KR101254688B1 - System and method for managing input and output of portable computer by using RFID - Google Patents

Abstract

The present invention discloses a portable computer import / export management system and method using RFID. A portable computer import / export management system according to the present invention includes a security key generation module provided in a portable computer to recognize a unique code of the portable computer and generate a security key by a specific security algorithm based on the recognized unique code; An RFID tag electrically connected to the portable computer to receive and store a security key generated by the security key generation module; An RFID reader for reading and transmitting the security key stored in the RFID tag using RFID; And generating and storing a security key by the same algorithm as the security algorithm of the security key generation module based on a unique code of the portable computer previously input, and comparing the security key with the security key received by the RFID reader. It is configured to include a central server that determines whether to allow import and export.

Portable Computers, RFID, Import, Export, Management, Security

Description

System and method for managing input and output of portable computer by using RFID}

The present invention relates to a system and method for managing the import or export of a portable computer, and more particularly, to a system and method for managing the import and export of a portable computer by identifying a security key of the portable computer using RFID. It is about.

The importance of technical information is increasing day by day, called the age of 'technical war' or 'information war'. In particular, technology is rapidly developing in many fields, such as electronics, telecommunications, semiconductors, and machinery.In this era, a lot of investments are made in the development of technology at the national level as well as at the enterprise level so as not to fall behind other companies or other countries. have. Technological development may be by accident, but this is rare, and it usually involves years of long-term research and astronomical costs.

However, the leakage of technical information can be made very easily compared to the effort or time. In other words, it is a technical information that requires a lot of effort and cost, but can be stored in the form of a file in a storage medium such as a computer. Easy to pull out In this way, shipbuilding design technology and automotive core technology have been leaked in recent years, causing damages of hundreds of billions to billions of won.

In order to solve the above problems, many companies and research institutes are blocking the Internet path to communicate privately with the outside, such as mail or messenger in the company. In addition, some companies are adopting a method to restrict the import and export of portable computers such as laptops or inspect stored files when going out of the company. However, it is not only time-consuming but also accurate for security personnel to manually check whether a small portable computer such as a notebook is in possession or a storage file. Therefore, recently, a method of inspecting and managing carrying in / out of a portable computer using RFID has been proposed.

RFID (Radio Frequency IDentification) technology, also known as a wireless identification system, refers to a technology that transmits and receives various data in a wireless manner using a predetermined frequency band. The system using RFID is composed of an RFID tag incorporating unique information, an RFID reader having a reading and decoding function, operating software, a central server, and the like. In general, an RFID tag is composed of a transponder chip and an antenna, and there are two types of active type operated by an internal power source and a passive type operated by receiving energy from a radio signal of an RFID reader without an internal power source. Currently, RFID uses a wide range of frequencies from low frequencies below 150KHz to 5GHz and above microwaves. Unlike magnetic or bar code, RFID technology does not require a specific display and does not cause damage or damage. Due to these advantages, the use of RFID technology is gradually increasing in security systems such as enterprises.

1 is a flowchart illustrating an example of a method of managing carrying in and out of a portable computer using a conventional RFID.

Referring to FIG. 1, a unique number created by combining numbers or letters in each RFID tag is stored, and the tag is attached to the portable computer (S10). In addition, the central server stores the information on the unique number stored in each RFID tag and whether or not to be allowed in and out (S20). If a user approaches the entrance to exit the company with a portable computer, the RFID reader installed in the entrance recognizes the RFID tag attached to the portable computer and reads the unique number stored in the RFID tag (S30). Next, the read unique number is transmitted to the central server (S40), and the central server compares the transmitted unique number with the information stored in itself to determine whether the notebook is allowed to enter or exit (50).

However, according to the prior art as described above, there are the following problems. That is, when the RFID tag attached to the portable computer that is allowed to carry out is detached and attached to another portable computer, there is a problem that the portable computer which is not allowed to carry out can be exported.

Therefore, the present invention was devised to solve the above problems of the prior art, and it is possible to accurately manage the carrying out of the portable computer accurately and easily, and to restrict the carrying out of attaching the RFID tag allowed to the carrying out to a new portable computer. An object of the present invention is to provide a portable computer import / export management system and method using RFID.

In order to achieve the above object, the portable computer import / export management system according to the present invention is provided in a portable computer to recognize a unique code of the portable computer, and generates a security key by a specific security algorithm based on the recognized unique code. A security key generation module; An RFID tag electrically connected to the portable computer to receive and store a security key generated by the security key generation module; An RFID reader for reading and transmitting the security key stored in the RFID tag using RFID; And generating and storing a security key by the same algorithm as the security algorithm of the security key generation module based on a unique code of the portable computer previously input, and comparing the security key with the security key received by the RFID reader. It includes; central server to determine whether to allow the import and export.

In addition, the portable computer import and export management method according to the present invention for achieving the above object comprises an RFID tag connected to the portable computer, an RFID reader for reading the information of the RFID tag, and a central server connected to the RFID reader and the communication network 12. A method for managing access to a portable computer using RFID, the method comprising: inputting a unique code of the portable computer to the central server, generating a security key based on the input unique code, and storing the generated security key in the central server; Recognizing a unique code of the portable computer, and generating a security key by the same algorithm as the security algorithm of the central server based on the recognized unique code and storing the generated security key in the RFID tag; Reading the security key stored in the RFID tag by the RFID reader and transmitting it to the central server; And comparing the security key transmitted by the RFID reader with the security key stored in the central server to determine whether the portable computer is allowed to be in and out of the portable computer.

According to the present invention, by accurately and easily managing the carrying in and out of a portable computer such as a notebook using RFID technology, important technical information of a company or a research institute can be prevented from leaking to the outside. In addition, by attaching an RFID tag attached to a portable computer that is allowed to be imported / exported to any portable computer, it is possible to prevent the portable computer that is not allowed to be imported / exported to the outside.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Prior to this, terms or words used in the specification and claims should not be construed as having a conventional or dictionary meaning, and the inventors should properly explain the concept of terms in order to best explain their own invention. Based on the principle that can be defined, it should be interpreted as meaning and concept corresponding to the technical idea of the present invention.

Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiments of the present invention and do not represent all of the technical spirit of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

2 is a block diagram showing a schematic configuration of a portable computer loading / export management system using RFID according to an embodiment of the present invention.

As shown in FIG. 2, the portable computer import / export management system according to the present invention includes a security key generation module 110, an RFID tag 200, an RFID reader 300, and a central server 500.

The security key generation module 110 is installed in the portable computer 100 and recognizes a unique code of the portable computer 100. Here, the unique code of the portable computer 100 refers to a serial number and the like stored separately for each portable computer 100, but the present invention is not limited thereto. Most portable computers 100 currently used have serial numbers or serial numbers made by combining letters and numbers. This unique code can be an element that identifies each computer because each computer has a different code. The security key generation module 110 of the present invention may identify each computer 100 by recognizing a unique code having a different value for each portable computer 100.

In addition, the security key generation module 110 generates a security key by a specific security algorithm based on the recognized unique code. In this case, the specific security algorithm is an algorithm for generating a security key when the unique code of the portable computer 100 is input and is stored in the security key generation module 110 in advance. Since the security algorithm is fixed, if the same unique code is input, the same security key is generated, and if a different unique code is input, another security key is generated. In addition, the security key generation module 110 installed in each computer 100 generates a security key by the same security algorithm, since each unique code of each computer 100 is different, each will generate a different security key .

Meanwhile, the security key generation module 110 may be programmed and driven in hardware of the portable computer 100 to recognize a unique code of the portable computer 100 and generate a security key.

The RFID tag 200 is electrically connected to the portable computer 100 through a communication interface. For example, the RFID tag 200 is embedded in the portable computer 100. The RFID tag 200 receives and stores a security key generated by the security key generation module 110. The security key stored in the RFID tag 200 may be recognized by the RFID reader 300.

Alternatively, when the RFID tag 200 is active and the RFID recorder is embedded in the portable computer 100, the RFID tag 200 may not be electrically connected to the portable computer 100. In this case, the security key generation module 110 controls the RFID receiver to transmit the security key to the RFID tag 200 through wireless communication.

Preferably, the security key generation module 110 generates a security key when the portable computer 100 is turned on. If a new security key is generated each time the portable computer 100 is started, the previously generated security key may not be used, and only the newly generated security key may be used. According to the present invention, even if a security key for a computer allowed to be loaded in and out is stored in an RFID tag, a new security key is generated by the security key generation module 110 when it is detached, attached to a new computer, and booted. Stored at 200. Therefore, when the portable computer 100 is turned on again at the exit door, the security key is newly generated according to the unique code of the portable computer 100 to which the RFID tag 200 is attached. Based on the generated security key, it is possible to determine whether to allow import / export.

Meanwhile, when the portable computer 100 is turned off, the security key stored in the RFID tag 200 may be deleted. Since the security key generation module 110 generates a new security key each time the portable computer 100 is started, the conventional security key should not be deleted and used. Therefore, the generated security key is valid only when the computer is turned on, and cannot be used when the computer is turned off.

In addition, the RFID tag 200 determines whether to maintain the electrical connection with the portable computer 100, it is preferable to delete the security key stored in the electronic connection is blocked. Here, the case where the electrical connection is blocked refers to a case where the RFID tag 200 is separated from the portable computer 100, and thus can no longer exchange information with the portable computer 100. Therefore, when the RFID tag 200 is detached from the computer according to an embodiment of the present invention, even if the conventional portable computer 100 itself is turned on, the security key stored in the RFID tag 200 is deleted. Therefore, even if the RFID tag 200 attached to the portable computer 100 originally allowed to carry in and out, once removed from the computer 100, the conventional security key is deleted, so that the tag 200 cannot be used again.

3 is a block diagram schematically illustrating a functional configuration of an RFID tag 200 according to an embodiment of the present invention.

Referring to FIG. 3, the RFID tag 200 includes a transceiver 210, a memory 220, and a controller 230. The transceiver 210 receives the security key from the security key generation module 110 and exchanges data necessary for performing a function with the portable computer 100 or the RFID reader 300. In addition, the memory unit 220 stores the received security key, and the controller 230 determines whether the portable computer 100 is connected and stores the received security key in the memory unit 220 or deletes the stored security key. do.

Preferably, the unique code of the portable computer 100 includes a unique code of the main body of the portable computer 100 or a unique code of a battery. The battery of the portable computer 100 may be separated from the main body as a consumable, and therefore, the main body and the battery generally have separate unique codes. For example, the unique code of the main body may be stored in a memory in the main body as a unique registration number of the operating system. Therefore, in this case, the security key generation module 110 recognizes the unique registration number as a unique code of the main body from the memory of the main body. The unique code of the battery may be stored in a fuel gauging IC of a protection circuit provided in the battery. Here, the fuel gauging IC is a microprocessor that provides information such as remaining battery usage in response to a CPU request of the portable computer 100, and stores the battery unique code in its own memory. Accordingly, the security key generation module 110 may request and receive a battery unique code from the fuel gauging IC side through a data communication port connecting the battery and the portable computer 100. According to an embodiment of the present invention, both the unique code of the main body of the portable computer 100 and the unique code of the battery can be recognized and combined to generate a security key by a security key algorithm, thereby leaking or replicating the security key. It can make your back more difficult.

The RFID reader 300 reads a security key stored in the RFID tag 200 using RFID and transmits the security key to the central server 500. The process of reading the security key stored in the RFID tag 200 by the RFID reader 300 is obvious to those skilled in the art to which the present invention pertains, and thus detailed description thereof will be omitted. The RFID reader 300 transmits the read security key to the central server 500 through the wired or wireless communication network 400.

The central server 500 receives the identification information and the unique codes of all the portable computers 100 to be managed in advance, and generates a security key by the same algorithm as the security key generation algorithm of the security key generation module 110. Save it. In addition, the central server 500 stores in advance whether or not the portable computer 100 corresponding to each security key is allowed to import and export, it can be modified or changed later. Then, when the central server 500 receives the security key stored in the RFID tag 200 of the specific computer from the RFID reader 300, it compares it with the security key stored in its own to determine whether the computer 100 is allowed to import and export. . That is, whether the portable computer 100 corresponding to the received security key is allowed to carry in or out is stored in the central server 500 in advance.

4 is a block diagram schematically showing a functional configuration of a central server 500 according to an embodiment of the present invention.

Referring to FIG. 4, the central server 500 includes an input unit 510, a security key generator 520, a storage unit 530, a transceiver 540, and a controller 550. The input unit 510 receives a unique code of all portable computers 100 that need to manage the import and export, and whether the import and export are allowed. At this time, the identification information or unique code of the portable computer 100 is preferably automatically input to the portable computer 100 connected to the central server through the network. For example, when the portable computer 100 connects to the central server 500 through a network, the input unit 510 asks the portable computer 100 for registration for carrying in and out of the portable computer 100, and the identification information when the user permits registration. And a unique code or the like can be automatically transmitted from the portable computer 100. However, an agent in charge of the company may directly input identification information or a unique code to the central server 500 through the input unit 510.

The security key generation unit 520 generates the security key by the same algorithm as the security key generation algorithm of the security key generation module 110. Therefore, since the unique code is the same for the same computer, the security key generated by the security key generation module 110 and the security key generated by the security key generation unit 520 of the central server 500 are the same. The storage unit 530 stores the identification information of the portable computer 100 input by the input unit 510, a security key corresponding to the portable computer 100, and whether the entry / exit permission is allowed. The transceiver 540 receives data such as a security key transmitted from the RFID reader 300 through the communication network 400, and when it is determined whether to permit import / export, transmits data regarding the determination to the RFID reader 300. , Exchanges data with the RFID reader 300. The controller 550 generally controls operations of the input unit 510, the security key generation unit 520, the storage unit 530, and the transceiver unit 540. In addition, the controller 550 searches the storage unit 530 for whether the portable computer 100 corresponds to the security key received by the RFID reader 300 and determines whether to permit the import / export based on the result. do.

5 is a flowchart schematically illustrating a method for carrying in and carrying out a portable computer using RFID according to an embodiment of the present invention.

As shown in FIG. 5, when each unique code of a portable computer requiring management is input to a central server (S110), the central server generates and stores a security key by a security algorithm (S120). Next, the portable computer recognizes the unique code of the portable computer and generates a security key by the same algorithm as the security algorithm of the central server based on the recognized unique code (S130). The generated security key is stored in the RFID tag (S140). Then, the RFID reader recognizes the RFID tag, reads the security key stored therein (S150), and transmits it to the central server (S160). Then, the central server compares the security key transmitted by the RFID reader with the security key stored therein, and determines whether to allow entry / exit of the corresponding computer (S170).

Preferably, the step of generating a security key on the portable computer side and storing it in an RFID tag is performed every time the portable computer is turned on. In this case, when the portable computer is turned off, the security key stored in the RFID tag is preferably deleted.

FIG. 6 is a flowchart schematically illustrating a portable computer import / export management method according to an embodiment of the present invention when a RFID tag is detached and attached to another portable computer while the portable computer is turned off.

Referring to FIG. 6, when turning on the first computer to which the RFID tag is attached (S210), the security key generation module formed in the first computer recognizes a unique code of the first computer and selects the first security key by a security algorithm. The generated first security key is stored in the RFID tag (S220). Then, the first computer is turned off (S230), and the first security key stored in the RFID tag is deleted (S240). After attaching the tag to the second computer (S250) and turning on the second computer (S260), a second security key different from the first security key is generated by recognizing a unique code of the second computer. The generated second security key is stored in the RFID tag (S270). Then, when the second computer approaches the recognition range of the RFID reader installed at the entrance and exit, the RFID reader recognizes the second security key stored in the RFID tag and transmits it to the central server (S280), and the central server is stored therein. It is determined whether to allow the import / export based on the import / export permission of the portable computer corresponding to the second security key (S290). Therefore, according to the above embodiment, even if the tag of the first computer which is allowed to carry out is detached and attached to the second computer which is not allowed to carry out, the computer is not allowed to carry out. That is, even if the RFID tag of the first computer is removed and attached to the second computer, when the second computer is turned on, a new security key corresponding to the second computer is generated, and thus there is no fear of recognizing the RFID tag of the first computer.

In addition, the portable computer carry-out management method according to an embodiment of the present invention, after the security key is stored in the RFID tag, periodically detects the connection between the portable computer and the RFID tag, if it is detected that the connection is disconnected to the RFID tag The stored security key is preferably deleted.

FIG. 7 is a flowchart schematically illustrating a portable computer import / export management method according to an embodiment of the present invention when a RFID tag is detached and attached to another portable computer while the portable computer is turned on.

Referring to FIG. 7, when turning on the first computer to which the RFID tag is attached (S310), the security key generation module formed in the first computer recognizes a unique code of the first computer and selects the first security key by a security algorithm. The generated first security key is stored in the RFID tag (S320). When the RFID tag is detached while the first computer is turned on (S330), the RFID tag detects a disconnection between the RFID tag and the first computer (S340) and deletes the first security key stored therein (S350). . Then, when the RFID tag is attached to the second computer already turned on (S360), since the security key is not stored in the RFID tag, the RFID reader cannot recognize any security key (S370). Therefore, carrying in and out of the second computer is not allowed (S380). Therefore, according to the embodiment, even if the RFID tag of the first computer allowed to be taken in and out is attached and attached to the second computer in the turned on state, the RFID tag does not have a security key. 1 There is no fear of mistake by computer.

Accordingly, according to an embodiment of the present invention, when carrying a portable computer and passing through a door installed with an RFID reader, the portable computer can be turned on or passed in a state where the computer is turned on, so that the portable computer can be used without fear of theft of the RFID tag. It is possible to accurately and easily determine whether to allow import and export of.

In addition, although not shown in the drawings, according to another embodiment of the present invention, when a decision is made on the entry / exit of the portable computer from the central server, a warning sound or a warning display may be performed by an alarm device provided at the entrance.

On the other hand, although the term 'module' or 'unit' is used in the present specification, this refers to a logical structural unit and is not necessarily a physically divided component, which is obvious to those skilled in the art. to be.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not to be limited to the details thereof and that various changes and modifications will be apparent to those skilled in the art. And various modifications and variations are possible within the scope of the appended claims.

1 is a flowchart illustrating a method of managing carrying in and out of a portable computer using a conventional RFID.

2 is a block diagram showing a schematic configuration of a portable computer loading / export management system using RFID according to an embodiment of the present invention.

3 is a block diagram schematically illustrating a functional configuration of an RFID tag according to an embodiment of the present invention.

4 is a block diagram schematically showing a functional configuration of a central server according to an embodiment of the present invention.

5 is a flowchart schematically illustrating a method for carrying in and carrying out a portable computer using RFID according to an embodiment of the present invention.

FIG. 6 is a flowchart schematically illustrating a portable computer import / export management method according to an embodiment of the present invention when a RFID tag is detached and attached to another portable computer while the portable computer is turned off.

FIG. 7 is a flowchart schematically illustrating a portable computer import / export management method according to an embodiment of the present invention when a RFID tag is detached and attached to another portable computer while the portable computer is turned on.

Claims (10)

A security key generation module provided in the portable computer to recognize a unique code of the portable computer and generate a security key by a specific security algorithm based on the recognized unique code; An RFID tag electrically connected to the portable computer to receive and store a security key generated by the security key generation module; An RFID reader for reading and transmitting the security key stored in the RFID tag using RFID; And The security key is generated and stored by the same algorithm as the security algorithm of the security key generation module based on a unique code of the portable computer input in advance, and compared with the security key received by the RFID reader. A central server for determining whether to allow; Portable computer import and export management system comprising a. The method of claim 1, And the security key generation module generates a security key when the portable computer is turned on. 3. The method of claim 2, And the RFID tag deletes the stored security key when the portable computer is turned off. 3. The method of claim 2, And the RFID tag deletes the security key stored in the RFID tag when the electrical connection with the portable computer is lost. 5. The method according to any one of claims 1 to 4, And a unique code of the portable computer includes a unique code of the portable computer body, a unique code of a battery, and a combination thereof. In the carrying-out management method of a portable computer using RFID, comprising a RFID tag connected to a portable computer, an RFID reader for reading the information of the RFID tag, and a central server connected to the RFID reader by a communication network, Inputting a unique code of the portable computer into the central server, generating a security key by a specific security algorithm based on the input unique code, and storing the generated security key in the central server; Recognizing a unique code of the portable computer, and generating a security key by the same algorithm as the security algorithm of the central server based on the recognized unique code and storing the generated security key in the RFID tag; Reading the security key stored in the RFID tag by the RFID reader and transmitting it to the central server; And Comparing the security key transmitted by the RFID reader with the security key stored in the central server to determine whether the portable computer is allowed to enter or exit the computer; Portable computer import and export management method comprising a. The method of claim 6, The generating and storing of the security key in the RFID tag is performed whenever the portable computer is turned on. The method of claim 7, wherein And after the storing of the security key in the RFID tag, when the portable computer is turned off, deleting the security key stored in the RFID tag. The method of claim 7, wherein After storing the security key in an RFID tag, periodically detecting an electrical connection between the portable computer and the RFID tag and deleting the security key stored in the RFID tag when the connection is detected to be disconnected; Portable computer import and export management method further comprising a. The method according to any one of claims 6 to 9, And a unique code of the portable computer includes a unique code of the portable computer body, a unique code of a battery, and a combination thereof.

Images