KR101577036B1 - Access authentication system and method based ip camera - Google Patents

Abstract

The present invention relates to an access authentication system based on an IP camera which takes, in real time, an image of a specific area including the door of an access site requiring access authentication from a user. The system comprises: a communication unit which is connected to a mobile terminal of the user through Bluetooth, and receives a unique identification code; a face recognizing unit which captures an image taken of the user, and extracts a face image through an image process; a first authentication unit which performs device authentication on the basis of the unique identification code; a second authentication unit which performs face authentication on the basis of the face image; and a third authentication unit which issues, when an authentication level of the access site is a high level, a one-time password to the mobile terminal of the user, and compares the password input from the user with the issued password to determine whether the passwords are matched or not. Accordingly, a separate input device for access authentication is not necessary, thus it is possible to reduce costs, and access authentication is flexibly performed according to a place and a situation.

Description

[0001] ACCESS AUTHENTICATION SYSTEM AND METHOD BASED IP CAMERA [0002]

The present invention relates to an access authentication system and method, and more particularly, to an IP camera-based access authentication system and method.

For security reasons, an unmanned access authentication system has been used for the purpose of allowing access only by an authorized person in a place requiring restricted access.

In the conventional access authentication system, the password input method has to continuously memorize the password for accessing and a security problem is caused by the password leakage.

In this system, an access authentication system such as a card reader authentication method, a fingerprint recognition method, and a face recognition method has been introduced. However, in such an authentication system, a separate input device is required and an additional cost due to basic cable, . In addition, there is a problem that it is difficult to apply to a place requiring high security level by performing only a single authentication.

Korean Patent Publication No. 10-2014-0060032 Korean Patent Publication No. 10-2014-0038828

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an IP camera-based access authentication system and method for performing compound authentication using an IP camera installed for existing video surveillance .

According to an aspect of the present invention, there is provided an access authentication system based on an IP camera which real time photographs a specific area including a door of an access place requiring entrance and exit authentication for a user, A communication unit for establishing a Bluetooth connection with a portable terminal of a user who has accessed the doorway and receiving a unique identification code; A face recognition unit for capturing an image of the user and extracting a face image through image processing; A first authentication unit comparing the unique identification code transmitted from the communication unit with access authentication information stored in a database to determine whether the terminal is a registered terminal; A second authentication unit comparing the face image transmitted from the face recognition unit with access authentication information stored in a database to determine whether the user is a registered user; And issuing a disposable password to the portable terminal of the user when the authentication level is at a high level, comparing the password input from the user with the issued password, And a third authentication unit for determining whether the authentication is successful.

The second authentication unit may perform the face authentication, and if there is no registered face image matching the extracted face image, the second authentication unit may transmit the extracted image to the administrator terminal and terminate the access authentication.

Also, the third authentication unit may terminate the access authentication and open the door when the authentication level is at a low level.

Also, the third authentication unit may include an OTP issuing unit for generating a one-time password m1 composed of a combination of numbers and transmitting the generated password to the user portable terminal; And an OTP authentication unit for comparing the password generated by the user and the generated password to determine whether they match or not. The OTP authenticator includes a laser beam for displaying the number on the wall, and a number And an image analyzing module for analyzing the captured image and extracting the touched numbers sequentially.

According to another aspect of the present invention, there is provided an access authentication method based on an IP camera for real-time photographing of a specific area including a door at an access place requiring entrance and exit authentication for a user, A first authentication step of performing device authentication by providing a unique identification code by Bluetooth connection with a portable terminal of a user who has accessed the portable terminal, and comparing the stored identification code with a previously provided unique identification code; A second authentication step of extracting the face image of the user from the image photographed by the IP camera, and performing face authentication by matching the registered face image and the extracted face image with each other; Confirming an authentication level of the access point; And a third authentication step of issuing a disposable password to the portable terminal of the user when the authentication level is at a high level and performing a number authentication by comparing the password received from the user with the issued password .

The second authentication step may further include the step of performing the face authentication and transmitting the extracted image to the administrator terminal and terminating the access authentication when there is no registered face image matching the extracted face image can do.

The third authentication step may further include terminating access authentication and opening a door when the authentication level is at a low level.

The third authentication step may include generating a disposable secret number m1 composed of a combination of numbers and transmitting the generated disposable secret number m1 to the user portable terminal; Displaying the number on a wall surface; Capturing a process of touching the number of the wall surface displayed by the user, analyzing the photographed image, extracting the touched numbers sequentially, and inputting the password m2; And comparing the input password m2 and the generated password m1 to determine whether they match or not.

According to the present invention, by using the Bluetooth and the laser beam built in the IP camera installed for the existing video surveillance, a separate input device for access authentication is not needed, and the cost can be reduced.

Further, besides basic authentication through face recognition and terminal recognition, it is possible to perform an additional authentication procedure according to the security level, thereby enabling flexible access authentication according to the place and the situation.

1 is a block diagram showing the entire configuration of an access authentication system using an IP camera according to an embodiment of the present invention.
2 is an overall flowchart illustrating an access authentication method using an IP camera according to an embodiment of the present invention.
3 is a flow chart illustrating a first authentication method according to an embodiment of the present invention.
4 is a flow chart illustrating a second authentication method according to an embodiment of the present invention
5 is a flow chart illustrating a third authentication method according to an embodiment of the present invention

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear, and the same reference numerals will be used throughout the specification to refer to the same or like parts. use.

The terms used in this specification are used to appropriately express the preferred embodiment of the present invention, and this may vary depending on the user, the intention of the operator, or the practice of the field to which the present invention belongs. Therefore, the definitions of these terms should be based on the contents throughout this specification.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing the entire configuration of an access authentication system using an IP camera according to an embodiment of the present invention.

1, an access authentication system using an IP camera according to an exemplary embodiment of the present invention includes a portable terminal 100, an IP camera 200, and a database 300.

The portable terminal 100 includes a built-in Bluetooth module 110 and may be an electronic device such as an MP4, a portable multimedia player (PMP), a personal digital assistant (PDA), or a smart phone.

The Bluetooth module 110 has MAC (media access control) as a unique identification code, for example, a device identifier, and transmits and receives data packets in the ISM band. The unique identification code of the Bluetooth module is unique and included in data packets transmitted and received for data communication between the device and another device.

Meanwhile, the portable terminal 100 may be provided with an access authentication app (app) for activation of the Bluetooth module and data packet transmission / reception.

The Bluetooth module 110 of the portable terminal 100 transmits and receives data packets of the ISM band to the Bluetooth module 215 of the IP camera 200 located in the vicinity. The Bluetooth modules 110 and 215 transmit and receive data with their assigned unique identification codes, that is, MAC addresses. The Bluetooth modules 110 and 215 have a communication distance of about 10 m to 100 m, have.

The IP camera 200 includes a communication unit 210, a face recognition unit 220, and an access authentication unit 230. The IP camera 200 is installed in a place where video surveillance and access control are required, At this time, there is at least one entrance door in the photographing area requiring entrance and exit authentication.

The communication unit 210 includes a Bluetooth module 215 and receives a data packet including a unique identification code transmitted in the ISM band from the Bluetooth module 110 of the portable terminal 100 and transmits the data packet to the access authentication unit 230 And performs data communication with a remote authentication server connected to a wired / wireless network.

The face recognition unit 220 captures an image of a user who is an access authentication target and extracts a face image through image processing and transmits the face image to the access authentication unit 230. At this time, if the face is not recognized in the captured image, the image is captured again and the face recognition failure message is transmitted to the mobile terminal after a predetermined number of repetitions.

The access authentication unit 230 includes a first authentication unit 231, a second authentication unit 232, and a third authentication unit 233.

The first authentication unit 231 and the second authentication unit 232 compare the unique identification code and the face image provided from the Bluetooth module 215 and the face recognition unit 220 with the access authentication information stored in the database, And judges whether or not the terminal matches with the registered user.

The first authentication unit 231 and the second authentication unit 232 are included in a separate remote authentication server (not shown), and the authentication server receives the unique identification code and the unique identification code from the IP camera 200, It is also possible to construct a system in which authentication is performed by receiving face image information, and the result is transmitted to an IP camera.

The third authentication unit 233 includes an authentication level checking unit 234, an OTP issuing unit 235, and an OTP authentication unit 236.

The authentication level confirmation unit 234 confirms the authentication level of the entrance / exit location existing in the area photographed by the IP camera. At this time, the authentication level can be classified into a low level and a high level according to the security level of the access point, the access time, the user's desire to access, and the like. For example, it can be set at a low level during a week when a lot of people go and a security risk is low, while it can be set at a high level during a night when a crime is likely to occur with low flow and unauthorized access.

The OTP issuing unit 235 is for issuing a One Time Password (OTP). When the authentication level is at a high level, the OTP issuing unit 235 generates a password combining any number and / or character and provides the password to the portable terminal .

The OTP authentication unit 236 is for confirming the OTP provided by the user who is the access authentication target without a separate input device. To this end, the OTP authentication unit 236 performs a process of touching the displayed numbers and characters in accordance with a laser beam for displaying numerals and characters such as 0 to 9 and # on the wall surface, And an image analysis module for analyzing one image and extracting a series of input information touched by the user.

The database 300 is a medium on which various kinds of information related to entrance and exit authentication are recorded and stored, and may be configured as a storage unit such as a memory inside the IP camera, or may be configured as a remote authentication server and managed separately.

Specifically, the data base lists each place requiring entrance and exit authentication, stores unique identification information and facial image information of the portable terminal with respect to a user who is permitted to enter the place, The authentication level is stored and managed.

FIG. 2 is an overall flowchart showing an access authentication method using an IP camera according to an embodiment of the present invention, and FIGS. 3 to 5 are flowcharts illustrating first to third authentication methods according to an embodiment of the present invention.

2 to 5, an access authentication method using an IP camera according to an exemplary embodiment of the present invention includes a first authentication step S110, a second authentication step S120, an authentication level confirmation step S130, 3 authentication step (S150).

That is, after the first and second authentication steps are completed, the authentication level is checked. If the authentication level is low, the access authentication is completed without further authentication. However, if the authentication level is high, the third authentication step is additionally performed. Thus, by changing the access authentication level according to the authentication level determined by the access location and the access target, it is possible to achieve both of the two purposes of simplifying the authentication procedure and enhancing security.

In the first authentication step, the IP camera 200 basically captures the surveillance zone in real time and transmits video data according to the purpose of video surveillance, while the communication unit 210 transmits the video data to the portable And searches the terminal at a predetermined time interval to attempt Bluetooth connection.

After the Bluetooth connection is established with the portable terminal of the user, the communication unit 220 receives the data packet including the unique identification code from the portable terminal 100.

At this time, the received unique ID code is information for distinguishing the corresponding terminal from other terminals, for example, device information or subscriber information stored in a media access control (MAC) address or USIM.

The unique ID code thus received is provided to the first authentication unit 231, and the first access authentication is performed by searching for the unique ID code registered in advance in the database 300 and comparing the matching ID.

On the other hand, in the second authentication step, the face recognition unit 220 of the IP camera detects the motion around the door in the monitoring area, captures the captured image when the user's access is detected, And transmits the extracted information to the second authentication unit.

At this time, if the face is not recognized in the captured image, the captured image is again captured and repeatedly tried. After the predetermined number of iterations, the captured image is transmitted to the administrator terminal and the authentication procedure is terminated.

Upon receiving the facial image, the second authentication unit searches the stored facial images of the database 300 and compares the facial images and performs second access authentication.

As described above, the access authentication system according to the present invention basically passes through a complex authentication process for performing the user's mobile terminal authentication in the first authentication step and the user's face authentication in the second authentication step. Particularly, in the second authentication step, It is possible to prevent false access authentication due to loss of the user's portable terminal by transmitting the captured image to the administrator terminal.

When the first authentication and the second authentication are completed, the authentication level of the entrance and exit is confirmed next.

The authentication level can be classified into a low level and a high level according to the security level of the access point, the access time, the user position to access, and the like. For example, it can be set at a low level during a week when a lot of people go and a security risk is low, while it can be set at a high level during a night when a crime is likely to occur with low flow and unauthorized access.

The authentication level of the access point is stored in the database and is set and managed by the administrator.

As a result of confirming the authentication level, if it is a low level, it is possible to access without any additional authentication procedure. That is, even if the user does not act much, the IP camera 200 performs the first access authentication and the second access authentication, terminates the access authentication procedure, and permits the access of the user.

On the other hand, when the authentication level is high, an additional third authentication step is performed to enhance security.

In the third authentication step, the IP camera first transmits a one-time password to the user's portable terminal, and illuminates numbers and characters such as 0 through 9 and # on the wall surface through the laser beam.

Then, the user touches the corresponding numbers and characters according to the OTP sequence received previously, and the IP camera captures the numbers and characters, and sequentially extracts numbers and characters touched by the user through image analysis.

Thereafter, the extracted information is compared with the OTP, and the final authentication is performed by determining whether or not they match with each other.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, This is possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined by the equivalents of the claims, as well as the claims.

100: portable terminal 150: Bluetooth module
200: IP camera 210:
220: facial recognition unit 230: access authentication unit
231: first authentication unit 232: second authentication unit
233: Third authentication unit 234: Authentication level confirmation unit
235: OTP issuing unit 236: OTP authentication unit
300: database

Claims (8)

An IP camera-based access authentication method for real-time photographing of a specific area including a door at an access place requiring access authentication for a user,
A first authentication step of performing device authentication by providing a unique identification code by Bluetooth connection with a portable terminal of a user who has accessed the door and comparing the stored identification code with a previously provided unique identification code;
A second authentication step of extracting the face image of the user from the image photographed by the IP camera, and performing face authentication by matching the registered face image and the extracted face image with each other;
Confirming an authentication level of the access point; And
A third authentication step of issuing a disposable password to the portable terminal of the user when the authentication level is at a high level and performing a number authentication by comparing the password received from the user with the issued password;
Lt; / RTI >
Wherein the third authentication step comprises:
Generating a one-time password m1 consisting of a combination of numbers and transmitting the generated one-time password m1 to the user portable terminal;
Displaying the number on a wall surface;
Capturing a process of touching the number of the wall surface displayed by the user, analyzing the photographed image, extracting the touched numbers sequentially, and inputting the password m2; And
Comparing the inputted password (m2) with the generated password (m1) and determining whether the password is matched;
And an IP camera-based access authentication method. 2. The method of claim 1, wherein the second authentication step
Further comprising the step of transmitting the extracted image to the administrator terminal and ending the access authentication when the facial authentication is performed and there is no registered face image matching the extracted facial image, Access authentication method. 2. The method of claim 1, wherein the third authentication step
Further comprising the step of terminating access authentication and opening a door when the authentication level is at a low level. delete An IP camera-based access authentication system for real-time photographing of a specific area including a door at an access place requiring entrance and exit authentication for a user,
The IP camera includes:
A communication unit for establishing a Bluetooth connection with a portable terminal of a user who has accessed the doorway and receiving a unique identification code;
A face recognition unit for capturing an image of the user and extracting a face image through image processing;
A first authentication unit comparing the unique identification code transmitted from the communication unit with access authentication information stored in a database to determine whether the terminal is a registered terminal;
A second authentication unit comparing the face image transmitted from the face recognition unit with access authentication information stored in a database to determine whether the user is a registered user; And
When the authentication level is at a high level, the terminal issues a disposable password to the portable terminal of the user, compares the password received from the user with the issued password, A third authentication unit for judging whether or not the first authentication unit
Lt; / RTI >
Wherein the third authentication unit comprises:
An OTP issuing unit for generating a one-time password m1 composed of a combination of numbers and transmitting the generated one-time password m1 to the user portable terminal; And
And an OTP authentication unit for comparing the generated password (m2) received from the user with the generated password to determine whether the password is matched,
Wherein the OTP authentication unit includes an image analysis module for analyzing the captured image of the laser beam for displaying the number on the wall and the number of the wall surface displayed by the user and sequentially extracting the touched number Access control system based on IP camera. 6. The information processing apparatus according to claim 5,
And if there is no registered face image matching the extracted face image, transmits the extracted image to the administrator terminal and ends the access authentication. 6. The information processing apparatus according to claim 5,
And when the authentication level is at a low level, the access authentication is terminated and the access door is opened. delete

Images