the present invention provides intelligent security and safety monitoring . the present invention may be implemented as a modular system that can utilize several core components that may be integrated together : video detection components , input components , action components , and service components . a rules engine codifies and evaluates various rules , such as “ issue an alert to person a when motion is detected in location b for time period c .” the video detection components are used to extract relevant video parameters from the video sources ; the video parameters are input into the rules engine . the input components may be used to receive inputs from other systems , for example sensory devices , such as temperature probes . the action components represent various actions that may be taken under certain conditions , and may be activated by the rules engine . finally , the service components provide interfaces for services performed by human beings (“ artificial artificial intelligence ”), for example remote monitoring by off - shore security guards (“ mechanical turks ”). the present invention may be implemented using any number of detection , input , action , and service components . some illustrative components are presented here , but the present invention is not limited to this list of components . an advantage of the present invention is the open architecture , in which new components may be added as they are developed . fig1 shows system architecture 100 of one embodiment of the present invention . one or more data inputs 102 are received via one or more input components 104 ( only one input component is illustrated for clarity ). the data inputs could be data from police reports , anonymous tips , sensory devices , etc . in one embodiment , data inputs could come from a personnel database in storage 112 and from temperature probe 116 . the input components , such as input component 104 , provide interfaces between the system 100 and various input devices . the data inputs 102 are assigned a weight by data weight engine 106 . the weights may be a function of the input data , the source of the input data ( such as its reliability ), external events ( such as the national terror alerts in the united states ), or any other information . ( only one input data is shown being processed by data weight engine 106 for clarity .) one or more video inputs 107 are received and processed by one or more detection components 108 ( only one video detection component is illustrated for clarity ). the video inputs could be historical , archived video data , such as video from storage 112 , or could be video data from live video cameras , such as camera 114 or camera 115 . the detection components , such as detection component 108 , determine one or more video parameters from the video inputs 107 . for example , detection component 108 may detect whether or not there is a person in a particular region of video input 107 . the one or more video parameters that are determined by the detection component 108 are assigned a weight by video weight engine 110 . the weights may be a function of the video data , the video source ( such as its reliability ), external events ( such as the national terror alerts in the united states ), or any other information . ( only one video parameter is shown being processed by video weight engine 110 for clarity .) cameras 114 and 115 may be digital ip cameras , digital pc cameras , web - cams , analog cameras , cameras attached to camera servers , etc . any camera device is within the scope of the present invention , as long as the camera device can capture video . some cameras may have an integrated microphone ; alternatively , a separate microphone may be used to capture audio data along with video data . as used herein , the terms “ video ,” “ video data ,” “ video source ,” etc . are meant to include video without audio , as well as video with interlaced audio ( audiovisual information ). of course , it is to be understood that the present invention may also be implemented using audio data without accompanying video data by replacing cameras with microphones . the weighted input data and the weighted video data ( outputs from the data weight engine 106 and the video weight engine 110 ) are processed by rules engine 120 . rules engine 120 evaluates a set of rules based on the weighted input data and the weighted video data . the rules engine 120 activates one or more actions via one or more action components 122 . for example , the rules engine 120 may contain a rule stating : “ issue email alert to executive a ( action component 1 ) if executive a swipes into office building ( data input component 1 ) and within the last twenty minutes there was motion for more than five minutes in the region behind his desk on the camera in his office ( detection component 1 ).” if the preconditions of the rule are satisfied , the action is performed . as discussed previously , the preconditions may be weighted based on the data , the source of the data , external events , and other information . for example , the executive swiping into a building would be given a higher weight than a tip saying that the executive has entered the building . a security guard logging into a system that the executive has entered the building may receive an even higher weight . in fig1 , data may also come from a service component 118 . service components , such as service component 118 , are interfaces to human operators (“ artificial artificial intelligence ”). for example , a service component may provide an interface for human operators to monitor a given area for suspicious activity , and to send a signal to the rules engine 120 that suspicious activity is going on in a given area . the rules engine 120 will activate an action if a corresponding rule is activated . alternatively , the human operator may force an action to be performed by directly activating an action component , such as action component 122 . equations 1 to 4 show possible rules that may be evaluated by rules engine 120 . for example , as shown in eq . 1 , action component a 1 will be activated if the expression on the left - hand side is greater than a predetermined threshold τ 1 . in eqs . 1 - 4 , “ a ” stands for action component , “ f , g , and h ” are predetermined functions , “ w ” stands for weight , “ x ” stands for the input data , and “ v ” stands for video data . eqs . 1 - 4 could represent a hierarchy of actions that would be activated for different threshold scenarios . alternatively , eqs . 1 - 4 could represent several rules being evaluated in parallel . eqs . 1 - 4 are illustrative of only one embodiment of the present invention , and the present invention may be implemented using other equations , other expressions , or even by using heuristic rules rather than equations . equation 5 shows an example of a calculation of determining a weight that may be performed by data weight engine 106 or video weight engine 110 . the weight “ w ” may be based on several factors , including the source of the data “ s ” ( for example , the reliability of the source ), the time that the data was received “ t ” ( for example , older data would be assigned a lower weight ), and the frequency that the data was received “ f ” ( for example , the same data received multiple times would be assigned a higher weight ). other weighting factors may also be used , and the weighing factors described here are illustrative only and are not intended to limit the scope of the invention . equation 6 shows an example of a calculation that may be performed by detection component 108 to determine a video parameter “ v i ” from the video data “ v ( t )”. eq . 6 shows a video stream “ v ( t )” weighted by a weighting function “ w ( v )” and integrated over time from time t = 1 to t = t n . the video parameter “ v i ” may be obtained as a function “ f i ” of the integral . for example , a detection component for counting the number of people that enter a region over a period of time may perform face detection in a given frame , count the number of faces detected , and then integrate over several frames to obtain a final count . in one embodiment , the function “ f i ” of eq . 6 may be a composition of several functions , as shown in equation 7 . for example , a detection component may count the number of people wearing a safety helmet that enter a given area by composing a safety helmet detection function with a people counting function . in one embodiment , the new , or future , weights “ w j ” may be based on the past weights “ w i ” and external events “ e i ”. examples of external events could be “ amber alerts ” for missing children , “ national terror alerts ” for terrorist activity in the united states , etc . eq . 8 shows an example of a calculation for determining new , or future , weights “ w j ” by composing a matrix of past weights “ w i ” with external events “ e i ”. fig2 shows a software architecture 200 of one embodiment of the present invention . a presentation layer 202 provides the front - end interface to users of the system 100 of fig1 . several user interfaces are provided . for example , a user interface is provided for an administrator , who can modify various system parameters , such as the data input components , the detection components , the data and video weights , the rules , as well as the action components . another user interface is provided for an officer , such as a security guard , to monitor the activity of the system 100 . for example , a user interface for the security officer would allow the officer to monitor alerts system - wide , turn on and off appropriate cameras , and notify authorities . an interface is also provided for an end - user , such as an executive . the interface for the end - user allows , for example , the end - user to monitor those alerts relevant to him or her , as well as to view those cameras and video sources he or she has permission to view . various user interfaces may be created for various users of the present invention , and the present invention is not limited to any particular user interface shown or described here . a middle layer 204 provides the middleware logic for the system 100 . the middle layer 204 includes the weight engines 106 , 110 as well as the rule engine 120 of fig1 . the middle layer interfaces with the user interface 202 and evaluates the logic of equations 1 - 8 . a database layer 206 is provided for storing the input data and the video data . in one embodiment , the database layer 206 may be implemented using a hierarchical storage architecture , in which older data , or less frequently used data , is migrated to slower and cheaper storage media . the database layer 206 provides the input data and the video data to the middle layer 204 , which in turn processes the data for display by the presentation layer 202 . fig3 shows a hardware architecture 300 of one embodiment of the present invention . the software architecture 200 may be implemented using any hardware architecture , of which fig3 is illustrative . a bus 314 connects the various hardware subsystems . a display 302 is used to present the output of the presentation layer 202 of fig2 . an i / o interface 304 provides an interface to input devices , such as keyboard and mouse ( not shown ). a network interface 305 provides connectivity to a network , such as an ethernet network , a local area network ( lan ), a wide area network ( wan ), an ip network , the internet , etc . ram 306 provides working memory while executing a process according to system architecture 100 of fig1 . hard disk 308 provides the program code for execution of a process according to system architecture 100 of fig1 . cpu 309 executes program code stored on hard disk 308 or ram 306 , and controls the other system components . hierarchical storage manager 310 provides an interface to one or more storage modules 312 on which video data is stored . it is to be understood that this is only an illustrative hardware architecture on which the present invention may be implemented , and the present invention is not limited to the particular hardware shown or described here . it is also understood that numerous hardware components have been omitted for clarity , and that various hardware components may be added without departing from the spirit and scope of the present invention . fig4 illustrates a process 400 according to one embodiment of the present invention . process 400 may be stored in hard disk 308 and ram 306 , and may be executed on cpu 309 of fig3 . the process starts at step 402 . input data from one or more data sources is received , as shown in step 404 . video data from one or more video sources is received , as shown in step 406 . image analysis is performed on the video data to generate one or more video parameters , as shown in step 408 . one or more data weights are calculated for the input data , as shown in step 410 . one or more video weights are calculated for the video parameters , as shown in step 412 . a set of rules is evaluated using the input data , the data weights , the video parameters , and the video weights , as shown in step 414 . one or more actions are performed based on the evaluation of the rules , as shown in step 416 . process 400 ends in step 418 . according to the present invention , various detection components may be used to determine one or more video parameters from the video inputs . these detection components may be configured to record meta - data along an occurrence of each event . for example , if a person is detected in an area by a face detection component , meta - data may be stored along with each occurrence of that person in the video . some illustrative detection components are listed below . however , the present invention is not limited to these detection components , and various detection components may be used to determine one or more video parameters , and are all within the scope of the present invention . 3 . detect whether it is a person in designated area ( excluding pets , wind , etc .) 5 . detect if more people entered a designated area than left the designate area 17 . detect object left in a given area for a certain period of time 20 . detect if vehicles is driving the wrong way in a lane additionally , various sensory devices may be integrated into system 100 of fig1 by adding an input component for receiving and processing the input from the sensory device . some illustrative input components are listed below . however , the present invention is not limited to these input components , and various other input components associated with various other sensory and other devices are within the scope of the present invention . as described above , various action components may be used to perform one or more actions in response to a rule being activated . the rules engine may activate one or more action components under certain conditions defined by the rules . some illustrative action components are listed below . however , the present invention is not limited to these particular action components , and other action components are within the scope of the present invention . 13 . issue a forced alerts ( with automatic escalation if no response ) according to the present invention , service components may be used to integrate human intelligence into system 100 . for example , a service component may provide a user interface for remote security guards (“ mechanical turks ”) who may monitor the video inputs . some illustrative examples of what the security guards could monitor for and detect is listed below . some events , such as “ suspicious behavior ,” which may be hard for a computer to detect , may be detected by a human operator (“ artificial artificial intelligence ”). the human operators may also add meta - data for each occurrence of an event . for example , a security guard may add meta - data to each portion of a video where he or she noticed suspicious activity . the present invention is not limited to the examples described here , and is intended to cover all such service components which may be added to detect various events using a human operator . the components listed above may be reused and combined to create advanced applications . many advanced applications may be assembled by using various combinations and sub - combinations of components . the following discussion illustrates several advanced applications that may be created using the above components : a university security application , a workflow safety monitoring application , and a terrorist tracking application . a security application may be created for a university , college , or school using appropriate components selected from the above . for example , cameras and gunshot detection devices may be installed around a campus . the gunshot detection devices are interfaced to the system 100 via an appropriate gunshot input component . the cameras are monitored by appropriate detection components , for example , a face detection component may be utilized in order to detect faces in a video image . various action components may be installed , including an action component to alert the campus police and an action component to send a text message via sms to all students on campus . the university &# 39 ; s student and personnel system may also be interfaced to the system 100 via an appropriate input component . the rules engine would be configured by a system administrator at the university . for example , a sample rule may say , “ if only one card swipe is registered in the student system , while two or more people are detected passing a certain threshold on a video camera monitoring a turnstile ( tailgating ), then issue an audible alert to the security guard .” another rule may say “ if a sensory device has detected a gunshot , then issue an alert to the campus police as well as a text message via sms to all students on campus .” a service component may be added , which may provide an interface for a security guard sitting in a central location on campus to monitor all alerts coming into the system . the service component may include a user interface for the security guard to view selected cameras , notify the police , or issue alerts to all students . one example of an illustrative scenario is described here . however , the present invention is not limited to this particular scenario . suppose a student is detected tailgating behind another student to gain entrance into a dormitory , by using the face detection and student system input components described above . first , an audible alert would be automatically issued to anybody in the vicinity of the dormitory entrance . then , suppose a gunshot is detected by one of the gunshot devices , and the data enters the system via a gunshot input component . these two events are assigned weights by the weight engines . the rules engine would evaluate the second rule , and automatically notify the police and send a mass text message to all students on campus . such a system configuration of the present invention could have prevented the second set of shootings at virginia tech . in one embodiment , another action component may be activated , for example a “ follow person ” component . such a component would track the person who was detected as tail - gaiting through the entrance and follow that person through multiple cameras around campus . the person may be followed either in real time , switching from camera to camera as the person moves , or by retracing the steps the person has already taken . further , the person &# 39 ; s steps on previous visits may also be retrieved using a face recognition component . in another embodiment , an input component may provide an interface to the police system , for example , a database of arrest and reports of criminal activities . the data inputs and video inputs are weighted according to their sources . for example , data from police records are weighted highly , while data from anonymous tips are weighted lower . the weighted values are input into the rules engine which determines the alerts or other actions to take based on the rules . another application may be created for safety , auditing , and security of a facility using the above components . by integrating with legacy systems using the input components and receiving inputs from video cameras , the safety system may enforce various workflow , process flow , and / or safety rules and regulations . for example , if a safety alert is issued , then certain cameras may be turned on to monitor each of various steps necessary to correct the safety problem by monitoring the number of people at each step of the process , the length of time each person stays at each step of the process , etc . one example of an illustrative scenario is described here . however , the present invention is not limited to this particular scenario . as stated previously , an explosion at an oil refinery in texas was contributed by an experienced manager leaving the premises . this disaster would have been prevented by enforcing workflow and process flow constraints by using the principles and components of the present invention . for example , by using a face counting component to count the number of faces in a room , and a rule to issue an alert if there is not a face at each of the required workstations . an input component would be used to interface to legacy systems , such as personnel systems , and to determine average experience levels of personnel in each section of the refinery . various action components may be used to issue intelligent alerts to various personnel depending on customizable conditions , such as severity , time , and response necessary for the alert . various workflow and process flow constraints may be enforced by utilizing the input components and video detection components . the workflow may be codified in a set of rules in the rules engine , and which may be setup by a system administrator . for example , suppose a first worker with 10 years of experience entered the refinery , his face was detected by a camera on the entrance doorway into the refinery , his face was recognized against a database of employees , his name was retrieved , his experience level was retrieved from the personnel system , and the rules engine determined that an acceptable average experience level was present in the refinery ( 10 years ). suppose another worker with only 2 years of experience entered the refinery , his face was detected by the camera on the entrance doorway into the refinery , his face was recognized against a database of employees , his name was retrieved , his experience level was retrieved from the personnel system , and the rules engine determined that an acceptable average experience level was present in the refinery ( 6 years average ). now suppose the first worker with 10 years experience leaves the refinery , his face is detected by a camera on the exit doorway , his face is recognized against a database of employees , his name is retrieved , his experience level is retrieved from the personnel system , and the rules engine determines that the average experience level has dropped below a predetermined threshold ( e . g ., 6 years ). the rules engine then activates an appropriate action , such as issuing an alert , corresponding to the rule that was activated . ( suppose in this scenario , the rule was codified by the system administrator to issue an alert if the average experience level in the refinery drops below 6 years .) such a system configuration of the present invention could have prevented the explosion in the texas oil refinery . in one embodiment , various sensory devices may monitor the refinery . if a sensory device detects something irregular , the rules engine issues an audible alert and activates certain cameras to ensure that a proper response is taken . for example , if the pressure in the refinery goes up , then cameras corresponding to those valves that need to be adjusted are turned on . if no face is detected in those cameras for the next ten minutes , then the rules engine may escalate the alert to appropriate management . such a system , constructed according to the present invention from the components described here , could have prevented the explosion in the texas refinery . another application may be created for catching terrorists , suspected terrorists , or other dangerous individuals , such as people on the fbi most wanted , by using the components of the present invention . for example , cameras may be installed in public places , and a face recognition component may be installed . the face recognition component may be interfaced to a database of faces of suspected terrorists , fbi most wanted list , etc . in addition , a service component may be installed , providing an interface on the web for anyone to log into the public cameras , and monitor them for suspected terrorists or other dangerous individuals . in one embodiment , the videos may be streamed peer - to - peer to millions of people on the internet . each person logging into the camera would be randomly assigned , for example , 10 out of 1 , 000 suspected terrorists . those 10 faces would appear on the interface , and the individuals logged in may activate an alert if they recognize one of those terrorists in the camera image . an advantage of using peer - to - peer streaming video is that many people can watch the same video camera with no degradation of performance and very inexpensive bandwidth . however , the present invention does not need to be implemented using peer - to - peer video streaming , and it may be implemented using centralized video streaming . the same application may be used to allow many people to watch public cameras for such things as neighborhood intrusions , missing persons , violent predators , etc . inputs can also be received and weighted from anonymous tips , security guards , police databases , public events , etc . other embodiments of the present invention may be used for auditing , compliance , and banking fraud detection . for example , the components of the present invention may be used to create an application for banking fraud detection , including banking verification , and fraud / theft prevention . at an atm , a signature may be captured via a signature input component . a face may be captured via a camera installed on the atm machine . a face recognition component may be used to determine whether the face is associated with the signature , and / or the bank card that was inserted into the atm machine . various alerts may be issued based on the face recognized , the time of day , the length of time the person is at the atm , the amount of money that is being withdrawn , and the number of people in front of the atm . the rules may also be codified to perform certain actions if someone is detected sleeping in the atm booth , or if a suspicious individual enters the atm booth . other embodiments of the present invention may be used in a community security system , which could be used in neighborhoods , retirement villages , residential communities , corporate campuses , construction sites , etc . for example , a security application may be created using the components of the present invention for a residential community with commonly shared facilities , such as streets , roads , playgrounds , tennis courts , swimming pools , etc . digital cameras would be installed in strategic places , e . g ., on the streets overlooking the playgrounds . video data would be gathered and displayed in real - time over a wireless or wired network so that any resident ( or security guard ) can watch any camera from anywhere at any time . action components would be used to send an alert if a child is noticed alone in the playground , if unauthorized cars are perusing the street , etc . in some embodiments , other sensory devices may be added to the community security application by using other input components . for example , radon levels , co 2 levels , fire detectors , smoke detectors , dust particle detectors , etc . may be added by using an appropriate input component . rules in the rules engine could be customized , for example , if a fire is detected , then alerts may be sent to individuals who are affected as well as to the fire department . another sample rule that could be implemented in the rules engine would detect a person who has not left their house for a certain period of time and to alert appropriate relatives . yet another sample rule would send alerts if power failed in the community . in other embodiments , water and electric meters having the capability of transmitting data electronically may be used with appropriate input components . an input component may receive data from water meters and the rules engine may monitor water usage and time of day , present water usage versus past water usage , etc . and send alerts for possible leaks , broken pipes , etc . an input component may receive data from electrical meters and the rules engine may monitor electric usage and time of day , present electric usage versus past electric usage , etc . and send alerts for possible broken wires , electrical shorts , etc . more advanced applications may be created using storage of historical data . for example , a database may be created of past intruders or fraudulent perpetrators . their faces may be recorded in the database . future incidences may be prevented by matching suspicious individuals against the database . in one embodiment , the rules may be set by a system administrator . in another embodiment , the rules may be heuristically updated . for example , the rules may be learned based on past occurrences . in one embodiment , a learning component may be added which can recognize missing rules . if an alert was not issued when it should have been , this may be noted by an administrator of the system , and a new rule may be automatically generated . in some embodiments of the present invention , encryption is provided for added privacy . for example , a user may restrict who on the internet may watch the surveillance cameras and have access to the data . access may also be restricted by time , location , and camera . stored historical data may also be encrypted for privacy . while the methods disclosed herein have been described and shown with reference to particular operations performed in a particular order , it will be understood that these operations may be combined , sub - divided , or re - ordered to form equivalent methods without departing from the teachings of the present invention . accordingly , unless specifically indicated herein , the order and grouping of the operations is not a limitation of the present invention . while the invention has been particularly shown and described with reference to embodiments thereof , it will be understood by those skilled in the art that various other changes in the form and details may be made without departing from the spirit and scope of the invention .