KR101572430B1 - A mobile terminal for open-close door lock and key management server and method for managing key using mobile terminal - Google Patents

Abstract

A mobile communication terminal according to the present invention includes a master key for opening and closing a door lock through a wireless communication network and storing the master key and generating a child key corresponding to a master key according to a key request of a mobile communication terminal through a wireless communication network And provides the created child key to an arbitrary mobile communication terminal through a wireless communication network.

As described above, according to the present invention, the master key that can control the door lock opening / closing can be transmitted by applying the encryption algorithm, so that the master key can be transmitted safely and the master key can be transmitted to the user's mobile communication terminal So that the convenience of the user can be improved.

Door, opening and closing, mobile communication terminal, encryption, child key

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a mobile communication terminal, a key management server, and a mobile communication terminal for opening and closing a door lock. 2. Description of the Related Art A mobile communication terminal, a key management server,

The present invention relates to a door lock opening / closing control, and more particularly, to a door lock opening / closing control method for controlling door lock opening / A key management server, and a key management method using the mobile communication terminal, which can provide a door lock opening / closing function to an arbitrary mobile communication terminal.

Door locking and unlocking systems for offices, guest rooms, apartments, etc., and door opening and closing systems for automobiles, etc., are out of the conventional mode using metal keys. For example, it is possible to check the validity of a password by inputting a password, to recognize a biometric information such as a fingerprint, an iris, and a voice from equipment for opening the door through electromechanical operation, Technologies are being proposed.

2. Description of the Related Art In recent years, with the increasing use of mobile communication terminals, door opening and closing systems using mobile communication terminals have appeared. For example, there is a method of opening and closing a door after confirming an identity using a mobile communication terminal, a method of implementing a door lock system using a radio frequency signal of a mobile communication terminal, and the like.

Hereinafter, a door opening / closing system using a conventional mobile communication terminal will be described with reference to the accompanying drawings.

As shown in FIG. 1, the mobile phone 100 periodically transmits a MIN (Mobile Identification Number or Phone Number) and an ESN (Electronic Serial Number) stored in the mobile phone 100 The door opening and closing system 120 receives the information transmitted by the cellular phone 100 through the infrared communication such as an IrDA transmitting and receiving unit by the IrDA transmitting and receiving unit to open and lock the locking device . Here, the data transmission / reception between the mobile phone 100 and the door opening / closing system 120 is performed through the infrared communication unit 110. The mobile phone 100 includes a display unit, a key input unit, a fingerprint recognition unit, And the door lock opening / closing system 120 includes a controller, a memory, a lock controller, and the like as well as an IrDA transceiver.

The access confirmation system using the conventional mobile communication terminal or the door opening / closing system 120 can be realized by using the MIN and ESN signals periodically generated by the mobile phone 100, so that the locking device is primarily present in the vicinity of the mobile phone 100 Recognize the fact and enter the waiting state.

Secondarily, when a user transmits a password with a radio signal, the lock is opened and locked.

A conventional locking device using a mobile phone having the above-described configuration is vulnerable to copying. There is a problem that a person having a cloned mobile phone can easily control the door opening / closing system when the mobile phone is cloned in a situation where the use of the cloned mobile phone is a problem.

In addition, the identification system interface using a mobile phone is used in a door opening / closing system using CDMA RF technology. However, there is a problem that it is difficult to use the system when the system of a mobile communication service provider advances. That is, the analog mobile phone, which has been mainly used before, is no longer in service, and when the current PCS and the cellular phone provider service the new system different from the current one according to the technological development, it is used for the door opening and closing system There is also a problem of replacing the mobile phone and the lock.

In the door opening / closing system using the conventional mobile communication terminal, there is a risk of information leakage when considering the characteristics and the communication range of the mobile phone. In other words, the CDMA code must be synchronized between the mobile phone and the radiotelephone relay station. Such codes are designed to be impossible to be eavesdropped or intercepted by other equipment. When using the door opening / closing system, it is necessary to transmit such information to the door opening / closing system There is a possibility that information leakage may occur in this process. Meanwhile, a conventional digital door opening / closing system using a password has a key input device in a door opening / closing system, and a user inputs a password through a key input device to control the door opening / closing device. In the case of a door opening / A separate key input device must be provided, and if the password is exposed, another person can easily control the locking device. In addition, a door opening / closing system having a biometric function has a problem that an expensive biometric device must be provided.

A door opening / closing system using a conventional mobile communication terminal has a problem that a person having a duplicated mobile communication terminal can easily control door opening / closing when a mobile communication terminal is replicated in a situation where a duplicated mobile communication terminal is a problem , Which is a security vulnerability.

In addition, since a door opening / closing system using a conventional mobile communication terminal can control the opening and closing of a door only by a user having a mobile communication terminal, a user who can arbitrarily designate a door can not open and close the door, There is a problem of waiting for only coming.

The present invention transmits a master key capable of controlling the door lock opening / closing by applying an encryption algorithm, thereby not only safely transmitting the master key, but also transmitting the master key to the user's mobile communication terminal desired by the user of the master mobile communication terminal .

A mobile communication terminal according to the present invention includes a storage unit for receiving and storing a master key for opening and closing a door lock through a wireless communication network and a storage unit for storing a master key corresponding to the master key in response to a key request of an arbitrary mobile communication terminal through the wireless communication network. And a key providing unit for providing the child key generated by the key generating unit to the arbitrary mobile communication terminal through the wireless communication network.

According to another aspect of the present invention, there is provided a key management server comprising: a user authentication unit for performing user authentication on a master mobile communication terminal and a key request mobile communication terminal accessed through a wireless communication network; An encryption unit for encrypting a master key to be transmitted and transmitting the encryption key to the authenticated mobile communication terminal; and an encryption unit for receiving a key request message from the key request mobile communication terminal connected through the wireless communication network, A key request processing unit for requesting a key to the communication terminal and a child key transfer unit for receiving the child key corresponding to the master key from the master mobile communication terminal receiving the key request and transmitting the child key to the key request mobile communication terminal.

A method of managing a key using a mobile communication terminal according to the present invention includes the steps of registering a master key in a master mobile communication terminal, encrypting the master key upon receipt of a key request of the key request mobile communication terminal through a wireless communication network, And transmitting the generated child key to the key request mobile communication terminal through the wireless communication network.

The present invention has an effect of safely transmitting a master key by transmitting a master key capable of controlling door lock opening and closing to a user's mobile communication terminal by applying an encryption algorithm.

In addition, since the present invention can generate a child key using a master key for opening and closing a door lock and transmit it to a mobile communication terminal of any other user, it is possible to prevent exposure of a master key by hacking, It is possible to safely transmit a key for opening / closing the door lock to other desired users, thereby improving the convenience of the user.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

2 is a block diagram illustrating a door opening / closing system using a mobile communication terminal according to a preferred embodiment of the present invention.

2, a door opening / closing system according to a preferred embodiment of the present invention includes a master mobile communication terminal 200, a mobile communication network 205, a key management server 210, a public authentication server 220, (230), and a key request mobile communication terminal (240).

The master mobile communication terminal 200 includes a storage unit 201, a key generation unit 202, a key providing unit 203, and a decryption unit 204 for storing a master key and generating a child key corresponding to the stored master key. ).

The master mobile communication terminal 200 and the key request mobile communication terminal 240 are connected to the mobile communication network 200 and provide a voice communication function for performing a normal voice communication with wireless communication with different mobile communication terminals A personal digital assistant (PDA), a personal digital assistant (PCS), and the like, as a means of using a message service function, a wireless Internet function, and a game service to create and transmit a message such as an SMS message, an MMS message service, (Global System for Mobile) phone, a W-CDMA (Wideband CDMA) phone, a CDMA-2000 phone, a Mobile Broadband System (MBS) phone and a Digital Multimedia Broadcasting (DMB) phone.

The master mobile communication terminal 200 stores a master key for controlling the opening and closing of the door lock in the storage unit 201. The master key is received from the key management server 210 and stored in the storage unit 201 (201).

The user of the master mobile communication terminal 200 accesses the key management server 210 through the wireless communication network and performs a user authentication process and receives the corresponding master key from the key management server 210. The user authentication process uses a user's ID / password scheme or a public certificate. The method of using the authorized certificate is a method of authenticating using the user's authorized certificate stored in the master mobile communication terminal 200, and is the same as the existing authorized authentication method.

The master key is transmitted to the master mobile communication terminal 200 through a secure channel such as TLS or SSL, or when the public key certificate is used, the master key is securely processed in the PKI manner and transmitted to the master terminal 200.

A method of security processing of the master key by the PKI method is largely a method using the RSA and a method using the Diffie-Hellman method. In the case of using the RSA, the public key is extracted from the public key certificate stored in the master mobile communication terminal 200, the RSA encryption operation is performed using the public key to encrypt the master key, and the encrypted master key is provided to the master mobile communication terminal 200 In the case of using the Diffie-Hellman method, Diffie-Hellman encryption is performed using the public key extracted from the public key certificate stored in the master mobile communication terminal 200 and the private key extracted from the certificate of the key management server 2100, And provides the encrypted master key to the master mobile communication terminal 200.

The decryption unit 204 of the master mobile communication terminal 200 decrypts the encrypted master key using the public key of the key management server 210 and the private key of the user's public key certificate, And stores it in the storage unit 201. When the RSA scheme is used, the master key is decrypted by using the private key stored in the master mobile communication terminal 200 to extract the master key, .

The master key may be stored in a storage medium such as a memory in the master mobile communication terminal 200 or may be stored in an IC card embedded in the master mobile communication terminal 200.

In the present invention, the master key is provided from the key management server 210 connected through the wireless communication network 205. However, in the case of a master key for opening and closing a door lock of a personal house, The master key stored in the door lock can be received and stored in the master mobile communication terminal 200 through a local communication interface between the mobile communication terminal 200 and the door lock, for example, RF communication, infrared communication, Bluetooth communication,

As shown in FIG. 3, a plurality of master keys M1, M2, M3, ... may be stored in the storage unit 201 of the master mobile communication terminal 200, A different key ID (Key ID1, Key ID2, Key ID3, ...) and a different key ID (Service ID1, Service ID2, Service ID3 ...) are set. That is, the master key of the master mobile communication terminal 200 may store a plurality of master keys for controlling door lock opening and closing at different places such as home, office, school, and academy.

The master mobile communication terminal 200 can access the corresponding key management server 210 by using the service ID. When the key management server 210 corresponding to the service ID is connected, the master mobile communication terminal 200 transmits a key ID corresponding to the corresponding service ID .

The key generation unit 202 of the master mobile communication terminal 200 generates a child key corresponding to the master key according to a key request of the key management server 210 and transmits the generated child key to the key management server 210. A method of generating a child key is to generate a child key by encrypting a master key using a public key of a public key certificate stored in the request mobile communication terminal 240 and a private key of a public key certificate stored in the master mobile communication terminal 200 . The child key is transmitted to the key management server 210 together with the public key of the public key certificate stored in the master mobile communication terminal 200.

That is, the public key of the public key stored in the request mobile communication terminal 240, the private key of the public key certificate stored in the master mobile communication terminal 200, and the master key of the private key stored in the master mobile communication terminal 200 are generated by the one- By applying the key to the hash function, an encrypted master key, i.e. a child key, is generated.

When the one-way hash function is applied, the key generation unit 202 of the master mobile communication terminal 200 provides an interface for setting use restriction information of a child key. When a user of the master mobile communication terminal 200 inputs The validity period of the child key is set based on the use restriction information. The usage restriction information to be input may be the date, the number of times, and the like.

The wireless communication network 205 may include a GSM network and a network of a fourth generation mobile communication system to be implemented in the future. The wireless communication network 205 includes a key management server 210 and a master mobile communication terminal 200 ) For the interworking between the mobile communication exchange.

In the case of IS-95A / B / C systems, the mobile switching center uses an ASS (Access Switching Subsystem) to perform distributed call processing functions, an INS (Interconnection Network Subsystem) to perform centralized call processing functions, A Central Control Subsystem (CCS), and a Location Registration Subsystem (LRS) for storing and managing information on mobile communication subscribers.

In addition, mobile communication switching centers for third generation and fourth generation may include ATM (Asynchronous Transfer Mode) switches.

The key management server 210 is a means for providing a master key and a child key provided from the master mobile communication terminal 200 according to a key request of the requesting mobile communication terminal 240. Examples of the key include an office management system, And a server managed by an access control system or the like. The key management server 210 includes a user authentication unit 211 for performing a user authentication for the master mobile communication terminal 200 and the request mobile communication terminal 240 accessed through the wireless communication network 205, An encryption unit 212 for encrypting a master key to be transmitted to the mobile communication terminal authenticated through the wireless communication network 211 and transmitting the encrypted master key to the authenticated mobile communication terminal, A key request processing unit 213 for receiving a key request message from the master mobile communication terminal 200 and requesting a key from the master mobile communication terminal 200 according to the key request message, And a child key transmitting unit 214 receiving the child key and transmitting the received child key to the request mobile communication terminal 240.

The key request processing unit 213 of the key management server 210 receives a key request from any mobile communication terminal or the requesting mobile communication terminal 240 and transmits a public key from the requesting mobile communication terminal 240 Encrypts it with its own private key, and transmits it to the master mobile communication terminal 200. At this time, the child key is provided to the request mobile communication terminal 240 in the form of MMS or SMS message.

The authorized authentication server 230 transmits and receives information for user authentication in cooperation with the key management server 210.

The requesting mobile communication terminal 240 accesses the key management server 210 through the wireless communication network 205 and requests a key for controlling the opening and closing of the door lock using its public key, And is provided from the key management server 210.

The request mobile communication terminal 240 transmits a key encrypted by the one-way hash function, that is, a child key, to the public key included in the private key and the encrypted child key of the master mobile communication terminal 200, And the user of the requesting mobile communication terminal 240 can control the opening and closing of the door lock with the extracted key.

The operation of the door lock opening / closing system having the above-described configuration will be described with reference to FIG.

4 is a flowchart illustrating a key management method using a mobile communication terminal according to a preferred embodiment of the present invention.

4, the user of the master mobile communication terminal 200 accesses the key management server 210 through the wireless communication network 205 and performs a user authentication process (S400). That is, the user of the master mobile communication terminal 200 inputs his or her ID and password and logs in the key management server 210 or accesses the key management server 210 using his or her authorized certificate, (S402).

The key management server 210 transmits the master key to the master mobile communication terminal 200 by encrypting the master key by the PKI method and transmits the master key to the master mobile communication terminal 200 through the secure channel such as TSL / send. At this time, the master key includes a key ID for identifying the master key and a service ID of the key management server 210.

When the transmitted master key is encrypted, the master mobile communication terminal 200 decrypts the encrypted master key using the decryption unit 204 and stores the decrypted master key in the storage unit 201, In the storage unit 201 (S404).

When the key management server 210 receives a key request (S406) from any mobile communication terminal, i.e., the requesting mobile communication terminal 240 through the gateway 230 in the wireless communication network 205, the key management server 210 transmits a key request message To the master mobile communication terminal (200). Accordingly, the key generation unit 202 of the master mobile communication terminal 200 generates a child key corresponding to the master key stored in the storage unit 201, more specifically, (S408) by generating the child key by encrypting it with the public key provided from the master communication mobile terminal (240) and the private key of the user of the master mobile communication terminal (200). An example of the encryption method is a one-way hash function.

When the one-way hash function is applied, the validity period of the child key can be set by adding use restriction information of the child key.

The child key generated by the key generating unit 202 is transmitted to the requesting mobile communication terminal 240 through the key management server 210 by the key providing unit 203 at step S410.

The requesting mobile communication terminal 240 extracts the private key used for encrypting the child key using the public key of the user of the master mobile communication terminal 200 and then uses the private key and the public key of the user of the requesting mobile communication terminal 240 The child key may be decrypted (S412), and then door lock opening / closing may be controlled (S414).

According to a preferred embodiment of the present invention, a master key capable of controlling the door lock opening / closing can be encrypted and transmitted, so that the master key can be securely transmitted and the master key can be transmitted to the user of the master mobile communication terminal.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. It is to be understood that these modified embodiments are included in the technical idea described in the claims of the present invention.

The present invention can be usefully used for a security service which is activated according to the breakthrough of wired / wireless communication and the advance of door lock technology, for example, a security service using a digital door lock.

According to the present invention, a door lock is opened using a mobile communication terminal, and a master key stored in the mobile communication terminal is transmitted to another mobile communication terminal. Thus, a key for door lock opening / It is possible to provide a high quality door lock service with excellent security.

1 is a view illustrating a door opening / closing system using a general mobile communication terminal,

2 is a block diagram illustrating a door opening / closing system according to a preferred embodiment of the present invention,

FIG. 3 is a view for explaining data stored in the key storage unit of FIG. 2,

4 is a flowchart illustrating a key management method according to a preferred embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS FIG.

200: master mobile communication terminal 205: wireless communication network

210: Key management server 220: Authorized authentication server

230: Gateway

240: request mobile communication terminal

Claims (21)

A storage unit for receiving and storing a master key for opening and closing a door lock through a wireless communication network, A key generation unit for generating a child key corresponding to the master key according to a key request of an arbitrary mobile communication terminal through the wireless communication network; A key providing unit for providing the child key generated by the key generating unit to the arbitrary mobile communication terminal through the wireless communication network; Wherein the key generation unit comprises: Wherein the master key is generated by encrypting the stored master key with a public key of a public key certificate in the mobile communication terminal and a private key of a public key certificate stored in the mobile communication terminal storing the master key, . The method according to claim 1, Wherein the master key is received through a secure channel between the mobile communication terminal and the wireless communication network and stored in the storage unit. The method according to claim 1, A decryption unit for receiving and decrypting the master key secured by the PKI scheme using the user certificate and storing the decrypted master key in the storage unit, Further comprising: a door for opening and closing the door. The method according to claim 1, Wherein the master key set in the door lock is received and stored in the storage unit using a local communication interface for short-range communication with the door lock. 5. The method of claim 4, Wherein the short-range communication interface is one of RF communication, Bluetooth, and infrared communication. delete The method according to claim 1, Wherein the key generation unit applies the stored master key to a one-way hash function using a public key of a public key certificate in the mobile communication terminal and a private key of a public key certificate stored in the mobile communication terminal storing the master key, Wherein the door is opened and closed. 8. The method of claim 7, Wherein the key generation unit receives information for restricting use of the child key when applying the one way hash function and sets the valid period of the child key based on the received information. terminal. 9. The method of claim 8, Wherein the information for the use restriction is at least one of a date, a time and a number of times. The method according to claim 1, Wherein a plurality of master keys for controlling opening and closing of different door locks are stored in the storage unit, and different service IDs and key IDs are set for each master key. A user authentication unit for performing a user authentication of a master mobile communication terminal connected through a wireless communication network and a key request mobile communication terminal; An encryption unit encrypting and transmitting a master key to be transmitted to a mobile communication terminal of an authenticated user through the user authentication unit; A key request processor for receiving a key request message from the key request mobile communication terminal connected through the wireless communication network and requesting the master mobile communication terminal according to the key request message; A child key transfer unit for receiving a child key corresponding to the master key from the master mobile communication terminal receiving the key request and transmitting the child key to the key request mobile communication terminal; And a key management server. 12. The method of claim 11, Wherein the user authentication unit authenticates a user based on the key request and the authorized certificate information in the master mobile communication terminal. 12. The method of claim 11, Wherein the child key transmitting unit transmits the child key to the key request mobile communication terminal in the form of an SMS message through the wireless communication network. Registering a master key in a master mobile communication terminal, Generating a child key by encrypting the master key upon receipt of a key request of the key request mobile communication terminal through a wireless communication network; Transmitting the generated child key to the key request mobile communication terminal through the wireless communication network; Wherein generating the child key comprises: Wherein the master key is generated by encrypting the registered master key with the public key of the public key certificate stored in the mobile communication terminal and the private key of the public key certificate stored in the master mobile communication terminal, How to manage. 15. The method of claim 14, Wherein registering the master key comprises: Accessing a key management server for managing the master key through the wireless communication network; Receiving a user authentication from the connected key management server; Receiving the master key upon completion of the user authentication; Storing the master key in a storage unit of the master mobile communication terminal; And transmitting the key to the mobile communication terminal. 16. The method of claim 15, Wherein the step of receiving the user authentication comprises receiving the user authentication using the ID and password of the user of the master mobile communication terminal or using the authorized certificate stored in the master mobile communication terminal . 16. The method of claim 15, Wherein the receiving of the master key comprises forming a secure channel between the key management server and the master mobile communication terminal and providing the master key using the formed secure channel. Way. 16. The method of claim 15, The receiving of the master key may include receiving a master key encrypted by the key management server, Wherein the step of storing the master key decrypts the encrypted master key and stores the decrypted master key in the storage unit. delete 15. The method of claim 14, Wherein the generating of the child key comprises: applying a public key of a public key certificate stored in the mobile communication terminal, a private key of a public key certificate stored in the master mobile communication terminal, and a registered master key to a one- And generating a key using the generated key. 21. The method of claim 20, Wherein the generating the child key comprises: Setting use restriction information of the child key; Applying the use restriction information to the one-way hash function to generate the child key whose validity period is set And transmitting the key to the mobile communication terminal.

Images