KR20160033576A - BLE beacon device for anti-spoofing - Google Patents

Abstract

Provided is a BLE beacon device for anti-spoofing. According to an embodiment of the present invention, the BLE beacon device for anti-spoofing comprises: a counter generation unit generating counter information according to a first time rule; a packet generation unit generating packets containing beacon device ID (UUID) and counter information generated according to a second time rule, wherein the generated counter information corresponds to the generation time of the counter information; and a communication unit broadcasting, to a user terminal or a user terminal connected to a beacon management server, the generated packets so that the user terminal or the beacon management server verifies the location of the user terminal in accordance with a difference in the time corresponding to the counter information included in at least two of the packets generated according to the second time rule.

Description

BLE beacon device for anti-spoofing < RTI ID = 0.0 >

The present invention relates to a BLE beacon device for anti-spoofing, and more particularly to a BLE beacon device capable of enhancing security for location based services of a user terminal.

Recently, with the rapid spread of smart devices including smart phones, the paradigm of the mobile communication industry is shifting from voice calls to applications. Particularly, since the location of the user terminal can be grasped, an application that can provide various services based on the location information of the user having the user terminal in real time has appeared.

The positioning of the user terminal has already been popularized by GPS-based technology outdoors, but limited in cases where GPS signals are not received, such as indoor or underground. In order to solve such a problem, methods using short-range communication have been proposed, and recently, beacon devices using low-power Bluetooth (BLE) communication have appeared.

The BLE beacon device periodically transmits its location information to the user terminal, and the receiving user terminal transmits the location information to the beacon management server so that the beacon management server can confirm the location of the user terminal by the location of the BLE beacon device have.

However, since the currently released BLE beacon devices broadcast their location information, it is possible to receive the location information of the beacon device from any user terminal within the transmission range, and thus the packet sniffing so that spoofing can be performed.

As described above, the conventional BLE beacon device is convenient to grasp the current position of the user, but has a problem that the information on the current position of the user can not be trusted from the service provider's perspective. For example, it is possible to sniff transmission information of a beacon device installed in place A and retransmit the information at another place B to receive a service provided for place A such as a check-in point without being located at real place A. Especially, in case of a beacon device connected with a payment system, there is a problem that it is difficult to provide a reliable service because the location information of the beacon device can not be relied upon.

KR 2014-0017667 A

In order to solve the problems of the related art as described above, an embodiment of the present invention provides a BLE beacon device for anti-spoofing which can prevent spoofing by an illegal user terminal.

According to an aspect of the present invention, there is provided a beacon device for anti-spoofing. Wherein the beacon device for anti-spoofing comprises: a counter generator for generating counter information according to a first time rule; A packet generator for generating a packet including the generated counter information and a beacon device ID (UUID) according to a second time rule, the generated counter information corresponding to a generation time of the counter information; And a user terminal or a beacon management server for verifying the location of the user terminal according to a difference in time corresponding to counter information included in at least two packets generated according to the second time rule, And a communication unit for broadcasting to a user terminal connected to the beacon management server.

In one embodiment, the beacon device for anti-spoofing may further include an encryption unit for encrypting the packet in either a single encryption mode or a dual encryption mode.

In one embodiment, the counter generator may be synchronized with an internal timer of the beacon management server.

In one embodiment, the packet generator may generate the packet to sequentially include the generated counter information if the first time rule is equal to the second time rule, If it is different from the rule, the packet may be generated to include the generated counter information in a predefined order.

In one embodiment, the beacon device for anti-spoofing may further include a status information collection unit for collecting status information of the beacon device.

In one embodiment, the status information may include temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, and seismic intensity of the beacon device.

According to another aspect of the present invention there is provided a method for anti-spoofing of a beacon device. The method for anti-spoofing includes generating counter information according to a first time rule; Generating a packet including the generated counter information and a beacon device ID (UUID) according to a second time rule, the generated counter information corresponding to a generation time of the counter information; And a user terminal or a beacon management server for verifying the location of the user terminal according to a difference in time corresponding to counter information included in at least two packets generated according to the second time rule, Broadcasting to a user terminal connected to the beacon management server.

In one embodiment, the method may further comprise encrypting the packet in either a single encryption mode or a dual encryption mode.

In one embodiment, the method may further comprise synchronizing with the beacon management server.

In one embodiment, the step of generating the packet may include generating the packet to sequentially include the generated counter information if the first time rule is equal to the second time rule, If it differs from the second time rule, the packet may be generated to include the generated counter information in a predefined order.

In one embodiment, the method may further comprise collecting status information of the beacon device.

In one embodiment, the status information may include temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, device operating mode, and progress of the beacon device.

According to another aspect of the present invention, there is provided a computer-readable recording medium recording a program for anti-spoofing executed in a beacon device. A computer readable recording medium on which the program is recorded includes: code for generating counter information according to a first time rule; Code for generating a packet including the generated counter information and a beacon device ID (UUID) according to a second time rule, the generated counter information corresponding to a generation time of the counter information; And a user terminal or a beacon management server for verifying the location of the user terminal according to a difference in time corresponding to counter information included in at least two packets generated according to the second time rule, And may include code for broadcasting to a user terminal connected to the beacon management server.

In one embodiment, the computer-readable recording medium on which the program is recorded may further comprise a code for encrypting the packet in either a single encryption mode or a dual encryption mode.

In one embodiment, the computer readable recording medium having recorded the program may further comprise code for synchronizing with the beacon management server,

In one embodiment, the code for generating the packet may generate the packet to sequentially include the generated counter information if the first time rule is identical to the second time rule, And generate the packet so as to include the generated counter information in a predefined order when the second time rule is different from the second time rule.

In one embodiment, the computer readable recording medium recording the program may further comprise code for collecting status information of the beacon device.

In one embodiment, the status information may include temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, and seismic intensity of the beacon device.

The BLE beacon device for anti-spoofing according to an embodiment of the present invention can improve the reliability of the location information of the beacon device by preventing spoofing by the illegal user.

In addition, an embodiment of the present invention can establish an environment capable of providing additional services sensitive to personal information such as financial settlement according to highly reliable location information of a beacon device.

1 is a block diagram of a BLE beacon device system for anti-spoofing according to an embodiment of the present invention.
2 is a block diagram of a BLE beacon device for anti-spoofing in accordance with one embodiment of the present invention.
3 is a block diagram of a user terminal that verifies a user location in conjunction with a BLE beacon device for anti-spoofing in accordance with an embodiment of the present invention.
4 is a block diagram of a beacon management server for verifying a user location in conjunction with a BLE beacon device for anti-spoofing in accordance with an embodiment of the present invention.
5 is a flowchart of a method for anti-spoofing in accordance with an embodiment of the present invention.
6 is a flowchart of a method for anti-spoofing according to another embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art to which the present invention pertains. The present invention may be embodied in many different forms and is not limited to the embodiments described herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and the same or similar components are denoted by the same reference numerals throughout the specification.

1 is a block diagram of a BLE beacon device system for anti-spoofing according to an embodiment of the present invention. Hereinafter, a BLE beacon device system for anti-spoofing according to an embodiment of the present invention will be described in detail with reference to the drawings.

Referring to FIG. 1, a BLE beacon device system 10 according to an embodiment of the present invention includes a BLE beacon device 100, a user terminal 200, and a beacon management server 300.

The BLE beacon device 100 may broadcast to the user terminal 200 information including its location information, status information and ID for verifying the location of the user terminal 200. [

The BLE beacon device for anti-spoofing will now be described in more detail with reference to FIG. 2 is a block diagram of a BLE beacon device for anti-spoofing in accordance with one embodiment of the present invention.

The BLE beacon device 100 may include a counter generating unit 110, a status information collecting unit 120, a packet generating unit 130, an encrypting unit 140, and a communication unit 150.

The counter generation unit 110 may generate counter information of a certain time rule for verifying the position of the user terminal 200. [ For example, the counter generating unit 110 may generate counter information according to a first time rule such as a predetermined sequence table or a rule. Here, the counter information is information generated as a timer (not shown) in the BLE beacon device 100 increases in a predetermined time interval. If the counter information of a certain time is known, The counter information can be known from a predetermined sequence table or rule. Alternatively, the counter generating unit 110 may be synchronized with the internal timer of the beacon management server 300. [ In this case, the counter generating unit 110 can generate counter information corresponding to a predetermined time after synchronization.

The status information collecting unit 120 may collect various status information of the BLE beacon device 100. Here, the state information may include temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, and magnitude of the BLE beacon device 100. For example, the status information collecting unit 120 may collect various status information through a sensor module (not shown).

The packet generating unit 130 may generate a packet including the counter information and the beacon device ID generated by the counter generating unit 110 according to a second time rule. Here, the counter information included in the generated packet is a counter It is possible to cope with the generation time of information. More specifically, when the first time rule is equal to the second time rule, the packet generating unit 130 may generate a packet so as to sequentially include the generated counter information. For example, when the generation time of the packet is equal to the generation time of the counter information, the packet generation unit 130 can generate a packet having different counter information. In addition, when the first time rule is different from the second time rule, the packet generating unit 130 may generate a packet to include the generated counter information in a predefined order. For example, when the generation time of the packet is different from the generation time of the counter information, in particular, when the interval between generation times of the counter information is larger than the interval of generation time of the packet, Accordingly, a packet including the same counter information can be generated. At this time, the number of packets including the same counter information may be different. Here, the generated packet may include status information of the BLE beacon device 100 collected by the status information collecting unit 120.

The encryption unit 140 can encrypt the packet generated by the packet generation unit 130. [ At this time, the encryption unit 140 can encrypt a packet generated by either a single encryption method or a dual encryption method. For example, in the case of the single encryption method, the encryption unit 140 encrypts the generated packet using the fixed key. In this case, the user terminal 200 or the beacon management server 300 can use the same fixed key in advance Can be distributed. Alternatively, the encryption unit 140 may encrypt the generated packet using the random shared key, in which case the random shared key may be included in the packet and sent to the user terminal 200 or the beacon management server 300 have.

In the case of the dual encryption scheme, the encryption unit 140 first encrypts a packet generated using the random shared key, encrypts the random shared key using the fixed key, and transmits the encrypted random shared key to the packet To be transmitted to the user terminal 200 or the beacon management server 300. In this case, the same fixed key may be distributed to the user terminal 200 or the beacon management server 300 in advance. Alternatively, the encryption unit 140 may encrypt a packet generated using the random shared key, and then encrypt the packet including the random shared key with a fixed key.

In the present embodiment, the BLE beacon device 100 includes the encryption unit 140, but the present invention is not limited to this, and the encryption unit 140 may be omitted.

The communication unit 150 transmits the location information of the user terminal 200 or the location of the user terminal 200 according to the difference in time corresponding to the counter information included in the at least two packets generated according to the second time rule by the user terminal 200 or the beacon management server 300 The packet generated by the packet generating unit 130 may be transmitted to the user terminal 200 or the user terminal 200 connected to the beacon management server 300 in the case where the encryption unit 140 is omitted or the encryption unit 140 is omitted, 0.0 > 200 < / RTI > For example, the communication unit 150 may be implemented by a low-power Bluetooth communication method, but not limited thereto, and may be performed by any short-range communication method such as WiFi.

Referring back to FIG. 1, the user terminal 200 may send a packet received from the BLE beacon device 100 to the beacon management server 300 to verify its location. Alternatively, the user terminal 200 may perform its position verification based on counter information from the BLE beacon device 100, as in this embodiment.

A user terminal for verifying its position in the user terminal 200 will be described in more detail with reference to FIG. 3 is a block diagram of a user terminal that verifies a user location in conjunction with a BLE beacon device for anti-spoofing in accordance with an embodiment of the present invention.

The user terminal 200 may include a communication unit 210, a decryption unit 220, a packet extraction unit 230, a validity verification unit 240, and a storage unit 250.

The communication unit 210 may receive the packet including the counter information broadcast in the BLE beacon device 100 and the beacon device ID (UUID). For example, the communication unit 210 may be implemented by a low-power Bluetooth communication method, but not limited thereto, and may be performed by any short-range communication method such as WiFi.

The decryption unit 220 can decrypt the packet received by the communication unit 210. [ At this time, the decryption unit 220 can decrypt the packet using either a single encryption method or a dual encryption method. For example, in the case of the single encryption method, the decryption unit 220 can decrypt the packet using the fixed key previously distributed in advance. Alternatively, the decryption unit 220 may extract the random shared key from the packet and decrypt the packet using the extracted random shared key.

In the case of the dual encryption scheme, the decryption unit 220 first extracts the encrypted random shared key from the packet, decrypts the extracted random shared key using the pre-distributed fixed key, The key can be used to decrypt the packet. Alternatively, the decryption unit 220 may decrypt the packet using the pre-distributed fixed key, extract the random shared key from the decrypted packet, and decrypt the packet with the extracted random shared key.

Alternatively, in the present embodiment, the user terminal 200 has been described as including the decryption unit 220. However, the present invention is not limited to this, and the decryption unit 220 may be omitted.

The packet extracting unit 230 can extract the counter information and the beacon device ID from the packet periodically received from the communication unit 210 when the decryption unit 220 decrypts the packet or the decryption unit 220 is omitted have. At this time, the packet extracting unit 230 can extract the generation time of the counter information from the counter information extracted according to the predetermined sequence table or rule.

The validation unit 240 may determine whether the difference between the difference between the generation time of the counter information extracted from the packet extracting unit 230 and the counter information corresponding to the previously stored counter information is equal to or less than the allowable error, The position of the terminal 200 can be verified. For example, the validation unit 240 measures the reception time T _new of the packet, extracts the time corresponding to the extracted counter information, i.e., the generation time T _n of the counter information, The position of the user terminal is verified by using the counter information C _m stored in the storage unit 210 and the corresponding time, i.e., the generation time T _m of the counter information and the time T _old .

Here,? T _up and? T _down are predetermined tolerances.

As described above, the validation unit 240 can verify that the location of the user terminal 200 is proper if the difference between the times corresponding to the counter information extracted from the packet and the times corresponding to the previously stored counter information is within the allowable range . At this time, the validity verification unit 240 may update the corresponding counter information in the storage unit 250 as the latest counter information.

The storage unit 250 may store a first time rule such as a predetermined sequence table or rule for extracting the generation time of the counter information from the counter information and the counter information used for verifying the position of the user terminal 200. [ At this time, the storage unit 250 can store the counter information included in the initially received packet. If the location of the user terminal is verified according to the comparison result of the extracted counter information of the validity verification unit 240, And can be updated with counter information.

Referring back to FIG. 1, the beacon management server 300 can verify the location of the user terminal 200 using the counter information of the BLE beacon device 100 transmitted from the user terminal 200. In this case, the user terminal 200 is not configured as described with reference to FIG. 3, but instead receives packets received from the BLE beacon device 100 via a secure link, such as a WiFi, Bluetooth or cellular network, Lt; RTI ID = 0.0 > a < / RTI >

Hereinafter, a beacon management server in conjunction with a BLE beacon device for anti-spoofing will be described in more detail with reference to FIG. 4 is a block diagram of a beacon management server for verifying a user location in conjunction with a BLE beacon device for anti-spoofing in accordance with an embodiment of the present invention.

The beacon management server 300 may include a communication unit 310, a packet extraction unit 320, a decryption unit 330, a validity verification unit 340, and a storage unit 350.

The communication unit 310 may receive the packet including the counter information broadcast in the BLE beacon device 100 and the beacon device ID (UUID) from the user terminal 200. For example, the communication unit 310 may be implemented by a remote communication method such as a cellular network for communication with the user terminal 200, but is not limited thereto, and may be a WiFi or Bluetooth communication capable of communicating with the user terminal 200 . ≪ / RTI > In addition, the communication unit 310 may be synchronized with an internal timer (not shown) of the beacon device 100.

The decryption unit 320 can decrypt the packet received by the communication unit 310. [ At this time, the decryption unit 320 can decrypt the packet using either a single encryption method or a dual encryption method. For example, in the case of the single encryption method, the decryption unit 320 can decrypt the extracted packet using the fixed key distributed in advance. Alternatively, the decryption unit 320 may extract the random shared key from the packet and decrypt the packet using the extracted random shared key.

In the case of the dual encryption scheme, the decryption unit 320 first extracts the encrypted random shared key from the packet, decrypts the extracted random shared key using the pre-distributed fixed key, The key can be used to decrypt the packet. Alternatively, the decryption unit 320 may decrypt the packet using the pre-distributed fixed key, extract the random shared key from the decrypted packet, and decrypt the packet with the extracted random shared key.

In the present embodiment, the beacon management server 300 includes the decryption unit 320. However, the present invention is not limited to this, and the decryption unit 320 may be omitted.

The packet extracting unit 330 can extract the counter information and the beacon device ID from the packet periodically received from the communication unit 310 when the decryption unit 320 decrypts the packet or the decryption unit 320 is omitted have. At this time, the packet extracting unit 330 can extract the generation time of the counter information from the counter information extracted according to the predetermined sequence table or rule.

The validation unit 340 determines whether or not the difference between the generation time difference of the counter information extracted by the packet extracting unit 330 and the counter information corresponding to the previously stored counter information is equal to or less than the allowable error, The position of the terminal 200 can be verified. For example, the validation unit 340 measures the reception time T _new of the packet, extracts the time corresponding to the extracted counter information, i.e., the generation time T _n of the counter information, The position of the user terminal 200 using the counter information C _m stored in the storage unit 310 and the corresponding time, i.e., the generation time T _m of the counter information and the time T _old , Can be verified.

As described above, the validation unit 340 can verify that the position of the user terminal 200 is proper when the difference between the time corresponding to the counter information extracted from the packet and the time corresponding to the previously stored counter information is within the allowable range . At this time, the validation unit 340 may update the counter information as the latest counter information to the storage unit 350. [

If the validation unit 340 repeatedly performs the comparison of the counter information and the difference between the generation time difference of the counter information and the difference in the reception time of the packet is out of the tolerance, It can be determined that the location of the user terminal 200 is not proper and the corresponding user terminal can be blocked.

The storage unit 350 may store a first time rule such as a predetermined sequence table or rule for extracting the generation time of the counter information from the counter information and the counter information used for verifying the position of the user terminal 200. [ At this time, the storage unit 350 may store the counter information included in the initially received packet, and thereafter, the location of the user terminal 200 may be verified based on the comparison result of the extracted counter information of the validity verification unit 340 The extracted counter information can be updated.

According to this configuration, the BLE beacon device 100 according to the embodiment of the present invention can improve the reliability of the location information of the beacon device by preventing spoofing by the illegal user, It is possible to construct an environment capable of providing additional services sensitive to personal information such as financial settlement.

Hereinafter, a method for anti-spoofing of the present invention will be described with reference to FIGS. 5 and 6. FIG. 5 is a flowchart of a method for anti-spoofing in accordance with an embodiment of the present invention.

The method 500 for anti-spoofing includes generating a counter information (S501), generating a packet including counter information (S502), encrypting the generated packet (S503), transmitting the encrypted packet (S504), and verifying the position of the user terminal based on the transmitted counter information (S505 to S507).

More specifically, as shown in FIG. 5, first, in the BLE beacon device 100, counter information of a certain time rule for the position verification of the user terminal may be generated (step S501). Here, the counter information may be generated according to a first time rule, such as a predetermined sequence table or rule. Optionally, various states of the BLE beacon device 100 may be collected. Here, the state information may include temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, and magnitude of the BLE beacon device 100. At this time, various status information can be collected through a sensor module (not shown).

Next, a packet including the generated counter information and the beacon device ID may be generated according to the second time rule (step S502). Here, the counter information included in the generated packet may correspond to the generation time of the counter information. At this time, if the first time rule is equal to the second time rule, the packet can be generated so as to sequentially include the generated counter information. For example, when the generation time of the packet is equal to the generation time of the counter information, a packet having different counter information can be generated. Also, when the first time rule differs from the second time rule, the packet may be generated to include the generated counter information in a predefined order. For example, when the generation time of the packet and the generation time of the counter information are different, especially when the interval of the generation time of the counter information is larger than the interval of the generation time of the packet, Can be generated. At this time, the number of packets including the same counter information may be different. Here, the generated packet may include status information of the collected BLE beacon device 100.

Next, the generated packet can be encrypted (step S503). At this time, the encryption of the generated packet can be performed by either a single encryption method or a dual encryption method. For example, in the case of a single encryption scheme, a packet generated using a fixed key is encrypted. In this case, the same fixed key may be previously distributed to the user terminal 200 or the beacon management server 300. Alternatively, the random shared key may be included in the packet and transmitted to the user terminal 200 or the beacon management server 300. In this case,

In the case of the dual encryption scheme, a packet generated using a random shared key is encrypted, a random shared key is encrypted using a fixed key, an encrypted random shared key is included in a packet, ) Or to the BLE beacon device management server 300. In this case, the same fixed key may be distributed to the user terminal 200 or the beacon management server 300 in advance. Alternatively, after encrypting the generated packet using the random shared key, the packet including the random shared key may be encrypted with a fixed key.

In the present embodiment, it has been described that packet encryption is performed. However, the present invention is not limited to this, and packet encryption may be omitted.

Next, the user terminal 200 checks the location of the encrypted packet or packet to verify the location of the user terminal 200 according to the time difference corresponding to the counter information contained in the at least two packets generated according to the second time rule If the encryption is omitted, the generated packet can be broadcast to the user terminal 200 (step S504). Broadcasting of such a packet can be performed by a low-power Bluetooth communication method, but not limited thereto, and may be performed by any short-distance communication method such as WiFi.

Next, the user terminal 200 can perform its position verification based on the counter information from the BLE beacon device 100 as described above. More specifically, a packet including the counter information broadcast in the BLE beacon device 100 and the beacon device ID may be received first.

Subsequently, the received packet can be decrypted (step S505). At this time, the encryption of the packet can be performed by either a single encryption method or a dual encryption method. For example, in the case of a single encryption method, a packet can be decrypted using a pre-distributed fixed key. Alternatively, the random shared key may be extracted from the packet and decrypted using the extracted random shared key.

In the case of the dual encryption scheme, first, a random shared key is extracted from a packet, and the extracted random shared key is decrypted using a pre-distributed fixed key. Then, the decrypted random shared key is used to encrypt Can be released. Alternatively, the packet can be decrypted using the pre-distributed fixed key, the random shared key extracted from the decrypted packet, and decrypted with the extracted random shared key.

In the present embodiment, it has been described that the decryption of the packet is performed. However, the decryption of the packet is not limited to this, and the decryption of the packet may be omitted.

Next, the counter information and the beacon device ID can be extracted from the decrypted packet (step S506). At this time, the generation time of the counter information can be extracted from the counter information extracted according to the predetermined sequence table or rule.

Next, the position of the user can be verified according to whether the difference between the extracted counter information and the difference in the generation time of the counter information corresponding to the previously stored counter information is within the tolerance (step S507) . For example, the storage unit 210, such as measuring a reception time (T _new) of the packet, and time corresponding to the extracted counter information, that is, the extracted generation time (T _n) of the counter information, and Equation (1) It is possible to verify the position of the user terminal using the counter information C _m stored in the counter information C _m and the time corresponding thereto, that is, the generation time T _m of the counter information, and the time T _old .

Hereinafter, a method for anti-spoofing according to another embodiment of the present invention will be described with reference to FIG. 6 is a flowchart of a method for anti-spoofing according to another embodiment of the present invention.

The method 600 for anti-spoofing includes generating a counter information (S601), generating a packet including counter information (S602), encrypting the generated packet (S603), transmitting the encrypted packet (S604), and verifying the position of the user terminal based on the transmitted counter information (S605 to S609).

More specifically, as shown in FIG. 6, first, in the BLE beacon device 100, counter information of a certain time rule for location verification of the user terminal can be generated (step S601). Here, the counter information may be generated according to a first time rule, such as a predetermined sequence table or rule. Optionally, various states of the BLE beacon device 100 may be collected. Here, the state information may include temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, and magnitude of the BLE beacon device 100. At this time, various status information can be collected through a sensor module (not shown).

Next, a packet including the generated counter information and the beacon device ID can be generated according to the second time rule (step S602). Here, the counter information included in the generated packet may correspond to the generation time of the counter information. At this time, if the first time rule is equal to the second time rule, the packet can be generated so as to sequentially include the generated counter information. For example, when the generation time of the packet is equal to the generation time of the counter information, a packet having different counter information can be generated. Also, when the first time rule differs from the second time rule, the packet may be generated to include the generated counter information in a predefined order. For example, when the generation time of the packet and the generation time of the counter information are different, especially when the interval of the generation time of the counter information is larger than the interval of the generation time of the packet, Can be generated. At this time, the number of packets including the same counter information may be different. Here, the generated packet may include status information of the collected BLE beacon device 100.

Next, the generated packet can be encrypted (step S603). At this time, the encryption of the generated packet can be performed by either a single encryption method or a dual encryption method. For example, in the case of a single encryption scheme, a packet generated using a fixed key is encrypted. In this case, the same fixed key may be previously distributed to the user terminal 200 or the beacon management server 300. Alternatively, the random shared key may be included in the packet and transmitted to the user terminal 200 or the beacon management server 300. In this case,

In the case of the dual encryption scheme, a packet generated using a random shared key is encrypted, a random shared key is encrypted using a fixed key, an encrypted random shared key is included in a packet, ) Or to the BLE beacon device management server 300. In this case, the same fixed key may be distributed to the user terminal 200 or the beacon management server 300 in advance. Alternatively, after encrypting the generated packet using the random shared key, the packet including the random shared key may be encrypted with a fixed key.

In the present embodiment, it has been described that packet encryption is performed. However, the present invention is not limited to this, and packet encryption may be omitted.

Next, the beacon management server 300 encrypts the encrypted packet or packet so as to verify the location of the user terminal 200 according to the difference of the different counter information included in the at least two packets generated according to the second time rule The generated packet may be broadcast to the user terminal 200 connected to the beacon management server 300 (step S604). Broadcasting of such a packet can be performed by a low-power Bluetooth communication method, but not limited thereto, and may be performed by any short-distance communication method such as WiFi.

Next, at the user terminal 200, the packet received from the BLE beacon device 100 can be transmitted to the beacon management server 300 (step S605). At this time, the user terminal 200 can transmit the received packet through a secure link, such as WiFi, Bluetooth or a cellular network.

Next, the beacon management server 300 can perform position verification of the user terminal 200 using the counter information from the BLE beacon device 100 as described above. More specifically, first, a packet including the counter information broadcast in the BLE beacon device 100 and the beacon device ID can be received through the user terminal 200.

Then, the received packet can be decrypted (step S606). At this time, the encryption of the packet can be performed by either a single encryption method or a dual encryption method. For example, in the case of a single encryption method, a packet can be decrypted using a pre-distributed fixed key. Alternatively, the random shared key may be extracted from the packet and decrypted using the extracted random shared key.

In the case of the dual encryption scheme, first, a random shared key is extracted from a packet, and the extracted random shared key is decrypted using a pre-distributed fixed key. Then, the decrypted random shared key is used to encrypt Can be released. Alternatively, the packet can be decrypted using the pre-distributed fixed key, the random shared key extracted from the decrypted packet, and decrypted with the extracted random shared key.

In the present embodiment, it has been described that the decryption of the packet is performed. However, the decryption of the packet is not limited to this, and the decryption of the packet may be omitted.

Next, the counter information and the beacon device ID can be extracted from the decrypted packet (step S607). At this time, the generation time of the counter information can be extracted from the counter information extracted according to the predetermined sequence table or rule.

Next, it is possible to verify the position of the user terminal 200 according to whether the difference between the extracted counter information and the difference between the generation time of the counter information corresponding to the previously stored counter information and the reception time difference of the packet is within the tolerance (Step S608). For example, time, that is, extracts the generation time (T _n) of the counter information, and a storage unit 310, as shown in equation (1) that corresponds to and measures the reception time (T _new) of the packet, the extracted counter information, It is possible to verify the position of the user terminal 200 using the counter information C _m stored in the counter information C _m and the corresponding time, that is, the generation time T _m of the counter information and the time T _old .

If the difference between the time corresponding to the counter information extracted from the packet and the time corresponding to the previously stored counter information is within the allowable range, it is possible to verify that the position of the user terminal 200 is appropriate.

On the other hand, as a result of continuously comparing the counter information, when the difference between the generation time difference of the counter information and the reception time difference of the packet exceeds the tolerance, the spoofing or sniffing is performed by the illegal user terminal It is determined that the position of the user terminal 200 is not proper and the corresponding user terminal can be blocked.

Next, when the position of the user terminal 200 is verified, the counter information can be updated as the latest counter information (step S609). For example, the counter information included in the initially received packet can be stored. If the position of the user terminal is verified in the comparison result of the extracted counter information, the extracted counter information can be updated.

The method for anti-spoofing according to the embodiment of the present invention can improve the reliability of the location information of the beacon device by preventing spoofing by the illegal user, It is possible to construct an environment capable of providing additional services sensitive to personal information such as financial settlement.

Such methods may be implemented by a BLE beacon device 100 as shown in FIG. 1, and in particular as a software program that performs these steps, where such programs may be stored in a computer readable record Transmitted by a computer data signal stored in a medium or coupled to a carrier wave in a transmission medium or a communication network.

At this time, the computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. For example, ROM, RAM, CD-ROM, DVD-ROM, DVD- , A floppy disk, a hard disk, an optical data storage device, or the like.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

10: BLE Beacon Device System
100: BLE beacon device 110:
120: status information collecting unit 130:
140: encryption unit 150: communication unit
200: user terminal 210:
220: decryption unit 230:
240: validity verification unit 250: storage unit
300: Beacon management server
310 communication unit 320 decryption unit
330: packet extracting unit 340: validity verifying unit
350:

Claims (18)

A counter generator for generating counter information according to a first time rule;
A packet generator for generating a packet including the generated counter information and a beacon device ID (UUID) according to a second time rule, the generated counter information corresponding to a generation time of the counter information; And
The user terminal or the beacon management server transmits the generated packet to the user terminal or the beacon to verify the location of the user terminal according to the difference of the time corresponding to the counter information included in the at least two packets generated according to the second time rule. And a communication unit that broadcasts the beacon signal to a user terminal connected to the management server. The method according to claim 1,
Further comprising an encrypting unit for encrypting the packet in either a single encryption mode or a dual encryption mode. The method according to claim 1,
Wherein the counter generator is synchronized with an internal timer of the beacon management server. The method according to claim 1,
Wherein the packet generator generates the packet so as to sequentially include the generated counter information when the first time rule is equal to the second time rule, and when the first time rule is different from the second time rule, And generates the packet to include the generated counter information in a predefined order. The method according to claim 1,
Further comprising a status information collecting unit for collecting status information of the beacon device. 6. The method of claim 5,
Wherein the status information includes temperature, humidity, air pressure, battery power, transmitted RF power strength, received RF power strength, and seismic intensity of the beacon device. A method for anti-spoofing of a beacon device,
Generating counter information according to a first time rule;
Generating a packet including the generated counter information and a beacon device ID (UUID) according to a second time rule, the generated counter information corresponding to a generation time of the counter information; And
The user terminal or the beacon management server transmits the generated packet to the user terminal or the beacon to verify the location of the user terminal according to the difference of the time corresponding to the counter information included in the at least two packets generated according to the second time rule. And broadcast to a user terminal connected to the management server. 8. The method of claim 7,
Further comprising encrypting the packet in either a single encryption mode or a dual encryption mode. 8. The method of claim 7,
Further comprising synchronizing the beacon management server with the beacon management server. 8. The method of claim 7,
Wherein generating the packet comprises generating the packet to sequentially include the generated counter information if the first time rule is equal to the second time rule, And generates the packet to include the generated counter information in a predefined order if different. 8. The method of claim 7,
≪ / RTI > further comprising collecting status information of the beacon device. 12. The method of claim 11,
Wherein the status information includes temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, device mode of operation, and progress of the beacon device. A computer-readable recording medium recording a program for anti-spoofing executed in a beacon device,
Code for generating counter information according to a first time rule;
Code for generating a packet including the generated counter information and a beacon device ID (UUID) according to a second time rule, the generated counter information corresponding to a generation time of the counter information; And
The user terminal or the beacon management server transmits the generated packet to the user terminal or the beacon to verify the location of the user terminal according to the difference of the time corresponding to the counter information included in the at least two packets generated according to the second time rule. And code for broadcasting to a user terminal connected to the management server. ≪ Desc / Clms Page number 24 > 14. The method of claim 13,
Further comprising code for encrypting the packet in either a single encryption mode or a dual encryption mode. ≪ Desc / Clms Page number 24 > 14. The method of claim 13,
Further comprising a code for synchronizing with the beacon management server. ≪ RTI ID = 0.0 > 11. < / RTI > 14. The method of claim 13,
Wherein the code for generating the packet generates the packet to sequentially include the generated counter information if the first time rule is equal to the second time rule, And generates the packet so as to include the generated counter information in a predefined order when the difference is different from the predetermined counter information. 14. The method of claim 13,
Further comprising code for collecting status information of the beacon device. ≪ RTI ID = 0.0 > 11. < / RTI > 18. The method of claim 17,
Wherein the status information includes at least one of temperature, humidity, air pressure, battery power, transmitted RF power intensity, received RF power intensity, and seismic intensity of the beacon device. .

Images