KR20150107951A - Security system and security method for internet of things connected wireless network - Google Patents

Abstract

The present invention is not to realize a virtual private network for individually maintaining data security for each equipment connected by using Internet of things, but to realize a virtual private network for the data security in a wired/wireless communications device which is connected to the Internet of things to be connected to an external network in order to transmit data. A terminal, which is connected to the Internet of things to be used, has the virtual private network in a wireless VPN device (Lte, 3G, WiMAX, Zigbee, Wi-Fi, and RF) connected to the terminal in order to transmit data, and the connected wired/wireless device can be in several types. For example, when data of the terminal, which is equipped in the house, is transmitted to the outside through the Internet by using the Zigbee, the data or control signals, which are currently measured, are transceived with the outside by using a Zigbee wireless device. In this case, the virtual private network and a firewall for the data security are realized in the Zigbee wireless VPN device, thereby ensuring the security for the data which is transmitted to the outside.

Description

TECHNICAL FIELD [0001] The present invention relates to a security system and method for an Internet connected to a wireless network,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security system for a device connected to an Internet of a network interworking with a wireless network and a control method thereof.

The Internet is slowly spreading to every part of everyday life. In many places today, it is becoming easier to find things that connect to the Internet in many places. Things Many of the terminals that connect to the Internet are used in the space where people live or in the vicinity. Security of things Internet terminals is also very important. Therefore, a security system should be applied to terminals using the Internet. For example, it is developed to be able to monitor and control the state of the refrigerator from the outside by connecting the refrigerator to the Internet as well as the function of the refrigerator which is used in the house, It is also possible to use the Internet or the like. This is useful for people on these systems, but it is also connected to an external network such as xDSL, cable modem, mobile communication network and WiMAX network connected to the house, so the security aspect should be examined in any way. Objects The number of terminals connected to the Internet will increase in many places as well as in homes, companies, and government offices. In the future, most fixed or mobile terminals will connect things to the Internet.

Therefore, it is very important how to secure the Internet of such things. In this trend, various methods such as a VPN technique using an existing dedicated line as well as a method of applying a VPN for security in a network centering on an ISP are being studied. The present patent discloses a wired and wireless VPN device to which such Internet terminals are connected. In order to construct a security system for the Internet, it is necessary to establish a VPN network using each terminal, Lt; / RTI > In order to solve these problems, each terminal is connected to a wired / wireless VPN device, and a tunnel is formed by encryption and authentication for connection in a wired / wireless VPN system, thereby constructing a backhaul network connected to a wired / wireless communication network. Currently, the devices connected to the Internet are installed in the premises or in a certain place, but today, many of these terminals are being developed for monitoring or control from outside.

Currently, although the external network is connected using a wired network, more and more terminals are becoming wireless, so that more and more networks are connected to the wireless network through the wireless network. Such objects have inconvenience in that a virtual private network (VPN) is installed separately for each device and a firewall is installed separately in order to install and use a virtual private network (VPN) for each device connected to the Internet individually or in a corporation or a government office or the like.

SUMMARY OF THE INVENTION The object of the present invention is to prevent the inconvenience of installing a virtual private network and a firewall in each terminal connected to the Internet when the terminals using the Internet are connected to the wired and wireless network, It is for securing the data transmitted from the connected terminal. It is to install the virtual private network and the firewall in the wired / wireless relay device to be transmitted.

According to an aspect of the present invention, a virtual private network for maintaining security of data is separately installed in each of devices connected to the Internet, And a virtual private network for data security is implemented in a wired / wireless communication device for transmitting data. Objects A terminal that is connected to the Internet is equipped with a virtual private network in a wireless VPN device (Lte, 3G, WiMAX, ZigBee, WiFi, RF) connected to the terminal to transmit data. There are various kinds of wired / do. For example, when data of a terminal in the house is transmitted to the outside through the Internet using ZigBee, the ZigBee wireless device transmits and receives the currently measured data and control signals to the outside. In this case, a ZigBee wireless VPN device is provided with a security system and method for the object Internet interworking with a wireless network that implements security for data transmitted outside by implementing a virtual private network and a firewall for securing data.

According to the embodiment of the present invention, the mileage is provided during the time the mobile is placed in the management place, and the home communication device can be used by using the provided mileage, so that the children can use the mobile in a planned manner by themselves. Also, according to the embodiment of the present invention, the mileage acquired through the mobile usage management is cashed and provided to the child as pocket money, so that the children can understand and try to use the mobile properly.

1 is a network configuration diagram of a security system for an object Internet interworking with a wireless network according to an embodiment of the present invention.
2 is a diagram illustrating an encryption communication method according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "comprising ", it means that it can include other elements as well, without departing from the other elements unless specifically stated otherwise.

Hereinafter, a security system and method according to an embodiment of the present invention will be described with reference to the accompanying drawings.

The security method for the object Internet interworking with the wireless network according to an embodiment of the present invention is a method for allowing a user to access wireless (Wi-Fi, ZigBee AP, Bluetooth AP, device, 3G, WiMAX) Transmitting the tunneling signal by connecting to the virtual private network, and transmitting the data through the virtual private network by authenticating the user by receiving the tunneling signal, generating a tunnel to the virtual private network when the user is authenticated, If the user inquires the security code of the data, the security code is generated using the inquired security code, and the data is transmitted by applying the security code to the data to be transmitted, so that the security is applied even when the data is transmitted through the object Internet .

It is possible to connect any terminal to the Internet of things. In some cases, the terminal itself has an Ethernet or Wi-Fi function. Even though the terminal itself can not be connected to the Ethernet like the USN terminal, Data may be transmitted using a VPN device.

In such a case, it is not necessary to install a virtual private network and a firewall for each user terminal by implementing a virtual private network in a wireless VPN device, and it is possible to reduce the processing burden on the user terminal while the user maintains security, It is easy to process. The wireless network environment has a different communication environment from the wired environment, and there are many types of communication devices and terminals for wireless network connection.

Compatibility and high portability for these various wireless devices should be guaranteed. As a method of configuring such a wireless VPN environment, a method using software, a method implemented with dedicated hardware, and a clientless method can be implemented. However, wireless terminals used in the Internet are usually limited in their low computing power and expandable bandwidth, making it impossible to apply high-performance encryption algorithms or transmit large amounts of data.

Therefore, the wireless VPN device is used as the hardware connected to the Internet terminal, and the terminal has the function of transmitting data to the wireless VPN device and transmitting the data, so that the software provides a flexible function.

The Virtual Private Network (VPN) design for the Internet consists of a method of applying VPN to the wireless relay device and a wireless relay device, and a method of applying the VPN to the mobile terminal and the wireless relay device.

The operation according to this is a method in which a terminal forms a tunnel with a tunneling server directly through an Internet terminal-initiated tunneling method, and L2TP is loaded in the terminal to operate. And performs encryption at the network layer so that remote VPN and remote access VPN functions can be performed.

A header part for processing the encryption, a header part for processing the authentication part, and a cryptographic key. The key and encryption algorithm are negotiated through the negotiation at the end of the VPN terminal to prevent eavesdropping of the payload data. Provides services for authentication on encryption. Then, an authentication header is placed between the IP header and the data transmission header, and authentication data and an internal serial number are assigned to the data.

A method for forming a tunnel with a tunnel server in a wireless VPN device having a wireless access switch function connected to a destination Internet terminal is performed at an initial connection outside the tunnel, so a code for security between the terminal and the wireless network device is applied . In addition, a plurality of Sessions are provided in one tunnel, and a tunnel is configured for each different terminal in the same site, and QoS parameters are designated for each tunnel.

It has an access control function for data transmission, transmits various encryption protocols or authentication protocols, and transmits data including information on how to interpret the defined values from the protocol during data transmission.

Wired / Wireless VPN device (Wireless Access VPN) is a wireless terminal initiated VPN for mobile devices and Internet terminals and client devices. It has a function to process VPN service and guarantees QoS service according to the performance improvement of Core network.

In addition, the wired and wireless VPN device forms a tunnel for data transmission with wired and wireless Internet, a multi-session multi-tunnel for connection through encryption with each wired / wireless terminal, Create an L2F tunnel to the server. Also, it assigns an address from the wired / wireless VPN device of the remote user, processes the user authentication, authenticates the access terminal with the user ID, and forms a tunnel between the wired and wireless VPN device and the wired / wireless VPN device. Authentication and security technologies between the Internet terminal and the wireless VPN device are applied, and the tunneling and the clustering are realized.

The encryption communication process is as follows.

Secret key encryption has the same key as Encryption Key and Decryption Key when it has a single key, and it owns N keys when N terminals exchange data. In Public Key cryptography, the encryption of the transmitting device is encrypted by the public key of the receiving device and the receiver is encrypted by the public key of the receiver. In the authentication process, the transmitter encrypts with the private key of the transmitter and the receiver protects with the public key of the transmitter.

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

Claims (1)

Objects In order to maintain data security for individual devices connected to each other using the Internet, it is not necessary to implement a virtual private network, but a wired / wireless communication for connecting data to an external network To implement a virtual private network for data security on the device. Objects A terminal that is connected to the Internet is equipped with a virtual private network in a wireless VPN device (Lte, 3G, WiMAX, ZigBee, WiFi, RF) connected to the terminal to transmit data. There are various kinds of wired / do. For example, when data of a terminal in the house is transmitted to the outside through the Internet using ZigBee, the ZigBee wireless device transmits and receives the currently measured data and control signals to the outside. In this case, the security system and method for the object Internet interworking with the wireless network applying the security for the data transmitted to the outside by implementing the virtual private network and the firewall for securing the data in the ZigBee wireless VPN device.

Images