KR102320319B1 - Group-based home network service integration system and method of the same - Google Patents

Abstract

The present invention is a technology for integrating services of a home network based on a group and relates to a personalization service which provides a combined service under authentication integration about object derivation of a user (N), a resource (N), a group (N), correlation analyzing and modeling, and call, IoT and access authentication services.

Description

Group-based home network service integration system and method of operation

The present invention is a technology for integrating services of a home network based on a group, object derivation, correlation analysis and modeling for users (N), resources (N), and group (N), and call, IoT, access authentication services It relates to a personalized service that provides a convergence service based on the authentication integration for

The existing home network service was operated as a separate service rather than integrated management of authentication information by interworking with different protocols in providing call, IoT, and access authentication services. In addition, it was difficult to control permissions for the service, and the same service was provided to all users rather than providing a personalized service.

Many technologies have been developed and advanced for the smart home, and services in various areas are being applied, and users are trying to provide personalized services by analyzing user behavior patterns. In order for these technologies to be integrated and linked to create new value without fragmentation, the mutual relationship must be flexible and scalable.

In recent years, the reliability of personal identification technologies, such as voice and image recognition, is increasing, and due to the spread of smart phones, individuals can be identified indirectly, so research on providing personalized services by combining these technologies with these technologies is being actively conducted. Furthermore, there is a trend to provide active services based on user behavior patterns rather than preset services by combining this information with big data collection and AI technology.

Korean Patent Registration No. 10-1994146 "Key Management Method for Security of Internet of Things Data in Cloud Computing" Korea Patent No. 10-2050887 "Data sharing method and system in cloud computing environment for managing the Internet of Things"

The present invention provides a solution for providing differential authorization and personalization services by redefining the relationship between users and resources based on groups for various services such as calls, IoT, and access authentication services that can be provided in a home network. aim to

A method of operating a group-based home network service integration system according to an embodiment includes: recording and maintaining group information on a user or resource in a database; receiving a command execution request from a user terminal; In response, the step of inquiring information of the gateway with reference to the group information maintained in the database, checking the authority of the gateway based on the query result, the check result, if the authority is authenticated, the sending a response to the command execution request to the user terminal, transmitting a device state change corresponding to the received command execution request to the device through the gateway for control, and receiving event notification from the device through the gateway It may include replying, and based on the event notification, saving the state of the device and then publishing it to the network.

The step of recording and maintaining group information about the user or resource in a database according to an embodiment may include collecting and registering a resource registration request from a resource device.

The step of recording and maintaining group information for the user or resource in the database according to an embodiment may include collecting a membership request from the user terminal and processing the membership registration.

The step of recording and maintaining group information for the user or resource in a database according to an embodiment includes collecting a group registration request corresponding to a specific resource device from a user terminal, and registering the group by matching with the specific resource device It may include the step of processing.

The step of recording and maintaining group information on the user or resource in the database according to an embodiment includes collecting a group user addition request from the user terminal of the new user, and adding the new user to the previously registered group. can do.

A method of operating a group-based home network service integration system according to an embodiment includes executing differential control on a device in response to a command execution request from an authorized user terminal based on group information recorded in the database. It may include further steps.

The operating method of the group-based home network service integration system according to an embodiment may further include processing to establish a group-based call and a call call based on group information recorded in the database.

The method of operating a group-based home network service integration system according to an embodiment may further include processing management and control of a plurality of grouped resource devices based on group information recorded in the database.

The group-based home network service integration system according to an embodiment receives a command execution request from a user terminal, and responds to the received command execution request, but with reference to group information maintained in a database, inquires resource device information and, based on the inquiry result, inspects the authority of the resource device, and returns a response to the command execution request to the user terminal when the inspection result and the authority are authenticated, and corresponds to the received command execution request and a cloud server for controlling the device state change by transferring the device state change to the device through the resource device.

The resource device according to an embodiment may be controlled based on group information recorded in the database by a user or a resource request.

The cloud server according to an embodiment receives a command execution request from a user terminal, and responds to the received command execution request, but with reference to group information maintained in the database, inquires the information of the resource device, , based on the inquiry result, inspects the authority of the resource device, and if the inspection result and the authority are authenticated, a response to the command execution request is returned to the user terminal, and a corresponding A device state change may be transmitted and controlled to the device through the resource device.

The cloud server according to an embodiment may return an event notification from the device through the resource device, store the state of the device based on the event notification, and then publish it to the network.

According to an embodiment, a solution for providing differential authorization and personalization services by redefining the relationship between users and resources based on groups for various services such as calls, IoT, and access authentication services that can be provided in a home network can provide

1 is a diagram illustrating a group-based home network service.
2 is a diagram for explaining an entire system for implementing a group-based home network service.
3 is a diagram for explaining a process of registering a resource device.
4 is a view for explaining a registration process of a user terminal through membership registration.
5 is a diagram for explaining a group registration process.
6A and 6B are diagrams for explaining a process of adding a group user.
7 is a diagram for explaining a process of adding a group resource.
8 is a diagram for explaining a process of making a control request to a device.

Specific structural or functional descriptions for the embodiments according to the concept of the present invention disclosed herein are only exemplified for the purpose of describing the embodiments according to the concept of the present invention, and the embodiment according to the concept of the present invention These may be embodied in various forms and are not limited to the embodiments described herein.

Since the embodiments according to the concept of the present invention may have various changes and may have various forms, the embodiments will be illustrated in the drawings and described in detail herein. However, this is not intended to limit the embodiments according to the concept of the present invention to specific disclosed forms, and includes changes, equivalents, or substitutes included in the spirit and scope of the present invention.

Terms such as first or second may be used to describe various elements, but the elements should not be limited by the terms. The above terms are used only for the purpose of distinguishing one element from another element, for example, without departing from the scope of rights according to the concept of the present invention, a first element may be named as a second element, Similarly, the second component may also be referred to as the first component.

When a component is referred to as being “connected” or “connected” to another component, it is understood that the other component may be directly connected or connected to the other component, but other components may exist in between. it should be On the other hand, when it is mentioned that a certain element is "directly connected" or "directly connected" to another element, it should be understood that the other element does not exist in the middle. Expressions describing the relationship between elements, for example, “between” and “between” or “directly adjacent to”, etc., should be interpreted similarly.

The terminology used herein is used only to describe specific embodiments, and is not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise. In this specification, terms such as "comprise" or "have" are intended to designate that the described feature, number, step, operation, component, part, or combination thereof exists, and includes one or more other features or numbers, It should be understood that the possibility of the presence or addition of steps, operations, components, parts or combinations thereof is not precluded in advance.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related art, and should not be interpreted in an ideal or excessively formal meaning unless explicitly defined in the present specification. does not

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. However, the scope of the patent application is not limited or limited by these examples. Like reference numerals in each figure indicate like elements.

1 is a diagram illustrating a group-based home network service 100 .

The integrated system for the group-based home network service 100 according to an embodiment enables differential control, individual and group inquiry authorization, and multiple resource management and control through grouping.

The IoT-based device 110 according to an embodiment may include a user's personal IoT device such as a curtain, lighting, plug, temperature, alarm, motion sensor, air quality sensor, door open sensor, gas controller, and air conditioner controller. can

The smartphone 130 may control the device 110 by using a cloud server.

Meanwhile, the smart phone 130 may perform IoT-based control on the commonly used public device 140 as well. The public device 140 may include a smart parking controller, a delivery box, an elevator, an automatic front door, a security office device, a lobby phone, and the like.

In the group-based home network service integration system according to an embodiment, it is possible to provide differential control and inquiry authority to the device 110 or the public device 140 .

To this end, individual and group control is possible, and multiple resource management and control through grouping is possible by utilizing the wall pad 120 for each generation.

As a more specific example, the group-based home network service integration system according to the present invention enables group-based personalization services for various devices 110 or public devices 140 connected to a cloud server.

As an example, the user may simply register a resource (eg, a wall pad for each household) with information, and request group registration for the registered resource after membership registration to the cloud server side.

Through this process, it is possible to integrate home network services on a group basis, object derivation for users (N), resources (N), and group (N), correlation analysis and modeling, and call, IoT, access authentication It is possible to provide a personalized service that provides a converged service based on the authentication integration base for the service.

2 is a view for explaining the entire system 200 for implementing a group-based home network service.

The entire system 200 for implementing a group-based home network service according to an embodiment includes a cloud server 210, a resource device 220 that records and maintains group information about a user or resource in a database, and a user device ( 230) may be included.

The cloud server 210 determines whether authentication is performed in the resource registration, member registration, and group registration process, and if authenticated, completes the group registration procedure for the resource.

Group information of the registered resource may be recorded and maintained in a database on the cloud server side.

For example, the cloud server 210 may manage the processing module 211 for home management and the processing module 212 for office management separately. In the description of the present invention, it is assumed that the processing module 211 for home management and the processing module 212 for office management are not differentiated and the processes operate in the same sequence.

The cloud server 210 may receive a command execution request from the user terminal 220 . In addition, in response to the received command execution request, information of the gateway may be inquired by referring to group information maintained in the database. Also, based on the inquiry result, the authority of the gateway is checked, and when the authority is authenticated as a result of the examination, a response to the command execution request may be returned to the user terminal 220 .

In addition, a device state change corresponding to the received command execution request may be transmitted to the devices 232 , 233 , and 234 from among the resource devices 230 through the gateway for control.

Next, the resource device 220 may be interpreted as a device subject to command execution, which is processed based on group information recorded in the database by a user or resource request. For example, UC devices 232 such as CCTV, lobby phone, doorbell, neighbor wall pad, which can be controlled through the wall pad 231 by household or the wall pad 231 by household, lighting switch, lighting, boiler, It may include an IoT device 233 such as a plug, a curtain, and a humidity controller, a door lock, and an access device 234 such as a lobby phone.

3 is a diagram for explaining a process of registering a resource device.

First, the resource device requests resource registration to the authentication server for resource registration ( 301 ).

Next, the authentication server issues a token to the resource device (302). In addition, the UC server transmits the token issued to the resource device while requesting resource registration (303), and returns an ACK from the UC server (304).

The UC server may be interpreted as a server that controls or directly manages UC devices such as CCTV, lobby phone, doorbell, and neighbor wall pad.

Thereafter, the resource device may request registration of complex information and the like to the authentication server through resource modification ( 305 ), and may return an ACK ( 306 ).

Accordingly, the authentication server may register the resource device by transferring the resource modification information received from the resource device to the UC server (307) and returning an ACK (308).

4 is a view for explaining a registration process of a user terminal through membership registration.

The user terminal may request an ID duplication check by submitting an ID desired to be used to the authentication server ( 401 ), and may return a response as to whether or not the ID is duplicated from the authentication server ( 402 ).

If the ID desired to be used is not duplicated with other users, the user terminal requests membership registration with the corresponding ID (403). Accordingly, the authentication server may issue a token to the user device after confirming that all information necessary for membership registration set in advance has been collected in a normal form ( 404 ).

Similarly, the authentication server may request user registration to the UC server and transmit the issued token to the user device ( 405 ). Also, when the authentication server returns an ACK for user registration from the UC server ( 406 ), the registration of the user device may be completed.

5 is a diagram for explaining a group registration process.

The user terminal may request a resource information inquiry from the resource device ( 501 ). In this process, the user terminal may request resource information inquiry by using a QR code or the like. Next, the resource device may return the resource information to the user terminal in response to the resource information inquiry ( 502 ).

The user terminal receiving the resource information may request group registration to the group server (503). In this process, the user terminal may request group registration by providing the resource to the group server. In particular, group registration may be requested by providing resources such as group creation or user group registration ( 504 ).

Meanwhile, the group server may publish a group registration notification to the MQTT server ( 505 ), and the MQTT server may publish a group registration notification to the user terminal ( 506 ).

When the group registration notification is published, the group server may transmit group registration information to the UC server (507), and if the group registration information is normally transmitted, an ACK may be returned from the UC server (508).

6A and 6B are diagrams for explaining a process of adding a group user.

6A corresponds to a process of adding a group user to an already registered user, and FIG. 6B corresponds to a process of adding a group user to an unregistered user.

Referring to FIG. 6A , the group manager device may transmit a user group invitation request to the group server ( 601 ), and may return an ACK from the group server ( 602 ).

Meanwhile, the group server may request to transmit a group invitation message to the push server after confirming whether the group invitation user is registered ( S611 ).

The push server may transmit a user group invitation message to the new user terminal in response to the group invitation message (S612).

Also, the new user device may request to add a user group to the group server ( 613 ), and return a response to the addition of the user group ( 614 ). Also, the group server transmits group change information to the UC server ( 615 ), and returns an ACK thereto, so that the group user addition process can be processed ( 616 ).

Referring to FIG. 6B , the group manager device may transmit a user group invitation request to the group server ( 601 ) and return an ACK from the group server ( 602 ).

Meanwhile, the group server may request a user group invitation to the new user terminal in the form of an e-mail or the like after checking whether the group invitation user is registered ( S621 ), and the new user device may perform a user membership registration sequence.

The new user device may request a user group invitation to the group server ( S622 ), and return a response to adding the user group ( S623 ). On the other hand, the group server transmits the group change information to the UC server (624), and returns an ACK to request the group change (625), thereby processing the addition process of the group user.

7 is a diagram for explaining a process of adding a group resource.

The group manager device may request a resource information inquiry from the authentication server (701), and receive a response of the resource information thereto (702). Also, the group manager device may request the group server to add to the resource group ( 703 ) and return an ACK ( 704 ). The group server may transmit information about the group addition message to the MQTT server (705), and in response thereto, the MQTT server may transmit the group addition message to the new resource device (706).

In addition, the group server may transmit group change information to the UC server ( 707 ), and return an ACK thereto to process the group resource addition process ( 708 ).

8 is a diagram for explaining a process of making a control request to a device.

According to the present invention, a user device such as a mobile device and a resource device such as a wall pad for each generation can be owned as a group concept. In addition, there is a master among users, and the master can grant and manage rights for individual users and groups, and application services such as IoT, UC, and Access can be linked and expanded under a group basis.

When using the present invention, it is easy to provide extended services (scenarios, automation, etc.) that are linked to each other when different services operate in the same group system.

To this end, the user terminal may provide an API for a command execution request to the WAS server ( 801 ). To this end, the user terminal may provide an access token, resource number, CGP, etc. to the WAS server (802).

Meanwhile, the database provides the WAS server with related information for inquiring gateway information, and the WAS server checks the authority for the gateway (803), and stores the command (804).

Meanwhile, the WAS server may return a command ID to the user terminal in response to the command execution request API ( 805 ). At the same time, the WAS server may transmit a publish for device state change to the resource server through the MQTT server ( 806 ). In this case, the TCP method may utilize socket notification.

In response to the received device state change request, the resource device may perform device control ( 807 ) and return an event notification according to device control from the device ( 808 ).

Meanwhile, the resource device may transmit the event notification API to the WAS server ( 809 ), the WAS server may store the device state in a database, and respond to the event notification API to the resource device ( 810 ).

In addition, the WAS server publishes the status event notification through the MQTT server, and the MQTT server may notify the status event by performing status event notification to the connected resource device 811 and user terminals (812, 813).

Through the processes of the group-based home network service integration system described above, differential authorization is granted by redefining the relationship between users and resources based on groups for various services such as calls, IoT, and access authentication services that can be provided in the home network. and a solution for providing a personalization service.

The present invention is divided into individual authority and group authority, and it is possible to grant authority.

In the case of personal authority, it is possible to grant authority by an administrator, and it is possible to use a web management tool or a mobile app. In addition, in the case of group rights, it is possible to grant administrator rights to the first registrant or use a web management tool or mobile app, and to grant administrator rights and transfer rights by the administrator.

On the other hand, for authority management, among the personal authority, IoT can grant different inquiry and control authority by device type according to personal level, and it is possible to grant different access authority according to personal level for key. Through this, it is possible to set the access area, the access period, and the number of times limit.

In addition, for group authority, IoT and key management are possible. In particular, group members can be managed through invitation, expulsion, rating, and authorization.

The device described above may be implemented as a hardware component, a software component, and/or a combination of the hardware component and the software component. For example, devices and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA), It may be implemented using one or more general purpose or special purpose computers, such as a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that can include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

The software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or device, to be interpreted by or to provide instructions or data to the processing device. , or may be permanently or temporarily embody in a transmitted signal wave.

The software may be distributed over networked computer systems, and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and available to those skilled in the art of computer software. Examples of the computer readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

Claims (12)

recording and maintaining group information about users or resources in a database;
receiving a command execution request from a user terminal;
retrieving information of a gateway in response to the received command execution request, referring to the group information maintained in the database;
checking the authority of the gateway based on the inquiry result;
sending a response to the command execution request to the user terminal when the authority is authenticated as a result of the check;
transmitting and controlling a device state change corresponding to the received command execution request to a device through the gateway;
replying an event notification from the device through the gateway; and
Publishing to a network after saving the state of the device based on the event notification
including,
The step of recording and maintaining group information for the user or resource in the database,
Collect group user addition requests from the user terminals of new users, classify existing registered users and unregistered users, and add group users,
For the previously registered user, the group server checks whether the group invite user is registered, and then requests to send a group invitation message to the push server. In response to the group invitation message, the push server sends a user group invitation message to the new user terminal. sending, for unregistered users, requesting a user group invitation in the form of e-mail from the group server to the new user terminal, and performing a user membership registration sequence in the new user terminal
A method of operating a group-based home network service integration system comprising a. According to claim 1,
The step of recording and maintaining group information for the user or resource in the database,
Steps to collect and register resource registration requests from resource devices
A method of operating a group-based home network service integration system comprising a. According to claim 1,
The step of recording and maintaining group information for the user or resource in the database,
processing membership registration by collecting membership registration requests from the user terminal;
A method of operating a group-based home network service integration system comprising a. According to claim 1,
The step of recording and maintaining group information for the user or resource in the database,
collecting a group registration request corresponding to a specific resource device from a user terminal, and processing the group registration by matching the specific resource device
A method of operating a group-based home network service integration system comprising a. According to claim 1,
The step of recording and maintaining group information for the user or resource in the database,
Collecting group user addition requests from the new user's user terminal, and adding new users to the registered group
A method of operating a group-based home network service integration system comprising a. According to claim 1,
executing differential control on a device in response to a command execution request from an authorized user terminal based on group information recorded in the database;
The operation method of the group-based home network service integration system further comprising. According to claim 1,
Based on the group information recorded in the database, a group-based call and a method of operating a group-based home network service integration system for processing to establish a call call. According to claim 1,
A method of operating a group-based home network service integration system for managing and controlling a plurality of grouped resource devices based on group information recorded in the database. Receive a command execution request from a user terminal, respond to the received command execution request, refer to group information maintained in a database, inquire information of the resource device, and based on the query result, The authority is checked, and when the authority is authenticated as a result of the check, a response to the command execution request is returned to the user terminal, and a device state change corresponding to the received command execution request is transmitted to the device through the resource device. cloud server controlled by
including,
The cloud server collects the group user addition request from the user terminal of the new user, classifies the registered user and the non-registered user, and adds the group user,
For the previously registered user, after confirming whether the group invite user is registered, a user group invitation message is sent to the new user terminal, and for the unregistered user, a user group invitation is requested to the new user terminal in the form of an e-mail, and the new user group is invited. A group-based home network service integration system that requests to perform a user membership registration sequence through a user terminal. 10. The method of claim 9,
The resource device,
A group-based home network service integration system, characterized in that it is controlled based on group information recorded in the database by a user or resource request. A resource device controlled from a cloud server based on group information recorded in a database by a user or resource request
including,
The cloud server,
Receive a command execution request from a user terminal, respond to the received command execution request, refer to group information maintained in the database, and query information on the resource device, based on the query result, The authority of the device is checked, and as a result of the check, when the authority is authenticated, a response to the command execution request is returned to the user terminal, and a device state change corresponding to the received command execution request is transmitted to the device through the resource device. control to pass to
The cloud server collects the group user addition request from the user terminal of the new user, classifies the registered user and the non-registered user, and adds the group user,
For the previously registered user, after confirming whether the group invite user is registered, a user group invitation message is sent to the new user terminal, and for the unregistered user, a user group invitation is requested to the new user terminal in the form of an e-mail, and the new user group is invited. A group-based home network service integration system, characterized in that a request is made to perform a user membership registration sequence through a user terminal. 12. The method of claim 11,
The cloud server,
A group-based home network service integration system that returns an event notification from the device through the resource device, stores the device state based on the event notification, and publishes the device to the network.

Images