KR101636904B1 - Apparatus and Method for Repeating IoT providing Protocol Schema-based Secure Proxy - Google Patents

Abstract

The present invention provides an Internet of Things (IoT) repeating apparatus and method for providing a protocol schema-based secure proxy, which converts various protocols used in a device to protocols used in a platform through a repeater capable of repeating devices and a platform in a multi-protocol environment such as IoT, or the like, and performs functions of extracting security factors with respect to data collected in the devices and securing the extracted security factors. The IoT repeating apparatus comprises: things interconnection control unit for managing heterogeneous communications between heterogeneous things, and integrating protocols to provide a service of or expose data collected in a form enabling conversion between a secure protocol and an insecure protocol, to the outside; a proxy control unit for extracting dual networks which can be converted from single networks for communications between the single networks used between things and a repeater and the dual networks used between the repeater and the Internet in the things interconnection control unit; and an outside connection control unit for finally providing a service to the dual networks by using information transmitted from the proxy control unit and information transmitted from a personal information protection unit.

Description

Technical Field [0001] The present invention relates to an Internet relay apparatus and method for providing a secure proxy based on a protocol schema,

In particular, the present invention relates to an Internet relay apparatus and method, and more particularly, to an Internet relay apparatus and method for providing a secure proxy based on a protocol schema for connecting to the Internet while maintaining security and protocol consistency of data of objects in the Internet. ≪ / RTI >

The Internet Repeater is a network device that connects a device to a device, or connects a device to an Internet platform. Object Internet repeater is close to the device side rather than the server on the network, but it is attracting attention because it is less constrained by performance or resources than device.

In most cases, the device communicates wirelessly with the Internet repeater. At present, many things Internet devices are using wireless communication protocols such as Bluetooth, ZigBee, 6LowPAN or Wi-Fi.

However, the diversity of such a communication protocol has made it difficult to make an object Internet platform by reducing compatibility between devices using heterogeneous networks.

In addition, the Internet of Things poses many risks to security and privacy because of resource limitations of device sensors, inexperienced policies and designs, and existing infrastructure.

On the other hand, in recent years, the growth of social networks has been linked to the Internet of things, and many object Internet devices are now interworking with social networks.

Patent Registration No. 10-1453364: Dynamic Identification System of Device in Internet Environment and Method Thereof Patent Registration No. 10-0923392: Heterogeneous network connection relay device

SUMMARY OF THE INVENTION Accordingly, the present invention has been made in order to solve the above-mentioned problems, and it is an object of the present invention to provide a method and apparatus for relaying various protocols used in a device through a repeater which can relay between devices and a platform in a multi- And to provide a secure proxy based on a protocol schema having a function of extracting a security element for data collected in a device and securing it.

Other objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

According to another aspect of the present invention, there is provided a method and apparatus for providing a secure proxy based on a protocol scheme, the method comprising: managing heterogeneous communication with a heterogeneous object; integrating protocols to convert between a security protocol and a non- A first connection for controlling connection between a first type network used between objects and a repeater in the object connection control unit and a second type network used between the repeater and the Internet, A proxy control unit for extracting a second type network convertible from the slave network and an external connection control unit for finally providing a service to the second type network using information transmitted from the proxy control unit and information transmitted from the personal information protection unit, which comprises a There is.

Preferably, the thing Internet relay apparatus manages information coming from the social or social information, performs an interaction with the object connection control unit, determines whether or not to update the collected information from the objects, And a social connection control unit for generating data for controlling an object by monitoring when a new feed is generated in the social system.

Preferably, the social connection control unit includes a third object connection expression unit for relaying object connection information with a second object connection expression unit configured in the proxy control unit, a social connection registration unit for registering in the user's social in order to interoperate with the social network, A social notifying unit for periodically checking new data in the social registered in the social connection registration unit and providing a notification that new data is generated, a social updating unit for updating the data collected in the object to the social registered in the social connection registration unit A data processing unit for determining whether the data received from the second object connection expression unit is linked with the social data, and a data processing unit for classifying only the data to be linked with the social data in the data processing unit and sending the data to the social update unit, To the proxy control unit through the third object connection expression unit Characterized in that it also.

Preferably, the thing Internet relay apparatus or the proxy control unit includes a personal information protection unit for judging whether or not the personal information is included in the data received from the object connection control unit, extracting the personal information, and classifying the extracted personal information according to the sensitivity .

Preferably, the personal information protection unit comprises: a personal information extracting unit for extracting personal information from non-standardized data received from each object; and a learning unit for learning data included in the extracted personal information by a data mining- A personal information classifying unit for classifying the sensitivity and the type of the personal information by using the dictionary information of the personal information generated for the personal information extracted by the personal information extracting unit, And a personal information presentation unit for presenting and expressing personal information classified by the personal information classification unit.

Preferably, the personal information extracting unit performs processing in conjunction with an intelligent chip to extract personal information.

Preferably, the object connection control unit includes a communication control unit for providing a connection to a communication stack used in an object including 6LoWPAN, WiFi, and Bluetooth, and a connection for a lightweight protocol used for communicating objects including CoAP and MQTT And a first object connection expression unit for expressing connection information by using a heterogeneous protocol and a heterogeneous protocol in a common representation manner.

Preferably, the proxy control unit includes a second object connection expression unit for relaying object connection information with the first object connection expression unit of the object connection control unit, and a function for converting external connection information from the object connection information, A connection conversion unit for extracting external connection information convertible from connection information; a security element extraction unit for searching and extracting a security element from the unformatted data extracted by the connection conversion unit and formatting and expressing the security element; A security element processing unit for deciding a processing method including filtering, encryption or encoding according to sensitivity and rules set in advance in the security element extracted by the security element processing unit, A first external connection expression unit for integrating and expressing in a formalized manner, And that is characterized.

Preferably, the external connection control unit includes a second external connection expression unit connected to the first external connection expression unit of the proxy control unit, a data integration unit for respectively integrating data including the second external connection expression unit, An external connection conversion unit for determining an external connection to be provided with real data from connectable external connection information including a presentation unit and performing protocol conversion from the generated external connection data to the determined external connection; And an external connection processing unit for providing an actual service using the protocol.

According to another aspect of the present invention, there is provided a method for relaying Internet objects using a protocol schema, the method comprising the steps of: (A) connecting a first type network used between objects and a repeater through a connection control unit, (B) extracting the collected data from the first type network and the second type network which can be converted from the first type network by exchanging data between the first type network and the second type network, (C) transmitting the generated data to the personal information protection unit, judging whether the personal information is included in the data through the personal information protection unit, and classifying the extracted personal information according to the sensitivity And (D) receiving the multiple communication stack information and the extracted communication information through an external connection control unit And finally providing the service to the second type network using the classified information according to the sensitivity of the personal information.

Preferably, the step (B) includes the steps of converting external connection information by generating at least one specification of a second protocol converted into a second protocol convertible from object connection information included in the collected data, Retrieving and extracting a security element from data and re-expressing it in a formalized manner; determining a processing method including filtering, encryption, or encoding according to a predetermined sensitivity and rule, the extracted security element; And extracting the external connection information by combining the extracted external connection information with the security element to which the processing according to the sensitivity and the processing according to the rule are applied.

Preferably, a data mining or an ontology technique is used to search for the security element, and when extracting a security element using the data mining technique, it is extracted in association with an intelligent recognition chip.

Preferably, the step (C) includes the steps of: extracting personal information from the informal data transmitted from each object; generating dictionary information of personal information by learning data including personal information using a data mining-based algorithm A step of classifying the extracted personal information by classifying the sensitivity and the personal information using a classifier based on the clustering, performing a classification, re-expressing the evaluated information on the personal information by a formal method, And performing a mutual operation with the protection element extracting unit of the proxy control unit.

Preferably, when the personal information extraction process is performed in cooperation with the intelligent recognition chip, the extracted personal information can be formatted using a schema structure including ontology and XML.

Preferably, the method includes a decision tree, a support vector machine, and an ensemble to learn the dictionary personal information data.

Preferably, the step (D) includes the steps of converting input data into binary data suitable for a second type network communication when data expressed in a formalized method is input, and converting the converted binary data into a binary data suitable for a second protocol And reconfiguring the second type network to determine a second type network suitable for the first type network using the reconfigured second protocol to expose services and data to the outside.

Preferably, the object Internet relay method includes the steps of: (E) managing the information coming from the social or the social information through the social connection control unit, determining whether to update the social information collected from the object, And generating data for controlling an object by monitoring a new feed when the new feed is generated in the social.

Preferably, the step (E) includes the steps of: registering with the user's social in order to interact with the social network; periodically checking the registered data with the new data and providing a notification that new data is generated; A step of updating the collected data with the registered social data and determining whether or not the data is determined to be registered in the social relationship with the social data; and transmitting only the data to be linked with the social data to the social data updating unit, And outputting the output signal.

The object Internet relay apparatus and method for providing a secure proxy based on the protocol scheme according to the present invention as described above have the following effects.

First, by relaying communication between heterogeneous objects using various communication stacks and various protocols on the Internet of objects and connecting to the Internet, a framework for collecting data of objects can be rescued while obeying existing Internet standards.

Second, a user-customized service can be provided by extracting security elements and personal information from big data collected from a plurality of objects and performing different processing according to the sensitivity or security level thereof.

Third, the present invention relates to a method and apparatus for controlling objects in a user-friendly environment by converting feeds of social networks into data and controlling the objects through a link with a social network (Twitter, Facebook, Google solution, etc.) It is effective.

1 is a block diagram illustrating a configuration of a matter Internet relay apparatus for providing a secure proxy based on a protocol scheme according to an embodiment of the present invention;
2 is a block diagram showing the configuration of the object connection control unit of FIG. 1 in detail;
FIG. 3 is a block diagram showing the configuration of the proxy control unit of FIG. 1 in detail;
4 is a block diagram showing the configuration of the personal information protection unit of FIG. 1 in detail;
5 is a block diagram showing the configuration of the external connection control unit of FIG. 1 in detail;
6 is a block diagram showing the configuration of the social connection control unit of FIG. 1 in detail;
FIG. 7 is a flow chart for explaining a method for relaying Internet objects, which provides a secure proxy based on a protocol scheme according to an embodiment of the present invention.
FIG. 8 is a diagram for explaining a method for relaying objects Internet, which provides a secure proxy based on a protocol skama according to an embodiment of the present invention; FIG.

Other objects, features and advantages of the present invention will become apparent from the detailed description of the embodiments with reference to the accompanying drawings.

A preferred embodiment of an Internet relay apparatus and method for providing a secure proxy based on a protocol scheme according to the present invention will now be described with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. It is provided to let you know. Therefore, the embodiments described in the present specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention and are not intended to represent all of the technical ideas of the present invention. Therefore, various equivalents It should be understood that water and variations may be present.

In the present invention, as shown in FIG. 8, it can be divided into a first type protocol used between objects and a repeater, and a second type protocol used between the repeater and the Internet. At this time, simply converting the first type protocol into the second type protocol is vulnerable to personal information and data security. Therefore, the present invention divides all protocols into a security protocol and a non-security protocol, and supports a mode in which a security protocol and a non-security protocol can be converted.

FIG. 1 is a block diagram illustrating a configuration of a matter Internet relay apparatus for providing a secure proxy based on a protocol scheme according to an embodiment of the present invention. Referring to FIG.

As shown in FIG. 1, the object Internet relay apparatus of the present invention manages heterogeneous communication with heterogeneous objects, integrates the protocols, and provides the collected data in a form capable of converting between the security protocol and the non- And a second type network used between the first type network used between the object and the repeater and the second type network used between the repeater and the Internet in the object connection control unit 100, A proxy control unit 200 for extracting a second type network and a service providing unit 200 for finally providing services to the second type network using the information transmitted from the proxy control unit 200 and the information transmitted from the personal information protection unit 300 An external connection control unit 400 for managing the information coming from the external social and the information going out to the social And performs mutual operation with the object connection control unit 100 to determine whether to update the social information collected from the object to update the social information or to monitor when a new feed is generated from the social, And a social connection control unit 500 for generating data to be transmitted.

In addition, the object Internet relay apparatus of the present invention includes a personal information protection unit 100 for determining whether personal information is included in the data received from the object connection control unit 100 and extracting personal information, and classifying the extracted personal information according to the sensitivity (300). However, the personal information protection unit 300 may be included in a configuration independent of the object Internet relay apparatus of the present invention, but is not limited thereto and may be included in the proxy control unit 200.

2, the object connection control unit 100 includes a object communication control unit 101, a object protocol control unit 102, and a first object connection expression unit 103.

At this time, the object communication control unit 101 provides a connection to a communication stack which is mainly used in things such as 6LoWPAN, WiFi, and Bluetooth. The object protocol control unit 102 provides a connection to a lightweight protocol used by objects such as CoAP and MQTT to communicate. In addition, the object connection expression unit 103 expresses the connection information using the heterogeneous communication stack and the heterogeneous protocol in a common expression manner.

3, the proxy control unit 200 includes a second object connection expression unit 201, a connection conversion unit 202, a security element extraction unit 203, a security element processing unit 204, And a first external connection representation unit 205.

At this time, the second object connection expression unit 201 relays object connection information with the first object connection expression unit 103 and provides the same function. The connection conversion unit 202 provides a function of converting from object connection information to external connection information and extracts all external connection information convertible from one object connection information. Also, the security element extracting unit 203 retrieves and extracts a security element from the non-standardized data extracted by the connection converting unit 202, and re-expresses the security element in a formalized manner. In addition, the security element processing unit 204 determines a processing method such as filtering, encryption, or encoding according to sensitivity and rules set in advance on the security element extracted by the security element extracting unit 203. Finally, the first external connection expression unit 205 integrates and expresses the external connection information extracted from the connection conversion unit 202 according to a predetermined method determined by the security element processing unit 240.

4, the personal information protection unit 300 includes a personal information extraction unit 301, a personal information learning unit 302, a personal information classification unit 303, a personal information presentation unit 304).

At this time, the personal information extracting unit 301 extracts personal information from the non-standardized data transmitted from each object. At this time, the personal information extracting unit 301 performs high-speed processing in cooperation with the intelligent-recognition chip 600 in order to extract personal information. Also, the personal information learning unit 302 learns data included in the extracted personal information by using a data mining-based algorithm, and generates dictionary information of personal information. The personal information classification unit 303 evaluates the sensitivity and the type of personal information using the dictionary information of the personal information generated for the personal information extracted by the personal information extraction unit 301, and performs classification. The personal information representative unit 304 re-expresses the personal information classified by the personal information classification unit 303 in a formalized manner.

5, the external connection control unit 500 includes a second external connection expression unit 401, a data integration unit 402, an external connection conversion unit 403, an external connection processing unit 404, .

At this time, the second external connection rendering unit 401 is connected to the first external connection rendering unit 205 of the proxy control unit 200. The data integration unit 402 integrates data included in the second external connection expression unit 401 and finally generates data connected to the external. In addition, the external connection conversion unit 403 determines an external connection to be served with real data from connectable external connection information included in the second external connection expression unit 401, and transmits the generated external connection data And performs the final protocol conversion. Also, the external connection processing unit 404 provides the actual service using the protocol generated by the external connection conversion unit 403.

6, the social connection control unit 500 includes a social connection registration unit 501, a social notification unit 502, a social update unit 503, a data processing unit 504, 505, and a third object connection expression unit 506.

At this time, the third object connection expression unit 501 relays object connection information with the second object connection expression unit 201 of the proxy control unit 200 and provides the same function. The social connection registration unit 502 registers with the user's social network in order to link with the social network. The social notification unit 503 periodically checks the new social data registered in the social connection registration unit 502 and notifies the new data. Also, the social renewal unit 504 updates the data collected from the object to the social registered in the social connection registration unit 502. [ Also, the data processing unit 505 determines whether the data received from the second object connection expression unit 201 of the proxy control unit 200 is interlocked with the social data. The data converting unit 506 may classify only the data to be linked with the social data in the data processing unit 505 and send the data to the social updating unit 504 or the data received from the social notifying unit 503 in the third object connecting / 501 to the proxy control unit 200.

Hereinafter, the operation of the Internet router for providing a secure proxy based on the protocol scheme according to the present invention will be described in detail with reference to the accompanying drawings. 1 to 6 denote the same members performing the same function.

FIG. 7 is a flowchart for explaining a method for relaying Internet objects, which provides a secure proxy based on a protocol scheme according to an embodiment of the present invention. Referring to FIG.

The object connection controller 100 transmits and receives data through the first type network between the object Internet relay and the object, and the object connection control unit 100 directly participates in and manages communication between the object Internet relay and the object. Therefore, the object connection control unit 100 ultimately exposes the service or data to the outside through the external connection control unit 400. [ At this time, as the external connection control unit 400 uses the second type network, it is necessary to convert between the first type network and the second type network.

To this end, if data is input through communication between a first type network used between objects and a repeater and a second type network used between a repeater and the Internet through the object connection control unit 100, the non-secured protocol and the security protocol are mutually converted In operation S20, the proxy control unit 200 extracts a second type network that can be converted from the first type network and supports multiple communication stacks in step S20. In this case, step S10 is described in detail in the first embodiment, and step S20 is described in detail in the second embodiment.

The data generated by the object connection control unit 200 is transmitted to the personal information protection unit 300. The personal information protection unit 300 determines whether personal information is included in the data received from the object connection control unit 200 (S30), and extracts the personal information. The extracted personal information is classified according to the sensitivity (S40). In this case, steps S30 to S40 will be described in detail through the third embodiment.

The external connection control unit 400 finally provides the service to the second type network using the information received from the proxy control unit 200 and the information received from the personal information protection unit 300 (S50). At this time, the step S50 will be described in detail through the fourth embodiment below.

Meanwhile, the social connection control unit 500 manages the information coming from the social and the social information, and performs a mutual operation with the object connection control unit 100 and determines whether or not to update the social information collected from the object (S60 (S80), or when a new feed is generated in the social (S80), the data is generated to control the object and transmitted to the object connection control unit 100 (S80). In this case, steps S60 to S80 will be described in detail through the fifth embodiment.

First Embodiment

The first protocol between the object and the relay uses CoAP, and the second protocol between the relay and the Internet uses HTTPS. In this embodiment, an object transmits various sensing information including temperature and humidity to the repeater through the CoAP.

The repeater updates the sensing information to a specific web, at which time the web uses HTTPS. In this case, HTTPS belongs to the security protocol, and CoAP belongs to the non-secure protocol. In particular, since the HTTPS security protocol is a certificate-based security protocol using public keys, it is necessary to verify and generate the certificate in order to convert the CoAP to HTTPS. The proxy control unit 200 of the present invention also expresses the conversion between the security protocol and the non-security protocol in a schema, thereby enabling seamless conversion between CoAP and HTTPS.

2, the object communication control unit 101 supports a communication stack that can be used in objects such as 6LoWPAN, WiFi, Bluetooth, and the like. The object communication control unit 101 is a function for communicating primitive traffic.

In addition, the object protocol control unit 102 supports a multi-protocol function to accommodate a lightweight protocol used in objects such as CoAP and MQTT. The first object connection expression unit 103 structures the information collected by the object communication control unit 101 and the object protocol control unit 102 and transmits the structured information to the proxy control unit 200 and the personal information protection unit 300.

As described above, in the first embodiment, the first communication is selected through the object communication control unit 101 for the object to communicate with the object, and the first protocol is selected through the object protocol control unit 102 in the selected first communication. The first object connection expression unit 103 structures data and information on the first type network.

Second Embodiment

In heterogeneous environments, heterogeneous objects use heterogeneous communication. In particular, 6LoWPAN, WiFi, Bluetooth, etc., which are mainly used for object communication, all use 2.4Ghz frequency, and mutual radio interference may occur. In the present invention, the first-type communication is avoided by mutual interference problems through real-time channel optimization so that it can transmit and receive simultaneously in an environment including a plurality of objects.

The proxy control unit 200 of FIG. 3 will be described in more detail. The data received from the second object connection expression unit 201 is transferred to the connection conversion unit 202.

Then, the connection conversion unit 202 converts the external connection information from the object connection information. That is, the connection conversion unit 202 defines a rule for converting a first protocol to a second protocol by configuring a schema for a conversion method of each protocol. Also, a list of convertible second protocols for the corresponding first protocol is generated, and converted into a second convertible protocol to generate one or more standards of the converted second protocol.

Next, the security element extracting unit 203 retrieves and extracts the security element from the non-standardized data, and re-expresses it in a formalized manner. In order to retrieve a security element from the security element extracting unit 203, a technique such as data mining or ontology may be used. In particular, when a security element is extracted using a data mining technique, Can be improved ten times or more.

In addition, the security element processing unit 204 determines a processing method such as filtering, encryption, or encoding according to predetermined sensitivity and rules according to the security element extracted from the security element extracting unit 203. In this case, in order to evaluate the sensitivity of each security element, the sensitivity can be extracted from the previously learned information using a data mining technique like the security element extracting unit 203.

The first external connection expression unit 205 extracts the external connection information extracted by the connection conversion unit 202 and the processing methods and rules extracted by the security element extraction unit 203 and according to the sensitivity in the security element processing unit 204 And extracts the external connection information.

Third Embodiment

When the information including temperature, humidity, and position is transmitted from the object through the CoAP to the proxy control unit 200 through the object connection control unit 100, the connection conversion unit 202 of the proxy control unit 200 registers Navigate to the protocol schema. Then, it extracts the protocol list convertible from CoAP and creates corresponding connections. In the present embodiment, it is assumed that HTTP and HTTPS are registered for the CoAP protocol. Then, two pieces of external connection information are extracted, and the security element extracting unit 203 extracts a security element for the data. In the present embodiment, the location information is evaluated as a primary security element. We assume that the location of the national research institute is one level of sensitivity, the hospital is two levels of sensitivity, and the other three places are sensitivity level. The security element processing unit 204 processes the extracted security elements according to sensitivity. For example, it is assumed that one level is deleted, two levels are encrypted, and three levels are plain text according to the sensitivity level.

In the present embodiment, when a plurality of relays are arranged in several places, the external connection expression unit 205 determines whether the external connection is to be handled by the external connection expression unit 205 considering the sensitivity of the security element extraction unit 2032 and the processing method of the security element processing unit 204 Information and data are determined.

4, the personal information extracting unit 301 extracts personal information from the non-standardized data transmitted from each object. In order to extract personal information, it can be processed at high speed in conjunction with the intelligent perception chip 600. At this time, the extracted personal information can be formalized using a schema structure such as an ontology and XML.

Then, the personal information learning unit 302 learns data including personal information by using an algorithm based on a data mining to generate dictionary information of personal information. At this time, in order to learn the dictionary personal information data through the personal information learning unit 302, the accuracy of the personal information can be improved by various methods through a decision tree, a support vector machine, an ensemble, and the like.

Then, the personal information classification unit 303 evaluates the sensitivity of the personal information extracted by the personal information extraction unit 301, the type of the personal information, and performs classification. A classification-based classifier such as k-Means or the like can be used to evaluate the sensitivity to personal information.

Then, the personal information presentation unit 304 re-expresses the evaluated information on the personal information in the personal information classification unit 303 in a formalized manner, and interoperates with the protection element extraction unit 303 of the proxy control unit 200 .

As described above, the security element extracting unit 203 and the personal information protection unit 300 of the proxy control unit 200 operate mutually. That is, the personal information extracting unit 301 extracts the personal information using the data mining technique using the information received from the security element extracting unit 203. Then, the personal information learning unit 302 learns data about personal information in advance. Then, the personal information classification unit 303 classifies the extracted personal information into categories. For example, when the information received from an object is a list of college attendants, personal information such as a student name, a telephone number, and the like is extracted. At this time, the personal information classification unit 303 plays a role of classifying the personal information by category. Then, the personal information presentation unit 304 expresses it in a form of a schema and exposes it to the outside.

Fourth Embodiment

Based on the external connection information and data transmitted from the proxy control unit 200, the data integration unit 402 converts the schema data into binary data according to the second type network characteristics. The external connection conversion unit 403 determines an actual protocol to be used as an external connection during the external connection information HTTP and HTTPS received in the third embodiment. Based on the binary data generated by the data integration unit 402, the external connection conversion unit 404 generates a packet for the final second protocol and converts it into a service in the external connection processing unit 404.

5, the third external connection rendering unit 401 is connected to the first external connection rendering unit 205 of the proxy control unit 200 and includes an ontology, XML The data expressed in a formalized manner, such as < / RTI >

The data integration unit 401 converts the data provided by the external connection expression unit 401 into binary data suitable for the second kind of network communication. At this stage, it is possible to optimize the second kind of network communication by converting schema format such as ontology and XML into binary data.

The external connection conversion unit 403 then reconfigures the binary data extracted by the data integration unit 402 to conform to the second protocol. The external connection conversion unit 403 can minimize the traffic of the second type network by using the binary data.

If the external connection processing unit 404 supports communication such as HTTP, HTTPS, and SOAP, the external connection processing unit 404 determines a second type network best suited to the first type network of the object connection control unit 100 and exposes services and data to the outside.

Fifth Embodiment

Referring to FIG. 6, the social connection registration unit 502 registers with the user's social network in order to interact with the social network. At this time, the social connection registration unit 502 can register in a social service that exposes social APIs such as Twitter, Facebook, and Google, and provides a security authentication function such as OAuth 2.0 in order to secure a user authentication element.

In addition, the social notification unit 503 periodically checks new social data registered in the social connection registration unit 502, and provides notification when new data is generated. In addition, by providing a function of a callback type so as to operate only when there is a new feed, the efficiency of the social announcement unit 503 can be improved and the overall performance of the intelligent stuff Internet repeater can be improved as compared with the polling method.

The social renewal unit 504 updates the data collected from the object with the social registered in the social connection registration unit 502. [ In addition, the data processing unit 505 determines whether the data received from the third object connection expression unit 501 is linked with the social data for the data determined to be registered in the social.

Then, the data conversion unit 506 transmits only the data to be linked with the social in the data processing unit 505 to the social updating unit 504 through the data converting unit 506 or converts the data received from the social notifying unit 503 And sends it to the three-object connection expression unit 501. At this time, the data conversion unit 506 stores a template for the social data, and creates a template-based message.

In this way, when the user registers in the Google calendar through the social connection registration unit 502, the social notification unit 503 and the social update unit 504 automatically operate when the user registers with one or more social members. At this time, the social notification unit 503 is implemented by a callback method and is called when there is a new feed, and the social connection control unit 500 performs a feed check for calling back the social notification unit 503.

Accordingly, when the user inputs a schedule such as cleaning or listening to music in the Google calendar, the social notification unit 503 operates, the schedule of the Google calendar is converted into the object data form by the data conversion unit 506, 501 to the object connection control unit 100 and transmitted to the objects.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. It will be apparent to those skilled in the art that various modifications may be made without departing from the scope of the present invention. Accordingly, the true scope of the present invention should be determined by the technical idea of the appended claims.

Claims (18)

An object connection control unit which manages heterogeneous communication with heterogeneous objects and provides services or exposes data collected in a form that can convert between security protocols and non-security protocols by integrating protocols,
A proxy control unit for extracting a second type network convertible from the first type network for communication between the first type network used between the objects and the repeater in the object connection control unit and the second type network used between the repeater and the Internet,
An external connection control unit for ultimately providing services to the second type network using information transmitted from the proxy control unit and information transmitted from the personal information protection unit;
Managing the information coming from the social or social information and performing an interaction with the object connection control unit to determine whether to update the social information on the collected information from the object to update the social information, And a social connection controller for generating data for controlling objects by monitoring them when they are received,
At this time, the social connection control unit
A third object connection expression unit for relaying the second object connection expression unit configured in the proxy control unit and the object connection information,
A social connection registration unit for registering with the user's social network to interact with the social network,
A social notification unit for periodically confirming new data to the social registered in the social connection registration unit and providing a notification that new data is generated,
A social update unit for updating the data collected from the object with the social registered in the social connection registration unit;
A data processing unit for determining whether data received from the second object concatenation expression unit is linked to a social object,
And a data conversion unit for classifying only the data to be linked with the social data in the data processing unit and sending the data to the social update unit or transmitting the data received from the social notification unit to the proxy control unit through the third object connection expression unit. An Internet relay device that provides a secure proxy. delete delete The method according to claim 1,
The object Internet relay apparatus or the proxy control unit includes a personal information protection unit for determining whether personal information is included in data received from the object connection control unit and extracting personal information and classifying the extracted personal information according to sensitivity Wherein the Internet protocol is a protocol-based secure proxy. The method of claim 4, wherein the personal information protection unit
A personal information extracting unit for extracting personal information from non-standardized data transmitted from each object;
A personal information learning unit that learns data included in the extracted personal information by an algorithm based on a data mining to generate dictionary information of the personal information;
A personal information classifying unit for classifying the sensitivity and the type of the personal information by using the dictionary information of the generated personal information for the personal information extracted by the personal information extracting unit,
And a personal information presentation unit for presenting personal information classified by the personal information classification unit and representing the personal information. 6. The method of claim 5,
Wherein the personal information extracting unit is configured to perform processing in conjunction with an intelligent chip to extract personal information, and to provide a secure proxy based on a protocol schema. The apparatus of claim 1, wherein the object connection control unit
6LoWPAN, WiFi, Bluetooth, and the like,
An object protocol control unit for providing a connection to a lightweight protocol used by objects including CoAP and MQTT to communicate;
And a first object connection expression unit for expressing connection information of the heterogeneous communication stack and the heterogeneous protocol in a common representation manner. 8. The apparatus of claim 7, wherein the proxy control unit
A second object connection expression unit for relaying object connection information with the first object connection expression unit of the object connection control unit,
A connection conversion unit for converting the object connection information into external connection information and extracting external connection information convertible from one object connection information,
A security element extraction unit for searching and extracting a security element from the non-standardized data extracted by the connection conversion unit,
A security element processing unit for deciding a processing method including filtering, encryption or encoding according to sensitivity and rules set in advance on the security element extracted by the security element extracting unit;
And a first external connection expression unit for integrating and representing the external connection information extracted from the connection conversion unit by a formalized method determined by the security element processing unit. Device. 9. The apparatus of claim 8, wherein the external connection control unit
A second external connection expression unit connected to the first external connection expression unit of the proxy control unit,
A data integration unit for integrating data included in the second external link representation unit and generating data finally connected to the external,
An external connection conversion unit which determines an external connection to be served with real data from connectable external connection information including the second external connection expression unit and performs protocol conversion from data connected to the external unit, Wow,
And an external connection processing unit for providing an actual service using the protocol generated by the external connection conversion unit. (A) converting data between a first type network used between objects and a repeater through an object connection control unit and a second type network used between a repeater and the Internet and mutually inserting an insecure protocol and a security protocol,
(B) extracting a second type network capable of converting the collected data from the first type network at the proxy control unit to support multiple communication stacks;
(C) The generated data is transmitted to the personal information protection unit. The personal information protection unit determines whether the personal information is included in the data through the personal information protection unit, and classifies the extracted personal information according to the sensitivity.
(D) providing a service to a second type network using information classified according to the multiple communication stack information and the extracted personal information sensitivity through an external connection control unit;
(E) manage the information coming from social or social outgoing information through the social connection control unit, determining whether to update the social information collected from the object and updating the social information, or if a new feed is created from social And generating data for controlling the object by monitoring the object,
At this time, the step (E)
Registering with the user's social network to interact with the social network,
Periodically confirming new data to the registered social and providing a notification that new data is generated;
Updating data collected from an object with the registered social data and determining whether or not the data is determined to be registered with the social data;
And transmitting only the data to be linked with the social data to the social update unit or converting and outputting the social notification data, and outputting the data. 11. The method of claim 10, wherein step (B)
Transforming external connection information by generating at least one standard of the second protocol converted from the object connection information included in the collected data into a second protocol that can be converted,
Retrieving and extracting a secure element from the informal data and re-expressing it in a formalized manner,
Determining a processing method including filtering, encrypting, or encoding the extracted security element according to a preset sensitivity and rule;
And extracting the external connection information by combining the extracted external connection information and the security element to which the processing according to the sensitivity and the processing according to the rule are applied. Provides Internet relaying methods. 12. The method of claim 11,
A data mining or an ontology technique is used to search for the security element, and when extracting the security element using the data mining technique, the extracted secure API is interlocked with the intelligent perception chip to extract a secure proxy based on the protocol schema. How to Internet Internet. 11. The method of claim 10, wherein step (C)
Extracting personal information from non-standardized data transmitted from each object,
Generating dictionary information of personal information by learning data containing personal information with an algorithm based on data mining;
Classifying the extracted personal information by evaluating the sensitivity and the type of personal information using a classifier based on the clustering,
A step of re-expressing the evaluated information on the personal information in a formalized manner, and performing a mutual operation with the protection element extracting unit of the proxy control unit, wherein the object providing the secure proxy based on the protocol schema Internet relay method. 14. The method of claim 13,
Wherein the extracted personal information is formatted using a schema structure including an ontology and XML if the personal information extraction is processed in cooperation with an intelligent perception chip, Way. 14. The method of claim 13,
And a technique including a decision tree, a support vector machine, and an ensemble in order to learn the dictionary personal information data. 11. The method of claim 10, wherein step (D)
Converting input data into binary data suitable for a second type network communication when data represented by a formal method is input;
Performing reconfiguration to convert the converted binary data into a second protocol;
Determining a second type network suitable for the first type network by using the reconfigured second protocol and exposing the service and data to the outside. Relay method. delete delete

Images