KR200370655Y1 - System for user authentication using uid of smart card - Google Patents

Abstract

The present invention relates to a system for authenticating a user using a unique user identifier (UID) assigned to a smart card.

A user authentication system using the UID of the smart card according to the present invention, RF type smart card having a unique user identification number (UID); Extract the UID of the first bit length from the smart card, convert the UID of the first bit length to the UID of the second bit length, and output the Wiegend signal, or as the WiGend the UID of the first bit length as it is. A card reader for outputting a signal; And a main controller configured to receive the Wiegend signal output from the card reader and to perform authentication on the UID by using previously stored user information.

Description

User authentication system using the smart card's video card {SYSTEM FOR USER AUTHENTICATION USING UID OF SMART CARD}

The present invention relates to a user authentication system using a smart card, and more particularly to a system for authenticating a user by using a unique user identifier (User Indentifier) assigned to the smart card.

In general, a smart card is made of plastic about the size of a credit card and has a microchip embedded therein for storing data. The smart card has a high security function in terms of encryption processing, authentication of a connection object, management of stored data, etc., which is highly secure and impossible to counterfeit. It is widely used for financial settlement systems using a telephone network.

Smart cards contain more information than magnetic tape cards and can be programmed for multiple uses. In addition to general smart cards, there are also smart cards that contain data and programs for multi-purpose use, while others can be upgraded for new purposes after they are issued. Smartcards can be designed to be inserted into a slot and read by a special reader or to be read from a distance, such as at a highway tollhouse. Cards can be made disposable for use in places such as trade shows, or for reusable use in most other applications.

1 is a schematic diagram of an access control system using a conventional smart card.

Referring to FIG. 1, a conventional access control system using a smart card includes a smart card 10, a card reader 11, and an access controller 12.

The smart card 10 is a RF type smart card and has a unique number called a UID (User Identifier). For these UIDs, up to 10 bytes can be allocated to the International Standardization Organization (ISO) regulations. However, currently used RF type smart cards include credit cards, ISO 14443 type A or Mifare cards, and are used by defining UIDs with only 4 bytes (4 bytes = 4,294,967,295 UIDs).

The UID of the smart card 10 is recognized by the card reader 12 and then transmitted to the access controller 12. Then, the access controller 12 compares the pre-stored information on the UID of the smart card 10, and when it matches with each other, the access control is performed by opening the door.

In the conventional access control system, as described above, the smart card 10, the card reader 11, and the access controller 12 all use 4 bytes (that is, 32 bits) of data. However, the Wiegand protocol is widely used in the access control system currently in use, and the Wiegand protocol uses a 26-bit signal. Therefore, when the smart card 10 uses a 32-bit UID, there is a problem in that it is not compatible with an access control system using Wiegend protocol. In addition, in order to recognize the 32-bit UID as described above, the access control system using the Wiegend protocol has a problem of enormous time and cost due to the modification of the control program of the access controller 12 again.

An object of the present invention for solving the above problems, in the case of using a smart card using a UID of a bit length different from the Wiegend protocol for the access controller using the Wiegand protocol, It is to provide a system that can use the smart card as it is without large-scale replacement or program change.

In addition, another object of the present invention is to propose a system that can improve the security by restricting the use of unauthorized users in the process of user authentication using the UID of the smart card.

1 is a schematic diagram of an access control system using a conventional smart card.

2 is a user authentication system using the UID of the smart card according to an embodiment of the present invention.

3 is a view showing a process of authenticating a user using the UID of the smart card according to an embodiment of the present invention.

* Description of the symbols for the main parts of the drawings *

1: smart card 2: card reader

3: access controller 10: RF type smart card

20: card reader 21: RF reader unit

22: UID conversion unit 23: Wiggend output unit

24: key reader unit 25: password confirmation unit

30: main control unit

A user authentication system using a UID of a smart card according to the present invention for achieving the above object is a smart card of the RF type having a unique user identification number (UID); Extract the UID of the first bit length from the smart card, convert the UID of the first bit length to the UID of the second bit length, and output the Wiegend signal, or as the WiGend the UID of the first bit length as it is. A card reader for outputting a signal; And a main controller configured to receive the Wiegend signal output from the card reader and to perform authentication on the UID by using previously stored user information.

Here, the UID of the second bit length is preferably configured by partially deleting information of consecutive bits of a specific portion of the UID of the first bit length.

The card reader may further include a key reader unit to which a password is input by a user; and a password confirmation unit capable of performing user authentication according to whether the password matches a previously stored password.

In addition, the password may be generated by combining the UID, or may be preset by a user or a manufacturer.

In addition, a user authentication method using the UID of the smart card according to the present invention for achieving the above object comprises the steps of: extracting the UID of the first bit length from the smart card of the RF type; Converting the first bit length UID into a second bit length UID; Outputting the UID of the second bit length as a Wiggend signal; And receiving the Wiggend signal, and comparing the UID with pre-stored user information to approve the use if the user is an authorized user.

The user authentication method using the UID of the smart card may include: generating a password by combining the UID; Determining whether a key input by a user and the password match; And if the user input key and the password match, transmitting the UID to the main controller normally.

Hereinafter, a detailed description of a preferred embodiment of the present invention will be described with reference to the accompanying drawings. It should be noted that reference numerals and like elements among the drawings are denoted by the same reference numerals and symbols as much as possible even though they are shown in different drawings. In the following description of the present invention, if it is determined that the detailed description of the related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

2 is a user authentication system using the UID of the smart card according to an embodiment of the present invention.

Referring to FIG. 2, a user authentication system using a UID of a smart card according to an embodiment of the present invention includes an RF type smart card 10, a card reader 20, and a main controller 30.

The RF type smart card 10 is an RF type smart card. Herein, the RF type smart card 10 refers to a card in which an RF chip is embedded to communicate with the card reader using an RF signal. The smart card 10 has a unique user identification number (UID). The UID mainly uses 34 bits 34, but is not limited thereto.

The card reader 20 recognizes a 32-bit (first bit length) UID from the smart card 10, converts the 32-bit UID into a 24-bit (second bit length) UID, and then uses the Wiegend. Can be output as a signal. In the embodiment of the present invention, when converting the 32-bit UID into a 24-bit UID, it is required to select a method having the least overlap probability so that the UID does not overlap between the multiple smart cards 10. Such a method of UID conversion includes extracting only 24 bits of predetermined information from the original 32 bits, or removing consecutive 8 bits of information of a specific part such as deleting the end or front part of the UID in a batch. Can be used. In addition, in the embodiment of the present invention, the card reader 20 may be configured to output the UID of the 32 bits (first bit length) recognized from the smart card 10 as a Wiegend signal.

The card reader 20 will be described in detail. The RF reader unit 21, the UID converter unit 22, the Wiegend output unit 23, the key reader unit 24, and the password confirmation unit 25 are described. Has

The RF reader unit 21 extracts the 32-bit UID through the RF chip embedded in the smart card 10 when the smart card 10 approaches within a predetermined distance.

The UID converter 22 functions to convert a 32-bit (first bit length) UID into a 24-bit (second bit length) UID according to an embodiment of the present invention.

The Wiegend output unit 23 converts the UID recognized by the RF reader unit 21 or the UID converted by the UID converter 22 into a Wiegand signal using Wiegend protocol, and then outputs the WiGend signal. Do it.

According to an embodiment of the present invention, when the key reader 24 needs additional input of a password in order to prevent overlapping of UIDs and enhance security, the key reader 24 may be randomly selected by a user through a 10-digit key. It is configured to input password of digit.

The password confirmation unit 25 determines whether the password inputted to the key reader unit 24 matches a predetermined password. The password may be generated using the 32-bit UID by the password verification unit 25 configured in the card reader unit 20. In addition, the password may be separately set as an initial password by a user or a system manufacturer. If the password inputted to the key reader 24 matches a predetermined password, it may be determined that the user is an authorized user. On the other hand, if there is a mismatch, it is considered that the access control is attempted by an unauthorized person, and an unauthorized person can be prevented by sounding an alarm.

The main controller 30 receives the Wiegend signal output from the card reader 20 and authenticates the UID using prestored user information.

That is, the main controller 30 has an accessor database (DB) storing therein user information corresponding to the smart card 10 and its UID. The main control unit 30 compares the UID received from the card reader 20 with user information previously stored in the accessor database, and stores the accessor log and opens the door when the UID is authorized. do. However, if the received UID is not authorized, unauthorized access can be prevented by closing the door and alarming.

In FIG. 2, the access control system using the UID of the smart card has been described. However, the user authentication system using the smart card according to the present invention may be used when not only access control, but also user control such as security control and financial settlement is required. Can be.

3 is a diagram illustrating a process of authenticating a user by using a UID of a smart card according to an embodiment of the present invention.

Referring to FIG. 3, first, the smart card 10 approaches the card reader 20 (step 301). Then, the RF reader unit 21 configured in the card reader 20 extracts the 32-bit (first bit length) UID through the RF chip embedded in the smart card 10 (step 302).

The 32-bit UID extracted as described above is converted into 24 bits (second bit length) by the UID converter 22 (step 303). In the case of converting the 32-bit UID into a 24-bit UID, it is required to select a method having the least overlap probability so that the UID does not overlap between the multiple smart cards 10. The UID conversion method may be a method of extracting only 24 bits of information among the original 32 bits, or removing 8 consecutive bits of information of a specific portion in a batch.

In this way, the UID converted into 24 bits is converted into a Wiegand signal using the Wiegand protocol in the Wiegand output unit 23 and output. The Wiegand protocol consists of 26 bits, where the 1st bit is even parity over bit, the 2nd to 25th bits contain the converted 24-bit UID, and the last 26th bit is odd parity over bit. .

The UID thus transmitted is compared with the user information previously stored in the visitor database DB in the main controller 30 to determine whether the user is an authorized user (step 305).

As a result of the determination in step 305, if the UID is not authorized, the door is closed and an alarm is sounded (step 306).

However, as a result of the determination in step 305, if the UID is authorized, an access log is stored and the door is opened (step 307).

In addition, in the embodiment of the present invention, in order to prevent the overlap between the UID that may be generated by converting the 32-bit UID into a 24-bit UID, a process of authenticating a user using a separate password input by the user as follows. It may include.

That is, the password may be generated using the 32-bit UID by the password verification unit 25 configured in the card reader unit 20 (step 308). In addition, the password may be separately set in advance by the user or the system manufacturer (step 309).

When the user selects one of the passwords generated or set as described above (step 310), and inputs a 10 digit key password using the key reader 24 configured in the card reader 20, the input password is entered. It is determined whether or not the password associated with the UID matches (step 311).

As a result of the determination in step 311, if the password inputted to the key reader 24 matches the predetermined password for the UID, the UID is normally transmitted to the main controller 30 in step 304 (304). step).

However, if it is determined in step 311 that the password input to the key reader 24 does not match the predetermined password for the UID may be configured to sound an alarm (step 312).

In addition, in the embodiment of the present invention, by extracting the entire 32-bit UID input to the RF reader unit 21 (step 313), converts the entire 32-bit UID to a Wiegand signal to be transmitted to the main control unit 30 (Step 304). As such, when the 32-bit UID is used, the Wiegend protocol is composed of 34 bits, where the first bit is an even parityover bit, and the second to 33rd bits include the 32-bit UID. The 34th bit becomes odd parity over bit. That is, according to the embodiment of the present invention, a plurality of main controllers 30 having different protocols may be configured to be compatible with the protocols used by the main controller 30 using one card reader 20. It becomes possible.

The user authentication method using the UID of the smart card according to the present invention can be implemented as a computer-readable code on a computer-readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and also include those implemented in the form of carrier waves such as transmission over the Internet. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined by the claims below and equivalents thereof.

According to the present invention as described above, in the case of using a smart card using a UID of a bit length different from the Wiegand protocol for the access controller using the Wiegand protocol, the access controller is a large-scale replacement or program The advantage is that you can use high-security smart cards without making any changes.

In addition, according to the present invention, by using a separate password with a smart card, the use of unauthorized users in the card reader can be restricted, and also the user controller is re-authenticated using the UID in the main controller to further improve the security. There is an advantage that can prevent the occurrence of security incidents due to loss.

Claims (4)

A smart card of RF type having a unique user identification number (UID); Extract the UID of the first bit length from the smart card, convert the UID of the first bit length to the UID of the second bit length, and output the Wiegend signal, or as the WiGend the UID of the first bit length as it is. A card reader that outputs a signal; and And a main controller configured to receive the Wiegend signal output from the card reader and perform authentication on the UID using prestored user information. The system of claim 1, wherein the UID of the second bit length is configured by partially deleting information of consecutive bits of a specific portion of the UID of the first bit length. . The card reader of claim 1, wherein the card reader comprises: a key reader unit to which a password is input by a user; and And a password confirmation unit capable of performing user authentication according to whether the password matches a previously stored password. The system of claim 3, wherein the password is generated by combining the UID or preset by a user or a manufacturer.