Abstract: A surveillance system implements an architecture and process to support real-time abnormal behavior assessment operations in a distributed scalable sensor network. An automated behavior model builder generates behavior models from sensor data. A plurality of abnormal behavior scoring engines operating concurrently to generate abnormal behavior assessment models by scoring the behavior models. An execution performance manager performs fast switching of behavior models for the abnormal behavior scoring engines. The execution performance manager performs detection of abnormal behavior score distribution characteristic deviation by comparing a current abnormal behavior assessment model to a pre-recorded abnormal behavior assessment model. The execution performance manager selects a pre-recorded behavior model for the abnormal behavior scoring engines when the deviation exceeds a predetermined threshold.

Abstract: A meta data management system for use with a surveillance system includes a user interface that allows users to define rules to manage meta data from distributed devices. An application programming interface provides an application access to system data and control information. A mechanism allows the application to transparently and seamlessly integrate with different types of databases by transparently allocating and searching the data that are physically distributed at different devices.

Abstract: The originator requests information from a target by launching a receptor agent that propagates across the mobile ad hoc network to the target. Along the way, intermediate nodes retain copies of the receptor. The target adds reply information to the receptor and launches it onto the network. When the reply-bearing receptor rendezvous with a receptor copies that contain matching patterns corresponding to the reply-bearing receptor, the reply information is transferred to those receptor copies. The information transferred may be encrypted at the target, using encryption key supplied by the originator. In this way, intermediate nodes cannot access the information being propagated in the receptors that they host.

Abstract: A resource manager allocates operation requests to security network devices according to device characteristics. The devices collect and/or manage data from an environment. The devices may include a camera, a multimedia recorder, an analyzer, and a meta-data server. One or more users submit operation requests to a controller. The controller allocates the network devices to the operation requests according to the device characteristics. The device characteristics include availability of the device, media flow data of the device, location of the device, and capabilities of the device.

Abstract: A peer-to-peer camera sensor network is defined using intelligent cameras that employ iSCSI initiators and iSCSI targets to read and write data and to send control commands directly across the network as iSCSI blocks. Because data transfer rides on top of the internet protocol, cameras can be directly attached to the internet without requiring attachment to a host computer. Image data represented as video frames are mapped onto iSCSI data blocks and are shared among the cameras directly to form an efficient virtual block level video image frame storage that can be directly manipulated by multiple cameras without data replications. Transport of multiple streams, associated with scalable or multilevel MPEG encoding scheme for instance, are automatically sequenced and realigned as the iSCSI data blocks are time-aligned.

Abstract: The surveillance visualization system extracts information from plural cameras to generate a graphical representation of a scene, with stationary entities such as buildings and trees represented by graphical model and with moving entities such as cars and people represented by separate dynamic objects that can be coded to selectively reveal or block the identity of the entity for privacy protection. A power lens tool allows users to specify and retrieve results of data mining operations applied to a metadata store linked with objects in the scene. A distributed model is presented where a grid or matrix is used to define data mining conditions and to present the results in a variety of different formats. The system supports use by multiple persons who can share metadata and data mining queries with one another.

Abstract: The intelligent, automated surveillance system collects the interactions between the security personal and the surveillance system during the handling of an alarm. Each alarm is modeled as a “transaction” and each operation/action that a security personal executes modeled as an “event” within the transaction. The collected events within the transaction are in partial order. Furthermore, the system provides a scoring system for a security manager to evaluate the performance of the security guard. The score of the sequence of actions that the security guard performed manually and the system performed automatically for each set of dependent alarms are used to decide future sequence of operation. Security guards can overwrite the automatic sequencing of actions with manual sequence of operations.

Abstract: A surveillance system generally includes a data capture module that collects sensor data. A scoring engine module receives the sensor data and computes at least one of an abnormality score and a normalcy score based on the sensor data, at least one dynamically loaded learned data model, and a learned scoring method. A decision making module receives the at least one of the abnormality score and the normalcy score and generates an alert message based on the at least one of the abnormality score and the normalcy score and a learned decision making method to produce progressive behavior and threat detection.

Abstract: A method is provided for detecting a threat in a distributed multi-camera surveillance system. The method includes: monitoring movement of an object in a field of view of a first camera using software installed at the first camera; detecting a suspicious object at the first camera when movement of the object does not conform with a motion flow model residing at the first camera; sending a tracking request from the first camera to a second camera upon detecting the suspicious object at the first camera; monitoring movement of the object in a field of view of the second camera using software installed at the second camera; assigning threat scores at the second camera when the movement of the object does not conform with a motion flow model residing at the second camera; and generating an alarm based in part on the threat scores detected at the first camera and the second camera.

Abstract: Distributed modules in a network dynamically select communication protocols to communicate in a secure or firewall-protected network. Applications register with a lookup service. The lookup service maintains a lookup table including registration information for multiple applications. Registration information may include, but is not limited to, IP address, firewall restrictions, tunnel protocol, port information, and proxy queue capabilities. An application seeking to communicate acquires the registration information for a desired recipient from the lookup table. The application uses the registration information to select communication protocols necessary to communicate with the recipient.

Abstract: A system and method provides protocol independent communication between mobile electronic devices. Multiple users may communicate using different applications running on different mobile electronic devices with different end-to-end protocols. A multimedia controller in connection with control agents provides the information to establish communications between mobile electronic devices having applications with incompatible communication protocols. A session and routing controller controls communication sessions and a Web hyperlink dictionary provides information regarding the location of the multimedia controller and control agents.

Abstract: Network communication from a client computer accessing an application service computer through use of the Internet (where the application service computer is normally protected from general Internet access by a firewall) is enabled by validating each computer message instance between the client computer and the application service computer against a first message permissive in a message address confirmation computer and a second message permissive in a firewall-tunnel computer. The firewall-tunnel computer and the message address confirmation computer interface directly to the Internet via secure protocol. The approach enables bi-directional multi-protocol communications by using HTTP protocol communications to the Internet in a computer systems infrastructure without need for re-configuration of firewall or NAT devices installed between the Internet and a network otherwise protected by a firewall or NAT device.

Abstract: A system and method provides protocol independent communication between mobile electronic devices. Multiple users may communicate using different applications running on different mobile electronic devices with different end-to-end protocols. A multimedia controller in connection with control agents provides the information to establish communications between mobile electronic devices having applications with incompatible communication protocols. A session and routing controller controls communication sessions and a Web hyperlink dictionary provides information regarding the location of the multimedia controller and control agents.