authorized to receive notification of the respective alert event by said authorization records and a set of clients wishing to receive notification of the respective alert event according to said notification filters;

receiving in said data processing system of said surveillance video broker a plurality of video access requests, each request requesting real-time access by a respective client to at least some video produced by a respective surveillance domain;

responsive to each said video access request, automatically using the one or more authorization records associated with the respective surveillance domain to which the respective client requested access to determine whether the respective client is authorized to access the requested video;

responsive to determining that the respective client is authorized to access the requested video of a video access request, automatically granting real-time access by the respective client to the requested video.

2. The method of claim 1, wherein at least one authorization record specifies conditional authorization based on at least one respective specified condition.