# US 10,319,201 B2 · Systems and methods for hierarchical acoustic detection of security threats

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,319,201 B2
- Document ID: US10319201B2
- Status: Granted
- Kind: B2
- Application number: 15/626,370
- Filed: 2017-06-19
- Published: 2018-03-29
- Granted: 2019-06-11
- Earliest claimed: 2016-09-26
- Assignees: Shanghai Xiaoyi Technology Co., Ltd.
- Applicants: Shanghai Xiaoyi Technology Co., Ltd.
- Inventors: Lili Zhao
- Web page: https://patentgrep.com/patent/US10319201B2

## CPC

- G08B 13/1672: {using sonic detecting means, e.g. a microphone operating in the audio frequency range}
- G08B 13/04: by breaking of glass
- H04R 29/00: Monitoring arrangements; Testing arrangements {(for hearing aids H04R25/30; detection of loudspeaker connection H04R5/04; sound-field adaptation dependent on speaker detection H04S7/308)}
- G08B: SIGNALLING SYSTEMS, e.g. PERSONAL CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- H04R: LOUDSPEAKERS, MICROPHONES, GRAMOPHONE PICK-UPS OR LIKE ACOUSTIC ELECTROMECHANICAL TRANSDUCERS; ELECTRIC HEARING AIDS; PUBLIC ADDRESS SYSTEMS (producing sounds with frequency not determined by supply frequency G10K)

## Abstract

Systems and methods for detecting a security threat over a network are provided. The system comprises a microphone configured to capture acoustic signals; a hardware interface configured to generate data samples from the acoustic signals; a memory storing a plurality of instructions; and a hardware processor configured to execute the instructions to: determine information indicative of a rate of intensity variation of the acoustic signals; and determine, based on the information, whether to transmit the data samples to a remote server. The hardware processor is also configured to, after determining to transmit the data samples to the remote server, generate data packets that include the data samples, and transmit the data packets to the remote server. The remote server can then reconstruct the data samples from the data packets and, if the data samples indicates a security threat, transmit a warning signal to a monitoring device.

## Claims

### Claim 1

A system for detecting a security threat over a network, the system comprising:
a microphone configured to capture acoustic signals;
a hardware interface configured to generate data samples from the acoustic signals;
a memory storing a plurality of instructions; and
a hardware processor configured to execute the instructions to:
determine a rate of intensity variation of the acoustic signals;
determine, based on the rate of intensity variation of the acoustic signals, whether to transmit the data samples to a remote server;
after determining to transmit the data samples to the remote server:
generate data packets that include the data samples; and
transmit the data packets to the remote server;
wherein the determination of the rate of intensity variation of the acoustic signals comprises:
grouping the data samples into a plurality of data subsets;
determining a first number for each data subset of the plurality of data subsets, the first number corresponding to a number of data samples, in each data subset, of which a value exceeds or falls below a first threshold; and
determining a second number as the number of data subsets of which the first number exceeds the first threshold; and
wherein the determination of whether to transmit the data samples to the remote server for detection of security threat comprises determining to transmit the data samples to the remote server if the second number exceeds a second threshold.

### Claim 2 (depends on 1)

The system of claim 1, wherein the determination of the rate of intensity variation of the acoustic signals comprises:
grouping the plurality of data subsets into a plurality of analysis windows, at least two of the analysis windows including a number of identical data subsets;
wherein the second number is determined based on data subsets grouped into one analysis window.

### Claim 3 (depends on 2)

The system of claim 2, wherein:
the determination of the rate of intensity variation of the acoustic signals comprises determining the second number for each of the analysis windows; and
the determination of whether to transmit the data samples to the remote server is based on a distribution of the second numbers among the analysis windows.

### Claim 4 (depends on 1)

The system of claim 1, wherein:
the system further comprises the remote server; and
the remote server is configured to:
receive the data packets;
reconstruct the data samples from the data packets;
compare the data samples against one or more known patterns of acoustic signals associated with a security threat;
generate a signal based on the comparison result; and
transmit the signal to a monitoring device to cause the monitor device to generate a warning based on the signal.

### Claim 5 (depends on 4)

The system of claim 4, comprising a support vector machine configured to categorize the one or more known patterns of acoustic signals.

### Claim 6

A method for detecting a security threat over a network, comprising:
receiving acoustic signals;
generating data samples from the acoustic signals;
determining a rate of intensity variation of the acoustic signals;
determining, based on the rate of intensity variation of the acoustic signals, whether to transmit the data samples to a remote server;
after determining to transmit the data samples to the remote server:
generating data packets that include the data samples; and
transmitting the data packets to the remote server;
wherein the determination of the rate of intensity variation of the acoustic signals comprises:
grouping the data samples into a plurality of data subsets;
determining a first number for each data subset of the plurality of data subsets, the first number corresponding to a number of data samples, in each data subset, of which a value exceeds or falls below a first threshold; and
determining a second number as the number of data subsets of which the first number exceeds the first threshold; and
wherein the determination of whether to transmit the data samples to the remote server for detection of security threat comprises determining to transmit the data samples to the remote server if the second number exceeds a second threshold.

### Claim 7 (depends on 6)

The method of claim 6, wherein the determination of the rate of intensity variation of the acoustic signals comprises:
grouping the plurality of data subsets into a plurality of analysis windows, at least two of the analysis windows including a number of identical data subsets;
wherein the second number is determined based on data subsets grouped into one analysis window.

### Claim 8 (depends on 7)

The method of claim 7, wherein:
the determination of the rate of intensity variation of the acoustic signals comprises determining the second number for each of the analysis windows; and
the determination of whether to transmit the data samples to the remote server is based on a distribution of the second numbers among the analysis windows.

### Claim 9 (depends on 6)

The method of claim 6, further comprising:
receiving, by the remote server, the data packets;
reconstructing, by the remote server, the data samples from the data packets;
comparing, by the remote server, the data samples against one or more known patterns of acoustic signals associated with a security threat;
generating, by the remote server, a signal based on the comparison result; and
transmitting, by the remote server, the signal to a monitoring device to cause the monitor device to generate a warning based on the signal.

### Claim 10 (depends on 9)

The method of claim 9, further comprising: categorizing the one or more known patterns of acoustic signals.

### Claim 11

A non-transitory computer readable medium that stores a set of instructions that is executable by a hardware processor to cause the hardware processor to perform a method for detecting a security threat over a network, comprising:
receiving acoustic signals;
generating data samples from the acoustic signals;
determining a rate of intensity variation of the acoustic signals;
determining, based on the rate of intensity variation of the acoustic signals, whether to transmit the data samples to a remote server;
after determining to transmit the data samples to the remote server:
generating data packets that include the data samples; and
transmitting the data packets to the remote server;
wherein the determination of the rate of intensity variation of the acoustic signals comprises:
grouping the data samples into a plurality of data subsets;
determining a first number for each data subset of the plurality of data subsets, the first number corresponding to a number of data samples, in each data subset, of which a value exceeds or falls below a first threshold; and
determining a second number as the number of data subsets of which the first number exceeds the first threshold; and
wherein the determination of whether to transmit the data samples to the remote server for detection of security threat comprises determining to transmit the data samples to the remote server if the second number exceeds a second threshold.

### Claim 12 (depends on 11)

The medium of claim 11, wherein the determination of the rate of intensity variation of the acoustic signals comprises:
grouping the plurality of data subsets into a plurality of analysis windows, at least two of the analysis windows including a number of identical data subsets;
wherein the second number is determined based on data subsets grouped into one analysis window.

### Claim 13 (depends on 12)

The medium of claim 12, wherein:
the determination of the rate of intensity variation of the acoustic signals comprises determining the second number for each of the analysis windows; and
the determination of whether to transmit the data samples to the remote server is based on a distribution of the second numbers among the analysis windows.