Intruder detection method and apparatus

Patent metadata

Field	Value
Publication number	US-11393306-B2
Application number	US-202017025770-A
Country	US
Kind code	B2
Filing date	Sep 18, 2020
Priority date	Jun 29, 2018
Publication date	Jul 19, 2022
Grant date	Jul 19, 2022

Abstract

An intruder detection method is provided, comprising a security server sending a verification prompt to a device in a controlled-access area, based on an entry indication of an entrant into the controlled-access area, with the verification prompt indicating the entrant should perform a predefined verification action, the security server receiving entrant behavior information, the security server comparing the entrant behavior information to a behavior model of a set of authorized persons associated with the controlled-access area, with the behavior model including the verification prompt, and the security server generating an intruder indication if the entrant behavior information does not match a behavior sequence included in the behavior model.

First claim

What is claimed is:

1. An intruder detection method comprising:
a security server receiving entrant behavior information of an entrant into a controlled-access area;
the security server comparing the entrant behavior information to a behavior model of an authorized person associated with the controlled-access area; and
the security server generating an intruder indication if the entrant behavior information does not match a behavior sequence, corresponding to a verification prompt, included in the behavior model.

2. The method of claim 1 , wherein the method includes selecting the behavior sequence from a plurality of behavior sequences in the behavior model, with the selected behavior sequence corresponding to a predefined verification action.

3. The method of claim 1 , wherein the method includes:
comparing entry location information and entry time information, received by the security server, to corresponding behavior parameters of each behavior sequence of a plurality of behavior sequences in the behavior model;
generating a matching score for each behavior sequence; and
selecting the behavior sequence having a highest matching score from a plurality of behavior sequences in the behavior model, with the selected behavior sequence corresponding to a predefined verification action.

4. The method of claim 1 , wherein the method includes:
comparing entry location information and entry time information, received by the security server, to corresponding behavior parameters of each behavior sequence of a plurality of behavior sequences in the behavior model;
generating a matching score and a disturbance score for each behavior sequence; and
selecting the behavior sequence corresponding to a highest matching score or to a highest disturbance score from at least two behavior sequences if the at least two behavior sequences share a highest matching score, with the selected behavior sequence corresponding to a predefined verification action.

5. The method of claim 1 , wherein receiving the entrant behavior information includes receiving the entrant behavior information until encountering an end event in the entrant behavior information or until a verification period end, with the end event specified in the behavior sequence.

6. The method of claim 1 , wherein the method includes, in response to comparing the entrant behavior information to the behavior model:
generating a behavior comparison value; and
generating the intruder indication when the behavior comparison value is smaller than an alarm threshold.

7. The method of claim 1 , wherein the method includes:
accumulating authorized person behavior information during a learning phase;
recognizing behavior patterns in the accumulated authorized person behavior; and
generating one or more behavior sequences after the learning phase has been completed, with the one or more behavior sequences being generated based on the behavior patterns.

8. The method of claim 7 , wherein the method includes obtaining at least one behavior model parameter in the behavior model for each sequence action of a plurality of sequence actions.

9. A security server comprising:
a non-transitory memory comprising instructions; and
one or more processors in communications with the memory, wherein the one or more processors execute the instructions to:
receive entrant behavior information of an entrant into a controlled-access area;
compare the entrant behavior information to a behavior model of an authorized person associated with the controlled-access area; and
generate an intruder indication if the entrant behavior information does not match a behavior sequence, corresponding to a verification prompt, included in the behavior model.

10. The security server of claim 9 , wherein the one or more processors execute the instructions to select the behavior sequence from a plurality of behavior sequences in the behavior model, with the selected behavior sequence corresponding to a predefined verification action.

11. The security server of claim 9 , wherein the one or more processors execute the instructions to:
compare entry location information and entry time information, received by the security server, to corresponding behavior parameters of each behavior sequence of a plurality of behavior sequences in the behavior model;
generate a matching score for each behavior sequence; and
select the behavior sequence having a highest matching score from a plurality of behavior sequences in the behavior model, with the selected behavior sequence corresponding to a predefined verification action.

12. The security server of claim 9 , wherein the one or more processors execute the instructions to:
compare entry location information and entry time information, received by the security server, to corresponding behavior parameters of each behavior sequence of a plurality of behavior sequences in the behavior model;
generate a matching score and a disturbance score for each behavior sequence; and
select the behavior sequence corresponding to a highest matching score or to a highest disturbance score from at least two behavior sequences if the at least two behavior sequences share a highest matching score, with the selected behavior sequence corresponding to a predefined verification action.

13. The security server of claim 9 , wherein the instructions to receive the entrant behavior information includes instructions to receive the entrant behavior information until encountering an end event in the entrant behavior information or until a verification period end, with the end event specified in the behavior sequence.

14. The security server of claim 9 , wherein the one or more processors, in response to comparing the entrant behavior information to the behavior model, execute the instructions to:
generate a behavior comparison value; and
generate the intruder indication when the behavior comparison value is smaller than an alarm threshold.

15. The security server of claim 9 , wherein the one or more processors execute the instructions to:
accumulate authorized person behavior information during a learning phase;
recognize behavior patterns in the accumulated authorized person behavior; and

generate one or more behavior sequences after the learning phase has been completed, with the one or more behavior sequences being generated based on the behavior patterns.

16. The security server of claim 15 , wherein the one or more processors execute the instructions to obtain at least one behavior model parameter in the behavior model for each sequence action of a plurality of sequence actions.

17. A non-transitory computer-readable medium storing computer instruction for executing intruder detection, wherein the instructions when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, at a security server, entrant behavior information of an entrant into a controlled-access area;
comparing, in the security server, the entrant behavior information to a behavior model of an authorized person associated with the controlled-access area; and
generating, in the security server, an intruder indication if the entrant behavior information does not match a behavior sequence, corresponding to a verification prompt, included in the behavior model.

18. The non-transitory computer-readable medium of claim 17 , wherein the operations include selecting the behavior sequence from a plurality of behavior sequences in the behavior model, with the selected behavior sequence correspon

Assignees

• Huawei Cloud Computing Tech Co Ltd

Inventors

• Wang Xiaobo
• Wang Honglei
• Huo Zhijie
• Ding Xinmin

Classifications

• G08B15/00

  Identifying, scaring or incapacitating burglars, thieves or intruders, e.g. by explosives · CPC title

• G08B13/00 Primary

  Burglar, theft or intruder alarms · CPC title

• G08B21/22

  responsive to presence or absence of persons · CPC title

• G06F9/542 Primary

  Event management; Broadcasting; Multicasting; Notifications · CPC title

• G08B21/182

  Level alarms, e.g. alarms responsive to variables exceeding a threshold · CPC title