KR101601631B1 - Internet of things system having a user access control function based status of service device - Google Patents

Abstract

The present invention relates to a method and apparatus for setting a user authority through a user terminal based on a current state of a service terminal from a plurality of user terminals for a service terminal, System and method thereof.
The object Internet system having a function for setting a user authority according to the service terminal status according to the present invention and its method include a plurality of service terminals and a plurality of user terminals and performing management processing for the service terminal and the user terminal through web communication Wherein the service terminal provides its own service status information to the gateway, and further provides the service status information from the corresponding user terminal based on the token information including the user right information provided from the user terminal, Wherein the user terminal is configured to perform a service request corresponding to the user right information to a target service terminal based on token information including user right information provided from the gateway, The service terminal Updates the user right information corresponding to the service state that can be set for the user terminal based on the service state information provided from the service terminal, and generates token information including the user right information for the service terminal and provides the token information to the corresponding user terminal .

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for setting a user right according to a service terminal status,

The object of the present invention is to provide an object Internet system in which a service request from a plurality of user terminals for an arbitrary service terminal is set up based on the current state of the corresponding service terminal, The present invention relates to an object Internet system having a user authority setting function according to a service terminal state and a method thereof.

Recently, "Sangwang Internet", a system for sharing information through connecting wired and wireless networks, is being developed.

Object The Internet is a object space network that forms intelligent relationships such as sensing, networking, and information processing in a collaborative manner, without human intervention, on the three distributed environmental elements of human being and objects and services. Objects The major components of the Internet include not only household appliances in wired and wireless networks, but also human, vehicles, bridges, various electronic equipment, cultural properties, and physical objects that make up the natural environment. It evolves into a concept that interacts with all the information of the world.

Recently, with the development of the Internet of things mentioned above, the technology of Web of Things is attracting attention. The object web technology is configured to perform inter-object communication via the Web by identifying types and intangible resources as Uniform Resource Identifiers (URIs).

However, since the object Internet system does not have a separate central control device and objects are configured to communicate with each other to provide a service, a plurality of users can access a service through a user terminal In the case of performing the request, it is necessary for the service terminal to perform processing for a plurality of service requests more efficiently.

That is, if the processing for a plurality of service requests is not performed smoothly in an arbitrary service terminal, a conflict may occur in processing for a plurality of service requests, resulting in a problem that the service is not properly performed.

[Patent Literature]

1. Korean Patent Laid-Open Publication No. 2014-0050399 (Title of the Invention: Configuration and Method of Anomaly Detection System in Smart Grid AMI Network Environment)

2. Korean Patent Laid-Open Publication No. 2014-0044215 (entitled " Server Authentication Method for Remote Controllable Smart Device via Internet "

SUMMARY OF THE INVENTION Accordingly, the present invention has been made in view of the above circumstances, and it is an object of the present invention to provide a service providing apparatus and a service providing method, The object Internet system having a function of setting a user authority according to the state of a service terminal which makes it possible to more easily manage the terminal and provide the service utilization through the service terminal to the user, have.

According to an aspect of the present invention, there is provided an Internet service provider (ISP) including a plurality of service terminals, a plurality of user terminals, and a gateway for performing a management process for the service terminals and the user terminals through web communication. Wherein the service terminal provides its service status information to the gateway and is configured to perform a service requested from the corresponding user terminal based on token information including user authority information provided from the user terminal, Wherein the user terminal is configured to perform a service request corresponding to the user right information to a target service terminal based on token information including user right information provided from the gateway, Based on state information And updates the user authority information corresponding to the service state that can be set for the terminal, and generates token information including user authority information for the service terminal and provides the generated token information to the corresponding user terminal. Is provided with a user authority setting function according to the user's authority.

In addition, the service terminal and the gateway perform CoAP / UDP communication, and the user terminal and the gateway perform HTTP / TCP communication. do.

The gateway is configured to provide an encryption key to the service terminal and the user terminal and perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. There is provided a object Internet system having a function of setting a user authority according to the Internet.

In addition, the gateway is configured to provide the token information to the corresponding user terminal and the service terminal, respectively. The object Internet system having the user authority setting function according to the service terminal state is provided.

The gateway may be configured to generate random number information and to further include the random number information in the token information. The service terminal may further include random number information of the token information provided from the user terminal and a random number of the token information corresponding to the user terminal provided from the gateway And the user terminal is configured to perform authentication processing for the user terminal by comparing the information with the user terminal.

In addition, the gateway is configured to include a user authority setting table for the service terminal, and the user authority setting table is configured to store an authority state of a plurality of user terminals for each service state for a plurality of service terminals, The service state information of the service terminal is divided into a ready state, an execution state, and an end state.

In addition, the user rights setting table is divided into access (C), read (R), update (U), and delete (D) access items for the ready state, And a user authority setting function according to a service terminal state.

In addition, the access status information is set to "1" in the state where the rights can not be set and "0" Object Internet system having a setting function is provided.

In addition, the token information provided to the service terminal and the user terminal in the gateway is a one-time temporary token, and the object Internet system having the user authority setting function according to the service terminal state is provided.

According to another aspect of the present invention, there is provided a service providing system including a plurality of service terminals, a plurality of user terminals, and a gateway for performing management processing on the service terminals and the user terminals through web communication, The method comprising: a first step of storing user authority status information for a user terminal corresponding to service status information provided from the service terminal, the method comprising the steps of: A second step of performing a service setup request for the service terminal, checking service state information that can be set for the corresponding user terminal based on the current state information of the service terminal requested to be set up in the gateway, A token containing the corresponding user right information And providing the service request information to the corresponding service terminal, wherein the service request information includes token information provided from the user terminal through the gateway, A fifth step of providing a service corresponding to the service request, and a sixth step of providing status information on the service terminal to the gateway in the service terminal and updating the service status information of the service terminal in the gateway The method includes the steps of: setting a user authority of the object Internet system according to a service terminal status;

The gateway is configured to provide an encryption key to the service terminal and the user terminal and perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. There is provided a method of setting a user authority of the Internet system.

The second step may include a step 21 of transmitting service setting request information from the user terminal to the gateway, a step 22 of providing at least one service terminal information corresponding to the service setting request in the gateway to the corresponding user terminal, And selecting the desired service terminal from the user terminal and providing the corresponding service terminal selection information to the gateway. In the third step, the gateway performs the corresponding service provided from the user terminal in step 23, And generating the token information based on the state information about the terminal. The method of setting a user right of the object Internet system according to the service terminal state is provided.

The third step may include generating the random number information in the gateway, and adding the random number information generated in step 31 to the corresponding service terminal and the user terminal, Wherein the service terminal performs an authentication process for the user terminal based on the random number information included in the token information provided from the user terminal in the fifth step, A method for setting a user right of the object Internet system is provided.

In the first step, the service status information provided from the service terminal to the gateway includes Create (C), Read (R), Update (U), Delete (D) And access status information of at least one of the access terminal and the access terminal.

In the first or sixth step, the gateway can not set the authority for the user terminal because the corresponding service terminal is currently performing service with respect to the service status of the service terminal, the status is "1 & And a state in which permission setting is possible is set to "0" and stored. The method of setting a user right of the object Internet system according to the service terminal state is provided.

In addition, the token information generated in the gateway in the third step is a one-time temporary token.

According to the present invention, the gateway manages the status information of the service terminal and sets the service provision right for the user terminal so as to correspond to the current state of the service terminal, so that it is easy to manage the service terminal, It is possible to provide a object Internet system that can prevent a service conflict from occurring when a plurality of user terminals make a service request.

In addition, the gateway provides the service terminal and the user terminal with one-time temporary tokens including the random number and the user right information for the service terminal and the user terminal, and performs authentication for the user terminal based on the random number information at the service terminal Thus, it is possible to provide an Internet object system capable of preventing hacking by a third party having a malicious purpose.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram showing a schematic configuration of an Internet object system having a user authority setting function according to a service terminal status according to a first embodiment of the present invention; FIG.
FIG. 2 is a block diagram showing the internal structure of the gateway 300 shown in FIG. 1 functionally separated. FIG.
FIG. 3 illustrates token information generated by the token generator 340 shown in FIG. 2. FIG.
4 is a diagram illustrating a user rights setting table of the user terminal 200 according to the state of the service terminal 100 stored in the data memory 350 shown in FIG.
5 is a diagram for explaining an operation of a things Internet system having a user authority setting function according to the service terminal status shown in FIG.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram illustrating a schematic configuration of a toll Internet system having a user authority setting function according to a service terminal status according to a first embodiment of the present invention. Referring to FIG.

As shown in FIG. 1, the object Internet system having a user authority setting function according to the service terminal status according to the present invention includes a plurality of first terminals, that is, a service terminal 100 and a plurality of second terminals, that is, a user terminal 200 And a gateway 300 for performing management processing on the service terminal 100 and the user terminal 200 through web communication.

At this time, the service terminal 100 is a terminal performing a service, and the user terminal 200 is a terminal requesting a service. It should be noted that the user terminal 200 is not necessarily limited to a terminal that requires a service by a user's operation. For example, the user terminal 200 may be a form requiring automatic service according to a predetermined operation program, that is, a sensor or a terminal controlled to request a service remotely.

The service terminal 100 provides the service status information to the gateway 300 in real time and provides the service status information from the corresponding user terminal 200 based on the token information including the user right information provided from the user terminal 200 And is configured to perform the required service.

Also, the user terminal 200 is configured to perform a service request corresponding to the right information to the target service terminal 100 based on the token information including the user right information provided from the gateway 300.

The gateway 300 generates token information including user rights information corresponding to the service status of the corresponding service terminal 100 based on the service status information provided from the service terminal 100, 100 and the user terminal 200, respectively. At this time, the gateway 300 may provide the token information only to the user terminal 200, and configure the gateway 300 to perform the service request to the target service terminal 100 in the user terminal 200.

The gateway 300 allocates an encryption key, for example, a symmetric key to the service terminal 100 and the user terminal 200, and then transmits a predetermined symmetric key at the time of communication between the service terminal 100 and the user terminal 200 So as to perform encryption and decryption processing. For example, the gateway 300 may perform encryption and decryption processing using an encryption algorithm such as AES (Advanced Encryption Standard) or lightweight high-speed block encryption (LEA).

Also, the gateway 300 may be implemented as a smart access point (AP), performs CoAP / UDP communication with the service terminal 100, and performs HTTP / TCP communication with the user terminal 200 . Here, the CoAP (Constrained Application Protocol) is an application layer protocol developed for use in a system where a service terminal is restricted, and has a simple property of converting to HTTP. In addition, both the HTTP and the CoAP support REST (Representational State Transfer), and the gateway 300 can set the authority for the user terminal 200 using the REST method. That is, in the present invention, according to the state of the service terminal 100, the user terminal 200 for each of four access items of Create (C), Read (R), Update (U), and Delete The user authority is set to the serviceable authority, that is, the user authority. Here, the Create (C) is an item for performing processing such as setting and registering data, for example, Read (R) is an item for performing data read processing, and Update (U) Delete (D) may be an item for deleting data, for example.

 FIG. 2 is a block diagram showing the internal structure of the gateway 300 shown in FIG. 1 functionally separated.

2, the gateway 300 includes an information input / output unit 310, a wireless processing unit 320, an encryption key generating unit 330, a token generating unit 340, a data memory 350, and a controller 360 ).

The information input / output unit 310 includes input means for an administrator to input various information to the gateway 300 and display means for displaying and outputting status information of the gateway 300. [ At this time, the administrator performs registration processing of various information including setting of user right information corresponding to the state of the service terminal 100, registration of an encryption algorithm for generating an encryption key, etc. through the information input / output unit 310 . The information input / output unit 310 receives information requested by the administrator from the control unit 360, and outputs the information. At this time, the information input / output means 310 is not necessarily provided on the gateway 300, and input and output processing of such information may be performed through another terminal located at a remote place through a communication network.

The radio processing unit 320 performs radio communication with the service terminal 100 and the user terminal 200. At this time, the wireless processing unit 320 performs web communication based on the CoAP / UDP protocol with the service terminal 100, and web communication based on the HTTP / TCP protocol with the user terminal 200.

The encryption key generation unit 330 generates an encryption key for performing an authentication process for the service terminal 100 and the user terminal 200. [ At this time, the encryption key generating unit 330 generates a symmetric key.

The token generating unit 340 generates token information including a user terminal identification code and user authority information. At this time, the user terminal identification code may be an identification code assigned to the user terminal. Also, the token generating unit 340 may generate a random number and generate token information including the random number information. That is, the token information may include a user terminal identification code, a random number, and user right information (CRUD info.) As shown in FIG. At this time, the random number is a one-time random number, and the token information can be used as a one-time temporary token. This is used for authentication and service requests from the user terminal 200 to the service terminal 100, and is used as a one-time temporary token, thereby preventing the risk of hacking by a malicious third party In order to make it possible.

The data memory 350 stores registration information including an identification code for the service terminal 100 and the user terminal 200 registered for service provision and registration information including identification codes for the service terminal 100 and the user terminal 200 Related information including encryption key information, status information of each service terminal 100, and permission setting information for the user terminal 200 corresponding to the service terminal 100 status information.

At this time, the rights setting information corresponding to the status information of the service terminal and the service terminal status information may be configured in the form of a table as shown in FIG. That is, as shown in FIG. 4, the user authority setting table according to the state of the service terminal 100 includes a status information about the first to m-th service terminals 100 ₁ to 100 m registered in the preparation state / execution state / (C), Read (R), Update (U), and Delete (D), and the first to n-th service requests Quot; 1 "or" 0 "for the user authority state 351 for the user terminals 200 ₁ to 200n. Here, the ready state is a state of waiting for a service request to the service terminal 100, an execution state is a state of performing a specific service, and an end state means an inaccessible state in which a service request can not be performed. For example, in FIG. 4, the first user terminal 200 _{1 of} the first service terminal 100 ₁ is in a state where a service is being performed with a "C / R / U / D"Quot; C / R "authority is given to the state and the service is being performed. Also, with respect to the first service terminal 100 ₁ , the second user terminal 200 ₂ is in a state in which the service is being performed with an "R" right granted to the ready state and a "C / R" And the service is being performed. That is, when the first user terminal 200 ₁ is granted the "C / R / U / D" right to the ready state with respect to the first service terminal 1001 and the service is being performed, Quot; / D "access item performs data setting / update / deletion processing, so that modification or change of data occurs. Therefore, the second user terminal 200 ₂ does not perform data read / Quot; R "access item. This method of setting the user authority can be arbitrarily changed and set by the administrator according to the characteristics of the service terminal, the communication environment, and the like.

The control unit 360 performs a series of registration processing such as giving an identification code to the service terminal 100 and the user terminal 200 requested to affiliate in order to provide the service, And the encryption key to the user terminal (200). In addition, the controller 360 configures and stores a user authority setting table of the type shown in FIG. 4 based on the service status information provided from the service terminal 100, When there is a service request for the terminal 100, the terminal 100 checks the settable authority information based on the user authority setting table (see FIG. 4) corresponding to the current status information of the corresponding service terminal 100, , And generates token information including user authority information and provides the generated token information to the corresponding service terminal 100 and the user terminal 200. At this time, the control unit 360 updates the service status information provided from the service terminal 100 in real time.

Next, the operation of the object Internet system having the user authority setting function according to the service terminal status having the above-described configuration will be described with reference to FIG. Hereinafter, the operation of the object Internet system having the function of setting the user authority according to the service terminal state based on the status of the service requested from the first and second user terminals 200 ₁ and 200 _{2 to} the first service terminal 100 ₁ .

First, the administrator sets and registers a user authority setting method according to the service status of the service terminal 100 through the gateway 300 in advance. At this time, the authority setting method may be arbitrarily set by the administrator.

The service terminal 100 and the user terminal 200 requesting to provide the service according to the present invention perform a service registration request to the gateway 300 and the gateway 300 transmits the service registration request to the corresponding service terminal 100 and the user 300. [ By assigning an identification code and an encryption key, that is, a symmetric key, to the terminal 200, a series of service registration processing is performed.

In the above state, the service terminal 100 (for example, the first service terminal 100 ₁ ) that has processed the service registration provides its current service status information to the gateway 300 (ST1). At this time, when the first service terminal 100 ₁ performs a service for a service request from the user terminal 200, the first service terminal 100 ₁ provides service status information to the gateway 300 in real time. Here, the first service terminal 100 ₁ provides the service status information including the identification code of the service terminal 100 ₁ , the user terminal identification code requested to perform the service, and the service provision status information to the gateway 300. At this time, the service provision state information includes state type information and access item information (see FIG. 4). Also, the first service terminal 100 ₁ encrypts the service status information using the symmetric key allocated from the gateway 300, and wirelessly transmits the service status information to the gateway 300 according to the CoAP / UDP protocol.

The gateway 300 performs a decoding process using a predetermined symmetric key based on the service status information provided from the first service terminal 100 ₁ , and when the decoding process is normally completed, the gateway 300 transmits the received service status information And updates the authority state information of the user authority setting table of the type as shown in FIG. That is, the authorization status information for the user terminal 200 is changed from "0" to "1" based on the service provision status information for the user terminal 200 provided from the first service terminal 100 ₁ , Change from "1" to "0".

When a service setting request is made from the first user terminal 200 ₁ to the gateway 300 (ST 2), the gateway 300 transmits the registered service corresponding to the service type requested from the first user terminal 200 ₁ And provides the terminal 100 information to the first user terminal 200 ₁ (ST 3). At this time, the first user terminal 200 ₁ encrypts the service setup request information using the symmetric key allocated from the gateway 300, and provides the encrypted service setup request information to the gateway 300 according to the HTTP protocol. the first user terminal using the symmetric key, predetermined with respect to (200 ₁₎ performing the decoding process a service setting request information, and, when the decoding process is completed normally provides a first user terminal (200 ₁₎ services the terminal information to. At this time, the gateway 300 may provide the service terminal information including the service terminal identification code and the current status information to the first user terminal 200 ₁ .

Then, the first user terminal 200 ₁ selects a desired service terminal, for example, a first service terminal 100 ₁ among at least one service terminal information provided from the gateway 300, and transmits the selected first service terminal 100 ₁ ) service terminal selection information including the identification code to the gateway 300 (ST4).

The gateway 300 transmits presently settable authority state information corresponding to the current state of the corresponding service terminal, that is, the first service terminal 100 ₁ , based on the service terminal selection information provided from the first user terminal 200 ₁ And generates a temporary token in the form of FIG. 3 including the settable authority information, that is, the user authority information, the user terminal identification code, and the one-time random number, and transmits the temporary token to the first user terminal 200 ₁ and the first service terminal 100 ₁ (ST5 and ST6), respectively. For example, the right setting information for the first service terminal 100 ₁ may be set as the right information for all access items of "C / R / U / D ".

Thereafter, the first user terminal 200 ₁ performs a first service request through the HTTP protocol to the first service terminal 100 ₁ (ST 7). At this time, the first user terminal 200 _{1 transmits} the service request information for a desired access item among the "C / R / U / D" access items, which are set on the basis of the temporary token information provided from the gateway 300, To the service terminal 100 ₁ . For example, the first user terminal 200 ₁ can request service of the "POST" access item, that is, the "C" access item, to the first service terminal 100 ₁ . At this time, the first user terminal 200 ₁ is compatible with the HTTP method and the REST method for the access item, and Table 1 shows this.

HTTP POST GET PUT DELETE REST Create Read Update Delete

Meanwhile, the first service terminal 100 ₁ performs a service based on the service request information provided from the first user terminal 200 ₁ (ST 8). At this time, the first service terminal 100 ₁ compares the temporary token information provided from the first user terminal 200 ₁ with the temporary token information corresponding to the previously stored user terminal in step ST 7, And performs service processing. That is, the first service terminal 100 _{1 transmits} the user terminal identification code of the user temporary token information provided from the first user terminal 200 ₁ , and the corresponding temporary token information provided from the gateway 300 in step ST 6 Reads the temporary token information including the user terminal identification code, and compares the random number information included in the temporary token information to perform authentication processing on the first user terminal 200 ₁ .

In addition, the first service terminal 100 ₁ performs a service provided from the first user terminal 200 ₁ and transmits current service status information according to the service execution to the gateway 300 (ST 9). At this time, the first service terminal 100 _{1 transmits} the user right information, for example, "C / R / U / D" included in the temporary token information to the gateway 300. Also, the gateway 300 updates the user authority setting table based on the service status information provided from the first service terminal 100 ₁ .

As described above, in the state in which the first service terminal 100 ₁ performs a service requested from the first user terminal 200 ₁ , the second service terminal 100 _{2 transmits} the service request from the second user terminal 200 ₂ to the gateway 300, If so the service request to the (100 ₁₎ (ST10), the gateway 300, and set user rights for the first the second user terminal based on the current status information of the service terminals (100 ₁₎ (200 ₂₎ , Generates a temporary token based on the generated token, and provides it to the first service terminal 100 ₁ and the second user terminal 200 ₂ (ST 11, ST 12). For example, the first for the service terminal (100 _1), the first user terminal _{(200 1) "C / R} / U / D" permission is set bar, the second user terminal for the (200 ₂₎ "GET "That is, only the authority for the" R "access item is set.

Thereafter, the second user terminal (200 ₂₎ comprises performing a second service request to the first service station (100 _1), a first service station (100 ₁₎ to the second user terminal based on the temporary token information (200 ₂ ), And performs a second service corresponding to the user authority, for example, a "GET" service (ST13). In addition, the first service terminal 100 ₁ provides the service status information to the gateway 300, and the gateway 300 performs a series of procedures for updating the user authority setting information based on the service status information (ST 14 and ST 15) .

That is, according to the above embodiment, the gateway performs security processing for the service terminal and the user terminal by providing the encryption key to the service terminal and the user terminal, and manages the status information for the service terminal to correspond to the current state of the service terminal So as to set the user authority for the user terminal. Accordingly, it is possible to prevent a service conflict from occurring when a plurality of user terminals make service requests to arbitrary service terminals.

In addition, the gateway provides the service terminal and the user terminal with a temporary token including a random number and user authority information to the corresponding service terminal and the user terminal, performs authentication on the user terminal based on the random number information in the service terminal, , And is configured to perform the corresponding service based on the user right information. At this time, in the present invention, the use of the temporary token information is limited to one-time, so that hacking by a third party having a malicious purpose can be prevented.

Although the present invention has been described in connection with the above-mentioned preferred embodiments, it is possible to make various modifications and variations without departing from the spirit and scope of the invention. Accordingly, the scope of the appended claims should include all such modifications and changes as fall within the scope of the present invention.

100: service terminal, 200: user terminal,
300: gateway, 310: information input / output unit,
320: radio processing unit, 330: encryption key generating unit,
340: Token generating unit, 350: Data memory,
360: Control section.

Claims (16)

There is provided a object Internet system including a plurality of service terminals, a plurality of user terminals, and a gateway for performing management processing on the service terminal and the user terminal through web communication,
Wherein the service terminal provides its service status information to the gateway and is configured to perform a service requested from the corresponding user terminal based on token information including user authority information provided from the user terminal,
Wherein the user terminal is configured to perform a service request corresponding to the corresponding user right information to a target service terminal based on token information including user right information provided from the gateway,
The gateway updates the user right information corresponding to the service state that can be set for the user terminal based on the service state information provided from the service terminal, and generates token information including the user right information for the service terminal And providing the user terminal with the user authority setting function according to the service terminal status. The method according to claim 1,
Wherein the service terminal and the gateway perform CoAP / UDP communication, and the user terminal and the gateway perform HTTP / TCP communication. The method according to claim 1,
Wherein the gateway is configured to provide an encryption key to the service terminal and the user terminal and perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. Object Internet system with permission setting function. The method according to claim 1,
And the gateway is configured to provide the token information to the corresponding user terminal and the service terminal, respectively. 5. The method of claim 4,
Wherein the gateway is configured to generate and to include random number information in the token information,
Wherein the service terminal is configured to perform authentication processing for the user terminal by comparing the random number information of the token information provided from the user terminal with the random number information of the token information corresponding to the user terminal provided from the gateway, An object Internet system having a user authority setting function according to a state. The method according to claim 1,
Wherein the gateway comprises a user authority setting table for the service terminal,
Wherein the user authority setting table is configured to store the authorization state of a plurality of user terminals for each service state for a plurality of service terminals, wherein the service state information of the service terminal is divided into a ready state, an execution state, And a user authority setting function according to the service terminal status. The method according to claim 6,
The user rights setting table is divided into access (Create), read (R), update (U), and delete (D) access items for the ready state, the execution state and the end state of each service terminal An object Internet system having a user authority setting function according to service terminal status. 8. The method of claim 7,
Wherein the authorization status information is set to "1" for a state in which the rights can not be set and "0" . The method according to claim 1,
Wherein the token information provided to the service terminal and the user terminal in the gateway is a one-time temporary token. There is provided a method of setting a user authority of a object Internet system including a plurality of service terminals, a plurality of user terminals, and a gateway for performing management processing on the service terminal and the user terminal through web communication,
The gateway includes a first step of storing user rights status information for a user terminal corresponding to service status information provided from the service terminal,
A second step of performing a service setup request to the arbitrary service terminal from the user terminal to the gateway,
The gateway checks the service status information that can be set for the corresponding user terminal based on the current status information of the service terminal that is requested to be set up by the gateway, generates the token information including the user right information corresponding to the settable service status, To a user terminal,
A fourth step of providing service request information including token information provided from the user terminal through the gateway to a corresponding service terminal,
A fifth step of performing a service corresponding to a service request provided from a user terminal at the service terminal,
And a sixth step of providing status information on the service terminal to the gateway by the service terminal and updating the service status information of the corresponding service terminal by the gateway. How to set user permissions for. 11. The method of claim 10,
Wherein the gateway is configured to provide an encryption key to the service terminal and the user terminal and to perform encryption and decryption processing using a predetermined encryption key when communicating with the service terminal or the user terminal. How to set user rights on the Internet system. 11. The method of claim 10,
The second step includes a step 21 of transmitting service setting request information from a user terminal to a gateway,
A step 22 of providing at least one service terminal information corresponding to a service setup request in the gateway to a corresponding user terminal,
And selecting the desired service terminal from the user terminal and providing the selected service terminal selection information to the gateway,
Wherein the gateway is configured to generate the token information based on the status information about the corresponding service terminal provided from the user terminal in the step 23 in the gateway. How to set it up. 13. The method according to claim 10 or 12,
The third step includes a step 31 of generating random number information in the gateway,
And providing the generated random number information to the corresponding service terminal and the user terminal, respectively, in addition to the token information,
Wherein the service terminal performs the authentication process for the corresponding user terminal based on the random number information included in the token information provided from the user terminal in the fifth step. How to set permissions. 11. The method of claim 10,
In the first step, the service status information provided from the service terminal to the gateway is transmitted to the gateway through the Create (C), Read (R), Update (U), and Delete (D) The method of claim 1, wherein the at least one status information comprises at least one of status information of the at least one service terminal. The method according to claim 10 or 14,
In the first or sixth step, the gateway determines that the status of the service terminal is not currently set to '1' because the corresponding service terminal is currently performing service for the service status of the service terminal, Is set to "0" and stored. The method of claim 1, further comprising: 11. The method of claim 10,
Wherein the token information generated in the gateway in the third step is a one-time temporary token.

Images