KR102385467B1 - System and method for providing digital key integrated service - Google Patents

Abstract

Disclosed are a system and method thereof for providing a digital key integration service. In accordance with one embodiment, the digital key integration service providing method includes: a step in which a digital key management server registers a local business voucher management server; a step in which the digital key management server registers a service equipment management server; a step in which a smart device proceeds with service subscription and user authentication through the digital key management server; a step in which the smart device requests the local business voucher for a digital local business voucher purchase through the digital key management server to charge digital local business vouchers; and a step in which the smart device uses the digital local business vouchers online through near field communication with the service equipment. Therefore, the present invention is capable of improving user convenience.

Description

Digital key integrated service providing system and method {System and method for providing digital key integrated service}

The present invention relates to a digital key integration service providing system and method, and more particularly, to a digital key integration service providing system and method capable of providing a digital key integration service to all IoT devices using a physical key. it's about

Attempts to store and use a digital key obtained by digitizing a physical key in a smart device have been discussed since the early days of smart devices, and as a result, various services such as telematics service, smart living, and digital door lock are provided. These services do not store and use the key directly in the smart device due to problems such as the security of the smart device itself. When the authentication device (vehicle or door lock) transmits authentication information through the Internet, the server is authenticated. It is a service that can be registered and authenticated only through short-distance communication such as Bluetooth or Bluetooth.

Meanwhile, the Car Connectivity Consortium (CCC) is an organization that defines international standards for smartphone and vehicle linkage, and smartphone and vehicle manufacturers such as Apple, BMW, General Motors, Honda, Hyundai, LG, Panasonic, Samsung and Volkswage participate. are doing In particular, CCC is leading the production of an international standard for digital keys for vehicles that can use a smartphone as a car key as a base technology for autonomous driving and car sharing services.

However, the target of the digital key standard proposed by the CCC is limited to the vehicle defined by the CCC. Therefore, the digital key service using a smartphone can be applied to all IoT (Internet of Things) digital devices that use a physical key. Therefore, there is a need for a technology that expands and defines the interworking of digital key standards with other digital devices other than the vehicle defined by the only international standard, CCC.

Domestic Registered Patent No. 10-2232966 (registered on March 23, 2021)

According to an embodiment, by using a smart device that supports a hardware-based security environment and a software-based security environment, all services generated during a user's local tourism can be performed using digital local currency or digital key, even if the user does not possess a physical key. We propose a system and method for providing a digital key integrated service for payment.

A digital key integrated service providing method according to an embodiment includes the steps of: a digital key management server registering a local currency management server; a digital key management server registering a service equipment management server; and a smart device using a digital key management server. The step of receiving service subscription and user authentication through and using digital local currency online.

The step of registering the local currency management server includes the steps of: the local currency management server generates a local public key-private key pair, stores the local private key, and delivers the local public key to the digital key management server; and digital key management The server generates an encryption/decryption symmetric key for secure communication, encrypts the symmetric key with the local public key received from the local currency management server, and delivers the encrypted symmetric key to the local currency management server; Decrypting the key with the local private key and storing the decrypted symmetric key.

The step of registering the service equipment management server includes the steps of, after the service equipment management server generates the equipment public key-private key pair, stores the equipment private key, and delivers the equipment public key to the digital key management server, digital key management The server generates an encryption/decryption symmetric key for secure communication, encrypts the symmetric key with the equipment public key received from the service equipment management server, and delivers the encrypted symmetric key to the service equipment management server; Decrypting the key with the device private key and storing the decrypted symmetric key.

The step of signing up for service and receiving user authentication is the step of the smart device installing the app and requesting membership registration to the digital key management server, and the digital key management server authenticating the user and device and mapping the user ID and device ID and storing it After the user ID-device ID is encrypted and stored through the HSM, the smart device activates the security area and generates a device private key-public key pair, and then transmits the device public key to the digital key management server and, the digital key management server generates an encryption/decryption symmetric key for secure communication, encrypts the symmetric key with the device public key received from the smart device, and then delivers the encrypted symmetric key to the smart device; Decrypting the key with the device private key and storing the decrypted symmetric key.

The step of charging the digital local currency includes the step of the smart device logging in to the digital key management server, requesting the purchase of digital local currency and receiving user authentication, and when the user authentication is completed, the digital key management server sends the digital key to the local currency management server. The step of delivering a local currency purchase request message, the local currency management server charging the user's digital local currency, and when the charging is completed, the step of delivering a charge completion message to the smart device through the digital key management server; It may include the step of storing the digital local currency recharge amount.

In the online use of digital local currency, the smart device requests the use of digital local currency from the service equipment, and the service equipment sends the user ID, service equipment ID, and usage amount to the local currency management server through the service equipment management server. Transmitting a digital local currency use request message including, the local currency management server checking the user and charging details, deducting the usage amount from the charging amount, and sending a use approval message to the service equipment management server; It may include the step of the management server returning the digital local currency usage result to the smart device through the service equipment, and the smart device storing the usage result in the secure area.

The digital key integration service providing method may further include the step of using, by the smart device, digital local currency within a digital local currency charging range stored in the security area when a network connection between the smart device and the service equipment is impossible.

The step of using the digital local currency includes the step of the smart device requesting a digital local currency use request message including user information to the service equipment, and if the service equipment is unable to connect to the network, including the amount of use and the service equipment ID, Transmitting a network unavailability response message to the smart device, comparing the amount of use received by the smart device with the charge amount stored in the security area to determine whether it is usable; The step of deducting the amount used from the charge amount and sending a message requesting the use of digital local currency including user ID, amount used and service equipment ID to the local currency management server; It may include the steps of deducting the amount of use from the amount of money and returning a result of use to the smart device, and the step of the smart device completing payment and terminating communication with the service equipment.

The digital key integration service providing method includes the steps of: a smart device receiving and storing a digital key through general payment; generating digital key-based authentication data in a security area by the smart device and requesting authentication from service equipment; The method may further include transmitting the authentication data verification result and digital key usage history to the smart device after the equipment verifies the authentication data in the secure area and uses the digital key.

The digital key integrated service providing method includes the steps of: a smart device paying a reserve when using digital local currency; a smart device paying a reserve or providing an event when a user's stamp tour is in progress; The method may further include at least one of a step of paying a reserve when participating in an activity, and a step of using the smart device to pay the accumulated reserve as a digital local currency within the region.

A digital key integrated service providing system according to another embodiment registers a local currency management server and a service equipment management server, performs service subscription and user authentication of smart devices, and sends digital local currency to a local currency management server according to a user request Equipped with a digital key management server that requests issuance, a virtual embedded security element system, user authentication is received through the digital key management server, and after charging the digital local currency issued from the local currency management server, A smart device that uses digital local currency, a local currency management server that charges the digital local currency, checks the user and the charging history when using the digital local currency of the smart device, and deducts the amount used from the charged amount, and the request of the smart device Service equipment that provides services using digital local currency in accordance with Includes server.

According to the digital key integrated service providing system and method according to an embodiment, even if the user does not have a physical key during the tour, all services that occur during the user's local tour can be performed in the digital area using a smart device that supports a secure environment. It can be used using money or a digital key, so user convenience can be improved.

Furthermore, since important data is stored in a secure area, authentication data is generated and encrypted and decrypted, and data communication with security applied is performed, security can be improved.

1 is a view for explaining the concept of a digital key integration service providing system according to an embodiment of the present invention;
2 is a view showing an example of using a digital key integration service providing system according to an embodiment of the present invention;
3 is a diagram showing the configuration of a digital key integration service providing system according to an embodiment of the present invention;
4 is a diagram illustrating a flow of a method for providing a digital key integration service according to an embodiment of the present invention;
5 is a diagram illustrating a process of a service pre-preparation step according to an embodiment of the present invention;
6 is a diagram illustrating a digital local currency charging and online use process according to an embodiment of the present invention;
7 is a diagram illustrating a digital local currency offline use process according to an embodiment of the present invention;
8 is a diagram illustrating a general payment and digital key use process according to an embodiment of the present invention.

The above objects, other objects, features and advantages of the present invention will be easily understood through the following preferred embodiments in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments described herein and may be embodied in other forms. Rather, the embodiments introduced herein are provided so that the disclosed content may be thorough and complete, and the spirit of the present invention may be sufficiently conveyed to those skilled in the art.

In this specification, when a component is referred to as being on another component, it means that it may be directly formed on the other component or a third component may be interposed therebetween.

In this specification, when terms such as first, second, etc. are used to describe components, these components should not be limited by these terms. These terms are only used to distinguish one component from another. The embodiments described and illustrated herein also include complementary embodiments thereof.

Also, when it is said that a first element (or component) is operated or executed on (ON) a second element (or component), the first element (or component) means that the second element (or component) is It should be understood that the operation or execution in the environment in which the operation or execution is performed, or the operation or execution through direct or indirect interaction with a second element (or component).

When it is stated that any element, component, device, or system includes a component consisting of a program or software, even if not explicitly stated, that element, component, device, or system means that the program or software executes or operates It should be understood to include hardware (eg, memory, CPU, etc.) or other programs or software (eg, drivers necessary to run an operating system or hardware) necessary for the operation.

In addition, it should be understood that, unless specifically stated in the implementation of an element (or component), the element (or component) may be implemented in software, hardware, or any form of software and hardware.

In addition, the terminology used herein is for the purpose of describing the embodiments and is not intended to limit the present invention. In this specification, the singular also includes the plural unless specifically stated otherwise in the phrase. As used herein, the terms 'comprises' and/or 'comprising' do not exclude the presence or addition of one or more other components.

Hereinafter, in describing specific embodiments below, various specific contents have been prepared to more specifically describe the invention and help understanding. However, a reader having enough knowledge in this field to understand the present invention may recognize that it can be used without these various specific details.

In some cases, it is mentioned in advance that parts that are commonly known and not largely related to the invention are not described in order to avoid confusion without any reason in describing the present invention in describing the invention.

Hereinafter, embodiments of the present specification will be described with reference to the accompanying drawings. It will be described in detail focusing on the parts necessary to understand the operation and operation according to the present specification. While describing the embodiments of the present specification, descriptions of technical content that are well known in the technical field to which this specification belongs and are not directly related to the present specification will be omitted. This is to more clearly convey the gist of the present specification without obscuring the gist of the present specification by omitting unnecessary description.

In addition, in describing the components of the present specification, different reference numerals may be given to components of the same name according to the drawings, and the same reference numerals may be given even though they are different drawings. However, even in such a case, it does not mean that the corresponding components have different functions depending on the embodiment or that they have the same function in different embodiments, and the function of each component is the function of the corresponding embodiment. It should be judged based on the description of each component in

In the present specification, each component indicates that it can be functionally and/or logically separated, and does not necessarily mean that each component is divided into a separate physical device or written as a separate code. An average expert would be able to reason easily.

In addition, each configuration in the present specification may mean a functional and structural combination of hardware for performing the technical idea of the present invention and software for driving the hardware. For example, it may mean a predetermined code and a logical unit of a hardware resource for executing the predetermined code, and it is not necessarily a physically connected code or a single type of hardware. For the average expert, it can be easily inferred.

1 is a diagram for explaining the concept of a digital key integration service providing system according to an embodiment of the present invention.

Referring to FIG. 1 , all forms of digital authentication, including payment, that occur during a user's tour, are supported by utilizing the security area of the smart device. Key information required for digital authentication is stored in a secure area to ensure security.

For example, when using transportation facilities such as a user's rental car or public transportation, a digital key replaces a boarding ticket. When using a user's accommodation, the digital key can be used to lock/unlock the door, make a reservation for accommodation, and make a payment, and the digital key replaces the ticket at the accommodation. Digital keys replace the means of authentication for use of tourist facilities.

Taking the user's tour schedule as shown in FIG. 1 as an example, a digital key replaces a boarding ticket for a transportation facility such as a bus, train, or airline in the departure stage. At the arrival stage of the accommodation, the digital key replaces the card key for entering the accommodation. In the stage of moving from the accommodation to the tourist destination, the digital key replaces the car key of the rental car. In the stage of using tourist facilities, the digital key replaces the ticket for the use of tourist facilities, such as entering tourist attractions and boarding a cruise. In the shopping stage, digital local currency charging and payment are supported.

2 is a diagram illustrating an example of using a digital key integration service providing system according to an embodiment of the present invention.

The smart device 10 generates a digital key and transmits the generated digital key to the digital key management server 12 . In this case, the digital key may be transmitted through secure Internet security communication. The smart device 10 may provide a reservation and issuance status inquiry service to a user, and may provide digital local currency and various additional services.

The smart device 10 may provide a ticket and admission ticket reservation/use service in a tourist destination, a local festival, an event, etc. through the tourism/travel tab. You can provide pay and mileage services through the Pay/Mileage tab. Through the stamp tab, it is possible to accumulate mileage, provide local specialties delivery event service when a certain number of stamps is exceeded, and provide user guidance services such as sudden quiz and tourist attraction quiz.

The smart device 10 performs operations such as digital key generation, encryption/decryption and signature, and data storage is performed within the secure area. The security area includes, for example, TEE, USIM, eSIM, and WBC.

The digital key management server 12 approves the digital key service. It manages services (pay, mileage, etc.), manages the communication status of the smart device 10 being serviced, and manages reservation status and digital key.

The service equipment 16 includes an access management system and a payment system in tourist destinations such as accommodation, transportation, and amusement facilities. The service equipment 16 provides the digital key during the user's service reservation time, and deletes the digital key if it is not the reservation time. For example, in the case of a vehicle, the service equipment 16 may provide a digital key during a user's reservation time, and may delete the digital key when the reservation time is exceeded. Similarly, when entering a user's accommodation, the digital key may be provided during the user's reservation time, and the digital key may be deleted when the reservation time is exceeded. In the case of other entry tickets, a one-time digital key is provided to allow entry and exit using the digital key, the digital key usage status is transmitted after entry and exit, and the digital key can be deleted when a preset time is exceeded after entry.

3 is a diagram illustrating the configuration of a digital key integration service providing system according to an embodiment of the present invention.

Referring to FIG. 3 , the digital key integrated service providing system 1 includes a smart device 10 , a digital key management server 12 , a local currency management server 14 , a service equipment 16 and a service equipment management server 18 . ) is included.

The digital key integration service refers to a service in which a user can operate the service equipment 16 using a digital key through the smart device 10 . The operation of the service equipment 16 is, for example, locking, unlocking, turning on the ignition, and the like. The user can lock/unlock the service equipment 16 through the digital key.

All components of the digital key integrated service providing system 1 (smart device 10, digital key management server 12, local currency management server 14, service equipment 16 and service equipment management server 18) are commonly provided with a hardware security module (HSM) or a software security module (SSM). All encryption/decryption, signature, etc. for key data generation, authentication, and storage are performed within the security module.

The smart device 10 generates and registers the digital key or authentication data by requesting the generation of the digital key or the generation of authentication data to a secure element (SE). As an example, the smart device 10 generates and registers a digital key using a virtual embedded secure element system, and performs a transaction (authentication operation) that occurs when the service equipment 16 is actually operated after the digital key is generated. You can create authentication data for

Communication between the smart device 10 and the service equipment 16 is non-face-to-face communication using wireless communication, and the service equipment 16 may be operated by a digital key method using wireless communication. To this end, the smart device 10 may perform short-range wireless communication with the service equipment 16 (eg, NFC ('Near Field Communication), Bluetooth (BLE), UWB (Ultra-Wide Band) communication), and digital It provides a communication interface (IF) capable of performing Internet secure communication with the key management server 12 .

In addition, the smart device 10 may perform a shared key management function of sharing a digital key with another smart device (hereinafter, referred to as a 'slave device'). To this end, the smart device 10 may request the digital key management server 12 to generate and share a digital key (hereinafter, referred to as a 'shared key') for sharing. The smart device 10 may be a mobile terminal device that a user can carry, such as a smart phone or a smart watch.

The smart device 10 may provide by accumulating a certain percentage of reserves when paying with digital local currency. The smart device 10 may provide a reserve when the user participates in the stamp tour. For example, when a QR code is recognized in a tourist destination course, a reserve can be provided. When the user participates in community activities, it can be provided by accumulating points. For example, points can be provided when using public transportation in the area, using walking, or participating in volunteer activities.

Users can use the accumulated points to pay with digital local currency within the region, and the unused points can be donated. When the user purchases and uses digital local currency, the digital local currency is charged to the security module in the smart device 10 and the usage history is stored.

The digital key management server 12 has a smart device management function that stores and manages identification information of the smart device 10 including the S/N (Serial Number) of the smart device 10, and is generated by the smart device 10 It is possible to perform a digital key management function of registering or deleting the digital key to a hardware security module (HSM, hereinafter referred to as 'HSM').

The digital key management server 12 provides an Internet secure communication interface (IF) with the smart device 10, the local currency management server 14, and the service equipment management server 18, respectively. For example, HTTPS protocol is provided.

When the digital key management server 12 is requested to share the digital key from the smart device 10, the smart device 10, the service equipment management server 18, and a digital key for sharing with the slave device by collaborating or interworking with the slave device A shared key management function to generate a key (hereinafter, referred to as a 'shared key') may be performed.

The digital key management server 12 may be a server of an OEM (Original Equipment Manufacturing) manufacturer that manufactured the smart device 10 , or a server that manages the digital key of the smart device 10 .

The digital key management server 12 performs Internet secure communication with the smart device 10 , the service equipment 16 , and the local currency management server 14 . The digital key management server 12 performs E2E (End to End) communication with the service equipment 16 in the case of a service in which the service equipment 16 is in a state in which Internet communication is possible, and the service equipment 16 is in a state in which Internet communication is impossible. In case of communication with the service equipment management server (18). The digital key management server 12 manages the digital key transmitted from the service equipment management server 18, and the digital key can be stored, deleted, and shared in the HSM.

The local currency management server 14 charges the digital local currency, checks the user and the charging history when using the digital local currency of the smart device, and deducts the used amount from the charged amount. There may be a plurality of local currency management servers 14 for each region.

The service equipment 16 is an IoT device equipped with a digital key function module that is locked or unlocked by a digital key to which the digital key standard is partially or fully applied, and uses a digital key issued by key pairing with the smart device 10 . to lock or unlock, and other additional functions using digital keys.

To this end, the service equipment 16 may provide short-range secure communication or Internet secure communication with the smart device 10 , and may provide Internet secure communication with the service equipment management server 18 . In this case, the service equipment 16 may optionally be equipped with an Internet secure communication function.

The service equipment 16 may provide an authentication processing function for performing a transaction verifying the validity of the authentication data transmitted from the smart device 10 . Transactions include Fast mode, which abbreviates the security authentication process, and Standard mode, which authenticates in a stronger way than Fast mode. When the authentication data is verified, the service equipment 16 performs corresponding actions such as locking, unlocking, and starting the vehicle.

Examples of the service equipment 16 include transportation facilities such as rental cars, trains, buses, and airlines, door locks of accommodation facilities, and access control systems for tourist attractions such as amusement parks. The service equipment 16 provides short-range secure communication (NFC, UWB, BLE) with the smart device 10 , and provides secure Internet communication with the service equipment management server 18 . Verifies the validity of the authentication data transmitted from the smart device 10, and then performs operations such as locking/unlocking the door lock and starting the vehicle.

The service equipment management server 18 has a service equipment management function for storing and managing identification information of the service equipment 16 including the S/N of the service equipment 16, and the digital key management server 12 transmitted from the digital key. Provides a digital key management function to register or delete a key in the HSM. The service equipment management server 18 may provide a shared key management function for storing, updating, deleting or adding the shared key transmitted from the digital key management server 12 . The service equipment management server 18 may provide an Internet secure communication interface function with the service equipment 16 and the digital key management server 12 . The service equipment management server 18 may be a server of an OEM manufacturer that manufactured the service equipment 16 or a server that manages the digital key of the service equipment 16 . The service equipment management server 18 may be plural.

4 is a diagram illustrating a flow of a method for providing a digital key integration service according to an embodiment of the present invention.

3 and 4, the digital key management server 12 registers the local currency management server 14 (410), and registers the service equipment management server 18 (420). Subsequently, the smart device 10 receives service subscription and user authentication through the digital key management server 12 ( 430 ). The above steps 410 , 420 , and 430 correspond to the service pre-preparation steps, which will be described in detail later with reference to FIG. 5 .

Next, the smart device 10 requests the purchase of digital local currency from the local currency management server 14 through the digital key management server 12 to charge the digital local currency (440). Next, the smart device 10 communicates with the service equipment 16 and uses the digital local currency online ( 450 ). An example of using the online digital local currency of the smart device 10 will be described later with reference to FIG. 6 .

When the network connection between the smart device 10 and the service equipment 16 is impossible, the smart device 10 may use the digital local currency within the digital local currency charging range stored in the secure area (460). An example of using offline local currency will be described later with reference to FIG. 7 .

The smart device 10 may receive a digital key through a general payment, and may receive a service provided by the service equipment 16 using the digital key. An example of general payment and digital key use will be described later with reference to FIG. 8 .

The digital key integrated service providing method includes the steps of: a smart device paying a reserve when using digital local currency; a smart device paying a reserve or providing an event when a user's stamp tour is in progress; The method may further include at least one of a step of paying a reserve when participating in an activity, and a step of using the smart device to pay the accumulated reserve as a digital local currency within the region.

5 is a diagram illustrating a process of a service pre-preparation step according to an embodiment of the present invention.

3 and 5 , the service pre-preparation step may include a local currency management server registration step 500 , a service equipment management server registration step 510 , and a service subscription and user authentication step 520 .

In the local currency management server registration step 500, the local currency management server 14 that has entered into an offline agreement with the digital key management server 12 generates a local public key-private key pair and stores the local private key (501) and transmits the local public key to the digital key management server 12 (502). The digital key management server 12 generates an encryption/decryption symmetric key for secure communication and encrypts the symmetric key with the local public key received from the local currency management server 14 (503). Next, the digital key management server 12 transmits 504 the encrypted symmetric key to the local currency management server 14, and the local currency management server 14 decrypts the encrypted symmetric key with the local private key and decrypts the decrypted symmetric key. Store the key (505). Since the local currency management server 14 is divided by region, the local currency management server registration step 500 may be repeated for each region.

Next, in the service equipment management server registration step 510, the service equipment management server 18 that has entered into an offline agreement with the digital key management server 12 generates a device public key-private key pair and stores the device private key ( 511) and transmits the device public key to the digital key management server 12 (512). The digital key management server 12 generates an encryption/decryption symmetric key for secure communication and encrypts the symmetric key with the equipment public key received from the service equipment management server 18 (513). Then, the digital key management server 12 transfers the encrypted symmetric key to the service equipment management server 18 (514), and the service equipment management server 18 decrypts the encrypted symmetric key with the equipment private key and then decrypts the Store the symmetric key (515). Since the service equipment management server 18 is classified for each service equipment, the service equipment management server 18 registration step may be repeated for each service equipment.

Next, in the service subscription and user authentication step 520 , the smart device 10 installs the app 521 and requests a membership registration (ID) from the digital key management server 12 ( 522 ). The digital key management server 12 authenticates (523) the user and the device through the user's SMS, IPIN, joint certificate, and the like, and transmits the user and device authentication result to the smart device 10 (524). The digital key management server 12 maps and stores a user ID and a device ID, and encrypts and stores the user ID-device ID through the HSM (525).

After receiving the user and device authentication results, the smart device 10 activates the security area, generates a device private key-public key pair (526), and transmits the device public key to the digital key management server 12 (527) ). The digital key management server 12 generates an encryption/decryption symmetric key for secure communication, encrypts the symmetric key with the device public key received from the smart device 10 (528), and then delivers the encrypted symmetric key to the smart device 10 do (529).

The smart device 10 decrypts the encrypted symmetric key with the device private key and stores the decrypted symmetric key (530).

6 is a diagram illustrating a digital local currency charging and online use process according to an embodiment of the present invention.

Referring to FIGS. 3 and 6 , the service equipment 16 capable of network connection, for example, access control equipment such as automobiles, amusement parks, tourist destinations, etc., is paid in real time through the local currency management server 14 . .

In the digital local currency charging step 600, the smart device 10 logs in (601) to the digital key management server 12, requests 602 to purchase digital local currency, and receives user authentication (603). When user authentication is completed, the digital key management server 12 transmits (604) a digital local currency purchase request to the local currency management server 14, and the local currency management server 14 charges the user's digital local currency. (605). When the charging is completed, the local currency management server 14 transmits the charging completion to the smart device 10 through the digital key management server 12 (606, 607). The smart device 10 stores the digital local currency charge amount (608).

Subsequently, the smart device 10 may use the charged digital local currency online ( 610 ). In the online use step 610 , the smart device 10 requests the service equipment 16 to use the digital local currency ( 611 ). In this case, it is possible to transfer the user ID and use short-distance communication such as NFC, BLE, QR code, and UWB.

The service equipment 16 transmits 612 a digital local currency use request message including a user ID, a service equipment ID, and a usage amount to the service equipment management server 18, and the service equipment management server 18 sends the user ID, service A digital local currency use request message including the equipment ID and the amount used is transmitted to the local currency management server 12 (613).

The local currency management server 12 confirms the user and charging details, and after deducting the usage amount from the charged amount (614), transmits a usage approval message to the service equipment management server 18 (615).

The service equipment management server 18 returns (616) the result of using the digital local currency to the service equipment 16, and the service equipment 16 returns (617) the result of use to the smart device 10, and the smart device ( 10) stores the use result in the secure area (618).

7 is a diagram illustrating a digital local currency offline use process according to an embodiment of the present invention.

3 and 7, when the network connection between the smart device 10 and the service equipment 16 is not possible, the smart device 10 is stored in the security area of the smart device 10 within the digital local currency charging range. Digital local currency can be used.

The smart device 10 requests a digital local currency use request message including user information to the service equipment 16 (701). When the network connection is impossible, the service equipment 16 transmits a network unavailability response message including the amount to be used and the service equipment ID to the smart device 10 ( 702 ).

The smart device 10 compares (703) the received amount of use with the amount of charge stored in the secure area, and determines whether it is usable (step 704). At this time, if it is determined that it cannot be used, a non-usable message is returned to the service equipment 16 and communication is terminated ( 705 ).

On the other hand, if it is determined that it can be used, the amount used is deducted (706) from the charge amount in the security area, and a digital local currency use request message including user ID, amount used, and service equipment ID is sent to the local currency management server 12 transmit (707).

Then, the local currency management server 12 checks the user and the charging details, and subtracts the usage amount from the charging amount (708). Next, the local currency management server 12 returns the usage result to the smart device 10 (709), and the smart device 10 completes the payment and ends communication with the service equipment 16 (710).

8 is a diagram illustrating a general payment and digital key use process according to an embodiment of the present invention.

3 and 8, the smart device 10 generates a digital key through general payment (800), and uses the obtained digital key (step 820). This method is a method that does not use the local currency management server 14 .

More specifically, in the digital key generation step 800 through general payment, the smart device 10 accesses the digital key management server 12 to inquire 801 tourism products, and the digital key management server 12 A tourism product inquiry result is returned (802). The smart device 10 makes a request 803 to purchase a service (eg, vehicle, lodging, ticket) to the digital key management server 12 using the tourism product inquiry result, and the digital key management server 12 purchases The request result is returned to the smart device 10 (804). At this time, if the purchase is successful, the digital key management server 12 generates a digital key, encrypts the digital key with a symmetric key of the user and each service equipment management server (805), and then transfers the encrypted digital key to the smart device 10 to (806).

The smart device 10 decrypts the digital key encrypted with the symmetric key, and stores the decrypted digital key (807).

The digital key management server 12 stores the encrypted digital key until the user's reserved time (808), and when the reserved time arrives, transmits the encrypted digital key to the service equipment management server 18 (809) ).

The service equipment management server 18 decrypts the encrypted digital key with the symmetric key, encrypts the digital key with the equipment public key (810), and then delivers the encrypted digital key to the service equipment 16 (811). The service equipment 16 stores the decrypted digital key after decrypting the encrypted digital key with the equipment private key (812).

Then, the smart device 10 may use the digital key (820). In the digital key use step 820 , the smart device 10 generates digital key-based authentication data in the secure area ( 821 ), and transmits an authentication request message including the authentication data to the digital key management server 12 ( 822 ). ). In this case, it is possible to provide short-distance communication including NFC, BLE, QR code, UWB, and the like.

Then, the service equipment 16 verifies the authentication data in the secure area and uses the digital key (823). In this case, the validity, period, and usage authority of the authentication data may be verified. The service equipment 16 transmits the authentication data verification result including user ID, device ID, equipment ID, usage time, usage history, and digital key usage history to the smart device 10 ( 824 ). The digital key usage history includes, for example, door opening, door closing, starting, and the like. The smart device 10 transmits the authentication data verification result and digital key usage details to the digital key management server 12 (825).

On the other hand, the service equipment 16 transmits (826) the authentication data verification result including user ID, device ID, equipment ID, usage time, usage history and digital key usage history to the service equipment management server 18 (826), and the service equipment The management server 18 transmits the authentication data verification result and digital key usage details to the digital key management server 12 (827).

So far, the present invention has been focused on the embodiments thereof. Those of ordinary skill in the art to which the present invention pertains will understand that the present invention can be implemented in modified forms without departing from the essential characteristics of the present invention. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is indicated in the claims rather than the foregoing description, and all differences within the scope equivalent thereto should be construed as being included in the present invention.

10: smart device
12: digital key management server
14: local currency management server
16: service equipment
18: service equipment management server

Claims (11)

registering, by the digital key management server, a local currency management server;
registering, by the digital key management server, a service equipment management server;
receiving, by the smart device, service subscription and user authentication through a digital key management server;
charging, by the smart device, digital local currency by requesting the purchase of digital local currency from the local currency management server through the digital key management server; and
using the digital local currency online by the smart device in short-distance communication with the service equipment;
storing, by a smart device, receiving a digital key from a digital key management server through general payment;
generating, by the smart device, digital key-based authentication data in the security area and requesting authentication from the service equipment;
transmitting the authentication data verification result and digital key usage history to the smart device after the service equipment verifies the authentication data by performing a transaction in the security area and uses the digital key; and
When the network connection between the service equipment and the service equipment management server is impossible, the smart device uses the digital local currency within the digital local currency charging range stored in the security area; including, Digital local within the digital local currency charging range The steps to using money are:
requesting, by the smart device, a digital local currency use request message including user information to the service equipment;
When the service equipment is unable to connect to the network, transmitting a network unavailability response message to the smart device, including the amount to be used and the service equipment ID;
Comparing the amount of use received by the smart device and the amount of charge stored in the security area, determining whether it is usable;
if it is determined that it can be used, deducting the amount of use from the amount charged in the security area, and transmitting a digital local currency use request message including user ID, amount used, and service equipment ID to a local currency management server;
a step of the local currency management server confirming the user and the charging history, deducting the usage amount from the charging amount, and returning the usage result to the smart device; and
A digital key integration service providing method comprising a; the smart device completing the payment and terminating communication with the service equipment. According to claim 1, wherein the step of registering the local currency management server
After the local currency management server generates a local public key-private key pair, storing the local private key, and transmitting the local public key to the digital key management server;
generating, by the digital key management server, an encryption/decryption symmetric key for secure communication, encrypting the symmetric key with the local public key received from the local currency management server, and transmitting the encrypted symmetric key to the local currency management server; and
Decrypting, by the local currency management server, the encrypted symmetric key with the local private key and storing the decrypted symmetric key;
Digital key integration service providing method comprising a. According to claim 1, wherein the step of registering the service equipment management server
After the service equipment management server generates the equipment public key-private key pair, storing the equipment private key, and transmitting the equipment public key to the digital key management server;
The digital key management server generates an encryption/decryption symmetric key for secure communication, encrypts the symmetric key with the equipment public key received from the service equipment management server, and transmits the encrypted symmetric key to the service equipment management server; and
Decrypting, by the service equipment management server, the encrypted symmetric key to the equipment private key and storing the decrypted symmetric key;
Digital key integration service providing method comprising a. The method of claim 1, wherein the step of subscribing to the service and receiving user authentication comprises:
The smart device installing the app and requesting a membership subscription to the digital key management server;
After the digital key management server authenticates the user and the device, maps the user ID and the device ID, and stores it, the user ID-device ID is encrypted and stored through the HSM;
After the smart device activates the security area and generates a device private key-public key pair, transmitting the device public key to a digital key management server;
The digital key management server generates an encryption/decryption symmetric key for secure communication, encrypts the symmetric key with the device public key received from the smart device, and then transmits the encrypted symmetric key to the smart device; and
Decrypting the encrypted symmetric key with the device private key by the smart device and storing the decrypted symmetric key;
Digital key integration service providing method comprising a. According to claim 1, wherein the step of charging digital local currency
A smart device logging in to the digital key management server, requesting a digital local currency purchase and receiving user authentication;
when user authentication is completed, the digital key management server transmitting a digital local currency purchase request message to the local currency management server;
The local currency management server charges the user's digital local currency, and when the charging is completed, transmitting a charging completion message to the smart device through the digital key management server; and
Smart device storing the digital local currency charging amount;
Digital key integration service providing method comprising a. According to claim 1, wherein the step of using the digital local currency online
A smart device requesting the use of digital local currency to the service equipment;
transmitting, by the service equipment, a digital local currency use request message including a user ID, a service equipment ID, and a usage amount to the local currency management server through the service equipment management server;
transmitting, by the local currency management server, the user and the charging details, deducting the usage amount from the charging amount, and then sending a usage approval message to the service equipment management server;
returning, by the service equipment management server, the digital local currency usage result to the smart device through the service equipment; and
storing, by the smart device, a result of use in a secure area;
Digital key integration service providing method comprising a. delete delete delete The method of claim 1, wherein the digital key integration service providing method comprises:
The smart device pays a reserve when using the digital local currency;
The step of the smart device paying a reserve or providing an event when the user's stamp tour is in progress;
Step by which the smart device pays a reserve when the user participates in community activities; and
Using the smart device to pay the accumulated reserves in digital local currency within the region;
Digital key integration service providing method, characterized in that it further comprises at least one of. a digital key management server that registers the local currency management server and service equipment management server, performs service subscription and user authentication of smart devices, and requests issuance of digital local currency from the local currency management server according to a user request;
A smart device having a virtual embedded security element system, receiving user authentication through a digital key management server, charging the digital local currency issued from the local currency management server, and communicating with service equipment in short distance to use the digital local currency;
A local currency management server that charges the digital local currency, checks the user and the charging history when using the digital local currency of the smart device, and deducts the used amount from the charged amount;
Service equipment that provides a service using digital local currency in response to a request of a smart device; and
A service equipment management server that receives a request for use of digital local currency from the service equipment, transmits it to the local currency management server, and provides the result of approval for use of the local currency management server to the service equipment; and
When the smart device receives and stores the digital key from the digital key management server through general payment, generates digital key-based authentication data in the secure area, and requests authentication from the service equipment, the service equipment performs a transaction in the secure area. After verifying the authentication data and using the digital key, the authentication data verification result and digital key usage history are transmitted to the smart device,
If the network connection between the service equipment and the service equipment management server is not possible, when the smart device requests a digital local currency use request message including user information to the service equipment, the service equipment responds to the network unavailable including the amount used and the service equipment ID A message is sent to the smart device, and the smart device compares the received amount of use with the charge amount stored in the security area to determine whether it is usable, and if it is determined that it can be used, deduct the amount used from the charge amount in the security area , sends a digital local currency use request message including user ID, usage amount and service equipment ID to the local currency management server. is returned to the smart device, the smart device completes the payment and the communication with the service equipment is terminated.

Images