KR20130010757A - System of nfc secure print and method thereof - Google Patents

Abstract

PURPOSE: An NFC security print system and a method thereof are provided to maintain security about printout by authenticating a printout authority through an authentication key matched with the printout. CONSTITUTION: A security unit(140) determines printout authority about a security file and generates a security key matched with the printout authority. An authentication unit(150) generates an authentication key authenticating the printout authority. An NFC(Near Field Communication) controller(160) converts the authentication key and the security key in a tag applet style and generates a security file. A wireless antenna(110) wirelessly transmits the security file to an NFC printer. [Reference numerals] (110) Wireless antenna unit; (120) Module control unit; (130) NFC antenna unit; (140) Security unit; (150) Authentication unit; (160) NFC controller

Description

Nfc secure print system and method

The present invention relates to a NFC (Near Field Communication) secure print system and method, and more particularly to a NFC secure print system and method for authenticating the output authority of the document through the NFC communication method for the security of data output. It is about.

In the case of office printers, it is common to connect multiple computers to one network and share and use one printer connected to the network.

In the related art, it is difficult to know which user used the printer for output by sharing a printer, and it is difficult to know the history of which document was tried.

Conventionally, when outputting data to be secured, there has been a problem that unauthorized printing or interception of the output data may be performed in a printer or a network where the output is performed through a shared printer.

In addition, when data to be stored in the printer is stored, if the printer is lost, there is a problem in that security is difficult because the data to be output can be accessed without permission.

Conventionally, in order to solve this problem, by using the DRM (Digital Right Management) technology, the validity period is set for the data to be output, and after a certain period of time has been taken to be automatically disabled.

However, this conventional solution still has a problem that it is difficult to manage the history of the data and the user who intercepts or outputs the printed matter output to the printer in the output phase of the data.

The present invention sets an output authority for a file to be output stored in a mobile terminal possessed by a user, generates a key for requesting authentication of an output authority and a key for authenticating an output authority to satisfy a condition that two keys are authenticated. The purpose is to construct a system that allows the output of data.

The NFC secure print system according to the present invention includes an NFC terminal for wirelessly transmitting a security file in which an output right is set for a file to be output, and authenticating an output right in an NFC communication method; An NFC printer analyzing the security file and requesting authentication of an output right if the output right corresponds to a security file in which the output right is set; It may include.

In the present invention, the NFC terminal, the security unit for determining the output authority for the security file, and generates a security key matching the output authority; An authentication unit for generating an authentication key for authenticating that there is an output authority for the output authority determined by the security key; An NFC controller converting the authentication key and the security key into a tag applet form and generating a security file combining the output file to the tag applet type security key; A wireless antenna unit for wirelessly transmitting the security file to the NFC printer; And NFC antenna unit for transmitting the authentication key for authenticating the output authority for the security file in the form of a tag applet; It may include.

In the present invention, the NFC printer, SAM for exchanging the user identification number (AID) with the NFC terminal to authenticate the validity of the NFC terminal; NFC communication unit for receiving the authentication key of the tag applet type when the NFC terminal is tagged; A wireless communication unit receiving the security file; A printer control unit for separating the security file in the form of a tag applet and a file to be output by analyzing the security file; A security authentication unit which determines whether there is an output authority by comparing the security key of the tag applet type separated from the security file with the authentication key of the tag applet type; And a memory unit which stores a file to be output separated from the security file, and records a history of which the output authority is authenticated by the security authentication unit. It may include.

In the present invention, a method of determining whether there is an output right by comparing the tag applet type security key and the tag applet type authentication key is that the output right is authenticated when the security key and the authentication key are the same. It can be characterized.

In the present invention, the wireless communication unit, it may be characterized in that for transmitting the security file in any one of the communication method selected from the Wi-Fi (WiFi) communication method or Bluetooth (BlueTooth) communication method.

The NFC secure printing method according to the present invention comprises the steps of: setting an output right of a document to be output; Generating a security key for setting the output right; Generating an authentication key for authenticating the output right; Converting the security key and the authentication key into a tag applet form; Transmitting a security file combining the file to be output and the security key converted into a tag applet form; Dividing the security file into a security key converted into a file to be output and a tag applet; Transmitting the authentication key converted into the tag applet form through an NFC communication method; And comparing the security key of the tag applet type with the authentication key of the tag applet type to determine whether there is an output authority. It may include.

According to the present invention, it is possible to maintain the security of the output by authenticating the output authority with a matching authentication key for the output file to which the security key has been assigned, and even if the data to be output is a combination of security keys, unauthorized data There is no effect to access or view.

In addition, there is an effect that can be managed by separately recording the authentication record of the output process by performing authentication through the NFC terminal.

1 is a view showing the configuration of the NFC secure print system according to an embodiment of the present invention.
Figure 2 is a diagram showing the configuration of configuring the NFC terminal according to an embodiment of the present invention.
Figure 3 is a diagram showing the configuration of configuring an NFC printer according to an embodiment of the present invention.
Figure 4 is a flow chart showing the flow of the NFC secure printing method according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention is capable of various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. It is to be understood, however, that the invention is not to be limited to the specific embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

The terms first, second, etc. may be used to describe various elements, but the elements should not be limited by terms. Terms are used only for the purpose of distinguishing one component from another.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Hereinafter, embodiments of the NFC security print system and method according to the present invention will be described in detail with reference to the accompanying drawings, in the description with reference to the accompanying drawings, the same or corresponding components are given the same reference numerals and Duplicate description thereof will be omitted.

A mobile terminal is a device for freely moving in a service area formed by a network and communicating wirelessly with a desired party anytime, anywhere, including a vehicle and a portable device, and recently, a portable tablet PC having a portable small computer (PC) function is provided. Since it is being developed, including all such equipment will be described as a 'mobile terminal' below.

The mobile terminal wirelessly connects with the base station for mobile communication, moves freely inside the service area, wirelessly connects with the desired counterpart, and performs mobile communication using the radio frequency of 13.56 MHz in the RF or NFC manner. A mobile terminal for short range wireless communication is referred to as an 'NFC terminal'.

Near field communication (NFC) uses a radio frequency of 13.56 MHz to communicate at a distance of about 10 centimeters (cm), resulting in low power consumption, data communication at up to 424 K bps, and contactless RFID technology. It is compatible with, and the communication mode is active and passive, and operates in any one of them selected.

An applet is an application program that distinguishes different data formats of information exchanged between mobile terminals.

A SAM (secure application module) refers to a smart card security application module, which is installed inside a payment terminal to authenticate the validity of a card and encrypt communication data to prevent exposure of information and to authenticate and verify communication messages.

1 is a view showing the configuration of the NFC secure print system according to an embodiment of the present invention.

Referring to Figure 1, NFC secure printing system according to an embodiment of the present invention can be configured to include an NFC terminal 10, NFC printer 20.

The NFC terminal 10 may wirelessly transmit a security file in which an output right is set for a file to be output, and authenticate the output right by an NFC communication method.

The NFC terminal 10 may store a file to be output by the user.

The output file can be any media that can be output, such as image files and document files.

The user may set output authority for the file to be output stored in the NFC terminal 10.

In a preferred embodiment, only the user having the NFC terminal 10 may be set to have an output right, or may be set to immediately output without authentication for the output right.

The NFC terminal 10 may transmit the security file in which the output right is set for the file to be output to the NFC printer 20.

The method of transmitting a file to be output from the NFC terminal 10 to the NFC printer 20 may be any one selected from Wi-Fi, Bluetooth, or a telephone communication network.

The NFC printer 20 may analyze the security file and request authentication of the output right if the output right corresponds to the security file in which the output right is set.

The security file transmitted from the NFC terminal 10 is in the form that can be accessed only if you have the output authority, the output is started only when the user with the output authority authenticates.

In a preferred embodiment, the NFC printer 20 analyzes the security file and, if the output right is set, sends a signal requesting authentication for the output right.

The user who delivered the security file to be output to the NFC printer 20 may tag the NFC terminal 10 to the NFC printer 20 to authenticate the output authority.

In a preferred embodiment, when the security authority set in the NFC terminal 10 is only the user, the user may tag the NFC terminal 10 to the NFC printer 20 to authenticate that the user has output authority. Alternatively, if the security authority is a document that anyone can print, it can be set up so that it can be printed immediately without the authentication procedure for printing authority.

2 is a diagram illustrating a configuration of an NFC terminal according to another embodiment of the present invention.

Referring to Figure 2, NFC terminal 10 according to an embodiment of the present invention is a wireless antenna unit 110, module control unit 120, NFC antenna unit 130, security unit 140, authentication unit 150 , NFC controller 160 can be configured to include.

The wireless antenna unit 110 may wirelessly transmit the security file in which the output right is set to the NFC printer 20.

The wireless antenna unit 110 is configured to enable any one communication method selected from Wi-Fi, Bluetooth, or a telephone communication network.

The module controller 120 may control each component of the NFC terminal 10.

When the wireless antenna unit 110 transmits or receives data to the outside, the module controller 120 may control which communication scheme is used to transmit and receive data.

The module control unit 120 may control the NFC antenna unit 130 to transmit and receive an external NFC communication device and a user identification number (AID) to form a session for transmitting and receiving data in the NFC communication method.

The NFC antenna unit 130 may transmit an authentication key for authenticating the output right for the security file in the form of a tag applet.

The tag applet is a format of data for transmitting and receiving information in the NFC communication method. The tag applet authentication key transmitted through the NFC antenna unit 130 serves to authenticate output authority.

The tag applet transmission method between the NFC terminal 10 and the NFC printer 20 may include a P2P method or an NFC terminal configured to deliver a P2P session by setting the NFC terminal 10 and the NFC printer in a peer-to-peer mode. 10) may be a card mode, the NFC printer 20 may be in the RW (Read & Write) method to the reader mode.

The security unit 140 may determine an output right for the security file, and generate a security key matching the output right.

The user may set an output right for the file to be output and generate the output right set by the security unit 140 in the form of a security key.

The authentication unit 150 may generate an authentication key for authenticating that there is an output right for the output right determined in the security key.

As the user sets the output right in the security unit 140, a security key is generated, and an authentication key for authenticating the output right of the security key is generated in the authentication unit 150.

That is, when the NFC printer 20 analyzes the security file and the output authority corresponds to the file to be authenticated, the authentication request of the output authority is requested to the NFC terminal 10, and the security key acts as a kind of lock. It will act as a key to authenticate the security key.

The NFC controller 160 may convert the authentication key and the security key into a tag applet form, and generate a security file combining the files to be output to the tag applet type security key.

The NFC controller 160 may convert the authentication key and the security key into a tag applet.

The output file is converted into a security file by combining the security key of tag applet type. In order to browse or output the contents of the output file included in the security file, the output authority according to the security key is authenticated so that the security is maintained. .

The security key converted into a tag applet form is combined with the file to be output and transmitted to the NFC printer 20, and the authentication key converted into the tag applet form is transmitted to the NFC terminal 20 to authenticate the output authority. .

3 is a diagram illustrating a configuration of an NFC printer according to another embodiment of the present invention.

Referring to FIG. 3, the NFC printer according to an embodiment of the present invention may include a printer control unit 210, a memory unit 220, a network interface 230, and a security authentication unit 240.

The printer control unit 210 may separate the security key in the form of a tag applet and a file to be output by analyzing the security file.

The printer control unit 210 stores the file to be output in the memory unit 220 and transmits an output command for the file to be output to an output device (not shown) when authenticating the output authority in the security authentication unit 240.

The printer controller 210 may control each component of the NFC printer 20.

The printer control unit 210 may control which communication method to take and transmit data when the network interface 230 transmits or receives data to the outside.

The printer control unit 210 may control the NFC communication unit 2320 to transmit and receive an external NFC communication device and a user identification number (AID) to form a session for transmitting and receiving data in the NFC communication method.

The memory unit 220 may store a file to be output separated from the security file, and record a history in which the output authority is authenticated by the security authentication unit.

 When delivered to the network interface 230, the printer control unit 210 analyzes the security file reached, and when the security key is analyzed as a file combined in the form of a tag applet, it is divided into a file and a security key part to be output to the memory unit 220. Can be stored.

Since the user identification number (AID) is transmitted between the NFC terminal 10 and the network interface 230, the memory unit 220 to record the history of the file attempted by the NFC printer 20 or the subject attempted authentication. Can be.

The network interface 230 may include a SAM 2310, an NFC communicator 2320, and a wireless communicator 2330.

The SAM 2310 may exchange a user identification number (AID) with the NFC terminal 10 and authenticate the validity of the NFC terminal 10.

When the NFC terminal 10 approaches the effective distance capable of NFC communication of the NFC printer 20, the SAM 2310 transmits a user identification number (AID), which is a unique identification number, from the NFC terminal 10 and the user identification number. After receiving and validating (AID), establish a session for information exchange.

The SAM can prevent the exposure of the information by encrypting the communication data for the information exchanged between the NFC terminal 10 and the NFC printer 20.

When the NFC terminal 10 is tagged, the NFC communication unit 2320 may receive an authentication key in the form of the tag applet.

As the validity is verified between the NFC terminal 10 and the NFC printer 20 in the SAM 2310, a communication session is formed, and the NFC communication unit 2320 of the NFC printer 20 and the NFC antenna unit of the NFC terminal 10 are provided. 130 transmits and receives an authentication key in the form of a tag applet.

The wireless communication unit 2330 may receive a security file.

NFC controller 160 controls the communication method to transmit the security file in the wireless antenna unit 110 of the NFC terminal 10, the printer control unit 210 of the NFC printer 20 is secure file in the wireless antenna unit 110 Control the communication method of the wireless communication unit 2330 according to the method for transmitting the, and receives the security file. The wireless communication unit 2330 may receive a security file by any one of a communication method selected from Wi-Fi, Bluetooth, or a telephone communication network.

The security authentication unit 240 may determine whether there is an output right by comparing the tag applet type security key separated from the security file with the tag applet type authentication key.

The security file transmitted through the wireless communication unit 2330 is separated from the tag applet type security key by the printer control unit 210, and the output authority is compared with the tag applet type authentication key transmitted through the NFC communication unit 2320. Can be determined.

When the output authority according to the security key is authenticated by the authentication key, an output command is transmitted to output the file to be output.

In a preferred embodiment, if the security key and the authentication key is the same in the security authentication unit 240 may be authenticated with the output permission.

However, the present invention is not necessarily limited to the above-described embodiment, and includes a case in which the security algorithm can be easily changed and applied to those skilled in the art to be implemented in a changed manner.

In a preferred embodiment, the file to be output stored in the memory unit 220 may delete the file to be output by automatically giving a delete command from the security authentication unit 240 if the output authority is not authenticated for a predetermined time.

Figure 4 is a flow chart showing the flow of the NFC secure printing method according to an embodiment of the present invention.

Referring to Figure 4, step S10 of the NFC secure printing method according to an embodiment of the present invention is a step of setting the output authority of the document to be output.

The user may set the output only to the user through the authority setting application included in the NFC terminal 10, or set the output authority to a predetermined person including the person.

In step S20, a security key and an authentication key for setting the output right are generated.

According to the authority set in step S10 may generate a security key to prevent the unauthorized reading or output of the document in the NFC terminal 10, it may be generated along with the authentication key for releasing the security key.

In step S30, the security key and the authentication key are converted into a tag applet form.

Tag applet is a format of data for transmitting and receiving information through NFC communication method.

The security key and the authentication key generated in step S20 are converted into a tag applet, respectively, and converted into a format that can be recognized by the NFC terminal 10 and the NFC printer 20.

Steps S40 and S50 are a step of transmitting a security file combining the file to be output and the security key converted into the tag applet form, and transmitting an output command together.

The output file is converted into a security file by combining a security key in the form of a tag applet.In order to view or output the contents of the output file included in the security file, the output authority according to the security key is authenticated to maintain security. do.

In step S60, the security file is separated into a security key converted into the output file and the tag applet.

When the security file is transmitted, the NFC printer 20 separates and stores a file to be output in order to output the security file, and transmits a security key for authenticating the output authority for the authentication key converted into a tag applet. waiting.

Step S70 is a step of establishing a session for exchanging user identification number (AID), and exchange information.

When the NFC terminal 10 approaches the effective distance capable of NFC communication of the NFC printer 20, the SAM 2310 transmits a user identification number (AID), which is a unique identification number, and the user identification number from the NFC terminal 10. After receiving and validating (AID), a session is established to send and receive information.

Communication data exchanged between the NFC terminal 10 and the NFC printer 20 can be encrypted to prevent exposure of information.

Step S80 is a step for requesting authentication for the output authority from the NFC printer.

When the NFC printer 20 recognizes the existence of the security key by analyzing the transmitted security file, the NFC printer 20 requests the NFC terminal 10 for output authority for authenticating the output authority for the file to be output.

Step S90 is a step of transmitting the security key converted into the tag applet form in the NFC communication method.

The NFC terminal 10 and the NFC printer 20 form a communication session for exchanging authentication keys according to steps S70 and S80, and the NFC terminal 10 converts the authentication key converted into a tag applet form to the NFC printer 20. To pass on.

The transmission method between the NFC terminal 10 and the NFC printer 20 is a P2P method or NFC terminal 10 for setting up the NFC terminal 10 and the NFC printer in a P2P (Peer To Peer) mode to configure a P2P session and deliver it. Silver card mode, NFC printer 20 can be in the RW (Read & Write) method to the reader mode.

Step S100 is a step of determining whether there is an output right by comparing the tag applet type security key with the tag applet type authentication key.

When the output authority according to the security key is authenticated by the authentication key, an output command is transmitted to output the file to be output.

According to a preferred embodiment, when the security key and the authentication key are the same, the user may be authenticated with output permission.

However, the present invention is not necessarily limited to the above-described embodiment, and includes a case in which the security algorithm can be easily changed and applied to those skilled in the art to be implemented in a changed manner.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and variations can be made.

10: NFC terminal
110: wireless antenna unit
120: module control unit
130: NFC antenna unit
140: Security Department
150: certification unit
160: NFC controller
20: NFC printer
210: printer control unit
220: memory unit
230: network interface
2310: SAM
2320: NFC communication unit
2330: wireless communication unit
240: security certification

Claims (6)

NFC terminal for wirelessly transmitting the security file set the output authority for the output file, and authenticates the output authority in the NFC communication method; And
An NFC printer analyzing the security file and requesting authentication of an output right if the output right corresponds to a security file set; NFC secure print system comprising a. The method of claim 1,
The NFC terminal,
A security unit which determines an output right for the security file and generates a security key matching the output right;
An authentication unit for generating an authentication key for authenticating that there is an output authority for the output authority determined by the security key;
An NFC controller converting the authentication key and the security key into a tag applet form and generating a security file combining the output file to the tag applet type security key;
A wireless antenna unit for wirelessly transmitting the security file to the NFC printer; And
NFC antenna unit for transmitting the authentication key for authenticating the output authority for the security file in the form of a tag applet; NFC secure print system comprising a. The method of claim 1,
The NFC printer,
A Sam (SAM) secure application module for exchanging user identification number (AID) with the NFC terminal and authenticating the validity of the NFC terminal;
NFC communication unit for receiving the authentication key of the tag applet type when the NFC terminal is tagged;
A wireless communication unit receiving the security file;
A printer control unit for separating the security file in the form of a tag applet and a file to be output by analyzing the security file;
A security authentication unit which determines whether there is an output authority by comparing the security key of the tag applet type separated from the security file with the authentication key of the tag applet type; And
A memory unit which stores a file to be output separated from the security file, and records a history of which the output authority is authenticated by the security authentication unit; NFC secure print system comprising a. The method of claim 3,
The method for determining whether there is an output authority by comparing the tag applet type security key with the tag applet type authentication key,
The NFC secure print system, characterized in that the output authority is authenticated if the security key and the authentication key is the same. The method of claim 3,
The wireless communication unit includes:
The NFC secure print system, characterized in that the security file transfer to any one of the selected communication method of the Wi-Fi (WiFi) or Bluetooth (BlueTooth) communication method. Setting an output right of the document to be output;
Generating a security key for setting the output right;
Generating an authentication key for authenticating the output right;
Converting the security key and the authentication key into a tag applet form;
Transmitting a security file combining the file to be output and the security key converted into a tag applet form;
Dividing the security file into a security key converted into a file to be output and a tag applet;
Transmitting the authentication key converted into the tag applet form through an NFC communication method; And
Comparing the tag applet type security key with the tag applet type authentication key to determine whether there is an output authority; NFC secure print method comprising a.

Images