KR102142906B1 - Digital key based service system thereof in mobile trusted environment - Google Patents

Abstract

The present invention relates to a digital key service system in a mobile security environment. According to one embodiment of the present invention, the digital key service system in the mobile security environment comprises: a digital key server for controlling a digital key for issuing, sharing, and deleting the digital key, and managing a digital key device equipped with the digital key and a locking device; a digital key device for receiving the digital key through authentication of the digital key server to store the digital key in a security area separated from a general area, and using and sharing the issued digital key; a locking device for performing locking or unlocking by the digital key issued in the digital key device; a service provider for providing the locking device; and a third party. The third party includes: a TAM business provider for allowing the digital key device to activate the security area to correspond to each security element environment including TEE, USIM, eSIM, and WBC; a push server for notifying key sharing and deletion through a push service when the digital key device shares the digital key; and a user authentication server for authenticating a user of the digital key device. Accordingly, the digital key service system with enhanced mobile security in a digital key is provided.

Description

TECHNICAL FIELD [0001] Digital key based service system thereof in mobile trusted environment

The present invention relates to a mobile security technology, and more particularly, to a digital key service providing technology using a mobile security technology and a digital key control technology.

In recent years, with the rapid development of wireless communication technology, a non-contact digital key technology for remote unlocking using various short-range wireless communication technologies including NFC (Near field communication), Bluetooth, Zigbee, Beacon, and Wi-Fi is gaining attention in various fields. .

In addition, as information and communication technology develops, efforts have been made to wirelessly control an unlocking target using an application installed in a digital key device such as a smartphone.

However, in the case of unlocking the locked device using a digital key device such as a smartphone, security is weak, so it is difficult to secure the security of the digital key during the user registration process of the digital key due to the installation of the application as well as increasing the risk of theft. There is a problem.

Accordingly, there is a desperate need for a realistic and applicable digital key technology capable of securing the security of the digital key and fundamentally preventing the possibility of theft even in case of loss.

Korean Patent Application Publication No. 10-2017-0078533 (published on July 7, 2017)

The present invention has been devised to solve the problem, and an object thereof is to provide a digital key service system and method in which mobile security is enhanced in a digital key.

A digital key service method according to an embodiment includes the steps of registering a lock device by a digital key server, and registering a digital key device through a service provider by the digital key server and creating a security area separated from the general area of the digital key device. A service registration step to activate, a digital key issuance step in which the digital key server generates a digital key according to the request of the digital key device, performs security settings for the generated digital key, and injects it into the activated security area of the digital key device. And a control and management step of controlling, by the digital key server, digital key control for issuing, using, and sharing digital keys, and managing digital key devices and lock devices equipped with digital keys.

In the service registration step, the client application in the general area of the digital key device applies for service registration including membership registration with the service provider, and the service provider checks the membership status and checks the use rights for the lock device, and then checks the digital key device. After registering the service, it may include transmitting service subscription information to the digital key server, and activating a security area of the digital key device by the digital key server receiving the service subscription information.

In the step of activating the security area of the digital key device, the digital key server may activate the security area of the digital key device through a communication service provider of a third party or a Trusted Application Management (TAM) provider in connection with a third party.

In the digital key issuance step, the digital key device requests a digital key issuance from the service provider through a client application in the general area, the service provider passes the service subscription information to the digital key server through user authentication, and the digital key The key device requests the lock device to receive device information and then requests the digital key server to generate a digital key; the digital key server generates a digital key and performs security settings on the generated digital key; and After E2E encryption of the set digital key, it may include the step of transmitting it to the digital key device and injecting it into the security area.

The steps of the digital key server generating a digital key and performing security settings on the generated digital key include: the digital key server verifying the device information of the locked device to authenticate the device, and the digital key is generated and the generated digital key It may include performing authorization and authentication of the digital key including the limit setting value of, and storing the digital key after encrypting the generated digital key and digitally signing the encrypted digital key.

The digital key service method further includes a digital key use step of unlocking the locking device using a digital key stored in a secure area of the digital key device, and the digital key use step includes the digital key device being locked after the digital key registration. When the device is accessed or tagged, the encrypted digital key stored in the secure area of the digital key device is transmitted to the locking device, and the locking device is locked by verifying the encrypted digital key received through the digital key registered in advance. Unlocking the device may be included.

The digital service method further includes the step of the first digital key device to share the shared key to the second digital key device, wherein the step of sharing the shared key comprises: the first digital key device requests the service provider to share the digital key And, after the service provider authenticates the user, requesting the digital key server to share the digital key; the digital key server authenticates the lock device and confirms the shared key managed by the service provider; and The method may include informing the second digital key device of sharing the digital key.

The steps of sharing the shared key include: a second digital key device requesting a digital key server to confirm the shared key, a digital key server confirming a shared key managed by the digital key server, and the digital key server being verified. It may further include the step of E2E-encrypting the shared key and then transmitting it to the second digital key device and injecting it into the secure area.

In the step of transmitting to the second digital key device and injecting it into the security area, the digital key server may interact with a third party to activate the security area through a communication service provider or a TAM provider of the third party.

The security area of the digital key device may correspond to a mobile security area using any one of a Trusted Execution Environment (TEE), White Box Cryptography (WBC), a universal subscriber identity module (USIM), and an embedded subscriber identity module (eSIM).

A digital key service system according to another embodiment includes a digital key server that controls digital keys for issuance, sharing, and deletion of digital keys, and manages digital key devices and lock devices equipped with digital keys, and digital keys. A digital key device that receives a digital key through server authentication, stores the digital key in a security area separate from the general area, uses and shares the issued digital key, and locks or locks by a digital key issued to the digital key device It includes a lock device that performs unlocking, and a service provider that provides the lock device.

The digital key server checks whether the security area activator for activating the security area of the digital key device, the external interface for the digital key server to communicate with the outside, and whether the digital key device and the lock device are registered devices. A device management unit that authenticates the device and manages and stores information on each device, and generates a digital key according to a digital key generation request from the digital key device, performs security settings including encryption and digital signatures for the generated digital key, and creates It may include a digital key management unit that controls the sharing and deletion of the digital key.

The security area activation unit activates the security area of the digital key device through any one of the TEE activation unit, the USIM activation unit, the WBC activation unit, and the eSIM activation unit according to the security environment, and the USIM activation unit and the eSIM activation unit In conjunction with, the security area of the digital key device can be activated.

The external interface includes a secure area communication unit for end-to-end (E2E) encryption of data transmitted and received during communication with the outside of the digital key server, a digital key API for communication with a digital key device of the digital key server, and a digital key server. It may include a locking device API for communication with a service provider of.

The digital key management unit includes a digital key issuing unit that generates a digital key, a digital key sharing unit that shares the generated digital key, a digital key authority management unit that sets rights including a limit setting value of the generated digital key, and As a module, it may include a hardware security module for storing or managing an authentication key to authenticate a digital key, an encryption unit for encrypting the digital key, and a digital signature unit for electronically verifying the integrity of the encrypted digital key.

The digital key service system further includes a communication interface for performing communication between the digital key device and the locking device, and the communication interface may communicate using NFC, Bluetooth (BLE), or an encrypted QR code.

The digital key service system further includes a third party, wherein the digital key device is a TAM operator for activating a security area in accordance with each security element environment including TEE, USIM, eSIM, and WBC, and the digital key device When sharing a digital key, a push server for notifying key sharing and deletion through a push service, and an identity authentication server for authenticating a user of a digital key device may be included.

As described above, the present invention operates a digital key device in a mobile type as a general operating system and a security operating system, and protects important information and logic through a security element of the security operating system. There is a purpose to provide a method.

In addition, the present invention increases security by collectively managing digital key issuance, sharing, and deletion in a digital key server, and it is easy to expand based on a cloud, and a dual WAS, DB, and HSM can be configured.

In addition, the present invention enables a digital key device to use USIM, WBC, etc. through a third party, and when a user shares a digital key, a digital key sharing can be notified through a push. Authentication between the digital key device and the lock device can be performed through a third party.

In addition, the present invention may support a communication interface using NFC, Bluetooth (BLE) or an encrypted QR code.

In addition, the present invention uses a digital key device based on a mobile security environment to decrypt and store the encrypted digital key transmitted from the digital key server in a security area, thereby securing security for a digital key capable of unlocking a locked device. It can have an effect.

Further, according to the present invention, when the digital key is shared, the unlocking right can be limited to various conditions, so that the digital key can be safely shared with other users, and user convenience can be improved.

In addition, the present invention provides security even when the digital key device receives the digital key online by receiving the digital key encrypted by the asymmetric encryption algorithm method and decrypting it in the security area of the digital key device while receiving the digital key from the digital key server. There is an effect that can strengthen.

In addition, the present invention has an effect of fundamentally preventing the possibility of leakage of the digital key because the authentication token encryption/decryption process is performed even when the lock device is unlocked using the digital key stored in the security area of the digital key device.

In addition, the present invention has an effect of enhancing safety by performing a security authentication process for a sharing device that shares a digital key through a digital key server.

In addition, the present invention generates an authentication token using a digital key in a security operating system even when a digital key is stored and used in a shared device and undergoes a process of encryption/decryption along with the restriction setting value, thereby providing security required when sharing a digital key. There is an effect of securing sex. At this time, the digital key is shared with other users after limiting settings including the period of use, the number of times of use, the use area, and redistribution rights are given, so that even if the digital key is lost, the risk of theft of the locked device can be minimized. .

1 is a diagram showing the concept of a digital key service system according to an embodiment of the present invention;
2 is a diagram showing the configuration of a digital key service system according to an embodiment of the present invention;
3 is a diagram showing a detailed configuration of a digital key server according to an embodiment of the present invention;
4 is a diagram showing a process of a digital key service method according to an embodiment of the present invention;
5 is a view showing a flow of a locking device registration step according to an embodiment of the present invention;
6 is a diagram showing a flow of a service registration step according to an embodiment of the present invention;
7 is a diagram showing a flow of a digital key issuing step according to an embodiment of the present invention;
8 is a diagram illustrating a flow of a digital key use step according to an embodiment of the present invention;
9 is a diagram showing an owner-centered digital key sharing step according to an embodiment of the present invention;
10 is a diagram illustrating a digital key sharing step according to an embodiment of the present invention in the center of a sharer.

Advantages and features of the present invention, and methods for achieving them will be clarified with reference to embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in various different forms, and only the embodiments allow the disclosure of the present invention to be complete, and common knowledge in the technical field to which the present invention pertains. It is provided to fully inform the holder of the scope of the invention, and the invention is only defined by the scope of the claims. The same reference numerals refer to the same components throughout the specification.

In the description of the embodiments of the present invention, when it is determined that a detailed description of known functions or configurations may unnecessarily obscure the subject matter of the present invention, the detailed description will be omitted, and terms to be described below are used in the embodiments of the present invention. The terms are defined in consideration of the function of. It can be changed according to the intention or custom of the user or operator. Therefore, the definition should be made based on the contents throughout this specification.

Combinations of each block in the accompanying block diagrams and steps of the flow charts may be performed by computer program instructions (execution engines), these computer program instructions being incorporated into a processor of a general purpose computer, special purpose computer, or other programmable data processing equipment. Since it can be mounted, the instructions executed through a processor of a computer or other programmable data processing equipment create a means to perform the functions described in each block of the block diagram or in each step of the flowchart.

These computer program instructions can also be stored in computer readable or computer readable memory that can be oriented to a computer or other programmable data processing equipment to implement a function in a particular way, so that computer readable or computer readable memory The instructions stored in it are also possible to produce an article of manufacture containing instructions means for performing the functions described in each block of the block diagram or in each step of the flowchart.

In addition, since computer program instructions can be mounted on a computer or other programmable data processing equipment, a series of operation steps are performed on a computer or other programmable data processing equipment to create a computer-executable process. It is also possible for the instructions to perform the data processing equipment to provide steps for executing the functions described in each block in the block diagram and in each step in the flowchart.

In addition, each block or each step can represent a module, segment, or portion of code that includes one or more executable instructions for executing specified logical functions, and in some alternative embodiments referred to in blocks or steps It should be noted that it is also possible for functions to occur out of sequence. For example, two blocks or steps shown in succession may in fact be executed substantially simultaneously, and it is also possible that the blocks or steps are performed in the reverse order of the corresponding function as necessary.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, the embodiments of the present invention exemplified below may be modified in various other forms, and the scope of the present invention is not limited to the embodiments described below. Embodiments of the present invention are provided to more fully describe the present invention to those of ordinary skill in the art.

Hereinafter, embodiments of the present specification will be described with reference to the accompanying drawings. While describing the embodiments of the present specification, descriptions of technical contents that are well known in the technical field to which the present specification pertains and are not directly related to the present specification will be omitted. This is to more clearly convey the gist of the present specification by omitting unnecessary description.

In addition, in describing the constituent elements of the present specification, different reference numerals may be assigned to the constituent elements of the same name according to the drawings, and the same reference numerals may be denoted even in different drawings. However, even in such a case, it does not mean that the corresponding component has different functions according to the embodiment, or that it has the same function in different embodiments, and the function of each component is the corresponding embodiment. It should be determined based on the description of each component in

1 is a diagram showing the concept of a digital key service system according to an embodiment of the present invention.

Referring to FIG. 1, a digital key service system includes a digital key server 1, a digital key device 2, and a lock device 3.

The digital key service according to an embodiment includes a digital key that can unlock the locking device 3 in a digital key method inside a digital key device 2 such as a smartphone, which is widely used due to the development of mobile communication technology. Digital Key) and issuing, deleting, using, and sharing digital keys. The digital key device 2 encrypts and stores a digital key in its own security area, and can unlock the lock device 3 with this digital key. Communication between the digital key device 2 and the locking device 3 may use wireless communication such as NFC (Near field communication), Bluetooth, Wi-Fi, QR code, and Zigbee. The locking device 3 can be operated with a digital key method using the wireless communication described above.

The digital key server 1 has digital key control functions such as issuing, deleting, using, and retrieving the digital keys of the digital key device 2 and the locking device 3, and a device (digital key device, Lock device), including registration and deletion. Digital key issuance, deletion, and sharing are all performed in the digital key server 1. Furthermore, the digital key server 1 checks the protocol to check not only each security area but also a vulnerability in the entire flow, and performs E2E (End to End) encryption. When the digital key server 1 is operated on a cloud basis, it is easy to expand.

The digital key device 2 is registered in the digital key server 1 to securely receive a digital key. It has the function of using the issued digital key, and protects important logic through a secure element (SE).

The locking device 3 is a device that actually locks and unlocks a digital key issued to the digital key device 2. For example, it can be a door, an access control system, a vehicle, etc. The locking device 3 registers with the digital key server 1 to receive a digital key.

The digital key server 1 and the locking device 3 do not communicate directly with each other, but communicate through the digital key device 2. The digital key device 2 serves as a gateway (G/W) of the locking device 3 and the digital key server 1.

In preparation for the digital key service, the digital key device (2) and the locking device (3) store the server public key in a safe place, and the digital key server (1) is the locking device (for example, Door ID) can be stored in a safe place. The digital key device 2 may inject token information into the header when communicating with the digital key server 1 after logging in.

2 is a diagram showing the configuration of a digital key service system according to an embodiment of the present invention.

Referring to FIG. 2, the digital key service system includes a digital key server (1), a digital key device (2), a lock device (3), and a service provider. Provider) (4), a 3rd party (5) and a communication interface (6).

The digital key device 2 refers to a portable mobile terminal such as a smartphone or a tablet PC, and operates on an operating system such as Android (Google's operating system for smartphones), iOS (Apple's operating system for iPhone), and the like. The digital key device 2 is equipped with a general operating system and a security operating system that operates independently of the general operating system. An area in which a general operating system operates is called a normal world (NW) 21, and an area in which a security operating system operates is called a secure world (SW) 22. The security area 22 may correspond to a mobile security area using any one of a Trusted Execution Environment (TEE), White Box Cryptography (WBC), a universal subscriber identity module (USIM), and an embedded subscriber identity module (eSIM). Hereinafter, for convenience of explanation, it is intended to be described centering on TEE, but it is clarified that it can be similarly applied to various security processing technologies such as WBC, USIM, and eSIM.

The general area 21 includes a client application, and the client application performs user UI, general logic, and network communication functions. The security area 22 includes a security application (Trusted Application) for executing various security element environments such as TEE/USIM/eSIM/WBC. The security application provides mobile security enhancement services such as payment settlement, authentication, financial information management, personal information management, device management, and security services, and accesses the security information stored in the security area to provide services that require security. The security application includes a secure element and performs a digital key storage function, important information storage, function encryption/decryption function, and important logic functions. For example, security applications provide security-enhanced user interfaces through I/O devices such as cameras, microphones, screen touch, and fingerprint scanners (security-enhanced I/O TA), and encryption and decryption of feature values for user specific purposes. (Encryption/Decryption TA), and storing the encrypted feature values in the personal information DB, etc., manage and control personal information in the security area. The security application cannot be accessed directly from the general area 21. In addition, feature values necessary for the operation of security applications such as site registration confirmation, user private key encryption, authentication token generation, authorization token decryption, digital signature data generation, digital signature data verification, etc., public certificates, ID and password, etc. Important information is also stored in the security area 22.

The digital key device 2 may include an owner device and a sharing device. When the owner device shares the digital key with the sharing device, the owner device can limit the use by setting a limit setting value. For example, it is possible to set the available period, the number of times that can be used, the available area, and the re-sharing information in advance, and limit the use rights of the sharing device.

The owner device is a digital key device carried by a digital key owner (Primary User), and receives an initial digital key after being authenticated by the digital key server 1. The owner of the digital key becomes the owner of the locked device. A shared device is a digital key device carried by a shared user. The sharer is the user who has shared the digital key from the owner. For example, family or friends.

The locking device 3 is a device that actually locks and unlocks a digital key issued to the digital key device 2. For example, it can be a door, an access control system, a vehicle, etc. The locking device 3 registers with the digital key server 1 to receive a digital key. The locking device 3 can be unlocked by a digital key of the digital key device 2. The locking device 3 according to an embodiment recognizes the digital key device 2 according to the access of the digital key device 2, receives a public key for encryption from the recognized digital key device 2, and then receives Locked device information can be encrypted using a public key. And, upon receiving the encrypted digital key for the locking device, it can be decrypted and stored. The locking device 3 may be in the form of a stationary wireless charging pad for charging power by receiving a wireless power signal from the digital key device 2.

The service provider 5 is a company that provides the locking device 3. A function is provided to the locking device 3 so that a digital key can be issued through the digital key server 1. The service provider 5 according to an embodiment includes a member management module, a locking device usage authority verification module, and an identity authentication module. The member management module checks whether a member is a member according to a member management request from the digital key device 2. The locking device permission checking module checks whether the user of the digital key device 2 has permission to use the locking device 3. The user authentication module authenticates the user himself. User authentication includes SMS, non-face-to-face, public authentication, and i-PIN.

A third party (5) can use a push server that provides a digital key sharing notification function through push, a digital key device (2), an identity authentication server to authenticate the user, a mobile carrier, TEE, and USIM. It includes Trusted Application Management (TAM) providers, etc. The push server can use Firebase Cloud Messaging (FCM). If the digital key device 2 is a terminal supporting both USIM and WBC, authentication between the digital key device 2 and the locking device 3 may be performed through a third party 5. In contrast, if the digital key device 2 is a terminal supporting TEE, authentication between the digital key device 2 and the lock device 3 may be performed through token authentication.

The communication interface 6 carries out communication between the digital key device 2 and the locking device 3. Communication methods include NFC, Bluetooth (BLE), and encrypted QR code.

In the digital key issuance step, the digital key device 2 requests the device information of the lock device 3 from the lock device 3 through the communication interface 6, and receives device information from the lock device 3 to lock the device. Check (3) and transmit the digital key to the confirmed locking device (3). The locking device 3 stores the received digital key. The lock device information includes manufacturer information of the lock device, serial number of the lock device, feature information of the lock device, a lock device public key, and the like.

3 is a diagram showing a detailed configuration of a digital key server according to an embodiment of the present invention.

2 and 3, the digital key server 1 includes a security area activation unit (TA Activation Manager) 10, an external interface (12), a digital key core (Digital Core), a device management unit ( Device Manager (14) and a digital key management unit (Digital Key Management) 16 and a manager module (Admin) (18).

The security area activation unit 10 activates each security function in the security area when the digital key device 2 accesses the digital key server 1. According to an embodiment, the security area activating unit 10 includes a TEE activating unit 100, a USIM activating unit 102, and a WBC activating unit 104. The USIM activation unit 102 provides an applet mounting and use function when the digital key device 2 uses the USIM. The WBC activation unit 104 activates a corresponding area when the digital key device 2 uses WBC. In addition, although not shown in the drawings, according to the present invention, an eSIM activation unit may be additionally provided, and the security area activation unit 10 is a TEE activation unit 100, a USIM activation unit 102, and a WBC according to the security environment. The security area of the digital key device 2 may be activated through one of the activation unit 104 and the eSIM activation unit. At this time, the security area activation unit 10 may activate the security area of the digital key device 2 through the communication service provider of the third party 5 or a TAM service provider in connection with the third party 5. And it is possible to interwork with a third party through the eSIM activation unit.

The external interface 12 is a module through which the digital key server 1 communicates with the outside. The external interface 12 according to an embodiment includes a secure communication channel 120, a digital key API 122, and a lock device API 124. The security area communication unit 120 performs end to end (E2E) encryption of all data transmitted and received during communication with the outside of the digital key server 1. The digital key API 122 is an API for communication with the digital key device 2 of the digital key server 1. The digital key device 2 is connected to the digital key server 1 through the digital key API 122. The lock device API 124 is an API for communication with the service provider 4 of the digital key server 1. The digital key server 1 may receive an initial registration request from the service provider 4 through the lock device API 124.

The digital key core according to an embodiment includes a device management unit 14 and a digital key management unit 16. The device manager 14 is a module that verifies whether each device is a registered device, authenticates each device, and manages and stores information about each device. The device management unit 14 according to an embodiment includes a digital key device management unit 140 and a lock device management unit 142. The digital key device manager 140 manages the digital key device 2, stores device information of the digital key device 2, and authenticates whether the digital key device 2 is a registered device. The lock device management unit 142 manages lock device information, and authenticates whether the lock device 3 is a registered device. Initially, when the service provider 4 requests registration for the lock device 3, the lock device information may be registered and stored.

The digital key management unit 16 generates a digital key according to a digital key generation request from the digital key device 2 and performs security settings including encryption and digital signature for the generated digital key. Share and delete.

The digital key management unit 16 according to an embodiment includes a digital key issue module 160 that generates a digital key, and a digital key share module 161 that shares the generated digital key. ), a digital key authority manager 162 that sets the authority including the limit setting value of the generated digital key, a hardware security module that authenticates the digital key by storing or managing the authentication key as a physical module (Hardware Security Module) 163, an encryption unit (Cryptography) 164 for encrypting a digital key, and a digital signature unit (Digital Signature) 165 for electronic verification of the integrity of the encrypted digital key. The digital key sharing unit 161 may perform a digital key sharing function, a shared key expiration and deactivation function, a key sharing notification function through push in connection with a push server of the third party 5, and the like. The encryption unit 164 may encrypt the digital key so that only the locking device 3 can open the digital key when the digital key device 2 transmits the digital key to the locking device 3. When the digital key server (1) issues a digital key to the digital key device (2), the digital key device (2) stores the issued digital key, and the digital key device is stored in the keyless lock device (3). That you have. At this time, the digital key device 2 is used only as a passage, and the corresponding digital key is encrypted and transmitted so that the contents thereof are not known. In this case, digital key encryption may be performed using a communication key previously registered for mutual encryption.

The manager module 18 is a module for a manager who is a user of the digital key server 1. The manager module 18 according to an embodiment includes a system monitoring module 180 that monitors the operation of the digital key server 1, and a digital key issuance processing unit that tracks and manages issued digital keys. Issue Tracker (182), a Device Management Tracker (184) that tracks and manages the digital key device (2) and the locking device (3), and a Statistics Tracker that calculates and provides statistical information ( 186).

4 is a diagram illustrating a process of a digital key service method according to an embodiment of the present invention.

2 and 4, the digital key server 1 registers the locking device 3 (S410). The detailed process of the locking device registration step S410 will be described later in detail with reference to FIG. 5.

Subsequently, the digital key server 1 registers the service of the digital key device 2 (S420). For example, at the request of the digital key device 2, the digital key server 1 registers the service through the service provider 4 and activates the security area of the digital key device 2. The detailed process of the service registration step S420 will be described later in detail with reference to FIG. 6.

Subsequently, the digital key server 1 issues a digital key (S430). The digital key issuance step S430 even includes a step of generating a digital key according to a user request of the digital key device 2 by the digital key server 1 and injecting the digital key into an activated security area. For safe transport of digital keys, security settings such as E2E encryption and digital signatures are required. The detailed process of the digital key issuing step S430 will be described later in detail with reference to FIG. 7.

Subsequently, the digital key device 2 uses the issued digital key (S440). The digital key use step (S440) is a step of unlocking the locking device 3 through a digital key stored in the digital key device 2. Token authentication, third party authentication, etc. can be performed to unlock. Token authentication is an authentication method in which the locking device 3 checks a digital key registered in advance to perform an operation. Although the speed is fast, security is relatively weak. The third-party authentication is a method of verifying the integrity of the digital key through the digital key server 1, and is slower, but more securely secured. For third-party authentication, the digital signature, encryption/decryption technology and digital key device 2 provide a communication interface 6 for transferring key information to the locking device 3. The detailed process of the digital key use step (S430) will be described later in detail with reference to FIG. 8.

Also, a digital key may be shared between two digital key devices (S450). The digital key sharing step (S450) is a step in which the owner issues a new digital key to the sharer within his/her authority. At this time, you can set overall restrictions such as the available period for the shared key, the number of times it can be used, the available area and the re-sharing information. In addition to basic encryption and signature functions, it provides a push function to notify the sharer of the sharing, and a protocol to prevent unauthorized use of expired keys in the state of shadow or airplane mode. In order to provide the key sharing function, the method of deleting or retrieving the shared key is clearly defined. The detailed process of the digital key sharing step (S440) will be described later in detail with reference to FIGS. 9 and 10.

At this time, according to the present invention, after the step of issuing a digital key by the digital key server 1 (S430), the step of using the digital key (S440) and the step of sharing the digital key between two digital key devices (S450) ) May not always be performed sequentially, as in the embodiment illustrated in the drawings. That is, the order of using the digital key (S430) and the digital key sharing (S440) is not necessarily guaranteed, and may occur simultaneously in parallel, or only one of the two steps may occur.

The digital key server 1 controls digital keys for issuing digital keys (S420), using digital keys (S440), and sharing digital keys (S440), and managing digital key devices and locking devices equipped with digital keys. Perform the control and management steps to perform.

5 is a diagram illustrating a flow of a locking device registration step according to an embodiment of the present invention.

Referring to FIG. 5, the service provider 4 transmits a lock device registration request message including device information of the lock device 3 to the digital key server 1 (S510). When the digital key server 1 receives a lock device registration request from the service provider 4 through the lock device API 124, the digital key server 1 stores the lock device information in the lock device management unit 142 of the device management unit 14 (S520). ). Accordingly, registration of the locking device 3 is completed.

6 is a diagram illustrating a flow of a service registration step according to an embodiment of the present invention.

Referring to FIG. 6, the service registration step is a step in which the digital key server 1 registers the digital key device 2. In this case, it may include a step of activating a security area inside the registered digital key device 2. The digital key device 2 uses various security areas according to the policy of the service provider 4 and whether the digital key device 2 is supported. The digital key device 2 may interwork with a third party 5 such as a communication company or a TAM service provider that provides an infrastructure for using each security area. When using the WBC, the digital key device 2 installs an application in which the corresponding area is implemented.

In more detail, the client application in the general area 21 of the digital key device 2 applies for service registration including membership registration to the service provider 4 (S610). The service provider 4 checks the membership status through the member management module, checks the use rights for the lock device through the lock device permission check module, registers the digital key device 2 as a service, and then registers the digital key device 2 The service subscription information is transmitted to the digital key server 1 (S620).

Subsequently, when the digital key server 1 receives service subscription information from the service provider 4 through the lock device API 124, the service subscription information is stored in the digital key device management unit 140 (S630), and the digital key device The management unit 140 requests activation from the security area activation unit 10 (S640), and the security area activation unit 10 provides the TEE activation unit 100, the USIM activation unit 102, and the WBC activation unit according to the security environment. The security area of the digital key device 2 is activated through any one of (104) (S650). In this case, the security area activation unit 10 may activate the security area of the digital key device 2 through a communication service provider or a TAM service provider of the third party 5 in connection with the third party 5. The step of activating the security area of the digital key device 2 (S640) may be performed after the service application as described above, but may be performed before the service application. However, it is efficient to perform after service request due to billing problem. However, it must be performed before digital key storage.

7 is a diagram illustrating a flow of a digital key issuing step according to an embodiment of the present invention.

Referring to FIG. 7, the digital key device 2 requests the service provider 4 to issue a digital key from the lock device 3 through a client application in the general area (S701). The service provider 4 verifies whether the digital key device user is a registered user and has permission to use the lock device 3, authenticates the user, and transmits the service subscription information to the digital key server 1 (S702). .

Subsequently, the digital key device 2 requests device information of the locking device 3 from the locking device 3 through the communication interface 6 to receive device information (S703). Upon receiving the device information, the digital key device 2 requests the digital key server 1 to generate a digital key (S704).

The digital key device management unit 140 of the digital key server 1 requests the lock device management unit 142 according to the key generation request of the digital key device 2 to check the device information of the lock device (S705), and the registered device After confirming whether or not the device is authenticated, the digital key issuing unit 160 of the digital key management unit 16 requests the digital key to be generated (S706). The digital key issuing unit 160 generates a digital key, requests digital key authorization from the digital key authorization management unit 162 (S707), and the digital key authorization management unit 162 generates a digital key including a digital key restriction setting value. After granting the key authority, the digital key is authenticated through the HSM 163 (S708). Subsequently, the encryption unit 164 encrypts the generated digital key (S709), the digital signature unit 165 digitally signs the encrypted digital key (S710), and the digital key sharing unit 161 stores the digital key. (S711).

Subsequently, the external interface 12 of the digital key server 1 E2E encrypts the digital key through the secure area communication unit 120, and then transmits the encrypted digital key to the digital key device 2 through the digital key API 122. It is transmitted and injected into the security area (S712). In this case, while the digital key device 2 receives the digital key from the digital key server 1, the digital key device 2 receives the encrypted digital key using an asymmetric encryption algorithm and decrypts it in the security area of the digital key device 2 to go online. Even if you receive a digital key through it, it has the effect of enhancing security.

The digital key device 2 transmits the injected digital key to the locking device 3 through the communication interface 6 (S713), and the locking device 3 stores the received digital key. At this time, the digital key transmitted to the locking device 3 is encrypted.

8 is a diagram illustrating a flow of a digital key use step according to an embodiment of the present invention.

Referring to FIG. 8, after digital key registration, when the digital key device 2 approaches or tags the lock device 3, the encrypted digital key stored in the security area 22 through the security application of the digital key device 2 In step S800 of transmitting the data to the lock device 3 (S800), the lock device 3 unlocks the lock device 3 by verifying the encrypted digital key received through the digital key registered in advance. I can. If verification of the authentication token is successful, the locking device 3 is unlocked. When the lock device 3 is unlocked by using a digital key stored in the secure area of the digital key device 2, since it undergoes an authentication token encryption/decryption process, there is an effect of fundamentally preventing the possibility of leakage of the digital key.

9 is a diagram illustrating an owner-centered digital key sharing step according to an embodiment of the present invention.

Referring to FIG. 9, the owner's digital key device (hereinafter, the owner device) 2-1 requests the service provider 4 to share the digital key through a client application in the general area 21 (S910). Then, the service provider 4 requests the digital key server 1 to share the digital key after authenticating the user after checking the right to use the lock device and checking the user (S920). When the digital key API 122 of the digital key server 1 receives the digital key sharing request, it transmits the digital key sharing request to the digital key device management unit 140 (S930). The digital key device management unit 140 requests confirmation of whether the device is a registered lock device in the lock device management unit 142 (S940) so that the lock device management unit 142 authenticates the device, and when the device is authenticated, the digital key sharing unit ( A shared key is requested to (S950) 161, and the digital key sharing unit 161 checks the shared key managed by itself. The service provider 4 notifies the digital key device (hereinafter, referred to as the sharing device) of the sharer of digital key sharing (S960).

10 is a diagram illustrating a digital key sharing step according to an embodiment of the present invention in the center of a sharer.

Referring to FIG. 10, the digital key device (hereinafter, shared device) 2-2 requests the digital key server 1 to check the shared key (S1010). The digital key server 1 receiving the shared key confirmation request through the digital key API 122 transmits the key confirmation request to the digital key device management unit 140 (S1020), and the digital key device management unit 140 returns the key The confirmation request is transmitted to the digital key sharing unit 161 (S1030). When the digital key sharing unit 161 checks the shared key managed by the digital key sharing unit 161 and transmits the shared key to the external interface 12 (S1040), the external interface 12 is After E2E encryption of the shared key through 120, it is transmitted to the sharing device 2-2 through the digital key API 122 and injected into the secure area (S1050).

As described above, the digital key server 1 may directly inject the shared key into the sharing device 2-2, but the digital key server 1 interlocks with the third party 5 to provide a third party 5 ), the shared key may be injected into the security area 22 of the sharing device 2-2 through a telecommunication company or a TAM operator. Furthermore. The digital key server 1 may release the shared digital key by deleting the shared digital key.

As described above, the present invention provides a digital key service system and method with enhanced mobile security by operating a mobile digital key device as a general operating system and a security operating system and protecting important information and logic through the security elements of the security operating system. There is a purpose to provide.

In addition, the present invention increases security by collectively managing digital key issuance, sharing, and deletion in a digital key server, and it is easy to expand based on a cloud, and a dual WAS, DB, and HSM can be configured.

In addition, the present invention enables the digital key device to use USIM, WBC, etc. through the third, and when the user shares the digital key, it is possible to notify the digital key sharing through a push. Authentication between the digital key device and the lock device can be performed through a third party.

In addition, the present invention may support a communication interface using NFC if the digital key device is a TEE supporting terminal, and a communication interface using Bluetooth (BLE) or an encrypted QR code if the digital key device is a terminal supporting USIM and WBC. .

In addition, the present invention uses a digital key device based on a mobile security environment to decrypt and store the encrypted digital key transmitted from the digital key server in a security area, thereby securing security for a digital key capable of unlocking a locked device. It can have an effect.

Further, according to the present invention, when the digital key is shared, the unlocking right can be limited to various conditions, so that the digital key can be safely shared with other users, and user convenience can be improved.

In addition, the present invention provides security even when the digital key device receives the digital key online by receiving the digital key encrypted by the asymmetric encryption algorithm method and decrypting it in the security area of the digital key device while receiving the digital key from the digital key server. There is an effect that can strengthen.

In addition, the present invention has an effect of fundamentally preventing the possibility of leakage of the digital key because the authentication token encryption/decryption process is performed even when the lock device is unlocked using the digital key stored in the security area of the digital key device.

In addition, the present invention has an effect of enhancing safety by performing a security authentication process for a sharing device that shares a digital key through a digital key server.

In addition, the present invention generates an authentication token using a digital key in a security operating system even when a digital key is stored and used in a shared device, and the security required in the case of sharing a digital key by performing an encryption/decryption process together with a limit setting value. There is an effect of securing sex. At this time, the digital key is shared with other users after limiting settings including the period of use, the number of times of use, the use area, and redistribution rights are given, so that even if the digital key is lost, the risk of theft of the locked device can be minimized .

In the above, although the present invention has been described with reference to several examples, the present invention is not necessarily limited to these embodiments, even though it has been described that all components constituting the embodiments of the present invention are combined or operated in combination. That is, within the scope of the present invention, all of the components may be selectively combined and operated. In addition, although all the components can be implemented as one independent hardware, a program module that performs some or all functions combined in one or more hardware by selectively combining some or all of the components It may be implemented as a computer program having The codes and code segments constituting the computer program may be easily deduced by those skilled in the art of the present invention. Such a computer program is stored in a computer-readable storage medium, and is read and executed by a computer, thereby implementing an embodiment of the present invention. The storage medium of the computer program may include a semiconductor recording medium, a magnetic recording medium, an optical recording medium, and a carrier wave medium.

In addition, the terms such as "include", "consist of" or "have" described above mean that the corresponding component may be present unless otherwise stated, excluding other components It should not be construed as being able to further include other components.

The embodiments described above are examples, and those of ordinary skill in the technical field to which the present specification pertains will be able to make various modifications and variations without departing from the essential characteristics of the present specification. Accordingly, the embodiments disclosed in the present specification are not intended to limit the technical idea of the present specification, but to describe the technical idea, and the scope of the technical idea of the present specification is not limited by these embodiments. The scope of protection of the present specification should be interpreted by the claims below, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present specification.

1: digital key server
2: digital key device
3: lock device
4: service provider
5: third party
6: communication interface

Claims (6)

A digital key server that controls digital keys for issuing, sharing, and deleting digital keys, and managing digital key devices and lock devices equipped with digital keys;
A digital key device that receives a digital key through authentication by a digital key server, stores the digital key in a security area separate from the general area, and uses and shares the issued digital key;
A locking device that locks or unlocks by a digital key issued to the digital key device;
A service provider that provides a locking device; And
Including a third party;
The third party,
A TAM operator for activating a security area in accordance with each security element environment including a TEE, USIM, eSIM, and WBC for a digital key device;
A push server for notifying key sharing and deletion through a push service when the digital key device shares a digital key; And
An identity authentication server for authenticating a user of a digital key device;
Digital key service system comprising a The method of claim 1, wherein the digital key server
A security area activation unit that activates a security area of the digital key device;
An external interface for the digital key server to communicate with the outside;
A device manager that verifies whether the digital key device and the lock device are registered devices, authenticates each device, and manages and stores information about each device; And
A digital key management unit that generates a digital key in response to a digital key generation request from the digital key device, performs security settings including encryption and digital signature on the generated digital key, and controls sharing and deletion of the generated digital key;
Digital key service system comprising a. The method of claim 2, wherein the security area activation unit
According to the security environment, the security area of the digital key device is activated through any one of the TEE activation unit, USIM activation unit, WBC activation unit, and eSIM activation unit,
A digital key service system, characterized in that the USIM activation unit and the eSIM activation unit activate a security area of the digital key device in connection with a third party. The method of claim 2, wherein the external interface
A secure area communication unit for encrypting data transmitted/received during communication with the outside of the digital key server for end to end (E2E);
A digital key API for communication with a digital key device of a digital key server; And
A locking device API for communication with a service provider of a digital key server;
Digital key service system comprising a. The method of claim 2, wherein the digital key management unit
A digital key issuing unit for generating a digital key;
A digital key sharing unit for sharing the generated digital key;
A digital key authority management unit for setting authority including a limit setting value of the generated digital key;
A hardware security module that stores or manages an authentication key as a physical module to authenticate a digital key;
An encryption unit for encrypting the digital key; And
A digital signature unit for electronically verifying the integrity of the encrypted digital key;
Digital key service system comprising a. The method of claim 1, wherein the digital key service system
A communication interface for performing communication between the digital key device and the lock device; It further includes,
The communication interface is a digital key service system, characterized in that the communication using NFC, Bluetooth (BLE) or encrypted QR code.

Images