KR101397579B1 - Method for Controlling Entrance Controller Using Mobile Phone and the Entrance Controller - Google Patents

Abstract

A method of controlling an access controller using a portable telephone and an access controller therefor are disclosed. The access controller and the portable telephone of the present invention can be connected to one wireless LAN, and the access controller can provide various user interfaces for administrator control through a mobile phone without having a separate administrator interface. Accordingly, the access controller does not need to have a keypad or an LCD for a user interface, and thus, the access controller can be downsized and the cost is reduced. Furthermore, since the user interface is limited, the security index of the access controller increases in a normal state.

Description

TECHNICAL FIELD [0001] The present invention relates to a method for controlling an access gateway using a mobile phone,

The present invention provides an access controller control method and an access controller thereof using a mobile phone for controlling an administrator mode of an access controller by making it possible to connect an access controller having no separate administrator interface to a cellular phone through a wireless network .

A general access control device such as a card reader, a fingerprint reader, and a password input device is provided with an input device such as a keypad or a display device and an output device for confirming the operation setting and operation status of the device.

The conventional access control apparatus may further include an input / output device such as a keypad or a LCD (LCD) for operation setting and operation status confirmation in addition to authentication means (e.g., a fingerprint reader, a card reader, And the price had to go up.

In recent years, as it has become increasingly sophisticated, it has provided a high-resolution display and a keypad, but it has to bear the price burden, the size of the device, and design constraints.

On the contrary, the conventional low-cost access control apparatus is incapable of using only a keypad or a small-sized low-resolution display, so that the service quality of the conventional low-cost access control apparatus has been inevitably deteriorated.

On the other hand, mobile devices with sufficient system resources such as smart phones have been recently provided, and mobile applications have been developed / supplied not only in mobile communication functions but also in various applications (mobile apps) .

An object of the present invention is to provide an access controller control method and a door access controller using the mobile phone for the administrator mode control of an access controller having no separate administrator interface.

According to another aspect of the present invention, there is provided a method of controlling an access controller using a mobile phone, the method comprising the steps of: (a) connecting a mobile phone to the same wireless LAN network as at least one access controller; (b) broadcasting the predetermined message to the wireless LAN by the mobile phone; (c) connecting the mobile phone with one of the access controllers responding to the broadcasting message to form a wireless channel; (d) inputting administrator authentication information to an access controller connected to the mobile phone and performing a login process; And (e) the mobile phone displays a screen for controlling the administrator mode of the logged-in access controller, receives the set value of the user, and provides the accessed access controller to change the setting.

According to an embodiment of the present invention, the step (a) includes the steps of: the mobile phone searches for an access point forming the wireless LAN network and then requests access; And inputting the encryption and receiving an IP address from the access point when the access point receives the access request.

In this case, the step (c) may further comprise the steps of: (c1) providing, by the entrance controller having received the broadcasting message, a response including its own information to the mobile phone; (c2) displaying the list of the access controllers provided by the mobile phone with the response; (c3) receiving, from the manager, a command for the mobile phone to select one of the access controllers indicated in the list; (c4) the portable telephone sends a connection request message to the selected access controller; And (c5) a step in which the portable telephone forms a wireless channel by receiving a response to the connection request message from the selected access controller, and wirelessly connecting the wireless channel.

Here, the information of (c1) itself may include at least one selected from an IP (Internet Protocol) address, a Media Access Control (MAC) address, an identification thereof, a firmware version, and a model name.

According to another embodiment, the method further comprises: (d1) after the step (d), the mobile phone displays a list of the step (c2) again, ; (d2) forming a separate wireless channel by the mobile phone sending a connection request message to the other access controller and receiving a response; And (d3) a step of log-in to the other access controller by the portable telephone, so that a wireless channel can be formed simultaneously with a plurality of access controllers in the access controller responding to the broadcasting message.

In this case, in the step (e), the portable telephone generates an administrator mode control screen for the access controller logged in at the step (d) and the access controller logged in at the step (d3) Can be displayed separately.

According to an embodiment of the present invention, the login process of steps (d) and (d3) may be performed in such a manner that the mobile phone receives a password from an administrator and provides it to the access control unit, or after the access control unit receives biometric information from an administrator And comparing it with the registered manager information.

According to another aspect of the present invention, there is provided a method of controlling an access controller using a mobile phone, the method comprising: (a) forming at least one access controller individually as an access point while operating as an access point; (b) the mobile phone is assigned an IP address from one of the at least one access controller and forming a wireless channel; (c) inputting administrator authentication information to the access controller connected to the mobile phone and performing a login process; And (d) displaying the screen for the administrator mode control of the logged-in access controller, receiving the set value of the user, and providing the connected administrator to the connected access controller to change the setting.

On the other hand, the present invention provides a mobile phone capable of providing a mobile communication telephone function with a mobile communication function and being able to access a manager network of the same LAN type as the at least one access controller, A wireless LAN interface unit capable of searching for and accessing a separate access point forming the manager network; A phone-side connection control unit performing a process of entering one of the access controllers connected to the manager network; And a setting control unit for displaying a screen for the administrator mode control of the access controller on the display unit and receiving the set value of the user through the input unit and providing the set value to the connected access controller to change the setting.

Further, the present invention may be in the form of a computer-readable recording medium on which a program for performing an access control method according to the present invention is recorded. Such a program may be installed in the portable telephone and plays a role of a phone side connection control unit and a setting control unit, As shown in FIG.

The access controller according to the present invention can be connected to a portable telephone connected to a common wireless network by performing an access point function by itself or by connecting to an external wireless IP network. It can enter the administrator mode and perform administrator mode functions such as changing various settings, registering / releasing the passengers, and monitoring the history.

Thus, in addition to the configuration for inputting authentication information such as a card reader, a fingerprint reader, and a password input device as in the conventional access control device, there is no need to further include an input / output device such as a keypad or an LCD for a user or an administrator, The security index of the manager becomes high. Further, since the configuration of the access controller is simplified, it is possible to downsize the access controller and reduce the cost.

On the other hand, it is possible to prevent the inconvenience of use and deterioration of the service quality caused by the provision of the keypad or the small-sized low-resolution display as in the conventional low-cost access control apparatus.

1 is a view showing an access management system of the present invention,
2 is a block diagram of an access controller and a mobile phone according to an embodiment of the present invention;
FIG. 3 is a flow chart for explaining an access control method using a portable telephone according to an embodiment of the present invention;
4 and 5 illustrate an administrator mode access screen and an administrator mode screen according to an embodiment of the present invention,
FIG. 6 is a view illustrating an access management system according to another embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION The present invention will be described in more detail with reference to the drawings.

Referring to FIG. 1, an access management system 100 using a mobile phone according to the present invention includes a plurality of access controllers 110, 130, and 150 and a mobile phone 170.

The plurality of access controllers 110, 130 and 150 are connected to an administrator network N10 provided by an access point (AP) 193 and the mobile phone 170 is also connected to the manager network (N10).

The plurality of access controllers 110, 130 and 150 may operate in a stand-alone mode without a separate server, but may be connected to a separate access management server 191 as shown in FIG. . In this case, the access management server 191 may also be connected to the manager network N10. However, the access management server 190 and the plurality of access controllers 110, 130, and 150 may be connected to each other through a wired network, which is not an essential configuration of the present invention as described above. Naturally, the access controllers 110, 130, and 150, the portable telephone 170, and the access management server 191 must have a wireless LAN interface for wireless LAN access.

Each of the plurality of access controllers 110, 130, and 150 is the same device. Therefore, the configuration and operation of the first access controller 110 will be described below. 2, the access controller 110 includes a wireless LAN interface unit 201, an authentication information input unit 203, a terminal side connection control unit 205, an administrator mode processing unit 207, an authentication unit 209, 211).

The wireless LAN interface unit 201 provides a wireless LAN interface so that it can be connected to the mobile phone 170 and / or the access management server 191. The WLAN interface unit 201 uses a WLAN protocol conforming to at least one WLAN standard protocol.

The authentication information input unit 203 is a unit for receiving authentication information required for the access authentication of the authentication unit 209 from the accessing party. When the authentication information is a password or a series of codes, the authentication information input unit 203 may be a keypad, a Radio Frequency IDentification (RFID) reader, a magnetic card reader, or the like, Or read the corresponding code from the RFID tag or the magnetic card which is in contact with the RFID tag.

If the authentication information is biometric information such as fingerprint data, the authentication information input device 203 may correspond to a fingerprint sensor or the like for acquiring a user fingerprint image.

The terminal-side connection control unit 205 controls the wireless LAN interface unit 201 to connect with the access management server 191 and / or the mobile phone 170. [ In particular, when connected to the mobile phone 170, the terminal-side connection control unit 205 performs an administrator mode connection process according to the preset "administrator mode connection protocol ".

The administrator mode is a mode in which only a specially authenticated administrator accesses and performs various functions such as changing various settings in the access controller 110, monitoring authentication history data, or modifying authentication information in addition to the access authentication function of the access controller 110 Can be said.

When the access controller 110 is connected to the portable telephone 170 and enters the 'administrator mode', the administrator mode processing unit 207 performs various processes in the administrator mode under the control of the portable telephone 170. The manager mode processing unit 207 may turn on the lamp 211 to indicate that the access controller 110 is in the manager mode. Operations of the terminal-side connection control unit 205 and the administrator mode processing unit 207 will be described below again.

The authentication unit 209 performs a normal access authentication operation of the access controller 110. [ Although not shown in FIG. 2, the access controller 110 includes a storage medium (not shown) storing authentication information (hereinafter, referred to as 'registration authentication information') for a user registered as an access right, The authentication information input unit 209 receives the authentication information from the user using the authentication information input unit 203 and compares the authentication information with the registration authentication information registered in the storage medium (not shown), thereby authenticating that the user is a registered user. Here, as described above, the authentication information may correspond to biometric information as well as a code such as a normal password.

The authentication unit 209 may generate a control signal for controlling the opening and closing of a door lock (not shown) so that the person who is authorized to enter and exit can enter and exit the door lock (not shown). According to the embodiment, the door lock itself may be formed integrally with the access controller 110.

Hereinafter, the mobile phone 170 shown in Fig. 2 will be described. The portable telephone 170 may be a telephone apparatus having a voice communication function by mobile communication and a wireless LAN interface, but an apparatus known as a so-called " smart phone "

In addition, the portable telephone 170 of the present invention may be connected to the access controller 110 according to the 'administrator mode access protocol' of the present invention to enter the administrator mode of the access controller 110, Various kinds of settings of the administrator area, user registration, change / deletion of registered users, and the like.

The cellular phone 170 of the present invention includes a wireless LAN interface unit 213, a display unit 215, an input unit 217, and a control unit 219. [ The mobile phone 170 shown in FIG. 2 mainly shows the configuration necessary for the description of the present invention, and what is not necessary for the description of the present invention, such as a mobile phone function or various additional functions (e.g., speed, Did not do it.

The wireless LAN interface unit 213 performs the same operation as the wireless LAN interface unit 201 of the access controller 110 and searches for the AP 193 and accesses the manager network N10 do.

The display unit 215 is an apparatus such as an LCD or an OLED for visually recognizing information. The input unit 217 may include a touch pad or the like for receiving various control commands from a user Keypad, and the like.

The control unit 219 controls the overall operation of the portable telephone 170 and specifically includes a phone side connection control unit 221 and a setting control unit 223 to control operations of the access control unit 110 of the present invention do.

First, the control unit 219 may be implemented as a single hardware chip. However, the control unit 219 may include a processor chip, an operating system (OS) program processed by the chip, An application program installed based on the application program may be combined with each other.

In the latter case, the phone side connection control unit 221 and the setting control unit 223 may also be formed by installing at least one application program for the corresponding function on the basis of the operating system program. In other words, the user can implement the present invention by installing an application program for performing operations and functions of the phone-side connection control unit 221 and the setting control unit 223 of the present invention on a conventional portable telephone having the user.

The phone side connection control unit 221 performs the process according to the "administrator mode connection protocol" together with the terminal side connection control unit 205 to enter the manager mode. Naturally, the message of the phone side connection control unit 221 is transmitted to the access controller 110 through the wireless LAN interface unit 213.

The setting control unit 223 displays a graphical user interface (GUI) for setting control of the access controller 110 on the display unit 215 and inputs the input through the input unit 217 To the access controller 110 to allow the access controller 110 to newly set or change the set value.

3 and 4, the portable telephone according to the present invention, centered on the operation of the terminal side connection control section 205, the administrator mode processing section 207, the phone side connection control section 221 and the setting control section 223, Will be described.

Although the message is directly transmitted between the terminal side connection control unit 205 and the phone side connection control unit 221 in the following description, the corresponding message must be transmitted to the wireless LAN interface unit 201 and the wireless LAN interface unit 213, And the like.

Since the cellular phone 170 and the access controller 110 communicate by wireless connection, a protocol for connecting to one of the access controllers 110, 130, and 150 is required. For the sake of explanation of these parts, a case in which the first access controller 110 and the second access controller 130 operate in place of a plurality of access controllers will be exemplarily described with reference to FIG. Naturally, the first access controller 110 and the second access controller 130 are the same device. In the case of FIG. 3, the third access controller 150 will operate in the same manner as the second access controller 130.

<Normal mode operation: S301>

First and second access controllers 110 and 130 are connected to an administrator network N10 formed by the AP 193 and are operating. The first access controller 110 and the second access controller 130 at this time are called ' Normal mode '.

When there is a separate server network 13, each of the wireless LAN interface units 201 of the first and second access controllers 110 and 130 is connected to the server network 13 do.

&Lt; Application Launching and Manager Network Search: S303 >

When the phone side connection control unit 221 and the setting control unit 223 are installed in the portable telephone 170 in the form of an application program, the user executes the corresponding application program to enter the administrator mode, And the setting control unit 223 are started.

In accordance with the user's control command, the phone-side connection control unit 221 searches the wireless LAN-interface unit 213 for a wireless situation around the AP 193 and displays it to the user. In the case of FIG. 1, the mobile phone 170 can search the manager network N10 of the AP 193. If there is another AP in the vicinity, the corresponding AP may also be displayed together.

<Manager network connection: S305, S307>

The user selects the AP 193 forming the manager network N10 from among the AP search results displayed in the step S303 and instructs the connection. Accordingly, the phone side connection control unit 221 attempts to access the AP 193 selected by the user (S305), and receives the IP (Internet Protocol) address from the AP 193, thereby accessing the manager network N10 (S307).

According to the embodiment, the AP 193 can request a separate password, and when an attempt is made to connect and the correct password is entered, the IP is assigned.

<Administrator mode access protocol: S309 to S321>

First, the phone side connection control unit 221 broadcasts a message according to a predetermined administrator mode connection protocol to the manager network N10. In this case, the message to be broadcasted is a message according to a predetermined protocol and may be any contents as long as it is promised to connect to the manager network. Since the message is broadcasted to the manager network N10, anyone connected to the manager network N10 including the access controllers 110, 130, and 150 can receive the message. However, only the terminal that knows the preset administrator mode connection protocol can respond. Broadcasting may use the TCP / IP protocol (S309).

The message broadcasted by the phone side connection control unit 221 can be received by both the first and second access controllers 110 and 130. After the terminal-side connection control unit 205 of the first access controller 110 parses the broadcasted message, the terminal-side connection control unit 205 transmits a response to the cellular phone 170 when the message is the established message. The response of the first access controller may have a UDP (User Datagram Protocol) message type. The response may include not only the MAC (Media Access Control) address and IP address of the first access controller 110 itself but also its own ID, Firmware version, device specific information such as model name, and the like. This is the same for the second access controller 130 (S311, S313).

The phone-side connection control unit 221 of the mobile phone 170 displays a list of the access management devices responding to the broadcasting message of its own on the display unit 215 (S315) and then inputs a command for selecting one of the displayed lists from the manager (S317).

In the case of FIG. 3, since the first and second access controllers 110 and 130 will respond, a list as shown in FIG. 4A can be displayed. The ID, MAC address, and IP address received from the first and second access controllers 110 and 130 are displayed in the list. Based on these items, the administrator selects the access controller he / she wants to access. Hereinafter, it is assumed that the user selects the first access controller 110 for convenience of explanation. The administrator can use this selection to select an access controller to enter the administrator mode.

The phone side connection control unit 221 attempts wireless connection with the first access controller 110 selected by the user to form a wireless channel. First, the phone side connection control unit 221 transmits a connection request message to the terminal side connection control unit 205 of the first access controller 110 (S319) and transmits the connection request message to the terminal side connection controller 205 of the first access controller 110 Lt; RTI ID = 0.0 &gt; S321 &lt; / RTI &gt; In response to the connection request, mutual wireless connection is established between the portable telephone 170 and the first access controller 110 and a wireless channel is formed.

<Administrator mode access - Login process: S323>

When the wireless channel is formed, the phone side connection control unit 221 and the terminal side connection control unit 205 of the first access controller 110 perform a predetermined log in process. When the login is completed, the first access controller 110 enters the administrator mode in the final mode.

The login process is performed by inputting the authentication information of the administrator registered in the first entrance / exit manager 110. The administrator authentication information may be a password, biometric information, or the like, as well as the user authentication information.

4B, the phone-side connection control unit 221 displays the password input guidance screen on the display unit 215 and inputs the password input through the input unit 217 to the first entrance / exit To the terminal-side connection control unit 205 of the management device 110. [

Accordingly, the terminal-side connection control unit 205 can confirm that the password is a pre-registered password, thereby completing the login process.

5A, if the login process is performed by fingerprint authentication, the phone connection control unit 221 notifies the user through the display unit 215 of &quot; inputting the manager fingerprint to the entrance controller 110 &quot; Display a prompt message. The administrator can input the authentication information by inputting the fingerprint to the authentication information input unit 203 of the first entrance / exit controller 110.

Accordingly, the authentication unit 209 can complete the login process by checking whether the manager fingerprint data input through the authentication information input unit 203 matches the previously registered manager fingerprint data.

4B, if a fingerprint is input to the authentication information input unit 203 of the first I / O controller 110 even if the password input guide screen is displayed and waiting for the password input, the fingerprint data of the corresponding fingerprint The login process can be performed.

&Lt; Control in the administrator mode: S325 to S335 >

When the login process is completed and enters the administrator mode, the first access controller 110 performs the processing in the administrator mode by the administrator mode processing unit 207 and the setting control unit 223 performs the overall processing in the cellular phone 170 do. The manager mode processing unit 207 turns on the lamp 211 to display the entry into the manager mode.

First, the setting control unit 223 of the portable telephone 170 displays the manager mode menu screen shown in FIG. 5B to the manager through the display unit 215 (S325).

When the user selects one of the menus (setting items) displayed on the display unit 215 and inputs a setting value through the input unit 217 (S327), the setting control unit 223 sets a setting control command including the setting value To the first access controller 110 (S329).

The control command provided by the portable telephone 170 is processed by the administrator mode processing unit 207 of the first access controller 110 (S331), and the processing result is provided to the setting controller 223 of the portable telephone 170 (S333).

The setting control unit 223 displays the processing result provided by the manager mode processing unit 207 of the first access controller 110 on the display unit 215 (S335).

The user can terminate the connection with the first access controller 110 by selecting 'connection termination' in the setting list.

The operation of the access management system 100 using the mobile phone 170 of the present invention has been described above.

<Other Embodiments>

The portable telephone 170 can simultaneously form a wireless channel with a plurality of access controllers. For example, in the embodiment of FIG. 3, the login process of step S323 is performed to form a wireless channel with the first access controller 110, and then the steps S315 to S323 are repeated to repeat the steps of the second access controller 130 and the wireless channel Can be separately formed.

First, after step S323, the user again displays the list of FIG. 4A. Then, the user sends a connection request message to the second access controller 130 and receives a response to the connection request message from the second access controller 130 And then perform the login process.

Accordingly, the mobile phone 170 can simultaneously maintain the wireless channel in the first access controller 110 and the second access controller 130, and the first access controller 110 and the second access controller 130 can communicate with the manager Mode. Accordingly, the mobile phone 170 generates two administrator mode menu screens (or pages) as shown in FIG. 5 (b), and can selectively display one of them on the display unit 215 have. The user can set the settings of the first access controller 110 or the second access controller 130 while displaying an administrator mode menu screen for the first access controller 110 or the second access controller 130, Can be changed.

<Other Embodiments>

1, each of the plurality of access controllers provides an access point (AP) mode function to provide a separate wireless LAN, and the portable telephone 170 can connect to one of the networks .

Referring to FIG. 6, a plurality of access controllers 601, 603, and 605 each operating as an AP are illustrated. The first manager network N1 formed by the first entrance / exit manager 601, the second manager network N2 formed by the second entrance / exit manager 603, and the second manager network N3 formed by the third entrance / And a third manager network N3. The access controllers 601, 603, and 605 are connected to the access management server 190 through a wired or wireless LAN.

Basically, the access controllers 601, 603, and 605 of FIG. 6 include the same configurations as the access controller 110 of FIG. 2 and can be similarly described. However, the wireless LAN interface unit 201 of each of the access controllers 601, 603, and 605 performs an access point (AP) to form the manager networks N1, N2, and N3, respectively.

The access controller control method based on this embodiment is basically performed in the same way as the control method of Fig. However, steps S303 to S317 corresponding to the initial wireless connection procedure are simplified by the method described below.

<Wireless connection method>

When the phone side connection control unit 221 and the setting control unit 223 are installed in the portable telephone 170 in the form of an application program, the user executes the corresponding application program to enter the administrator mode, And the setting control unit 223 are started.

In accordance with the user's control command, the phone-side connection control unit 221 causes the wireless LAN interface unit 213 to search for an access point operating as an access point (AP) in the vicinity. 6, since the mobile phone 170 is located in the first manager network N1, the second manager network N2 and the third manager network N3, the first to third access controllers 601 and 603 , &Lt; / RTI &gt; 605).

The user selects the desired manager network among the AP search results and instructs the connection. For example, when the user selects the first access controller 601, the phone connection control unit 221 tries to access the wireless LAN interface unit 201 of the first access controller 601 and the first access controller 601, The IP address is assigned to the first manager network N1, and the login process of S323 is immediately performed.

In other words, if the access controller operates as an AP separately, the message broadcasting process of S309 to S317 of FIG. 3 may be performed, but it may be omitted.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be construed as limiting the scope of the invention as defined by the appended claims. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the present invention.

Claims (14)

delete delete delete delete delete delete delete (a) a mobile phone searches for at least one access controller wirelessly, allocates an IP address from one of the access controllers, and forms a wireless channel, wherein each of the at least one access controller operates as an access point, Forming a network;
(b) inputting administrator authentication information to an access controller connected to the mobile phone and performing a login process; And
(c) displaying the screen for the administrator mode control of the logged-in access controller, receiving the set value of the user, and providing the received access controller to the connected access controller to change the setting, A control method of an access controller using
A computer-readable recording medium having recorded thereon a program installed in a portable telephone and performing the access control method of claim 8.
delete delete delete delete delete

Images